last executing test programs:

2m40.303921388s ago: executing program 0 (id=2860):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00'})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010000104f1e59d74fa406a6f7dc0b7ce9aa38ea1b8335dba0f4461f49c0000000000000000a6c1083c1139ad3ed43c59ab8f0becc3abfa17bd5af2033152794a7260a1956245f06e5b2762226feb88478bce5af8d5dd3f8a7a193c7b972681c18b70f3b422c4ab623adf1197e3961d2404f518ee1dc29b1a77bf65af187deaebd372d46a71b00d5002c329f0a17a11b09ffa29170fbe8a8fd9797f0a6ee60f4d77aa2658c2303fbbec92e4a390adf5a2272f5e2a89bb6abd8d3c96d4fd", @ANYRES32=0x0, @ANYBLOB="0782010000000000"], 0x20}}, 0x0)

2m40.165716123s ago: executing program 0 (id=2861):
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001080)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @remote}]}, 0x0) (async, rerun: 64)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000001c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='bond_slave_0\x00'})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x4}, 0x8) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async)
sendmmsg$inet6(r3, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) (async, rerun: 32)
r4 = socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 32)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x41, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) (async)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r4, 0x0) (async)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async)
r7 = accept(r4, 0x0, 0x0) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r7}, 0x47) (async, rerun: 32)
shutdown(r7, 0x0) (async, rerun: 32)
recvfrom$unix(r7, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r9}, 0x10)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x9}, 0x8) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711042000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (rerun: 64)

2m39.833987959s ago: executing program 0 (id=2865):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="07ef28bd7000ffdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4005180)
r3 = socket(0x15, 0x5, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b0000000000011907800000000e000000100004e20009c907802000000000000000000f0ff81d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d170194bd7b1b0303c5ba7f602606a285b330da2d58da817f8a5f77a23de36a21643b33cfa231a427159c7b9f0eceb155f0"], 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08004500001c000000006f11907800000000e000000100d04d16771db291"], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
getsockopt(r3, 0x200000000114, 0x2721, 0x0, &(0x7f00000000c0))
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080), 0x0)
socketpair(0x1e, 0x80000, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(0x0, r6)
socket$inet6_sctp(0xa, 0x801, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0x3)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

2m39.638103544s ago: executing program 0 (id=2869):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x1e01)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000c500050095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x1e}, 0x1, 0x0, 0x0, 0x2400c010}, 0x8000)

2m39.491649163s ago: executing program 0 (id=2870):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, <r2=>0x0]}, &(0x7f00000000c0)=0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r3, &(0x7f0000000300)="b92509bd63b810a5aa3cfd8b2e6024a9d5eb152cb08a52b85fd6773070f95e6d93e855ec7318c86f22477f398fa0c166afc6fdfb2be0649ee562ea837b3028791570848f15bb5edabb503ed9915b40e5b2f54f514683c51c4c2439366f598c77165c6963348d9f93a8ca8dce0b7b0719e560d04d6fd7eb763d4e5cad9ad1e3218826b604f5b6c3a158d254d1aa13108762da99552428be815361d5bc2f6b2dbf3f32360054698e92140a20ece1ebc00bf7840c01218f303937e2ae0f31426591eb1eebc826358776fb8a954bfe298a84"}, 0x20)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={r2, @in={{0x2, 0x4e21, @remote}}}, 0x84)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0)

2m39.410748416s ago: executing program 0 (id=2873):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x4)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)}, 0x20)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65)
connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20)
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000440)="580000001400192340834b80043f679a10ff3d425f0600ffa600000000becc4b381eaadc1af23457e792945f918be4f04247e374b97164009400050028925aaa160000c600ff5f442059e12817c009fb2366e6cfe1dae7d9", 0x58}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r4, 0x0, 0xb9b}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

2m37.87929236s ago: executing program 1 (id=2892):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0)

2m37.662246845s ago: executing program 1 (id=2896):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={<r1=>0x0, @in6={{0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffb}}, 0x7, 0x4f2a, 0x10, 0xa47, 0x21, 0x200, 0xd9}, &(0x7f0000000240)=0x9c)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r1, 0x52ab, 0x3, [0xc4, 0x0, 0x100]}, 0xe)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x5f0, 0x3d8, 0x208, 0xffffffff, 0xf0, 0xf0, 0x520, 0x520, 0xffffffff, 0x520, 0x520, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@rand_addr=' \x01\x00', @ipv6=@mcast2, @icmp_id=0x66, @port=0x4e20}}}, {{@ipv6={@mcast2, @empty, [0xffffff00, 0xffffff00, 0xff000000, 0xff], [0xff, 0x0, 0xffffffff, 0xffffffff], 'syz_tun\x00', 'veth1_macvtap\x00', {0x2fd07523a026ef2a}, {0xff}, 0xe0, 0x8, 0x6, 0x20}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xfffffffb, 0x1}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1d, @ipv6=@remote, @ipv4=@empty, @port=0x4e22, @icmp_id=0x65}}}, {{@ipv6={@mcast2, @remote, [0xffffff00, 0xff000000, 0xffffff00], [0xff, 0x0, 0xff000000, 0xff000000], 'veth0_virt_wifi\x00', 'pim6reg\x00', {0x80}, {}, 0x67, 0x5, 0x4, 0x22}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x80, 'system_u:object_r:sshd_key_t:s0\x00'}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x800}}, @common=@ah={{0x30}, {[0x4d2, 0x4d5], 0x1, 0x1, 0x6}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@multicast1, @ipv4=@empty, @gre_key=0x200, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xec}}, 0x0)

2m37.467465234s ago: executing program 1 (id=2897):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r0 = socket$inet(0x2, 0x5, 0x8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={<r2=>0x0, 0x7, 0x7, 0x8}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e20, 0xfff, @rand_addr=' \x01\x00'}}, 0x3, 0x73e, 0x40, 0xb, 0xa2, 0x0, 0x4}, &(0x7f0000000180)=0x9c) (async)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2, 0x5, 0x1, 0x3, 0x1c, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1d, 0x18, 0x4}, @sadb_x_sec_ctx={0x8, 0x18, 0x1, 0x39, 0x35, "f35cac9059b12c57b324980a8d0c2bd2008d6b259f5ab254f470ee0540fa95fb6fa7ebe8fe2a811ce6dff80d95a33e0469ab9e09a6"}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e23, 0x7, @private0, 0x5}, @in6={0xa, 0x4e20, 0x1ff, @mcast2, 0x4}}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@empty, 0xf, 0x4, 0x20}]}, 0xe0}}, 0x400000c0) (async)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x220800, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000380)=0x1) (async)
ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f00000003c0)) (async)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000400)=0x4000, 0x4) (async)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000440)={<r6=>r2, 0x45, "d923097fe447751276606ce635c037ce5fe53934e1679149a0b37402da51edd5e490c39a0caf4957ca398d1c8d92c299039bbf0c2e72a9270d31b5d79aec9a967b9abf6647"}, &(0x7f00000004c0)=0x4d)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$unix(0x1, 0x2, 0x0)
r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000540)={[{0x2d, 'net_prio'}, {0x0, 'cpu'}, {0x0, 'rdma'}, {0x2d, 'net'}, {0x2d, 'rdma'}, {0x2d, 'rdma'}]}, 0x26) (async)
pread64(r0, &(0x7f0000000580)=""/137, 0x89, 0xce98)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'erspan0\x00', <r9=>0x0, 0x10, 0x7, 0x2, 0x2, {{0x14, 0x4, 0x0, 0x7, 0x50, 0x66, 0x0, 0x81, 0x2f, 0x0, @remote, @empty, {[@lsrr={0x83, 0xf, 0xa7, [@remote, @broadcast, @empty]}, @end, @timestamp_prespec={0x44, 0x2c, 0x8, 0x3, 0x3, [{@empty, 0x2}, {@private=0x2, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf9f}, {@multicast1, 0x7}, {@multicast1, 0x1}]}]}}}}})
sendto$packet(r8, &(0x7f0000000640)="1434da0cdb73310aad298138a554fc85af74ef55bf5cd4268c90716d921ffe880b58a54420d4636bf9ec6f6bf9676e2e12a27993529e6f0bf8f4ae94c150ab77148f879804b7777c4e4e9d16a23459c0817a0e41d1a88891076e77969fed4e5453de454a7f1d035647fac30b404c3bac2a21162c1006364002cb6ff76bf7a14776214b53f1d1b0843f6a49600ebbaef8915acc2abcd929bdc2fbdfb611d91ab268", 0xa1, 0x4000, &(0x7f00000007c0)={0x11, 0x15, r9, 0x1, 0xd, 0x6, @broadcast}, 0x14) (async)
pipe(&(0x7f0000000800)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r11, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x80, r12, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x64, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2400000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xa16}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xeb}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x2}, 0x40080)
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000009c0)={<r13=>r0, 0x0, 0x4, 0x1})
sendmsg$nl_route(r13, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=@ipv6_delroute={0x3c, 0x19, 0x200, 0x70bd26, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x3, 0x101, 0x0, 0xc8, 0x3, 0x2800}, [@RTA_MULTIPATH={0xc, 0x9, {0xb93, 0x20, 0x40, r9}}, @RTA_GATEWAY={0x14, 0x5, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000014)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000b00)='xen_mmu_alloc_ptpage\x00', r11, 0x0, 0x1}, 0x18) (async)
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r14, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) (async)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f0000000cc0)={r6, 0xe}, &(0x7f0000000d00)=0x8)

2m37.091988323s ago: executing program 1 (id=2900):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140100002e000100000000000000000001"], 0x114}], 0x1}, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2, 0x0, 0x0, 0x4}, 0x24000895)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x3b4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x384, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfa0b, 0x200, 0x1, 0x20, 0x1d, 0x40, 0x5}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3b4}}, 0x0)

2m36.796541794s ago: executing program 1 (id=2903):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, &(0x7f0000000000))
ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x6)
setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000280)=0x1, 0x4)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)={0x0, 0x9, 0xc3, "fd30214fdbc562ac8d02474bf93b9c6d23d76bbbe3927da2320df6c19496d6935725b2290f7c83cf5b5ff87f3ad2280caa316e3c8110aa067482a09aefdf8bae5553553ac1a9cd030355f436ec26badecbd0c113449f94848fabb26a3922dc6f7da9bf0296cdba5043c7f6294ade73c48c88fda9f0e5474ed310d327080e7407b3ea9dfa87f34790ad8db8eb463657a3c91b30fc4c2238cfe1927fae3979d2a2c551f923f511f276a26632bc034aab6ee17e69d785aa53d606cc3ec957c0b72bfae78e"}, 0xcb)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0)
recvmmsg(r1, &(0x7f0000008200)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/134, 0x86}, {&(0x7f0000001680)=""/207, 0xcf}, {&(0x7f0000001780)=""/144, 0x90}, {&(0x7f0000001840)=""/104, 0x68}, {&(0x7f0000000440)}, {&(0x7f0000008140)=""/47, 0x2f}], 0x7, &(0x7f0000001980)=""/108, 0x6c}, 0x8}, {{&(0x7f0000001a00)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/168, 0xa8}, {&(0x7f0000002b40)=""/184, 0xb8}], 0x3, &(0x7f0000002c40)=""/14, 0xe}, 0x8}, {{&(0x7f0000002c80)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002d00)=""/236, 0xec}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/239, 0xef}], 0x3, &(0x7f0000003f40)=""/244, 0xf4}, 0x49}, {{&(0x7f0000004040)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000004600)=[{&(0x7f00000040c0)=""/227, 0xe3}, {&(0x7f00000041c0)=""/203, 0xcb}, {&(0x7f00000042c0)=""/40, 0x28}, {&(0x7f0000004300)=""/176, 0xb0}, {&(0x7f00000043c0)=""/167, 0xa7}, {&(0x7f0000004480)=""/139, 0x8b}, {&(0x7f0000004540)=""/55, 0x37}, {&(0x7f0000004580)=""/115, 0x73}], 0x8}, 0x7e67}, {{0x0, 0x0, &(0x7f0000005840)=[{&(0x7f0000004680)=""/15, 0xf}, {&(0x7f00000046c0)=""/117, 0x75}, {&(0x7f0000004740)=""/223, 0xdf}, {&(0x7f0000004840)=""/4096, 0x1000}], 0x4}, 0x4}, {{&(0x7f0000005880)=@nl, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005900)=""/239, 0xef}, {&(0x7f0000005a00)=""/4096, 0x1000}, {&(0x7f0000006a00)=""/67, 0x43}], 0x3, &(0x7f0000006ac0)=""/3, 0x3}, 0x1779}, {{&(0x7f0000006b00)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000006cc0)=[{&(0x7f0000006b80)=""/9, 0x9}, {&(0x7f0000006bc0)=""/231, 0xe7}], 0x2}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000007e80)=[{&(0x7f0000006d00)=""/4096, 0x1000}, {&(0x7f0000007d00)=""/57, 0x39}, {&(0x7f0000007d40)=""/11, 0xb}, {&(0x7f0000007d80)=""/232, 0xe8}], 0x4, &(0x7f0000007ec0)=""/236, 0xec}, 0xa}, {{&(0x7f0000007fc0)=@phonet, 0x80, &(0x7f0000000440)=[{&(0x7f0000008040)=""/193, 0xc1}, {&(0x7f0000008140)}, {&(0x7f0000008180)=""/29, 0x1d}], 0x3}, 0xb}], 0x9, 0x40000000, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x12)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r5, &(0x7f0000000180)={0x1a, 0x30c, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x7af2, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
close(0x3)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c0000001c0a010400000000000000000700000008000a40000000000900020073797a31000000000900"], 0x364}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r7, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r7, 0x0)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r9, 0x890c, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x8, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast]})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x4020}, 0x18)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x18c, 0x203, 0x1e0, 0x19030000, 0x2f8, 0x2e0, 0x2e0, 0x2f8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x198, 0x1e0, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xffffff00, 0xff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x15}, [0xff, 0xff, 0xffffff00], @ipv6=@private0={0xfc, 0x0, '\x00', 0x8}, [0xff000000, 0x0, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xff], 0x80, 0x0, 0x0, 0x4e24, 0x4e21, 0x4e21, 0x4e20, 0x0, 0x844}, 0x180, 0xa10, 0x4e23, 0x4e24, 0x4e20, 0x4e21}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428)

2m26.485285212s ago: executing program 1 (id=2910):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0, 0x0, 0xfaf}, 0x18)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r4, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000004c0)={0x9, 0xff, 0x204, 0x5, 0xb7b, 0x2, 0x2, 0x2}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3, 0x0, 0xfaf}, 0x18)
r5 = socket$pppoe(0x18, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad6706000002000000070200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f750000000000006154000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8ddaf2cdad3d1a74a2f078aa6402483856a6e495408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae06e394c9639564f000fc3cdd05a157544d0200000000000000ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f88e80ef80c6ed3e1ff91ff111000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcbacec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0ddd932d838ff651023853d42210642986f8bbc7340bc8393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d68124674478186edd036f15bf847c33f79e1a0ad3d2b5080ecb01420c9f1b534e969fce97ffff07000009000000bfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a823e28f359608ea326c77a1aa17318f392a0ec6c188916f4149c503027feccfd68ec826da90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8e68f076c659f56d6c7f97a94d604f45cfe88b30c170000000001000000ef931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f0400000000000000d23b48bb38b31a14ffcddd92ce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f1300007d6072f0cf120ad2ba519afdd43a14000000000000000000000000007ef2f3c58d045f0700000094069acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d000000000000000000007758b1267669ded883b5867c5916a74843b784955108f750c57744c76a09629dd0aaca5cb0f14f49db80a1aa2692c18fbb31cbdb3f2e138e6d5ba3491fc3617b511f24bad26466407e39000000000000d7a1bf4624d31c13a6840f45a7f4e01a50d790132abb36915e35b1ac35bf3921357f638684bba17b8fe1e2123153ecd6d1f76820d4f8fa0b96b50c457ae8d5f2351cdb7bc8170380557bc11cf6ee3395974e37018a2a7473312cb32affb8ff72a253e0d36099e460f13694b9891af526d9608271838e83d17103887f34210dd4c0cf60dec608b4ca5ba2f3037bf381e7b5d5b27820000000000000000000000b719bd34f3244730f708fdd532640edc6b82dd4ad72ecbaccafef806f5447aba2246d56a601bbd8c24ba1e16dda3296ce10de683000"/1782], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
sendmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x4060019}, 0x20000041)
ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000008c0)={'ip6_vti0\x00', <r9=>0x0, 0x4, 0xb, 0x6, 0xc, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x1, 0x6, 0x4}})
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5, <r11=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)=r3}, 0x20)
r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, r4, 0x1, 0x5, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x6, &(0x7f0000000100)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], &(0x7f0000000240)='syzkaller\x00', 0x1ff, 0xea, &(0x7f0000000340)=""/234, 0x41000, 0x2, '\x00', r9, 0x25, r10, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r11, r0, 0x1, r12, r13], 0x0, 0x10, 0x5}, 0x94)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'veth1_to_bridge\x00', 0x3}, 0x18)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000000000000000c000000480005800800010065756800070002"], 0x5c}}, 0x0)

2m24.31565949s ago: executing program 32 (id=2873):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x4)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)}, 0x20)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65)
connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20)
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000440)="580000001400192340834b80043f679a10ff3d425f0600ffa600000000becc4b381eaadc1af23457e792945f918be4f04247e374b97164009400050028925aaa160000c600ff5f442059e12817c009fb2366e6cfe1dae7d9", 0x58}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r4, 0x0, 0xb9b}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

2m11.390267761s ago: executing program 33 (id=2910):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0, 0x0, 0xfaf}, 0x18)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r4, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000004c0)={0x9, 0xff, 0x204, 0x5, 0xb7b, 0x2, 0x2, 0x2}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3, 0x0, 0xfaf}, 0x18)
r5 = socket$pppoe(0x18, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/1782], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
sendmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x4060019}, 0x20000041)
ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000008c0)={'ip6_vti0\x00', <r9=>0x0, 0x4, 0xb, 0x6, 0xc, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x1, 0x6, 0x4}})
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5, <r11=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)=r3}, 0x20)
r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, r4, 0x1, 0x5, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x6, &(0x7f0000000100)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], &(0x7f0000000240)='syzkaller\x00', 0x1ff, 0xea, &(0x7f0000000340)=""/234, 0x41000, 0x2, '\x00', r9, 0x25, r10, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r11, r0, 0x1, r12, r13], 0x0, 0x10, 0x5}, 0x94)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'veth1_to_bridge\x00', 0x3}, 0x18)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000000000000000c000000480005800800010065756800070002"], 0x5c}}, 0x0)

40.374062504s ago: executing program 2 (id=3856):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmmsg$sock(r1, &(0x7f0000002c80)=[{{&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000001c0)="cc61e28198d82dac0eafb5080d0cc375c2b105f2d59cc58cfe2952d67fec795deb9d5f0e8290863a330ca424c52b4dcf343904", 0x33}, {&(0x7f0000000280)="edee02a55c0c6e5ff387f51342921effc6201df186b7c0b50f59374ad535f414c8da4a5653ba09b8e3724dcaca0463dd37e9122f7fbfb99d6b2caa3d9d876491a29375e121cded99f6428d64eecf57ba9051e74151eed1b8abba7d11d3b480b85544fc110ceeda7873d32868535bc792f97ade76c7b73cf7dd8287613d3794c2c8156640593133ffe4700cd6930bd68e7fa436cc112ba60a05b3058b616840da624df750619f7e1d3fd3c3acc00663ad012af7287d246c959444f8", 0xbb}, {&(0x7f0000000580)="5f3716761e4e86e49ba922cd3d2603fe33b22c4f6097047c69225a723397c7dd72851dd5db5d7575b072498728a5fdbc96d92e2f0f52a0de7f9215fba3f3f47a7d2162a1f0447e87114475671878ba8cda81bb0b8e8388b23172a5ca39ca340155da272f3189d0a0f41860cf45520f61168b6c6c913cec7e3673722222b284c1513f520fea10d891ce362b236762c1b5d648623ff9ac0327b951908a5c0f47761d1d2da062de6a3a5a", 0xa9}, {&(0x7f0000000640)="6e4359e836f506ab7ef40a6fc83f767fb7f3358112270f6bb5147ffa7a823321c5aecb655a9c7ad9cc1c48675b65d63fa7545c3516dfcfee517bfbc4724b65e7e7a450575941c73dbaca0f98421cb039984704d428f846f3d6ee76abde106e8b5f171a35012fb575ad92dee1c54b31e7547e772d8f81eb20e6ccdbe597a86488e9717bf272eb14e6d95b17b0b7f2872c89893fe46624a42a1ab219bc", 0x9c}, {&(0x7f0000000200)="82a8cb4a2064cbfe4d2b2835e2b33414bab5ad95f0677898d3f4c18e1a77a0a5722c1b4bcdd9838635dfe691deacb78e23804a45e4fedb176a95e3126b6b", 0x3e}, {&(0x7f0000000700)="bf82c10751d77a861c8e359ebd1c05605d6ba98670c43665e556b87187acd8859d9ea26575e43e4a92e9962aef6a93a3e644784dfcffd05102d2ae1327acb2c34a81f7995f4910219a34d43898e6afde5f633630f7fc2fefbbedea360051", 0x5e}, {&(0x7f0000000780)="9523b3efa730b730a36acd7d1e05e3f8ba58d00fae86c34fc7b9e911b6f0d8a2eba3cc662173246a9ea5b2a2bc92f5ed9d4faef7c9441cb507c412e0a9bc3dbde7894dbc0e2622ecf7f782ef9d5c69144bdabccdd5390b373afa96cdf6c64bd84990a291674f9b5297d6865118fc36e5c075a9587a411c9bb20dd08bd60252e1b8abc8a294c7f86bf83df83dd113d80af3f9be53f6586292545b4251f53eb6c87e07db", 0xa3}, {&(0x7f0000000340)="27bd36c192fd80ab7552b4", 0xb}], 0x8}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4, &(0x7f0000000c00)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x60}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[@txtime={{0x18, 0x1, 0x3d, 0x8f94}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xd39}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="1f193ccd5e71244bc55dbcdc29e1a25fb59915f7f84fb5105984bc94ac926679df8c", 0x22}, {&(0x7f0000001100)="b35ba3572fcda875bc97e8", 0xb}, {&(0x7f0000001140)="795f2ce94a7d8725e389c01b493ee679f9e1f4660442a05c2cbbf66384679166ec101d934bd017c061424e92d24f48d86b", 0x31}, {&(0x7f0000001180)="93", 0x1}, {&(0x7f00000011c0)="3dff21fdbef2b0b843e0740163754db27084ece48f14e2ccb75ed71caecb8d01a49808a0a2269f17dc98a78e584f6cc71495faa98957034a6e6f6e9ea743d838d77a3f108a034c89", 0x48}, {&(0x7f0000001240)="b17b27be17bcb19544700a33471f8c21345d9ed983455906bb74ac68c911b5f14c7d60075f017c69c25768", 0x2b}, {&(0x7f0000001280)="45871f6c7aa143cfbb579d430702b24380586237795f6665c24e267fb8c62c14f85be705fbab74d85c8d479162b42724e414f24b9602b0c068930b8f0431f77f7ed4bb04c4bd7edbacb55c07e24b2b7ffbc83bb39385066e27b3b6727c8861edea62c5532877c2bc886e9f673bc9ef731ee32104bc102a8fda64676a9edf0e47f36cd6a35fd53b13b1f365ade8150f7e35c258b0253d8c4dcbc8", 0x9a}], 0x7, &(0x7f00000013c0)}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="d480dc1917d9339f4084892894143b343fddd9303f0429a7ae5d89e2d238c7a6d95b89164290c367be830f56c6b95c492363a9b522", 0x35}], 0x1}}], 0x5, 0x0)

40.116119057s ago: executing program 2 (id=3858):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x10, 0x6169, 0x9, 0xd3, 0x0, 0xffffeffa, 0x7, 0x2ac8}}}}]}, 0x58}}, 0x44080)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0x9, 0xa}, {0x1, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x36}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xfff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r5, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x2}, 0x4001})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'virt_wifi0\x00', @broadcast})

38.992515994s ago: executing program 2 (id=3865):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b00000000000000000000000000000000000044010500ac1414bb000000000000000000000000fffffffe6c0000000000000000000000000000040000ffff7f0000010000000000000000000000000000000000000000fc0200000000000000000000000000000000000032"], 0x1fc}, 0x1, 0x0, 0x0, 0x5593ee2f0bddd481}, 0x0)

38.686449536s ago: executing program 2 (id=3869):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000001300)="d7b5576c8b", 0x5)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000015c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x6, 0x6}]}, 0x10)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="db1cf45ec6", 0x5}], 0x1}, 0x40004854)
getsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33)

38.237857844s ago: executing program 2 (id=3872):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000ffffffd0000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

38.055320771s ago: executing program 2 (id=3875):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
socket$xdp(0x2c, 0x3, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.io_queued\x00', 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r5}, 0x18)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000c80)={0x1, &(0x7f0000001040)=[{@fixed}]})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x28, 0x5, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffe, 0x0, 0x20000000000000}, 0x0, &(0x7f0000000400)={0x3ff, 0x0, 0xfffffffffffffffe, 0x8000009, 0x2, 0x4c, 0x7fffffff, 0x3}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

22.968428071s ago: executing program 34 (id=3875):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
socket$xdp(0x2c, 0x3, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.io_queued\x00', 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r5}, 0x18)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000c80)={0x1, &(0x7f0000001040)=[{@fixed}]})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x28, 0x5, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffe, 0x0, 0x20000000000000}, 0x0, &(0x7f0000000400)={0x3ff, 0x0, 0xfffffffffffffffe, 0x8000009, 0x2, 0x4c, 0x7fffffff, 0x3}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

10.112710821s ago: executing program 3 (id=4103):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x1d, &(0x7f0000000680)=0x1, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000800)={0xa0000006})
close(r3)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800b000100736f636b657400000c000280080002400000000b090001e173797a30000000000900020073797a3200000000140000001100010000000000000000000000006ca6ae2ac21f59ba51edea8d83de5df9849c90cf97ccd42b6d3631d01df2bea52146eebd445dbe0e2f31e51824a6246ce170af8d6cb74be1e303fc04e0c4"], 0x74}}, 0x40000d1)

9.181052017s ago: executing program 3 (id=4116):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x0, 0x0, 0xda]}}, 0x0, 0x51, 0x0, 0x1}, 0x28)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)={0x1a4, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf4a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x889}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40}, 0x24000810)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000400000000800000001"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000200), 0x0}, 0x20)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
sendmsg$nl_route(r0, 0x0, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400000000001b2347ea000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc"], 0x5c}}, 0x0)

2.289346289s ago: executing program 6 (id=4172):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000002ec0)=0x30, 0x4)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="200001", @ANYRES32=0x0, @ANYBLOB="e6ff"], 0x38}}, 0x0)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r2, r3}, 0xc)

2.108926647s ago: executing program 6 (id=4173):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
unshare(0x22020600)
r0 = socket$inet6(0xa, 0x80002, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
readv(r2, &(0x7f0000000280)=[{&(0x7f0000000140)=""/183, 0xb7}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071129c000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
syz_emit_ethernet(0x11, &(0x7f00000003c0)={@local, @random="000000fb3f00", @void, {@x25={0x805, {0x0, 0xd7, 0x9}}}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@remote, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @rand_addr=0x64010100, @multicast, @multicast2}}}}, &(0x7f0000000040)={0x0, 0x4, [0xd11, 0x63c, 0x1a5, 0xc35]})

1.907236388s ago: executing program 4 (id=4175):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.87565209s ago: executing program 6 (id=4176):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
close(0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x54, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x5}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_ECN={0x8}, @TCA_PIE_LIMIT={0x8, 0x2, 0x3}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x7fffffff}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0xfffffffd}, @TCA_PIE_LIMIT={0x8, 0x2, 0x9}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x7}, @TCA_PIE_ALPHA={0x8, 0x4, 0x20}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"})

1.807519391s ago: executing program 7 (id=4177):
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x18, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}]}, 0x18}}, 0x8004)
close(0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000170600000ee60000bf0500000000000063620000000000006507000000000000460700004c0000000f75000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792432a4fa650c512aee994a56462712cb064ecce5e7a9ce0a575a4f7952cb768637e60bd5d2e4b5992de991371274fdf535e001022e25659a7c85615c1b88bc894123c090014e8fb87efecdcb73858479526222b22ff81971ef49b2cb0dcebea6d90e9c1677fbefd35893d883a2c559b7af8db8b2d89fcc8af461b2a74af360eace66cec40d927006bd666c8122217c27902b3933106d0cc5bf6fec345ae9606c3c1a3000c94df67ae600900ffa2f49ec035883e27b1a9e9dff3e8bfc7d1be00f1a0820102b19000000000000000009095601e090012086dee84efd375f0642ed261765d3b9efdfbed9b430bcf04060000bdff1c8bcfc00300000000000000ab5d5f299354997c8bef9ca55841a57eddff9220c67c9e17bee524c3dc74c0271124cf9e4e2d23f7062351edf77c7129eb89085967722da6cb884d1afe82f7f722e38397996271700241094d272dd8b754b2dd36d486e7ffd1bdc198deb495cac0995ca3ef6c1affb693ae366b0f11db6ee4830d87a347d448b0737e852306b4713e5ce6cac6a27e29f164b9f16d6f045271b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b5e45a209d48d6dc2389d7f34cb9c02cf517c8ee8a9b6159ce895101c2ccff2bde95aa860ed9b8b6d6b8fcab7663d9bd8415e6f90fdb007b8f3e0ffe3a638c4fd88d20d235173720c1df1147c9f5013c82fc98604bd70cd56609a6b73943748a900e1d8cf81bcb1d2620bee688eb0a284040000005cc3ba8bf0b5e0fc018463d03a73fa85429725545128b0e9b550a13d0dd35092250b7d00ff03d5314fa8d37932055bb6d30d0000cad2375a34c7f15c3096f31e6aa6887864f62760ae35214552982bba84d92b1261251330dde4cf97b7cc6b2349e4f7a56003f7303d210fccd2efe6cda2595aacc36db66ff83af576b56dfbd40b15d569244d7d6e1182c4fa829c3f86acd17082bfed73ab9ef37705f9d2734801899e248e1a7155e28f000000000000000fce52263e3953a6f8560f852602ca905b58a9e2dbf16dd0322d0bb3ceb1b01752230bcbbf731701b2b1768aabb9a002090c09ab606e91ad9d88e7205464594add8691b62d55127cd891b8abe4358697e1b5f038773c0aa220cdce78b9346adbd72b293e66ef1a04905aaf6bd31e8d40d425d21232956ee45935d7adb2bf9fb37ff145472c58dbc8db58d0cde99df77d86ed71070000000000006d5cf959fb84c9f8ec46ec9af313d13d1bd85d57f598c00eb7bb8b6b4ff5875a50e2ea3287cf0f838bffdbf985fdce1fb66979b51cc6d6d6661354f33986f7acee499e25e3b70db6f15d7f2bfc0000000000000000ff7f00009eeb78c3d2e83f5e0eaf5cec82f45884cb0394271826ac2d5cc0afc4e784b515c659901c5c6a8573436be7b0f64c6176ef37db239a1ee9839436e951aef4196798d518a4820a241cec1b3e4923dae4c87d460900000000000000de7b13645fc6921a759e2c23153f432a3e5167628a94aacd0f40543049d8ef9787b56006227f143ce5554837675b93eeced66fe71bbe2c055660d23af1c9a83b78d0fde1f9dd526858a320563807a1ef41829913ce0b280010dca0cb3a98a8986e8e656dcaa6ae4ee6717a29e50450688763f1b17c156b860ba0d5a121d00ceac30ef5e104c43d76074c3884cb8fa504ebc94f7c83e90b6cad8d2a02df007bd585f4472cfb004cd9f09995000000000021000002cfceb7feffffffffffffffb1a6c40ac666744ca6c8fbba8452b686fd9b6250edd7d86ebc35898637dd88540e40d5799c11ee9883be26229eeee3941494fcd4389af9b755843126338c346b4d50a5b8684ad74bad46f4ffd86292d72a933fcb7304aef4b4a4bf6e054fea3549e08c0dd2334f485da9382887c16306176f73f029e2f9f8145360cfd5ffd66ae82d51e683ff364981b358a5f48af10059a0716951942eed021e41ba076d486cd095ffcefc3e8b8ead226c5a640b06fc13311826d024248f14b62a7fb0f9b95c9e23e7d29aca69e77db40dd00c0b20e43e300b1a46e243e2a8321dbb1270a22d9a2368de08d625566f253f0760abb44c11583fa5b914ab298ade422e4c0ddc7b17dd2aa8ac94d93d6b590000000000000000000000009b90eb1db265c18521667d305886e9c47ad357a76be0c9ce899bdd80a51a2017190a590d092bc500ea71b338098d1007517c1d6e785d5e0975ca2c2edf221b30377e61fce8bf47e7b93da593d154caca75b1ef1273aa501807005593ba45d219d7c656be0fb900000000004093461ceec5fce099368e07060c21cabb846f2447fc72be9925b2f568b15e5d22c8fabbfd3edac460c70a5619a043ada38fea3b104f9c1a473b7820faecfbb40b5e0d3681013c0cb2b8acc1ceb5f790210a3be07b2727c4e5a5d20468b3ed35f9a71519904c6dd76dee5738dcdac1f4358bb65c1aca8eb0a65aacbaaca92cc7cc553b1c5181d81c15ff4eaea3bcbfc4e0d06bd8d2e2d941924f860f2aba2253b9038e6923b026b7ece3e9fcdf6aa14a65bd6cd7e78457dac1fb3cdc421d6059e17d44e378189035c2fe489e5b7a87c23ec952e2affbc7a4c707312b17a5f428527cb42a8cbd072490eae617e6ea32ee7d3055bfc9b1128553cb963d3873115296a8bd2efb7368ea2727b294d6eceee49ad9093738a3b1bbfa163a917380953fdc3a443a6585925ee14a817390a655c1988632a414b304d688116d79693efd80b293ddc89bb27529c34f4f8ee3ddbaf1c13a4e15186353efd0ced475794ff5f9b0580f2fb996928f0ca6d1a9f4bda1fe9c1bc2e657448c00ca6afb2e5b1c336d657c87f2634db46e2e8e82366a2de4dd41ca0a26ab49d5d357e5a8af73d9504af230513acadd2f0d9d99c4b6e4ebf68582cf8dc4dac990b216a6a216b0cae87a2339fda14e546b224857f758cb64ca2dcdf32b5420ad9f33dbaeb36b7466c5129508d57329f57ac682757e398c4d2a6f93fb1dfc2c840e06bd6c0d7ceedc3721b19c7c9fc1645cf32d79807c4d3e0898ae2a829df5c03834bc2558aeed652399a9cf9e5c859d3c5c5341b329fea445d2e040562a813c35ed1c1afab50aeb12eea9456adf21953947413c03af836bc339355250daeaca253f809493c75c9dcdbae3a76753d593623348e82b1e9c5480fd099b6322b6c6158ebe8ecba0ab364ce4a58e244b76d16b81905878c4caaad1f54cc11df97a50356638016a7e50a92ee55af3c64ae2b95653373d3471c0f26119e18426fae7739a9031618635a257cf58b1e9b8264b6543d6c1c372b66d9a5f96198ae01beeb398744ac4b6f26b568cd7b792039ac4e10f9307b1a8dc268a5d2af3dbce55fdac6d1a158a2243c679261aa080acdf0d55753d3163664df7e4129f12f850c694dc140cf9380687da9914be848a01bc7f5278eb3c3210664b62743887b822814c58a3304b392c7e2a6e64576248af87c0f995af921be86e8102d8343c0de8cda3512f84c894ed6c0206e41443c456467c42ff9ddad36e882cc5287394aedd8d413a061a2894f2ef5fc3072fc8a0c5c2a9f94954278c3d67a0b0fa6e002ce0840e3405d166f037a6e678ce1af6ed9c6e7023f8663d294f4bee1effc148e096d2eb91903c482548c0c5b135a31ae6903a9cb9a40a89155ce15dbe3e373a7ac4c7b4d391bdac5268b2d419f13aeb86f68725a4633eb883417bc23243a302ccc919e0b141ae8aeb7457264f8cad663255db96efda704cef9428ffeb16acd3295a36b1e514ecf65944d5c754e02410075714612e7841e6c7e1e2366bd6ccf335ac9dd35332ee78aaa2ff6950c81fd53db93dcebe8b9c42aeefaf63150d649bd1542014ac64daaec18e82854454967e37a6dccea142f2504a6aba4dd44594c230101a4574d56a1ff4f5b7dd246f7d607ff6f8bebf4fd7e709122f3129bec4dd5b4129829d15d1d3b1fb82e341a325f7863c5035bc6a35a6568b35327a8364d98bdf516e27b57976af232128856692b491469c525eb2a48d4794459dae9213bd0088206f364f8c2c727e3e1d1a3ca9f1b40fea92bfea26189d3bf91e92c1e8795334cc268e0b31cd354701eff8adfa247b848b0ae203f78380b818c0afbe01efec884ff0a6cecfb726886bbdaf78ed3ebc40556b434d0fd81799d96cf302e1115c8cda0b4c7f27c8b4ad1a5808f6b908816ca7483f94fbb8391e6533833470c9c3352d70ae03bc8479e64caf16d5fabe77519aa196fcfb4e480620ef153a09e1dd59490ffab33976fba5b3126dc509e4cbc94bd59f745319efc4523e1f0387968be039a920a0abc8aef753f82ca796055bf28affa706df1312a898162454ff9010ee5fa95d56fa3e8ab283481c20d0fa2b3149a54c268d2b77ad6ce63f97e10bf3baa14dc7a4492587ae1e26237787231d000000000000000000000000003ef8cbcd3ffe8d35974cbb469c41e8ad0b58c5376c4fa943d02a4bd12dab3cab9ef4e62cb10820de0d87ddd79f820879e4ad8868f81cf931760d5c6b9c7337e8efcaa4e63eed8e3eb668f104cf1fa53fb300acb4bd61371d6f12165e9814d2517cba3403530d06737da5cb6ca5996af9a16cca9853430842bdf0995c53681e4a2b0bd1fdaeb0e7839669aed97a6f6f25f7de9ba0ea23384b85957faf49d62dba00af3c7e3c817e13e63c487fc167f2aff6e5a250937bb43b0a8e9d12ff551e6cc2d304aec2a5d843ea327c0a3379594726b92b1919367f3b1711087f160503b3b37170579ce2a664b21d86aca4cf19c1f36d264b0b7ba3de1e020601418d981c6f596e48d5cebe4ff0fb8046e87a5c4d95c07935"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async)
epoll_create1(0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x18, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}]}, 0x18}}, 0x8004) (async)
close(0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)

1.664209555s ago: executing program 4 (id=4179):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0x58}}, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="180100001f00010000000000000096000601008014000300fc010000000000000000000000000000140001"], 0x118}], 0x1}, 0x0) (async)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="180100001f00010000000000000096000601008014000300fc010000000000000000000000000000140001"], 0x118}], 0x1}, 0x0)

1.53624134s ago: executing program 7 (id=4180):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000200)={0x4, 0x6, 0x2, 0x5}, 0xfffffffffffffde7)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000140)=0x8)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="d1c1dc"], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)

1.40963425s ago: executing program 6 (id=4182):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0)
listen(r0, 0xfff)
r1 = accept(r0, 0xfffffffffffffffd, &(0x7f0000000680))
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x8}, 0x8)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, r2, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffff, 0x1c}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x400}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xb4, 0x84, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x11, 0x1, @random="e06e35b819843c87eca4d59d3c"}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x6ce22c36}, @NL80211_BAND_LC={0x8, 0x5, 0x3ff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x22, 0x1, @random="579aa54149468ad670b72ecdf22ecd812f0a48614f100c04d342c2239f6b"}]}, {0x4}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20040845}, 0x40000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x2004a041)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r6=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4)
close(r5)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90)

1.302732146s ago: executing program 4 (id=4183):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmmsg$sock(r1, &(0x7f0000002c80)=[{{&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000001c0)="cc61e28198d82dac0eafb5080d0cc375c2b105f2d59cc58cfe2952d67fec795deb9d5f0e8290863a330ca424c52b4dcf343904", 0x33}, {&(0x7f0000000280)="edee02a55c0c6e5ff387f51342921effc6201df186b7c0b50f59374ad535f414c8da4a5653ba09b8e3724dcaca0463dd37e9122f7fbfb99d6b2caa3d9d876491a29375e121cded99f6428d64eecf57ba9051e74151eed1b8abba7d11d3b480b85544fc110ceeda7873d32868535bc792f97ade76c7b73cf7dd8287613d3794c2c8156640593133ffe4700cd6930bd68e7fa436cc112ba60a05b3058b616840da624df750619f7e1d3fd3c3acc00663ad012af7287d246c959444f8", 0xbb}, {&(0x7f0000000580)="5f3716761e4e86e49ba922cd3d2603fe33b22c4f6097047c69225a723397c7dd72851dd5db5d7575b072498728a5fdbc96d92e2f0f52a0de7f9215fba3f3f47a7d2162a1f0447e87114475671878ba8cda81bb0b8e8388b23172a5ca39ca340155da272f3189d0a0f41860cf45520f61168b6c6c913cec7e3673722222b284c1513f520fea10d891ce362b236762c1b5d648623ff9ac0327b951908a5c0f47761d1d2da062de6a3a5a", 0xa9}, {&(0x7f0000000640)="6e4359e836f506ab7ef40a6fc83f767fb7f3358112270f6bb5147ffa7a823321c5aecb655a9c7ad9cc1c48675b65d63fa7545c3516dfcfee517bfbc4724b65e7e7a450575941c73dbaca0f98421cb039984704d428f846f3d6ee76abde106e8b5f171a35012fb575ad92dee1c54b31e7547e772d8f81eb20e6ccdbe597a86488e9717bf272eb14e6d95b17b0b7f2872c89893fe46624a42a1ab219bc", 0x9c}, {&(0x7f0000000200)="82a8cb4a2064cbfe4d2b2835e2b33414bab5ad95f0677898d3f4c18e1a77a0a5722c1b4bcdd9838635dfe691deacb78e23804a45e4fedb176a95e3126b6b", 0x3e}, {&(0x7f0000000700)="bf82c10751d77a861c8e359ebd1c05605d6ba98670c43665e556b87187acd8859d9ea26575e43e4a92e9962aef6a93a3e644784dfcffd05102d2ae1327acb2c34a81f7995f4910219a34d43898e6afde5f633630f7fc2fefbbedea360051", 0x5e}, {&(0x7f0000000780)="9523b3efa730b730a36acd7d1e05e3f8ba58d00fae86c34fc7b9e911b6f0d8a2eba3cc662173246a9ea5b2a2bc92f5ed9d4faef7c9441cb507c412e0a9bc3dbde7894dbc0e2622ecf7f782ef9d5c69144bdabccdd5390b373afa96cdf6c64bd84990a291674f9b5297d6865118fc36e5c075a9587a411c9bb20dd08bd60252e1b8abc8a294c7f86bf83df83dd113d80af3f9be53f6586292545b4251f53eb6c87e07db", 0xa3}, {&(0x7f0000000340)="27bd36c192fd80ab7552b4", 0xb}], 0x8}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4, &(0x7f0000000c00)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426269422e70740455409baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000f00)="68a55df1c6bed91373cc79fcf0ea4c17187a680c0c711ae1d37231d4e7cd61719f501fd0d890485c98ee906e64fa", 0x2e}], 0x5, &(0x7f0000000fc0)=[@txtime={{0x18, 0x1, 0x3d, 0x8f94}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xd39}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="1f193ccd5e71244bc55dbcdc29e1a25fb59915f7f84fb5105984bc94ac926679df8c", 0x22}, {&(0x7f0000001100)="b35ba3572fcda875bc97e8", 0xb}, {&(0x7f0000001140)="795f2ce94a7d8725e389c01b493ee679f9e1f4660442a05c2cbbf66384679166ec101d934bd017c061424e92d24f48d86b", 0x31}, {&(0x7f0000001180)="93", 0x1}, {&(0x7f00000011c0)="3dff21fdbef2b0b843e0740163754db27084ece48f14e2ccb75ed71caecb8d01a49808a0a2269f17dc98a78e584f6cc71495faa98957034a6e6f6e9ea743d838d77a3f108a034c89", 0x48}, {&(0x7f0000001240)="b17b27be17bcb19544700a33471f8c21345d9ed983455906bb74ac68c911b5f14c7d60075f017c69c25768", 0x2b}, {&(0x7f0000001280)="45871f6c7aa143cfbb579d430702b24380586237795f6665c24e267fb8c62c14f85be705fbab74d85c8d479162b42724e414f24b9602b0c068930b8f0431f77f7ed4bb04c4bd7edbacb55c07e24b2b7ffbc83bb39385066e27b3b6727c8861edea62c5532877c2bc886e9f673bc9ef731ee32104bc102a8fda64676a9edf0e47f36cd6a35fd53b13b1f365ade8150f7e35c258b0253d8c4dcbc8", 0x9a}], 0x7, &(0x7f00000013c0)}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="d480dc1917d9339f4084892894143b343fddd9303f0429a7ae5d89e2d238c7a6d95b89164290c367be830f56c6b95c492363a9b522", 0x35}], 0x1}}], 0x5, 0x0)

1.219017323s ago: executing program 5 (id=4184):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x70bc}]}]}, 0x34}}, 0x24040000)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=<r1=>0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300)=r1, 0x12)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

1.107589167s ago: executing program 7 (id=4185):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000000206010800000000000000000000000015000300686173683a69702c706f72742c6e657400000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000800000000d308000640"], 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x194ae35eb8a884fc}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40804)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "1cb315f3c5e23d27d29a00dd397b5c11d4cf201c1a0619fc314514ab71788e4079fdbe4f2a0d60b83a7d04c1d709981110401e5e10685abbad9b6f18e303e902c77244658a099a36fa486760c4941ea7df64250af29a4935de5d244f0549d93679b3d4fb358c2076bc6b1c9735ff8243f088e67455ba14975d12e5903ceeb7a23d62ecb5253ad444ef726b58a00f13f22ccc84cc06c9912b621c3ddc5f3229dc84c0880b5c6faefe33413b34a146e592fc15ae234dac030f05bb99eab08dfd2cb5659c6fc21fb7da6c380165ddde4659e75538dc864a53f691e1d785d6e6f73a03abf2120bce67e2d50075fd811b3e03a1cc2d66335bdee19738a0c1fb79b77d"}]}}]}, 0x14c}}, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x0, 0x2, 0x6})

1.009125118s ago: executing program 4 (id=4186):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair(0x15, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000045c0)={'tunl0\x00', &(0x7f0000004580)=@ethtool_link_settings={0x26, 0x1, 0x1, 0x7f, 0x81, 0x8, 0x0, 0xf, 0xb, 0xe1, [0x674, 0x5, 0x2, 0x2, 0x7fffffff, 0x7, 0x80, 0x3]}})
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x78, 0x4)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70200000000000085000000d3000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000ac000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000000240)={0x2, 0x1})
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socketpair(0x15, 0x5, 0x0, &(0x7f0000000080)) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) (async)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000045c0)={'tunl0\x00', &(0x7f0000004580)=@ethtool_link_settings={0x26, 0x1, 0x1, 0x7f, 0x81, 0x8, 0x0, 0xf, 0xb, 0xe1, [0x674, 0x5, 0x2, 0x2, 0x7fffffff, 0x7, 0x80, 0x3]}}) (async)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x78, 0x4) (async)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70200000000000085000000d3000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000ac000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async)
ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000000240)={0x2, 0x1}) (async)

954.966489ms ago: executing program 5 (id=4187):
r0 = socket(0x2b, 0x80801, 0x1) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x18, 0x40, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}, [@typed={0x4}]}, 0x18}}, 0x8004) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r0) (async)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
setsockopt$rose(r0, 0x104, 0x5, &(0x7f0000000700)=0x3, 0x4) (async)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433", 0x3b}], 0x3}], 0x1, 0x40800) (async)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/69, 0x45}], 0x2}, 0x0) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x6, 0xff}, {0x80000006, 0x0, 0x12, 0xf6}]}, 0x10) (async)
recvmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000440)=""/40, 0x28}], 0x1}, 0xfca}, {{&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f0000000540)=""/121, 0x79}, {&(0x7f0000000400)=""/56, 0x38}], 0x3, &(0x7f0000000600)=""/52, 0x34}, 0x8}], 0x2, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e23, 0xa, @loopback, 0x7ffffffe}, 0x1c)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000006c0)=0x400, 0x4) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x480, 0x0, 0x0) (async)
r5 = socket(0x400000000010, 0x3, 0x0) (async)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r7=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r7, 0x800006}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000740)={0x7, 0xf, 0x3, 0x4, 0x7ff, 0xed66, 0x3, 0x7, r7}, &(0x7f0000000780)=0x20)

871.814037ms ago: executing program 7 (id=4188):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

781.867026ms ago: executing program 5 (id=4189):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000ff800000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

692.616995ms ago: executing program 4 (id=4190):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x82, <r2=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180), 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="2d8398bf2bef6b7acaa4b00777102c47575d5039d9", @ANYRES32=r2, @ANYRES64=0x0], 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000a40)={@val, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x6, 0x6, "24de18", 0x14, 0x6, 0x1, @remote, @remote, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x8}}}}}}}}, 0x52)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
syz_emit_ethernet(0x55, &(0x7f0000000000)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x47, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x33, 0x0, @opaque="4cca9e233921556377c0c1d4963be41da345bbb701be956aa4526d5f4d7db7dd60c82d64d5b391a74f6277"}}}}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)
recvmmsg(r5, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/219, 0xdb}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4a}, {{0x0, 0x0, 0x0}, 0x48}, {{0x0, 0x0, 0x0}}], 0x9, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
unshare(0x20040600)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x7c, 0x1, 0x7, 0x3, 0x0, 0x0, {0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x81}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x800}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x61ce1df0}, @NFACCT_PKTS={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4c051)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x36, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0xf5c4cc9ddd572797, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r8}, &(0x7f00000003c0), &(0x7f0000000740)}, 0x20)

655.746873ms ago: executing program 7 (id=4191):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000400000008000000010000008000000052316ca8198ac87d97c40c2f45f19869c310a5cdf8cc02a1e0d5ed63805acf79abe9af35af2b41a93f97bfd7b752fa82f161e965c36cc8446eff66980d85a9f86055e58a7a439d34d0a5c211a50d362c144cd8ad21f608777b32f67f7af0c72efd5bedba4716a865c725f24dbff618fbe8c4e830c535", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x0, 0x0, 0xda]}}, 0x0, 0x51, 0x0, 0x1}, 0x28)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r3}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r3, @ANYBLOB="20d100000000000014002b8008000100", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x88000}, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000000)=0x9, 0x4)
sendmsg$nl_route(r0, 0x0, 0x40000)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10)
r11 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r11, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'nr0\x00', <r12=>0x0})
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0)
close(r13)
syz_genetlink_get_family_id$fou(&(0x7f0000000280), r13)
connect$bt_l2cap(r13, &(0x7f0000000180)={0x1f, 0x4, @none, 0x3, 0x2}, 0xe)
sendto$packet(r11, 0x0, 0x0, 0xae050000, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400000000001b2347ea000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc"], 0x5c}}, 0x0)

531.668386ms ago: executing program 5 (id=4192):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003300000000000000000000000000000000000000000044010500ac1414bb000000000000000000000000fffffffe6c0000000000000000000000000000040000ffff7f0000010000000000000000000000000000000000000000fc0200000000000000000000000000000000000032"], 0x1fc}, 0x1, 0x0, 0x0, 0x5593ee2f0bddd481}, 0x0)

531.244732ms ago: executing program 3 (id=4119):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', <r1=>0x0, 0x8000, 0x7800, 0x2, 0x7fffffff, {{0x30, 0x4, 0x0, 0x1f, 0xc0, 0x67, 0x0, 0x9, 0x4, 0x0, @empty, @remote, {[@rr={0x7, 0xf, 0x68, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @cipso={0x86, 0x3d, 0x1, [{0x5, 0x7, "339fb37bd8"}, {0x6, 0x2}, {0x7, 0x8, "bffb446753f1"}, {0x7, 0x12, "bdfc96d908dc7d11fd3a170e6dc9e7fc"}, {0x5, 0x7, "52a8043a42"}, {0x6, 0x4, "f570"}, {0x0, 0x5, "3880e9"}, {0x6, 0x4, "9259"}]}, @cipso={0x86, 0x5b, 0x2, [{0x2, 0x5, "7477ea"}, {0x1, 0x10, "01741c6882108d7e68536548cb54"}, {0x5, 0x10, "09048155d69f3888dc7565aabdae"}, {0x6, 0x12, "f76e65eab05446198aa321ea36d6c0e1"}, {0x7, 0x2}, {0x1, 0x5, "1bf74b"}, {0x5, 0x3, "d7"}, {0x2, 0x2}, {0x0, 0x12, "9f0f14703b456b170b855f52e9a10fca"}]}, @noop]}}}}}) (async, rerun: 64)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) (rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000000000000000000b7abb800c678ffff00000000", @ANYRES32=r0, @ANYBLOB="0100008000"/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="040000000100"/28], 0x50)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="060000000200000000000000", @ANYRES32, @ANYBLOB="c11db7688ca772d177af3113f35f084b8a287ee0e1b287dca1b4706a80935acec61d38f75b3ad2b005e621e5bac5c7a6897bcc961b9de82e783ff65bf98e06ae6fead1cb67e0e52e73a60d5e98d890fe0d00262afac77a3b2de96916a4e86296c6b9855c9d5df9a5045ca2dcb637bb3ce356a10528b1454bd46fce829134600172753fd55742e30333afa0da90f36764bb7753fb521ffc3175151c1addcb06f9c088f4667a61ff8c5cd60dfee77f27afcaa756e168f7f7cbbb66a46a86d8c774e2e3f012504113f7e328bdbe29f805beceb43904529eca448a019c15a41f5eb2ccfd4b8d654bb4090194fb3930fd038a774d164a509d584ab4d47b6eef4adb63b307db2d5e6a7f808f10ba70fe154f0f14c8a543b4b13575ac20090915aaa7f4736a34822363028e91e7", @ANYRES64=0x0], 0x20)
syz_extract_tcp_res$synack(&(0x7f00000002c0)={<r5=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800490000380000000000059078ac1414250a01010044042d038907cee0000002830200000000000000", @ANYRES32=0x41424344, @ANYRES32=r5, @ANYBLOB='\\\x00'], 0x0) (async)
socket$nl_generic(0x11, 0x3, 0x10) (async)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@rfm={0x25, 0x10001, "459379683b195232d5b842e716e82504"}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[], 0x10) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020000000000000000000007b1af8ff000097f8bfa100000000000007010000f8ffffffb702000008000000b70300000000", @ANYBLOB="c8f0cba68bb807452d4d82f7f2bc7c3d660ced12e7430bfeb0941c5086814b41f2025fd8540da87491ab6594638339fab51b49ba596e5479aaf61c5dd0bb9c58a47728eb5f7ad945429f19cef44737a412c5abf1955761565b6b2d83b6725256c3b4d0be751f2cd373fceb00628ed8660dd4b4f54aa8ca5f0782bca5a630d1a4777f07bb00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10)
r8 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async)
connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) (async)
socket$rds(0x15, 0x5, 0x0)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000030401030000000000000000070000010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x2000c050)

446.47527ms ago: executing program 6 (id=4193):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x39, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="584f56c700000000000000797eee5c3122ee19945d31a7b3f4a889d32e805d302308da0291ac60e09c30931695ccde2f44454f30ad97a262afc48cd0d3da1716eb412f0c303a53bc26926b7f039ec34579a7038f81198c1e7e0a1459c00373179fd999a3ae6e907184e8a147bb40abb812796297871e34a4b92dfcc9ae37501e7f98f7a3b6a084078acf5de88482efb94534f40508fa055083078883490adf0203b08efbdcca41c7040309fe271b47daaf73fd881a213fc9612ce50fc13ef22fc42a891ba31918efe10e0a105e417d", @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050004000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

380.610441ms ago: executing program 3 (id=4194):
r0 = socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000009280)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2001, 0x0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000040)="6cfccb5058001f2d12ba5660000307f4f9002304000a04d65f0800010002010002170005800500000099db973b91aa0579725100912deb5b97932234c2935c5eb36e24955d7c2ca38782d67576ef0000000000000006369f017bbf155f1ee2cfbb0e54773c74d92433964782fde94f7433b83bad5bf626d61b6deade8cca9d71b7f0c4dea04e7cfd71cf35150c373e45ec91ec3850ef06f2d9914769ae1707f50b68b300b485f0a1b6f414", 0xab)

303.762662ms ago: executing program 5 (id=4195):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b780)=ANY=[@ANYBLOB="300000001300030029bd", @ANYRES32=0x0, @ANYBLOB="160000008a400000080013"], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

264.684612ms ago: executing program 6 (id=4196):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmmsg$sock(r1, &(0x7f0000002c80)=[{{&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000001c0)="cc61e28198d82dac0eafb5080d0cc375c2b105f2d59cc58cfe2952d67fec795deb9d5f0e8290863a330ca424c52b4dcf343904", 0x33}, {&(0x7f0000000280)="edee02a55c0c6e5ff387f51342921effc6201df186b7c0b50f59374ad535f414c8da4a5653ba09b8e3724dcaca0463dd37e9122f7fbfb99d6b2caa3d9d876491a29375e121cded99f6428d64eecf57ba9051e74151eed1b8abba7d11d3b480b85544fc110ceeda7873d32868535bc792f97ade76c7b73cf7dd8287613d3794c2c8156640593133ffe4700cd6930bd68e7fa436cc112ba60a05b3058b616840da624df750619f7e1d3fd3c3acc00663ad012af7287d246c959444f8", 0xbb}, {&(0x7f0000000580)="5f3716761e4e86e49ba922cd3d2603fe33b22c4f6097047c69225a723397c7dd72851dd5db5d7575b072498728a5fdbc96d92e2f0f52a0de7f9215fba3f3f47a7d2162a1f0447e87114475671878ba8cda81bb0b8e8388b23172a5ca39ca340155da272f3189d0a0f41860cf45520f61168b6c6c913cec7e3673722222b284c1513f520fea10d891ce362b236762c1b5d648623ff9ac0327b951908a5c0f47761d1d2da062de6a3a5a", 0xa9}, {&(0x7f0000000640)="6e4359e836f506ab7ef40a6fc83f767fb7f3358112270f6bb5147ffa7a823321c5aecb655a9c7ad9cc1c48675b65d63fa7545c3516dfcfee517bfbc4724b65e7e7a450575941c73dbaca0f98421cb039984704d428f846f3d6ee76abde106e8b5f171a35012fb575ad92dee1c54b31e7547e772d8f81eb20e6ccdbe597a86488e9717bf272eb14e6d95b17b0b7f2872c89893fe46624a42a1ab219bc", 0x9c}, {&(0x7f0000000200)="82a8cb4a2064cbfe4d2b2835e2b33414bab5ad95f0677898d3f4c18e1a77a0a5722c1b4bcdd9838635dfe691deacb78e23804a45e4fedb176a95e3126b6b", 0x3e}, {&(0x7f0000000700)="bf82c10751d77a861c8e359ebd1c05605d6ba98670c43665e556b87187acd8859d9ea26575e43e4a92e9962aef6a93a3e644784dfcffd05102d2ae1327acb2c34a81f7995f4910219a34d43898e6afde5f633630f7fc2fefbbedea360051", 0x5e}, {&(0x7f0000000780)="9523b3efa730b730a36acd7d1e05e3f8ba58d00fae86c34fc7b9e911b6f0d8a2eba3cc662173246a9ea5b2a2bc92f5ed9d4faef7c9441cb507c412e0a9bc3dbde7894dbc0e2622ecf7f782ef9d5c69144bdabccdd5390b373afa96cdf6c64bd84990a291674f9b5297d6865118fc36e5c075a9587a411c9bb20dd08bd60252e1b8abc8a294c7f86bf83df83dd113d80af3f9be53f6586292545b4251f53eb6c87e07db", 0xa3}, {&(0x7f0000000340)="27bd36c192fd80ab7552b4", 0xb}], 0x8}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4, &(0x7f0000000c00)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426269422e70740455409baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000f00)="68a55df1c6bed91373cc79fcf0ea4c17187a680c0c711ae1d37231d4e7cd61719f501fd0d890485c98ee906e64fa", 0x2e}], 0x5, &(0x7f0000000fc0)=[@txtime={{0x18, 0x1, 0x3d, 0x8f94}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xd39}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="1f193ccd5e71244bc55dbcdc29e1a25fb59915f7f84fb5105984bc94ac926679df8c", 0x22}, {&(0x7f0000001100)="b35ba3572fcda875bc97e8", 0xb}, {&(0x7f0000001140)="795f2ce94a7d8725e389c01b493ee679f9e1f4660442a05c2cbbf66384679166ec101d934bd017c061424e92d24f48d86b", 0x31}, {&(0x7f0000001180)="93", 0x1}, {&(0x7f00000011c0)="3dff21fdbef2b0b843e0740163754db27084ece48f14e2ccb75ed71caecb8d01a49808a0a2269f17dc98a78e584f6cc71495faa98957034a6e6f6e9ea743d838d77a3f108a034c89", 0x48}, {&(0x7f0000001240)="b17b27be17bcb19544700a33471f8c21345d9ed983455906bb74ac68c911b5f14c7d60075f017c69c25768", 0x2b}, {&(0x7f0000001280)="45871f6c7aa143cfbb579d430702b24380586237795f6665c24e267fb8c62c14f85be705fbab74d85c8d479162b42724e414f24b9602b0c068930b8f0431f77f7ed4bb04c4bd7edbacb55c07e24b2b7ffbc83bb39385066e27b3b6727c8861edea62c5532877c2bc886e9f673bc9ef731ee32104bc102a8fda64676a9edf0e47f36cd6a35fd53b13b1f365ade8150f7e35c258b0253d8c4dcbc8", 0x9a}], 0x7, &(0x7f00000013c0)}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="d480dc1917d9339f4084892894143b343fddd9303f0429a7ae5d89e2d238c7a6d95b89164290c367be830f56c6b95c492363a9b522", 0x35}], 0x1}}], 0x5, 0x0)

189.111883ms ago: executing program 3 (id=4197):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x70bc}]}]}, 0x34}}, 0x24040000)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0)
sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

119.616176ms ago: executing program 4 (id=4198):
unshare(0x6a040000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) (async)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x25, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) (async)
socket(0x21, 0x3, 0x7ff) (async)
syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa86082b9827c186dd6004000000002c0000000000000000000000ffffe0000002fe8000000000000000000000000000aa"], 0x0) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68)

96.808613ms ago: executing program 7 (id=4199):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', r2}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0xa, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x1c}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0xe}}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7}, {0x3}, {0xa, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000940)=""/53, 0x82, 0x35, 0x1}, 0x20)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x101000000}, {0xc}}]}, 0x54}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r5, 0x89e2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6)
ioctl$PPPIOCGNPMODE(r7, 0xc008744c, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x44, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0xa, 0x4, 0x4, 0xc}, 0x50)
recvmmsg(r6, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/85, 0x55}, {&(0x7f0000000340)=""/97, 0x61}, {&(0x7f00000003c0)=""/137, 0x89}, {&(0x7f0000000480)=""/74, 0x4a}], 0x4, &(0x7f00000030c0)=""/4096, 0x1000}, 0x7}], 0x1, 0x10001, &(0x7f0000000540)={0x0, 0x3938700})

85.200749ms ago: executing program 5 (id=4200):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 3 (id=4201):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000ff900000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

kernel console output (not intermixed with test programs):

e limit has 4 unknown bytes
[  411.075552][T16010] veth0_vlan: entered promiscuous mode
[  411.152747][T16010] veth1_vlan: entered promiscuous mode
[  411.279594][T16010] veth0_macvtap: entered promiscuous mode
[  411.322697][T16010] veth1_macvtap: entered promiscuous mode
[  411.402873][T16010] batman_adv: batadv0: Interface activated: batadv_slave_0
[  411.442437][T16010] batman_adv: batadv0: Interface activated: batadv_slave_1
[  411.499635][ T3015] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  411.528905][ T3015] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  411.558326][ T3015] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  411.575485][ T3015] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.604661][ T5841] Bluetooth: hci6: command tx timeout
[  411.799651][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.814499][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.882381][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.891570][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.281073][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3117'.
[  412.428195][T16285] lo speed is unknown, defaulting to 1000
[  412.448684][T16285] lo speed is unknown, defaulting to 1000
[  413.011545][T16299] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3124'.
[  413.407136][T16303] lo speed is unknown, defaulting to 1000
[  413.467335][T16303] lo speed is unknown, defaulting to 1000
[  413.668758][T16312] ip6gre1: entered promiscuous mode
[  413.733312][T16312] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3129'.
[  413.755594][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3129'.
[  413.776082][T16312] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3129'.
[  413.793944][T16312] nbd: socks must be embedded in a SOCK_ITEM attr
[  414.171544][T16326] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3132'.
[  414.371065][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3134'.
[  414.732950][T16343] netlink: 27 bytes leftover after parsing attributes in process `syz.6.3140'.
[  414.892699][T16341] xt_CT: No such helper "snmp"
[  415.043310][T16353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3141'.
[  415.345682][T16361] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.3144'.
[  415.730488][T16370] @: renamed from vlan0
[  415.883085][T16349] Bluetooth: hci0: Opcode 0x080f failed: -4
[  415.885557][T16345] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.896954][T16345] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.025767][T16345] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  416.042230][T16345] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  416.186562][   T65] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  416.216373][   T65] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  416.251913][   T65] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  416.281874][   T65] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  416.455041][T16383] tipc: Started in network mode
[  416.461517][T16383] tipc: Node identity 8e90d6cd3b87, cluster identity 4711
[  416.479128][T16383] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  416.509421][T16384] tap0: tun_chr_ioctl cmd 1074025673
[  416.540385][T16383] tipc: Resetting bearer <eth:syzkaller0>
[  416.565894][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.568440][T16382] tap0: tun_chr_ioctl cmd 1074025677
[  416.601178][T16382] tap0: linktype set to 0
[  416.607549][T16388] tipc: Invalid UDP bearer configuration
[  416.607618][T16388] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  416.655343][T16380] tipc: Disabling bearer <eth:syzkaller0>
[  416.884467][ T5841] Bluetooth: hci0: command 0x080f tx timeout
[  417.317073][T16427] netlink: 'syz.6.3162': attribute type 1 has an invalid length.
[  417.350148][T16429] netlink: 'syz.6.3162': attribute type 1 has an invalid length.
[  417.500688][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3166'.
[  417.661550][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3166'.
[  417.684900][T16436] lo speed is unknown, defaulting to 1000
[  417.710832][T16446] bridge1: entered allmulticast mode
[  417.744102][T16447] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.769668][T16436] lo speed is unknown, defaulting to 1000
[  417.792990][T16439] batman_adv: batadv0: Removing interface: batadv_slave_0
[  417.831918][T16453] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3171'.
[  417.862391][T16456] netlink: 'syz.5.3172': attribute type 1 has an invalid length.
[  417.998077][T16454] tipc: Resetting bearer <eth:syzkaller0>
[  418.011971][T16442] tipc: Disabling bearer <eth:syzkaller0>
[  418.470727][T16472] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3177'.
[  418.559344][T16474] geneve1: entered promiscuous mode
[  418.569961][T16474] geneve1: left promiscuous mode
[  418.630002][T16479] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  418.651672][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3178'.
[  418.674646][T16475] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3178'.
[  418.686690][T16477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3179'.
[  418.697333][T16478] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3178'.
[  418.968818][T16490] x_tables: duplicate underflow at hook 1
[  419.001787][T16490] netlink: 'syz.5.3183': attribute type 1 has an invalid length.
[  419.220345][T16489] bridge_slave_0: left allmulticast mode
[  419.242949][T16489] bridge_slave_0: left promiscuous mode
[  419.273343][T16489] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.351746][T16489] bridge_slave_1: left allmulticast mode
[  419.364582][T16489] bridge_slave_1: left promiscuous mode
[  419.371213][T16489] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.447050][T16489] bond0: (slave bond_slave_0): Releasing backup interface
[  419.481795][T16489] bond0: (slave bond_slave_1): Releasing backup interface
[  419.510555][T16489] team0: Port device team_slave_0 removed
[  419.547711][T16489] team0: Port device team_slave_1 removed
[  419.565533][T16489] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  419.583267][T16489] batman_adv: batadv0: Removing interface: batadv_slave_0
[  419.605566][T16489] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  419.625126][T16489] batman_adv: batadv0: Removing interface: batadv_slave_1
[  419.675531][T14868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.884094][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.591235][T16534] IPVS: Scheduler module ip_vs_sip not found
[  420.615077][T16534] IPVS: length: 8 != 446622349272
[  420.993864][T16557] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode
[  421.022682][T16563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3202'.
[  421.240638][T16567] netlink: 'syz.6.3201': attribute type 10 has an invalid length.
[  421.304309][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.374115][T16567] mac80211_hwsim hwsim38 wlan1: left allmulticast mode
[  421.404833][T16576] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3205'.
[  421.462687][T16567] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.520293][T16567] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  421.554199][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.593835][T16576] vlan2: entered allmulticast mode
[  421.604834][T16576] gretap0: entered allmulticast mode
[  422.599500][T16625] __nla_validate_parse: 2 callbacks suppressed
[  422.599520][T16625] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3217'.
[  422.624249][T16625] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3217'.
[  423.119667][T16643] sctp: [Deprecated]: syz.6.3221 (pid 16643) Use of struct sctp_assoc_value in delayed_ack socket option.
[  423.119667][T16643] Use struct sctp_sack_info instead
[  423.374577][   T30] audit: type=1800 audit(1751552190.288:13): pid=16641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3219" name="cgroup.controllers" dev="tmpfs" ino=323 res=0 errno=0
[  423.746442][T16646] 8021q: adding VLAN 0 to HW filter on device batadv1
[  423.756572][T16646] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  423.781986][T16646] team0: Failed to send options change via netlink (err -105)
[  423.800968][T16646] team0: Port device batadv1 added
[  423.876864][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3225'.
[  424.243996][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.402232][T16666] wireguard0: entered promiscuous mode
[  424.407967][T16673] netlink: 'syz.3.3229': attribute type 10 has an invalid length.
[  424.418619][T16673] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3229'.
[  424.428858][T16666] wireguard0: entered allmulticast mode
[  424.476959][T16673] batadv0: entered promiscuous mode
[  424.483323][T16673] bridge0: port 1(batadv0) entered blocking state
[  424.512752][T16676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3231'.
[  424.561307][T16673] bridge0: port 1(batadv0) entered disabled state
[  424.592642][T16673] batadv0: entered allmulticast mode
[  424.697956][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3231'.
[  424.745318][T16683] SET target dimension over the limit!
[  424.760389][T16683] netlink: 'syz.5.3233': attribute type 10 has an invalid length.
[  424.990852][ T3015] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  425.001501][ T3015] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  425.394826][T16691] pim6reg1: entered allmulticast mode
[  425.409456][T16691] pim6reg1: left allmulticast mode
[  425.782136][T16705] netlink: 'syz.4.3241': attribute type 13 has an invalid length.
[  425.880276][T16708] siw: device registration error -23
[  426.070287][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3244'.
[  427.386011][T16736] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.470344][T16747] pim6reg: entered allmulticast mode
[  427.590869][T16736] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.703047][T16760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3253'.
[  427.769611][T16764] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.3253'.
[  427.805272][T16763] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  427.875285][T16736] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.048332][T16736] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.207917][T16769] lo speed is unknown, defaulting to 1000
[  428.282571][T16769] lo speed is unknown, defaulting to 1000
[  428.541373][ T3015] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  428.572131][ T3015] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  428.650253][T16781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3258'.
[  428.668162][   T65] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  428.683091][T16781] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3258'.
[  428.757136][T16781] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  428.778893][T16781] gretap1: entered promiscuous mode
[  428.799658][   T65] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  428.923037][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3259'.
[  429.384408][T16797] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  429.738965][T16804] lo speed is unknown, defaulting to 1000
[  429.755701][T16804] lo speed is unknown, defaulting to 1000
[  430.142880][T16828] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  430.967820][T16853] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0
[  431.755230][T16887] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3286'.
[  431.768754][T16888] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3285'.
[  431.867471][T16888] lo speed is unknown, defaulting to 1000
[  431.882056][T16887] netlink: 'syz.6.3286': attribute type 5 has an invalid length.
[  431.933328][T16888] lo speed is unknown, defaulting to 1000
[  432.025308][T16893] tipc: Started in network mode
[  432.031251][T16893] tipc: Node identity 080211000001, cluster identity 4711
[  432.043227][T16893] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  432.059564][T16893] tipc: Resetting bearer <eth:syzkaller0>
[  432.461658][T16899] lo speed is unknown, defaulting to 1000
[  432.462850][T16901] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3292'.
[  432.773100][T16918] FAULT_INJECTION: forcing a failure.
[  432.773100][T16918] name failslab, interval 1, probability 0, space 0, times 0
[  432.805038][T16918] CPU: 0 UID: 0 PID: 16918 Comm: syz.2.3295 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) 
[  432.805074][T16918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  432.805092][T16918] Call Trace:
[  432.805102][T16918]  <TASK>
[  432.805113][T16918]  dump_stack_lvl+0x189/0x250
[  432.805154][T16918]  ? __pfx____ratelimit+0x10/0x10
[  432.805180][T16918]  ? __pfx_dump_stack_lvl+0x10/0x10
[  432.805215][T16918]  ? __pfx__printk+0x10/0x10
[  432.805246][T16918]  ? __pfx___might_resched+0x10/0x10
[  432.805279][T16918]  ? fs_reclaim_acquire+0x7d/0x100
[  432.805310][T16918]  should_fail_ex+0x414/0x560
[  432.805342][T16918]  should_failslab+0xa8/0x100
[  432.805367][T16918]  __kmalloc_cache_noprof+0x70/0x3d0
[  432.805387][T16918]  ? dev_ethtool+0x126/0x19b0
[  432.805424][T16918]  dev_ethtool+0x126/0x19b0
[  432.805458][T16918]  ? __lock_acquire+0xab9/0xd20
[  432.805494][T16918]  ? __pfx_dev_ethtool+0x10/0x10
[  432.805537][T16918]  ? dev_load+0x21/0x1f0
[  432.805571][T16918]  ? dev_load+0x21/0x1f0
[  432.805597][T16918]  dev_ioctl+0x392/0x1150
[  432.805626][T16918]  sock_do_ioctl+0x22c/0x300
[  432.805652][T16918]  ? __pfx_sock_do_ioctl+0x10/0x10
[  432.805671][T16918]  ? __lock_acquire+0xab9/0xd20
[  432.805717][T16918]  sock_ioctl+0x576/0x790
[  432.805741][T16918]  ? __pfx_sock_ioctl+0x10/0x10
[  432.805763][T16918]  ? __fget_files+0x2a/0x420
[  432.805784][T16918]  ? __fget_files+0x3a0/0x420
[  432.805806][T16918]  ? __fget_files+0x2a/0x420
[  432.805832][T16918]  ? bpf_lsm_file_ioctl+0x9/0x20
[  432.805862][T16918]  ? __pfx_sock_ioctl+0x10/0x10
[  432.805883][T16918]  __se_sys_ioctl+0xfc/0x170
[  432.805917][T16918]  do_syscall_64+0xfa/0x3b0
[  432.805942][T16918]  ? lockdep_hardirqs_on+0x9c/0x150
[  432.805966][T16918]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.805986][T16918]  ? clear_bhb_loop+0x60/0xb0
[  432.806013][T16918]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.806037][T16918] RIP: 0033:0x7f49bb58e929
[  432.806057][T16918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  432.806075][T16918] RSP: 002b:00007f49bc466038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  432.806098][T16918] RAX: ffffffffffffffda RBX: 00007f49bb7b5fa0 RCX: 00007f49bb58e929
[  432.806114][T16918] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 0000000000000005
[  432.806127][T16918] RBP: 00007f49bc466090 R08: 0000000000000000 R09: 0000000000000000
[  432.806140][T16918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  432.806152][T16918] R13: 0000000000000000 R14: 00007f49bb7b5fa0 R15: 00007fff274659e8
[  432.806185][T16918]  </TASK>
[  432.815850][T16899] lo speed is unknown, defaulting to 1000
[  433.090155][    T9] tipc: Node number set to 134418688
[  433.108218][T16920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3296'.
[  433.118857][T16920] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  433.146970][T16920] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  433.239373][T16920] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  433.535583][T16934] bridge0: port 2(gretap0) entered blocking state
[  433.542373][T16934] bridge0: port 2(gretap0) entered disabled state
[  433.550593][T16934] gretap0: entered allmulticast mode
[  433.756684][T16938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3302'.
[  433.773698][T16942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3303'.
[  434.120570][T16952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3305'.
[  434.138558][T16950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3305'.
[  434.165783][T16950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3305'.
[  434.380836][T16956] netlink: 'syz.3.3306': attribute type 1 has an invalid length.
[  434.651218][T16967] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3309'.
[  435.340037][T16994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3316'.
[  435.649983][T17001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3319'.
[  435.673102][T17002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3318'.
[  435.758447][T17002] syzkaller1: tun_chr_ioctl cmd 1074025677
[  435.770115][T17002] syzkaller1: Linktype set failed because interface is up
[  435.784253][ T5834] syzkaller1: tun_net_xmit 90
[  436.268826][T17013] lo speed is unknown, defaulting to 1000
[  436.311169][T17013] lo speed is unknown, defaulting to 1000
[  436.791237][T17038] FAULT_INJECTION: forcing a failure.
[  436.791237][T17038] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  436.851686][T17038] CPU: 0 UID: 0 PID: 17038 Comm: syz.5.3329 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) 
[  436.851721][T17038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  436.851735][T17038] Call Trace:
[  436.851743][T17038]  <TASK>
[  436.851753][T17038]  dump_stack_lvl+0x189/0x250
[  436.851792][T17038]  ? __pfx____ratelimit+0x10/0x10
[  436.851817][T17038]  ? __pfx_dump_stack_lvl+0x10/0x10
[  436.851850][T17038]  ? __pfx__printk+0x10/0x10
[  436.851874][T17038]  ? __might_fault+0xb0/0x130
[  436.851928][T17038]  should_fail_ex+0x414/0x560
[  436.851960][T17038]  _copy_from_iter+0x1db/0x16f0
[  436.851991][T17038]  ? trace_event_raw_event_bpf_trace_printk+0x187/0x260
[  436.852025][T17038]  ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10
[  436.852067][T17038]  ? __pfx__copy_from_iter+0x10/0x10
[  436.852102][T17038]  ? rcu_is_watching+0x15/0xb0
[  436.852147][T17038]  tun_get_user+0x20f/0x3ce0
[  436.852190][T17038]  ? aa_file_perm+0x11f/0xed0
[  436.852219][T17038]  ? __pfx_tun_get_user+0x10/0x10
[  436.852237][T17038]  ? aa_file_perm+0x11f/0xed0
[  436.852264][T17038]  ? aa_file_perm+0x3e7/0xed0
[  436.852308][T17038]  ? ref_tracker_alloc+0x318/0x460
[  436.852333][T17038]  ? __lock_acquire+0xab9/0xd20
[  436.852365][T17038]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  436.852398][T17038]  ? tun_get+0x1c/0x2f0
[  436.852424][T17038]  ? tun_get+0x1c/0x2f0
[  436.852442][T17038]  ? tun_get+0x1c/0x2f0
[  436.852467][T17038]  tun_chr_write_iter+0x113/0x200
[  436.852504][T17038]  vfs_write+0x548/0xa90
[  436.852543][T17038]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  436.852577][T17038]  ? __pfx_vfs_write+0x10/0x10
[  436.852622][T17038]  ? __fget_files+0x2a/0x420
[  436.852655][T17038]  ksys_write+0x145/0x250
[  436.852691][T17038]  ? __pfx_ksys_write+0x10/0x10
[  436.852720][T17038]  ? rcu_is_watching+0x15/0xb0
[  436.852758][T17038]  ? do_syscall_64+0xbe/0x3b0
[  436.852788][T17038]  do_syscall_64+0xfa/0x3b0
[  436.852812][T17038]  ? lockdep_hardirqs_on+0x9c/0x150
[  436.852836][T17038]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.852857][T17038]  ? clear_bhb_loop+0x60/0xb0
[  436.852884][T17038]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.852911][T17038] RIP: 0033:0x7fd11d98e929
[  436.852931][T17038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  436.852950][T17038] RSP: 002b:00007fd11b7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  436.852973][T17038] RAX: ffffffffffffffda RBX: 00007fd11dbb5fa0 RCX: 00007fd11d98e929
[  436.852988][T17038] RDX: 000000000000007a RSI: 00002000000006c0 RDI: 0000000000000004
[  436.853002][T17038] RBP: 00007fd11b7f6090 R08: 0000000000000000 R09: 0000000000000000
[  436.853015][T17038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  436.853028][T17038] R13: 0000000000000000 R14: 00007fd11dbb5fa0 R15: 00007fff7216dc58
[  436.853062][T17038]  </TASK>
[  437.145290][T17046] tipc: Resetting bearer <ib:ip6gre0>
[  437.294035][ T5841] Bluetooth: hci6: command tx timeout
[  437.932229][T17067] tipc: Started in network mode
[  437.938246][T17067] tipc: Node identity e26ed9e88889, cluster identity 4711
[  437.964807][T17067] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  438.132996][T17076] tipc: Resetting bearer <eth:syzkaller0>
[  438.153277][T17065] tipc: Disabling bearer <eth:syzkaller0>
[  438.324764][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.337706][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3341'.
[  438.540219][T17088] FAULT_INJECTION: forcing a failure.
[  438.540219][T17088] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  438.643191][T17088] CPU: 0 UID: 0 PID: 17088 Comm: syz.2.3343 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) 
[  438.643227][T17088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  438.643246][T17088] Call Trace:
[  438.643255][T17088]  <TASK>
[  438.643263][T17088]  dump_stack_lvl+0x189/0x250
[  438.643302][T17088]  ? __pfx____ratelimit+0x10/0x10
[  438.643328][T17088]  ? __pfx_dump_stack_lvl+0x10/0x10
[  438.643362][T17088]  ? __pfx__printk+0x10/0x10
[  438.643385][T17088]  ? __might_fault+0xb0/0x130
[  438.643431][T17088]  should_fail_ex+0x414/0x560
[  438.643461][T17088]  _copy_from_iter+0x1db/0x16f0
[  438.643493][T17088]  ? __lock_acquire+0xab9/0xd20
[  438.643532][T17088]  ? __pfx__copy_from_iter+0x10/0x10
[  438.643581][T17088]  tun_get_user+0x4ce/0x3ce0
[  438.643645][T17088]  ? aa_file_perm+0x11f/0xed0
[  438.643672][T17088]  ? __pfx_tun_get_user+0x10/0x10
[  438.643690][T17088]  ? aa_file_perm+0x11f/0xed0
[  438.643718][T17088]  ? aa_file_perm+0x3e7/0xed0
[  438.643760][T17088]  ? ref_tracker_alloc+0x318/0x460
[  438.643793][T17088]  ? __lock_acquire+0xab9/0xd20
[  438.643824][T17088]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  438.643859][T17088]  ? tun_get+0x1c/0x2f0
[  438.643885][T17088]  ? tun_get+0x1c/0x2f0
[  438.643904][T17088]  ? tun_get+0x1c/0x2f0
[  438.643928][T17088]  tun_chr_write_iter+0x113/0x200
[  438.643965][T17088]  vfs_write+0x548/0xa90
[  438.644003][T17088]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  438.644037][T17088]  ? __pfx_vfs_write+0x10/0x10
[  438.644080][T17088]  ? __fget_files+0x2a/0x420
[  438.644114][T17088]  ksys_write+0x145/0x250
[  438.644150][T17088]  ? __pfx_ksys_write+0x10/0x10
[  438.644180][T17088]  ? rcu_is_watching+0x15/0xb0
[  438.644218][T17088]  ? do_syscall_64+0xbe/0x3b0
[  438.644249][T17088]  do_syscall_64+0xfa/0x3b0
[  438.644273][T17088]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.644297][T17088]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.644318][T17088]  ? clear_bhb_loop+0x60/0xb0
[  438.644344][T17088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.644365][T17088] RIP: 0033:0x7f49bb58e929
[  438.644383][T17088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  438.644402][T17088] RSP: 002b:00007f49bc466038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  438.644424][T17088] RAX: ffffffffffffffda RBX: 00007f49bb7b5fa0 RCX: 00007f49bb58e929
[  438.644439][T17088] RDX: 000000000000007a RSI: 00002000000006c0 RDI: 0000000000000004
[  438.644452][T17088] RBP: 00007f49bc466090 R08: 0000000000000000 R09: 0000000000000000
[  438.644466][T17088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  438.644478][T17088] R13: 0000000000000000 R14: 00007f49bb7b5fa0 R15: 00007fff274659e8
[  438.644512][T17088]  </TASK>
[  439.409766][T17113] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3352'.
[  439.700256][T17124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3354'.
[  439.740021][T17124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3354'.
[  439.787644][T17124] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3354'.
[  439.842568][T17128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3354'.
[  439.911733][T17128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3354'.
[  439.928161][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3355'.
[  439.962574][T17128] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3354'.
[  440.121649][   T49] batman_adv: batadv0: IGMP Querier appeared
[  440.129622][   T49] batman_adv: batadv0: MLD Querier appeared
[  440.202531][T17132] lo speed is unknown, defaulting to 1000
[  440.243055][T17132] lo speed is unknown, defaulting to 1000
[  440.342196][T17153] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3359'.
[  440.587271][T17161] FAULT_INJECTION: forcing a failure.
[  440.587271][T17161] name failslab, interval 1, probability 0, space 0, times 0
[  440.632230][T17161] CPU: 1 UID: 0 PID: 17161 Comm: syz.4.3362 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) 
[  440.632266][T17161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  440.632281][T17161] Call Trace:
[  440.632289][T17161]  <TASK>
[  440.632299][T17161]  dump_stack_lvl+0x189/0x250
[  440.632337][T17161]  ? __pfx____ratelimit+0x10/0x10
[  440.632363][T17161]  ? __pfx_dump_stack_lvl+0x10/0x10
[  440.632397][T17161]  ? __pfx__printk+0x10/0x10
[  440.632424][T17161]  ? __pfx___might_resched+0x10/0x10
[  440.632456][T17161]  ? fs_reclaim_acquire+0x7d/0x100
[  440.632487][T17161]  should_fail_ex+0x414/0x560
[  440.632518][T17161]  should_failslab+0xa8/0x100
[  440.632547][T17161]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  440.632591][T17161]  ? __alloc_skb+0x112/0x2d0
[  440.632625][T17161]  __alloc_skb+0x112/0x2d0
[  440.632658][T17161]  alloc_skb_with_frags+0xca/0x890
[  440.632688][T17161]  ? __might_fault+0xb0/0x130
[  440.632736][T17161]  sock_alloc_send_pskb+0x857/0x990
[  440.632791][T17161]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  440.632839][T17161]  ? iov_iter_advance+0x8b/0x1c0
[  440.632874][T17161]  tun_get_user+0x9c3/0x3ce0
[  440.632917][T17161]  ? aa_file_perm+0x11f/0xed0
[  440.632946][T17161]  ? __pfx_tun_get_user+0x10/0x10
[  440.632965][T17161]  ? aa_file_perm+0x11f/0xed0
[  440.632992][T17161]  ? aa_file_perm+0x3e7/0xed0
[  440.633035][T17161]  ? ref_tracker_alloc+0x318/0x460
[  440.633060][T17161]  ? __lock_acquire+0xab9/0xd20
[  440.633092][T17161]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  440.633127][T17161]  ? tun_get+0x1c/0x2f0
[  440.633153][T17161]  ? tun_get+0x1c/0x2f0
[  440.633172][T17161]  ? tun_get+0x1c/0x2f0
[  440.633196][T17161]  tun_chr_write_iter+0x113/0x200
[  440.633234][T17161]  vfs_write+0x548/0xa90
[  440.633272][T17161]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  440.633306][T17161]  ? __pfx_vfs_write+0x10/0x10
[  440.633350][T17161]  ? __fget_files+0x2a/0x420
[  440.633385][T17161]  ksys_write+0x145/0x250
[  440.633421][T17161]  ? __pfx_ksys_write+0x10/0x10
[  440.633450][T17161]  ? rcu_is_watching+0x15/0xb0
[  440.633490][T17161]  ? do_syscall_64+0xbe/0x3b0
[  440.633520][T17161]  do_syscall_64+0xfa/0x3b0
[  440.633545][T17161]  ? lockdep_hardirqs_on+0x9c/0x150
[  440.633575][T17161]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.633597][T17161]  ? clear_bhb_loop+0x60/0xb0
[  440.633623][T17161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.633644][T17161] RIP: 0033:0x7fb48a78e929
[  440.633664][T17161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  440.633683][T17161] RSP: 002b:00007fb48b528038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  440.633707][T17161] RAX: ffffffffffffffda RBX: 00007fb48a9b5fa0 RCX: 00007fb48a78e929
[  440.633723][T17161] RDX: 000000000000007a RSI: 00002000000006c0 RDI: 0000000000000004
[  440.633736][T17161] RBP: 00007fb48b528090 R08: 0000000000000000 R09: 0000000000000000
[  440.633749][T17161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  440.633762][T17161] R13: 0000000000000000 R14: 00007fb48a9b5fa0 R15: 00007fffc359be18
[  440.633796][T17161]  </TASK>
[  442.428601][T17195] team_slave_1: entered allmulticast mode
[  442.776841][T17198] sch_tbf: burst 5 is lower than device bridge3 mtu (1514) !
[  443.263268][T17223] FAULT_INJECTION: forcing a failure.
[  443.263268][T17223] name failslab, interval 1, probability 0, space 0, times 0
[  443.302672][T17223] CPU: 1 UID: 0 PID: 17223 Comm: syz.2.3376 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) 
[  443.302706][T17223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  443.302719][T17223] Call Trace:
[  443.302727][T17223]  <TASK>
[  443.302736][T17223]  dump_stack_lvl+0x189/0x250
[  443.302773][T17223]  ? __pfx____ratelimit+0x10/0x10
[  443.302797][T17223]  ? __pfx_dump_stack_lvl+0x10/0x10
[  443.302831][T17223]  ? __pfx__printk+0x10/0x10
[  443.302861][T17223]  ? __pfx___might_resched+0x10/0x10
[  443.302893][T17223]  ? fs_reclaim_acquire+0x7d/0x100
[  443.302923][T17223]  should_fail_ex+0x414/0x560
[  443.302952][T17223]  should_failslab+0xa8/0x100
[  443.302977][T17223]  __kmalloc_noprof+0xcb/0x4f0
[  443.302996][T17223]  ? ethnl_default_notify+0x1af/0xb70
[  443.303030][T17223]  ethnl_default_notify+0x1af/0xb70
[  443.303069][T17223]  ? __pfx_ethnl_default_notify+0x10/0x10
[  443.303096][T17223]  ? __might_fault+0xb0/0x130
[  443.303146][T17223]  ? mutex_is_locked+0x17/0x50
[  443.303165][T17223]  ? rtnl_is_locked+0x15/0x20
[  443.303199][T17223]  ethtool_set_settings+0x245/0x2b0
[  443.303277][T17223]  ? __pfx_ethtool_set_settings+0x10/0x10
[  443.303332][T17223]  ? bpf_lsm_capable+0x9/0x20
[  443.303352][T17223]  ? security_capable+0x7e/0x2e0
[  443.303388][T17223]  dev_ethtool+0xcad/0x19b0
[  443.303444][T17223]  ? __pfx_dev_ethtool+0x10/0x10
[  443.303493][T17223]  ? dev_load+0x21/0x1f0
[  443.303520][T17223]  dev_ioctl+0x392/0x1150
[  443.303551][T17223]  sock_do_ioctl+0x22c/0x300
[  443.303577][T17223]  ? __pfx_sock_do_ioctl+0x10/0x10
[  443.303596][T17223]  ? __lock_acquire+0xab9/0xd20
[  443.303646][T17223]  sock_ioctl+0x576/0x790
[  443.303670][T17223]  ? __pfx_sock_ioctl+0x10/0x10
[  443.303693][T17223]  ? __fget_files+0x2a/0x420
[  443.303715][T17223]  ? __fget_files+0x3a0/0x420
[  443.303737][T17223]  ? __fget_files+0x2a/0x420
[  443.303764][T17223]  ? bpf_lsm_file_ioctl+0x9/0x20
[  443.303794][T17223]  ? __pfx_sock_ioctl+0x10/0x10
[  443.303815][T17223]  __se_sys_ioctl+0xfc/0x170
[  443.303849][T17223]  do_syscall_64+0xfa/0x3b0
[  443.303874][T17223]  ? lockdep_hardirqs_on+0x9c/0x150
[  443.303898][T17223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.303920][T17223]  ? clear_bhb_loop+0x60/0xb0
[  443.303947][T17223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.303967][T17223] RIP: 0033:0x7f49bb58e929
[  443.303987][T17223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  443.304006][T17223] RSP: 002b:00007f49bc466038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  443.304028][T17223] RAX: ffffffffffffffda RBX: 00007f49bb7b5fa0 RCX: 00007f49bb58e929
[  443.304044][T17223] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 0000000000000005
[  443.304058][T17223] RBP: 00007f49bc466090 R08: 0000000000000000 R09: 0000000000000000
[  443.304072][T17223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  443.304085][T17223] R13: 0000000000000000 R14: 00007f49bb7b5fa0 R15: 00007fff274659e8
[  443.304121][T17223]  </TASK>
[  443.951667][T17248] __nla_validate_parse: 3 callbacks suppressed
[  443.951693][T17248] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3378'.
[  443.968573][T17248] netlink: zone id is out of range
[  443.975231][T17248] netlink: get zone limit has 8 unknown bytes
[  444.065544][T17258] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3384'.
[  444.089537][T17258] netem: invalid attributes len -16
[  444.105897][T17258] netem: change failed
[  444.212701][T17264] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  444.323021][T17274] FAULT_INJECTION: forcing a failure.
[  444.323021][T17274] name failslab, interval 1, probability 0, space 0, times 0
[  444.358758][T17274] CPU: 1 UID: 0 PID: 17274 Comm: syz.3.3390 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) 
[  444.358795][T17274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  444.358810][T17274] Call Trace:
[  444.358819][T17274]  <TASK>
[  444.358828][T17274]  dump_stack_lvl+0x189/0x250
[  444.358867][T17274]  ? __pfx____ratelimit+0x10/0x10
[  444.358893][T17274]  ? __pfx_dump_stack_lvl+0x10/0x10
[  444.358927][T17274]  ? __pfx__printk+0x10/0x10
[  444.358958][T17274]  ? __pfx___might_resched+0x10/0x10
[  444.358996][T17274]  should_fail_ex+0x414/0x560
[  444.359026][T17274]  should_failslab+0xa8/0x100
[  444.359051][T17274]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  444.359086][T17274]  ? ethnl_bitset32_size+0x3a/0x280
[  444.359113][T17274]  ? __alloc_skb+0x112/0x2d0
[  444.359146][T17274]  __alloc_skb+0x112/0x2d0
[  444.359179][T17274]  ethnl_default_notify+0x5da/0xb70
[  444.359218][T17274]  ? __pfx_ethnl_default_notify+0x10/0x10
[  444.359243][T17274]  ? __might_fault+0xb0/0x130
[  444.359300][T17274]  ? mutex_is_locked+0x17/0x50
[  444.359318][T17274]  ? rtnl_is_locked+0x15/0x20
[  444.359350][T17274]  ethtool_set_settings+0x245/0x2b0
[  444.359383][T17274]  ? __pfx_ethtool_set_settings+0x10/0x10
[  444.359436][T17274]  ? bpf_lsm_capable+0x9/0x20
[  444.359454][T17274]  ? security_capable+0x7e/0x2e0
[  444.359489][T17274]  dev_ethtool+0xcad/0x19b0
[  444.359535][T17274]  ? __pfx_dev_ethtool+0x10/0x10
[  444.359585][T17274]  ? dev_load+0x21/0x1f0
[  444.359611][T17274]  dev_ioctl+0x392/0x1150
[  444.359641][T17274]  sock_do_ioctl+0x22c/0x300
[  444.359674][T17274]  ? __pfx_sock_do_ioctl+0x10/0x10
[  444.359694][T17274]  ? __lock_acquire+0xab9/0xd20
[  444.359743][T17274]  sock_ioctl+0x576/0x790
[  444.359767][T17274]  ? __pfx_sock_ioctl+0x10/0x10
[  444.359789][T17274]  ? __fget_files+0x2a/0x420
[  444.359812][T17274]  ? __fget_files+0x3a0/0x420
[  444.359832][T17274]  ? __fget_files+0x2a/0x420
[  444.359860][T17274]  ? bpf_lsm_file_ioctl+0x9/0x20
[  444.359890][T17274]  ? __pfx_sock_ioctl+0x10/0x10
[  444.359911][T17274]  __se_sys_ioctl+0xfc/0x170
[  444.359945][T17274]  do_syscall_64+0xfa/0x3b0
[  444.359970][T17274]  ? lockdep_hardirqs_on+0x9c/0x150
[  444.360000][T17274]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.360021][T17274]  ? clear_bhb_loop+0x60/0xb0
[  444.360048][T17274]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.360069][T17274] RIP: 0033:0x7f89c398e929
[  444.360088][T17274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  444.360107][T17274] RSP: 002b:00007f89c487b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  444.360130][T17274] RAX: ffffffffffffffda RBX: 00007f89c3bb5fa0 RCX: 00007f89c398e929
[  444.360146][T17274] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 0000000000000005
[  444.360160][T17274] RBP: 00007f89c487b090 R08: 0000000000000000 R09: 0000000000000000
[  444.360173][T17274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  444.360185][T17274] R13: 0000000000000000 R14: 00007f89c3bb5fa0 R15: 00007ffc6bda0178
[  444.360219][T17274]  </TASK>
[  444.365452][T17275] netlink: 'syz.2.3388': attribute type 1 has an invalid length.
[  444.752576][T17270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3388'.
[  444.814240][T17281] veth3: entered promiscuous mode
[  445.397786][T17316] lo: entered promiscuous mode
[  445.443233][T17316] tunl0: entered promiscuous mode
[  445.542698][T17316] gre0: entered promiscuous mode
[  445.648641][T17316] gretap0: entered promiscuous mode
[  445.676330][T17316] erspan0: entered promiscuous mode
[  445.695735][T17316] ip_vti0: entered promiscuous mode
[  445.731434][T17316] ip6_vti0: entered promiscuous mode
[  445.767525][T17316] sit0: entered promiscuous mode
[  445.827018][T17316] ip6tnl0: entered promiscuous mode
[  445.857068][T17316] ip6gre0: entered promiscuous mode
[  445.886644][T17316] syz_tun: entered promiscuous mode
[  445.900804][T17316] ip6gretap0: entered promiscuous mode
[  445.939580][T17316] bridge0: entered promiscuous mode
[  445.957948][T17316] vcan0: entered promiscuous mode
[  445.985905][T17316] bond0: entered promiscuous mode
[  446.034025][T17316] bond_slave_0: entered promiscuous mode
[  446.075041][T17316] bond_slave_1: entered promiscuous mode
[  446.116773][T17316] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.166532][T17316] team0: entered promiscuous mode
[  446.171637][T17316] team_slave_0: entered promiscuous mode
[  446.239469][T17316] team_slave_1: entered promiscuous mode
[  446.295214][T17316] batadv1: entered promiscuous mode
[  446.355946][T17316] 8021q: adding VLAN 0 to HW filter on device team0
[  446.391568][T17316] dummy0: entered promiscuous mode
[  446.427133][T17316] nlmon0: entered promiscuous mode
[  446.475131][T17316] caif0: entered promiscuous mode
[  446.480229][T17316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  446.628558][T17349] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode
[  446.637717][T17349] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode
[  446.759933][T17337] syzkaller1: entered promiscuous mode
[  446.790863][T17337] syzkaller1: entered allmulticast mode
[  447.120438][T17364] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  447.168265][T17364] tipc: Resetting bearer <eth:syzkaller0>
[  447.196757][T17363] tipc: Disabling bearer <eth:syzkaller0>
[  447.213335][T17369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3417'.
[  447.231408][T17369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3417'.
[  447.240964][T17369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3417'.
[  447.268735][T17371] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3416'.
[  447.288840][T17370] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3416'.
[  447.399208][T17374] xt_bpf: check failed: parse error
[  447.443696][ T5838] Bluetooth: hci4: command 0x0406 tx timeout
[  447.488233][T17381] netlink: 'syz.6.3416': attribute type 1 has an invalid length.
[  447.775269][T17392] syzkaller0: refused to change device tx_queue_len
[  447.806846][T17394] rdma_rxe: rxe_newlink: failed to add ipvlan1
[  448.135967][T17408] lo speed is unknown, defaulting to 1000
[  448.157243][T17403] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.198775][T17403] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.271591][T17408] lo speed is unknown, defaulting to 1000
[  448.312563][T17400] lo speed is unknown, defaulting to 1000
[  448.606581][T17412] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  448.625291][T17412] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  448.768266][T17414] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  448.841902][ T1311] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  448.852270][ T1311] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  448.910154][T17421] tipc: Started in network mode
[  448.915318][T17421] tipc: Node identity 86bf807ee366, cluster identity 4711
[  448.922723][T17421] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  448.941235][ T1311] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  448.958672][ T1311] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  448.990304][T17400] lo speed is unknown, defaulting to 1000
[  448.996537][T17421] syzkaller0: entered promiscuous mode
[  448.996561][T17421] syzkaller0: entered allmulticast mode
[  449.009531][T17427] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3435'.
[  449.087311][T17421] tipc: Resetting bearer <eth:syzkaller0>
[  449.103186][T17420] tipc: Resetting bearer <eth:syzkaller0>
[  449.143156][T17420] tipc: Disabling bearer <eth:syzkaller0>
[  449.155556][T17431] netlink: 'syz.5.3436': attribute type 2 has an invalid length.
[  449.164148][T17431] netlink: 'syz.5.3436': attribute type 1 has an invalid length.
[  449.171972][T17431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3436'.
[  449.816482][T17453] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  449.825751][T14867] IPVS: starting estimator thread 0...
[  449.834190][T17455] netlink: 'syz.6.3443': attribute type 1 has an invalid length.
[  449.842207][T17455] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.3443'.
[  449.916908][T17456] IPVS: using max 26 ests per chain, 62400 per kthread
[  450.571536][T17471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3448'.
[  450.663000][T17475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3450'.
[  450.720848][T17479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3451'.
[  450.809570][T17479] 8021q: adding VLAN 0 to HW filter on device bond1
[  450.867867][T17485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3453'.
[  450.905799][T17479] 8021q: adding VLAN 0 to HW filter on device bond1
[  450.921432][T17483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3451'.
[  450.949473][T17479] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  450.987913][T17479] bond1: (slave vti0): Error -95 calling set_mac_address
[  451.134123][T17490] delete_channel: no stack
[  451.184663][T17487] lo speed is unknown, defaulting to 1000
[  451.206049][T17487] lo speed is unknown, defaulting to 1000
[  451.316680][T17501] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3457'.
[  451.547819][T17507] lo speed is unknown, defaulting to 1000
[  451.852554][T17507] lo speed is unknown, defaulting to 1000
[  452.203128][T17533] xt_l2tp: wrong L2TP version: 0
[  452.372693][T17519] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3459'.
[  452.434450][T17536] batadv_slave_1: entered promiscuous mode
[  452.442418][T17534] netlink: 'syz.4.3459': attribute type 12 has an invalid length.
[  452.520400][T17519] lo speed is unknown, defaulting to 1000
[  452.550850][T17519] lo speed is unknown, defaulting to 1000
[  452.931144][T17542] lo speed is unknown, defaulting to 1000
[  453.486657][T17542] lo speed is unknown, defaulting to 1000
[  454.037400][T17563] lo speed is unknown, defaulting to 1000
[  454.046370][T17569] netlink: 'syz.4.3475': attribute type 11 has an invalid length.
[  454.071706][T17569] __nla_validate_parse: 1 callbacks suppressed
[  454.071725][T17569] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3475'.
[  454.106831][T17563] lo speed is unknown, defaulting to 1000
[  455.040312][T17594] xt_CT: You must specify a L4 protocol and not use inversions on it
[  455.364579][T17599] lo speed is unknown, defaulting to 1000
[  455.432019][T17599] lo speed is unknown, defaulting to 1000
[  455.545290][T17613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3489'.
[  455.937897][T17624] sctp: [Deprecated]: syz.2.3493 (pid 17624) Use of int in maxseg socket option.
[  455.937897][T17624] Use struct sctp_assoc_value instead
[  456.352186][T17630] batman_adv: batadv0: Adding interface: ip6gretap1
[  456.390066][T17630] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  456.429166][T17630] batman_adv: batadv0: Interface activated: ip6gretap1
[  457.765264][T17677] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3506'.
[  457.918809][T17677] bridge0: entered promiscuous mode
[  458.168261][T17689] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3508'.
[  458.481285][T17704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  458.491743][T17704] netlink: 'syz.6.3512': attribute type 4 has an invalid length.
[  458.567315][T17702] lo speed is unknown, defaulting to 1000
[  458.585984][T17702] lo speed is unknown, defaulting to 1000
[  459.419076][T17731] netlink: 'syz.4.3524': attribute type 1 has an invalid length.
[  459.555703][T17739] bond1: (slave bridge2): making interface the new active one
[  459.567582][T17739] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  459.993475][T17755] netlink: 'syz.5.3530': attribute type 1 has an invalid length.
[  460.279205][   T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  460.301538][T17764] bond0: Master is either lo or non-ether device
[  460.448036][   T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  460.449499][T17775] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  460.474638][   T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  460.510194][T17765] lo speed is unknown, defaulting to 1000
[  460.513588][   T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  460.537395][T17777] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  460.548657][T17778] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  460.565604][T17765] lo speed is unknown, defaulting to 1000
[  460.583867][T17775] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3536'.
[  460.615159][T17780] 8021q: adding VLAN 0 to HW filter on device batadv2
[  460.635826][T17780] batadv2: entered promiscuous mode
[  460.654315][T17780] team0: Port device batadv2 added
[  461.231267][T17802] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  461.261430][T17802] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  461.531021][T17802] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.610311][T17814] bridge3: entered promiscuous mode
[  461.636668][T17814] bridge3: entered allmulticast mode
[  461.662012][T17814] team0: Port device bridge3 added
[  461.767286][T17802] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.941924][T17802] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.129011][T17802] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.178402][T17833] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  462.290163][T17838] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3555'.
[  462.315907][T17838] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3555'.
[  462.468013][T17232] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.725745][T17232] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.804032][T17232] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.882684][T17234] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.066815][T17861] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  463.201449][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3564'.
[  463.256027][T17872] netlink: 'syz.3.3564': attribute type 1 has an invalid length.
[  463.274466][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3564'.
[  463.340549][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3564'.
[  463.371921][T17872] 8021q: adding VLAN 0 to HW filter on device bond6
[  463.379821][T17865] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3564'.
[  463.452060][T17866] bond6: (slave ip6erspan0): making interface the new active one
[  463.469215][T17866] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link
[  463.515131][T17877] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  463.537945][T17877] tipc: Resetting bearer <eth:syzkaller0>
[  463.548342][T17876] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3566'.
[  463.650088][T17875] tipc: Disabling bearer <eth:syzkaller0>
[  463.953306][T17893] geneve2: entered promiscuous mode
[  464.000996][T17893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3574'.
[  464.012824][T17893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3574'.
[  464.225168][T17910] No such timeout policy "syz0"
[  464.229835][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805636cc00: rx timeout, send abort
[  464.599070][T17919] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20000
[  464.738408][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805636cc00: abort rx timeout. Force session deactivation
[  464.793383][T17921] syzkaller0: entered promiscuous mode
[  464.831742][T17921] syzkaller0: entered allmulticast mode
[  465.214491][T17951] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  467.123902][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.337028][T17941] lo speed is unknown, defaulting to 1000
[  467.358555][T17941] lo speed is unknown, defaulting to 1000
[  467.457041][T17963] __nla_validate_parse: 3 callbacks suppressed
[  467.457063][T17963] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3594'.
[  467.604842][ T5910] page_pool_release_retry() stalled pool shutdown: id 101, 1 inflight 60 sec
[  467.672189][T17971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3598'.
[  467.872947][T17970] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  468.142626][T17984] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  468.625112][T18002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3605'.
[  468.677551][T18004] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3606'.
[  468.709762][T17994] 8021q: adding VLAN 0 to HW filter on device bond7
[  468.718047][T17994] bridge0: port 3(bond7) entered blocking state
[  468.731234][T17994] bridge0: port 3(bond7) entered disabled state
[  468.747452][T17994] bond7: entered allmulticast mode
[  468.757330][T17994] bond7: entered promiscuous mode
[  468.884246][T18009] FAULT_INJECTION: forcing a failure.
[  468.884246][T18009] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  468.906411][T18009] CPU: 1 UID: 0 PID: 18009 Comm: syz.4.3608 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) 
[  468.906447][T18009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  468.906462][T18009] Call Trace:
[  468.906472][T18009]  <TASK>
[  468.906492][T18009]  dump_stack_lvl+0x189/0x250
[  468.906530][T18009]  ? __pfx____ratelimit+0x10/0x10
[  468.906553][T18009]  ? __pfx_dump_stack_lvl+0x10/0x10
[  468.906583][T18009]  ? __pfx__printk+0x10/0x10
[  468.906605][T18009]  ? __might_fault+0xb0/0x130
[  468.906647][T18009]  should_fail_ex+0x414/0x560
[  468.906676][T18009]  _copy_from_user+0x2d/0xb0
[  468.906696][T18009]  do_sock_getsockopt+0x1cd/0x650
[  468.906728][T18009]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  468.906755][T18009]  ? do_syscall_64+0x40/0x3b0
[  468.906777][T18009]  ? __fget_files+0x3a0/0x420
[  468.906798][T18009]  ? __fget_files+0x2a/0x420
[  468.906825][T18009]  __x64_sys_getsockopt+0x1a5/0x250
[  468.906852][T18009]  ? do_syscall_64+0x40/0x3b0
[  468.906877][T18009]  ? do_syscall_64+0x40/0x3b0
[  468.906903][T18009]  do_syscall_64+0xfa/0x3b0
[  468.906925][T18009]  ? lockdep_hardirqs_on+0x9c/0x150
[  468.906947][T18009]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.906967][T18009]  ? clear_bhb_loop+0x60/0xb0
[  468.906991][T18009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.907010][T18009] RIP: 0033:0x7fb48a78e929
[  468.907029][T18009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  468.907046][T18009] RSP: 002b:00007fb48b528038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  468.907069][T18009] RAX: ffffffffffffffda RBX: 00007fb48a9b5fa0 RCX: 00007fb48a78e929
[  468.907083][T18009] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003
[  468.907095][T18009] RBP: 00007fb48b528090 R08: 0000200000000040 R09: 0000000000000000
[  468.907109][T18009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  468.907122][T18009] R13: 0000000000000000 R14: 00007fb48a9b5fa0 R15: 00007fffc359be18
[  468.907152][T18009]  </TASK>
[  468.968095][T17993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3604'.
[  469.147456][T17993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3604'.
[  469.202804][T18011] vlan2: entered promiscuous mode
[  469.209414][T18011] team0: entered promiscuous mode
[  469.326153][T17993] dummy0: entered promiscuous mode
[  469.335617][T17993] team0: entered promiscuous mode
[  469.342259][T17993] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  469.355946][T17993] Cannot create hsr debugfs directory
[  469.362515][T17993] hsr0: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  469.386765][T17993] hsr0: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  469.409075][T17993] bridge0: port 4(hsr0) entered blocking state
[  469.422448][T17993] bridge0: port 4(hsr0) entered disabled state
[  469.431470][T17993] hsr0: entered allmulticast mode
[  469.442927][T17993] dummy0: entered allmulticast mode
[  469.460794][T17993] team0: entered allmulticast mode
[  469.489626][T17993] hsr0: entered promiscuous mode
[  469.710842][T18025] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  470.097086][T18035] lo speed is unknown, defaulting to 1000
[  470.155268][T18035] lo speed is unknown, defaulting to 1000
[  470.584941][T18049] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3620'.
[  470.646207][T18052] FAULT_INJECTION: forcing a failure.
[  470.646207][T18052] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  470.707291][T18052] CPU: 1 UID: 0 PID: 18052 Comm: syz.3.3621 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) 
[  470.707332][T18052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  470.707345][T18052] Call Trace:
[  470.707354][T18052]  <TASK>
[  470.707363][T18052]  dump_stack_lvl+0x189/0x250
[  470.707402][T18052]  ? __pfx____ratelimit+0x10/0x10
[  470.707427][T18052]  ? __pfx_dump_stack_lvl+0x10/0x10
[  470.707462][T18052]  ? __pfx__printk+0x10/0x10
[  470.707485][T18052]  ? __might_fault+0xb0/0x130
[  470.707533][T18052]  should_fail_ex+0x414/0x560
[  470.707566][T18052]  _copy_from_user+0x2d/0xb0
[  470.707587][T18052]  sctp_getsockopt_peeloff_flags+0xc4/0x230
[  470.707618][T18052]  ? __pfx_sctp_getsockopt_peeloff_flags+0x10/0x10
[  470.707657][T18052]  sctp_getsockopt+0x3ab/0xb60
[  470.707690][T18052]  do_sock_getsockopt+0x360/0x650
[  470.707726][T18052]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  470.707754][T18052]  ? do_syscall_64+0x40/0x3b0
[  470.707779][T18052]  ? __fget_files+0x3a0/0x420
[  470.707802][T18052]  ? __fget_files+0x2a/0x420
[  470.707835][T18052]  __x64_sys_getsockopt+0x1a5/0x250
[  470.707864][T18052]  ? do_syscall_64+0x40/0x3b0
[  470.707891][T18052]  ? do_syscall_64+0x40/0x3b0
[  470.707922][T18052]  do_syscall_64+0xfa/0x3b0
[  470.707946][T18052]  ? lockdep_hardirqs_on+0x9c/0x150
[  470.707971][T18052]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.707992][T18052]  ? clear_bhb_loop+0x60/0xb0
[  470.708019][T18052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.708039][T18052] RIP: 0033:0x7f89c398e929
[  470.708058][T18052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  470.708079][T18052] RSP: 002b:00007f89c487b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  470.708103][T18052] RAX: ffffffffffffffda RBX: 00007f89c3bb5fa0 RCX: 00007f89c398e929
[  470.708119][T18052] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003
[  470.708132][T18052] RBP: 00007f89c487b090 R08: 0000200000000040 R09: 0000000000000000
[  470.708146][T18052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  470.708159][T18052] R13: 0000000000000000 R14: 00007f89c3bb5fa0 R15: 00007ffc6bda0178
[  470.708194][T18052]  </TASK>
[  471.041210][T18046] xt_CT: No such helper "snmp"
[  471.310870][T18069] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3627'.
[  471.562620][T18074] batadv_slave_1: entered promiscuous mode
[  471.668685][T18076] bridge2: entered promiscuous mode
[  471.699754][T18076] bridge2: entered allmulticast mode
[  471.706933][T18081] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3629'.
[  471.758727][T18073] batadv_slave_1: left promiscuous mode
[  471.847508][T18087] xt_hashlimit: size too large, truncated to 1048576
[  471.849566][T18090] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3631'.
[  471.866585][T18087] xt_hashlimit: max too large, truncated to 1048576
[  472.076196][T18098] FAULT_INJECTION: forcing a failure.
[  472.076196][T18098] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  472.113949][T18098] CPU: 0 UID: 0 PID: 18098 Comm: syz.4.3635 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) 
[  472.113981][T18098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  472.113994][T18098] Call Trace:
[  472.114002][T18098]  <TASK>
[  472.114041][T18098]  dump_stack_lvl+0x189/0x250
[  472.114080][T18098]  ? __pfx____ratelimit+0x10/0x10
[  472.114110][T18098]  ? __pfx_dump_stack_lvl+0x10/0x10
[  472.114145][T18098]  ? __pfx__printk+0x10/0x10
[  472.114183][T18098]  should_fail_ex+0x414/0x560
[  472.114215][T18098]  _copy_to_user+0x31/0xb0
[  472.114239][T18098]  simple_read_from_buffer+0xe1/0x170
[  472.114265][T18098]  proc_fail_nth_read+0x1df/0x250
[  472.114294][T18098]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  472.114322][T18098]  ? rw_verify_area+0x258/0x650
[  472.114352][T18098]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  472.114379][T18098]  vfs_read+0x1fd/0x980
[  472.114418][T18098]  ? __pfx___mutex_lock+0x10/0x10
[  472.114445][T18098]  ? __pfx_vfs_read+0x10/0x10
[  472.114478][T18098]  ? __fget_files+0x2a/0x420
[  472.114507][T18098]  ? __fget_files+0x3a0/0x420
[  472.114528][T18098]  ? __fget_files+0x2a/0x420
[  472.114562][T18098]  ksys_read+0x145/0x250
[  472.114598][T18098]  ? __pfx_ksys_read+0x10/0x10
[  472.114626][T18098]  ? rcu_is_watching+0x15/0xb0
[  472.114666][T18098]  ? do_syscall_64+0xbe/0x3b0
[  472.114697][T18098]  do_syscall_64+0xfa/0x3b0
[  472.114721][T18098]  ? lockdep_hardirqs_on+0x9c/0x150
[  472.114745][T18098]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.114766][T18098]  ? clear_bhb_loop+0x60/0xb0
[  472.114793][T18098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.114813][T18098] RIP: 0033:0x7fb48a78d33c
[  472.114832][T18098] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  472.114850][T18098] RSP: 002b:00007fb48b528030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  472.114874][T18098] RAX: ffffffffffffffda RBX: 00007fb48a9b5fa0 RCX: 00007fb48a78d33c
[  472.114890][T18098] RDX: 000000000000000f RSI: 00007fb48b5280a0 RDI: 0000000000000005
[  472.114903][T18098] RBP: 00007fb48b528090 R08: 0000000000000000 R09: 0000000000000000
[  472.114917][T18098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  472.114929][T18098] R13: 0000000000000000 R14: 00007fb48a9b5fa0 R15: 00007fffc359be18
[  472.114965][T18098]  </TASK>
[  473.051646][T18139] __nla_validate_parse: 5 callbacks suppressed
[  473.051669][T18139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3647'.
[  473.529981][T18162] netlink: 120 bytes leftover after parsing attributes in process `syz.6.3654'.
[  473.920157][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3661'.
[  474.018121][T18182] netlink: 'syz.5.3661': attribute type 10 has an invalid length.
[  474.043378][T18182] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3661'.
[  474.048754][T18187] netlink: 'syz.2.3664': attribute type 3 has an invalid length.
[  474.114686][T18182] batman_adv: batadv0: Adding interface: ÿÿÿÿÿÿ
[  474.134720][T18182] batman_adv: batadv0: The MTU of interface ÿÿÿÿÿÿ is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.199776][T18182] batman_adv: batadv0: Interface activated: ÿÿÿÿÿÿ
[  474.249099][T18192] gtp0: entered promiscuous mode
[  474.263065][T18192] gtp0: entered allmulticast mode
[  474.554804][T18209] block nbd1: server does not support multiple connections per device.
[  474.591563][T18209] block nbd1: shutting down sockets
[  474.697001][T18214] lo speed is unknown, defaulting to 1000
[  474.718811][T18221] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3673'.
[  474.749134][T18214] lo speed is unknown, defaulting to 1000
[  474.976621][T18232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3677'.
[  474.990446][T18232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3677'.
[  475.090344][T18234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3677'.
[  475.165386][T18238] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3679'.
[  475.905749][T18258] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input9
[  476.542531][T18279] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  477.157253][T18297] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  477.266847][T18304] netlink: 'syz.5.3698': attribute type 1 has an invalid length.
[  477.276986][T18305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3698'.
[  477.617737][T18320] netlink: 'syz.6.3700': attribute type 16 has an invalid length.
[  477.654162][T18320] netlink: 'syz.6.3700': attribute type 17 has an invalid length.
[  477.732620][T18324] IPv6: NLM_F_REPLACE set, but no existing node found!
[  478.355238][T18320] tipc: Resetting bearer <eth:syzkaller0>
[  478.514216][T18354] netlink: 'syz.3.3707': attribute type 10 has an invalid length.
[  478.644457][   T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  478.664251][   T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  478.707746][   T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  478.721040][   T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  478.813276][T18349] lo speed is unknown, defaulting to 1000
[  478.885195][T18349] lo speed is unknown, defaulting to 1000
[  478.892979][T18366] __nla_validate_parse: 3 callbacks suppressed
[  478.893015][T18366] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3710'.
[  478.914665][T18347] lo speed is unknown, defaulting to 1000
[  478.973119][T18371] netlink: 'syz.2.3711': attribute type 3 has an invalid length.
[  479.335228][T18378] lo speed is unknown, defaulting to 1000
[  479.596695][T18390] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3715'.
[  479.658610][T18347] lo speed is unknown, defaulting to 1000
[  479.909161][T18394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3716'.
[  479.919989][T18394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3716'.
[  480.148007][T18378] lo speed is unknown, defaulting to 1000
[  480.339562][T18401] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3719'.
[  481.620171][T18437] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3728'.
[  481.668671][T18438] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  481.709855][T18438] syzkaller0: entered promiscuous mode
[  481.746157][T18438] syzkaller0: entered allmulticast mode
[  481.873321][T18445] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  481.921752][T18442] tipc: Resetting bearer <eth:syzkaller0>
[  482.006022][T18436] tipc: Resetting bearer <eth:syzkaller0>
[  482.084759][T18436] tipc: Disabling bearer <eth:syzkaller0>
[  482.485745][T18471] @: renamed from vlan0
[  482.662212][T18477] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.772336][T18477] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.007781][T18477] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.035983][T18489] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3747'.
[  483.073562][T18497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3749'.
[  483.151458][T18489] bond1: entered promiscuous mode
[  483.160619][T18489] 8021q: adding VLAN 0 to HW filter on device bond1
[  483.419127][T18489] bond1 (unregistering): Released all slaves
[  483.507295][T18477] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.596890][T18495] lo speed is unknown, defaulting to 1000
[  483.607030][T18495] lo speed is unknown, defaulting to 1000
[  483.857046][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  483.932281][ T1311] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  483.988131][T18518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3753'.
[  484.036377][   T65] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  484.101548][   T65] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  484.253355][T18523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3756'.
[  484.301788][T18523] netlink: 'syz.4.3756': attribute type 1 has an invalid length.
[  484.455443][T18531] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  484.849695][T18548] netlink: 'syz.5.3764': attribute type 22 has an invalid length.
[  485.263032][T18564] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  485.386287][T18563] tipc: Resetting bearer <eth:syzkaller0>
[  485.537160][T18561] tipc: Disabling bearer <eth:syzkaller0>
[  485.628553][T18571] bridge_slave_0: left allmulticast mode
[  485.655389][T18571] bridge_slave_0: left promiscuous mode
[  485.661475][T18571] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.752216][T18571] bridge_slave_1: left allmulticast mode
[  485.768610][T18580] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3773'.
[  485.780954][T18571] bridge_slave_1: left promiscuous mode
[  485.791306][T18571] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.830478][T18571] bond0: (slave bond_slave_0): Releasing backup interface
[  485.847009][T18571] bond_slave_0: left promiscuous mode
[  485.873773][T18571] bond0: (slave bond_slave_1): Releasing backup interface
[  485.888453][T18571] bond_slave_1: left promiscuous mode
[  485.907471][T18571] team_slave_0: left promiscuous mode
[  485.928444][T18571] team0: Failed to send options change via netlink (err -105)
[  485.936868][T18571] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  485.947483][T18571] team0: Port device team_slave_0 removed
[  485.960750][T18571] team_slave_1: left promiscuous mode
[  485.968396][T18571] team0: Failed to send options change via netlink (err -105)
[  485.977466][T18571] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  485.987713][T18571] team0: Port device team_slave_1 removed
[  485.995160][T18571] batman_adv: batadv0: Removing interface: batadv_slave_1
[  486.005113][T18571] batadv1: left promiscuous mode
[  486.011728][T18571] team0: Failed to send options change via netlink (err -105)
[  486.020568][T18571] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  486.031565][T18571] team0: Port device batadv1 removed
[  486.039954][T18571] bond1: (slave bridge2): Releasing active interface
[  486.052884][T18571] batadv2: left promiscuous mode
[  486.075705][T18571] team0: Failed to send options change via netlink (err -105)
[  486.085463][T18571] team0: Failed to send port change of device batadv2 via netlink (err -105)
[  486.095496][T18571] team0: Port device batadv2 removed
[  486.104980][T18571] team0: Failed to send options change via netlink (err -105)
[  486.112881][T18571] team0: Failed to send port change of device bridge3 via netlink (err -105)
[  486.122589][T18571] team0: Port device bridge3 removed
[  486.142749][T18588] netlink: 'syz.3.3775': attribute type 3 has an invalid length.
[  486.186767][T18587] tc_dump_action: action bad kind
[  487.036698][T18595] netlink: 'syz.5.3778': attribute type 1 has an invalid length.
[  487.064645][T18595] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3778'.
[  487.344914][T18613] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3785'.
[  487.389469][T18616] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3787'.
[  487.417369][T18618] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  487.446707][T18614] tipc: Resetting bearer <eth:syzkaller0>
[  487.501256][T18611] tipc: Disabling bearer <eth:syzkaller0>
[  487.633666][T18628] tipc: New replicast peer: 255.255.255.255
[  487.640452][T18628] tipc: Enabled bearer <udp:syz2>, priority 6
[  487.654298][T18630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3789'.
[  487.663365][T18630] tipc: Disabling bearer <udp:syz2>
[  487.745048][T18636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3791'.
[  487.778295][T18636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3791'.
[  487.988418][T18645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3795'.
[  488.648554][T18676] tc_dump_action: action bad kind
[  489.029023][T18695] netlink: 'syz.5.3811': attribute type 10 has an invalid length.
[  489.040134][T18695] team0: Port device dummy0 added
[  489.051494][T18699] __nla_validate_parse: 4 callbacks suppressed
[  489.051516][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3813'.
[  489.382691][T18711] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3819'.
[  489.590822][T18724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3823'.
[  489.705204][T18728] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3823'.
[  489.743186][T18728] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3823'.
[  489.936227][T18741] lo speed is unknown, defaulting to 1000
[  489.948275][T18741] lo speed is unknown, defaulting to 1000
[  490.097883][T18751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3832'.
[  490.781228][T18771] netlink: 'syz.2.3837': attribute type 12 has an invalid length.
[  490.814133][T18771] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3837'.
[  491.211444][T18785] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  491.566967][T18804] netlink: 'syz.6.3847': attribute type 32 has an invalid length.
[  491.603580][T18804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3847'.
[  491.663862][T18804] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  491.806040][T18802] lo speed is unknown, defaulting to 1000
[  491.867202][T18802] lo speed is unknown, defaulting to 1000
[  491.904836][T18797] lo speed is unknown, defaulting to 1000
[  491.961728][T18807] lo speed is unknown, defaulting to 1000
[  492.153314][T18814] tap0: tun_chr_ioctl cmd 1074025677
[  492.194043][T18814] tap0: linktype set to 825
[  492.323341][T18819] ip6tnl1: entered promiscuous mode
[  492.334340][T18819] ip6tnl1: entered allmulticast mode
[  492.517009][T18797] lo speed is unknown, defaulting to 1000
[  492.581497][T18806] netlink: 'syz.2.3848': attribute type 3 has an invalid length.
[  493.174036][T18807] lo speed is unknown, defaulting to 1000
[  493.524625][T18839] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µ
â侦¸ÑKc'A¥»–
[  493.642662][T18844] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3857'.
[  494.057703][T18859] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0
[  494.664628][T18874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3863'.
[  494.835021][T18880] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3866'.
[  494.854129][T18880] netlink: 'syz.6.3866': attribute type 1 has an invalid length.
[  494.862004][T18880] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3866'.
[  494.899377][T14868] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  494.919395][T14868] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  494.998186][T14868] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  495.931611][T18911] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3877'.
[  495.947825][T18911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3877'.
[  496.079796][T18918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3879'.
[  496.582562][T18928] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20002
[  496.877025][T18939] lo speed is unknown, defaulting to 1000
[  496.885463][T18939] lo speed is unknown, defaulting to 1000
[  496.945610][T18933] netlink: 'syz.4.3885': attribute type 1 has an invalid length.
[  497.299669][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3888'.
[  497.799096][T18957] lo speed is unknown, defaulting to 1000
[  497.849790][T18957] lo speed is unknown, defaulting to 1000
[  497.986625][T18966] xt_TCPMSS: Only works on TCP SYN packets
[  499.157778][T18981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3897'.
[  499.195851][T18981] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  499.598343][T18987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  499.629328][T18987] tipc: Resetting bearer <eth:syzkaller0>
[  499.890035][T18986] tipc: Disabling bearer <eth:syzkaller0>
[  500.344608][T19000] _ÐZ`Ô€@ÿÿ: entered promiscuous mode
[  500.552353][T19009] batman_adv: batadv0: Adding interface: ip6gretap1
[  500.608685][T19009] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.706423][T19009] batman_adv: batadv0: Interface activated: ip6gretap1
[  501.128365][T19028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3912'.
[  501.146979][T19024] lo speed is unknown, defaulting to 1000
[  501.169450][T19024] lo speed is unknown, defaulting to 1000
[  501.203064][T19030] lo speed is unknown, defaulting to 1000
[  501.375143][T19034] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  501.396602][T19034] tipc: Resetting bearer <eth:syzkaller0>
[  501.424260][T19033] tipc: Disabling bearer <eth:syzkaller0>
[  501.512015][T19030] lo speed is unknown, defaulting to 1000
[  501.769054][T19037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3915'.
[  501.868753][T19037] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3915'.
[  502.225013][T18887] Set syz1 is full, maxelem 65536 reached
[  502.368218][T19054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3919'.
[  502.392212][T19056] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  502.590248][T19059] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3921'.
[  502.746904][T19052] lo speed is unknown, defaulting to 1000
[  502.823768][T19062] xt_CT: You must specify a L4 protocol and not use inversions on it
[  502.832343][T19059] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3921'.
[  502.844177][T19059] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3921'.
[  502.853717][T19059] netlink: 'syz.6.3921': attribute type 3 has an invalid length.
[  502.878473][T19052] lo speed is unknown, defaulting to 1000
[  503.111005][T19069] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3924'.
[  503.576787][T19073] lo speed is unknown, defaulting to 1000
[  503.595537][T19073] lo speed is unknown, defaulting to 1000
[  503.764180][ T5841] Bluetooth: hci2: command 0x0419 tx timeout
[  503.790992][T19080] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3928'.
[  503.934920][T19082] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3929'.
[  504.008345][T19087] netlink: 'syz.6.3929': attribute type 3 has an invalid length.
[  504.029269][T19087] xt_CT: You must specify a L4 protocol and not use inversions on it
[  504.888116][T19091] FAULT_INJECTION: forcing a failure.
[  504.888116][T19091] name failslab, interval 1, probability 0, space 0, times 0
[  504.923944][T19091] CPU: 0 UID: 0 PID: 19091 Comm: syz.3.3931 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) 
[  504.923979][T19091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  504.923992][T19091] Call Trace:
[  504.924001][T19091]  <TASK>
[  504.924011][T19091]  dump_stack_lvl+0x189/0x250
[  504.924049][T19091]  ? __pfx____ratelimit+0x10/0x10
[  504.924075][T19091]  ? __pfx_dump_stack_lvl+0x10/0x10
[  504.924108][T19091]  ? __pfx__printk+0x10/0x10
[  504.924139][T19091]  ? __pfx___might_resched+0x10/0x10
[  504.924179][T19091]  should_fail_ex+0x414/0x560
[  504.924219][T19091]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  504.924240][T19091]  should_failslab+0xa8/0x100
[  504.924264][T19091]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  504.924282][T19091]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  504.924316][T19091]  ? alloc_inode+0x67/0x1b0
[  504.924343][T19091]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  504.924362][T19091]  alloc_inode+0x67/0x1b0
[  504.924385][T19091]  new_inode+0x22/0x170
[  504.924414][T19091]  __debugfs_create_file+0x14d/0x4f0
[  504.924455][T19091]  debugfs_create_file_full+0x3f/0x60
[  504.924494][T19091]  ref_tracker_dir_debugfs+0x14e/0x270
[  504.924523][T19091]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  504.924586][T19091]  ? rcu_is_watching+0x15/0xb0
[  504.924618][T19091]  ? alloc_netdev_mqs+0xa3/0x1170
[  504.924646][T19091]  ? __raw_spin_lock_init+0x45/0x100
[  504.924675][T19091]  alloc_netdev_mqs+0x26f/0x1170
[  504.924694][T19091]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[  504.924728][T19091]  rtnl_create_link+0x31f/0xd10
[  504.924757][T19091]  rtnl_newlink_create+0x25c/0xb00
[  504.924796][T19091]  ? __pfx_aa_get_newest_label+0x10/0x10
[  504.924828][T19091]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  504.924856][T19091]  ? rtnl_newlink+0x8db/0x1c70
[  504.924884][T19091]  ? __pfx___mutex_lock+0x10/0x10
[  504.924923][T19091]  ? ns_capable+0x8a/0xf0
[  504.924960][T19091]  rtnl_newlink+0x16d6/0x1c70
[  504.925008][T19091]  ? __pfx_rtnl_newlink+0x10/0x10
[  504.925033][T19091]  ? is_bpf_text_address+0x26/0x2b0
[  504.925076][T19091]  ? __lock_acquire+0xab9/0xd20
[  504.925123][T19091]  ? __lock_acquire+0xab9/0xd20
[  504.925178][T19091]  ? is_bpf_text_address+0x26/0x2b0
[  504.925222][T19091]  ? is_bpf_text_address+0x292/0x2b0
[  504.925254][T19091]  ? is_bpf_text_address+0x26/0x2b0
[  504.925292][T19091]  ? kernel_text_address+0xa5/0xe0
[  504.925336][T19091]  ? __lock_acquire+0xab9/0xd20
[  504.925399][T19091]  ? __pfx_rtnl_newlink+0x10/0x10
[  504.925433][T19091]  rtnetlink_rcv_msg+0x7cc/0xb70
[  504.925465][T19091]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  504.925491][T19091]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  504.925539][T19091]  netlink_rcv_skb+0x208/0x470
[  504.925568][T19091]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  504.925597][T19091]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  504.925640][T19091]  ? netlink_deliver_tap+0x2e/0x1b0
[  504.925666][T19091]  ? netlink_deliver_tap+0x2e/0x1b0
[  504.925700][T19091]  netlink_unicast+0x75b/0x8d0
[  504.925739][T19091]  netlink_sendmsg+0x805/0xb30
[  504.925779][T19091]  ? __pfx_netlink_sendmsg+0x10/0x10
[  504.925812][T19091]  ? aa_sock_msg_perm+0x94/0x160
[  504.925841][T19091]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  504.925868][T19091]  ? __pfx_netlink_sendmsg+0x10/0x10
[  504.925897][T19091]  __sock_sendmsg+0x21c/0x270
[  504.925925][T19091]  ____sys_sendmsg+0x505/0x830
[  504.925965][T19091]  ? __pfx_____sys_sendmsg+0x10/0x10
[  504.926009][T19091]  ? import_iovec+0x74/0xa0
[  504.926034][T19091]  ___sys_sendmsg+0x21f/0x2a0
[  504.926069][T19091]  ? __pfx____sys_sendmsg+0x10/0x10
[  504.926148][T19091]  ? __fget_files+0x2a/0x420
[  504.926171][T19091]  ? __fget_files+0x3a0/0x420
[  504.926208][T19091]  __x64_sys_sendmsg+0x19b/0x260
[  504.926251][T19091]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  504.926296][T19091]  ? __pfx_ksys_write+0x10/0x10
[  504.926336][T19091]  ? do_syscall_64+0xbe/0x3b0
[  504.926368][T19091]  do_syscall_64+0xfa/0x3b0
[  504.926392][T19091]  ? lockdep_hardirqs_on+0x9c/0x150
[  504.926416][T19091]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.926438][T19091]  ? clear_bhb_loop+0x60/0xb0
[  504.926472][T19091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.926493][T19091] RIP: 0033:0x7f89c398e929
[  504.926513][T19091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  504.926533][T19091] RSP: 002b:00007f89c487b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  504.926557][T19091] RAX: ffffffffffffffda RBX: 00007f89c3bb5fa0 RCX: 00007f89c398e929
[  504.926573][T19091] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  504.926587][T19091] RBP: 00007f89c487b090 R08: 0000000000000000 R09: 0000000000000000
[  504.926600][T19091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  504.926613][T19091] R13: 0000000000000000 R14: 00007f89c3bb5fa0 R15: 00007ffc6bda0178
[  504.926649][T19091]  </TASK>
[  504.926659][T19091] debugfs: out of free dentries, can not create file 'netdev@ffff88807c242610'
[  506.471758][T19142] FAULT_INJECTION: forcing a failure.
[  506.471758][T19142] name failslab, interval 1, probability 0, space 0, times 0
[  506.534256][T19142] CPU: 0 UID: 0 PID: 19142 Comm: syz.6.3946 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) 
[  506.534291][T19142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  506.534304][T19142] Call Trace:
[  506.534313][T19142]  <TASK>
[  506.534323][T19142]  dump_stack_lvl+0x189/0x250
[  506.534363][T19142]  ? __pfx____ratelimit+0x10/0x10
[  506.534390][T19142]  ? __pfx_dump_stack_lvl+0x10/0x10
[  506.534424][T19142]  ? __pfx__printk+0x10/0x10
[  506.534456][T19142]  ? __pfx___might_resched+0x10/0x10
[  506.534496][T19142]  should_fail_ex+0x414/0x560
[  506.534527][T19142]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  506.534548][T19142]  should_failslab+0xa8/0x100
[  506.534573][T19142]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  506.534591][T19142]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  506.534626][T19142]  ? alloc_inode+0x67/0x1b0
[  506.534653][T19142]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  506.534672][T19142]  alloc_inode+0x67/0x1b0
[  506.534697][T19142]  new_inode+0x22/0x170
[  506.534726][T19142]  __debugfs_create_file+0x14d/0x4f0
[  506.534766][T19142]  debugfs_create_file_full+0x3f/0x60
[  506.534805][T19142]  ref_tracker_dir_debugfs+0x14e/0x270
[  506.534835][T19142]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  506.534898][T19142]  ? rcu_is_watching+0x15/0xb0
[  506.534931][T19142]  ? alloc_netdev_mqs+0xa3/0x1170
[  506.534958][T19142]  ? __raw_spin_lock_init+0x45/0x100
[  506.534987][T19142]  alloc_netdev_mqs+0x26f/0x1170
[  506.535006][T19142]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[  506.535040][T19142]  rtnl_create_link+0x31f/0xd10
[  506.535070][T19142]  rtnl_newlink_create+0x25c/0xb00
[  506.535121][T19142]  ? __pfx_aa_get_newest_label+0x10/0x10
[  506.535155][T19142]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  506.535182][T19142]  ? rtnl_newlink+0x8db/0x1c70
[  506.535212][T19142]  ? __pfx___mutex_lock+0x10/0x10
[  506.535252][T19142]  ? ns_capable+0x8a/0xf0
[  506.535288][T19142]  rtnl_newlink+0x16d6/0x1c70
[  506.535336][T19142]  ? __pfx_rtnl_newlink+0x10/0x10
[  506.535362][T19142]  ? is_bpf_text_address+0x26/0x2b0
[  506.535404][T19142]  ? __lock_acquire+0xab9/0xd20
[  506.535451][T19142]  ? __lock_acquire+0xab9/0xd20
[  506.535507][T19142]  ? is_bpf_text_address+0x26/0x2b0
[  506.535545][T19142]  ? is_bpf_text_address+0x292/0x2b0
[  506.535577][T19142]  ? is_bpf_text_address+0x26/0x2b0
[  506.535614][T19142]  ? kernel_text_address+0xa5/0xe0
[  506.535658][T19142]  ? __lock_acquire+0xab9/0xd20
[  506.535719][T19142]  ? __pfx_rtnl_newlink+0x10/0x10
[  506.535744][T19142]  rtnetlink_rcv_msg+0x7cc/0xb70
[  506.535774][T19142]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  506.535799][T19142]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  506.535845][T19142]  netlink_rcv_skb+0x208/0x470
[  506.535872][T19142]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  506.535899][T19142]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  506.535940][T19142]  ? netlink_deliver_tap+0x2e/0x1b0
[  506.535965][T19142]  ? netlink_deliver_tap+0x2e/0x1b0
[  506.535997][T19142]  netlink_unicast+0x75b/0x8d0
[  506.536032][T19142]  netlink_sendmsg+0x805/0xb30
[  506.536070][T19142]  ? __pfx_netlink_sendmsg+0x10/0x10
[  506.536101][T19142]  ? aa_sock_msg_perm+0x94/0x160
[  506.536138][T19142]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  506.536164][T19142]  ? __pfx_netlink_sendmsg+0x10/0x10
[  506.536193][T19142]  __sock_sendmsg+0x21c/0x270
[  506.536220][T19142]  ____sys_sendmsg+0x505/0x830
[  506.536260][T19142]  ? __pfx_____sys_sendmsg+0x10/0x10
[  506.536303][T19142]  ? import_iovec+0x74/0xa0
[  506.536327][T19142]  ___sys_sendmsg+0x21f/0x2a0
[  506.536360][T19142]  ? __pfx____sys_sendmsg+0x10/0x10
[  506.536436][T19142]  ? __fget_files+0x2a/0x420
[  506.536458][T19142]  ? __fget_files+0x3a0/0x420
[  506.536499][T19142]  __x64_sys_sendmsg+0x19b/0x260
[  506.536532][T19142]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  506.536577][T19142]  ? rcu_is_watching+0x15/0xb0
[  506.536616][T19142]  ? do_syscall_64+0xbe/0x3b0
[  506.536645][T19142]  do_syscall_64+0xfa/0x3b0
[  506.536669][T19142]  ? lockdep_hardirqs_on+0x9c/0x150
[  506.536692][T19142]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.536713][T19142]  ? clear_bhb_loop+0x60/0xb0
[  506.536739][T19142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.536759][T19142] RIP: 0033:0x7fb35bd8e929
[  506.536779][T19142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  506.536798][T19142] RSP: 002b:00007fb35cbe4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  506.536820][T19142] RAX: ffffffffffffffda RBX: 00007fb35bfb5fa0 RCX: 00007fb35bd8e929
[  506.536836][T19142] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  506.536849][T19142] RBP: 00007fb35cbe4090 R08: 0000000000000000 R09: 0000000000000000
[  506.536862][T19142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  506.536874][T19142] R13: 0000000000000000 R14: 00007fb35bfb5fa0 R15: 00007ffe96aee2b8
[  506.536910][T19142]  </TASK>
[  506.537061][T19142] debugfs: out of free dentries, can not create file 'netdev@ffff888079e6c610'
[  506.947051][T19144] netlink: 'syz.4.3947': attribute type 7 has an invalid length.
[  507.076710][T19145] __nla_validate_parse: 6 callbacks suppressed
[  507.076730][T19145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3947'.
[  507.118642][T19144] netlink: 'syz.4.3947': attribute type 3 has an invalid length.
[  507.135044][T19144] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3947'.
[  507.295675][T19156] sctp: [Deprecated]: syz.5.3950 (pid 19156) Use of int in max_burst socket option deprecated.
[  507.295675][T19156] Use struct sctp_assoc_value instead
[  507.327329][T19155] pim6reg: entered allmulticast mode
[  507.371846][T19160] pim6reg: left allmulticast mode
[  507.408777][T19162] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3953'.
[  507.511518][T19164] pim6reg: entered allmulticast mode
[  507.571034][T19168] xt_TCPMSS: Only works on TCP SYN packets
[  507.649278][T19170] netlink: 'syz.5.3954': attribute type 1 has an invalid length.
[  507.679793][T19170] netlink: 'syz.5.3954': attribute type 2 has an invalid length.
[  507.708912][T19172] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3956'.
[  507.731090][T19172] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3956'.
[  507.786734][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3959'.
[  507.867494][T19187] netlink: 844 bytes leftover after parsing attributes in process `syz.6.3960'.
[  507.952928][T19192] netlink: 'syz.6.3961': attribute type 1 has an invalid length.
[  507.981784][T19192] sctp: [Deprecated]: syz.6.3961 (pid 19192) Use of int in max_burst socket option deprecated.
[  507.981784][T19192] Use struct sctp_assoc_value instead
[  508.151371][T19194] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  508.330303][T19196] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3963'.
[  508.728771][T19206] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  508.738778][T19210] xt_TCPMSS: Only works on TCP SYN packets
[  508.874865][T19216] vlan3: entered allmulticast mode
[  508.880981][T19216] veth1: entered allmulticast mode
[  509.013275][T19220] netlink: 'syz.5.3972': attribute type 12 has an invalid length.
[  509.065105][T19226] lo speed is unknown, defaulting to 1000
[  509.080621][T19226] lo speed is unknown, defaulting to 1000
[  509.359564][T19232] netlink: 'syz.5.3974': attribute type 15 has an invalid length.
[  509.595861][T19240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3976'.
[  510.050948][T19248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3978'.
[  510.379702][T19256] netlink: 'syz.3.3980': attribute type 1 has an invalid length.
[  510.414798][T19256] nbd: socks must be embedded in a SOCK_ITEM attr
[  510.423117][T19256] block nbd1: shutting down sockets
[  510.503812][T19259] xt_TCPMSS: Only works on TCP SYN packets
[  511.042452][T19283] FAULT_INJECTION: forcing a failure.
[  511.042452][T19283] name failslab, interval 1, probability 0, space 0, times 0
[  511.103671][T19283] CPU: 0 UID: 0 PID: 19283 Comm: syz.4.3991 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) 
[  511.103712][T19283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  511.103731][T19283] Call Trace:
[  511.103740][T19283]  <TASK>
[  511.103749][T19283]  dump_stack_lvl+0x189/0x250
[  511.103786][T19283]  ? __pfx____ratelimit+0x10/0x10
[  511.103811][T19283]  ? __pfx_dump_stack_lvl+0x10/0x10
[  511.103844][T19283]  ? __pfx__printk+0x10/0x10
[  511.103874][T19283]  ? __pfx___might_resched+0x10/0x10
[  511.103905][T19283]  ? fs_reclaim_acquire+0x7d/0x100
[  511.103936][T19283]  should_fail_ex+0x414/0x560
[  511.103968][T19283]  should_failslab+0xa8/0x100
[  511.103992][T19283]  __kmalloc_noprof+0xcb/0x4f0
[  511.104010][T19283]  ? kfree+0x4d/0x440
[  511.104038][T19283]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  511.104073][T19283]  tomoyo_realpath_from_path+0xe3/0x5d0
[  511.104104][T19283]  ? tomoyo_domain+0xd9/0x130
[  511.104139][T19283]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  511.104164][T19283]  tomoyo_path_number_perm+0x1e8/0x5a0
[  511.104192][T19283]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  511.104236][T19283]  ? __lock_acquire+0xab9/0xd20
[  511.104290][T19283]  ? __fget_files+0x2a/0x420
[  511.104316][T19283]  ? __fget_files+0x2a/0x420
[  511.104338][T19283]  ? __fget_files+0x3a0/0x420
[  511.104359][T19283]  ? __fget_files+0x2a/0x420
[  511.104387][T19283]  security_file_ioctl+0xcb/0x2d0
[  511.104413][T19283]  __se_sys_ioctl+0x47/0x170
[  511.104447][T19283]  do_syscall_64+0xfa/0x3b0
[  511.104472][T19283]  ? lockdep_hardirqs_on+0x9c/0x150
[  511.104496][T19283]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.104517][T19283]  ? clear_bhb_loop+0x60/0xb0
[  511.104544][T19283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.104565][T19283] RIP: 0033:0x7fb48a78e929
[  511.104584][T19283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  511.104603][T19283] RSP: 002b:00007fb48b528038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  511.104626][T19283] RAX: ffffffffffffffda RBX: 00007fb48a9b5fa0 RCX: 00007fb48a78e929
[  511.104641][T19283] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 0000000000000004
[  511.104655][T19283] RBP: 00007fb48b528090 R08: 0000000000000000 R09: 0000000000000000
[  511.104667][T19283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  511.104679][T19283] R13: 0000000000000000 R14: 00007fb48a9b5fa0 R15: 00007fffc359be18
[  511.104723][T19283]  </TASK>
[  511.360230][T19283] ERROR: Out of memory at tomoyo_realpath_from_path.
[  511.699623][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  511.715149][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  511.724508][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  511.732917][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  511.740936][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  511.901728][T19293] lo speed is unknown, defaulting to 1000
[  511.913230][T19293] lo speed is unknown, defaulting to 1000
[  512.143802][T19309] __nla_validate_parse: 6 callbacks suppressed
[  512.143825][T19309] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3999'.
[  512.555732][T19315] FAULT_INJECTION: forcing a failure.
[  512.555732][T19315] name failslab, interval 1, probability 0, space 0, times 0
[  512.592323][T19315] CPU: 1 UID: 0 PID: 19315 Comm: syz.4.4002 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) 
[  512.592357][T19315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  512.592371][T19315] Call Trace:
[  512.592379][T19315]  <TASK>
[  512.592390][T19315]  dump_stack_lvl+0x189/0x250
[  512.592428][T19315]  ? __pfx____ratelimit+0x10/0x10
[  512.592453][T19315]  ? __pfx_dump_stack_lvl+0x10/0x10
[  512.592487][T19315]  ? __pfx__printk+0x10/0x10
[  512.592513][T19315]  ? __pfx___might_resched+0x10/0x10
[  512.592546][T19315]  ? fs_reclaim_acquire+0x7d/0x100
[  512.592577][T19315]  should_fail_ex+0x414/0x560
[  512.592618][T19315]  should_failslab+0xa8/0x100
[  512.592643][T19315]  __kmalloc_noprof+0xcb/0x4f0
[  512.592663][T19315]  ? tomoyo_encode+0x28b/0x550
[  512.592698][T19315]  tomoyo_encode+0x28b/0x550
[  512.592734][T19315]  tomoyo_realpath_from_path+0x58d/0x5d0
[  512.592767][T19315]  ? tomoyo_domain+0xd9/0x130
[  512.592804][T19315]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  512.592830][T19315]  tomoyo_path_number_perm+0x1e8/0x5a0
[  512.592858][T19315]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  512.592903][T19315]  ? __lock_acquire+0xab9/0xd20
[  512.592957][T19315]  ? __fget_files+0x2a/0x420
[  512.592984][T19315]  ? __fget_files+0x2a/0x420
[  512.593005][T19315]  ? __fget_files+0x3a0/0x420
[  512.593027][T19315]  ? __fget_files+0x2a/0x420
[  512.593055][T19315]  security_file_ioctl+0xcb/0x2d0
[  512.593080][T19315]  __se_sys_ioctl+0x47/0x170
[  512.593114][T19315]  do_syscall_64+0xfa/0x3b0
[  512.593138][T19315]  ? lockdep_hardirqs_on+0x9c/0x150
[  512.593162][T19315]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.593183][T19315]  ? clear_bhb_loop+0x60/0xb0
[  512.593208][T19315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.593229][T19315] RIP: 0033:0x7fb48a78e929
[  512.593249][T19315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  512.593269][T19315] RSP: 002b:00007fb48b528038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  512.593292][T19315] RAX: ffffffffffffffda RBX: 00007fb48a9b5fa0 RCX: 00007fb48a78e929
[  512.593308][T19315] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 0000000000000004
[  512.593322][T19315] RBP: 00007fb48b528090 R08: 0000000000000000 R09: 0000000000000000
[  512.593335][T19315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  512.593347][T19315] R13: 0000000000000000 R14: 00007fb48a9b5fa0 R15: 00007fffc359be18
[  512.593382][T19315]  </TASK>
[  512.807129][T19317] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4003'.
[  512.954139][T19315] ERROR: Out of memory at tomoyo_realpath_from_path.
[  513.101135][T19317] tipc: Enabled bearer <eth:team0>, priority 0
[  513.118040][T19317] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4003'.
[  513.179090][T19320] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  513.510925][T19293] chnl_net:caif_netlink_parms(): no params data found
[  513.758836][T19347] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4013'.
[  513.781811][T19293] bridge0: port 1(bridge_slave_0) entered blocking state
[  513.794107][T19293] bridge0: port 1(bridge_slave_0) entered disabled state
[  513.813967][T19293] bridge_slave_0: entered allmulticast mode
[  513.822084][T19293] bridge_slave_0: entered promiscuous mode
[  513.831515][T19293] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.839207][T19293] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.846733][ T5841] Bluetooth: hci7: command tx timeout
[  513.854430][T19293] bridge_slave_1: entered allmulticast mode
[  513.863073][T19293] bridge_slave_1: entered promiscuous mode
[  513.950635][T19350] xt_TCPMSS: Only works on TCP SYN packets
[  513.987773][T19293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  514.003983][ T5841] Bluetooth: hci5: command 0x0406 tx timeout
[  514.010171][T19347] lo speed is unknown, defaulting to 1000
[  514.018261][T19293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  514.069597][T19347] lo speed is unknown, defaulting to 1000
[  514.112760][T19293] team0: Port device team_slave_0 added
[  514.150499][T19293] team0: Port device team_slave_1 added
[  514.308665][T19293] batman_adv: batadv0: Adding interface: batadv_slave_0
[  514.331849][T19293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  514.418082][T19293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  514.459703][T19293] batman_adv: batadv0: Adding interface: batadv_slave_1
[  514.480465][T19293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  514.554089][T19293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  514.997245][T19348] netlink: 'syz.5.4013': attribute type 9 has an invalid length.
[  515.079469][T19293] hsr_slave_0: entered promiscuous mode
[  515.105806][T19293] hsr_slave_1: entered promiscuous mode
[  515.112943][T19293] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  515.122235][T19293] Cannot create hsr debugfs directory
[  515.224379][T19386] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4013'.
[  515.618591][T19391] xt_TCPMSS: Only works on TCP SYN packets
[  515.878097][T19395] x_tables: duplicate underflow at hook 2
[  515.923592][ T5838] Bluetooth: hci7: command tx timeout
[  516.069151][T19293] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  516.138050][T19293] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  516.187123][T19293] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  516.232780][T19293] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  516.470239][T19293] 8021q: adding VLAN 0 to HW filter on device bond0
[  516.543095][T19293] 8021q: adding VLAN 0 to HW filter on device team0
[  516.606875][T10013] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.614140][T10013] bridge0: port 1(bridge_slave_0) entered forwarding state
[  516.642875][T17234] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.650147][T17234] bridge0: port 2(bridge_slave_1) entered forwarding state
[  517.335188][T19439] netlink: 'syz.6.4038': attribute type 1 has an invalid length.
[  517.353244][T19439] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4038'.
[  517.401226][T19439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4038'.
[  517.420533][T19437] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode
[  517.429362][T19441] delete_channel: no stack
[  517.439697][T19437] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  517.515249][T19293] 8021q: adding VLAN 0 to HW filter on device batadv0
[  517.547451][T19437] netlink: 'syz.4.4037': attribute type 33 has an invalid length.
[  517.577071][T19437] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4037'.
[  517.818527][T19451] FAULT_INJECTION: forcing a failure.
[  517.818527][T19451] name failslab, interval 1, probability 0, space 0, times 0
[  517.854595][T19451] CPU: 1 UID: 0 PID: 19451 Comm: syz.5.4041 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) 
[  517.854628][T19451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  517.854641][T19451] Call Trace:
[  517.854651][T19451]  <TASK>
[  517.854660][T19451]  dump_stack_lvl+0x189/0x250
[  517.854699][T19451]  ? __pfx____ratelimit+0x10/0x10
[  517.854724][T19451]  ? __pfx_dump_stack_lvl+0x10/0x10
[  517.854756][T19451]  ? __pfx__printk+0x10/0x10
[  517.854786][T19451]  ? __pfx___might_resched+0x10/0x10
[  517.854817][T19451]  ? fs_reclaim_acquire+0x7d/0x100
[  517.854847][T19451]  should_fail_ex+0x414/0x560
[  517.854879][T19451]  should_failslab+0xa8/0x100
[  517.854903][T19451]  __kmalloc_cache_noprof+0x70/0x3d0
[  517.854924][T19451]  ? dev_ethtool+0x126/0x19b0
[  517.854958][T19451]  dev_ethtool+0x126/0x19b0
[  517.854992][T19451]  ? __lock_acquire+0xab9/0xd20
[  517.855028][T19451]  ? __pfx_dev_ethtool+0x10/0x10
[  517.855070][T19451]  ? dev_load+0x21/0x1f0
[  517.855097][T19451]  ? dev_load+0x21/0x1f0
[  517.855122][T19451]  dev_ioctl+0x392/0x1150
[  517.855158][T19451]  sock_do_ioctl+0x22c/0x300
[  517.855184][T19451]  ? __pfx_sock_do_ioctl+0x10/0x10
[  517.855203][T19451]  ? __lock_acquire+0xab9/0xd20
[  517.855250][T19451]  sock_ioctl+0x576/0x790
[  517.855274][T19451]  ? __pfx_sock_ioctl+0x10/0x10
[  517.855296][T19451]  ? __fget_files+0x2a/0x420
[  517.855318][T19451]  ? __fget_files+0x3a0/0x420
[  517.855340][T19451]  ? __fget_files+0x2a/0x420
[  517.855367][T19451]  ? bpf_lsm_file_ioctl+0x9/0x20
[  517.855397][T19451]  ? __pfx_sock_ioctl+0x10/0x10
[  517.855419][T19451]  __se_sys_ioctl+0xfc/0x170
[  517.855453][T19451]  do_syscall_64+0xfa/0x3b0
[  517.855477][T19451]  ? lockdep_hardirqs_on+0x9c/0x150
[  517.855501][T19451]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.855522][T19451]  ? clear_bhb_loop+0x60/0xb0
[  517.855548][T19451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.855568][T19451] RIP: 0033:0x7fd11d98e929
[  517.855591][T19451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  517.855611][T19451] RSP: 002b:00007fd11b7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  517.855634][T19451] RAX: ffffffffffffffda RBX: 00007fd11dbb5fa0 RCX: 00007fd11d98e929
[  517.855650][T19451] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 0000000000000004
[  517.855665][T19451] RBP: 00007fd11b7f6090 R08: 0000000000000000 R09: 0000000000000000
[  517.855678][T19451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  517.855692][T19451] R13: 0000000000000000 R14: 00007fd11dbb5fa0 R15: 00007fff7216dc58
[  517.855726][T19451]  </TASK>
[  518.003887][ T5838] Bluetooth: hci7: command tx timeout
[  518.088078][T19455] lo speed is unknown, defaulting to 1000
[  518.142322][T19455] lo speed is unknown, defaulting to 1000
[  518.165448][T19460] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4044'.
[  518.317121][T19464] xt_TCPMSS: Only works on TCP SYN packets
[  518.431821][T19467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4046'.
[  518.516310][T19467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4046'.
[  518.527414][T19467] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4046'.
[  518.584195][T10013] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  518.602691][T10013] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  518.634178][T10013] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  518.642427][T10013] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  518.817688][T19293] veth0_vlan: entered promiscuous mode
[  518.932897][T19480] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4051'.
[  518.984328][T19483] ip6t_srh: unknown srh invflags 4000
[  519.016389][T19485] FAULT_INJECTION: forcing a failure.
[  519.016389][T19485] name failslab, interval 1, probability 0, space 0, times 0
[  519.031319][T19293] veth1_vlan: entered promiscuous mode
[  519.032562][T19485] CPU: 0 UID: 0 PID: 19485 Comm: syz.6.4053 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) 
[  519.032597][T19485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  519.032613][T19485] Call Trace:
[  519.032622][T19485]  <TASK>
[  519.032634][T19485]  dump_stack_lvl+0x189/0x250
[  519.032677][T19485]  ? __pfx____ratelimit+0x10/0x10
[  519.032706][T19485]  ? __pfx_dump_stack_lvl+0x10/0x10
[  519.032743][T19485]  ? __pfx__printk+0x10/0x10
[  519.032777][T19485]  ? __pfx___might_resched+0x10/0x10
[  519.032819][T19485]  should_fail_ex+0x414/0x560
[  519.032857][T19485]  should_failslab+0xa8/0x100
[  519.032887][T19485]  __kmalloc_cache_noprof+0x70/0x3d0
[  519.032912][T19485]  ? call_usermodehelper_setup+0x8e/0x270
[  519.032947][T19485]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  519.032976][T19485]  call_usermodehelper_setup+0x8e/0x270
[  519.033010][T19485]  ? __pfx_free_modprobe_argv+0x10/0x10
[  519.033049][T19485]  __request_module+0x39f/0x5e0
[  519.033085][T19485]  ? aa_get_newest_label+0xf7/0x5d0
[  519.033117][T19485]  ? __pfx___request_module+0x10/0x10
[  519.033157][T19485]  ? rcu_is_watching+0x15/0xb0
[  519.033204][T19485]  ? security_capable+0x7e/0x2e0
[  519.033240][T19485]  ? dev_load+0x21/0x1f0
[  519.033267][T19485]  dev_load+0x190/0x1f0
[  519.033304][T19485]  dev_ioctl+0x384/0x1150
[  519.033338][T19485]  sock_do_ioctl+0x22c/0x300
[  519.033367][T19485]  ? __pfx_sock_do_ioctl+0x10/0x10
[  519.033394][T19485]  ? rcu_read_unlock_special+0x3fe/0x4c0
[  519.033445][T19485]  sock_ioctl+0x576/0x790
[  519.033472][T19485]  ? __pfx_sock_ioctl+0x10/0x10
[  519.033494][T19485]  ? __rcu_read_unlock+0x84/0xe0
[  519.033523][T19485]  ? __fget_files+0x2a/0x420
[  519.033547][T19485]  ? __fget_files+0x3a0/0x420
[  519.033571][T19485]  ? __fget_files+0x2a/0x420
[  519.033601][T19485]  ? bpf_lsm_file_ioctl+0x9/0x20
[  519.033636][T19485]  ? __pfx_sock_ioctl+0x10/0x10
[  519.033660][T19485]  __se_sys_ioctl+0xfc/0x170
[  519.033699][T19485]  do_syscall_64+0xfa/0x3b0
[  519.033729][T19485]  ? lockdep_hardirqs_on+0x9c/0x150
[  519.033756][T19485]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.033780][T19485]  ? clear_bhb_loop+0x60/0xb0
[  519.033811][T19485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.033835][T19485] RIP: 0033:0x7fb35bd8e929
[  519.033856][T19485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  519.033878][T19485] RSP: 002b:00007fb35cbe4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  519.033903][T19485] RAX: ffffffffffffffda RBX: 00007fb35bfb5fa0 RCX: 00007fb35bd8e929
[  519.033924][T19485] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 0000000000000004
[  519.033939][T19485] RBP: 00007fb35cbe4090 R08: 0000000000000000 R09: 0000000000000000
[  519.033955][T19485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  519.033969][T19485] R13: 0000000000000000 R14: 00007fb35bfb5fa0 R15: 00007ffe96aee2b8
[  519.034007][T19485]  </TASK>
[  519.430129][T19293] veth0_macvtap: entered promiscuous mode
[  519.449954][T19293] veth1_macvtap: entered promiscuous mode
[  519.481546][T19293] batman_adv: batadv0: Interface activated: batadv_slave_0
[  519.521173][T19293] batman_adv: batadv0: Interface activated: batadv_slave_1
[  519.540022][T19495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4056'.
[  519.584263][T17232] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  519.651195][T17232] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  519.769243][ T1311] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  519.814799][ T1311] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  519.996657][T19506] lo speed is unknown, defaulting to 1000
[  520.033130][T19510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4059'.
[  520.045947][T19506] lo speed is unknown, defaulting to 1000
[  520.053965][T17233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.062122][T17233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.091350][T19510] bond0: left promiscuous mode
[  520.166147][ T5838] Bluetooth: hci7: command tx timeout
[  520.189038][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.204316][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.997015][T19544] ip_vti0: left promiscuous mode
[  521.002375][T19544] ip_vti0: entered allmulticast mode
[  521.291012][T19537] lo speed is unknown, defaulting to 1000
[  521.369426][T19547] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  521.492567][T19537] lo speed is unknown, defaulting to 1000
[  521.866074][T19570] geneve2: entered promiscuous mode
[  521.908578][   T65] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  521.940271][   T65] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  521.975398][   T65] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  522.010709][   T65] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  522.614170][T19599] __nla_validate_parse: 3 callbacks suppressed
[  522.614194][T19599] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4087'.
[  522.912281][T19608] bridge0: port 3(ipvlan2) entered blocking state
[  522.940447][T19608] bridge0: port 3(ipvlan2) entered disabled state
[  522.988237][T19608] ipvlan2: entered allmulticast mode
[  522.999765][T19608] bridge0: entered allmulticast mode
[  523.008744][T19608] ipvlan2: left allmulticast mode
[  523.020005][T19608] bridge0: left allmulticast mode
[  523.407913][T19630] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4096'.
[  523.575292][T19638] tipc: Started in network mode
[  523.601977][T19638] tipc: Node identity 4a9164edf79b, cluster identity 4711
[  523.626112][T19638] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  523.660596][T19638] FAULT_INJECTION: forcing a failure.
[  523.660596][T19638] name failslab, interval 1, probability 0, space 0, times 0
[  523.682616][T19638] CPU: 1 UID: 0 PID: 19638 Comm: syz.7.4101 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) 
[  523.682657][T19638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  523.682671][T19638] Call Trace:
[  523.682682][T19638]  <TASK>
[  523.682692][T19638]  dump_stack_lvl+0x189/0x250
[  523.682733][T19638]  ? __pfx____ratelimit+0x10/0x10
[  523.682760][T19638]  ? __pfx_dump_stack_lvl+0x10/0x10
[  523.682795][T19638]  ? __pfx__printk+0x10/0x10
[  523.682827][T19638]  ? __pfx___might_resched+0x10/0x10
[  523.682860][T19638]  ? fs_reclaim_acquire+0x7d/0x100
[  523.682892][T19638]  should_fail_ex+0x414/0x560
[  523.682927][T19638]  should_failslab+0xa8/0x100
[  523.682952][T19638]  __kmalloc_noprof+0xcb/0x4f0
[  523.682972][T19638]  ? kfree+0x4d/0x440
[  523.683001][T19638]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  523.683039][T19638]  tomoyo_realpath_from_path+0xe3/0x5d0
[  523.683072][T19638]  ? tomoyo_domain+0xd9/0x130
[  523.683110][T19638]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  523.683135][T19638]  tomoyo_path_number_perm+0x1e8/0x5a0
[  523.683163][T19638]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  523.683207][T19638]  ? __lock_acquire+0xab9/0xd20
[  523.683259][T19638]  ? __fget_files+0x2a/0x420
[  523.683287][T19638]  ? __fget_files+0x2a/0x420
[  523.683308][T19638]  ? __fget_files+0x3a0/0x420
[  523.683330][T19638]  ? __fget_files+0x2a/0x420
[  523.683359][T19638]  security_file_ioctl+0xcb/0x2d0
[  523.683392][T19638]  __se_sys_ioctl+0x47/0x170
[  523.683426][T19638]  do_syscall_64+0xfa/0x3b0
[  523.683451][T19638]  ? lockdep_hardirqs_on+0x9c/0x150
[  523.683475][T19638]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.683496][T19638]  ? clear_bhb_loop+0x60/0xb0
[  523.683523][T19638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.683544][T19638] RIP: 0033:0x7fe5a4f8e929
[  523.683563][T19638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  523.683582][T19638] RSP: 002b:00007fe5a5e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  523.683605][T19638] RAX: ffffffffffffffda RBX: 00007fe5a51b5fa0 RCX: 00007fe5a4f8e929
[  523.683622][T19638] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005
[  523.683637][T19638] RBP: 00007fe5a5e98090 R08: 0000000000000000 R09: 0000000000000000
[  523.683658][T19638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  523.683671][T19638] R13: 0000000000000000 R14: 00007fe5a51b5fa0 R15: 00007ffff6918da8
[  523.683708][T19638]  </TASK>
[  523.983174][T19638] ERROR: Out of memory at tomoyo_realpath_from_path.
[  523.992305][T19638] tipc: Resetting bearer <eth:syzkaller0>
[  524.016859][T19636] tipc: Disabling bearer <eth:syzkaller0>
[  524.110263][T19656] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4106'.
[  524.244893][T19584] Bluetooth: hci1: command 0x0406 tx timeout
[  524.390305][T19670] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4109'.
[  524.710308][T19688] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4117'.
[  525.684310][T19584] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  525.695910][T19584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  525.708979][T19584] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  525.728467][T19584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  525.742901][T19584] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  525.843013][T19715] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  525.901115][T19712] tipc: Resetting bearer <eth:syzkaller0>
[  525.970679][T19711] tipc: Disabling bearer <eth:syzkaller0>
[  526.027026][T19705] lo speed is unknown, defaulting to 1000
[  526.035295][T19705] lo speed is unknown, defaulting to 1000
[  526.205411][T19726] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4129'.
[  526.297242][T19728] syzkaller0: entered promiscuous mode
[  526.317831][T19728] syzkaller0: entered allmulticast mode
[  526.822806][T19735] netlink: 27 bytes leftover after parsing attributes in process `syz.6.4132'.
[  527.252570][T19705] chnl_net:caif_netlink_parms(): no params data found
[  527.483276][T19705] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.500719][T19705] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.509007][T19705] bridge_slave_0: entered allmulticast mode
[  527.518421][T19705] bridge_slave_0: entered promiscuous mode
[  527.541136][T19705] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.556596][T19705] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.574274][T19705] bridge_slave_1: entered allmulticast mode
[  527.582387][T19705] bridge_slave_1: entered promiscuous mode
[  527.691265][T19705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  527.704783][T19705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  527.788040][T19773] netlink: 'syz.6.4145': attribute type 10 has an invalid length.
[  527.799799][T19773] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4145'.
[  527.812868][T19705] team0: Port device team_slave_0 added
[  527.839218][T19705] team0: Port device team_slave_1 added
[  527.845340][ T5838] Bluetooth: hci3: command tx timeout
[  527.935931][T19773] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  527.951974][T19779] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4146'.
[  528.081587][T19777] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4145'.
[  528.131020][T19785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4147'.
[  528.147862][T19705] batman_adv: batadv0: Adding interface: batadv_slave_0
[  528.155989][T19705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  528.215034][T19790] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4145'.
[  528.248611][T19705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  528.280128][T19705] batman_adv: batadv0: Adding interface: batadv_slave_1
[  528.295789][T19705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  528.374630][T19705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  528.478108][T19773] lo speed is unknown, defaulting to 1000
[  528.565359][T19773] lo speed is unknown, defaulting to 1000
[  528.655777][T19705] hsr_slave_0: entered promiscuous mode
[  528.697212][T19705] hsr_slave_1: entered promiscuous mode
[  528.714423][T19705] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  528.722189][T19705] Cannot create hsr debugfs directory
[  529.265074][T19705] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  529.285917][T19819] netlink: 27 bytes leftover after parsing attributes in process `syz.5.4158'.
[  529.349188][T19820] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  529.387632][T19705] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  529.445435][T19817] syzkaller0: mtu less than device minimum
[  529.475260][T19816] tipc: Disabling bearer <eth:syzkaller0>
[  529.560128][T19705] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  529.573269][T19828] nbd: must specify a size in bytes for the device
[  529.622149][T19823] lo speed is unknown, defaulting to 1000
[  529.639116][T19823] lo speed is unknown, defaulting to 1000
[  529.675995][T19705] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  529.923694][ T5838] Bluetooth: hci3: command tx timeout
[  530.168977][T19705] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  530.196114][T19705] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  530.234050][T19705] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  530.258296][T19705] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  530.291583][T19849] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4164'.
[  530.410635][T19849] netlink: 'syz.7.4164': attribute type 23 has an invalid length.
[  530.510877][T19858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4165'.
[  530.783215][T19860] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  530.826423][T19862] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4167'.
[  530.845289][T19863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4166'.
[  530.912822][T19705] 8021q: adding VLAN 0 to HW filter on device bond0
[  530.976413][T19860] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  531.054147][T19705] 8021q: adding VLAN 0 to HW filter on device team0
[  531.098201][T19860] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  531.132880][T10013] bridge0: port 1(bridge_slave_0) entered blocking state
[  531.140137][T10013] bridge0: port 1(bridge_slave_0) entered forwarding state
[  531.163423][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.170642][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  531.227040][T19860] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  531.282982][T19867] x_tables: duplicate underflow at hook 2
[  531.510446][T10013] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  531.551362][T10013] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  531.575390][T19874] macsec1: entered promiscuous mode
[  531.591197][T19874] macsec1: entered allmulticast mode
[  531.601121][T19874] dummy0: entered allmulticast mode
[  531.619056][T19874] dummy0: left allmulticast mode
[  531.700034][   T49] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  531.786900][   T65] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  531.985672][T19705] 8021q: adding VLAN 0 to HW filter on device batadv0
[  532.003734][ T5838] Bluetooth: hci3: command tx timeout
[  532.013925][T19891] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  532.152096][T19887] syzkaller0: mtu less than device minimum
[  532.169059][T19897] netlink: 'syz.4.4179': attribute type 3 has an invalid length.
[  532.224923][T19897] netlink: 'syz.4.4179': attribute type 1 has an invalid length.
[  532.232734][T19897] NCSI netlink: No device for ifindex 0
[  532.244208][T19705] veth0_vlan: entered promiscuous mode
[  532.279139][T19898] netlink: 'syz.4.4179': attribute type 3 has an invalid length.
[  532.288032][T19705] veth1_vlan: entered promiscuous mode
[  532.313595][T19898] netlink: 'syz.4.4179': attribute type 1 has an invalid length.
[  532.343999][T19898] NCSI netlink: No device for ifindex 0
[  532.350960][T19900] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  532.474207][T19905] sctp: [Deprecated]: syz.6.4182 (pid 19905) Use of struct sctp_assoc_value in delayed_ack socket option.
[  532.474207][T19905] Use struct sctp_sack_info instead
[  532.529124][T19705] veth0_macvtap: entered promiscuous mode
[  532.562710][T19705] veth1_macvtap: entered promiscuous mode
[  532.617870][T19705] batman_adv: batadv0: Interface activated: batadv_slave_0
[  532.678238][T19705] batman_adv: batadv0: Interface activated: batadv_slave_1
[  532.725173][   T65] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  532.756980][   T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  532.779070][   T65] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  532.800165][   T65] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  532.954954][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.979794][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.040172][T17232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  533.075148][T17232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.230544][T19930] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  533.244070][T19930] __nla_validate_parse: 4 callbacks suppressed
[  533.244105][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4191'.
[  533.499866][T19945] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4195'.
[  533.639771][T19951] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4197'.
[  533.691072][   T31] INFO: task syz.1.2910:15655 blocked for more than 143 seconds.
[  533.706411][   T31]       Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0
[  533.733028][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  533.751639][T19949] lo speed is unknown, defaulting to 1000
[  533.762379][   T31] task:syz.1.2910      state:D stack:25352 pid:15655 tgid:15654 ppid:15470  task_flags:0x400140 flags:0x00004004
[  533.787203][T19949] lo speed is unknown, defaulting to 1000
[  533.793805][   T31] Call Trace:
[  533.797144][   T31]  <TASK>
[  533.814087][   T31]  __schedule+0x16f5/0x4d00
[  533.818689][   T31]  ? __lock_acquire+0xab9/0xd20
[  533.849053][   T31]  ? schedule+0x165/0x360
[  533.872008][   T31]  ? __pfx___schedule+0x10/0x10
[  533.887715][   T31]  ? schedule+0x91/0x360
[  533.892076][   T31]  schedule+0x165/0x360
[  533.929729][   T31]  schedule_preempt_disabled+0x13/0x30
[  533.947691][   T31]  __mutex_lock+0x724/0xe80
[  533.952305][   T31]  ? __mutex_lock+0x51b/0xe80
[  533.963223][   T31]  ? nfsd_nl_listener_set_doit+0x137/0x1690
[  533.983267][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  533.989019][   T31]  ? __asan_memset+0x22/0x50
[  533.994281][   T31]  ? ____sys_sendmsg+0x505/0x830
[  533.999346][   T31]  ? ___sys_sendmsg+0x21f/0x2a0
[  534.004533][   T31]  ? __x64_sys_sendmsg+0x19b/0x260
[  534.009842][   T31]  nfsd_nl_listener_set_doit+0x137/0x1690
[  534.016186][   T31]  ? __pfx___nla_validate_parse+0x10/0x10
[  534.022074][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  534.028479][   T31]  ? __nla_parse+0x40/0x60
[  534.033039][   T31]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  534.039540][   T31]  genl_family_rcv_msg_doit+0x215/0x300
[  534.053673][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  534.059945][   T31]  ? bpf_lsm_capable+0x9/0x20
[  534.064896][   T31]  ? security_capable+0x7e/0x2e0
[  534.069892][   T31]  genl_rcv_msg+0x60e/0x790
[  534.093519][ T5838] Bluetooth: hci3: command tx timeout
[  534.099174][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  534.113448][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  534.119710][   T31]  netlink_rcv_skb+0x208/0x470
[  534.124973][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  534.130070][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  534.135863][   T31]  ? down_read+0x1ad/0x2e0
[  534.140342][   T31]  genl_rcv+0x28/0x40
[  534.144809][   T31]  netlink_unicast+0x75b/0x8d0
[  534.149657][   T31]  netlink_sendmsg+0x805/0xb30
[  534.154540][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  534.159879][   T31]  ? aa_sock_msg_perm+0x94/0x160
[  534.165622][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  534.171061][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  534.176438][   T31]  __sock_sendmsg+0x21c/0x270
[  534.181169][   T31]  ____sys_sendmsg+0x505/0x830
[  534.187254][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  534.192627][   T31]  ? import_iovec+0x74/0xa0
[  534.197793][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  534.202543][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  534.208304][   T31]  ? __fget_files+0x2a/0x420
[  534.212947][   T31]  ? __fget_files+0x3a0/0x420
[  534.217737][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  534.222738][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  534.229060][   T31]  ? rcu_is_watching+0x15/0xb0
[  534.233930][   T31]  ? do_syscall_64+0xbe/0x3b0
[  534.238664][   T31]  do_syscall_64+0xfa/0x3b0
[  534.243216][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  534.248962][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.255917][   T31]  ? clear_bhb_loop+0x60/0xb0
[  534.260660][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.267158][   T31] RIP: 0033:0x7feff8d8e929
[  534.271621][   T31] RSP: 002b:00007feff9be5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  534.284091][   T31] RAX: ffffffffffffffda RBX: 00007feff8fb5fa0 RCX: 00007feff8d8e929
[  534.293367][   T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  534.312334][   T31] RBP: 00007feff8e10b39 R08: 0000000000000000 R09: 0000000000000000
[  534.324717][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  534.332855][   T31] R13: 0000000000000000 R14: 00007feff8fb5fa0 R15: 00007fff570395a8
[  534.353472][   T31]  </TASK>
[  534.361785][   T31] 
[  534.361785][   T31] Showing all locks held in the system:
[  534.371342][   T31] 1 lock held by khungtaskd/31:
[  534.376644][   T31]  #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  534.411275][   T31] 3 locks held by kworker/u8:3/49:
[  534.416675][   T31]  #0: ffff88814c08f148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  534.433787][   T31]  #1: ffffc90000b97bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  534.453449][   T31]  #2: ffffffff8f5127c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0
[  534.473251][   T31] 3 locks held by kworker/u8:8/3026:
[  534.479812][   T31]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  534.495373][   T31]  #1: ffffc9000b1b7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  534.514917][   T31]  #2: ffffffff8f5127c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  534.530973][   T31] 2 locks held by getty/5588:
[  534.539900][   T31]  #0: ffff8880309cb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  534.557084][   T31]  #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  534.574955][   T31] 2 locks held by syz.0.2873/15311:
[  534.586118][   T31]  #0: ffffffff8f577530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  534.595261][   T31]  #1: ffffffff8e41cd48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  534.608032][   T31] 2 locks held by syz.1.2910/15655:
[  534.613275][   T31]  #0: ffffffff8f577530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  534.622189][   T31]  #1: ffffffff8e41cd48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  534.632801][   T31] 2 locks held by syz.2.3875/18906:
[  534.638746][   T31]  #0: ffffffff8f577530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  534.647285][   T31]  #1: ffffffff8e41cd48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  534.658441][   T31] 2 locks held by syz.4.4198/19949:
[  534.663800][   T31]  #0: ffffffff8f505b70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  534.673475][   T31]  #1: ffffffff8f5127c8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800
[  534.683250][   T31] 1 lock held by syz.7.4199/19956:
[  534.692718][   T31]  #0: ffffffff8f5127c8 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0x87/0x1f0
[  534.704312][   T31] 3 locks held by syz.7.4199/19958:
[  534.709565][   T31]  #0: ffffffff8fa31e58 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  534.719306][   T31]  #1: ffffffff8f5127c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  534.734336][   T31]  #2: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  534.746769][   T31] 
[  534.749144][   T31] =============================================
[  534.749144][   T31] 
[  534.757716][   T31] NMI backtrace for cpu 0
[  534.757745][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) 
[  534.757771][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  534.757784][   T31] Call Trace:
[  534.757792][   T31]  <TASK>
[  534.757801][   T31]  dump_stack_lvl+0x189/0x250
[  534.757836][   T31]  ? __wake_up_klogd+0xd9/0x110
[  534.757860][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  534.757889][   T31]  ? __pfx__printk+0x10/0x10
[  534.757920][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  534.757951][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  534.757979][   T31]  ? _printk+0xcf/0x120
[  534.758002][   T31]  ? __pfx__printk+0x10/0x10
[  534.758023][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  534.758049][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  534.758081][   T31]  watchdog+0xfee/0x1030
[  534.758107][   T31]  ? watchdog+0x1de/0x1030
[  534.758138][   T31]  kthread+0x70e/0x8a0
[  534.758161][   T31]  ? __pfx_watchdog+0x10/0x10
[  534.758184][   T31]  ? __pfx_kthread+0x10/0x10
[  534.758206][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  534.758224][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  534.758243][   T31]  ? __pfx_kthread+0x10/0x10
[  534.758264][   T31]  ret_from_fork+0x3fc/0x770
[  534.758292][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  534.758323][   T31]  ? __switch_to_asm+0x39/0x70
[  534.758340][   T31]  ? __switch_to_asm+0x33/0x70
[  534.758357][   T31]  ? __pfx_kthread+0x10/0x10
[  534.758378][   T31]  ret_from_fork_asm+0x1a/0x30
[  534.758410][   T31]  </TASK>
[  534.758423][   T31] Sending NMI from CPU 0 to CPUs 1:
[  534.922244][    C1] NMI backtrace for cpu 1
[  534.922265][    C1] CPU: 1 UID: 0 PID: 17234 Comm: kworker/u8:14 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) 
[  534.922288][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  534.922312][    C1] Workqueue: bat_events batadv_nc_worker
[  534.922336][    C1] RIP: 0010:__lock_acquire+0x742/0xd20
[  534.922363][    C1] Code: 83 e0 05 00 00 48 8d 04 9b 45 8b 66 20 48 8b 4c 24 10 8b 44 c1 f8 44 31 e0 25 00 60 00 00 31 c9 89 c2 f7 da 48 19 c9 49 09 cf <85> c0 b8 01 00 00 00 0f 45 e8 eb 4b 48 89 fb 4c 89 f6 a9 00 00 03
[  534.922379][    C1] RSP: 0018:ffffc9000c6e78f0 EFLAGS: 00000086
[  534.922394][    C1] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000
[  534.922405][    C1] RDX: 0000000000000000 RSI: ffff888057fae540 RDI: ffff888057fada00
[  534.922418][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b35b732
[  534.922429][    C1] R10: dffffc0000000000 R11: fffffbfff1f426ff R12: 0000000000020007
[  534.922442][    C1] R13: 0000000000000001 R14: ffff888057fae540 R15: baf8a2e75332e73a
[  534.922455][    C1] FS:  0000000000000000(0000) GS:ffff888125d48000(0000) knlGS:0000000000000000
[  534.922470][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  534.922482][    C1] CR2: 0000000000000000 CR3: 000000007e5fc000 CR4: 00000000003526f0
[  534.922497][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  534.922508][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  534.922519][    C1] Call Trace:
[  534.922526][    C1]  <TASK>
[  534.922540][    C1]  ? batadv_nc_worker+0xd2/0x610
[  534.922556][    C1]  lock_acquire+0x120/0x360
[  534.922579][    C1]  ? batadv_nc_worker+0xd2/0x610
[  534.922600][    C1]  ? batadv_nc_worker+0xd2/0x610
[  534.922617][    C1]  ? batadv_nc_worker+0xd2/0x610
[  534.922633][    C1]  batadv_nc_worker+0xef/0x610
[  534.922650][    C1]  ? batadv_nc_worker+0xd2/0x610
[  534.922667][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  534.922714][    C1]  process_scheduled_works+0xae1/0x17b0
[  534.922757][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  534.922793][    C1]  worker_thread+0x8a0/0xda0
[  534.922835][    C1]  kthread+0x70e/0x8a0
[  534.922856][    C1]  ? __pfx_worker_thread+0x10/0x10
[  534.922883][    C1]  ? __pfx_kthread+0x10/0x10
[  534.922904][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  534.922923][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  534.922943][    C1]  ? __pfx_kthread+0x10/0x10
[  534.922969][    C1]  ret_from_fork+0x3fc/0x770
[  534.923021][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  534.923049][    C1]  ? __switch_to_asm+0x39/0x70
[  534.923068][    C1]  ? __switch_to_asm+0x33/0x70
[  534.923086][    C1]  ? __pfx_kthread+0x10/0x10
[  534.923106][    C1]  ret_from_fork_asm+0x1a/0x30
[  534.923133][    C1]  </TASK>
[  534.923358][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  535.195123][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) 
[  535.206938][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  535.217004][   T31] Call Trace:
[  535.220294][   T31]  <TASK>
[  535.223233][   T31]  dump_stack_lvl+0x99/0x250
[  535.227853][   T31]  ? __asan_memcpy+0x40/0x70
[  535.232484][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  535.237731][   T31]  ? __pfx__printk+0x10/0x10
[  535.242353][   T31]  panic+0x2db/0x790
[  535.246285][   T31]  ? __pfx_panic+0x10/0x10
[  535.250837][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  535.256683][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  535.262106][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  535.268375][   T31]  watchdog+0x102d/0x1030
[  535.272722][   T31]  ? watchdog+0x1de/0x1030
[  535.277161][   T31]  kthread+0x70e/0x8a0
[  535.281336][   T31]  ? __pfx_watchdog+0x10/0x10
[  535.286045][   T31]  ? __pfx_kthread+0x10/0x10
[  535.290649][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  535.295854][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  535.301147][   T31]  ? __pfx_kthread+0x10/0x10
[  535.305751][   T31]  ret_from_fork+0x3fc/0x770
[  535.310363][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  535.315509][   T31]  ? __switch_to_asm+0x39/0x70
[  535.320323][   T31]  ? __switch_to_asm+0x33/0x70
[  535.325109][   T31]  ? __pfx_kthread+0x10/0x10
[  535.329721][   T31]  ret_from_fork_asm+0x1a/0x30
[  535.334513][   T31]  </TASK>
[  535.337955][   T31] Kernel Offset: disabled
[  535.342315][   T31] Rebooting in 86400 seconds..