last executing test programs: 28.66266117s ago: executing program 2 (id=3126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa201, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x1, 0x3, 0x0, 0x3}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @broadcast}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}, 'gretap0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 28.305562918s ago: executing program 2 (id=3130): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000140)={0x2, &(0x7f0000001980)=[{}, {}]}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58030000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d140309800800014000000009b80102802c00018008000140"], 0x380}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_SET_MACPARAMS(r5, 0x0, 0x1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x1) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000080)=0x101, 0x4) ppoll(&(0x7f00000000c0)=[{r3, 0x8004}], 0x1, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc01000000000000000800"], 0x58}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), r10) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x11, 0x0, 0x0, {0xa, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000040)=ANY=[@ANYBLOB="aa0e00006f", @ANYRES16=r11, @ANYBLOB="010027bd7000ffffffff2500000005002900000000000a000100"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 28.115988013s ago: executing program 2 (id=3132): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x120}}, 0x4040084) close(r0) clock_gettime(0x7, &(0x7f0000000980)) 28.019563921s ago: executing program 2 (id=3134): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0910000000000035090100700000000600000003000000bf98000000000000760800000000000085000000bb001818b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 27.950056045s ago: executing program 2 (id=3135): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x3, 0x42, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r1, &(0x7f0000000440), &(0x7f0000000540)=@udp, 0x2}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000640)=@ethtool_rxfh={0x47, 0xfffffffc, 0x2, 0x5c6, 0xf, "2eaacd", 0x6, [0x6, 0x9, 0x80000002, 0xe4, 0xfffffffa, 0x8e1]}}) r2 = socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x3, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x502, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000000140)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="150a00000000000061118c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x100, 0x13, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0xbd, 0x8, "592ed4ce78e27f5ef98582f2aafdfde1960b9d2cf11fe0b38738cd6f1cebe4f9e6e5b4aa58c04897671a5e4dc40efa836035535a3ee3e1ae45e8912297ef519d686321144df85621fca92ab7d4c034f6763c83741ead08c58c2fb840714ca08b4d6879db9fec60232d5fdd6287b05f192da2b81112159888eabf5ef5f0f404e77c0760677a34f1352d34e3252948a82f08b9bd910e04733d3755d0ab0ab2d4609538a5b25560996133b440ec445e6bf07d9de8617ce397c650"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000043c0)={'vlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000740)="920306007ce0ff020004004788aa", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x18, r5, 0x1, 0x8, 0x6, @remote}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000080)='syz0\x00', 0x1ff) r7 = openat$cgroup(r6, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r9, 0x110, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 27.39483023s ago: executing program 2 (id=3140): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r2], 0x48) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) socket$netlink(0x10, 0x3, 0xf) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0xa0000001}) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000200)=[{r0, 0x42}, {r7, 0x8}, {r7}, {r1, 0x110}, {r8, 0x20}, {r0, 0x1}, {r4, 0x200}], 0x7, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) 27.147105724s ago: executing program 32 (id=3140): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r2], 0x48) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) socket$netlink(0x10, 0x3, 0xf) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0xa0000001}) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000200)=[{r0, 0x42}, {r7, 0x8}, {r7}, {r1, 0x110}, {r8, 0x20}, {r0, 0x1}, {r4, 0x200}], 0x7, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) 4.3268495s ago: executing program 4 (id=3337): unshare(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r4}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r5, 0x2}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x24000800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = gettid() r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0900000004000000080000000986000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="88020000170000032abd7000fbdbdf259b98f749c4247dcecf0ec0ec9aa3d92eefdf13f4050f95c489cacd3c9b48ad6dd4fb9108275c1608694138e533370036d250a75992ac5651a48e502d25546147986a2941997e65758e03cfe9a36ce7236b6d38c5ee530ccd0e993d166fd6243c97a8d68c3495f2f5216b6b740d014b8008003900ffffffff0400788004002a80b968b216008d1765a5b27d26e5f8e6271954b18306b530b762aa8994e9c00ed4eb4ae758df86cebf67e0085f288ee60967b69cb289fa06507f67cdf961e8cb26eb196c13a9b255a7a94d1c3c9e7292b070169061cade510973daa66f5564f2db48c1b9ea4afe81878d35b25d4d9075de473ea2c0f93dbebea713bd2424560f13123e8a4e7b90ad74dd89ac817c39d3ae162961ecafe38709fe2b92ea4e48d00e71bec4ddd216f9798a10cd398b1ca6a57a0d0412ea57b1f462b080518f85de84425908d25dbcaf05ed91d701957d1717e981da35d8cc90cc85e0c8dc6052d9d441d01bb79195fd2dc4d7665b33659c929e5a7f56adff0578587741df1304005780000000fa00fa800400368064230b171de69e785e886d2ec4645fd6c4e847be9a252f003083e098be4c73615972c8b7b66d4dc4dab072186a257deca7d3d0c44b0ddb463fc38943422805ec6229d1d0d3e2abceffe9bedc78f053732529a7e6dfcfeacef3d8d22dd35aa1984210cae55ea6adcba8d79bc4bf09295e9ca0d60bc9a460341905206a990928e95b9e96396fcc4756e5b3327dccbc3ee5fc1daa28fabed888b0d50075e0ced07edd5b69bca73962fe49789b548a5c531267c9bff7608834dc71ebf59a8caddb724ba87174143d3a59dc040007800db5c511f2e342e9d084d25467c0f1e16a20ac88a883ab5c3bed019c87b954667eba84e17277196f26341b5352d6ddba5adc00009318efeb0d13bfbb8f37e197cbc9e29ef69c29ecfef55be62d08afaef4e2d326ff37e18dc5f972505c89119e8dcbba4b14b7c90ae119ae8ac36d8eda3be3b61fa8b920a2f03cdac98f9b9badceb742bad798d5f245f2a6fc68c325bd3e198d43c45e6d7f4b76f9df8c0aef2956c18120c35f20831992e26753556549fe35297cd29bae76e5c0bf31b3452f708043bba8327b2618cb"], 0x288}, {&(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB], 0x1138}, {&(0x7f0000002a00)={0x550, 0x34, 0xa04, 0x70bd2b, 0x25dfdbfe, "", [@generic="27a7dc9e064593a5bbf7cf281bf5f6be328eb4911b367e36ef2310cc712ce57d58bed2728c31dbf534fbc5c66a4e8176a86f72d405aabf320c655517dfbe07d0290b2a3b0a", @generic="8fcf7029b561b9dec69b5b84de69563db157253b66897c4b96887f773d3ffac0bd33c81105f13e143bd8a66b46bee97fb9f9cc24fc54c0833c0bef53298d07d24f29a9641eaae717278f6fccc39b3fad73c3668f303937034c43badf7bdf6c42f4a903f6d2024dbc9d5f179dde419eb06771b72304c8d84d0b60a50badb688361a82b450599f451ac52e1bfe91b08a5c01172f8f91bb0cdbada0d5cdf67b4a8a2485d9249b583de273aee17999420290aec3d142f102e9606521e410b7bbcb", @generic="2c85c13745c9e614e31649feb13256aabd2c719926c86146ce2589733407d820d8ce9ab9ef9df369012ab7b22cec1f1edba99e22ff12fa2faf09b959fc41ce10a8d5a953b8db5225792ebee5b2d1e70a1fbd49d8cf88892e57f6623e4db0a91d95371cc478a114df2c56b39c3a85b83c4630df491de0c9d1f7540ccea25416f750da56cc07ebdfa797ee317e602f0916e0c2a5611cd816595a71584154374a7a4d7e20853532d5e70eae31c9288acdcb5419da01b576732cfbc431c136cb7f26d8e3d5d23ed14a7b464942fb335d78bfaf7dcd50", @nested={0x178, 0x97, 0x0, 0x1, [@generic="86555686de3001bcb9d8cbc3b1aa795ac73465cd57c277fe4be97faa66bed48774e747636c89700528d8fa3e549bf5dc862ed4cb2b8bf598918031e426a9f6d02ab38b8c60998c1c6f0963c5c85634a33afeba491398e0832fc47f74518b6ec8b6323ab2409701173ebf732de1753cd3bae907630242d060e751b9878e926f817e02b17f60c0c5503ca6fdfecb00aeba6c0e30985d9d31f60ae3a1ca693ef0fe794095235f3fe27371dd38dbae7e058f6fb6b3089cd1cbbb545e4bee2b89e5bd95dd5a0a1815f14e199741821a41", @generic="ceb2dcf57d24558159765ef6d78ae837d8a235353f021e297f43aba95a1e5e2b3b6261c486814be8c4fb0e178e04137288a51a497b3034c2bfebb70378026f473610daf6cf7588dfc07ab5abca2c090dffa37a0a1a74e7b758b9a16da58d76c1ffad017fc01f90c00826d0c0bff18edd7ff566450d7d2584e11886e2a4d3d808f848e56449e661e84e5dac8983c1539f353a6111096bb37bb18e5c27a1d37e73bbf4ff456057"]}, @typed={0x4, 0x105}, @generic="ef3779d69966e4ca2f448d7d9b35c3334b4a7a4911c22087a971b1b2b6c08a26474ce04e25cb77d0d9405eaa049df9660138e9a9a61b8e7f2d5d3076b7a9aa0682b4a86084ab8be5df1e5e5496eb754bcc53e6fe97dfba4a5285de694b131fdf0ddb5539c07f3e4645674c2b97043a8a938cb8abde0ff8f383bd787db886cd4272c90a1acf5b358e17b406dbcadee5ef733cfa0b5500cd46105d480e2121e0a29e8257c4d48c8054af4c4838c6bb92f63015aa4bdc41e8b4026d0a8f2afd620a28ad2fb10abd1d8bcb1c31bc1f1beeadf312eb04dc2e58e9c906f5ff08d03e9520ed6633e30c2b0bd4ba509eccfda132a17a9832c124b5451d64ed481c6843", @typed={0x7e, 0x12b, 0x0, 0x0, @binary="b2efc7c99f2294f30acb8ac3bb90f3a52821079cfb6fbb5daff664cd532f00fa58afb8fde87811080d2fd487bbc5497d6d9b8ab293d4ab666d3017b78d201a395f801579eb7fa1bc91e5e16cac094d891baf07c67ba812a3e094f942b24706e363712b3f27c72f6b67edf05191f10a5adabd18aeafce7ab0a309"}, @generic="287750dafc07296f2701ef786d9ee2c95009b8c77629247b3d6d07150c7952d0319de4032581e8ef32adc49cde", @typed={0x8, 0xc8, 0x0, 0x0, @ipv4=@empty}, @generic="2f83a979b49a466139a571f56b8ecbe95ba0fe02f6c930549046409043348e34cb97b657c82e7d3fee60cc443da8bd0cfc57886a1652af"]}, 0x550}, {&(0x7f0000002500)={0x4b0, 0x3c, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x4, 0xdb}, @typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@local}, @nested={0x44, 0x113, 0x0, 0x1, [@nested={0x4, 0x41}, @nested={0x4, 0xb0}, @nested={0x4, 0x138}, @generic="f7093bc3df6c90ec5e74ef8bffde060de61c2b268fe9c589c3901fe14861c89a677ee092", @typed={0xc, 0x14a, 0x0, 0x0, @u64=0x7ff}, @nested={0x4, 0x1a}]}, @typed={0xc, 0xb3, 0x0, 0x0, @u64=0xa}, @typed={0x8, 0x11e, 0x0, 0x0, @fd}, @nested={0x8, 0x74, 0x0, 0x1, [@typed={0x4, 0x4a}]}, @nested={0x168, 0xf2, 0x0, 0x1, [@nested={0x4, 0xae}, @generic="27448b5a3245759266b318e60797748225b0838983900337bb13b0b4ccc95800ddd4986b5f26690a3593c47da3cb5694c1df6c08f7fd3180b70252b8c59b14aae8e3efed5c699396944c74e53c6a33a240253f5eed304ba50385b1b75995c42184650508559ca8cc834a045705e3890be0215ec50eb8a64ece0f5060c13f39a6acb64692d5372291680768779d", @generic="204adfab6cf148962fea4faa9377e442f34fe3d52699b05ca92e51ee702d71f01141080aedd9d22e75d57f5a6b6da9fa012de5f6e4ca6e3a37d57858efde2e972aeb5d379fb1ff751b600207db91d1760df90197ccef35e14176ab916f9d192029b374dc08860a0612cdc295eaab27a6e7ea205e4abaa8c2b2c15ebc906f203b3aece06ad7b4889d405ba508ac1d1a4d8fd5369c0bd3e03b663ebc2a696710b93a83458dd7edf25366d592c7746dfbaa250720fd4c2b8c664c4eb9a981f318539848af332a0526", @typed={0x8, 0x147, 0x0, 0x0, @u32=0xb5b}, @nested={0x4, 0x96}]}, @generic="6486b1f59d2d08dafeecb1b5cdbaad1f7f6915b50c41f911a56033ed241b3200712df5ad222fe5e30df255421047cae29885000cec03cbe79a61c6be3ee2b26f4e78734c26d2072fdf07a867aed0ecc8013ef372a8353d958805d8fd0ffc6aaf5259f50b2dc1d0c8fd79412e5c83940e888f3c9d4952ecbfbc15546b1f853a51ef302e1f215978a523ab03", @nested={0x22c, 0xe9, 0x0, 0x1, [@generic="c59d060cfba530d3628fd5b5a9edeace8df6074e84971974dde7deb577d988d5dc3f69c0e35d40da8a80409824a3e2799f978c53abd1dc7671113fdc00a924ddb0b345ec5ce03a6549fcfcd665e6d7868885083777c447487e51fcfdd1d2314c4cbaeceb7300554221c9e468814be4852d49b3dc6a3b8eb9206acc89c510e3cd79aedd849d680f627ecea4e46f1e0ba9e9c694ef658bf307a53de0928cbabcdad534b11d42", @typed={0x14, 0xf1, 0x0, 0x0, @ipv6=@empty}, @typed={0xc, 0x74, 0x0, 0x0, @u64}, @typed={0x8, 0xd1, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x5, 0x7d, 0x0, 0x0, @str='\x00'}, @typed={0xb1, 0x14c, 0x0, 0x0, @binary="5afdb4d17cda8e66bed358eec083ad0a52c86c29c0cc49a97babdaa7df7db88d14cded83b9892a86f571d99309d4111981c49b83cfc9d6d523437d9ef12a1e9fedb0fac6bb2d788e7a96013dd7e7f8b37ef990bea115139cb5f8bdeb1984a98749a1750336801cf2bdc579dcebdeca3f38b4432876041dce1e5cd9b2073ba51c81495b75612d18b576e9abcddc9fb049381dd34ce7eb2b13bd5f58535909f139590a81809b1e5dcf3c857d8d78"}, @generic="c2a1aacbdbd5f610be00000000c2224c0602edd7e82c9443b653a5f3182b24913d06428ef54cc1f2198b1080240da872a47be28800000088907c0b8fabbc47c5beb4cb3969e0e2a2d4d9db600aec684c618b105fa1b15583befcb0b41a4b1f0faebae8b11b0e4b1a9669fc18414417798d7d9aca2acb31e0ffbe7468afa5077f669ccfc59b2a054bc4ab7545622277c022ec5ed33b6fd196e98d60", @nested={0x4, 0x74}]}, @typed={0x8, 0x91, 0x0, 0x0, @pid=r8}]}, 0x4b0}], 0x4}, 0x80) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000003c0)=0x0) r11 = getgid() sendmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000002c0)="dd44f0634872bed0949e499828e05f1eb40808cc58f7862a19a36a5ab71f11440281a345eb52cc96a4b70bdc644530750b0e3a69108907dea5ec54288aefa7384eeb1a89d768a9b537009748a3e54c78e61b3a3aaa82bdb99c4d652cb089c589af548f0ea297607e1c4da6559e7a0317978c75", 0x73}, {&(0x7f00000000c0)="c6df3bbab25b6c612444a56cc892598246891b0bdd3a3ad2ad", 0x19}, {&(0x7f0000000540)="0df9f893cf6b3cffd4f5c3098cfdb7ef6af2297c3ba136e2839361f19922cadf2d33ef6a1f4c1f83db0ffdc5017e529913bb103440c3b90707ef2eab9084c4291bf60b8264d702a47a65482e12beb08d84d0723ae5c9734b24e21512f39b1a9b1fe03156945c951ef291ad21e0075701caaa03235ec0bac51d224938b68fb61219f4e2810cdac3d6bae40e1812f9fc7aa89ce89cb19bc5b9cf1aeaa17828b4903590934723a327a837dbfbd814e3d9b9d73d95ea4e3a145fbc3b9644ef223e1df4", 0xc1}, {&(0x7f0000000340)="70d203564d45ca029993a07ea44ad359ed00304b5e484c197fbad4fec5cbe8420462578bdffbb3c37b4b889212d9edc39bf508dd", 0x34}], 0x4, &(0x7f0000000640)=[@rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}], 0x78, 0x20000000}, 0x4000) sendmmsg$inet(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="e647", 0x2}], 0x1}}], 0x1, 0x40408c1) recvmmsg(r2, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000015c0)=""/32, 0x20}], 0x1}, 0x80}], 0x1, 0x10002, 0x0) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000080), 0x4) 4.114418759s ago: executing program 4 (id=3340): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x29, 0x0, &(0x7f0000000240)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="05f700007f000000f00e0000090000000000000079a768a5ffd245eb480c32133f37b7f3c7466828ffb01ecf09a252c190694ce406765b000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000007c0), 0x402, r4}, 0x38) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x8117, @private1, 0x6}}, 0x0, 0x2000}, 0xfe6d) sendmmsg$inet(r5, &(0x7f0000002240)=[{{&(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)="02", 0x1}], 0x1}}, {{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000005c0)="757f2aec083f6db26b3fd0f2289948de3a5483ba294e1e1a307a401168a97b253e250d9a5a1ec5727ccc1f56bd32f4b0049316e10589c2def6a1cb70d84d", 0x3e}, {&(0x7f0000000600)="2b88655da0069ebd254eb25f92cb183b908f786578610ba0ab4767879683f43d8764956a2dce83b65467", 0x2a}, {&(0x7f0000000700)="f7cd450dab5a6cb0c3ec27f338b31eb3f6003119f5734338eed38086d8e2677f5e242e1d0561397ad715cd3975e461d0cbe83082d2499efc22f99381eaadbd291ee3b58056370808bda21a57cf9a92a67b465d338799da4469bef2a1c694f4f7ad328a6253ec275f42424da59d9fdf58b69c968956ba9de00ed7a399045e92b460c98a532442abbeccfb1febd9ec287bc9a1e87ddace608caa9d672c13", 0x9d}, {&(0x7f0000001100)="db5622e9138db811d8083c12337809de9104707d2b424d6aef2d3c65c1bb967619e48c9ef4ef3403499d3411f273bcc44b062d07a40af685215e9de2beb39583e76bdd1e439768f45a391400e1ecdc3c58494846f83550404c39a342eb24fc0674d817b4b1615421e6f9cde3f2c330007b561b9b776e3398a51d7ff78a5685eb4e95e4d694e69c6f67681de05385918385bcf0dffda91718658238d662418192f1ff008cd6fd380e730e99bef3048c10c387b0c84d354c99c94fe676638e6cc0dfb9e0822f9f2e6a1f7b3e8ce5abc0d2aa914ee88fe9a05a17ca333d5b7b95789cc757d40d74b1c77623dcdf2d1a5b9f327a2c248a27874ae74621686cadba28fe8ca67aca48b2c0d420a70b1ef664615f1c29d2d327b8cdd277ecfe3bd9219cc2833542c1ff057f8140111fe5bb97afc372e345961220212e3af39fe48a8ec235ec45b56e872b980e91d4048cb5a20dc25deb070a4bd6d5a6c578e4f30a86251b929dcc0021836e5b7db3e45354cd782bb3fe244e0b80199462c5ed39b0f525b080e9327c7df8f6779bbe4b6863a3cdfc78c16d3cf186a30e248e6b93b3185c9cc14d805762217823052d803dead805872e866422402a07912a630155aca284dd09945c23bae51086f0431e2a814163c011d2d6f573d71c3da001166e4d2a1ff6d9af5349c8637870e504a822bc4c6061cc4a2a1eab70d4c00aa5c68deb437982e8fa825c933044ed019df103fe53356f5cbf2e14a48d1c7ec6c26e9f13ed1194ea7f7cbefb86fa101f1d8a9e1a32d839580d8cfd5edf145724da157d776ff7794ec5078842d0ec1c4d26cc8c0c0658641e691f84ce13d53675bee78ca28f7d64e446fe95c35daedde2d7ab5dfce817298b0fc90e4d8c739c97e2749fe9cae75cb852f213830fc9b6c874b760f574412bde878e3c73021955147e7cfffde68b39da970405a4e5e0dc222570586fef70a6e40845b5a8a36eb1c64819a43af04dde9ee238c6776111005f0d56c485ac1edbf9a40cca57538b2d06e8ce74af6d8ff8a5e767bc92e33e855b80559cffd0b0dbe7b8adfc60e0c9faa8bb66eaa44f3d606159202856b9e4e25ac898cb19fb070132b148b7a82cf993d377007f6fbf33ee50deeecd420fad97bc52a81960e598a3e2d20e655f559ec5435d78053393cea0912d1a01ae2556383304082fd916a271a572502f0f8cb8333eb6927a463504e40b993468368ee8f6dd80dcdef004ef998db61a264d912f26cae013857f99ab9b5fcdd1c914cd0db4adb6c82f36988e5940fee80433a43d03aa685942efb8a92d7193f515670c11ab29190a32a10ba9e924e1a14fdb798ca65407187ade940b0244b008673917feeb65aa9b6d72b21c00dcc331444690f574c54c4606baab5d9ec42c218ac34dca27ec515031177d6a08b91323594335f16313c71308b55c6c722967100f1ed803ce2729f950c2a9d66be6c67c61535e4b0e465c1d456e9dd910968ed5029db9b3ead7f1a282c0d37f44c126d462a45f4d4d99d3c1f54480dc7152361bd7c9d7c684c9ec7f355194f59aebbb4bc67182e660ddfa91f37353988a6c27cee35f537ab9d02fba90cd7ba461a339aed8f5530cafb94b20efcb0298d9190a7515ac48a14e43547f2db757d204a8eccb2fa82824328ec3343f9f2d12dc1e47862ad520c08a2976f46549471dc8979017c4283d43866a11a5adc11e6f8d2f237765ac8a576e7e00651563f6be96120ebe56f3acb395ceda4a8538590ed453ced6b4530f47bee87dad3c7afcd63b255268958cdda2dfa569514e18a3b7449fbe18c73e24111488841f82f82503507a6e1db9b38d8aca1640cd33411087754e1f8cf3c3645eab1c9c20a3f18c78d3b5a2592c5529e7b9d2a66652f050cc252b29e26745e3e5a8cdee70c1c5f55cc32aff337cb792d16f3f30d623848ff456f40ce3a1805665402876c6abef7a54cb3bb4df770f59e74d31d1af294f006af4409206f0e8a2eac902616581d564a57bab2870d46b4b0de5acbb5ab2c185f86331c3ed7955fe60583796f30d55419fb74f6e7795b78d53ff41bcf03b9b4d2c2861cbf84e521134210746f096b1b0b8fd434a49c4f6dcb0224f9186e4ae0e911d64e3d7d3230161614c960a811ec6b24ed23bd30a599013f12642c09cf5242948cf1b68d0a29e89ccf8af9bf259c18cdb26410ef441caca661ba1fefd170328470083d656d0b279ef75b2ae3fe55d1164388063d283b9d824f763a2db4e4f2a3dffd72c1d792050d40b23d87dd05a5986394f82269c3647f86fe1f7251e3268852b3a0f5254bb61f898388199cd5bfbdb1c706d36ffcb65ab9c46bb3449c88beb5a11b67d31c343be3fd35370fdcf452c1a14f5ab5036ef849dc356aa01b2d5f8b2c7ff39ab31cfd7d22cf1ac47b620e31f7c895ffc3b5f3e53c9896660eecc0bdf1e52d7e93147232ffb4dbeb73fafcf610fa4eda15fc0ed6c2736bc994a8ad207b95ff60d982bf377cebf3d3c81133a092f137ffb4734ef2580d6a9af30a3d1965866a82a1a1b3d681ba709e412ecc1d8e6df910ee525f3de9e5c5d11c94fbcfe9da6bb7e9839496781b661f4d5993b55bfd9c903844747c9c037e698f33164320e34b6e2cb77c1a1a59f1dd7258b5090686cb9fa1cfff53d5c72f120879ef8445117c14aae4bcf7c8f64ef4b2182e3f448f3c2dfdf867839656cc2aa54d04afaa863309b5e778148bdeaadc1c19c408db43d0ca6187d1665a52643c0c9f57155fd7c3a8f35debd720d841c9f5e7500f8e543b7cc7da00f07a94f763b3c0d14f0031e09b5627c87b4197478e1b5ba08bfbe966230d07f78f5de259cbf2134ef6268008d908c29c24ed2a80c203fc636fa778dca411b7dd7afd18180c335e544fdf7a9687e5ca06c86188e2ceb4ee7f3400dee1e367e195cf959564257103a4d8cd13532a242062c3ace350e0ecac6920648629d972ebb88daed65657085f3fe1e2d93fdcb65e694ded44155ac4b4204a005198d46f6bc9d0362419441016e5a6cf8380f5784e8f8a5d84fccb3ad62c4395245588c151566717b8d7bf273698366ca9fc47458cefb2ae7a4511fbbb808ca5d7be7e973826ee4eb9939fcecff9b18bad1b62cf6ed883a3d23f69e194f2ec0d7241971d72e4e9e6933a34e08e3a13b073798722d75384888431cd237172a855d391ed51b0e19ce704ebd416ca01419763cc825748fbe4c494e226c044d4f04571450c37f10c785a57caabef63878fefab139fc11f25003a07dc837e31904c08656a6a3dd9af335107fef1ab759c61192e4d7507da2485746170d8206e09c5c31bfd69262307354718acf58989dcd4c653e6f35c2223256992aa2e783bffd2e32ad8e45ff550b15b57df085501cd85d06ae43a7613324b9ab6c26a72dc247404b8947f57c77c7970136619502696162e00dc4f1c55e7ce828dd81518caebf434094a348bca098bc62ce3d45511feb17fe135eb3613424138408705f883c8f038574ccd22cec2ae5ac2e447d3c129380d7986ec7bca7abde03597ec4d1ebd8e92fca1778f9a5af9eb44aed71a28112d3e98ed47c4c9c56d6b91d0f7fdead2ec85683e2e1a28af464728c0feb6275a34c8092a486a23d83d50ac11c0834f6305d41b17db69c20f9f95317b90445f80907df8f0c081f654f0daa8960a5d5bf1985a8f415a7cff597277ce3d72fb6f542055dbe4f63bc247e46fd7eab0e1ecf9745d930808bb39ad103d71aedd7ccc8bcf4d79a2bebe56bdb23a3e1683f6d435ce64b25e4c2c1bd2d7e0feec336e27b4f18767e2c89fca9b295cd0f442b5b956fa9c57da4f2ac4d386a4d8e4d06448acdecd63d5f082e517f6cfdb87a888756c0f1308c5a546ffe388655194a72cde2a8883c94cc50bb2591033578e2f1e0014ce5c5302483dc2318266b7f4bf12d5552a288f33f6f47f5d09742066aa82aab4b704ed17848ffbb814170f21afb7f79c5e9990cafd9ce2bc43287692b283a90367a7099037bb4f0dced08ad0f25ecd5313895da24aa2cd569823c70e9f11c6f7d6641fd6427163834bf5b68cacd45e9d890c1701989378e42e0759f50dc7d05fa9a1aad81cf7483aa23c3a73da14796cd92f6132d917d039e72819f51d1f0d189434b7e3d0986d9a1eba393fc20993355eeca237562640a1573961d70ca167ed881d84c118eb970fd23209d68ddc828e1d5e834b26715dea4d294ef75d1c641b8ff9965835e5d396634eaee3dcba560b3c69f7434bb8794b7e3f37bc078351423f412838949c783bc9239960ee45a42642cf38921eae2590b4003ecd0d7a0ec9893362b3cfc10dfb13265804bbcc816c34a84ac84d97d23cf054ae052a2380f7d4b5d65dfdcc5f8107160cbe7673bce100e13df60c0225fcedf468672e111c4bf6003ac521d50db731dcc29e28c722f4266f5167ab1c46c0feddc6be7a87a74b22e13a352bb132bf2b46d848ab25220527a2cbe34230df858b4e5e0b0729777f40f4473c9cab277fcf28a3ba496c9f9d968d258865d6fd5e64b740338d1dfb2b8fee2e0cb4558fb3192576d4c27c05984353f28b0cdb338b6faa1cbac87ac606dbb0668c06502e7e27bec82c7429a8336909ac55168ca395d0a16532dab0e0146ffec8436f579b412c7d1b6b2a2f3842d99733e0d85f27a198aa27ec26979caeb29aa977ccd371bc359cf51f315626dd86fd195346a4d8f4caeeae009d3128807f4d7de01f3d8b5aa251f94532084e197b9df29b59b0156fb45ea43bdc76987b3d63e38633de33b863a5e9278a03663674854421c9a122172b62337d20c38be9f91376d5e796c46ae7fe0f6676722405d4b3bc37d20e6d85d7a1e98adc543889bc313303ae814e9e56162f5059d48c9af8aea681ef59f1bf93862732cc00647601b6537809c96a39442b33fd07ebbb842796efc6902d39adca632a749c92dbaf39ee3c1f824505d5c79a2df6cf31e7af364ce33fa3d68a05a631b3e54b71323c6820ed8ced7426b24009d1373c6de64ef112261e69bff8f28a8e44181c821cc0606e684cdc7f5ef9e39270b5c8a925b9fd35e5cff91acdced58494423b9571b6d72d554f492a4b4c4379d28abae34c54fa6690b9a888890989da0df0c8834a7d6aa3d69727d1ebee935dbf827170acdb3a7605f224596ef7c8a262e6a198ccff79d74903f2c79c354d7366ff39a22fb08243ebb46db9c3c4cf8603299a076a08bbbb11b9f4218f74abe460500e8935496afa374f05c48e3c82ce7d5d61661072ab3373d866ed11339c66144ff9eef48ad5531e0e94409a59171ae9be84bf26de6561dc0b77d2ec64e492bbc5a9bea7f34205c17e4051ca91241595351046a128937d797feadb46592e49ebfd41eb1ec8b99da95353eac28b79904d6e552799762d2f1eda63e9630227f1631694122a602452e96518000acea3f05d39209eb0016a63c1ec202798e57dadb1086bd3d8dac073726bdbfcb02bfda8acbd4baaf7bc43b2a9f00143d9b5769545382000c624149e94aef65f837488bb49d62a1e1f5f65d3edc2d5a615a484bdc1a43cc87653fc833a8fb8dbbc6723eb74043062329efdf023faf1e9047616b8db3521e810e5a6be467b6a098143c350103cd6970472ad5e706b2d497cf1d26be60750d7ac94f7ef553d7999043c95dfd3351385d8fdae5c29059568bb825716815020b8c4fb922199ae19e568b406ce2d9829d24854348509600f8ee020a74375ef099ce1a9d73a0f68d9dc9ae9df557cb80da651108f1d15a32cce2416a6ad8d554a00abc", 0x1000}], 0x4, &(0x7f00000007c0)=[@ip_retopts={{0x64, 0x0, 0x7, {[@end, @generic={0x89, 0x7, "fb1644e606"}, @timestamp={0x44, 0x14, 0xf4, 0x0, 0x4, [0xb, 0x401, 0x14, 0x5]}, @timestamp_addr={0x44, 0x24, 0x81, 0x1, 0xc, [{@remote, 0xc5c5}, {@remote, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@empty, 0x8}]}, @timestamp_addr={0x44, 0x14, 0x88, 0x1, 0x1, [{@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x3800}]}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@noop, @noop, @timestamp_prespec={0x44, 0x1c, 0x80, 0x3, 0x7, [{@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x20000000}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x1}]}, @rr={0x7, 0xb, 0x56, [@dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0xa8}}, {{&(0x7f0000000680)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000880)="5eb10274ff3a576a7023126639d1ba9f3c7273b21806c120460df1122f9286d81d4027bc031080fbe5163036a1fdeb2bd84bef9e7fdf707631c40c163c7cd8e3109035b79033ed4d79876c9cea501544a927e1890733d2500b4a80727ed4434fd230c5e5", 0x64}, {&(0x7f0000000900)="173e4acf5897bd1f3612913fd676442a1914f412", 0x14}, {&(0x7f0000000940)="7d40e7688e298da216bd112894fc0f3adae705a2015a88da3b1d9ef390aefbf8ebb105d206923a55ce9a48ea07a1a2e2c3bcdd0da80dfeb68fcafccd2c812d676265ada30c5f365e99f500671c3a9a6c09c23b17d023d34011f8f19e2345b6585027fd3ef3423e3af71f38860583efd1f459", 0x72}, {&(0x7f00000009c0)="d54c893f4b325d1c8f1ced70168b19f9ddec52bf1bef1af076c32787c0f4a17b6072338b8fc7fffef829ca2b102af497e51a2e08ccac96c6132cc973252ea981949fdd931e1f6b59798737fee419da5664d5decf09444c6180b6320976acbe2e2b0f5bb4c8b38a8f5e6e4483e126ea924c62dc87735bc85b5240d9c4bd284508190cb969ab13548fb55fbd79c2146eb7cbf5e90bdb9cf358f6013ccea8e3bb5a0141bd6ab09e14384fdc1538da12f5a65e48866cee3c3d80784b0c34eb556b16433e107172675b532e6f58f4a911737f18a5", 0xd2}, {&(0x7f0000000ac0)="c67d97803c6cd63d9cfc559eef363334ddf53f3157c3a7a904bb15df8a362f89c4646f7c30532188d62623f58dd8757fe5903f9c5747b7c9b8f759eb0375a41681564ca6c42739b9da9f723e3315ccc0f86081b485f9a7d91dd9bd7c2d640100c32db31799323622a301a51e891ce58177c4a13151e4a76dbbcff40706819fa90fd9a040", 0x84}, {&(0x7f0000000b80)="48c0d00948aee35321a93d1a3531dd966727af322d6567c524ecc6f1c93028e4bf53999dab5323fdce804d", 0x2b}, {&(0x7f0000000bc0)="c7b1e2fd50020b2a8cb54ec1438b30b34ae9510e040d37ab65603d9fa90a9472d920de391972eb352f0be3370bb123a0f159e102f47ead911bd77838bcaffe4d8e5c061c1b5071b15327afbd37b4eaec8f8f063a5049f65dcf28f378d8a59df3b9adbea62a26e34105f4445d71f24f6b32aaad4c05159dbac654cd7c55126a751c05265bddb95d4b5c73be69ed32e17f1b0394d7600557a29340a0e3aed87a0e278ce75de6ffa99dcc0acd28159b1c208ebbe2f0edfc90bc3e5cf39ee7726970e95a34609744e458813b1d087c479103453d1c7c8ea4419145ccd2072b69bd2da6dfb661", 0xe4}], 0x7, &(0x7f0000000d40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x5a, 0x3, 0x3, [{@local, 0x8001}, {@empty, 0x4}, {@multicast2, 0x9}, {@multicast2, 0x8}, {@empty}]}, @timestamp_addr={0x44, 0x1c, 0x44, 0x1, 0x1, [{@loopback, 0x45a7}, {@multicast2, 0x70}, {@local, 0x1c00}]}, @noop, @generic={0x82, 0xc, "79002c68a0abb6925996"}, @rr={0x7, 0xf, 0xf8, [@multicast1, @local, @loopback]}, @timestamp={0x44, 0x18, 0xc1, 0x0, 0x7, [0x6, 0x9, 0x2, 0x8, 0xc]}, @cipso={0x86, 0x34, 0x1, [{0x0, 0x10, "6846f2dfc838c09e06cd86c7ecc8"}, {0x5, 0x3, 'q'}, {0x5, 0x7, "0021ad4819"}, {0x5, 0x4, '(T'}, {0x1, 0x10, "d4f8e10b682ef8a4be4e38d70492"}]}, @lsrr={0x83, 0x1f, 0x72, [@empty, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, @loopback, @empty, @empty, @multicast2]}]}}}], 0x178}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000ec0)="ebfcc5a7af8186eb228867baae5b5cf3dc93faeed435ac17c6699d18e2a4365b9e5de3777ccf95a9e90c0de3845f8f9a484ce2261a6a40940488e70f801b1ff3b789f44ad54d3060e9e069c07f8f7c9f5e92b760a88329c7a33fa6496ff2664181fa9f9baaebec6197ac8fed9e0ab961c0be850fb121a0f679fba0ee4dbafb1aecd4af2476e2e3d24b956c8c11cea70831c97aff65514dd67a8f758fdfc41722cd93a20a530a96c6f4d3145e59b5b8b2248a", 0xb2}, {&(0x7f0000000f80)="b4a4884d1bb944766a78d9bfc3b7cc0e14e1d82e308c6a0edf2998bbdb4fe7571a2d1c3bf7d63ffc00cee055724fbda0557d95ad1635570d3fdb6fc793e783a96057db7b655590a12c417141a6fedd74533d618a0fdce6e3b7977cf82919413554c21830ee5a6fe617188a9abc4a5ba9822c4885c6add9b2958293153ce9ed198b74f59ae09932ce427923f5825a951299211bf0f3324c56e222744ba36981c9b9ef191e94b423dc3ca3e4518c95e4c411663f4212e4304a99b32cbdd0c83c03ee6d334b8f", 0xc5}], 0x2, &(0x7f0000002100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x80, 0x0, 0x7, {[@ssrr={0x89, 0x2b, 0xd9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast1, @broadcast]}, @timestamp_addr={0x44, 0x24, 0x9b, 0x1, 0x5, [{@private=0xa010100, 0x6}, {@private=0xa010101, 0xfffffd33}, {@local, 0x9}, {@local, 0x8}]}, @noop, @timestamp_addr={0x44, 0xc, 0x1, 0x1, 0x6, [{@multicast2, 0x9}]}, @end, @lsrr={0x83, 0x13, 0xa9, [@multicast1, @rand_addr=0x64010102, @multicast2, @rand_addr=0x64010101]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x110}}], 0x4, 0x20008040) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20004000}, 0xfffffdb2, &(0x7f00000001c0)={&(0x7f0000000500)=@gettfilter={0x0, 0x2e, 0x8, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0xfff2, 0xf}, {0xe, 0xf}}, [{0x0, 0xb, 0x6}, {0x0, 0xb, 0xb}, {0x0, 0xb, 0xffffffff}, {0x0, 0xb, 0x4c5f}, {0x0, 0xb, 0xfffffff9}, {0x0, 0xb, 0x4}, {0x0, 0xb, 0xb}, {0x0, 0xb, 0x2}]}, 0x14}, 0x1, 0x0, 0x0, 0x24000891}, 0x2004c884) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x2}, {0x6}]}) write$ppp(r7, &(0x7f00000010c0)="1e00", 0x2) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r9, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r10, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}]}) bind$bt_hci(r3, &(0x7f00000002c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x8}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet(r0, &(0x7f0000000280)={0x2, 0xea1, @multicast1}, 0x10) syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[], 0x0) 3.959408633s ago: executing program 0 (id=3342): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0xb, 0x5, 0x148, 0x128, 0x0, 0x248, 0x2a8, 0x2a8, 0x248, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0x0, 0x0, 'wg0\x00', 'nr0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_batadv\x00', {}, 'wlan1\x00', {}, 0x4, 0x6}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'team0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="6f79fb339557"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r2 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) (rerun: 64) r4 = epoll_create1(0x80000) (async) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000004}) (async) connect$unix(r6, &(0x7f0000001440)=@file={0x0, './file0\x00'}, 0x6e) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @remote}, 0x14) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback={0xff00000000000000}, 0x80000006}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x6, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="e0", 0x1}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x80, 0x10, 0x0, 0x4, {{0xe, 0x4, 0x0, 0x30, 0x38, 0x64, 0x0, 0x81, 0x2b, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @local, {[@noop, @timestamp_prespec={0x44, 0xc, 0xc2, 0x3, 0x8, [{@local, 0x4}]}, @rr={0x7, 0x13, 0x22, [@empty, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x17}]}, @noop]}}}}}) sendto$packet(r1, &(0x7f0000000340)="5d13e174d7961d096658e1ba728c48001c884db74c5dda7794552c49ce9b54d0cdefdf3105488a66747d63263ce6f4803cb5344e630cdaa1a3a1007c6c2f6d4c0418fbf6e79e34ef3fd34faa1518f27b9ca76ce0c1543051b627", 0x5a, 0x0, &(0x7f0000000480)={0x11, 0xf5, r9, 0x1, 0x21, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x38a9cf81b437610a}}, 0x14) 3.689161498s ago: executing program 4 (id=3345): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000000105000d0000000000000002000102240002801400018008000100e000000108000200e00000010c00028005000100000000000c000f800800014000000200080008"], 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0xc}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 3.404022932s ago: executing program 5 (id=3348): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x5, r3, 0x1, 0xfe, 0x6, @local}, 0x69) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.37019418s ago: executing program 3 (id=3349): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x870bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x4) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000440)=0x2, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) recvmmsg(r3, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001200)=""/97, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2e3, &(0x7f00000014c0)=""/45, 0x38}}], 0x3, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000018c0)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRES64=r2], &(0x7f00000012c0)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r5}, 0x18) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000004040)={0x14, 0x33, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x4, 0x4c}]}, 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000000000000000000000891214000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001040000000000000000000071120f000000000095"], &(0x7f0000001280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x34, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x24020400) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="02fadb00008003000100"], 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x5, 0x6]}, &(0x7f0000000040)=0x8) 3.021247326s ago: executing program 0 (id=3351): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES64=r1, @ANYRES16=r2, @ANYRESDEC=r1, @ANYRES32=r0, @ANYRES64=r0, @ANYRESDEC=0x0], 0x4c}}, 0xc1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(0x0, r6) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0900000004000000080000000986", @ANYRES32=0x0], 0x50) r8 = socket$inet(0xa, 0x801, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x78, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "014c09aed6a370fc5b5242fc58c92987"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xb}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "bc454eca432343bb9db56b9a5a86c5b058e62aa4547cd56edbb44f46604c0a88"}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "5577f528dbdc03d3392eb67e0ed1c085"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x78}}, 0x4000000) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x208) r9 = accept4(r8, 0x0, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmsg$rds(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/174, 0xae}], 0x1, 0x0, 0x0, 0x44}, 0x20040800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000180), 0x8) sendmsg$802154_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)="59cd2b9a0b0077f682073015fe02000000000000008e6e49aa07c3", 0x1b}}, 0x24048016) 2.840885818s ago: executing program 0 (id=3353): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000540), &(0x7f0000000580)=0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES16=r2, @ANYBLOB="050000000000000000800600000008000300", @ANYRES32=r3, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0xc804) recvmmsg(r7, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000480)=""/84, 0x54}], 0x1}, 0x7}], 0x1, 0x0, 0x0) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f00000005c0)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200001000000010001089d0b00000c121824c2d26ac74d42e00b9c9cc8bffddf45984654db9fe3fb098c12a6a0e9381bea4f5db2c37ff7775244e02515cedfe3bfe0ad0491698bf2205f8e863a0e6e2a4845685672e168a17ce1341366041fd42c45a262de660bfa84cadad22cd376c180eda1ce94f040bf42182f19e34c33c450ea772bde4e7548f07e03810213396c454faa4da3e12950dd527535b9af9d5c9003f6ed8d9bbd9560f1b88274b1f6999a5b096044d3b80a9770a4"], 0x28) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x154}}, 0x0) 2.546133695s ago: executing program 4 (id=3355): unshare(0x2010000) unshare(0x8040400) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @loopback, 0x6}, 0x1c) (async) unshare(0x80) (async) unshare(0x60040200) unshare(0x20800) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) r2 = gettid() r3 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={r2, 0x0, r3}, 0xc) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x800) getsockname$packet(r4, &(0x7f0000000200), &(0x7f0000000240)=0x14) (async) gettid() unshare(0x20000) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r0}) r6 = getpid() (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) sendmmsg$unix(r5, &(0x7f00000006c0)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000340)="48553e2604cf072d4a5410d70d033f469569aab553fc245779", 0x19}, {&(0x7f0000000380)="3daa96bbf7746bc9e35839991aaea4f08b734fef71b55435b988492fc2cff9f9cbde36075d33aebcb756683a24f17f9e18d25a28eaf18800d2b8d6bd103d66221f4278a8ab89969c7cd9166276ecab6f6daf0a11d464b5c84db5c14430cb7602757c0d72e87af636ef3bb3d7be927e92c123bd1da3ab9db0021dc618e7ed86152c3ef38b93339f68edbe0e63be0db7e205ea60c962ce0256e64a6aa6e3f8cec6976786a4da4f6f7167f65a50c831ee0d24a653f94ff7", 0xb6}], 0x2, 0x0, 0x0, 0x4080}}, {{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000500)="a4ad3836ad5d78047c979cc80908e1a5808d3b4efa53f40d01ffd749d4673bef24e63a5890a32ff433513ad145a31df39ff3b55d130e3a72d0a5451dfd0e2308c0aa53375c3fd56b7aaa9af61de453b6bf0028e1ad72262391152a5dbdd743419d68aabf5306414b", 0x68}, {&(0x7f0000000580)="daa533d7381f80701318f970d7dd2ca560891500827b3149523be87605e2e62f98dc0215017832e296469629bfc744d568b4fa569c14d13ece98a368d8cf28039ee5ef79", 0x44}], 0x2, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r3}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38, 0x40000}}], 0x2, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) ioctl(r4, 0x7, &(0x7f0000000740)="b4c9f59cd3c2192fced2bee2754d0816bf7fbf76d949254f8539fa3da40d3bc4e751a234abc15251c95ed482cda8bfc1745c7a3c96e4542d") (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x101000, 0x0) (async) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000007c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000800)=r6, 0x12) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r10, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x40000d1) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r11, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf66, 0x1e}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x27b, 0x1, 0x1ff, 0x4, 0x5]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x50000) 2.479020064s ago: executing program 3 (id=3356): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={0xfffffffffffffffc}}, 0x24040011) socket(0x2, 0x80000, 0x3) (async) socket(0x2, 0x80000, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r1, 0x0, 0xffffffffbffffffd}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="e1cb049f"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x2d, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x3d, 0x701, 0x0, 0x0, {0x3}}, 0x20}}, 0x0) 2.310720777s ago: executing program 5 (id=3357): pipe(0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0005d70000fe08060001080006040002aaaaaaaaaa260500000000000000aa00ac"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r7, 0x6, 0x1a, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000000)=0x10, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="60a40200080000001c001a8018000580"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 2.258895552s ago: executing program 3 (id=3358): socket$alg(0x26, 0x5, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000000600000000228290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmmsg$sock(r3, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="ee5886e0b4a7667690f1667187f548b5dd806b642c598c818297305ef94826cf43347480c352a7687efd2b88142035c05e0b12bf21ce9c302aec3dad537125bf10c5d85c7af2cac9b92bb50a62c1497041f9745be39fc73b06ccc272be3d1570557eb0a831cf68944bf8d2efcbdf362cbe33092b0d78bcc9c3967b86525d47e16d8c3adda02b695bfa52f28142e759f8dbb33476c2edbb2707ee460329afe8275aca6bc1ec8ce9bd03ff0c188e2d8cb8f741800474df71d4c2a1e21a9b52b2c90a7162e2205546a2be56164b1f172a0dce32a1fd903726c08ea3dbe194aaefe465fac3a7", 0xe4}, {&(0x7f0000001840)="b792374b149f4cc5d3f155a0451609108f52206fe2441f23b1ba334d6c15b5268b4301fd805e21e7fc62f1acb0189c2786864f8af215c4c9327efb60965faa14092ae73bd93521b4c1b8cd70ef6991a33d69741e7c7e4b06e1ea98e0543698018f28ed13370d8e43fcecfbb0a1e909f6b4b2af1a3a832c56172abb1960a6f26447066f947d368188198761c4a9b7bbaa984b18f663e6dbeb1ed88fd32ceb88a6c743f303850988", 0xa7}, {&(0x7f0000001900)="814d61e8e52c537c9998f5b84a01cfef88daee9bfe1542b6953c6521e3453264f8dad438b05944c30d60e479cf5d55c288a89dec7b0dcbe43b723ef32926423c17", 0x41}, {&(0x7f00000000c0)="c17c8b83f132c039d41275cc024ca0411772c061cbf34e34f6", 0x19}, {&(0x7f0000000540)="cd50cb276d31843728fdd1b4d9443f0493685a902bbe47543901d67a4b9add80e5c48f94808ac3bb1cc7d7525bd861267c6051fcb1fd90752bd7515a6734563e983cdddef8a40af954c51dce6d3fbd7fcb5f0e9aa5c842969251fb6e9d2e468e84cbaeab607d071abc6e59b673315473db64494f7f86a51820a131cbe13498951f45ba3274e6de36ce8ec65d50cc4dfce288fc5f23289576a1", 0x99}], 0x5}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000050c0)="ee0e4582ba0614e5e185ee74c1ededadbe569a96b62b925667d0a392fe8c900a119fd9c2b14e91ffa24b211a903afb6f6cdd3143f507ac024293e3923d3617e0667a5902cbfce554ef481af6057c861c627557da175c76b452bc68f081f551cc55e8c52440be9529dadcca04a4c0eabf833d9c45c8d01ee6bfaa0615590126e79a9665445056", 0x86}, {&(0x7f0000005180)="b04ec075ede0fd36f1f44707f67ac022dd7e9e53fc1fb4ad288f4155d572f2619b4ce51cd5cf0ad18e429dfd8fa80afb01f25064bc8b9f6790cf42dfa95b0c2eea70b4a435", 0x45}], 0x2}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f00000056c0)="0cf3bbc86c3be13e049b7726659813f6e5002a95fbc60ada3a271d39af8445e7698c90d154b32e68f7037786e3e0baab8b3bf51033206fbb9b82c171950e2f951149c90d88f07d59e2c3a34d1b51ce18c051ad19", 0x54}, {&(0x7f0000001500)="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", 0x1b3}, {&(0x7f0000005880)="1abec9916dfc6341f205af2ddeb54033c4a8c733e1a211363dd3e77850fbcf63c394c6c0cb0f4a0c0386e79590492085d40b0bac721875e27388dc2fbafcf190d69b5a71681be3cd08117460b878f3bb42734e0dd00564dcc8c51454fd01860221bb996caac887c1af262dcfaf527916db9feda28d", 0x75}, {0x0}], 0x4}}], 0x4, 0x4000011) syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x38, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0x200000c0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r9, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r13, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x13, &(0x7f0000000280)=@raw=[@jmp={0x5, 0x0, 0x6, 0x7, 0x8, 0xc, 0x10}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL802154_CMD_DEL_SEC_KEY(r9, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x5ebd0a828dc753e}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="10002bcc7000fedbdf25180000000c000600000000000000000005022741ffd7250d000300", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4811}, 0x8040) openat$cgroup(r13, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) 2.043531675s ago: executing program 5 (id=3359): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0910000000000035090100700000000600000003000000bf98000000000000760800000000000085000000bb001800b77fff000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.866584941s ago: executing program 5 (id=3360): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x5c, 0x160, 0x134, 0x3e0, 0x240, 0x228, 0x25a, 0x240, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0xffffff00], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xec, 0x134, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x24}, {0x0, "d176"}}, @common=@unspec=@state={{0x24}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x4}, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x364) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000014c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x7fff, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0xff}}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x4}}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000085000000d000000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e046648e45407624fa833fa47c9b", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) connect$rxrpc(r0, &(0x7f0000001400)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x6}}, 0x24) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xe1) syz_emit_ethernet(0x81, &(0x7f0000000600)={@multicast, @random="73fd8541f8e6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x4b, 0x3a, 0xff, @remote, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x6, '\x00', {0x0, 0x6, "fd7609", 0x8, 0x32, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], "37ff49a30a299d88e9d04bd0f569ddc883fe285eba17b3ff7a7498"}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001300)={0x0, 0xa2, "dd5074e3f79ed393b1e3297f3fad397c8535fbb05f24406a189604b8b34a697d58e57f4fff5124fdd0662e752eac35115c2b435b9d752c3b1fc20d0b9b97fc67c65078f6864c13b4c4dedaab49eec2823bebfbc414846edced4e696bab659d34a16e4610fe57b81349aac6b13a15bd8463b05f92b5506534790b1fc24f9a846d187fd42c588744fe8c2e67b8d550138b317164da746c29cbb6c8c46395c772fac1b0"}, &(0x7f00000013c0)=0xaa) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x3, @loopback, 0x2}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="692220bc7af09fedfea4cc4bafa2a976ce573e4802f8293969509745fe8440c488b0f41c1db0fc36cff7eeed42872bf6432063bad8a817026a5970e15c7d9fd3b2b815aa2de99c69cb38a1320cbededf80ad043912d7d49feab54d58fcb6bc60ff8e2cc98ac6e54f1b57dc5c4cb6e5e6936f894316090e6758ffa633916e1dcc5040673a09704d19cd75", 0x8a}, {&(0x7f0000000140)="bb8f5aeb69f2f3c3d5cf8143b8e312c7db33506495378c76960ffe57861c3f6db65acb93231af1325e55ce2b601012fb8acb4bf33fbdbe65979f6900ca6a76f7bbd91e3ccc7c4ceb86c659ea88d6e2a2a6755483eb118392f459e4038e0f7819e690013d4b355a0bb61c93271979399e9656fe7300143e42f83ca28ee1b16277e8db5a0ffd7f9a5c74dfca67e9885021465896cf1d12fe7cdd554187e4d005f7287858b2e0de426571cbfb8e8e1f9a554e84e2c949c039b1b3ba13ec133c907e03125c20faba494e81594865165da57b4cfb19e84cd937640df9f4dd31037a32f44834e5c5b94929f73439f30ee19b91c2ec2afe8921fe4b910d34ff5c29b9f06e29b3df25a29025168f0370580626b7c461e122ebc1e655d41ef644329225fba1b124faaa223c29034c5d9b5f9efe98239126b6cffa16bac2b01d718900dc06253b9069b90076a3943f0bb4fe5b8a7e9f491ef4cd9236299e2fd5ee36361edf4a466a610b27d5cc5b59613c7e06a3e017732953859f47bc19e171a02ecc5bb3e30f36e20b02ab68bc8ff5aa894a93cb44d237b13d818fd4417aa6c56c3cd784e9be3072c34e338df4682d54e156650ef7f50b278d87ae8164ce91d7de1203d4e94f9619350315bc51abc8536ea0f3e48c8d7c7f40b63439ee6f58ed31610c4725c2ca712695dc308e466345757602fe73b9d1e5dae1d6f9252d0430e2fc2323bcb82f4a6243faa66293788e703d86378f41dc6bf5d0cf79c1805a3b128b12e596a3e28e2725d4be297309ac918b8fdcb702b1b22674ac030e5267b478bbeab57e0a24963f13111fc929091c17bd924b24f18cd0d0f409e6f1ad0c813449bd450efa3488e7c0550cf91f728dd249fef9129aabff99979e6cdc5ab1e759bd735a3be3074c6d77d2a612e70cd2b140c7e57e2f0376a0ca6742072690c014ff424fa5630e042e8a6d169b9b652f9c4fde7df93e411c8447e028e7d86cbc635a704b9ef932565ce792649ef8f5aa5117b09a2ae7c2972d73460ef9f339aa04d018dcc0e69d7afeda13a918b9d642768282539fbb92e7832412b985d0cd47157a6e2a77cb6cb1c31d4747c521bb93507d5171a89f82780b9bf4ad6175808cca00bc894aec61d6263e1f50d20ae57099b7075ee0b08c2f685f89e1b71d513aaf0cbe8424ece7766c6f9da33848467696134cada1a808adb73d5ea32dfd296546d1ad0074d7d1b17260192076f41e65875a0082a7ef1c204ace162a2aef63a520f745a0ab37955522d5c1a1b939f61085585696eb6199d647843294562f5996d38e47ed210f98bc76166efc8113da8e1b9f7ee298c357db9665b30b45708a9b65bb2f28c363a04d445a143c814815ebc2063a88bfc74cb8f5a3a4ab460f992377accb94aa61cace99d9dc029dee9ec2f4989c5daff798dafb8daf5423be7f437e4d066c11d02e5536b7b20622b324af9e7a89651f82f2fa39719fab1656f999a653513bc03fb9b77c215846582ac9ee2dbee54817c66ba28d5a770dbf2af717d2a6ff2c21aa21b2c4448f17281b62c7b1b20b313df5d2c2574269c3d13d792972b9370965d1f36af1b2e4c136a68c99a3cd093d415043c68242d9daa0d13031f09a3f9726897d44461f8c3f9e349bf530b0d3fda25ceabbc9cfd9d0f421ee6ecb700dd5a10ff7d8ea59a4fbbe604c715465d96cdfade069b07ffd5faa8e950fd7d9e48cdccd4c3f9cec71ac2bb7fe5ce564b441c36e6339e4e3c6f09633306ea83560756bc614ba2fc849b69353e24b643f924ac3add76a99011be4282dafb3c237e841c0bdfbc76568a34af088ed1b925cca00ab53ecb39d17df99de8f6f870a0fc6285f52d84ee1ccd63da40b014ab157ee7b2283d6e62bc32f513992d4cebf459ba52fb4406a7ca00490c6966c6d9955f99fe8b392a5d7d6fe15e7f66278411fdc82fcaaa796df9e8a2fe58cd0c9a6c42bdfa9e84aff06e65f4537b732569a5f56532aa3276905a192ace58542c9e8f7f82047b2b8e6a4cf01445def6e4b02ee34f8e98ad2562b677312183b978582181daf7ea9bdaf1648fcd2f9e7c5934302654d44b05f53cac99f7454c8f31c6ad85b8b7bf9ee970db2169c9c8f5d1f542a04607958c4860fa6857f2a8c43b6c6fecc4cd7059c5c3f615da0e6ede9b5d9ab2cb35a5b6a4e8107fe9df703bccb52401981051899922c1874e8bb7a2453d6c1848e644ba0310db25361e2f37a328e449785efac0acef286771c4d3e2f78f77ceb99dded526fbf07c5cc40d855c8675ca24a9dc78e3cf72cf5284f46d9eabb9fc20b6f1609c85c89dc21c90ca501f3cb85fc04eea4e0087f4aa085de26761df7ffeb1e62a0c7205f2cb86f01a65f1580a86d1a9545b5c47daf52d7dc9c1470e7241acb69647d2b33e7295fc0b61ffd0d1f72edbc4c2a98952b444f91640a3eb92183807114af61fa0a3378858168604c40a79e8777e195a4a4404584f9e3b7a9708115f93e34b699f1b4d038858ed02727a6bc63148e55e87679a019fa0f27d4d46d5ccfdd87b5e35c1b00325e3e1ab2170b613ac51bce7f67a82b8d1294a436cdf54e5157357e9ec59fa0bad609b78b0347fcc8848514d4a3ea9413622367efba034c046639963c3c0b702f8993b78ac6ae46b558eb71dbeceefaf08b17004f9d6207988ef3a59b77e6b13d626c4685a06d5f5ccaa7e03c22bbb03993b010baf3e44edc3d86acdebcefac8629d8cd0c73226ff448cb8a4fb0664b43cf66a4b025d8215b00c256c80d76e9434a356a69870cce5d0e3b542a49cf20c238f83fda8f1c1c95522cc823c410d11f5b0ace6a98ca6ccb711b95c14041ebaadc1bc8b7a06a4ac6f17c83285089c5874ee2dbafcab833cee0e204b7dd4ea43f84877c042011308fb940f5c8fa8fb5389e7c27448352171a7ff4cfb2b55603c6c5a14080005bbcc08e8fe46df3bb711eaa7c6c00c249ee3de964e7953a622ffeda2b34bcec7ca0c04e932b9954cd77d7c92922333b9208e861a69bf4dc22f859e5623fe43d210ab003daf37078e4f2b6bbde5819d0a37aa02bbb0c19843260d591392ecb1404b8ff8ed859339d05af2b6b22f5a740e39059ab300c24fb092ddbff2054b9a55010c16408d3501cf13ea00c37c247fbc39fb097f7ee4bf15dbcc32e06d52d75f623d7266bc4304b13dbc6c32cc3c5d6940bc0765bab13c44aeef8967801ce56b72d0c92917ac17ab0429109f19c7124bb00907bb5f9337b2766629cbecaffca9521984c0b16ebe03d0f5b5f81949c760dcd7db952d5210d4a201942dd3649c804c32bc9e1eedae52edb842f26ee80279ee334a2233389ad393f6b026126dd81d8432c719ffed94a0b9ab48caa525b62a9dfb44ea47ca213f5e772e7f0fef6a09762e6701689f80fdd555798ff1457f09f5bcfcbd1595b18a371044a5f15260f1ff5d2d6a959d2b924ed37df49c4321310cd3d85a2acfc1e3218114ed311afaa8ce7f793416c49306b39b66eb7aa1b67eb0668add6e3bf3e17e1cab80d8660aa035b2ea43c936532a29a1e2f758c769ad453ed7e06a8e7ecfc4c6f76d3e6b7a925714946223a680270d018d0648474f1c5ac75d71ce12b28c5f312f8aea2c24946160052d17e07a9646bb1980628510b98f330d3a0355fba00ff48549e5c24b993a320a982759a31de6a7c231147cf1434d035465ea22f1bd0d8b8a0f7dd8eeb7265d4b0254c841373c08e4ddd11f095b5a6230f7556dc28ef4a1f3b09af726c933899f5446d7731c82e85ee0f358148b7b1e1da3fc83f4e13a31bf8d98014b3ac5fe95fb03f4d1689c21b81b760d770fe5cde36bd3f9434e823c7621305b1aeb3d11bd1b13c01ca950ae23b70064d42b275489d2e36496b29c51e19ad9be83c729c0a42a1465ba330cd9da81126570325a386eab156179892772b575e41a07b53d4e1c5d83a46ed9b28b8916b7a269a3a7e1c79534735712f4bd038251d2ac50187117eab6dfd1c66650049baf69d85e9f7adf7411d6f6466289ab76e339d482e70199c98d0817396c6c274186333b8c453197b559539e420d701f525df9e86414062c6c1201ddf5e62e2aa3d690249eb02e08aaa58c7ac7ad55c4c17dddb86b64df22f25613719374ba9a1cfa526803a10f2ebca657ac152e170632559fd860ce37bc2c919ae6d2a98d241e75aa7b396e0010d933aed8656f4c47ca795e2b0b32bce7d35968a9fcf9caf72b56f675a8e6820c04d5350f7b107f1d33966a7e4a499e55f27274626c0805e1e2d058b87984168dc9cfc5fff143518fdbd373677f8f779304383103c85ca57751c9054b04891598472d4587805ad768ba31b25b38232115ee59c77a1abe6ba87e3418516cc6935e7626bab14fe301e0dcf1aa0a0e0189bea8ba74f12ff85570f43e4ce719b1cee204480bc7dbf053c955bcf0d582a0d9a3cb5bd97a9b538a765799ad06333b7187fa7ec48e3d3705a914cffb2485feb55b209b2022c172c6e637569e87479e7219264851c37187fa048fdf45fb9245bb974606597592cce0582abf46d3156412ada65f8357e46e239ca1e75451a196b91275a174e6147e442a28d982a9756d63a44d311be79eaeed7b82128dcfa92275d652dc584182537f60009bbae5f9685732528677559cadb79379e42b838e782a1191bea12e9c130b6d05d95a734d4d62e3770d7b8f85f4d2c6b7acd3f088264620ac0739fee82e8e8e792f05dd828cad040942e07a067c9ff6822cc7df7b2d6acd62ebe0edce29cd82f34271dc64467024c41a240e28a2bdcb551e35f22457ce1c75a8a6d58a57897a810826a48d74687ed83eb2fc6f58571cc83a45fd2eb4436c3eca509af49d3b91487ea849b3f0de397d079176854b2e3dc9712b117e49383b963e5f8b2fedaf3b8ac30ad230d3dd60e099a49b8302dc32a61497baf71b907ebfa82d793e0298c763320bf301df9f63c8021c4c837a3315a7f691fe1e549055fa60a2af5c5948fa75e47a8160b851328caa887d7fa969b1b590642ba4311483d3ed6d4a0f19d1d609146f64e19e98f3454097069de85ac5e653f455b5fa25364cdfa7788950ebfe1dae228cd71a224b05e106b50f674bb224d39d502710d2af767da55c821c5e82d6dae5316391bb248d38dbd2312fb9996666a9e16bebe9845cf51dec6ace1a0f946a594a8b39f00539bb30272051c043ac33535ec7ae9a46c89fb8ddaadaf0c550d09ba2c3c202c982e98ba08df67e1892f288b65b3dbf76e3f1f8b16edacc227c065844c34d2b3c8392063b8b83b704f88b988d731a7798ccca043fef1d8933dc432adae678a39afd84365ab033abad975e6691f1c73acffee824edcf4a507a6c367dd99c806dc6ae4c242437565dd8d9cbd01cd71c4f9738d6201b3a500184610c73899fc6debad3674551b822b673bd6d7600fbaab10e94ca26ab84d20273af790d69b3199e727758c7462766dc7e009b6ddbbf5cf075175e3299188ec74c5ddfc996b87e532535edd331fa49afd866f25e73b98da35ce32e5767f54c9ccf62b0e9e72ecedf5081d88493d13d84d1bc785ae170c15aac1c73ba2855bed03962b210e5db64a29389b919bf5a4ac172f218b006d02e8f75a563d759da4b89616b04cefcfccb52738107f021542ca62130b2087cac915990e52a679093050e380d1f2015f1db995fd78fb67398463a516e1240598f39d4d2654e1f3ae7fbd4f42c3f981a92dff0a7c7805eba38ed8819eb9747fc12c4cbf4050dd75411e691d89bd49e10e0a48d3020dd71a32e0692b7a908c77aa52", 0x1000}, {&(0x7f0000001140)="300e0735440fa19b5c95077e09b0e7910b116ba15c7f7aa7a41771bbe537f88d32a08239f606142528b2cde84008f7d2f9fcba24272308cecb1fb7dc7dcf227129337d25bcc1fa8fcd65740124270f89d8a34f5504012832367069fe154051c3039410df4cd3ba27fdef531fba30c508d2338c98f9170f51d000237f6ae1429112f059bcbb8cd985de75a13a88b531cae8136187993d4efd814f62ad8e64fbf78aee45aef7e3c4a8b9a0c83a69ca6935c255197e25358ba7b606de7c48c2251ef806d514e890b8b3209b5041b91f357cbe0fe9d21661467e6a4e5e3584246e499c041cd85050", 0xe6}, {&(0x7f0000001240)="3dc0b394", 0x4}], 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="30000000000000008400000003000000030000000180000001000000000000008000195fa3b2630c628b078a00"/54, @ANYRES32=r2], 0x30, 0x40}, 0x20000000) socketpair(0x2b, 0x1, 0x0, &(0x7f00000020c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r3) 1.668274393s ago: executing program 1 (id=3361): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x80004, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x8000000}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}}, 0x108) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="181e00000104000000000000000000dc4300000000000077f0"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={r1}, 0xc) close(r3) (async) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, 0x0}, 0x44040) r4 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) (async) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10) (async) close(r5) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x14) (async) getsockopt(r4, 0x28, 0x2, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x8, 0x5, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r6, &(0x7f00000007c0)="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", 0x118) (async) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @private=0xa010102}}, [0xe4, 0xdcd, 0x6, 0x6b1c, 0x2, 0x7, 0x6, 0x0, 0x7, 0x3ff, 0x0, 0x8, 0x9, 0x3, 0x141c]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000440)={r9, 0x53f}, &(0x7f00000004c0)=0x8) (async) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x28, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x3, 0x4}, {0x5}, {0xc, 0xffe0}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.342260938s ago: executing program 0 (id=3362): getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x820f, 0x7}, &(0x7f0000000040)=0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r2) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x1c, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x20000014) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x678, 0x478, 0xf8, 0x258, 0x258, 0x0, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, &(0x7f0000000040), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @private2, [0xff, 0xffffffff, 0xff000000, 0xff], [0x0, 0xffffffff, 0xff, 0xffffffff], 'veth0_virt_wifi\x00', 'vxcan1\x00', {}, {}, 0x3a, 0xa3, 0x6, 0x28}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x84, 0x2, 0x17, 0x7, 0xef3, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0xffffff], [0xff, 0xffffff00, 0xff, 0xffffffff], [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], 0x400, 0x200}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x2, 0xec}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x2c, 0x0, 0x2, 0xe, 0xe27, 0x0, 0x800}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0xf, "d244", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x5}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffff00, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'vlan1\x00', 'dummy0\x00', {}, {0xff}, 0x0, 0x4, 0x916e5037cfd19073, 0x10}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@icmp6={{0x28}, {0x10, "1e42"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [0xff, 0x0, 0xffff00, 0xff], 0x4e20, 0x4e22, 0x4e23, 0x4e20, 0x2, 0x6, 0xa8a, 0xb, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_IFNAME={0x14, 0x3, 'bond_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8890}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r7, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) shutdown(r4, 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r8, 0x0, 0x0, 0x0}, 0x30) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000025c0), r8) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000002a40)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002600)={0x160, r9, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6a}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6}, @NL80211_ATTR_IE={0x128, 0x2a, [@measure_req={0x26, 0x3, {0x5, 0x7f, 0x9}}, @challenge={0x10, 0x1, 0x8}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0x50, {0xe0, 0x4, 0x6, "098a66227cd65c318b03bec3f1214479409106e15da6fb76d645b2bee709c94942e4884dc6810e67799c11d0cf2a1c05ed9eafabe4a8ff49f1f8b3ab401cd3542079117f59b8fafe54f946f0ac"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @measure_req={0x26, 0x96, {0x6, 0x10, 0x7, "acdc835bbcdf822169bbda3f0123f79820ed0899b7aaef631acd4be44362777120ef72e50fe13cb943d905ab7d83da88fc32e06dbe2c3dc0f93e6c99b8e020997c8d1eca0929495b835d832542dc77bf157b332ebc360dd59b1a84b4fe8dd3ebf294c8f479f5c83fdd9fd6dde51137b37249e97ad8cdf79a9ecf0862ed8a11e69f162c46d8ead99be6496f3fd26bc06f1caa0f"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0x4, @device_a, 0x4, @value=@device_b, 0x9, 0x5, @broadcast, 0x1ff}}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x160}, 0x1, 0x0, 0x0, 0x40000}, 0x4000094) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c090000410007010000000007000000017c00000400fc806409018006000600800a000055099080080065000100000008003b00", @ANYRES32=0x0, @ANYBLOB="c2bd11e6b4884b645d8a9e53fcbc725b3ebf28dfd270af4cd88d970c5c4833ad545b3b35c607fc5e0c77b677ca40871b98d3d8d733ff2d866b529274b7c5d01ca3f433785b5e3d6cf9ec95d871fddd86e61e4c1a148f418c6e0547b07852d42a8c1fe7aab167e856b09e3152ee8614475b0bf8cc08ce80c8085f800400428007770693d4f256912a653bf1b4085380c1fe75a523a6146e603e71202e9456cb7d406e5f0a397205e611bab1cb07ea093ae1cfc6b5208129f67e7233bc4ced98ba6d9bfb568f3bdeb061b25d119614005600000000000000000000000000000000010600ed00800a000004004980040076804e052f800800480000000000120428808abd5750d98a1ff2e5a0aee0ffa91bf72e5966a966b973288c71123c30c0ef16bc2da6eca66fdccd329ed88d9bf24b589fb4946ee4ce875ddfc0abb2dd05b71e498bbc1ad1531480b90d715073a80f21b43a116b0f9260692f96a87ddb6550fc5907d99373046e3adee1a0574a943dbd210d44e2c0363419f221a169bfb22dc39194639ba340743d619424ff39c12d191187e95832e5cd1e096d56cb3e011a044bd74c936abae7f98d14d41f7b3a63bd80b730aee603ffb7faf2367ce3564795315f55cc4201632409823cfc9473d341b097739197e195878ba95e41ebff5f3fccfc020b1ddf612aa8a224d860726a141604ae83fbe239f8259feb453ed619a490b995171294b08456e6d19612627f012ff5d9bd79576399375ed5ddb3a00a38f84fead8181e1ed677de9747e609bda1ec2dbabb52729023ac41f1c616b0e2c7cd80c2f9096f2be47dcb284756eac14424513ac2023ef5d1257a802743ee015f479158cf3c8dfd409105de950ab1003cab88504148540ce37240a784fd2b33ec12557a763d06c5940afddc3a36d38626e244c6b319d3c9abbd495ead81d37ce1ac84b6b1e9006cd74b25c798ffe0a00109ad4abbf52e08bbe8ca1ce260de9609a780e61e06070fbd40ce4f84b7dc913be99f98b5b69904667f3b09971e4bb5d8d85eb3637ad6b6af55f69e429c8ffc3113b3a40afedc8166fcc622193914c32dc154d626ad2dde2e05e038e20418d0f81b88e5460596f2fac5472a31e2b32482e0590b49c21ae62ae9fbc9c9501d1bd5318263fee2c9c66db8406599d1617897ad4b5523349e08f1ae79b5e5d11342111dae702da7a2ecd6d0cf9578569d55abc5000800130044000000a3016f8055feb277720fb5fa836f26923de5af767a6129c2bc94ef5d8a71e4f23674a42fe3af7b468722995a0688ac1055b1f2f18fcaa0c422df6284ba0c2583c140e163ad16d0717b9bf7df73f44231ade7f5247f9b2c0ff702fc69963ec5ea6dce6cb6bf24f0cfa580560ee3f69849429345acf08fabd62a8f595cc253bfaa1816b35b05f012fe4976f1fe7080a9f58d162119271151e8b042dccd55d85a80908f197d289b1e7da42388153042f2f07ee365292924458ecc0ed32a3bbb3231d9df055ee11bc1ec0da385a36feb050850426367b7e4235ed87f10c708008400030000000b00b30067656e657665000004008d80af067a8d2393d9e64780e22f439a560be445b34ae377a7b1b570334f3c3dbc334b8cd12b848e43e0bde1f00d4c65b8a30c06c55899a5f23a459cad1305c96460afedf937d83bb71f6a72abda6f57d5db49ec60d4cca3a849dcf1e417ef33d8323c1d64a72e3482868988cfad19032ed7e160d745cdf8442fad5d66f6fbf227583c6354c95763d1a88a0dacfbc8665952dd068a50767435272137cf92b600c6040070800800a900"/1299, @ANYRES32=r10, @ANYBLOB="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"], 0x97c}}, 0x4010) r11 = getpid() sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x44, 0x3c, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x136}, @nested={0x2c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}, @typed={0x8, 0xfe, 0x0, 0x0, @uid=r10}, @nested={0x18, 0x82, 0x0, 0x1, [@typed={0x8, 0x108, 0x0, 0x0, @pid=r11}, @typed={0x4, 0x118}, @typed={0x8, 0xd1, 0x0, 0x0, @u32=0x80000001}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random='\x00\x00\x00\x00\x00o'}) 858.510477ms ago: executing program 5 (id=3363): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x40010}, 0x44000) r1 = socket$inet6(0xa, 0xa, 0x1) r2 = accept4(r1, 0x0, 0x0, 0x80800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x4b, 0x2b, "4372071e845c1497c855383000000002000000352a72ee4d3795968b26680000000055965737ebaaec032b"}}) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r5, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002d80)=ANY=[@ANYBLOB="340000082e0001002abd700800dddb301a91d0bee07700000008000000be74515f167aeef7b916db0d3ade1c13202285f90f395ed57f95c1d27d66d2ee788a21ceeb7b23b954af876dc4a9815331779633e0ec9945263c747a1b03866f5dc52092e740076d7e98e639535ae712f7ae000c044e69d379e874", @ANYBLOB="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", @ANYBLOB="1c000080182c29272f00000000000100"/28], 0x34}], 0x1, 0x0, 0x0, 0x44}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000000)={r8, 0x6c3, 0x9}, 0x8) unshare(0x24020400) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000080)={0x6, [0x7, 0x4, 0x7f, 0x7, 0x0, 0x4]}, &(0x7f00000001c0)=0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000000300)=0xfffffffffffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a400000000009000200"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000700)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r10}, 0x10) r11 = socket(0x21, 0x2, 0x10000000000002) sendmmsg(r9, &(0x7f00000019c0)=[{{&(0x7f0000000700)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x3, 0x0, 0x2, {0xa, 0x4e21, 0x30000000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x9}}}, 0x80, &(0x7f0000000d80)=[{&(0x7f00000009c0)="b29bb88887e283006bbfc5988262d52114eefb81c81ca76a57d4e13f49f36c6ca77e36ae909ccc203c6a2711f6a6a2e25549807fbaadacab97079bec4a9593dc14b297e54a76a042ea12788105f45f31092525fce99f6150573766562f741a6fdc759b3b8a8b7ed7d34d3b08dff3e74e6981f8c39733cd320399506b608f22d74049890c896e84235409f626e5a4efa852543cf055305d53f0ed8d934915b5fe37b0741326ca415721369d06621e5bd94f83e4b33aa5bde8aa02c6bc45f060572bc8b990357fb0578204f51e7dff64eb391793ef355cc9870d2f6801a1b3", 0xde}, {&(0x7f0000000780)="214ac1e0e8386f93ffac2648f8eadbb1e4c74687fd9cd2ab3a539bf3b4a14829c9a53addcb50bfec9a17dcc79f9558b4eb87dda90db10ce4c54f0dc528329e317780e5d68d859e20051b", 0x4a}, {&(0x7f0000000ac0)="e3f82d69611ab63101d89ab435f6e5592e7aa1b3eb88213e7d7bafe0bb372ccb1374bacf8e3828ac95747556c51bab5e4a5c6ad25a32d59dab32d8652a931b2510fa9a255302a98b62247aa09f24376251ec8de0", 0x54}, {&(0x7f0000000b40)="e171fae45b5b0a6aaf0f1ef3cc3fddf58b5ae9e25a9e3419fcb4757830196119655fe900906a16d19a9754e18bf4c496d0c0a0855786d7531cf135fa9859f7f36132704a60f60bd0f0bd37a48784bd754e7da96a48127517a1ea99dc325ca2676b7a6880ad", 0x65}, {&(0x7f0000000bc0)="a0c2a441a095d2d7b847d26143097da9a25e840759b74dc69e4873740ebeda1c7bada118308ee048b2decee6c4ae3768204924ae0946ee37bc0f753cb5788a96c074c0a76b7dcc9dc84119518d3d00d444479569f584579447dedeade887b5a0ff98cb65d802877ab6c9f35f5f1ff4bc4daac5107357161aacad00343bef487e807f5e4a6653234f7c080307b9a573878892b779d1d3e39e76ab9e8fa2b295cbd944a7360d5f8124128c09027f47a59ffe8b24d08ab1895395ce44fc5adba429792dbd9a9d2c03007bb6b72066e7998aec0973c97cc67e4f15a794eec06065ca3b6a5bb7f35bf12bc194360a9bcc569bf3c7fd812e930d2cfa", 0xf9}, {&(0x7f0000000cc0)="606ff81a064a3dee1922b2d3c5be6a560d40f6dfaf9ffa55b6b4bc9d18106808ff4a6b9c057bae08ec0df1f38387f3753aca03ca7cd3d86ad2c0c460f90961d3dbe32c36cd0c833c42f97b4a01431da4a4b71a3e8fc2bfe2f12d5eb4d537d519feb386f9be1ff97a313c0c55311a891801837b694248c2950a12df52cb76b68d763ce79452a65fb197500023ccb892c68348b570b01fb1d5cb4b2ab0d41a2809237526c76a81c021daec8914a04e4653c598", 0xb2}], 0x6, &(0x7f0000000f40)=[{0x88, 0x10a, 0x145b, "71b27246f35fc3d936e90a449bc176870273d5988ff5cf01a0acae8e1c4bfa03bf9be6a4981d7e6f0ab13a22348de497c81cdc933aefca2383aebb799265a53705ab11bac9c10c899986e4542d519589f4ce7cc26d077b3c1732aebffbc024129176048085497a4a8c5eb995c08fd69d888e3a76"}, {0x98, 0x10f, 0xf7f6, "b47760ee903613dea274a9e651face2166e8b599e460e7c56ac3cb516eb1ba0134036078c40417fba89918227c5d2858432753317f02aa9ea48e97d7db9ff617e460f324eb5a91319a5d7b3caea408dd775468f78688bd3341f4483f0edf75e571c61d5397e9f2f2ee6cb547234a6b0f00eab5a53180d1f37efc2fdb7a399787c6b9be5ca91038"}, {0x88, 0x10f, 0x2, "82b94b75dd85e4e93e808b09f40882d220fee3181e7ea8b0b548c1be818c515360756b001de5b650c9c4e623af710cc35e059a008fd45fa5bdf8da0b453591d0e1447a4b5f1e68cbe1af08f6bf02228c165f9a0a7bb7cee9cf26e35aaffe9aeacefc4bc8c96033f2a75620f5a0d8f3e9f269a2540ec2e75d"}, {0x110, 0x29, 0x7fff, "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"}, {0x28, 0xff, 0xc, "57c78e9f754ff7b27d944215d9dda66aa2d2"}, {0xf0, 0x2, 0x4, "c464da80d3345fc0bfd7bd23406eff17a79d1a4daef76175987903e58610fdcf2dd041503dc3eafc2af50f3c548a5a3806d9fc164c7bc25a96f4c41c3707b0144ea33a05cc7c4fc94667c2df2ae7c7f6764cb25bac9af35c25577a146ed8524cfb61403d80af2bcd2c760cba60137cf8233cbde220a09309cbeb32beeed1a7b56016ed50fc8233ffbbe1058601fc085396edf8c71a6ce2c7083b312b7f099615996f7eb17928ab5548c85137992e221097702a910eb6e5da6632672cf1ac1a987a05f8b8ff244d1a54d91ca4c8d9a2736b9e45b5eeeb98a188"}, {0x70, 0x115, 0x8, "f1bf71633887513b59c96e578d595e81b9ca42129cfc0ef689e69c2aa5f4c795396667f9cd31d4a38b0edaa51c74ae32d7cc9bfebff4b17e1344350fd80a909083f00206235df577700648f28b89b206e745387f1b81db4ae55533f75c5065"}, {0xa8, 0x88, 0x0, "287f55116e492cf41a00dd6df0aa195b42b8002a9a7d98c6bccf0c798eb6714377497e6f16ecaf74f16afc7e69bfe44519caf8ee0d84ef534494711d091cd1ccbe481d16ec056aa59baecef32983e971f0cf1a11de9e6813b9ccf395b285d22fded6ed13f5e4cb4282b524870488ecb60f8974e879119a449c5a4e8f18dce22af53127bfbfaeade3030ced41b32593f463b05f8e807d"}, {0x80, 0x10b, 0xe17, "93eebd9ddf8cdc31959b23e0b70918eb4f343122c1c11ec45bc5a97499ae76955c7dafe3a168021221338edbbeacf5f4f001b3311d52886e7a594ad9b34efdf3cbd9f6b40158552ab2a1bee5da825e10802aff01fd9ac2cdc2315bb8f150f80532da2a318b7c04fb1e"}], 0x568}}, {{&(0x7f0000000440)=@can, 0xfffffffffffffe73, &(0x7f0000000200)=[{&(0x7f0000000640)="02ffc7099b3bcf06ee0811ce3908d46e5c6cb9270a3622eb77155beb631358b8c6905d90fa14aead2919ec2c9941083123e97436214cf1ad8351fd11424dc98b82982436f4bbe52f631a7b4b9bd1fb9de787d5adfea966360ca922b9ac95f16b03f57b79442decf9ab0a9007b1f0fb0fa203036d", 0x74}], 0x1, &(0x7f0000001a40)=[{0x70, 0x103, 0x4, "c33177a6f82a8d2dd66646c90f0f617668e3c5b61c67fa4f33a3974e68608e47682009ea29f646bd66e70b3827bd4b38e77473bb8db203dd18ae49daeb69deabb8cb40ac5ecad028e49f8d7a9dfafa6f6498f275d12df360f1ff0f3163cdc8"}, {0xa0, 0x103, 0x56, "d81adb385738bbc63611077058cb986e88cfbd0f596bf049c541a29b6902a2404600a25e46408126b7f6e802bf5e506bc7d05364f5098ad303ef0900000000000000cab6e61c2536ff5868bf7459e2600df557b7e3bb26b8cf5e70118b86a03ad524aa13b6ee2ced10fe565c17c17a8f1d148a384f574c6d364c17591919b4d38c70539a57342a352d0b2a9c640c7ce194e48cfefadf8e5e8f633690"}], 0x110}}], 0x2, 0x40050) recvmmsg(r11, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x1}], 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x20010b00) 740.596459ms ago: executing program 1 (id=3364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'macvlan1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_FLAGS={0x0, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0x0, 0x5, 0x1, 0x0, 0x5}]}], {0x14, 0x10}}, 0x110}}, 0x800) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x10, 0x2, [@TCA_U32_POLICE={0xc, 0x6, [@TCA_POLICE_AVRATE={0xffffffffffffff3c}]}]}}]}, 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x47aa383c, 0x0, r9, 0x0, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r12, 0x2000012, 0x201, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d00000000b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) ioctl$SIOCAX25OPTRT(r11, 0x89e7, &(0x7f00000000c0)={@default, @bcast, 0x2, 0x56}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 686.172598ms ago: executing program 0 (id=3365): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) (async) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x60, 0x8, 0xfd}, {0x6, 0x3}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x100000000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0xa513}, 0x18) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETHDRSZ(r9, 0x800454d7, &(0x7f0000000000)) bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$inet(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r7], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) 554.842327ms ago: executing program 4 (id=3366): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 480.557518ms ago: executing program 3 (id=3367): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000140)={0x2, &(0x7f0000001980)=[{}, {}]}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58030000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d140309800800014000000009b80102802c00018008000140"], 0x380}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_SET_MACPARAMS(r5, 0x0, 0x1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x1) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000080)=0x101, 0x4) ppoll(&(0x7f00000000c0)=[{r3, 0x8004}], 0x1, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc01000000000000000800"], 0x58}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), r10) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x11, 0x0, 0x0, {0xa, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000040)=ANY=[@ANYBLOB="aa0e00006f", @ANYRES16=r11, @ANYBLOB="010027bd7000ffffffff2500000005002900000000000a0001007770616e310000"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 475.534039ms ago: executing program 4 (id=3368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003007665bb8541346d61637674617000000008000140"], 0xe8}}, 0x0) socket$kcm(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000190001090000000000100000021800000000fd000000000008001500"], 0x34}}, 0x4040010) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x100000035, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r10, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x300, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r11) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 422.829231ms ago: executing program 1 (id=3369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180"], 0x44}}, 0x20008000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000024000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) 421.958417ms ago: executing program 0 (id=3370): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32=r6, @ANYBLOB="ac17f3c660784982c6447b453d881c16ae2bf03cdcc079e1213ab4010fb65f7d01d6b8a89aa88cfa903f2e224c1841cb426cd6dc4ac8701ee4d77c59bfa8e5c4aa59cd9820cdda24ff4c6fb66496fe50afeb27560aa063425f826c3d891928b73dff21e10824c52a51ec5503f5a45a70c84ca3f0e69be96ef7cac085a91b26268236a87e8c5f0226c6bd8ade04a4116a5fc5b44dde"], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000000000001400000018000180140002006e657464657673696d3000000000000005000c00010000000500180001000000080012"], 0x44}}, 0x0) r10 = socket$rxrpc(0x21, 0x2, 0xa) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xf4cf216791fa448f, 0x0) unshare(0x22020400) listen(r10, 0x101) recvmsg$can_bcm(r7, &(0x7f00000001c0)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, &(0x7f0000000240)=""/111, 0x6f}, 0x40010000) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_ext={0x1c, 0x3, &(0x7f0000001400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x102bf, r11, 0x0, 0x0, 0x0, 0x10, 0x4d, @void, @value}, 0x94) 318.685817ms ago: executing program 1 (id=3371): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd00000020010680d353"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) 304.817101ms ago: executing program 3 (id=3372): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@gettfilter={0x2c, 0x2e, 0x20, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x4, 0xc}, {0x3, 0xfff1}}, [{0x8, 0xb, 0x10001}]}, 0x2c}}, 0x24004000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r4, 0x18000000000002a0, 0x4f, 0x0, &(0x7f0000000880)="b9ff030768441a8cb89e14f008008632e7429800", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006080)=@delchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x804d}, 0x20004804) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r12}, 0x10) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 126.836666ms ago: executing program 1 (id=3373): unshare(0x2040400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x20) r3 = socket(0x2b, 0x80801, 0x1) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000100)=0xc) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000080), 0x4) 5.597684ms ago: executing program 1 (id=3374): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x13}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x40000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r0, 0xdb4aa000) 4.922885ms ago: executing program 3 (id=3375): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) accept(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a0000007f0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d632"], 0x23c}}, 0x4004000) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000a026301568dbef85435d38700000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400"], 0x1c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/320], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x26}, 0xc) ioctl$SIOCPNADDRESOURCE(r4, 0x89e0, &(0x7f0000000040)) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, 0xffffffffffffffff, 0x12574000) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f00000003c0)=0x1800, 0x34) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 0s ago: executing program 5 (id=3376): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r5, @ANYBLOB="0a000600080211000001000006006600c78800"], 0x50}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x1f8, r4, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x44, 0x2a, [@ibss={0x6, 0x2}, @ssid={0x0, 0x6, @default_ap_ssid}, @challenge={0x10, 0x1, 0x4b}, @dsss={0x3, 0x1, 0xa9}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @mic={0x8c, 0x18, {0xc71, "05a96ea42cfe", @long="0335dff350f9dc0f5180b80b3bceca9a"}}]}, @fils_params, @NL80211_ATTR_IE={0x194, 0x2a, [@chsw_timing={0x68, 0x4, {0x3, 0xfff}}, @cf={0x4, 0x6, {0x5, 0xb8, 0x401, 0xc13f}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x4, 0x61}}, @random_vendor={0xdd, 0xcc, "d37ec6c1723ec41282717c369793893b0d86eb93e27328b2a6f026008627aa54d7f4bf23ae9d64fe580bf7f53f2d13d0066172f14fe4930dcd8c5bdcee4864cf9f45ae85d16d41e72d03bf288c19e12b10a936e6761f2c01f96846134712b583977403b8a679f087b620364eff92d30fa2e94105a0d5888055e95d83c98f3fb584512f290fef808a9ace08ce2eba41c4ca08cfa6e9cf471b9266c22d84415411a40657721d4921be712da76b2f19db681a2f475c94c1720a04691faf37353811621657189dd4667af11e4936"}, @fast_bss_trans={0x37, 0x65, {0x6, 0x2, "77090d16ff2fef0627c7a35b89e44e9b", "8d0c84ebf876b740609fab546ef73bca961ae9250bda12f89985704882453b6d", "0e8e2915465952d0a30ea258d5ce65f90b9ef64b86ad2853b24f9415cfcbf204", [{0x1}, {0x1, 0xf, "3297ad6c2c28075a77caa8a2cc49a7"}]}}, @ht={0x2d, 0x1a, {0x300, 0x2, 0x6, 0x0, {0x9, 0x4}, 0x1, 0x3}}, @random_vendor={0xdd, 0x6, "b8ab9cf23408"}, @supported_rates={0x1, 0x2, [{0x30}, {0x1b, 0x1}]}, @ht={0x2d, 0x1a, {0x20, 0x2, 0x7, 0x0, {0x2, 0x40, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0xf6}}]}, @NL80211_ATTR_IE={0x4}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x9403, 0x3002, 0x300, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x48, 0xfc, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz1\x00', 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x8, 0x3, 0x8001, '\x00', 'syz1\x00', {0x73c1}}}}, {{@ipv6={@local, @empty, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0x140b6964c6a3d8d0, 0x1ff0001ff, 0xff000000, 0xff], 'gre0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x2e, 0x3, 0x2, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffff4, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000d00)=@security={'security\x00', 0xe, 0x4, 0x4b8, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x5}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, [0xffffffff, 0x0, 0x0, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xff], 'macsec0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6c, 0x4, 0x4, 0x10}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x31, 0x5}}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xff000000, 0x0, 0xffffff00], [0x0, 0x0, 0xffffff00, 0xffffff00], 'ip6gretap0\x00', 'dummy0\x00', {0xff}, {0xff}, 0x2f, 0xd, 0x2, 0x34}, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x8, 0x7], 0x10001, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x3f}, @loopback, @local, @mcast2, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1], 0x9}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x33d, 0x1000, 0x8, 0x3, 0xace5, 0x98, 0x5, 0x80000000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10000080}, 0x8804) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRESHEX=r5], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 15.0-rc4-syzkaller-00802-g075001c9eb41 #0 PREEMPT(full) [ 343.110655][T14143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 343.110666][T14143] Call Trace: [ 343.110673][T14143] [ 343.110681][T14143] dump_stack_lvl+0x189/0x250 [ 343.110709][T14143] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.110734][T14143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.110756][T14143] ? __pfx__printk+0x10/0x10 [ 343.110778][T14143] ? kernfs_path_from_node+0x2b/0x260 [ 343.110803][T14143] ? kernfs_path_from_node+0x216/0x260 [ 343.110828][T14143] sysfs_warn_dup+0x8e/0xa0 [ 343.110848][T14143] sysfs_do_create_link_sd+0xc0/0x110 [ 343.110872][T14143] device_add_class_symlinks+0x1cf/0x240 [ 343.110897][T14143] device_add+0x475/0xb50 [ 343.110921][T14143] wiphy_register+0x199a/0x26b0 [ 343.110959][T14143] ? __pfx_wiphy_register+0x10/0x10 [ 343.110975][T14143] ? minstrel_ht_alloc+0x893/0x990 [ 343.111005][T14143] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 343.111031][T14143] ieee80211_register_hw+0x334b/0x4060 [ 343.111068][T14143] ? ieee80211_register_hw+0x1431/0x4060 [ 343.111100][T14143] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 343.111125][T14143] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 343.111155][T14143] ? __hrtimer_setup+0x187/0x210 [ 343.111176][T14143] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 343.111198][T14143] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 343.111256][T14143] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 343.111276][T14143] ? trace_kmalloc+0x1f/0xd0 [ 343.111292][T14143] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 343.111312][T14143] ? kstrndup+0xbf/0x160 [ 343.111340][T14143] hwsim_new_radio_nl+0xea4/0x1b10 [ 343.111367][T14143] ? __pfx___nla_validate_parse+0x10/0x10 [ 343.111404][T14143] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 343.111442][T14143] ? __nla_parse+0x40/0x60 [ 343.111465][T14143] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 343.111499][T14143] genl_family_rcv_msg_doit+0x212/0x300 [ 343.111528][T14143] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 343.111565][T14143] ? bpf_lsm_capable+0x9/0x20 [ 343.111586][T14143] ? security_capable+0x7e/0x2e0 [ 343.111612][T14143] genl_rcv_msg+0x60e/0x790 [ 343.111648][T14143] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.111671][T14143] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 343.111710][T14143] netlink_rcv_skb+0x219/0x490 [ 343.111730][T14143] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.111754][T14143] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.111799][T14143] ? down_read+0x1ad/0x2e0 [ 343.111818][T14143] genl_rcv+0x28/0x40 [ 343.111836][T14143] netlink_unicast+0x758/0x8d0 [ 343.111866][T14143] netlink_sendmsg+0x805/0xb30 [ 343.111893][T14143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.111915][T14143] ? aa_sock_msg_perm+0x94/0x160 [ 343.111936][T14143] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 343.111954][T14143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.111973][T14143] __sock_sendmsg+0x219/0x270 [ 343.111994][T14143] ____sys_sendmsg+0x505/0x830 [ 343.112019][T14143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.112053][T14143] ? import_iovec+0x74/0xa0 [ 343.112080][T14143] ___sys_sendmsg+0x21f/0x2a0 [ 343.112104][T14143] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.112163][T14143] ? __fget_files+0x2a/0x420 [ 343.112182][T14143] ? __fget_files+0x3a0/0x420 [ 343.112214][T14143] __x64_sys_sendmsg+0x19b/0x260 [ 343.112237][T14143] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.112276][T14143] ? do_syscall_64+0xba/0x210 [ 343.112296][T14143] do_syscall_64+0xf6/0x210 [ 343.112313][T14143] ? clear_bhb_loop+0x45/0xa0 [ 343.112335][T14143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.112351][T14143] RIP: 0033:0x7fb91c78e969 [ 343.112367][T14143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.112381][T14143] RSP: 002b:00007fb91d5b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.112400][T14143] RAX: ffffffffffffffda RBX: 00007fb91c9b5fa0 RCX: 00007fb91c78e969 [ 343.112413][T14143] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 343.112423][T14143] RBP: 00007fb91c810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 343.112434][T14143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.112444][T14143] R13: 0000000000000000 R14: 00007fb91c9b5fa0 R15: 00007ffce8e0a468 [ 343.112476][T14143] [ 343.877009][T14170] FAULT_INJECTION: forcing a failure. [ 343.877009][T14170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.902358][T14170] CPU: 1 UID: 0 PID: 14170 Comm: syz.4.2299 Not tainted 6.15.0-rc4-syzkaller-00802-g075001c9eb41 #0 PREEMPT(full) [ 343.902382][T14170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 343.902391][T14170] Call Trace: [ 343.902398][T14170] [ 343.902406][T14170] dump_stack_lvl+0x189/0x250 [ 343.902436][T14170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.902457][T14170] ? __pfx__printk+0x10/0x10 [ 343.902484][T14170] should_fail_ex+0x414/0x560 [ 343.902511][T14170] _copy_to_user+0x31/0xb0 [ 343.902531][T14170] simple_read_from_buffer+0xe1/0x170 [ 343.902565][T14170] proc_fail_nth_read+0x1df/0x250 [ 343.902589][T14170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 343.902611][T14170] ? rw_verify_area+0x258/0x650 [ 343.902626][T14170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 343.902647][T14170] vfs_read+0x1fd/0x980 [ 343.902670][T14170] ? do_sock_setsockopt+0x267/0x3e0 [ 343.902689][T14170] ? __pfx_vfs_read+0x10/0x10 [ 343.902703][T14170] ? do_sock_setsockopt+0x267/0x3e0 [ 343.902720][T14170] ? kfree+0x4d/0x440 [ 343.902736][T14170] ? __pfx_rose_setsockopt+0x10/0x10 [ 343.902756][T14170] ? do_sock_setsockopt+0x267/0x3e0 [ 343.902778][T14170] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 343.902802][T14170] ksys_read+0x145/0x250 [ 343.902822][T14170] ? __pfx_ksys_read+0x10/0x10 [ 343.902842][T14170] ? do_syscall_64+0xba/0x210 [ 343.902861][T14170] do_syscall_64+0xf6/0x210 [ 343.902876][T14170] ? clear_bhb_loop+0x45/0xa0 [ 343.902896][T14170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.902911][T14170] RIP: 0033:0x7f311d18d37c [ 343.902925][T14170] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 343.902939][T14170] RSP: 002b:00007f311e0d4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 343.902956][T14170] RAX: ffffffffffffffda RBX: 00007f311d3b5fa0 RCX: 00007f311d18d37c [ 343.902968][T14170] RDX: 000000000000000f RSI: 00007f311e0d40a0 RDI: 0000000000000003 [ 343.902978][T14170] RBP: 00007f311e0d4090 R08: 0000000000000000 R09: 0000000000000000 [ 343.902988][T14170] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 343.902999][T14170] R13: 0000000000000000 R14: 00007f311d3b5fa0 R15: 00007ffc565a7818 [ 343.903025][T14170] [ 344.462649][T14190] lo speed is unknown, defaulting to 1000 [ 344.735187][T14208] lo speed is unknown, defaulting to 1000 [ 344.900767][T14221] __nla_validate_parse: 14 callbacks suppressed [ 344.900786][T14221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2315'. [ 344.934293][T14221] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2315'. [ 344.965616][T14221] netlink: 336 bytes leftover after parsing attributes in process `syz.3.2315'. [ 344.993517][T14221] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2315'. [ 345.025555][T14223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2315'. [ 345.040941][T14223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2315'. [ 345.267903][T14231] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11 [ 345.672742][T14253] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2320'. [ 345.825776][T14257] tipc: Enabling of bearer rejected, failed to enable media [ 345.848694][T14257] tipc: Enabling of bearer rejected, failed to enable media [ 346.019323][T14269] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2324'. [ 346.193304][T14278] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2329'. [ 346.504466][T14303] bridge0: entered allmulticast mode [ 346.740328][T14324] IPv6: Can't replace route, no match found [ 346.997848][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2348'. [ 347.107671][T14342] lo speed is unknown, defaulting to 1000 [ 347.292320][T14353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.401302][T14356] atomic_op ffff88807d8a5998 conn xmit_atomic 0000000000000000 [ 347.434023][T14353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.670478][T14357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.696558][T14368] veth0_macvtap: left promiscuous mode [ 347.770818][T14375] sctp: [Deprecated]: syz.0.2359 (pid 14375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.770818][T14375] Use struct sctp_sack_info instead [ 348.175792][T14402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.238799][T14405] bpq0: left promiscuous mode [ 348.294366][T14407] x_tables: duplicate underflow at hook 2 [ 348.679584][T14438] Bluetooth: MGMT ver 1.23 [ 348.822485][T14444] raw_sendmsg: syz.0.2381 forgot to set AF_INET. Fix it! [ 348.920308][T14448] netlink: 'syz.0.2383': attribute type 1 has an invalid length. [ 348.990091][T14453] netlink: 'syz.0.2385': attribute type 1 has an invalid length. [ 349.213683][T14466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.231748][T14469] tipc: Can't bind to reserved service type 2 [ 349.277825][T14466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.337503][T14473] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12 [ 349.416060][T14476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.465536][T14479] netlink: 'syz.3.2393': attribute type 1 has an invalid length. [ 349.487583][T14477] bridge0: port 1(syz_tun) entered blocking state [ 349.494216][T14477] bridge0: port 1(syz_tun) entered disabled state [ 349.501514][T14477] syz_tun: entered allmulticast mode [ 349.521503][T14477] syz_tun: entered promiscuous mode [ 349.694830][T14487] lo speed is unknown, defaulting to 1000 [ 350.105714][T14515] __nla_validate_parse: 7 callbacks suppressed [ 350.105731][T14515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2405'. [ 350.164505][T14487] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 350.223736][T14520] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 350.514857][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2410'. [ 350.552701][T14537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2412'. [ 350.833922][T14556] delete_channel: no stack [ 350.950052][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2420'. [ 350.959688][T14565] netlink: 'syz.4.2420': attribute type 1 has an invalid length. [ 350.970904][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2420'. [ 350.979980][T14568] netlink: 'syz.4.2420': attribute type 1 has an invalid length. [ 351.090026][T14575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.116780][T14577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2424'. [ 351.145835][T14579] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2425'. [ 351.158463][T14575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.171743][T14579] tipc: Failed to remove unknown binding: 66,1,1/0:391985044/391985046 [ 351.228618][T14582] netlink: 'syz.1.2424': attribute type 3 has an invalid length. [ 351.272762][T14583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.290739][T14583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2423'. [ 351.303187][T14586] x_tables: duplicate underflow at hook 1 [ 351.474603][T14595] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2430'. [ 351.494918][T14598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2428'. [ 351.502450][T14595] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 351.910725][T14623] lo speed is unknown, defaulting to 1000 [ 352.066553][T14635] block nbd3: NBD_DISCONNECT [ 352.070674][T14636] syzkaller1: entered promiscuous mode [ 352.077887][T14635] block nbd3: Disconnected due to user request. [ 352.081370][T14636] syzkaller1: entered allmulticast mode [ 352.096757][T14635] block nbd3: shutting down sockets [ 352.278354][T14649] netlink: 'syz.3.2443': attribute type 16 has an invalid length. [ 352.294380][T14653] netlink: 'syz.3.2443': attribute type 16 has an invalid length. [ 352.299584][T14649] netlink: 'syz.3.2443': attribute type 17 has an invalid length. [ 352.327945][T14653] netlink: 'syz.3.2443': attribute type 17 has an invalid length. [ 352.355908][T14649] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.364579][T14649] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.373034][T14649] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.381431][T14649] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.548627][T14662] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 352.557242][ T3077] IPVS: starting estimator thread 0... [ 352.646558][T14670] IPVS: using max 33 ests per chain, 79200 per kthread [ 352.671738][T14665] hsr_slave_0: left promiscuous mode [ 352.699185][T14665] hsr_slave_1: left promiscuous mode [ 353.115304][T14703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.124321][T14704] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 353.139410][T14706] FAULT_INJECTION: forcing a failure. [ 353.139410][T14706] name failslab, interval 1, probability 0, space 0, times 0 [ 353.156873][T14706] CPU: 0 UID: 0 PID: 14706 Comm: syz.0.2463 Not tainted 6.15.0-rc4-syzkaller-00802-g075001c9eb41 #0 PREEMPT(full) [ 353.156897][T14706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 353.156906][T14706] Call Trace: [ 353.156919][T14706] [ 353.156926][T14706] dump_stack_lvl+0x189/0x250 [ 353.156955][T14706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.156977][T14706] ? __pfx__printk+0x10/0x10 [ 353.157000][T14706] ? __pfx___might_resched+0x10/0x10 [ 353.157024][T14706] should_fail_ex+0x414/0x560 [ 353.157053][T14706] should_failslab+0xa8/0x100 [ 353.157075][T14706] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 353.157096][T14706] ? __alloc_skb+0x112/0x2d0 [ 353.157118][T14706] __alloc_skb+0x112/0x2d0 [ 353.157140][T14706] netlink_sendmsg+0x5c6/0xb30 [ 353.157168][T14706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.157189][T14706] ? aa_sock_msg_perm+0x94/0x160 [ 353.157208][T14706] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 353.157225][T14706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.157244][T14706] __sock_sendmsg+0x219/0x270 [ 353.157264][T14706] ____sys_sendmsg+0x505/0x830 [ 353.157288][T14706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.157315][T14706] ? import_iovec+0x74/0xa0 [ 353.157336][T14706] ___sys_sendmsg+0x21f/0x2a0 [ 353.157357][T14706] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.157413][T14706] ? __fget_files+0x2a/0x420 [ 353.157430][T14706] ? __fget_files+0x3a0/0x420 [ 353.157460][T14706] __x64_sys_sendmsg+0x19b/0x260 [ 353.157482][T14706] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.157518][T14706] ? do_syscall_64+0xba/0x210 [ 353.157536][T14706] do_syscall_64+0xf6/0x210 [ 353.157551][T14706] ? clear_bhb_loop+0x45/0xa0 [ 353.157570][T14706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.157585][T14706] RIP: 0033:0x7fb91c78e969 [ 353.157599][T14706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.157612][T14706] RSP: 002b:00007fb91d5b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.157630][T14706] RAX: ffffffffffffffda RBX: 00007fb91c9b5fa0 RCX: 00007fb91c78e969 [ 353.157640][T14706] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 353.157650][T14706] RBP: 00007fb91d5b2090 R08: 0000000000000000 R09: 0000000000000000 [ 353.157660][T14706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.157669][T14706] R13: 0000000000000000 R14: 00007fb91c9b5fa0 R15: 00007ffce8e0a468 [ 353.157695][T14706] [ 353.411960][T14703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.557053][T14723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.560374][T14724] vlan1: entered promiscuous mode [ 353.572130][T14724] vlan0: entered promiscuous mode [ 353.577332][T14724] gretap0: entered promiscuous mode [ 353.892749][T14746] lo speed is unknown, defaulting to 1000 [ 353.919495][T14752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.954077][T14752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.289293][T14767] batadv2: entered promiscuous mode [ 354.759734][ T30] audit: type=1800 audit(1746564047.708:5): pid=14772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2485" name="cgroup.controllers" dev="tmpfs" ino=2680 res=0 errno=0 [ 355.348679][T14824] __nla_validate_parse: 15 callbacks suppressed [ 355.348695][T14824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2498'. [ 355.401173][T14828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.475275][T14828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.527513][T14836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.744320][T14857] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2505'. [ 355.763226][T14857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2505'. [ 355.773177][T14857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2505'. [ 355.794080][T14842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2499'. [ 356.078445][T14869] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2508'. [ 356.384566][T14883] lo speed is unknown, defaulting to 1000 [ 356.759540][T14906] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2517'. [ 356.774005][T14906] netlink: 'syz.3.2517': attribute type 39 has an invalid length. [ 356.993110][T14918] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2521'. [ 357.139453][T14925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'. [ 357.258018][T14935] netlink: 'syz.4.2524': attribute type 8 has an invalid length. [ 357.288326][T14936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.362602][T14936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.504170][T14931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.530322][T14931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2526'. [ 358.702999][ T768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.725779][ T768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.742258][T15001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.895795][T15004] netlink: 'syz.3.2548': attribute type 7 has an invalid length. [ 358.925618][T15004] netlink: 'syz.3.2548': attribute type 8 has an invalid length. [ 358.934172][T15004] netlink: 'syz.3.2548': attribute type 15 has an invalid length. [ 359.781128][T15059] IPv6: sit3: Disabled Multicast RS [ 360.101823][T15075] smc: net device bond0 applied user defined pnetid SYZ [ 360.359390][T15077] __nla_validate_parse: 15 callbacks suppressed [ 360.359408][T15077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2568'. [ 360.374831][T15077] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2568'. [ 360.943876][T15096] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 360.972598][T15092] lo speed is unknown, defaulting to 1000 [ 361.059441][T15096] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 361.070472][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2575'. [ 361.078637][T15096] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 361.108890][T15104] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2575'. [ 361.182077][T15104] netlink: 336 bytes leftover after parsing attributes in process `syz.2.2575'. [ 361.230869][T15104] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2575'. [ 361.283821][ T30] audit: type=1107 audit(1746564054.228:6): pid=15112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='2–YýËb/µÎ&èœC`éÝ‘;N¾ŠF¸:*ø¹'ˆýzšO•b¯ÐBÔ©J³/ébÆ]pn8¦7yE_£õÜE°÷ ÂínP=†>™fD´W¹;, [ 363.498398][T15223] dump_stack_lvl+0x189/0x250 [ 363.498428][T15223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.498449][T15223] ? __pfx__printk+0x10/0x10 [ 363.498472][T15223] ? __pfx___might_resched+0x10/0x10 [ 363.498487][T15223] ? fs_reclaim_acquire+0x7d/0x100 [ 363.498514][T15223] should_fail_ex+0x414/0x560 [ 363.498542][T15223] should_failslab+0xa8/0x100 [ 363.498564][T15223] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 363.498585][T15223] ? __alloc_skb+0x112/0x2d0 [ 363.498608][T15223] __alloc_skb+0x112/0x2d0 [ 363.498630][T15223] netlink_ack+0x146/0xa50 [ 363.498647][T15223] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 363.498668][T15223] ? ref_tracker_free+0x63a/0x7d0 [ 363.498683][T15223] ? __copy_skb_header+0xa7/0x550 [ 363.498712][T15223] netlink_rcv_skb+0x2a0/0x490 [ 363.498731][T15223] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 363.498751][T15223] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 363.498789][T15223] ? netlink_deliver_tap+0x2e/0x1b0 [ 363.498805][T15223] ? netlink_deliver_tap+0x2e/0x1b0 [ 363.498829][T15223] netlink_unicast+0x758/0x8d0 [ 363.498858][T15223] netlink_sendmsg+0x805/0xb30 [ 363.498885][T15223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.498907][T15223] ? aa_sock_msg_perm+0x94/0x160 [ 363.498933][T15223] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 363.498951][T15223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.498969][T15223] __sock_sendmsg+0x219/0x270 [ 363.498989][T15223] ____sys_sendmsg+0x505/0x830 [ 363.499014][T15223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.499044][T15223] ? import_iovec+0x74/0xa0 [ 363.499068][T15223] ___sys_sendmsg+0x21f/0x2a0 [ 363.499091][T15223] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.499148][T15223] ? __fget_files+0x2a/0x420 [ 363.499166][T15223] ? __fget_files+0x3a0/0x420 [ 363.499196][T15223] __x64_sys_sendmsg+0x19b/0x260 [ 363.499219][T15223] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 363.499254][T15223] ? do_syscall_64+0xba/0x210 [ 363.499272][T15223] do_syscall_64+0xf6/0x210 [ 363.499287][T15223] ? clear_bhb_loop+0x45/0xa0 [ 363.499308][T15223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.499323][T15223] RIP: 0033:0x7f189198e969 [ 363.499337][T15223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.499350][T15223] RSP: 002b:00007f1892853038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.499368][T15223] RAX: ffffffffffffffda RBX: 00007f1891bb5fa0 RCX: 00007f189198e969 [ 363.499380][T15223] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 363.499390][T15223] RBP: 00007f1892853090 R08: 0000000000000000 R09: 0000000000000000 [ 363.499400][T15223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.499410][T15223] R13: 0000000000000000 R14: 00007f1891bb5fa0 R15: 00007ffedf551268 [ 363.499437][T15223] [ 363.528580][T15220] lo speed is unknown, defaulting to 1000 [ 363.989243][T15246] netlink: 'syz.0.2610': attribute type 1 has an invalid length. [ 364.084407][T15248] netlink: 'syz.0.2610': attribute type 1 has an invalid length. [ 364.157622][T15253] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 364.556933][T15277] xt_hashlimit: size too large, truncated to 1048576 [ 364.564429][T15277] xt_hashlimit: max too large, truncated to 1048576 [ 364.777963][T15282] netlink: 'syz.3.2619': attribute type 29 has an invalid length. [ 365.612018][T15326] tipc: Enabling of bearer rejected, failed to enable media [ 365.624543][T15317] __nla_validate_parse: 12 callbacks suppressed [ 365.624558][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2630'. [ 365.655672][T15317] bridge_slave_1: left promiscuous mode [ 365.666034][T15317] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.778157][T15335] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2635'. [ 365.818019][T15317] bridge_slave_0: left allmulticast mode [ 365.823696][T15317] bridge_slave_0: left promiscuous mode [ 365.830772][T15317] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.943132][T15299] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 365.953338][T15299] tipc: Enabled bearer , priority 10 [ 365.970367][T15343] sctp: [Deprecated]: syz.3.2637 (pid 15343) Use of int in max_burst socket option. [ 365.970367][T15343] Use struct sctp_assoc_value instead [ 366.053460][T15346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2638'. [ 366.075788][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 366.164816][T15346] 8021q: adding VLAN 0 to HW filter on device bond6 [ 366.275206][T15352] 8021q: adding VLAN 0 to HW filter on device bond6 [ 366.284665][T15352] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 366.297221][T15352] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 366.333455][T15364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2641'. [ 366.345682][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 366.410775][T15364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2641'. [ 366.681071][T15389] netlink: 'syz.3.2647': attribute type 1 has an invalid length. [ 366.720875][T15389] bond5: entered promiscuous mode [ 366.726176][T15389] bond5: entered allmulticast mode [ 366.875614][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 366.879817][T15402] IPv6: NLM_F_REPLACE set, but no existing node found! [ 366.929995][T15373] 8021q: adding VLAN 0 to HW filter on device bond4 [ 367.131814][T15405] lo speed is unknown, defaulting to 1000 [ 367.407818][T15421] netlink: 452 bytes leftover after parsing attributes in process `syz.1.2655'. [ 367.423356][T15422] netlink: 452 bytes leftover after parsing attributes in process `syz.1.2655'. [ 367.623506][T15430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.701048][T15429] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2658'. [ 367.802638][T15435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2659'. [ 367.925499][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 367.938758][T15435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2659'. [ 368.039215][T15428] xt_CT: No such helper "pptp" [ 368.170782][T15446] netlink: 'syz.3.2662': attribute type 12 has an invalid length. [ 368.189522][T15446] netlink: 'syz.3.2662': attribute type 12 has an invalid length. [ 368.200523][T15446] netlink: 'syz.3.2662': attribute type 12 has an invalid length. [ 368.226047][T15449] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 368.259980][T15445] lo speed is unknown, defaulting to 1000 [ 368.343591][T15446] lo speed is unknown, defaulting to 1000 [ 368.875783][T15475] lo speed is unknown, defaulting to 1000 [ 368.965694][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 369.020789][T15492] x_tables: duplicate underflow at hook 3 [ 369.046227][ T41] block nbd0: Possible stuck request ffff888025047000: control (read@0,1024B). Runtime 270 seconds [ 369.057366][ T41] block nbd0: Possible stuck request ffff8880250471c0: control (read@1024,1024B). Runtime 270 seconds [ 369.068412][ T41] block nbd0: Possible stuck request ffff888025047380: control (read@2048,1024B). Runtime 270 seconds [ 369.079441][ T41] block nbd0: Possible stuck request ffff888025047540: control (read@3072,1024B). Runtime 270 seconds [ 369.342064][T15506] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 369.357385][T15506] netlink: 'syz.1.2678': attribute type 13 has an invalid length. [ 369.404230][T15507] FAULT_INJECTION: forcing a failure. [ 369.404230][T15507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.433700][T15507] CPU: 1 UID: 0 PID: 15507 Comm: syz.0.2680 Not tainted 6.15.0-rc4-syzkaller-00802-g075001c9eb41 #0 PREEMPT(full) [ 369.433726][T15507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 369.433736][T15507] Call Trace: [ 369.433743][T15507] [ 369.433751][T15507] dump_stack_lvl+0x189/0x250 [ 369.433781][T15507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.433803][T15507] ? __pfx__printk+0x10/0x10 [ 369.433831][T15507] should_fail_ex+0x414/0x560 [ 369.433860][T15507] _copy_to_user+0x31/0xb0 [ 369.433883][T15507] simple_read_from_buffer+0xe1/0x170 [ 369.433907][T15507] proc_fail_nth_read+0x1df/0x250 [ 369.433931][T15507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 369.433953][T15507] ? rw_verify_area+0x258/0x650 [ 369.433969][T15507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 369.433991][T15507] vfs_read+0x1fd/0x980 [ 369.434019][T15507] ? __pfx___mutex_lock+0x10/0x10 [ 369.434042][T15507] ? __pfx_vfs_read+0x10/0x10 [ 369.434061][T15507] ? __fget_files+0x2a/0x420 [ 369.434085][T15507] ? __fget_files+0x3a0/0x420 [ 369.434115][T15507] ? __fget_files+0x2a/0x420 [ 369.434143][T15507] ksys_read+0x145/0x250 [ 369.434163][T15507] ? __pfx_ksys_read+0x10/0x10 [ 369.434185][T15507] ? do_syscall_64+0xba/0x210 [ 369.434205][T15507] do_syscall_64+0xf6/0x210 [ 369.434219][T15507] ? clear_bhb_loop+0x45/0xa0 [ 369.434239][T15507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.434254][T15507] RIP: 0033:0x7fb91c78d37c [ 369.434270][T15507] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 369.434283][T15507] RSP: 002b:00007fb91d5b2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 369.434300][T15507] RAX: ffffffffffffffda RBX: 00007fb91c9b5fa0 RCX: 00007fb91c78d37c [ 369.434312][T15507] RDX: 000000000000000f RSI: 00007fb91d5b20a0 RDI: 0000000000000005 [ 369.434322][T15507] RBP: 00007fb91d5b2090 R08: 0000000000000000 R09: 0000000000000000 [ 369.434332][T15507] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 369.434343][T15507] R13: 0000000000000000 R14: 00007fb91c9b5fa0 R15: 00007ffce8e0a468 [ 369.434371][T15507] [ 369.912962][T15506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.938100][ T976] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 369.974058][T15506] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.000320][T15506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.005574][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 370.023082][ T5875] lo speed is unknown, defaulting to 1000 [ 370.030069][ T5875] syz1: Port: 1 Link ACTIVE [ 370.052026][T15515] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 370.080330][ T6081] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 370.094249][ T6081] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 370.115643][ T976] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 370.704872][T15564] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 370.963875][T15579] __nla_validate_parse: 8 callbacks suppressed [ 370.963891][T15579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2700'. [ 371.045527][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 371.048247][ T3077] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 371.081185][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2702'. [ 371.244221][T15597] netlink: 'syz.1.2705': attribute type 21 has an invalid length. [ 371.256246][T15594] lo speed is unknown, defaulting to 1000 [ 371.262410][T15597] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2705'. [ 371.299674][T15597] netlink: 'syz.1.2705': attribute type 4 has an invalid length. [ 371.304474][T15601] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input13 [ 371.320573][T15597] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2705'. [ 371.369691][T15597] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2705'. [ 371.418389][T15609] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2707'. [ 371.422089][T15608] sctp: [Deprecated]: syz.3.2707 (pid 15608) Use of int in max_burst socket option deprecated. [ 371.422089][T15608] Use struct sctp_assoc_value instead [ 371.637689][T15616] lo speed is unknown, defaulting to 1000 [ 371.809197][T15623] lo speed is unknown, defaulting to 1000 [ 371.834514][T15629] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.085470][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 372.259942][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2716'. [ 372.540971][T15652] syzkaller1: entered promiscuous mode [ 372.548006][T15652] syzkaller1: entered allmulticast mode [ 372.590950][T15652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2718'. [ 372.930364][T15669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2721'. [ 373.069425][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2723'. [ 373.125470][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 373.213434][T15681] netlink: 'syz.0.2723': attribute type 2 has an invalid length. [ 373.274852][T15679] netlink: 'syz.0.2723': attribute type 11 has an invalid length. [ 373.361144][T15689] netlink: 'syz.4.2726': attribute type 1 has an invalid length. [ 373.494030][T15689] 8021q: adding VLAN 0 to HW filter on device bond4 [ 373.642392][T15686] veth15: entered promiscuous mode [ 373.846544][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 374.060265][T15715] lo speed is unknown, defaulting to 1000 [ 374.165619][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 374.929120][T15720] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 375.080353][T15764] ip6gre1: entered promiscuous mode [ 375.205581][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 375.412517][T15781] lo speed is unknown, defaulting to 1000 [ 375.437280][T15783] Cannot find add_set index 0 as target [ 376.103540][T15834] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 376.123420][T15836] __nla_validate_parse: 10 callbacks suppressed [ 376.123436][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2775'. [ 376.140277][T15836] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2775'. [ 376.150399][T15836] netlink: 336 bytes leftover after parsing attributes in process `syz.3.2775'. [ 376.160339][T15836] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2775'. [ 376.185313][T15836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2775'. [ 376.245583][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 376.325847][ T5833] Bluetooth: hci3: command 0x0401 tx timeout [ 376.374615][T15845] x_tables: duplicate underflow at hook 1 [ 376.596080][T15861] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2785'. [ 376.765163][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2789'. [ 376.793606][T15874] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2789'. [ 376.793820][T15876] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 376.802742][T15874] netlink: 336 bytes leftover after parsing attributes in process `syz.4.2789'. [ 376.802763][T15874] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2789'. [ 376.834417][T15876] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 377.002411][T15886] netlink: 'syz.4.2793': attribute type 13 has an invalid length. [ 377.143533][T15894] netlink: 'syz.0.2795': attribute type 12 has an invalid length. [ 377.285702][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 377.413729][T15917] lo speed is unknown, defaulting to 1000 [ 377.494817][T15914] dummy0: mtu less than device minimum [ 377.501325][T15914] netlink: 'syz.4.2801': attribute type 39 has an invalid length. [ 377.740297][T15923] netlink: 'syz.0.2804': attribute type 1 has an invalid length. [ 377.925287][T15949] macvtap1: entered promiscuous mode [ 377.933942][T15949] !: entered promiscuous mode [ 377.940370][T15949] macvtap1: entered allmulticast mode [ 377.949034][T15949] !: entered allmulticast mode [ 378.072620][T15958] gretap1: entered promiscuous mode [ 378.325589][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 378.402661][T15966] lo speed is unknown, defaulting to 1000 [ 379.113240][T16012] netlink: 'syz.2.2826': attribute type 5 has an invalid length. [ 379.130476][T16012] netlink: 'syz.2.2826': attribute type 6 has an invalid length. [ 379.147975][T16014] netlink: 'syz.0.2827': attribute type 9 has an invalid length. [ 379.200687][T16014] macvlan0: entered allmulticast mode [ 379.216812][T16014] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 379.251603][T16012] dvmrp1: entered allmulticast mode [ 379.304383][T16022] netlink: 'syz.1.2828': attribute type 10 has an invalid length. [ 379.341596][T16022] bond0: (slave wlan1): Opening slave failed [ 379.365695][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 379.393709][T16020] netlink: 'syz.1.2828': attribute type 1 has an invalid length. [ 379.603748][T16044] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 379.643850][T16046] NCSI netlink: No device for ifindex 0 [ 380.108218][T16070] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 380.172465][T16079] netlink: 'syz.4.2849': attribute type 1 has an invalid length. [ 380.405598][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 380.466887][T16079] 8021q: adding VLAN 0 to HW filter on device bond5 [ 380.544314][T16070] lo speed is unknown, defaulting to 1000 [ 380.617996][T16074] lo speed is unknown, defaulting to 1000 [ 380.987010][T16095] netlink: 'syz.4.2853': attribute type 29 has an invalid length. [ 381.205560][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 381.445692][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 381.686344][T16119] __nla_validate_parse: 18 callbacks suppressed [ 381.686360][T16119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2859'. [ 381.828851][T16122] lo speed is unknown, defaulting to 1000 [ 381.989284][T16132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2862'. [ 382.226971][ T5877] IPVS: starting estimator thread 0... [ 382.326109][T16147] IPVS: using max 31 ests per chain, 74400 per kthread [ 382.419521][T16152] netlink: 'syz.1.2866': attribute type 5 has an invalid length. [ 382.485623][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 382.635909][T16157] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2868'. [ 382.708500][T16160] macsec0: entered promiscuous mode [ 382.734335][T16160] macsec0: entered allmulticast mode [ 382.830221][T16160] veth1_macvtap: entered allmulticast mode [ 382.836465][T16160] veth1_macvtap: entered promiscuous mode [ 382.864511][T16160] macsec0: left promiscuous mode [ 382.873874][T16160] veth1_macvtap: left promiscuous mode [ 382.890567][T16160] macsec0: left allmulticast mode [ 382.905898][T16160] veth1_macvtap: left allmulticast mode [ 383.134569][T16186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2873'. [ 383.232116][T16194] pimreg: entered allmulticast mode [ 383.247835][T16194] 8021q: VLANs not supported on pimreg [ 383.525794][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 383.571045][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2881'. [ 383.784412][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2885'. [ 383.809661][T16217] nbd: must specify at least one socket [ 383.893839][T16221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2887'. [ 383.926402][T16221] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2887'. [ 383.936377][T16221] netlink: 336 bytes leftover after parsing attributes in process `syz.1.2887'. [ 383.946832][T16221] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2887'. [ 384.143211][T16238] netlink: 'syz.3.2891': attribute type 1 has an invalid length. [ 384.203770][T16242] netlink: zone id is out of range [ 384.240214][T16242] netlink: zone id is out of range [ 384.261131][T16242] netlink: zone id is out of range [ 384.268772][T16242] netlink: zone id is out of range [ 384.274388][T16242] netlink: get zone limit has 8 unknown bytes [ 384.420323][T16233] veth1_to_team: left promiscuous mode [ 384.440667][T16233] geneve1: left promiscuous mode [ 384.476415][T16233] macvlan0: left promiscuous mode [ 384.502916][T16233] gretap1: left promiscuous mode [ 384.510962][ T7621] lo speed is unknown, defaulting to 1000 [ 384.517671][ T7621] syz1: Port: 1 Link DOWN [ 384.565633][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 384.600948][T16255] xt_CT: No such helper "snmp" [ 384.728768][T16265] sctp: [Deprecated]: syz.1.2900 (pid 16265) Use of int in max_burst socket option. [ 384.728768][T16265] Use struct sctp_assoc_value instead [ 385.143780][T16292] netlink: 'syz.1.2909': attribute type 1 has an invalid length. [ 385.155178][T16292] netlink: 'syz.1.2909': attribute type 2 has an invalid length. [ 385.233068][T16296] netlink: 'syz.2.2911': attribute type 11 has an invalid length. [ 385.259974][T16296] vlan2: entered promiscuous mode [ 385.265045][T16296] ip6gretap0: entered promiscuous mode [ 385.329768][T16292] lo speed is unknown, defaulting to 1000 [ 385.605474][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 385.675362][T16319] netlink: 'syz.1.2918': attribute type 8 has an invalid length. [ 385.689961][T16312] lo speed is unknown, defaulting to 1000 [ 386.234645][T16350] netlink: 'syz.1.2926': attribute type 4 has an invalid length. [ 386.473976][T16356] netlink: 'syz.1.2926': attribute type 4 has an invalid length. [ 386.645646][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 386.688964][ T979] lo speed is unknown, defaulting to 1000 [ 386.735628][ T979] syz1: Port: 1 Link ACTIVE [ 386.756855][T16353] lo speed is unknown, defaulting to 1000 [ 386.901385][T16369] __nla_validate_parse: 27 callbacks suppressed [ 386.901404][T16369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2931'. [ 387.086782][T16365] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2933'. [ 387.100231][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2933'. [ 387.117894][T16369] nbd: socks must be embedded in a SOCK_ITEM attr [ 387.135239][ T5840] block nbd64: NBD_DISCONNECT [ 387.412221][T16378] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 387.464879][T16385] netlink: 'syz.1.2935': attribute type 27 has an invalid length. [ 387.476125][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 387.485140][T16381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2936'. [ 387.486499][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 387.512360][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 387.529148][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 387.556378][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 387.575224][ T5877] lo speed is unknown, defaulting to 1000 [ 387.581613][ T5877] syz1: Port: 1 Link DOWN [ 387.639328][T16382] lo speed is unknown, defaulting to 1000 [ 387.685510][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 387.979737][T16406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2941'. [ 387.985076][T16382] chnl_net:caif_netlink_parms(): no params data found [ 387.989036][T16406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2941'. [ 388.122917][T16412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2944'. [ 388.263943][T16412] syz_tun: left allmulticast mode [ 388.269921][T16412] syz_tun: left promiscuous mode [ 388.275033][T16412] bridge0: port 1(syz_tun) entered disabled state [ 388.284330][T16422] x_tables: duplicate underflow at hook 2 [ 388.293200][T16412] bond0: (slave bond_slave_0): Releasing backup interface [ 388.301601][T16422] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 388.323646][T16412] bond0: (slave bond_slave_1): Releasing backup interface [ 388.334842][T16412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.343184][T16412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.352724][T16412] batman_adv: batadv0: Removing interface: wlan0 [ 388.361559][T16412] veth1: left promiscuous mode [ 388.370250][T16412] bridge0: port 2(veth1) entered disabled state [ 388.398290][T16382] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.415684][T16382] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.422866][T16382] bridge_slave_0: entered allmulticast mode [ 388.441662][T16382] bridge_slave_0: entered promiscuous mode [ 388.486249][T16382] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.493479][T16382] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.534638][T16382] bridge_slave_1: entered allmulticast mode [ 388.558190][T16382] bridge_slave_1: entered promiscuous mode [ 388.564325][T16432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2949'. [ 388.585753][T16432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2949'. [ 388.677047][T16382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.725550][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 388.731260][T16382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.761308][T16442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2953'. [ 388.870088][T16382] team0: Port device team_slave_0 added [ 389.000181][T16382] team0: Port device team_slave_1 added [ 389.358122][ T36] bond3 (unregistering): (slave erspan0): Releasing active interface [ 389.442359][ T36] dvmrp0 (unregistering): left allmulticast mode [ 389.615751][ T5833] Bluetooth: hci5: command tx timeout [ 389.766343][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 389.789152][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 389.797832][ T36] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 389.808822][ T36] bond0 (unregistering): Released all slaves [ 389.901324][ T36] bond1 (unregistering): Released all slaves [ 389.914142][ T36] bond2 (unregistering): Released all slaves [ 390.007898][ T36] bond3 (unregistering): (slave veth11): Releasing active interface [ 390.017354][ T36] bond3 (unregistering): Released all slaves [ 390.105041][ T36] bond4 (unregistering): Released all slaves [ 390.194521][ T36] bond5 (unregistering): Released all slaves [ 390.223282][T16457] netlink: 'syz.2.2958': attribute type 4 has an invalid length. [ 390.350899][T16382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.385514][T16382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.417445][T16470] netlink: 'syz.2.2961': attribute type 10 has an invalid length. [ 390.438977][T16382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.545828][ T36] tipc: Disabling bearer [ 390.563507][ T36] tipc: Disabling bearer [ 390.585701][ T36] tipc: Left network mode [ 390.595814][T16469] macvlan3: entered promiscuous mode [ 390.601132][T16469] bridge0: entered promiscuous mode [ 390.616984][T16469] bridge0: port 1(macvlan3) entered blocking state [ 390.711767][T16469] bridge0: port 1(macvlan3) entered disabled state [ 390.721185][T16469] macvlan3: entered allmulticast mode [ 390.732287][T16469] bridge0: entered allmulticast mode [ 390.826813][T16469] macvlan3: left allmulticast mode [ 390.842922][T16469] bridge0: left allmulticast mode [ 390.856798][T16469] bridge0: left promiscuous mode [ 390.916869][T16382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.929021][T16382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.960264][T16382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.988199][T16486] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 391.283661][T16382] hsr_slave_0: entered promiscuous mode [ 391.296982][T16382] hsr_slave_1: entered promiscuous mode [ 391.317643][T16508] netlink: 'syz.2.2969': attribute type 15 has an invalid length. [ 391.326493][T16382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.339890][T16382] Cannot create hsr debugfs directory [ 391.548336][T16523] netlink: 'syz.3.2972': attribute type 1 has an invalid length. [ 391.687809][ T5833] Bluetooth: hci5: command tx timeout [ 391.741995][T16523] 8021q: adding VLAN 0 to HW filter on device bond6 [ 391.792468][T16527] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 391.967674][T16543] __nla_validate_parse: 10 callbacks suppressed [ 391.967691][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2975'. [ 392.051678][T16546] netlink: 'syz.2.2976': attribute type 1 has an invalid length. [ 392.061193][T16546] netlink: 784 bytes leftover after parsing attributes in process `syz.2.2976'. [ 392.466216][T16559] No such timeout policy "syz0" [ 393.088793][T16572] dvmrp1: left allmulticast mode [ 393.299494][ T36] IPVS: stop unused estimator thread 0... [ 393.306823][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2986'. [ 393.320483][T16578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2986'. [ 393.673844][T16382] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 393.688838][T16382] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 393.716835][T16382] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 393.742394][T16382] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 393.765570][ T5833] Bluetooth: hci5: command tx timeout [ 393.940378][T16382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.948455][T16598] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2993'. [ 393.993747][T16382] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.025586][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.032728][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.078446][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.085638][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.394605][T16620] netlink: 'syz.2.2998': attribute type 1 has an invalid length. [ 394.456796][T16625] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2997'. [ 394.516257][T16625] netlink: zone id is out of range [ 394.574922][T16382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.596508][T16625] netlink: zone id is out of range [ 394.609019][T16625] netlink: zone id is out of range [ 394.644298][T16625] netlink: zone id is out of range [ 394.654396][T16625] netlink: zone id is out of range [ 394.675012][T16625] netlink: zone id is out of range [ 394.712852][T16625] netlink: get zone limit has 8 unknown bytes [ 394.857133][T16637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3000'. [ 395.049046][T16382] veth0_vlan: entered promiscuous mode [ 395.084173][T16382] veth1_vlan: entered promiscuous mode [ 395.128413][T16650] netlink: 'syz.0.3002': attribute type 30 has an invalid length. [ 395.141604][T16652] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 395.267356][T16382] veth0_macvtap: entered promiscuous mode [ 395.311304][T16382] veth1_macvtap: entered promiscuous mode [ 395.351457][T16382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.379243][T16382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.406485][T16382] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.415208][T16382] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.441808][T16382] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.450929][T16382] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.642218][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.661231][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.727177][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.747437][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.792437][T16674] x_tables: duplicate underflow at hook 2 [ 395.823079][T16674] batman_adv: batadv0: Adding interface: ip6gretap1 [ 395.840198][T16674] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.880119][T16674] batman_adv: batadv0: Interface activated: ip6gretap1 [ 395.880524][ T5833] Bluetooth: hci5: command tx timeout [ 396.461474][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 396.471544][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 396.484348][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 396.500679][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 396.508847][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 396.557562][T16696] lo speed is unknown, defaulting to 1000 [ 396.762117][T16696] chnl_net:caif_netlink_parms(): no params data found [ 396.882271][T16706] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3017'. [ 396.896703][T16706] netlink: 37 bytes leftover after parsing attributes in process `syz.4.3017'. [ 396.917243][T16706] netlink: 37 bytes leftover after parsing attributes in process `syz.4.3017'. [ 396.964700][T16696] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.978164][T16696] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.988475][T16696] bridge_slave_0: entered allmulticast mode [ 396.998195][T16696] bridge_slave_0: entered promiscuous mode [ 397.008429][T16696] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.035847][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3020'. [ 397.051748][T16696] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.061420][T16696] bridge_slave_1: entered allmulticast mode [ 397.069013][T16715] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3020'. [ 397.069532][T16696] bridge_slave_1: entered promiscuous mode [ 397.093984][T16717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3020'. [ 397.104481][T16715] netlink: 336 bytes leftover after parsing attributes in process `syz.4.3020'. [ 397.134291][T16715] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3020'. [ 397.156365][T16719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3022'. [ 397.174104][T16696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.191165][T16721] netlink: 'syz.1.3021': attribute type 10 has an invalid length. [ 397.197522][T16696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.199153][T16721] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3021'. [ 397.264093][T16721] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.285316][T16721] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.298444][T16721] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.307570][T16721] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.341029][T16721] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 397.351542][T16721] team0: Failed to send options change via netlink (err -105) [ 397.359368][T16721] team0: Port device geneve0 added [ 397.401834][T16726] tipc: Started in network mode [ 397.407189][T16726] tipc: Node identity a18d, cluster identity 106 [ 397.421715][T16726] tipc: Node number set to 41357 [ 397.498580][T16696] team0: Port device team_slave_0 added [ 397.514233][T16696] team0: Port device team_slave_1 added [ 397.582279][T16735] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:000e with DS=0x9 [ 397.670331][T16696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.687176][T16696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.789055][T16696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.835619][T16741] sit0: entered promiscuous mode [ 397.841854][T16741] netlink: 'syz.1.3027': attribute type 1 has an invalid length. [ 397.854422][T16729] lo speed is unknown, defaulting to 1000 [ 397.866971][T16741] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3027'. [ 397.906546][T16696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.913521][T16696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.020891][T16696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.066558][T16759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3032'. [ 398.079016][T16759] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3032'. [ 398.152955][T16696] hsr_slave_0: entered promiscuous mode [ 398.173631][T16696] hsr_slave_1: entered promiscuous mode [ 398.194988][T16696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.214851][T16696] Cannot create hsr debugfs directory [ 398.565791][ T5833] Bluetooth: hci1: command tx timeout [ 399.103403][T16791] netlink: 'syz.2.3040': attribute type 12 has an invalid length. [ 399.126122][ T41] block nbd0: Possible stuck request ffff888025047000: control (read@0,1024B). Runtime 300 seconds [ 399.137076][ T41] block nbd0: Possible stuck request ffff8880250471c0: control (read@1024,1024B). Runtime 300 seconds [ 399.149167][ T41] block nbd0: Possible stuck request ffff888025047380: control (read@2048,1024B). Runtime 300 seconds [ 399.160858][ T41] block nbd0: Possible stuck request ffff888025047540: control (read@3072,1024B). Runtime 300 seconds [ 399.224634][T16796] FAULT_INJECTION: forcing a failure. [ 399.224634][T16796] name failslab, interval 1, probability 0, space 0, times 0 [ 399.237722][T16796] CPU: 0 UID: 0 PID: 16796 Comm: syz.1.3043 Not tainted 6.15.0-rc4-syzkaller-00802-g075001c9eb41 #0 PREEMPT(full) [ 399.237745][T16796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 399.237755][T16796] Call Trace: [ 399.237761][T16796] [ 399.237769][T16796] dump_stack_lvl+0x189/0x250 [ 399.237799][T16796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.237818][T16796] ? __pfx__printk+0x10/0x10 [ 399.237837][T16796] ? __pfx___might_resched+0x10/0x10 [ 399.237854][T16796] should_fail_ex+0x414/0x560 [ 399.237881][T16796] ? translate_table+0x1a8/0x1f90 [ 399.237900][T16796] should_failslab+0xa8/0x100 [ 399.237921][T16796] __kvmalloc_node_noprof+0x168/0x5e0 [ 399.237941][T16796] ? translate_table+0x1a8/0x1f90 [ 399.237964][T16796] translate_table+0x1a8/0x1f90 [ 399.238006][T16796] ? __pfx_translate_table+0x10/0x10 [ 399.238044][T16796] ? _copy_from_user+0x94/0xb0 [ 399.238066][T16796] do_arpt_set_ctl+0x993/0xf10 [ 399.238090][T16796] ? __mutex_trylock_common+0x153/0x260 [ 399.238110][T16796] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 399.238134][T16796] ? rcu_is_watching+0x15/0xb0 [ 399.238173][T16796] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 399.238198][T16796] ? __pfx___mutex_lock+0x10/0x10 [ 399.238220][T16796] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 399.238238][T16796] ? aa_sk_perm+0x81e/0x950 [ 399.238260][T16796] ? __pfx_aa_sk_perm+0x10/0x10 [ 399.238283][T16796] nf_setsockopt+0x26c/0x290 [ 399.238304][T16796] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 399.238324][T16796] do_sock_setsockopt+0x257/0x3e0 [ 399.238346][T16796] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 399.238363][T16796] ? __fget_files+0x2a/0x420 [ 399.238387][T16796] ? __fget_files+0x3a0/0x420 [ 399.238404][T16796] ? __fget_files+0x2a/0x420 [ 399.238431][T16796] __x64_sys_setsockopt+0x18b/0x220 [ 399.238457][T16796] do_syscall_64+0xf6/0x210 [ 399.238474][T16796] ? clear_bhb_loop+0x45/0xa0 [ 399.238501][T16796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.238517][T16796] RIP: 0033:0x7f6d3938e969 [ 399.238532][T16796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.238546][T16796] RSP: 002b:00007f6d3a18e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 399.238564][T16796] RAX: ffffffffffffffda RBX: 00007f6d395b5fa0 RCX: 00007f6d3938e969 [ 399.238576][T16796] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 399.238586][T16796] RBP: 00007f6d3a18e090 R08: 0000000000000068 R09: 0000000000000000 [ 399.238596][T16796] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 399.238607][T16796] R13: 0000000000000000 R14: 00007f6d395b5fa0 R15: 00007ffcbed880c8 [ 399.238636][T16796] [ 399.564334][T16696] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 399.661200][T16696] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 399.719333][T16696] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 399.775955][T16696] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 399.854754][T16807] lo speed is unknown, defaulting to 1000 [ 399.984303][T16810] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 400.138230][T16814] lo speed is unknown, defaulting to 1000 [ 400.401996][T16834] netlink: 'syz.3.3053': attribute type 1 has an invalid length. [ 400.415607][T16834] netlink: 'syz.3.3053': attribute type 2 has an invalid length. [ 400.500703][T16696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.624277][T16847] FAULT_INJECTION: forcing a failure. [ 400.624277][T16847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.639814][T16847] CPU: 0 UID: 0 PID: 16847 Comm: syz.3.3057 Not tainted 6.15.0-rc4-syzkaller-00802-g075001c9eb41 #0 PREEMPT(full) [ 400.639837][T16847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 400.639847][T16847] Call Trace: [ 400.639854][T16847] [ 400.639862][T16847] dump_stack_lvl+0x189/0x250 [ 400.639891][T16847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.639912][T16847] ? __pfx__printk+0x10/0x10 [ 400.639941][T16847] should_fail_ex+0x414/0x560 [ 400.639971][T16847] _copy_to_user+0x31/0xb0 [ 400.639994][T16847] simple_read_from_buffer+0xe1/0x170 [ 400.640019][T16847] proc_fail_nth_read+0x1df/0x250 [ 400.640044][T16847] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 400.640067][T16847] ? rw_verify_area+0x258/0x650 [ 400.640083][T16847] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 400.640106][T16847] vfs_read+0x1fd/0x980 [ 400.640129][T16847] ? __pfx___mutex_lock+0x10/0x10 [ 400.640162][T16847] ? __pfx_vfs_read+0x10/0x10 [ 400.640179][T16847] ? __fget_files+0x2a/0x420 [ 400.640203][T16847] ? __fget_files+0x3a0/0x420 [ 400.640220][T16847] ? __fget_files+0x2a/0x420 [ 400.640249][T16847] ksys_read+0x145/0x250 [ 400.640270][T16847] ? __pfx_ksys_read+0x10/0x10 [ 400.640293][T16847] ? do_syscall_64+0xba/0x210 [ 400.640313][T16847] do_syscall_64+0xf6/0x210 [ 400.640328][T16847] ? clear_bhb_loop+0x45/0xa0 [ 400.640349][T16847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.640364][T16847] RIP: 0033:0x7fbcf998d37c [ 400.640380][T16847] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 400.640393][T16847] RSP: 002b:00007fbcfa736030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 400.640411][T16847] RAX: ffffffffffffffda RBX: 00007fbcf9bb5fa0 RCX: 00007fbcf998d37c [ 400.640423][T16847] RDX: 000000000000000f RSI: 00007fbcfa7360a0 RDI: 0000000000000004 [ 400.640434][T16847] RBP: 00007fbcfa736090 R08: 0000000000000000 R09: 0000000000000000 [ 400.640445][T16847] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 400.640455][T16847] R13: 0000000000000000 R14: 00007fbcf9bb5fa0 R15: 00007ffcd09060e8 [ 400.640482][T16847] [ 400.646785][ T5833] Bluetooth: hci1: command tx timeout [ 400.894367][T16696] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.950362][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.957555][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.081912][ T6082] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.089174][ T6082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.118507][T16861] siw: device registration error -23 [ 401.411075][T16866] syzkaller0: entered promiscuous mode [ 401.426405][T16866] syzkaller0: entered allmulticast mode [ 402.172131][T16898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.238650][T16898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.374021][T16900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.404898][T16899] __nla_validate_parse: 25 callbacks suppressed [ 402.404918][T16899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3072'. [ 402.889388][ T5833] Bluetooth: hci1: command tx timeout [ 403.294520][T16696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.408243][T16696] veth0_vlan: entered promiscuous mode [ 403.460579][T16696] veth1_vlan: entered promiscuous mode [ 403.554280][T16696] veth0_macvtap: entered promiscuous mode [ 403.572829][T16696] veth1_macvtap: entered promiscuous mode [ 403.617992][T16696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.630573][T16696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.641971][T16696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.654545][T16696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.691563][T16696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.723481][T16696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.822446][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3077'. [ 403.869958][T16696] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.884127][T16696] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.913086][T16696] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.938074][T16696] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.230607][T16928] lo speed is unknown, defaulting to 1000 [ 404.344336][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.372705][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.394978][T16934] lo speed is unknown, defaulting to 1000 [ 404.484190][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.496444][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3083'. [ 404.515700][T16948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3083'. [ 404.524696][T16948] netlink: 336 bytes leftover after parsing attributes in process `syz.2.3083'. [ 404.534170][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.549735][T16948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3083'. [ 404.566804][T16953] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3083'. [ 404.638323][T16955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.714668][T16955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.762308][T16959] tipc: Enabled bearer , priority 10 [ 404.814650][T16962] lo speed is unknown, defaulting to 1000 [ 404.824144][T16958] smc: net device bond0 erased user defined pnetid SYZ [ 404.870240][T16968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.889496][T16965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3085'. [ 404.966091][ T5833] Bluetooth: hci1: command tx timeout [ 405.127922][T16983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3092'. [ 405.143215][T16983] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 405.418702][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3093'. [ 405.469644][T16996] xt_hashlimit: size too large, truncated to 1048576 [ 405.539503][T16996] syz.0.3095: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 405.645687][T16996] CPU: 1 UID: 0 PID: 16996 Comm: syz.0.3095 Not tainted 6.15.0-rc4-syzkaller-00802-g075001c9eb41 #0 PREEMPT(full) [ 405.645714][T16996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 405.645723][T16996] Call Trace: [ 405.645730][T16996] [ 405.645737][T16996] dump_stack_lvl+0x189/0x250 [ 405.645766][T16996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.645787][T16996] ? __pfx__printk+0x10/0x10 [ 405.645804][T16996] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 405.645827][T16996] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 405.645851][T16996] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 405.645876][T16996] warn_alloc+0x214/0x310 [ 405.645910][T16996] ? __pfx_warn_alloc+0x10/0x10 [ 405.645938][T16996] ? __get_vm_area_node+0x1c5/0x2d0 [ 405.645957][T16996] ? __get_vm_area_node+0x25a/0x2d0 [ 405.645983][T16996] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 405.646030][T16996] ? __lock_acquire+0xaac/0xd20 [ 405.646054][T16996] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 405.646075][T16996] ? __kasan_kmalloc_large+0x1a/0xa0 [ 405.646096][T16996] ? rcu_is_watching+0x15/0xb0 [ 405.646118][T16996] ? htable_create+0xfc/0x7a0 [ 405.646136][T16996] ? htable_create+0xfc/0x7a0 [ 405.646152][T16996] __kvmalloc_node_noprof+0x3a0/0x5e0 [ 405.646170][T16996] ? htable_create+0xfc/0x7a0 [ 405.646187][T16996] ? hashlimit_pernet+0x23/0x240 [ 405.646212][T16996] htable_create+0xfc/0x7a0 [ 405.646240][T16996] hashlimit_mt_check_common+0x719/0xa10 [ 405.646270][T16996] xt_check_match+0x3ce/0xab0 [ 405.646289][T16996] ? __pfx___mutex_lock+0x10/0x10 [ 405.646314][T16996] ? __pfx_xt_check_match+0x10/0x10 [ 405.646335][T16996] ? pcpu_alloc_noprof+0xfdb/0x16b0 [ 405.646361][T16996] ? xt_find_match+0x1f7/0x250 [ 405.646384][T16996] translate_table+0x1553/0x2040 [ 405.646420][T16996] ? __pfx_translate_table+0x10/0x10 [ 405.646440][T16996] ? __might_fault+0xb0/0x130 [ 405.646473][T16996] ? _copy_from_user+0x94/0xb0 [ 405.646496][T16996] do_ip6t_set_ctl+0x970/0xce0 [ 405.646519][T16996] ? rcu_is_watching+0x15/0xb0 [ 405.646539][T16996] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 405.646576][T16996] ? __pfx___mutex_lock+0x10/0x10 [ 405.646598][T16996] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 405.646624][T16996] ? futex_wake+0x458/0x500 [ 405.646651][T16996] nf_setsockopt+0x26c/0x290 [ 405.646677][T16996] rawv6_setsockopt+0x23b/0x5b0 [ 405.646700][T16996] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 405.646720][T16996] ? aa_sock_opt_perm+0x74/0x110 [ 405.646737][T16996] ? sock_common_setsockopt+0x36/0xc0 [ 405.646754][T16996] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 405.646773][T16996] do_sock_setsockopt+0x257/0x3e0 [ 405.646796][T16996] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 405.646813][T16996] ? __fget_files+0x2a/0x420 [ 405.646837][T16996] ? __fget_files+0x3a0/0x420 [ 405.646855][T16996] ? __fget_files+0x2a/0x420 [ 405.646889][T16996] __x64_sys_setsockopt+0x18b/0x220 [ 405.646915][T16996] do_syscall_64+0xf6/0x210 [ 405.646931][T16996] ? clear_bhb_loop+0x45/0xa0 [ 405.646950][T16996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.646965][T16996] RIP: 0033:0x7f5e7db8e969 [ 405.646981][T16996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.646995][T16996] RSP: 002b:00007f5e7e987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 405.647013][T16996] RAX: ffffffffffffffda RBX: 00007f5e7ddb5fa0 RCX: 00007f5e7db8e969 [ 405.647025][T16996] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 405.647035][T16996] RBP: 00007f5e7dc10ab1 R08: 0000000000000588 R09: 0000000000000000 [ 405.647046][T16996] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 405.647056][T16996] R13: 0000000000000000 R14: 00007f5e7ddb5fa0 R15: 00007ffd2fc63488 [ 405.647085][T16996] [ 405.647108][T16996] Mem-Info: [ 406.120101][T16996] active_anon:10449 inactive_anon:0 isolated_anon:0 [ 406.120101][T16996] active_file:1867 inactive_file:38443 isolated_file:0 [ 406.120101][T16996] unevictable:768 dirty:422 writeback:0 [ 406.120101][T16996] slab_reclaimable:11603 slab_unreclaimable:119431 [ 406.120101][T16996] mapped:26038 shmem:1445 pagetables:826 [ 406.120101][T16996] sec_pagetables:0 bounce:0 [ 406.120101][T16996] kernel_misc_reclaimable:0 [ 406.120101][T16996] free:1321055 free_pcp:2408 free_cma:0 [ 406.237214][T16996] Node 0 active_anon:41796kB inactive_anon:0kB active_file:7468kB inactive_file:153700kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107952kB dirty:1688kB writeback:0kB shmem:4244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11380kB pagetables:3404kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 406.295439][T16996] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 406.415644][T16996] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 406.470046][T17024] netlink: zone id is out of range [ 406.497028][T16996] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 406.502853][T16996] Node 0 DMA32 free:1340968kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:41888kB inactive_anon:0kB active_file:7468kB inactive_file:153600kB unevictable:1536kB writepending:1684kB present:3129332kB managed:2564072kB mlocked:0kB bounce:0kB free_pcp:24908kB local_pcp:22328kB free_cma:0kB [ 406.505828][T17024] netlink: zone id is out of range [ 406.544632][T17026] lo speed is unknown, defaulting to 1000 [ 406.554436][T16996] lowmem_reserve[]: 0 0 0 0 0 [ 406.592297][T16996] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 406.606504][T17024] netlink: zone id is out of range [ 406.662740][T17024] netlink: zone id is out of range [ 406.665647][T16996] lowmem_reserve[]: 0 0 0 0 0 [ 406.679876][T17024] netlink: zone id is out of range [ 406.695924][T17024] netlink: zone id is out of range [ 406.697177][T16996] Node 1 [ 406.712584][T17024] netlink: zone id is out of range [ 406.713061][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.716341][T17024] netlink: zone id is out of range [ 406.724790][T16996] Normal free:3913896kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:0kB free_cma:0kB [ 406.734447][T17024] netlink: zone id is out of range [ 406.774640][T16996] lowmem_reserve[]: 0 0 0 0 0 [ 406.774691][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.783226][T16996] [ 406.789691][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.800818][T16996] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB [ 406.811189][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.814319][T16996] (M) [ 406.839782][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.885824][T16996] 3*4096kB (M) = 15360kB [ 406.894175][T16996] Node 0 DMA32: 156*4kB (UME) 76*8kB (UME) 179*16kB (UME) 154*32kB (UME) 78*64kB (UME) 168*128kB (UME) 258*256kB (UM) 116*512kB (UME) 34*1024kB (UME) 8*2048kB (UM) 278*4096kB (UM) = 1350848kB [ 406.908584][T17031] lo speed is unknown, defaulting to 1000 [ 406.941918][T16996] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 406.953796][T16996] Node 1 Normal: 70*4kB (U) 48*8kB (UME) 45*16kB (UME) 186*32kB (UME) 74*64kB (UME) 27*128kB (UME) 18*256kB (UME) 9*512kB (UM) 6*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3913896kB [ 406.972547][T16996] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 406.986257][T16996] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 406.999102][T16996] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 407.039948][T16996] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 407.100412][T16996] 41755 total pagecache pages [ 407.105159][T16996] 0 pages in swap cache [ 407.127250][T16996] Free swap = 124996kB [ 407.131453][T16996] Total swap = 124996kB [ 407.152424][T16996] 2097051 pages RAM [ 407.165585][T16996] 0 pages HighMem/MovableOnly [ 407.194810][T16996] 424375 pages reserved [ 407.202311][T16996] 0 pages cma reserved [ 407.268143][T17053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.338509][T17031] chnl_net:caif_netlink_parms(): no params data found [ 407.389716][T17049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.549072][T17053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.587312][T17053] __nla_validate_parse: 13 callbacks suppressed [ 407.587330][T17053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3111'. [ 407.621159][T17068] IPVS: Unknown mcast interface: nicvf0 [ 407.673830][T17074] xt_hashlimit: size too large, truncated to 1048576 [ 407.703404][T17031] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.713987][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3119'. [ 407.723451][T17076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3119'. [ 407.735648][T17076] netlink: 336 bytes leftover after parsing attributes in process `syz.0.3119'. [ 407.744717][T17076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3119'. [ 407.753883][T17031] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.761283][T17031] bridge_slave_0: entered allmulticast mode [ 407.769764][T17031] bridge_slave_0: entered promiscuous mode [ 407.778395][T17031] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.785614][T17031] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.797112][T17076] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3119'. [ 407.812728][T17031] bridge_slave_1: entered allmulticast mode [ 407.820888][T17031] bridge_slave_1: entered promiscuous mode [ 407.923712][T17085] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 407.933942][T17085] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3121'. [ 407.986263][T17031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.024930][T17031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.111860][T17031] team0: Port device team_slave_0 added [ 408.127039][T17092] !: renamed from dummy0 (while UP) [ 408.140254][T17092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3123'. [ 408.162058][T17031] team0: Port device team_slave_1 added [ 408.274748][T17031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.291941][T17031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.343893][T17031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.367637][T17031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.394508][T17031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.465725][T17031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.610943][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3130'. [ 408.652618][T17115] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3130'. [ 408.886205][ T5833] Bluetooth: hci0: command tx timeout [ 409.061783][T17031] hsr_slave_0: entered promiscuous mode [ 409.086577][T17031] hsr_slave_1: entered promiscuous mode [ 409.095696][T17031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.105224][T17031] Cannot create hsr debugfs directory [ 409.116251][T17092] lo speed is unknown, defaulting to 1000 [ 409.353916][T17105] lo speed is unknown, defaulting to 1000 [ 409.434213][T17139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.507071][T17139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.530944][ T3517] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.569027][ T3517] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.645255][T17142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.721840][ T3517] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.741569][ T3517] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.831473][ T3517] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.857711][ T3517] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.973314][ T3517] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.993517][ T3517] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.334260][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 410.343632][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 410.352849][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 410.361401][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 410.382850][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 410.599960][T17171] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 410.766850][ T3517] bond3 (unregistering): (slave gretap1): Releasing active interface [ 410.805691][ T3517] dvmrp0 (unregistering): left allmulticast mode [ 410.819704][ T3517] dvmrp2 (unregistering): left allmulticast mode [ 410.839829][ T3517] dvmrp1 (unregistering): left allmulticast mode [ 410.965913][ T5833] Bluetooth: hci0: command tx timeout [ 411.068371][ T3517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.080147][ T3517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.091244][ T3517] bond0 (unregistering): Released all slaves [ 411.104072][ T3517] bond1 (unregistering): Released all slaves [ 411.204378][ T3517] bond2 (unregistering): Released all slaves [ 411.217798][ T3517] bond3 (unregistering): Released all slaves [ 411.318283][ T3517] bond4 (unregistering): Released all slaves [ 411.335209][ T3517] bond5 (unregistering): Released all slaves [ 411.379887][T17174] sit0: left promiscuous mode [ 411.411113][T17174] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.434491][T17174] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.453711][T17174] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.462228][T17174] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.486361][T17175] netlink: 'syz.1.3150': attribute type 2 has an invalid length. [ 411.536271][ T3517] tipc: Disabling bearer [ 411.550153][ T3517] tipc: Left network mode [ 411.583963][T17161] lo speed is unknown, defaulting to 1000 [ 411.829428][T17192] sctp: [Deprecated]: syz.4.3156 (pid 17192) Use of int in max_burst socket option. [ 411.829428][T17192] Use struct sctp_assoc_value instead [ 411.894808][T17196] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 412.092801][ T3517] hsr0: left allmulticast mode [ 412.107204][ T3517] veth1_macvtap: left promiscuous mode [ 412.113042][ T3517] veth1_vlan: left promiscuous mode [ 412.119178][ T3517] veth0_vlan: left promiscuous mode [ 412.411081][ T5833] Bluetooth: hci2: command tx timeout [ 412.838470][T17215] netlink: 'syz.0.3163': attribute type 5 has an invalid length. [ 412.865903][T17216] netlink: 'syz.0.3163': attribute type 5 has an invalid length. [ 412.899894][T17031] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 412.923453][T17031] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 413.011207][T17031] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 413.050210][ T5833] Bluetooth: hci0: command tx timeout [ 413.094212][T17161] chnl_net:caif_netlink_parms(): no params data found [ 413.123363][T17031] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 413.190259][T17240] __nla_validate_parse: 5 callbacks suppressed [ 413.190274][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3170'. [ 413.226340][T17240] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3170'. [ 413.267455][T17241] net_ratelimit: 184 callbacks suppressed [ 413.267470][T17241] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 413.430483][T17252] netlink: 'syz.0.3173': attribute type 22 has an invalid length. [ 413.496538][ T3517] IPVS: stop unused estimator thread 0... [ 413.537167][T17161] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.544293][T17161] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.575820][T17161] bridge_slave_0: entered allmulticast mode [ 413.583546][T17161] bridge_slave_0: entered promiscuous mode [ 413.624012][T17161] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.645530][T17161] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.652720][T17161] bridge_slave_1: entered allmulticast mode [ 413.673933][T17161] bridge_slave_1: entered promiscuous mode [ 413.764073][T17161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.797201][T17240] xt_hashlimit: size too large, truncated to 1048576 [ 413.827564][T17262] sctp: [Deprecated]: syz.0.3177 (pid 17262) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.827564][T17262] Use struct sctp_sack_info instead [ 413.849076][T17161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.935354][T17267] macsec1: entered promiscuous mode [ 413.940896][T17267] dummy0: entered promiscuous mode [ 413.947222][T17267] macsec1: entered allmulticast mode [ 413.952532][T17267] dummy0: entered allmulticast mode [ 413.961220][T17267] dummy0: left allmulticast mode [ 413.966311][T17267] dummy0: left promiscuous mode [ 413.977197][T17262] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3177'. [ 414.040400][T17268] vlan0: entered promiscuous mode [ 414.047367][T17268] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 414.054535][T17268] vlan0: entered allmulticast mode [ 414.060053][T17268] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 414.070470][T17262] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3177'. [ 414.093443][T17161] team0: Port device team_slave_0 added [ 414.124063][T17161] team0: Port device team_slave_1 added [ 414.323086][T17031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.347004][T17161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.355284][T17161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.386387][T17161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.402046][T17161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.444316][T17161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.473676][T17161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.486412][ T5833] Bluetooth: hci2: command tx timeout [ 414.552288][T17282] FAULT_INJECTION: forcing a failure. [ 414.552288][T17282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.556771][T17283] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3184'. [ 414.584500][T17031] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.601303][T17282] CPU: 1 UID: 0 PID: 17282 Comm: syz.1.3183 Not tainted 6.15.0-rc4-syzkaller-00802-g075001c9eb41 #0 PREEMPT(full) [ 414.601325][T17282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 414.601334][T17282] Call Trace: [ 414.601340][T17282] [ 414.601347][T17282] dump_stack_lvl+0x189/0x250 [ 414.601374][T17282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.601393][T17282] ? __pfx__printk+0x10/0x10 [ 414.601419][T17282] should_fail_ex+0x414/0x560 [ 414.601447][T17282] _copy_to_user+0x31/0xb0 [ 414.601468][T17282] simple_read_from_buffer+0xe1/0x170 [ 414.601492][T17282] proc_fail_nth_read+0x1df/0x250 [ 414.601516][T17282] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 414.601540][T17282] ? rw_verify_area+0x258/0x650 [ 414.601556][T17282] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 414.601577][T17282] vfs_read+0x1fd/0x980 [ 414.601598][T17282] ? do_sock_setsockopt+0x267/0x3e0 [ 414.601617][T17282] ? __pfx_vfs_read+0x10/0x10 [ 414.601630][T17282] ? do_sock_setsockopt+0x267/0x3e0 [ 414.601646][T17282] ? kfree+0x4d/0x440 [ 414.601662][T17282] ? __pfx_rose_setsockopt+0x10/0x10 [ 414.601684][T17282] ? do_sock_setsockopt+0x267/0x3e0 [ 414.601705][T17282] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 414.601730][T17282] ksys_read+0x145/0x250 [ 414.601750][T17282] ? __pfx_ksys_read+0x10/0x10 [ 414.601770][T17282] ? do_syscall_64+0xba/0x210 [ 414.601797][T17282] do_syscall_64+0xf6/0x210 [ 414.601813][T17282] ? clear_bhb_loop+0x45/0xa0 [ 414.601831][T17282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.601846][T17282] RIP: 0033:0x7f6d3938d37c [ 414.601861][T17282] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 414.601874][T17282] RSP: 002b:00007f6d3a18e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 414.601891][T17282] RAX: ffffffffffffffda RBX: 00007f6d395b5fa0 RCX: 00007f6d3938d37c [ 414.601903][T17282] RDX: 000000000000000f RSI: 00007f6d3a18e0a0 RDI: 0000000000000004 [ 414.601912][T17282] RBP: 00007f6d3a18e090 R08: 0000000000000000 R09: 0000000000000000 [ 414.601922][T17282] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 414.601932][T17282] R13: 0000000000000000 R14: 00007f6d395b5fa0 R15: 00007ffcbed880c8 [ 414.601960][T17282] [ 414.872614][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.879800][ T6081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.889507][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.896674][ T6081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.931515][T17288] netlink: 'syz.1.3186': attribute type 10 has an invalid length. [ 414.961597][T17161] hsr_slave_0: entered promiscuous mode [ 414.968437][T17161] hsr_slave_1: entered promiscuous mode [ 414.974559][T17161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.984169][T17161] Cannot create hsr debugfs directory [ 415.067977][T17290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.084925][T17290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3187'. [ 415.127008][ T5833] Bluetooth: hci0: command tx timeout [ 415.175497][T17296] Bluetooth: MGMT ver 1.23 [ 415.198511][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3187'. [ 415.334902][T17300] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3190'. [ 415.514540][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3193'. [ 415.617487][T17161] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 415.625295][T17310] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 415.656236][T17161] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 415.676718][T17031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.693578][T17161] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 415.720169][T17161] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 415.844848][T17031] veth0_vlan: entered promiscuous mode [ 415.876176][T17330] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 415.913016][T17031] veth1_vlan: entered promiscuous mode [ 416.047777][T17031] veth0_macvtap: entered promiscuous mode [ 416.092919][T17031] veth1_macvtap: entered promiscuous mode [ 416.121756][T17161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.162970][T17031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.187959][T17031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.205497][T17031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.226747][T17031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.248831][T17031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.286471][T17161] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.314642][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.321820][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.353424][T17031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.384234][T17031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.403409][T17031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.425643][T17031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.443342][T17031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.454032][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.457701][T17360] sctp: [Deprecated]: syz.1.3211 (pid 17360) Use of int in max_burst socket option deprecated. [ 416.457701][T17360] Use struct sctp_assoc_value instead [ 416.461168][ T3517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.509375][T17031] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.518787][T17031] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.529171][T17031] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.537957][T17031] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.565954][ T5833] Bluetooth: hci2: command tx timeout [ 416.606373][T17358] syzkaller0: refused to change device tx_queue_len [ 416.614044][T17161] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 416.627270][T17161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 416.774381][T17219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.796165][T17219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.861434][T17368] netlink: 'syz.0.3212': attribute type 1 has an invalid length. [ 416.872196][T17368] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3212'. [ 416.883146][ T6081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.905577][ T6081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.922845][T17161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.962993][T17368] macvtap1: entered promiscuous mode [ 416.969702][T17368] vlan0: entered promiscuous mode [ 416.976737][T17368] macvtap1: entered allmulticast mode [ 416.991486][T17368] vlan0: entered allmulticast mode [ 416.996800][T17368] veth0_vlan: entered allmulticast mode [ 417.013050][T17368] vlan0: left allmulticast mode [ 417.026115][T17368] veth0_vlan: left allmulticast mode [ 417.034814][T17368] vlan0: left promiscuous mode [ 417.095339][T17372] netlink: 'syz.3.3098': attribute type 1 has an invalid length. [ 417.245634][T17376] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20004 [ 417.283790][T17376] team0: entered promiscuous mode [ 417.318563][T17376] team_slave_0: entered promiscuous mode [ 417.346890][T17376] team_slave_1: entered promiscuous mode [ 417.380386][T17376] bond0: entered promiscuous mode [ 417.411461][T17376] bond_slave_0: entered promiscuous mode [ 417.437285][T17376] bond_slave_1: entered promiscuous mode [ 417.459069][T17376] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 417.473496][T17376] Cannot create hsr debugfs directory [ 417.481376][T17376] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 417.548204][T17394] syzkaller0: entered promiscuous mode [ 417.553705][T17394] syzkaller0: entered allmulticast mode [ 417.781556][T17409] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 418.657718][ T5833] Bluetooth: hci2: command tx timeout [ 419.070809][T17403] lo speed is unknown, defaulting to 1000 [ 419.090535][T17405] lo speed is unknown, defaulting to 1000 [ 419.132098][T17161] veth0_vlan: entered promiscuous mode [ 419.173965][T17417] batadv1: entered promiscuous mode [ 419.219740][T17419] netlink: 'syz.0.3223': attribute type 8 has an invalid length. [ 419.309643][T17161] veth1_vlan: entered promiscuous mode [ 419.338388][T17424] IPv6: addrconf: prefix option has invalid lifetime [ 419.347703][T17424] IPv6: addrconf: prefix option has invalid lifetime [ 419.361475][T17422] tipc: Started in network mode [ 419.366983][T17422] tipc: Node identity ac14140f, cluster identity 4711 [ 419.373998][T17422] tipc: New replicast peer: 255.255.255.255 [ 419.381550][T17422] tipc: Enabled bearer , priority 10 [ 419.393673][T17422] __nla_validate_parse: 5 callbacks suppressed [ 419.393687][T17422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3225'. [ 419.414775][T17422] tipc: Disabling bearer [ 419.558893][T17422] vxcan1: entered allmulticast mode [ 419.575956][T17422] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3225'. [ 419.598072][T17161] veth0_macvtap: entered promiscuous mode [ 419.652425][T17161] veth1_macvtap: entered promiscuous mode [ 419.750813][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.795576][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.815458][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.834161][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.860035][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.870835][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.892675][T17161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.981980][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.015594][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.050781][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.061671][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.073553][T17161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.093747][T17161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.115084][T17161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.162059][T17161] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.173918][T17161] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.191639][T17161] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.201740][T17161] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.262391][T17463] lo speed is unknown, defaulting to 1000 [ 420.829826][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.844595][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.175599][T17490] block nbd1: NBD_DISCONNECT [ 421.207833][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.225269][T17490] block nbd1: Disconnected due to user request. [ 421.248863][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.291121][T17490] block nbd1: shutting down sockets [ 421.623114][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3141'. [ 421.632264][T17526] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3141'. [ 421.641371][T17526] netlink: 336 bytes leftover after parsing attributes in process `syz.5.3141'. [ 421.653786][T17526] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3141'. [ 421.687793][T17526] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3141'. [ 421.879324][T17536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.963732][T17536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.119221][T17536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.120949][T17550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3254'. [ 422.130652][T17536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3249'. [ 422.224533][T17555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3257'. [ 422.369022][T17562] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input14 [ 422.782811][T17558] lo speed is unknown, defaulting to 1000 [ 423.143087][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 423.152503][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 423.160309][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 423.168457][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 423.176193][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 423.224586][T17570] sctp: [Deprecated]: syz.0.3259 (pid 17570) Use of int in maxseg socket option. [ 423.224586][T17570] Use struct sctp_assoc_value instead [ 423.504588][T17567] lo speed is unknown, defaulting to 1000 [ 424.108926][T17606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.251145][T17610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.724465][T17567] chnl_net:caif_netlink_parms(): no params data found [ 424.804210][T17623] __nla_validate_parse: 9 callbacks suppressed [ 424.804226][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3272'. [ 424.831084][T17623] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3272'. [ 424.865568][T17623] netlink: 336 bytes leftover after parsing attributes in process `syz.5.3272'. [ 424.902257][T17623] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3272'. [ 424.907620][T17625] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3272'. [ 425.166756][T17644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3275'. [ 425.207105][ T5833] Bluetooth: hci3: command tx timeout [ 425.299230][T17652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3277'. [ 425.318949][T17652] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3277'. [ 425.442749][T17656] xt_connbytes: Forcing CT accounting to be enabled [ 425.451151][T17656] Cannot find del_set index 1 as target [ 425.530289][ T36] team0: Port device geneve0 removed [ 425.932193][ T36] team0: Port device bond0 removed [ 425.939971][ T36] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 425.949985][ T36] bond0 (unregistering): Released all slaves [ 426.066564][ T36] bond1 (unregistering): Released all slaves [ 426.082236][ T36] bond2 (unregistering): Released all slaves [ 426.099819][ T36] bond3 (unregistering): Released all slaves [ 426.221205][ T36] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 426.230582][ T36] bond4 (unregistering): Released all slaves [ 426.249657][ T36] bond5 (unregistering): Released all slaves [ 426.366407][ T36] bond6 (unregistering): Released all slaves [ 426.395299][T17640] veth0: entered promiscuous mode [ 426.560763][T17668] dummy0: entered promiscuous mode [ 426.568118][T17567] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.593630][T17567] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.614529][T17567] bridge_slave_0: entered allmulticast mode [ 426.623401][T17567] bridge_slave_0: entered promiscuous mode [ 426.640244][T17567] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.669998][T17567] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.683106][T17567] bridge_slave_1: entered allmulticast mode [ 426.693729][T17567] bridge_slave_1: entered promiscuous mode [ 426.724349][T17671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3284'. [ 426.733461][T17671] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3284'. [ 426.761406][T17567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.779521][T17567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.913647][T17567] team0: Port device team_slave_0 added [ 426.950665][T17567] team0: Port device team_slave_1 added [ 426.962950][T17679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.037283][T17567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.045262][T17567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.073481][T17691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.084495][T17567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.104439][T17567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.114128][T17567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.143411][T17567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.200096][T17691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.222989][T17567] hsr_slave_0: entered promiscuous mode [ 427.230089][T17567] hsr_slave_1: entered promiscuous mode [ 427.280389][T17567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.289590][ T5833] Bluetooth: hci3: command tx timeout [ 427.303552][T17567] Cannot create hsr debugfs directory [ 427.654133][T17709] lo speed is unknown, defaulting to 1000 [ 427.848812][T17567] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 427.878720][T17567] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 427.913284][T17567] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 427.943093][T17567] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 428.033078][ T36] tipc: Left network mode [ 428.195066][T17567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.283209][T17567] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.355958][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.363144][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.414961][T17739] x_tables: duplicate underflow at hook 2 [ 428.422012][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.429294][ T3517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.729499][T17757] netlink: 'syz.4.3305': attribute type 39 has an invalid length. [ 428.738704][T17567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.863139][ T36] hsr_slave_0: left promiscuous mode [ 428.890846][ T36] hsr_slave_1: left promiscuous mode [ 428.964482][ T36] pimreg (unregistering): left allmulticast mode [ 429.063190][T17772] x_tables: duplicate underflow at hook 2 [ 429.072149][ T36] pim6reg (unregistering): left allmulticast mode [ 429.099208][T17775] netlink: 'syz.4.3309': attribute type 10 has an invalid length. [ 429.107400][T17774] netlink: 'syz.4.3309': attribute type 10 has an invalid length. [ 429.112887][T17771] xt_CT: No such helper "snmp" [ 429.139533][T17771] xt_CT: No such helper "snmp" [ 429.208093][ T41] block nbd0: Possible stuck request ffff888025047000: control (read@0,1024B). Runtime 330 seconds [ 429.222771][ T41] block nbd0: Possible stuck request ffff8880250471c0: control (read@1024,1024B). Runtime 330 seconds [ 429.234066][ T41] block nbd0: Possible stuck request ffff888025047380: control (read@2048,1024B). Runtime 330 seconds [ 429.245284][ T41] block nbd0: Possible stuck request ffff888025047540: control (read@3072,1024B). Runtime 330 seconds [ 429.365630][ T5833] Bluetooth: hci3: command tx timeout [ 429.816372][T17755] netlink: 'syz.3.3306': attribute type 15 has an invalid length. [ 429.833910][T17769] __nla_validate_parse: 13 callbacks suppressed [ 429.833926][T17769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3309'. [ 429.894104][T17775] batadv0: entered promiscuous mode [ 429.900351][T17775] batadv0: entered allmulticast mode [ 429.906337][T17775] bridge0: port 3(batadv0) entered blocking state [ 429.913012][T17775] bridge0: port 3(batadv0) entered disabled state [ 429.922139][T17775] bridge0: port 3(batadv0) entered blocking state [ 429.928717][T17775] bridge0: port 3(batadv0) entered forwarding state [ 430.133428][ T768] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 430.143034][ T768] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 430.240671][T17567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.509858][T17795] vlan2: entered promiscuous mode [ 430.531304][T17795] bridge0: entered promiscuous mode [ 430.536812][T17795] vlan2: entered allmulticast mode [ 430.548689][T17795] bridge0: entered allmulticast mode [ 430.770978][ T36] IPVS: stop unused estimator thread 0... [ 430.904728][T17567] veth0_vlan: entered promiscuous mode [ 430.959791][T17567] veth1_vlan: entered promiscuous mode [ 431.040434][T17567] veth0_macvtap: entered promiscuous mode [ 431.107963][T17567] veth1_macvtap: entered promiscuous mode [ 431.155009][T17567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.168779][T17567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.178972][T17567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.189960][T17567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.199855][T17567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.218270][T17567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.228486][T17567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.243390][T17567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.266042][T17567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.305025][T17567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.344201][T17567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.373372][T17567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.395247][T17567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.405165][T17567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.445509][T17567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.451415][ T5833] Bluetooth: hci3: command tx timeout [ 431.475713][T17567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.486730][T17567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.529540][T17567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.566545][T17567] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.601823][T17567] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.629088][T17567] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.653030][T17567] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.668621][T17824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.741163][T17824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.806804][T17830] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3326'. [ 431.962895][T17829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.002268][T17829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3324'. [ 432.078827][ T6081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.095687][ T6081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.153101][ T768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.166073][ T768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.589024][ T7621] IPVS: starting estimator thread 0... [ 432.677410][T17869] IPVS: using max 36 ests per chain, 86400 per kthread [ 432.727837][T17848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3329'. [ 432.747135][T17876] veth0_to_batadv: entered promiscuous mode [ 432.754249][T17876] veth0_to_batadv: entered allmulticast mode [ 432.806593][T17850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3329'. [ 433.015285][T17884] netlink: 'syz.1.3341': attribute type 27 has an invalid length. [ 433.037436][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3342'. [ 433.062666][T17882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3342'. [ 433.115340][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3341'. [ 433.533288][T17895] bridge0: port 3(batadv0) entered disabled state [ 433.539968][T17895] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.547620][T17895] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.577927][T17906] netlink: 'syz.5.3348': attribute type 10 has an invalid length. [ 433.604959][T17895] dummy0: left promiscuous mode [ 433.644288][T17907] xt_hashlimit: size too large, truncated to 1048576 [ 433.761370][T17895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.779913][T17895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.874365][T17895] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.888505][T17895] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.915458][T17895] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.936115][T17895] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.198058][T17930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.252565][T17905] xfrm1: entered promiscuous mode [ 434.264065][T17905] xfrm1: entered allmulticast mode [ 434.292216][T17930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.317040][T17906] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.362855][T17906] bond0: (slave team0): Enslaving as an active interface with an up link [ 434.456165][T17923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.466901][T17923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3353'. [ 434.502131][T17942] bridge_slave_0: left allmulticast mode [ 434.553625][T17942] bridge_slave_0: left promiscuous mode [ 434.564153][T17932] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3354'. [ 434.582842][T17942] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.606476][T17942] bridge_slave_1: left allmulticast mode [ 434.626376][T17942] bridge_slave_1: left promiscuous mode [ 434.634250][T17942] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.660857][T17942] bond0: (slave bond_slave_0): Releasing backup interface [ 434.677995][T17942] bond0: (slave bond_slave_1): Releasing backup interface [ 434.709847][T17942] team0: Port device team_slave_0 removed [ 434.723873][T17942] team0: Port device team_slave_1 removed [ 434.736690][T17942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.744460][T17942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.763628][T17942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.772723][T17942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.050684][T17964] block nbd3: NBD_DISCONNECT [ 435.063451][T17964] block nbd3: Disconnected due to user request. [ 435.077269][T17964] block nbd3: shutting down sockets [ 435.242587][T17974] netlink: 'syz.1.3361': attribute type 27 has an invalid length. [ 435.787724][T17977] netlink: zone id is out of range [ 435.800592][T17977] netlink: zone id is out of range [ 435.820809][T17977] netlink: zone id is out of range [ 435.835468][T17977] netlink: zone id is out of range [ 435.840765][T17977] netlink: zone id is out of range [ 435.847424][T17977] netlink: zone id is out of range [ 435.852747][T17977] netlink: zone id is out of range [ 435.859246][T17977] netlink: zone id is out of range [ 435.898253][T17977] netlink: zone id is out of range [ 435.903411][T17977] netlink: zone id is out of range [ 435.934722][T17974] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.955542][T17974] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.986916][T17974] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.996273][T17974] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.150122][T17990] netlink: 'syz.1.3364': attribute type 1 has an invalid length. [ 436.163268][T17990] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3364'. [ 436.217934][T17994] vlan2: entered promiscuous mode [ 436.226838][T17994] vlan2: entered allmulticast mode [ 436.232041][T17994] hsr_slave_1: entered allmulticast mode [ 436.291870][T17993] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 436.303113][T17992] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 436.434172][T18002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3367'. [ 436.459116][T18004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3369'. [ 436.468771][T18002] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3367'. [ 436.478537][T18002] netlink: 336 bytes leftover after parsing attributes in process `syz.3.3367'. [ 436.491653][T18002] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3367'. [ 436.509225][T18009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3367'. [ 436.701569][T18021] netlink: 'syz.3.3372': attribute type 1 has an invalid length. [ 436.731216][T18021] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3372'. [ 436.773185][T18019] tipc: Enabling not permitted [ 436.779340][T18019] tipc: Enabling of bearer rejected, failed to enable media [ 436.885764][ T31] INFO: task udevd:5824 blocked for more than 143 seconds. [ 436.902569][ T31] Not tainted 6.15.0-rc4-syzkaller-00802-g075001c9eb41 #0 [ 436.920586][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.933943][ T31] task:udevd state:D stack:22184 pid:5824 tgid:5824 ppid:5201 task_flags:0x400140 flags:0x00004006 [ 436.935278][T18029] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3376'. [ 436.947504][ T31] Call Trace: [ 436.968463][T18029] xt_recent: Unsupported userspace flags (00000048) [ 436.977949][T18029] x_tables: duplicate underflow at hook 2 [ 436.986580][T18029] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3376'. [ 437.002894][T18029] batadv1: entered promiscuous mode [ 437.029008][T18029] batadv1: entered allmulticast mode [ 437.097484][ T31] [ 437.100476][ T31] __schedule+0x16e2/0x4cd0 [ 437.105019][ T31] ? schedule+0x165/0x360 [ 437.109463][ T31] ? __lock_acquire+0xaac/0xd20 [ 437.114384][ T31] ? __pfx___schedule+0x10/0x10 [ 437.125479][ T31] ? schedule+0x91/0x360 [ 437.129765][ T31] schedule+0x165/0x360 [ 437.133939][ T31] io_schedule+0x81/0xe0 [ 437.149002][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 437.154533][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 437.170757][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 437.176600][ T31] ? __filemap_get_folio+0x730/0xaf0 [ 437.182079][ T31] ? do_read_cache_folio+0x4ed/0x590 [ 437.187757][ T31] do_read_cache_folio+0x1ae/0x590 [ 437.193053][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 437.198881][ T31] read_part_sector+0xb6/0x270 [ 437.203835][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 437.210165][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 437.219680][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 437.228926][ T31] ? set_page_refcounted+0xa0/0x1e0 [ 437.234292][ T31] bdev_disk_changed+0x75c/0x14b0 [ 437.244288][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 437.255441][ T31] ? wait_on_inode+0xc0/0x230 [ 437.260349][ T31] blkdev_get_whole+0x380/0x510 [ 437.271604][ T31] bdev_open+0x31e/0xd30 [ 437.271767][T18032] netlink: 'syz.3.3375': attribute type 10 has an invalid length. [ 437.284713][ T31] blkdev_open+0x3a8/0x510 [ 437.296607][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 437.302301][ T31] do_dentry_open+0xdf0/0x1970 [ 437.312926][ T31] vfs_open+0x3b/0x340 [ 437.321681][ T31] ? path_openat+0x2ecd/0x3830 [ 437.331201][ T31] path_openat+0x2ee5/0x3830 [ 437.341419][ T31] ? arch_stack_walk+0xfc/0x150 [ 437.351687][ T31] ? __pfx_path_openat+0x10/0x10 [ 437.363498][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.375431][ T31] do_filp_open+0x1fa/0x410 [ 437.379958][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 437.385014][ T31] ? _raw_spin_unlock+0x28/0x50 [ 437.395497][ T31] ? alloc_fd+0x64c/0x6c0 [ 437.399882][ T31] do_sys_openat2+0x121/0x1c0 [ 437.404587][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 437.416848][ T31] __x64_sys_openat+0x138/0x170 [ 437.421766][ T31] do_syscall_64+0xf6/0x210 [ 437.431819][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 437.439828][ T31] ? clear_bhb_loop+0x45/0xa0 [ 437.444551][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.459660][ T31] RIP: 0033:0x7f809cb169a4 [ 437.464109][ T31] RSP: 002b:00007fffcecd9450 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 437.474668][ T31] RAX: ffffffffffffffda RBX: 000055ccc9334e80 RCX: 00007f809cb169a4 [ 437.485548][ T31] RDX: 00000000000a0800 RSI: 000055ccc9315500 RDI: 00000000ffffff9c [ 437.493545][ T31] RBP: 000055ccc9315500 R08: 0000000000000001 R09: 7fffffffffffffff [ 437.507816][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 437.519939][ T31] R13: 000055ccc931fce0 R14: 0000000000000001 R15: 000055ccc9314910 [ 437.531881][ T31] [ 437.552885][ T31] [ 437.552885][ T31] Showing all locks held in the system: [ 437.553287][T18033] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 437.561469][ T31] 1 lock held by khungtaskd/31: [ 437.561486][ T31] #0: ffffffff8df3b860 (rcu_read_lock [ 437.593104][T18034] pim6reg: entered allmulticast mode [ 437.616513][ T31] ){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 437.623288][ T31] 4 locks held by kworker/u8:5/768: [ 437.628796][ T31] #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 437.640808][ T31] #1: ffffc90003437c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 437.652948][ T31] #2: ffffffff8f2f4788 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 437.663772][ T31] #3: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 437.678506][ T31] 2 locks held by getty/5579: [ 437.683176][ T31] #0: ffff88814d1160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 437.693465][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 437.703763][ T31] 1 lock held by udevd/5824: [ 437.708455][ T31] #0: ffff88814334f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 437.717740][ T31] 1 lock held by syz.3.3375/18032: [ 437.722834][ T31] #0: ffffffff8f2f4788 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4ea/0x900 [ 437.731926][ T31] 3 locks held by syz.3.3375/18033: [ 437.737153][ T31] #0: ffffffff8f359530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 437.745486][ T31] #1: ffffffff8f359348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 437.754564][ T31] #2: ffffffff8f2f4788 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_register+0x1980/0x26b0 [ 437.772951][ T31] 2 locks held by syz.5.3376/18029: [ 437.778179][ T31] #0: ffffffff8f813170 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 437.787906][ T31] #1: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 437.798607][ T31] [ 437.801075][ T31] ============================================= [ 437.801075][ T31] [ 437.809681][ T31] NMI backtrace for cpu 1 [ 437.809694][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00802-g075001c9eb41 #0 PREEMPT(full) [ 437.809713][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 437.809723][ T31] Call Trace: [ 437.809730][ T31] [ 437.809737][ T31] dump_stack_lvl+0x189/0x250 [ 437.809759][ T31] ? __wake_up_klogd+0xd9/0x110 [ 437.809779][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.809798][ T31] ? __pfx__printk+0x10/0x10 [ 437.809827][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 437.809850][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 437.809866][ T31] ? _printk+0xcf/0x120 [ 437.809886][ T31] ? __pfx__printk+0x10/0x10 [ 437.809904][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 437.809923][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 437.809945][ T31] watchdog+0xfee/0x1030 [ 437.809966][ T31] ? watchdog+0x1de/0x1030 [ 437.809992][ T31] kthread+0x70e/0x8a0 [ 437.810013][ T31] ? __pfx_watchdog+0x10/0x10 [ 437.810031][ T31] ? __pfx_kthread+0x10/0x10 [ 437.810049][ T31] ? __pfx_kthread+0x10/0x10 [ 437.810066][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.810086][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.810107][ T31] ? __pfx_kthread+0x10/0x10 [ 437.810124][ T31] ret_from_fork+0x4b/0x80 [ 437.810139][ T31] ? __pfx_kthread+0x10/0x10 [ 437.810157][ T31] ret_from_fork_asm+0x1a/0x30 [ 437.810187][ T31] [ 437.810193][ T31] Sending NMI from CPU 1 to CPUs 0: [ 437.845225][T18032] team0: Port device geneve0 added [ 437.847512][ C0] NMI backtrace for cpu 0 [ 437.847526][ C0] CPU: 0 UID: 0 PID: 18032 Comm: syz.3.3375 Not tainted 6.15.0-rc4-syzkaller-00802-g075001c9eb41 #0 PREEMPT(full) [ 437.847548][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 437.847557][ C0] RIP: 0010:__lock_acquire+0x6ad/0xd20 [ 437.847579][ C0] Code: 08 00 00 00 e8 a4 25 00 00 45 31 e4 85 c0 0f 84 57 04 00 00 83 3d c2 fe e2 17 00 75 13 48 63 44 24 18 48 0f a3 05 83 6f df 11 <0f> 83 35 05 00 00 31 c0 48 8b 3c 24 4c 8b b7 e0 0a 00 00 48 83 7c [ 437.847592][ C0] RSP: 0018:ffffc90000007538 EFLAGS: 00000047 [ 437.847605][ C0] RAX: 0000000000000007 RBX: 0000000000000005 RCX: ffffffff931e8c58 [ 437.847615][ C0] RDX: 0000000000000008 RSI: ffff88801ef8a9b8 RDI: ffff88801ef89e00 [ 437.847626][ C0] RBP: ffff88801ef8a8f0 R08: 0000000000000000 R09: 0000000000080000 [ 437.847635][ C0] R10: 0000000000000000 R11: ffffffff817199f5 R12: 0000000000000000 [ 437.847645][ C0] R13: 0000000000000000 R14: ffff88801ef8a9d8 R15: ffff88801ef8a9b8 [ 437.847655][ C0] FS: 00007ff652a296c0(0000) GS:ffff8881260c1000(0000) knlGS:0000000000000000 [ 437.847668][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.847678][ C0] CR2: 0000001b32c00ff8 CR3: 000000006b332000 CR4: 00000000003526f0 [ 437.847691][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 437.847700][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 437.847709][ C0] Call Trace: [ 437.847714][ C0] [ 437.847722][ C0] ? unwind_next_frame+0xa5/0x2390 [ 437.847739][ C0] lock_acquire+0x120/0x360 [ 437.847755][ C0] ? unwind_next_frame+0xa5/0x2390 [ 437.847773][ C0] ? unwind_next_frame+0xa5/0x2390 [ 437.847794][ C0] ? _printk+0xcf/0x120 [ 437.847808][ C0] ? unwind_next_frame+0xa5/0x2390 [ 437.847822][ C0] unwind_next_frame+0xc2/0x2390 [ 437.847837][ C0] ? unwind_next_frame+0xa5/0x2390 [ 437.847854][ C0] ? unwind_next_frame+0xa5/0x2390 [ 437.847869][ C0] ? vprintk_emit+0x58f/0x7a0 [ 437.847884][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 437.847899][ C0] arch_stack_walk+0x11c/0x150 [ 437.847918][ C0] ? _printk+0xcf/0x120 [ 437.847932][ C0] stack_trace_save+0x9c/0xe0 [ 437.847946][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 437.847960][ C0] ? stack_depot_save_flags+0x40/0x910 [ 437.847978][ C0] kasan_save_stack+0x3e/0x60 [ 437.847992][ C0] ? kasan_save_stack+0x3e/0x60 [ 437.848005][ C0] ? kasan_record_aux_stack+0xbc/0xd0 [ 437.848023][ C0] ? insert_work+0x3d/0x330 [ 437.848040][ C0] ? __queue_work+0xbd9/0xfe0 [ 437.848052][ C0] ? call_timer_fn+0x17b/0x5f0 [ 437.848068][ C0] ? __run_timer_base+0x646/0x860 [ 437.848082][ C0] ? run_timer_softirq+0xb7/0x180 [ 437.848096][ C0] ? handle_softirqs+0x283/0x870 [ 437.848108][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 437.848120][ C0] ? irq_exit_rcu+0x9/0x30 [ 437.848131][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 437.848148][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 437.848162][ C0] ? vprintk_emit+0x58f/0x7a0 [ 437.848174][ C0] ? _printk+0xcf/0x120 [ 437.848202][ C0] ? __phys_addr+0xba/0x170 [ 437.848219][ C0] kasan_record_aux_stack+0xbc/0xd0 [ 437.848237][ C0] insert_work+0x3d/0x330 [ 437.848255][ C0] __queue_work+0xbd9/0xfe0 [ 437.848270][ C0] ? __queue_work+0x103/0xfe0 [ 437.848285][ C0] call_timer_fn+0x17b/0x5f0 [ 437.848300][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 437.848314][ C0] ? call_timer_fn+0xbe/0x5f0 [ 437.848330][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 437.848350][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 437.848364][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 437.848379][ C0] __run_timer_base+0x646/0x860 [ 437.848394][ C0] ? ktime_get+0x3e/0x1f0 [ 437.848413][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 437.848427][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 437.848448][ C0] run_timer_softirq+0xb7/0x180 [ 437.848464][ C0] handle_softirqs+0x283/0x870 [ 437.848478][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 437.848492][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 437.848507][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 437.848524][ C0] __irq_exit_rcu+0xca/0x1f0 [ 437.848536][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 437.848552][ C0] irq_exit_rcu+0x9/0x30 [ 437.848563][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 437.848581][ C0] [ 437.848585][ C0] [ 437.848591][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 437.848605][ C0] RIP: 0010:vprintk_emit+0x58f/0x7a0 [ 437.848617][ C0] Code: 85 32 01 00 00 e8 41 f3 1e 00 41 89 df 4d 85 f6 48 8b 1c 24 75 07 e8 30 f3 1e 00 eb 06 e8 29 f3 1e 00 fb 48 c7 c7 80 fa f2 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 f9 3f [ 437.848629][ C0] RSP: 0018:ffffc9000493e7c0 EFLAGS: 00000287 [ 437.848641][ C0] RAX: ffffffff81a0cd27 RBX: ffffffff81a0cbe4 RCX: 0000000000080000 [ 437.848651][ C0] RDX: ffffc90010a76000 RSI: 0000000000025cd1 RDI: ffffffff8df2fa80 [ 437.848661][ C0] RBP: ffffc9000493e8d0 R08: ffffffff8f7f2c77 R09: 1ffffffff1efe58e [ 437.848672][ C0] R10: dffffc0000000000 R11: fffffbfff1efe58f R12: dffffc0000000000 [ 437.848682][ C0] R13: 1ffff92000927cfc R14: 0000000000000200 R15: 0000000000000020 [ 437.848693][ C0] ? vprintk_emit+0x444/0x7a0 [ 437.848707][ C0] ? vprintk_emit+0x587/0x7a0 [ 437.848722][ C0] ? vprintk_emit+0x444/0x7a0 [ 437.848735][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 437.848748][ C0] ? team_nl_send_options_get+0x101e/0x10a0 [ 437.848774][ C0] _printk+0xcf/0x120 [ 437.848791][ C0] ? __pfx_team_nl_send_options_get+0x10/0x10 [ 437.848810][ C0] ? __pfx__printk+0x10/0x10 [ 437.848822][ C0] ? rtnl_is_locked+0x15/0x20 [ 437.848841][ C0] ? __netdev_printk+0x365/0x4d0 [ 437.848861][ C0] netdev_info+0x10a/0x160 [ 437.848878][ C0] ? __pfx_netdev_info+0x10/0x10 [ 437.848892][ C0] ? __team_options_change_check+0x232/0x2a0 [ 437.848915][ C0] team_add_slave+0x22d7/0x2840 [ 437.848942][ C0] ? __pfx_team_add_slave+0x10/0x10 [ 437.848958][ C0] ? __dev_notify_flags+0x1d9/0x2e0 [ 437.848975][ C0] ? __pfx___dev_notify_flags+0x10/0x10 [ 437.848990][ C0] ? __dev_change_flags+0x4cc/0x6d0 [ 437.849008][ C0] ? __pfx___dev_change_flags+0x10/0x10 [ 437.849024][ C0] ? mutex_is_locked+0x17/0x50 [ 437.849039][ C0] do_set_master+0x530/0x6d0 [ 437.849058][ C0] do_setlink+0xd47/0x40d0 [ 437.849079][ C0] ? __pfx_do_setlink+0x10/0x10 [ 437.849093][ C0] ? do_raw_spin_lock+0x121/0x290 [ 437.849113][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.849130][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 437.849147][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 437.849166][ C0] ? rcu_is_watching+0x15/0xb0 [ 437.849185][ C0] ? __mutex_lock+0xa6d/0xe80 [ 437.849203][ C0] ? __mutex_lock+0x51b/0xe80 [ 437.849223][ C0] ? rtnl_setlink+0x4ea/0x900 [ 437.849238][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 437.849260][ C0] ? ns_capable+0x8a/0xf0 [ 437.849275][ C0] rtnl_setlink+0x604/0x900 [ 437.849291][ C0] ? __pfx_rtnl_setlink+0x10/0x10 [ 437.849343][ C0] ? __pfx_rtnl_setlink+0x10/0x10 [ 437.849356][ C0] rtnetlink_rcv_msg+0x7cc/0xb70 [ 437.849372][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 437.849385][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.849405][ C0] ? ref_tracker_free+0x63a/0x7d0 [ 437.849418][ C0] ? __copy_skb_header+0xa7/0x550 [ 437.849439][ C0] netlink_rcv_skb+0x219/0x490 [ 437.849455][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.849470][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 437.849493][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.849507][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.849524][ C0] netlink_unicast+0x758/0x8d0 [ 437.849541][ C0] netlink_sendmsg+0x805/0xb30 [ 437.849559][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.849575][ C0] ? aa_sock_msg_perm+0x94/0x160 [ 437.849591][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.849606][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.849622][ C0] __sock_sendmsg+0x219/0x270 [ 437.849636][ C0] ____sys_sendmsg+0x505/0x830 [ 437.849654][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.849675][ C0] ? import_iovec+0x74/0xa0 [ 437.849693][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 437.849710][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.849741][ C0] ? __fget_files+0x2a/0x420 [ 437.849756][ C0] ? __fget_files+0x3a0/0x420 [ 437.849776][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 437.849801][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 437.849824][ C0] ? do_syscall_64+0xba/0x210 [ 437.849838][ C0] do_syscall_64+0xf6/0x210 [ 437.849850][ C0] ? clear_bhb_loop+0x45/0xa0 [ 437.849866][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.849879][ C0] RIP: 0033:0x7ff651b8e969 [ 437.849891][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.849903][ C0] RSP: 002b:00007ff652a29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.849917][ C0] RAX: ffffffffffffffda RBX: 00007ff651db6080 RCX: 00007ff651b8e969 [ 437.849928][ C0] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000c [ 437.849937][ C0] RBP: 00007ff651c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 437.849947][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.849956][ C0] R13: 0000000000000000 R14: 00007ff651db6080 R15: 00007ffd2803bea8 [ 437.849972][ C0] [ 437.860196][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 437.860213][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00802-g075001c9eb41 #0 PREEMPT(full) [ 437.860233][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 437.860244][ T31] Call Trace: [ 437.860251][ T31] [ 437.860259][ T31] dump_stack_lvl+0x99/0x250 [ 437.860285][ T31] ? __asan_memcpy+0x40/0x70 [ 437.860303][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.860325][ T31] ? __pfx__printk+0x10/0x10 [ 437.860354][ T31] panic+0x2db/0x790 [ 437.860381][ T31] ? __pfx_panic+0x10/0x10 [ 437.860399][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 437.860421][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 437.860440][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 437.860473][ T31] watchdog+0x102d/0x1030 [ 437.860494][ T31] ? watchdog+0x1de/0x1030 [ 437.860522][ T31] kthread+0x70e/0x8a0 [ 437.860550][ T31] ? __pfx_watchdog+0x10/0x10 [ 437.860569][ T31] ? __pfx_kthread+0x10/0x10 [ 437.860589][ T31] ? __pfx_kthread+0x10/0x10 [ 437.860607][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.860628][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.860651][ T31] ? __pfx_kthread+0x10/0x10 [ 437.860668][ T31] ret_from_fork+0x4b/0x80 [ 437.860684][ T31] ? __pfx_kthread+0x10/0x10 [ 437.860702][ T31] ret_from_fork_asm+0x1a/0x30 [ 437.860733][ T31] [ 437.864953][ T31] Kernel Offset: disabled