last executing test programs: 1m23.676348884s ago: executing program 4 (id=3187): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000002c00)="4400000030000504010000000000000000000000300001802c0001800900010067617465000000001c00028018000200"/68, 0x44, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000003000)=[{{&(0x7f0000003080)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f00000030c0)=[{&(0x7f0000003100)='G', 0x1}], 0x1}}, {{&(0x7f0000003140)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000003180)=[{&(0x7f00000031c0)="1f", 0x1}], 0x1}}], 0x2, 0x880) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000003200)={0x0, 0xfff}, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000011", @ANYRES32=r4, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180080001000100000008000200000000000800030000000100080004"], 0x54}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000002d00), r1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000002a40)={0x1, 0x6}, &(0x7f0000002a80)=0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002d40)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000002d80)=0x40) mmap(&(0x7f0000537000/0x3000)=nil, 0x3000, 0x4, 0x100010, r6, 0x12504000) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002b80)=[{&(0x7f00000000c0)=@in6={0xa, 0x4e24, 0x9, @private1, 0x38}, 0x1c, &(0x7f0000002740)=[{&(0x7f00000011c0)="c9d24bae75bb0ae2074d016a142c880bbf1e06b216c5b556561628dae81f6b89d473b182d3b1c4471ddd8e970a97c0baf509db06600d5a7c34309f06177a6dbba6773ffa4c650486827a04c30ad4c4aa5eb5b75f5324bb7c0666b369fe4d6ec5f63f54ff30e5dfa95c99a77f47690179a78edd7e9778d17329251bbfa94cd04046d1dbacc56153533586cbfa2364871ec072a115b1ab1bb13dfd75fa216896eff215cb3316ea2aaae4", 0xa9}, {&(0x7f0000002280)="037b0c7a4d7797718bf0e224cea1ae7cd1a4ed347221aab32623b817a5c15a8f34f8b44c69eb196586699bc49dcce7011aba2d5a6cbe90a06fa85bb7a79a2adf955d147f5849dce6bbdad1f4c8dcdef96c62b50972caa2cbed1ada8be4f6c3", 0x5f}, {&(0x7f0000002340)="92551f033ceeb2b6fcb1c9093292df53a75f8703ebffde0e81d0f8b74b7b962ff658b806cae881952747d56f7292e50f258e518082f9ad44e2dda1fa3711215354732ac3b52292a31a13a0320651ed249a9c35", 0x53}, {&(0x7f00000023c0)="74164141a4267595a40b595f249ce3f2824ab4f9573ffd953ec5c83872f60adb618a8fa98b072d4462c5730ef039f94fab9e6109291483a95b5271143accaaa8893ef68e7d92b242c5bec869819472a7fc127f9a6cce0c276c8f0c5e46a95c24dd264e7090f28109cfef0657247cd6665eea0d4cf0aa40f69455ea4a3c7697c85d1654ed1009bfa145d17cca8ebea543b45e3d67f254dcafb2679df45ad18c2f4e19e3a447595e6b77a97838092e5834e90071ce287d27bfb8958c3adc6cc9c7ddfc0a4366fe285bb0dc116d11cc5dcc8fae905ecb4f5af48973413893defd61820ec35026d2ed0ea4b5a878baf2325705d7b61385", 0xf5}, {&(0x7f00000024c0)="d5c1f1b9", 0x4}, {&(0x7f0000002500)="ce1bedd53b5e3492b7b4a9f70a255599ba5513d23f2dc7fee1065a0b05433dbe8524053534f1e124a4af07340c24", 0x2e}, {&(0x7f0000002540)="6c9057f33d1f63c07f3cab58728cccdf5e9b80e040ebc953675ece7e8e8743411a142fd9b24b3460be9762b59ef3b51d5b233538b2128f66b7a187c1abb094758a6390ea352dbf680ae9aa33b2913b6706ce93680497456ad5", 0x59}, {&(0x7f00000025c0)="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", 0xfe}, {&(0x7f00000026c0)="abe0e70567d7bd7c8741a1bd473eedca743d48b3a6a76eb8941bab5c621cb5c646a8865a8e3ce5e5fffeb82f9c7234146cecb9f41fb936aa245ceefbd347e1ff4969547abdf8b87ced4f3c776343cc0fcadbae9d808fa9ab007d1f009564e53ae64237f2d642a53ab67d81904f", 0x6d}], 0x9, &(0x7f0000002800)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast2}], 0x20, 0x4048001}, {&(0x7f0000002840)=@in6={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x600}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002880)="265935af1a516dcc09523546a2096fa74ede9c72dd927319bf5c4d5078befe0e2d5361f491e4790646058dd47b4af6ca4d58b40d55a5fdf1606f0c2059f88fd2cc2a9a839bff0ae732771d3ac410060a3d9d440f6e9c5357d5608cfd0a5f0ff886580d493b5523f15ed9d66a27398b3e82854717a946daa8008bc5cd740eb5575de28059baecf4da43bf18bba97c6403aa8fc7eff87465b559b65d1ee5a9e1761d8409ee636a8d67d7a607fa723ab070220e26fc50c15724662a610d61ce3e8ac78ea67182919e17d234c738e5c32d51d96bee357c86560d957fba04025798787536d7", 0xe3}, {&(0x7f0000002980)="a2a3a60d5f7169b81df4f4f63140f7457bedba7ed505cf0d541375319ce1779c0511a4970a1aceff75bfd83f0f7de97a1fcce8fc74be8081ac8ddea07edd19d385cd23a01c89d8eab1c4ec25", 0x4c}], 0x2, &(0x7f0000002ac0)=[@dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x25}}, @dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0xd2a, 0x8005, 0x9, 0x1, 0x64f, 0xe0, 0x4, r5}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @init={0x18, 0x84, 0x0, {0x1708, 0x4000, 0x1, 0xff01}}], 0xa0, 0x4080}], 0x2, 0x20000000) bind$bt_sco(0xffffffffffffffff, &(0x7f0000002dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) syz_emit_ethernet(0x6a, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e40), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000002f40)={&(0x7f0000002e00), 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x64, r7, 0x800, 0x4, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xc34c}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18a}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x101}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000001100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001140), 0xfffffffffffffe8a, 0x10, &(0x7f0000001180), 0xfffffffffffffd27}, 0x48) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4000000000001f2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000002f80), &(0x7f0000002fc0)=0x4) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x8010) 1m22.637749437s ago: executing program 4 (id=3190): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x4e20, 0x7c, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="300000000000000029000000040000", @ANYRES64=r1, @ANYRES16=r0], 0x30}, 0x800) 1m22.477131813s ago: executing program 4 (id=3191): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_lsm={0x6, 0x6, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="000000000000000063003000000000009500000000000000"], &(0x7f0000000d00)='syzkaller\x00', 0x1, 0xdd, &(0x7f0000000d40)=""/221, 0x0, 0x20}, 0x94) r0 = socket(0x11, 0xa, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000001040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000001180)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000011c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001200)=@bpf_ext={0x1a, 0x5, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_fd={0x18, 0x0, 0x1, 0x0, r2}]}, &(0x7f0000001300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4aa}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b00)={'team_slave_1\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000e40)) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd700006dcdf250100000008000100", @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400000008000600", @ANYRES32=r5], 0x5c}, 0x1, 0x400000000000000}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x68, "b162f01c81ef482d1081f819a8cc4971cdfdf23d8720487fb2e8864918f1577688d013aff0e9e825ef5fb7ef09d3fd5f6eb600985bc4392fbdc1234140cf2edce7f5fb239737592b13048fec1f7e54999ed888a416ed901dfa55a4b968c4e126e0bf633ccff463bd"}, &(0x7f0000000080)=0x70) socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000013c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x247c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) socket$inet6(0xa, 0x3, 0x76) bpf$PROG_LOAD(0x5, &(0x7f0000003880)={0x16, 0x5, 0x0, &(0x7f0000003940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000003980)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000003a00)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280"], 0x78}}, 0x0) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x50, &(0x7f0000003a80)={0x0, 0x0}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003b40)={0x18, 0x1404, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x2000000, 0x0, 0x40000}, 0x80) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r10, 0xc028583e, &(0x7f0000003b80)={{[0x4, 0x7, 0x6, 0xf043]}, 0x0, 0x1, 0x5, 0x0, &(0x7f0000003bc0)=[{{@align=0x7, {0xffff, 0x585, 0x5, 0x3}}, 0xe2, 0x0, '[+\x00'}, {{@align=0x5, {0x2, 0x8000, 0x5, 0x3fb}}, 0x3, 0x0, '\'!\xd8\x00'}]}) bpf$MAP_CREATE(0x0, &(0x7f0000003c40)=@base={0xf, 0x4, 0x0, 0x4}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0x6c, r10, 0x0, 0x6c}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003d00)={0x3, 0x4, &(0x7f0000003dc0)=ANY=[@ANYBLOB="18020000feffffff000000ec95ffffff85000000aa000000950000fa2f0000ae9800"], &(0x7f0000003e00)='syzkaller\x00', 0x1}, 0x94) 1m22.153977541s ago: executing program 4 (id=3193): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @local}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, 0x0, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0xffff8001, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1001}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x11, 0x1000}}}}}}}, 0x0) 1m22.0183213s ago: executing program 4 (id=3194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000480)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r1, @ANYBLOB='e'], 0x31) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000280)={0x3, &(0x7f00000002c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@gettaction={0x48, 0x32, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x11, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r4, 0x100000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x3c}}, 0x0) 1m21.832562488s ago: executing program 4 (id=3196): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000300), 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000600)={0x1d, r2}, 0x10, &(0x7f0000000640)={&(0x7f0000000680)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000740)={0x1d, r0}, 0x10, &(0x7f0000000780)={&(0x7f00000007c0)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x2, 0xb26, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5b843c57d0d4fcebda569fd8fea6a7b7ef976c09cf8d2aa4052321896dc15fb693fccb55de57aaaaf6ee762deac6221008dee3000000000000000200"}}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="94010000", @ANYRES16=r4, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000980)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000009c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000a00)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000d40)=@gettaction={0x64, 0x32, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x18}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bind$inet6(r6, &(0x7f0000000c00)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000c40)=0x2, 0x4) write$tun(r5, &(0x7f0000000dc0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x8, 0x4, 0x3, 0x1b, 0x7e, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@lsrr={0x83, 0xb, 0x3d, [@private=0xa010100, @broadcast]}]}}, {0x4e24, 0x4e20, 0x5e, 0x0, @opaque="7c2672815fe324c9f3b4abc2f3fa26a829bbd882535dcbeb0f72d0b1dbcf9e8479d79cc61b563ed27aaa88c8e5e19196a68a2692f586bd7e8d5c9446eb00cbd2a02afbbeeb47cde4e0bb051ccea471b422b682d128ba"}}}, 0x8c) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010728bd7000fadbdf250600000008000300", @ANYRES32=r13, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="b00000006800000328bd7000fedbdf2500000200020000003c00020000000000b4000000020000000900000002000000c70000000100000004000000010000000000000008000000020000000000000006000300010000000c000880050002000e00000034000c8008000200a90600000600010004000000060001000000000008000395270d9f157a1af4ef89d487b66904329c2696500000080002000200000014000600fc010000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x8800}, 0x800) 52.38246784s ago: executing program 2 (id=3308): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000280)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f00000002c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0103}}}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000440)=0x1, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x56, 0x24, 0xf0b, 0x70bd2e, 0xfffffffc, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x8b, 0x6}}, @qdisc_kind_options=@q_htb={{0x8}, {0x2c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x3}}, @TCA_HTB_DIRECT_QLEN={0xfffffffffffffeb4, 0x5, 0xffdffff9}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000940)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0xfffc, 0x0, @empty}}, 0x0, 0x800, 0x200000, 0x0, 0x8a, 0xfffffffd}, 0x9c) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)="1800000072006bcd9e3fe3dc6e0800000709000013000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000bc0)={'syzkaller1\x00', 0xc201}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r6], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r6, &(0x7f0000000cc0)={0x2, 0x4e20, @empty}, 0x10) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000d00)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000d40)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c03e57e518e4d08"}}}}, 0xfdef) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000d80)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000e00)='X', 0x34000, 0x0, &(0x7f0000000e40)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000e80)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) r9 = socket$inet(0x2, 0x1, 0xf) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0xc) 51.276313335s ago: executing program 3 (id=3314): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) sendmmsg$inet6(r0, &(0x7f0000003340)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x42, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x7fffffff, @loopback, 0x8}, 0x1c, &(0x7f0000002b80)=[{&(0x7f0000000180)="4d0345edc1313cd7152aad502f22336edf8746e9e2f7d048b1833e3b3f283a5b48f881359f1025c0de827027dc39ec3c7e1de5faa2b0ec4650ad9e9a05b9297fac9701246afff785fcd49b2c99ec3bb4af67255762db8f8076dd937d84", 0x5d}, {&(0x7f0000000840)="e3b2ccb7136d90f22e8c027c421e5ac9d9bffc3b465a31656a3277c476d369760c388c4cfddfb216946d56de89ecf113a02f68cf189e6d2e6f82622e1659994bf9fac0a499b0482311f102ad129bc11df2dec5f44bbb6c11bddfe9", 0x5b}, {&(0x7f0000000340)="16eeb22c4e767feb5b1e27d6718d9991f41530d4b0197a5be03d3fabbd6ad34b3c56a99c33e3e0d14a810117a59ef821d554917ee13a83f7b5ad22f0580e2f9de928818cc344e9e6c8b5503925b85a099327ebd7f1dab16770b1f809f5b45598acfaf6f3cf3fff20a97392fe615ad38b364cd2c2986774a99f3c97f84f73ab4a57d4367a586d954de631b337896ceaf5e073204beed22672404180a2c15b1642c6d1993762b6192beb5991a0d21a3160cdc8285b770c3f5a4878308e0a66c2967177567e8768d286ec1f308905d82b7602374ee7cb79c8cb5a097e2538c3fed087457c1550c3989784dd0c6adf1cc1092c", 0xf1}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="f81f3178c886cfd8f86aaf45719831eca51e27d4acef10dea33284eb2ca86cdc1fca53ae20c54d1e928d3396d2ad82a6c2f004107d288d4926cf56a31d783ad566c9ed9d21a12b87406391c56b59520dd135331d677392732117c13ad1ab0838cc17cdee41809d245404baddd8d1eb6ecd139c5dd6490c6b159d054c992d0b4871d5697d300b1fe75e6425b651d163ce08cca91f26cba2a5500450", 0x9b}, {&(0x7f0000001b40)="889365b83f37fe3a8ff85e200b80b87dfc0ce53cee25396ab9a4926d3f3c5b1fde01adc5e92c5b5ce809d49bce51078d8bd4eafc19c2def312d27ed689", 0x3d}, {&(0x7f0000001b80)="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", 0x1000}], 0x7, &(0x7f0000003a40)=ANY=[@ANYBLOB="24000000000000002900000032000000fc020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="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"], 0x300}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002e40)="f5641349fe86637037712a032d117356e231dbef201a89962fa137a5b209f28ffa75881e0f482f95bac5b9eb46d7399275b4493e1216ad568556508029c84b0ff7faf801642f90", 0x47}, {&(0x7f0000002ec0)="1e24dfd44ff391708e24ec0783bde4a59f6b0921d93ca3f68010091fab181ac3ce97f17bb9979072cc22d7dbfc9a7e2a9cf2c5816935deb63c57fc35ddccbde66bae7832a79090ca94a930adec169d0b6c8f6e9c", 0x54}], 0x2}}, {{&(0x7f0000002f80)={0xa, 0x4e22, 0xa7dd, @local, 0x7}, 0x1c, &(0x7f00000030c0)=[{&(0x7f0000002fc0)="487575efef95428b44baa61f2a97ad72bf76f8ae27cf55b7adac6f3680c0578c9ad3ad98cdd30db9be526d01018f999e1957ade8e328bc9aec5311a40206e56d1b6de4efbc931dbe88c7534d93c390d392b0ca287cbb3643d4ba029cbfd625089eef51a6c5d4774e00e78d95058916064cde97cd3944deccb461dfb2e11b9b1d91b1e28dfb8181b07c732d5709d0788ca173590278aa28d3dbada2205f80640ad827d7bb08531285620dc772c3f1b2672d2d07890ccb74623f6edc4b232e4942ebab5ca1a9a8e2109cad2bb80e347a781c6899fcde459b5a8d77cf6cca8755b8b3292c5c2562051899efc96b429c3cecdcc65822d9096280", 0xf8}], 0x1}}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000003100)="c67dc1c0e110e6040b04d5a4796f9331c835237a689666ba58266ea7484e5cfaf25041ed9ed3c1a768974d6cfabae23bf989100725440aadb58c", 0x3a}], 0x1, &(0x7f00000005c0)=[@dstopts_2292={{0xc0, 0x29, 0x4, {0x73, 0x14, '\x00', [@generic={0x6, 0x9c, "20491702f35d6c4fe1a500d16d93725eb8ef725646163006fb6f920e025ec96835e0307fcb6ac3b9ad01fa492db2a2cf9f187b4f0fbe28fa9af7ff0d876221f917744f8958502949d455b838d2c5b90a430a154c1c44af9757b06a4fb4bc100729a5dea189c3b3b6b2785a410a0d09481b2ea88058e63bb21b86e2705662c26da3100c6459c157a0a8a4cea8f3834fc8aa116352d71f7f4f3dc81776"}, @enc_lim={0x4, 0x1, 0x5}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x21, 0x2, 0x0, 0x81, 0x0, [@loopback]}}}, @rthdr={{0x28, 0x29, 0x39, {0x87, 0x2, 0x1, 0x1, 0x0, [@private2]}}}, @hopopts={{0x148, 0x29, 0x36, {0x6, 0x25, '\x00', [@jumbo={0xc2, 0x4, 0x7fffffff}, @ra={0x5, 0x2, 0x8000}, @jumbo={0xc2, 0x4, 0x7ffffffb}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xad, 0xd9, "63a70c1afd55edb48ac516f442208906e969bd16c1a9ae364ce5134a63ae767d2f0a0896f8742c0ff83d69aa69a3bc59bd277d122bdabd92d529a2050e75217b7e2011eae7baf8bef23381088f5e43c32b6093f4e0aacaea587f248aef662a08a6ba9cea494e0d9b56d36f0bada55dc619694ea2ea12822c747bf025e946b680155133ad32bddf089f54cf156259b3316b0230a5ee62f036f22b8eb3fdd52c99e1d2b8337df25554aeeb77674950d78d5cb72ec7da5765acdb02daa946e770955731b91c0674782a303c9cc39cff8a812b397802e1e4228dd5"}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x270}}], 0x6, 0x0) 50.65697932s ago: executing program 3 (id=3316): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68010}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000005c0)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38200080", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000c670f00000000000000060001000200000008000300ffffffff0800060001000000"], 0x38}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000700)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYRESDEC=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYRES64=r7, @ANYRESOCT], 0x74}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010022bd7000000000008900000008000300", @ANYRES32, @ANYBLOB="24000600"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000840)={'vcan0\x00'}) r10 = socket$nl_rdma(0x10, 0x3, 0x14) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0xffffffff, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}}}}) sendmsg$RDMA_NLDEV_CMD_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000214010023bd7000fddbdf0808000100000000000900020073"], 0x24}, 0x1, 0x0, 0x0, 0x60408a0}, 0x488c0) 50.308757428s ago: executing program 3 (id=3317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xfe}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2c}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004854) 50.091570683s ago: executing program 2 (id=3319): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000600), 0x10, &(0x7f0000000640)={&(0x7f0000000680)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000700)={&(0x7f0000000740)={0x1d, r1}, 0x10, &(0x7f0000000780)={&(0x7f00000007c0)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x2, 0xb26, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5b843c57d0d4fcebda569fd8fea6a7b7ef976c09cf8d2aa4052321896dc15fb693fccb55de57aaaaf6ee762deac6221008dee3000000000000000200"}}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="94010000", @ANYRES16=r4, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000980)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000009c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000a00)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000d40)=@gettaction={0x64, 0x32, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x18}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bind$inet6(r6, &(0x7f0000000c00)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000c40)=0x2, 0x4) write$tun(r5, &(0x7f0000000dc0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x8, 0x4, 0x3, 0x1b, 0x7e, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@lsrr={0x83, 0xb, 0x3d, [@private=0xa010100, @broadcast]}]}}, {0x4e24, 0x4e20, 0x5e, 0x0, @opaque="7c2672815fe324c9f3b4abc2f3fa26a829bbd882535dcbeb0f72d0b1dbcf9e8479d79cc61b563ed27aaa88c8e5e19196a68a2692f586bd7e8d5c9446eb00cbd2a02afbbeeb47cde4e0bb051ccea471b422b682d128ba"}}}, 0x8c) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010728bd7000fadbdf250600000008000300", @ANYRES32=r13, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="b00000006800000328bd7000fedbdf2500000200020000003c00020000000000b4000000020000000900000002000000c70000000100000004000000010000000000000008000000020000000000000006000300010000000c000880050002000e00000034000c8008000200a90600000600010004000000060001000000000008000395270d9f157a1af4ef89d487b66904329c2696500000080002000200000014000600fc010000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x8800}, 0x800) 49.673594913s ago: executing program 3 (id=3321): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x335}], 0x1) 49.425852561s ago: executing program 1 (id=3323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0x2, 0x3, "0dbbeb9364fd0e80"}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8880}, 0x882) 49.198541351s ago: executing program 3 (id=3324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00"], 0x3c}}, 0x0) write(r0, &(0x7f0000000240)="ffffffffffff0011223344554305000f32000000ffff00112233445500112233445500ff9000", 0xfdef) 49.190511502s ago: executing program 1 (id=3325): sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x2, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001640)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000001680)="190004000800aaaaaa0103000000", 0xe) socket(0x2, 0x80805, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001300)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0xb, 0x0, "84b239e4a90e0061dfff72a85765a97206505305666183d3f5a4d9c14f0f31dcabe1dd1b00755c41bc18efa7702b45529ecbe87a2937074f85001845a61f17675fa840904efe58a79a7a88e9029f6c35"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0x20, 0x0, 0x0) close(0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f00000012c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="04009900060000003e00000005005b0006000000"], 0x30}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000240)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xe, &(0x7f0000000640)=ANY=[@ANYRES8=r0], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x8, 0x10, &(0x7f00000011c0)={0x0, 0x0, 0x4}, 0x10}, 0x94) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003a00010027000300", @ANYRES32=r8, @ANYBLOB="05005b00cf000000"], 0x24}}, 0x40000) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000127bd7000fddbdf256f000000050019010400000008009f000600000008002700010000000800a100810000000800a1000800000091568605b2e09097740863aefd732f87f687b13550606f8f45924ac0a801b1d08e8346c26c9e3000e6ef96b1a80664afc50ac5d28392b8ab9bcdc0e4cfba845d4c6765c62f509a425c11aa476224671803062a3672b2f4e845cf4e382b6312d9276e0ff690583864e5d8ca004c1242ffc2eb74e470b52a2b486c3232ced43a2589454641f82c58c2624e9fb08309f72ab385c2be85516897f251be5ca8dc280e247dac29ba142320c9a5339b4f695de3d7eb03bf7bf9515d77cd2df7a469a4cdac2ff7"], 0x3c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x5) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f0000000380)="1a00000002000000", 0x8) setsockopt(r10, 0x84, 0x80, &(0x7f0000001200)="1400000009000000", 0x8) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000080)) 49.001986817s ago: executing program 2 (id=3326): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000003c0)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f0000000500)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x7800, 0x700, 0x9, 0x4, {{0x1b, 0x4, 0x2, 0x30, 0x6c, 0x68, 0x0, 0x2, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x24, 0xfd, 0x1, 0xd, [{@multicast2, 0x80000000}, {@rand_addr=0x64010101, 0x2}, {@private=0xa010100, 0x94}, {@loopback, 0x5}]}, @lsrr={0x83, 0x1f, 0x36, [@local, @rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, @broadcast, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast]}, @end, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0xf, 0xbb, [@local, @rand_addr=0x64010100, @empty]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x4) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000b80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f00000006c0)={0x44c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_MODES={0x3e8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x33, 0x5, "91794bdd356919a4dcb2242f8b8b295fa38ae53e02c2783ffa7afd4f30ebeb3d3b20b07b46a07c8aab5765f9d417c3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf7, 0x4, "254ae214724e6718f44a37600faafcc34230efd5fbfd126bd5cd4a6c967dda3df3240b904f579b1b11bc6c56d1ee3bf87396c4bb1abc99fe0bbb092489c0e035a29b3060896b382139e8335e6f4c7b3d0caa1c67d19e112448e004ae149d9090baa40e45137db39ff8faad05b0ea38242dc092332b367a9efea44cb1505f57d6f9653e3654634e876b94c79e178f0e148ce7ec8d5c0619bd02e43d2eaba505ab0d0ad59adce7a706c2d4dc3e8c3d7243b646c5a27d33a65d986d21767d35f844b6a264e10308dd287e5e4cbdbd4b215b9baed8f6d55f0a47a021c61c9c151be560204f156aafed2f47ac669c19a7dd893223dd"}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x51}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\'-*?)%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-:\a\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\':{&*.-+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x1f, 0x4, "c581289e17c4176825048323303f7df530e5ab1f6221231280718c"}, @ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '@*%\'{%[$:\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x43, 0x5, "c286086d6d289a3690b92937bbfffa27784ff1a3cdfa4ec183322877f504b34c2c028e82f15de34d22f9d92d493f74a8dd49dd0f84fcd2c2d0ac836a46dd82"}, @ETHTOOL_A_BITSET_MASK={0xd6, 0x5, "d652cd11f14e8ac71dfda4bed33a86af86eae1fda8eefe0d22e72a37ab6d6be392329bfb7997b2ff3de0bc885e72b3b0a4a2a5d53e3b580895e6400ac429ecbb7ff94f335ad591c1b1e2b160c986278fdc4d363b6131798da9b71a9deaab544f8688dbd1a907758509976afabda75fea65d19a559247caec4084baf3cee91994c7ce47001e64469dc716a7a332d9289464db61db694d74d5e3d52411fe4be166dad445228cd707ac366f604cfa6e6e4a5c8aa040f0c7f8d4e7a1d3d97056b2134b98d0d6ee220889d2c506f63412e145f0ab"}]}, @ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) sendmmsg$inet(r1, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0x2, 0x0, @rand_addr=0x640100ff}, 0x10, 0x0}}], 0x1, 0x41) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f, r6}, 0x20) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=r6, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="32d540c7f2102766f2186bf787ff", 0x0, 0x2000005, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 48.920753711s ago: executing program 0 (id=3327): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="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", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="32d33a47d96ceacc565129f837dfc4ec8df24612082800303fbc4c7dae05b96c2dc595b8a5423e", 0x27}, {&(0x7f0000000500)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f319afaae6058b0a13fa0258fb74bf114e1a95c71a81b46d5d333aef5db36219c3bd7f905a25f5bb07bd3055d210022f04b5acf6a8e20086a71b6b5c7bb87d9c7a209b7f0e56dac72bf77c9773d1b702c45c9460829ffbf704fbbe1635b301183a8867463de2a0fae686630b7db109ed37404eadf39e858bee704a9d000bc1aae96b1b4d529573e38241eed0ecb1a9498", 0xe1}, {&(0x7f0000000600)="20b946e4ffc923", 0x7}, {&(0x7f0000000640)="e705ba567be6127d85d39375b10960531cc5504726", 0x15}], 0x4}}, {{0x0, 0x0, &(0x7f0000001340)}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x335}], 0x1) 48.697777655s ago: executing program 0 (id=3328): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="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", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="32d33a47d96ceacc565129f837dfc4ec8df24612082800303fbc4c7dae05b96c2dc595b8a5423e", 0x27}, {&(0x7f0000000500)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f319afaae6058b0a13fa0258fb74bf114e1a95c71a81b46d5d333aef5db36219c3bd7f905a25f5bb07bd3055d210022f04b5acf6a8e20086a71b6b5c7bb87d9c7a209b7f0e56dac72bf77c9773d1b702c45c9460829ffbf704fbbe1635b301183a8867463de2a0fae686630b7db109ed37404eadf39e858bee704a9d000bc1aae96b1b4d529573e38241eed0ecb1a9498", 0xe1}, {&(0x7f0000000600)="20b946e4ffc923", 0x7}, {&(0x7f0000000640)="e705ba567be6127d85d39375b10960531cc5504726", 0x15}], 0x4}}, {{0x0, 0x0, &(0x7f0000001340)}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="fb7ef3f08d8f0d64c4636b96073c171a2926f00a2baa2c2752e6ba348df7c6cb64a0a5dbc368e6e57135b7c7f20a1e4ca2d0c293b9df5480df71d6dcdd9beb4fa3247b3b7e38346fa0436ee2d9c57c41af42a71188cbd6b252eb449052ef2d76f3c0ab72b88db15921409f4efe9fe517430ec288238072967546e6a834ac62fec1df765d0147d8d2993dceb59f5b66b848a8f1d09a0d8108e7ef271311ea18df574e3e0b9242dd27f45258cb3bb762582f5737efdc15dabfa031673c84696ab886bdd35bb35a5346cf472e001e71c5384fc353b3181775acb185307d6f762e564b7fd4f06f875fc919c3ebb015f673a3cb380b03abbbfe30c781bd8b17292a1e2b748107e60e568c1e1f86a0cf01e30772b6b2146cd4d1f2e9fc7b5bcefded909fe7bf723490ced2d106004e3a0cd7b9c3519b05741751325fe8538085cc1f902fa544dcc929f10469fe39c3cf61f786254a373316923186fa08ef3c8917d4c2df0d3e41c32b6948177e71b23c3a9eb9c30db62011da02d48da9318c20a438f6ba2962ce066b8793e16831c350a379f8c54c5de2eab0b0117e3dc30f5c27c87b2eb33b43215bdcabb7185b1ca317dc967cfdfdcbf92a4e196bcf0d6ba1cea19dd296b4de3625a95ea0ee82efc84379be3125e84d8183ebce42f98654f44f86d49b13529b6cec5acbe93af52987080df30eed17685881b67777877226704091bd1f07b76c3af968b6afc17751d27756d8df673ee1cc756cbc9ef90ee5477c529105548e84a9fa4cba55b8fe48ef33e206952e5be378ef8df0c7c024080b8961d49a6b863cd8f4e29dd1c66fd9f93ea18010b541133f792fde35c33b0bd8ef50f205193ac4c223f6f5e9659ff679a132fee9cf1769ecef53bc2ed1b3feaa0306025a68e87a88f7bf740a457024963ef1dac67dbd1bae5aec6604b8440e5f3cf21d1c4187db1a1f205054ec1f9dd4d86977bdd6c4c30ef70e2f96fca9ad0cd08dd057286fb658aa836f5a0b1e0c0b86e5e4ab951fd85fa9bc1fa58696b69b2a423a9da883ea945955840c11ae26af5a08cf7d8ce3eda8eef541ba114e0614a0e864424df8aaab36a8abcacf52adddd298c11557f6948215b809e817fefbba3c2fdd96b2c3f23c20bb3c04ccf92c570db4a1555907a79c", 0x335}], 0x1) 48.624959861s ago: executing program 1 (id=3329): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4002) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x2}, 0x100) sendmsg$nl_generic(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600"], 0x1c}}, 0x0) 48.392472191s ago: executing program 0 (id=3330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xfe}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2c}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004854) 47.704244328s ago: executing program 2 (id=3331): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_lsm={0x6, 0x6, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="000000000000000063003000000000009500000000000000"], &(0x7f0000000d00)='syzkaller\x00', 0x1, 0xdd, &(0x7f0000000d40)=""/221, 0x0, 0x20}, 0x94) r0 = socket(0x11, 0xa, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000001040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000001180)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000011c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001200)=@bpf_ext={0x1a, 0x5, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_fd={0x18, 0x0, 0x1, 0x0, r2}]}, &(0x7f0000001300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4aa}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b00)={'team_slave_1\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000e40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01002bbd700006dcdf250100000008000100", @ANYRES32=r6, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400000008000600", @ANYRES32=r5], 0x5c}, 0x1, 0x400000000000000}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x68, "b162f01c81ef482d1081f819a8cc4971cdfdf23d8720487fb2e8864918f1577688d013aff0e9e825ef5fb7ef09d3fd5f6eb600985bc4392fbdc1234140cf2edce7f5fb239737592b13048fec1f7e54999ed888a416ed901dfa55a4b968c4e126e0bf633ccff463bd"}, &(0x7f0000000080)=0x70) socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000013c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x247c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) socket$inet6(0xa, 0x3, 0x76) bpf$PROG_LOAD(0x5, &(0x7f0000003880)={0x16, 0x5, 0x0, &(0x7f0000003940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000003980)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000003a00)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280"], 0x78}}, 0x0) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x50, &(0x7f0000003a80)={0x0, 0x0}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003b40)={0x18, 0x1404, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x2000000, 0x0, 0x40000}, 0x80) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r10, 0xc028583e, &(0x7f0000003b80)={{[0x4, 0x7, 0x6, 0xf043]}, 0x0, 0x1, 0x5, 0x0, &(0x7f0000003bc0)=[{{@align=0x7, {0xffff, 0x585, 0x5, 0x3}}, 0xe2, 0x0, '[+\x00'}, {{@align=0x5, {0x2, 0x8000, 0x5, 0x3fb}}, 0x3, 0x0, '\'!\xd8\x00'}]}) bpf$MAP_CREATE(0x0, &(0x7f0000003c40)=@base={0xf, 0x4, 0x0, 0x4}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0x6c, r10, 0x0, 0x6c}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003d00)={0x3, 0x4, &(0x7f0000003dc0)=ANY=[@ANYBLOB="18020000feffffff000000ec95ffffff85000000aa000000950000fa2f0000ae9800"], &(0x7f0000003e00)='syzkaller\x00', 0x1}, 0x94) 47.690327458s ago: executing program 0 (id=3332): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001500)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000001540), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7105031803000000000000000005d7"], 0x13) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 47.548161218s ago: executing program 1 (id=3333): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000006000)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000006040)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000006080)=0x10, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000006100)={'veth0_to_bond\x00', 0x0}) bind$xdp(r0, &(0x7f0000006140)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) pselect6(0x40, &(0x7f0000006180)={0x8, 0x8001, 0x3, 0x300, 0x0, 0x0, 0x9c28}, 0x0, &(0x7f00000061c0)={0x3ff, 0x4000000000002, 0x8000000000000, 0x9, 0x0, 0xfffffffffffffffe, 0x7, 0x9}, 0x0, 0x0) 47.144995358s ago: executing program 0 (id=3334): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x335}], 0x1) 47.119835916s ago: executing program 2 (id=3335): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000600), 0x10, &(0x7f0000000640)={&(0x7f0000000680)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000700)={&(0x7f0000000740)={0x1d, r1}, 0x10, &(0x7f0000000780)={&(0x7f00000007c0)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x2, 0xb26, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5b843c57d0d4fcebda569fd8fea6a7b7ef976c09cf8d2aa4052321896dc15fb693fccb55de57aaaaf6ee762deac6221008dee3000000000000000200"}}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="94010000", @ANYRES16=r4, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000980)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000009c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000a00)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000d40)=@gettaction={0x64, 0x32, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x18}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bind$inet6(r6, &(0x7f0000000c00)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000c40)=0x2, 0x4) write$tun(r5, &(0x7f0000000dc0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x8, 0x4, 0x3, 0x1b, 0x7e, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@lsrr={0x83, 0xb, 0x3d, [@private=0xa010100, @broadcast]}]}}, {0x4e24, 0x4e20, 0x5e, 0x0, @opaque="7c2672815fe324c9f3b4abc2f3fa26a829bbd882535dcbeb0f72d0b1dbcf9e8479d79cc61b563ed27aaa88c8e5e19196a68a2692f586bd7e8d5c9446eb00cbd2a02afbbeeb47cde4e0bb051ccea471b422b682d128ba"}}}, 0x8c) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010728bd7000fadbdf250600000008000300", @ANYRES32=r13, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="b00000006800000328bd7000fedbdf2500000200020000003c00020000000000b4000000020000000900000002000000c70000000100000004000000010000000000000008000000020000000000000006000300010000000c000880050002000e00000034000c8008000200a90600000600010004000000060001000000000008000395270d9f157a1af4ef89d487b66904329c2696500000080002000200000014000600fc010000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x8800}, 0x800) 46.921272846s ago: executing program 0 (id=3336): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)='`', 0x1}], 0x34000}, 0x51) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000340), 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="340000001100010027bd7046b57d5400fddbdf25", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e"], 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4004000) 46.789013775s ago: executing program 3 (id=3337): socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create(0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0x0, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="fffffffffffffff6b702040001"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 46.417745321s ago: executing program 1 (id=3338): sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x2, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001640)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000001680)="190004000800aaaaaa0103000000", 0xe) socket(0x2, 0x80805, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001300)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0xb, 0x0, "84b239e4a90e0061dfff72a85765a97206505305666183d3f5a4d9c14f0f31dcabe1dd1b00755c41bc18efa7702b45529ecbe87a2937074f85001845a61f17675fa840904efe58a79a7a88e9029f6c35"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0x20, 0x0, 0x0) close(0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f00000012c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="04009900060000003e00000005005b0006000000"], 0x30}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000240)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xe, &(0x7f0000000640)=ANY=[@ANYRES8=r0], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x8, 0x10, &(0x7f00000011c0)={0x0, 0x0, 0x4}, 0x10}, 0x94) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003a00010027000300", @ANYRES32, @ANYBLOB="05005b00cf000000"], 0x24}}, 0x40000) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000127bd7000fddbdf256f000000050019010400000008009f000600000008002700010000000800a100810000000800a1000800000091568605b2e09097740863aefd732f87f687b13550606f8f45924ac0a801b1d08e8346c26c9e3000e6ef96b1a80664afc50ac5d28392b8ab9bcdc0e4cfba845d4c6765c62f509a425c11aa476224671803062a3672b2f4e845cf4e382b6312d9276e0ff690583864e5d8ca004c1242ffc2eb74e470b52a2b486c3232ced43a2589454641f82c58c2624e9fb08309f72ab385c2be85516897f251be5ca8dc280e247dac29ba142320c9a5339b4f695de3d7eb03bf7bf9515d77cd2df7a469a4cdac2ff7"], 0x3c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x5) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f0000000380)="1a00000002000000", 0x8) setsockopt(r9, 0x84, 0x80, &(0x7f0000001200)="1400000009000000", 0x8) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000080)) 46.130061729s ago: executing program 1 (id=3339): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="6d6ff16901dc11fffe8800000e63142c213d0a527cf1dd2c2fc74c012c06bc9e8100000000000000000084000001fc01000000000000cf54cb21000000004e254e2101dc9078ee373935ef0f8da10b47000507b002"], 0x204) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)}, {0x0}, {&(0x7f0000000280)="2a3134701d0ca41a833691f4ffbf8e45b169803920ef73b468e2b908d5b3b1b4cf1becc1610d775308ed5a7b31656b235e8a31c6a5a3b21bdf8a56f542d98c3f", 0x40}, {0x0}, {0x0}], 0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x8fa5}, 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000380)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @alu={0x4, 0x0, 0xb, 0x8, 0x5, 0x7e1e5317640315e6}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x33, &(0x7f0000000480)=""/51, 0x41100, 0x40, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x4, 0x6, 0x8}, 0x10, 0x1de4a, 0xffffffffffffffff, 0x4, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x3, 0x8, 0x8}, {0x4, 0x5, 0xc, 0xb}, {0x0, 0x1, 0x5, 0x5}, {0x5, 0x2, 0x7}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000180), &(0x7f00000006c0)=r4}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000080), 0x4) 37.345718736s ago: executing program 2 (id=3340): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000004000000061121f00000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000880)={0x2, 0x6, 0x2, 0x5, 0x200, 0x2, 0xb, 0xa4, {0x1, @in={{0x2, 0x4e24, @loopback}}, 0x7, 0x4, 0xb4, 0x7, 0x1a}}, &(0x7f0000000940)=0xb0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000980)={r2, 0x4}, 0x8) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0900000016000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00eeb1fdc62e441ad45000000000000000000000002000000000000000463c13865919b7c440f1cb11c9c55406f3c67796da17b2661f31dbc5688ad22c60d042b9aa97087a8a894862d981a6739135dd0ba02f5ba7c69978f53ba0e47b0140592e2297682882d384272bd20000ad65e8fffcd61b61ccd95699ecc966e549dfd1e3caf3d04251947fa2d8cdd258373c14ac110c00"/160], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), &(0x7f00000003c0), 0x1000, r3}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r3, &(0x7f0000000440)}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) close(r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x9e, @loopback, 0x23}, 0x1c) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000380)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, 0x0, 0x4044804) r7 = socket(0x8, 0x4, 0x3) getsockopt$inet_mreqn(r7, 0x0, 0x24, 0x0, &(0x7f0000000000)) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r8, 0x10, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x8000) 0s ago: executing program 32 (id=3336): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)='`', 0x1}], 0x34000}, 0x51) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000340), 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="340000001100010027bd7046b57d5400fddbdf25", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e"], 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4004000) kernel console output (not intermixed with test programs): user+0x10/0x10 [ 320.675779][T12721] ? __lock_acquire+0x747/0x2de0 [ 320.675810][T12721] ? kstrtoull+0x137/0x1d0 [ 320.675854][T12721] ? ref_tracker_alloc+0x172/0x530 [ 320.675887][T12721] ? lock_acquire+0x115/0x350 [ 320.675915][T12721] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 320.675947][T12721] ? lock_acquire+0x115/0x350 [ 320.675974][T12721] ? tun_get+0x1c/0x2f0 [ 320.676007][T12721] ? tun_get+0x1c/0x2f0 [ 320.676032][T12721] ? tun_get+0x1c/0x2f0 [ 320.676063][T12721] tun_chr_write_iter+0x113/0x200 [ 320.676092][T12721] vfs_write+0x612/0xba0 [ 320.676132][T12721] ? __pfx_vfs_write+0x10/0x10 [ 320.676164][T12721] ? __fget_files+0x3a2/0x420 [ 320.676189][T12721] ? __fget_files+0x2a/0x420 [ 320.676219][T12721] ? fdget+0x1ac/0x250 [ 320.676254][T12721] ksys_write+0x150/0x270 [ 320.676285][T12721] ? __pfx_ksys_write+0x10/0x10 [ 320.676326][T12721] do_syscall_64+0x166/0x520 [ 320.676349][T12721] ? trace_irq_disable+0x3b/0x140 [ 320.676379][T12721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.676402][T12721] ? clear_bhb_loop+0x70/0xc0 [ 320.676430][T12721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.676452][T12721] RIP: 0033:0x7fb5b979fb19 [ 320.676473][T12721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.676489][T12721] RSP: 002b:00007fb5ba597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 320.676508][T12721] RAX: ffffffffffffffda RBX: 00007fb5b9a25fa0 RCX: 00007fb5b979fb19 [ 320.676521][T12721] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 0000000000000003 [ 320.676533][T12721] RBP: 00007fb5ba597090 R08: 0000000000000000 R09: 0000000000000000 [ 320.676544][T12721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 320.676555][T12721] R13: 00007fb5b9a26038 R14: 00007fb5b9a25fa0 R15: 00007ffcf458ef38 [ 320.676583][T12721] [ 320.717267][T12720] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 320.991179][T12720] batman_adv: batadv0: Removing interface: syzkaller0 [ 321.057965][T12711] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 321.088442][T12711] virtio_blk virtio5: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 321.269341][T12741] FAULT_INJECTION: forcing a failure. [ 321.269341][T12741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.269375][T12741] CPU: 0 UID: 0 PID: 12741 Comm: syz.1.2078 Not tainted syzkaller #0 PREEMPT(full) [ 321.269400][T12741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 321.269413][T12741] Call Trace: [ 321.269422][T12741] [ 321.269432][T12741] dump_stack_lvl+0xe8/0x150 [ 321.269473][T12741] should_fail_ex+0x3eb/0x540 [ 321.269507][T12741] _copy_from_user+0x2d/0xb0 [ 321.269537][T12741] ___sys_sendmsg+0x1c6/0x360 [ 321.269559][T12741] ? __lock_acquire+0x747/0x2de0 [ 321.269594][T12741] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.269616][T12741] ? __lock_acquire+0x747/0x2de0 [ 321.269650][T12741] ? kstrtouint+0x6e/0xe0 [ 321.269738][T12741] __sys_sendmmsg+0x273/0x4e0 [ 321.269771][T12741] ? __pfx___sys_sendmmsg+0x10/0x10 [ 321.269806][T12741] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 321.269851][T12741] ? ksys_write+0x242/0x270 [ 321.269887][T12741] ? __pfx_ksys_write+0x10/0x10 [ 321.269924][T12741] __x64_sys_sendmmsg+0xa0/0xc0 [ 321.269951][T12741] do_syscall_64+0x166/0x520 [ 321.269976][T12741] ? trace_irq_disable+0x3b/0x140 [ 321.270008][T12741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.270032][T12741] ? clear_bhb_loop+0x70/0xc0 [ 321.270061][T12741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.270084][T12741] RIP: 0033:0x7fb5b979fb19 [ 321.270106][T12741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.270126][T12741] RSP: 002b:00007fb5ba597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 321.270152][T12741] RAX: ffffffffffffffda RBX: 00007fb5b9a25fa0 RCX: 00007fb5b979fb19 [ 321.270169][T12741] RDX: 000000000800001d RSI: 0000200000000d00 RDI: 0000000000000003 [ 321.270185][T12741] RBP: 00007fb5ba597090 R08: 0000000000000000 R09: 0000000000000000 [ 321.270200][T12741] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 321.270214][T12741] R13: 00007fb5b9a26038 R14: 00007fb5b9a25fa0 R15: 00007ffcf458ef38 [ 321.270251][T12741] [ 321.490815][T12735] netlink: 'syz.4.2076': attribute type 1 has an invalid length. [ 321.900035][T12753] ip_tables: iptables: counters copy to user failed while replacing table [ 322.198202][T12771] __nla_validate_parse: 5 callbacks suppressed [ 322.198309][T12771] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2087'. [ 322.248393][T12771] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 322.680172][T12796] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2096'. [ 322.680210][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2096'. [ 322.808732][T12800] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2097'. [ 322.904954][T12804] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2099'. [ 323.051729][T12812] netlink: 'syz.2.2101': attribute type 1 has an invalid length. [ 323.079870][T12815] netlink: 'syz.2.2101': attribute type 1 has an invalid length. [ 323.217005][T12818] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2106'. [ 323.222543][T12818] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 323.320161][T12824] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2107'. [ 323.338954][T12824] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2107'. [ 323.564666][T12835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2110'. [ 323.564705][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2110'. [ 324.265186][T12873] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 324.965163][T12900] bond4: Invalid ad_actor_system MAC address. [ 324.965183][T12900] bond4: option ad_actor_system: invalid value (7) [ 324.966995][T12900] bond4 (unregistering): Released all slaves [ 325.179260][T12821] NFSD: Failed to start, no listeners configured. [ 325.316545][T12914] bond0: entered promiscuous mode [ 325.316568][T12914] bond_slave_0: entered promiscuous mode [ 325.316767][T12914] bond_slave_1: entered promiscuous mode [ 325.320421][T12914] batadv0: entered promiscuous mode [ 325.346476][T12914] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 325.351087][T12914] bond0: left promiscuous mode [ 325.351111][T12914] bond_slave_0: left promiscuous mode [ 325.351370][T12914] bond_slave_1: left promiscuous mode [ 325.394695][T12914] batadv0: left promiscuous mode [ 325.742065][T12942] FAULT_INJECTION: forcing a failure. [ 325.742065][T12942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.742099][T12942] CPU: 1 UID: 0 PID: 12942 Comm: syz.0.2143 Not tainted syzkaller #0 PREEMPT(full) [ 325.742124][T12942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 325.742138][T12942] Call Trace: [ 325.742147][T12942] [ 325.742156][T12942] dump_stack_lvl+0xe8/0x150 [ 325.742198][T12942] should_fail_ex+0x3eb/0x540 [ 325.742231][T12942] _copy_from_iter+0x1d3/0x1680 [ 325.742258][T12942] ? __alloc_skb+0x27a/0x7a0 [ 325.742294][T12942] ? __alloc_skb+0x27a/0x7a0 [ 325.742331][T12942] ? __alloc_skb+0x27a/0x7a0 [ 325.742366][T12942] ? __pfx__copy_from_iter+0x10/0x10 [ 325.742391][T12942] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 325.742417][T12942] ? __alloc_skb+0x27a/0x7a0 [ 325.742448][T12942] ? __alloc_skb+0x27a/0x7a0 [ 325.742489][T12942] ? netlink_sendmsg+0x64f/0xb20 [ 325.742526][T12942] ? skb_put+0x112/0x210 [ 325.742552][T12942] netlink_sendmsg+0x6bb/0xb20 [ 325.742591][T12942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.742628][T12942] ? aa_sock_msg_perm+0x144/0x210 [ 325.742657][T12942] ? apparmor_socket_sendmsg+0x98/0x360 [ 325.742692][T12942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.742725][T12942] sock_sendmsg_nosec+0x14e/0x190 [ 325.742766][T12942] ____sys_sendmsg+0x54e/0x850 [ 325.742797][T12942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.742833][T12942] ? import_iovec+0x73/0xa0 [ 325.742864][T12942] ___sys_sendmsg+0x2a5/0x360 [ 325.742887][T12942] ? __lock_acquire+0x747/0x2de0 [ 325.742923][T12942] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.742989][T12942] ? __fget_files+0x3a2/0x420 [ 325.743016][T12942] ? __fget_files+0x2a/0x420 [ 325.743053][T12942] __x64_sys_sendmsg+0x1b1/0x290 [ 325.743081][T12942] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 325.743130][T12942] do_syscall_64+0x166/0x520 [ 325.743156][T12942] ? trace_irq_disable+0x3b/0x140 [ 325.743187][T12942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.743212][T12942] ? clear_bhb_loop+0x70/0xc0 [ 325.743241][T12942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.743265][T12942] RIP: 0033:0x7f30fa99fb19 [ 325.743287][T12942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.743308][T12942] RSP: 002b:00007f30fb909028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.743332][T12942] RAX: ffffffffffffffda RBX: 00007f30fac25fa0 RCX: 00007f30fa99fb19 [ 325.743349][T12942] RDX: 0000000004044804 RSI: 00002000000003c0 RDI: 0000000000000007 [ 325.743365][T12942] RBP: 00007f30fb909090 R08: 0000000000000000 R09: 0000000000000000 [ 325.743379][T12942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.743394][T12942] R13: 00007f30fac26038 R14: 00007f30fac25fa0 R15: 00007ffd8d2cf6b8 [ 325.743431][T12942] [ 326.276287][T12956] syzkaller1: entered promiscuous mode [ 326.276458][T12956] syzkaller1: entered allmulticast mode [ 326.712527][T12973] FAULT_INJECTION: forcing a failure. [ 326.712527][T12973] name failslab, interval 1, probability 0, space 0, times 0 [ 326.712562][T12973] CPU: 0 UID: 0 PID: 12973 Comm: syz.1.2156 Not tainted syzkaller #0 PREEMPT(full) [ 326.712588][T12973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 326.712603][T12973] Call Trace: [ 326.712612][T12973] [ 326.712622][T12973] dump_stack_lvl+0xe8/0x150 [ 326.712669][T12973] should_fail_ex+0x3eb/0x540 [ 326.712703][T12973] should_failslab+0xa8/0x100 [ 326.712738][T12973] __kmalloc_noprof+0xf9/0x710 [ 326.712765][T12973] ? __fget_files+0x2a/0x420 [ 326.712792][T12973] ? bpf_map_meta_alloc+0x235/0x880 [ 326.712820][T12973] ? bpf_map_meta_alloc+0x235/0x880 [ 326.712860][T12973] bpf_map_meta_alloc+0x235/0x880 [ 326.712897][T12973] htab_of_map_alloc+0x38/0xc0 [ 326.712927][T12973] map_create+0xf3d/0x1b70 [ 326.712958][T12973] ? __pfx_map_create+0x10/0x10 [ 326.712987][T12973] ? __might_fault+0xaf/0x130 [ 326.713012][T12973] ? bpf_lsm_bpf+0x9/0x20 [ 326.713052][T12973] ? security_bpf+0x7e/0x2d0 [ 326.713089][T12973] __sys_bpf+0xae6/0xe00 [ 326.713122][T12973] ? __pfx___sys_bpf+0x10/0x10 [ 326.713157][T12973] ? __fget_files+0x2a/0x420 [ 326.713204][T12973] ? ksys_write+0x242/0x270 [ 326.713236][T12973] ? __pfx_ksys_write+0x10/0x10 [ 326.713273][T12973] __x64_sys_bpf+0xba/0xd0 [ 326.713310][T12973] do_syscall_64+0x166/0x520 [ 326.713336][T12973] ? trace_irq_disable+0x3b/0x140 [ 326.713367][T12973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.713391][T12973] ? clear_bhb_loop+0x70/0xc0 [ 326.713419][T12973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.713442][T12973] RIP: 0033:0x7fb5b979fb19 [ 326.713463][T12973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.713482][T12973] RSP: 002b:00007fb5ba597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.713505][T12973] RAX: ffffffffffffffda RBX: 00007fb5b9a25fa0 RCX: 00007fb5b979fb19 [ 326.713522][T12973] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0a00000000000000 [ 326.713538][T12973] RBP: 00007fb5ba597090 R08: 0000000000000000 R09: 0000000000000000 [ 326.713552][T12973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.713564][T12973] R13: 00007fb5b9a26038 R14: 00007fb5b9a25fa0 R15: 00007ffcf458ef38 [ 326.713600][T12973] [ 327.357224][T12987] batman_adv: batadv0: Interface deactivated: syz_tun [ 327.410162][T12987] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.410885][T12987] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.680704][T12987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.707667][T12987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.854559][T12987] tipc: Resetting bearer [ 327.912895][T12987] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 328.164967][ T1119] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.170959][ T759] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.171018][ T759] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.171060][ T759] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.813236][T13046] syzkaller0: entered promiscuous mode [ 328.813263][T13046] syzkaller0: entered allmulticast mode [ 329.175730][T13066] __nla_validate_parse: 10 callbacks suppressed [ 329.175754][T13066] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2195'. [ 329.211419][T13066] syzkaller1: entered promiscuous mode [ 329.211446][T13066] syzkaller1: entered allmulticast mode [ 329.358320][T13073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2198'. [ 329.831459][T13095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2209'. [ 330.056988][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2213'. [ 330.281881][T13109] block nbd0: reconnected socket [ 330.292680][ T5639] block nbd0: Receive control failed (result -32) [ 330.609727][T13123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2223'. [ 330.722861][T13132] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2227'. [ 330.749604][T13123] bridge5: port 1(veth3) entered blocking state [ 330.749757][T13123] bridge5: port 1(veth3) entered disabled state [ 330.749919][T13123] veth3: entered allmulticast mode [ 330.775263][T13123] veth3: entered promiscuous mode [ 330.789982][T13130] bridge5: port 2(veth0_to_bond) entered blocking state [ 330.790113][T13130] bridge5: port 2(veth0_to_bond) entered disabled state [ 330.790265][T13130] veth0_to_bond: entered allmulticast mode [ 330.819067][T13130] veth0_to_bond: entered promiscuous mode [ 330.895272][T13136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2229'. [ 330.912917][ T5639] block nbd1: Receive control failed (result -11) [ 331.125051][T13143] syzkaller0: entered promiscuous mode [ 331.125082][T13143] syzkaller0: entered allmulticast mode [ 331.368816][T13155] syzkaller0: entered promiscuous mode [ 331.368842][T13155] syzkaller0: entered allmulticast mode [ 331.408033][T13157] ip_tables: iptables: counters copy to user failed while replacing table [ 331.530225][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2242'. [ 331.530311][T13162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2242'. [ 331.813313][T13176] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 331.952744][T13186] netlink: 'syz.1.2253': attribute type 1 has an invalid length. [ 331.952769][T13186] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2253'. [ 332.299534][T13202] sit3: entered promiscuous mode [ 332.299560][T13202] sit3: entered allmulticast mode [ 332.315742][T13202] team0: Device sit3 is of different type [ 332.487866][T13219] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 332.684077][T13227] netlink: 'syz.4.2269': attribute type 1 has an invalid length. [ 332.886798][T13236] ip_tables: iptables: counters copy to user failed while replacing table [ 333.396848][T13262] syz_tun: entered allmulticast mode [ 333.410358][T13259] syz_tun: left allmulticast mode [ 333.721569][T13275] batman_adv: batadv0: Adding interface: syzkaller0 [ 333.721592][T13275] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.721628][T13275] batman_adv: batadv0: Interface activated: syzkaller0 [ 334.070160][T13274] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 334.151197][T13274] batman_adv: batadv0: Removing interface: syzkaller0 [ 334.494298][T13315] __nla_validate_parse: 5 callbacks suppressed [ 334.495533][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2310'. [ 334.922678][T13330] ip_tables: iptables: counters copy to user failed while replacing table [ 335.571755][T13351] xt_hashlimit: max too large, truncated to 1048576 [ 336.322244][T13397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2348'. [ 337.086642][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2372'. [ 337.346826][T13457] netlink: 'syz.2.2380': attribute type 2 has an invalid length. [ 337.346852][T13457] netlink: 'syz.2.2380': attribute type 1 has an invalid length. [ 337.607380][T13476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2388'. [ 337.908838][T13490] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 338.091122][T13501] xt_hashlimit: max too large, truncated to 1048576 [ 338.839122][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2418'. [ 338.902210][T13545] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 338.920829][T13545] bond4 (unregistering): Released all slaves [ 339.504117][T13578] netlink: zone id is out of range [ 339.504136][T13578] netlink: del zone limit has 4 unknown bytes [ 339.891400][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2440'. [ 339.891427][T13601] openvswitch: netlink: Flow actions attr not present in new flow. [ 340.045858][T13606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2442'. [ 340.209303][T13612] gretap0: left promiscuous mode [ 340.357848][T13612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.386332][T13612] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.412579][T13612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.539214][T13633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2455'. [ 340.539273][T13633] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 340.577352][T13612] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 340.606380][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.606491][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.665320][T13635] netlink: 'syz.0.2458': attribute type 1 has an invalid length. [ 340.768945][T13643] netlink: 'syz.0.2460': attribute type 1 has an invalid length. [ 340.774040][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2457'. [ 340.868140][T13643] 8021q: adding VLAN 0 to HW filter on device bond4 [ 340.941248][T13645] bond0: (slave veth0_to_bond): Releasing backup interface [ 340.976615][T13645] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 340.977023][T13651] bridge0: port 3(syz_tun) entered blocking state [ 340.977144][T13651] bridge0: port 3(syz_tun) entered disabled state [ 340.977294][T13651] syz_tun: entered allmulticast mode [ 341.014135][T13651] syz_tun: entered promiscuous mode [ 341.014954][T13651] bridge0: port 3(syz_tun) entered blocking state [ 341.015115][T13651] bridge0: port 3(syz_tun) entered forwarding state [ 341.111621][T13658] openvswitch: netlink: Flow key attribute not present in set flow. [ 341.259183][T13660] TC_ACT_REPEAT abuse ? [ 341.275690][T13664] netlink: 'syz.4.2471': attribute type 1 has an invalid length. [ 341.409029][T13664] 8021q: adding VLAN 0 to HW filter on device bond5 [ 341.445773][T13669] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.466625][T13669] bond5: (slave team0): Enslaving as an active interface with a down link [ 341.523204][T13678] batman_adv: batadv0: Adding interface: syzkaller0 [ 341.523227][T13678] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.523279][T13678] batman_adv: batadv0: Interface activated: syzkaller0 [ 341.582304][T13671] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 341.638625][T13671] batman_adv: batadv0: Removing interface: syzkaller0 [ 341.837053][T13698] ip_tables: iptables: counters copy to user failed while replacing table [ 341.967104][T13702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2480'. [ 342.143182][T13711] syz.2.2484 (13711) used obsolete PPPIOCDETACH ioctl [ 342.172763][T13715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2485'. [ 342.209587][T13716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2487'. [ 342.463235][T13729] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 342.753357][T13749] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2501'. [ 342.848802][T13744] iwpm_parse_nlmsg: Invalid attribute (msg type Add Mapping response ret = -34) [ 343.728974][T13787] netlink: 'syz.4.2514': attribute type 1 has an invalid length. [ 343.913507][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2520'. [ 343.916033][T13801] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 344.625558][T13831] block nbd0: reconnected socket [ 344.631703][ T5639] block nbd0: Receive control failed (result -32) [ 345.252010][T13870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2547'. [ 346.476925][T13938] bond0: entered promiscuous mode [ 346.476952][T13938] bond_slave_0: entered promiscuous mode [ 346.477165][T13938] bond_slave_1: entered promiscuous mode [ 346.482660][T13938] batadv0: entered promiscuous mode [ 346.514741][T13938] debugfs: 'hsr1' already exists in 'hsr' [ 346.514769][T13938] Cannot create hsr debugfs directory [ 346.514835][T13938] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 346.514855][T13938] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 346.517269][T13938] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 346.521108][T13938] bond0: left promiscuous mode [ 346.521132][T13938] bond_slave_0: left promiscuous mode [ 346.521350][T13938] bond_slave_1: left promiscuous mode [ 346.561305][T13938] batadv0: left promiscuous mode [ 346.646904][T13945] Bluetooth: MGMT ver 1.23 [ 346.835435][T13951] syzkaller0: entered promiscuous mode [ 346.835462][T13951] syzkaller0: entered allmulticast mode [ 347.334204][T13978] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2592'. [ 347.366117][T13980] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2593'. [ 347.592981][T13994] netlink: 'syz.4.2600': attribute type 8 has an invalid length. [ 347.604976][T13994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2600'. [ 347.736926][T13999] batman_adv: batadv0: Adding interface: syzkaller0 [ 347.736948][T13999] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.736982][T13999] batman_adv: batadv0: Interface activated: syzkaller0 [ 347.978431][T14009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2606'. [ 348.372989][T13998] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 348.448024][T13998] batman_adv: batadv0: Removing interface: syzkaller0 [ 348.610618][T14027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2612'. [ 348.725137][T14036] ip_tables: iptables: counters copy to user failed while replacing table [ 348.922625][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2619'. [ 348.922656][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2619'. [ 348.978947][T14048] 0: reclassify loop, rule prio 0, protocol 03 [ 349.201864][T14060] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2627'. [ 349.220842][T14060] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 349.398686][T14071] syzkaller0: entered promiscuous mode [ 349.398712][T14071] syzkaller0: entered allmulticast mode [ 349.577339][T14076] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2634'. [ 349.909816][T14094] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 350.293740][T14105] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 350.595713][T14102] IPVS: set_ctl: invalid protocol: 47 172.30.0.2:20003 [ 350.706514][T14110] netlink: 'syz.0.2648': attribute type 1 has an invalid length. [ 350.754671][T14110] 8021q: adding VLAN 0 to HW filter on device bond5 [ 353.015391][T14128] __nla_validate_parse: 3 callbacks suppressed [ 353.015414][T14128] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2653'. [ 353.030789][T14128] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 353.346625][T14143] syzkaller1: entered promiscuous mode [ 353.346651][T14143] syzkaller1: entered allmulticast mode [ 354.202713][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2673'. [ 354.217665][T14171] xt_hashlimit: size too large, truncated to 1048576 [ 354.278785][T14173] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.2673'. [ 354.278973][T14173] 0ªX¹¦Dö»: renamed from gretap0 [ 354.315051][T14173] 0ªX¹¦Dö»: entered allmulticast mode [ 354.524674][T14183] bond2: entered allmulticast mode [ 354.532760][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2677'. [ 354.549327][T14183] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 354.728740][ T5639] block nbd2: Receive control failed (result -32) [ 354.728760][ T4952] block nbd2: Receive control failed (result -32) [ 355.345532][T14214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2688'. [ 356.525492][T14258] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2707'. [ 357.060859][T14292] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2720'. [ 357.060894][T14292] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2720'. [ 357.485276][T14310] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2725'. [ 357.521244][T14310] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 357.679601][T14312] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2726'. [ 358.307979][T14343] tipc: Enabled bearer , priority 0 [ 358.377894][T14343] syzkaller0: entered promiscuous mode [ 358.377925][T14343] syzkaller0: entered allmulticast mode [ 358.378786][T14343] tipc: Resetting bearer [ 358.512580][T14340] tipc: Resetting bearer [ 360.823025][T14340] tipc: Disabling bearer [ 361.657903][T14432] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2773'. [ 362.446888][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.452864][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.463811][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.484273][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.486582][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.582312][ T4952] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.595174][ T4952] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.608244][ T4952] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.611061][ T4952] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.612755][ T4952] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.399596][T14487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2784'. [ 363.691298][T11598] hid-generic 0005:0008:0007.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 363.883153][T14451] wg0 speed is unknown, defaulting to 1000 [ 364.313792][T14451] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.313983][T14451] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.314119][T14451] bridge_slave_0: entered allmulticast mode [ 364.315494][T14451] bridge_slave_0: entered promiscuous mode [ 364.345358][T14451] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.345527][T14451] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.345635][T14451] bridge_slave_1: entered allmulticast mode [ 364.347116][T14451] bridge_slave_1: entered promiscuous mode [ 364.401018][T14451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.414171][T14451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.456776][T14451] team0: Port device team_slave_0 added [ 364.459890][T14451] team0: Port device team_slave_1 added [ 364.504443][T14451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.504464][T14451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.504494][T14451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.507065][T14451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.507081][T14451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.507110][T14451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.666808][ T4952] Bluetooth: hci5: command tx timeout [ 364.715097][T14525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2795'. [ 364.747774][T14451] hsr_slave_0: entered promiscuous mode [ 364.748997][T14451] hsr_slave_1: entered promiscuous mode [ 364.750442][T14451] debugfs: 'hsr0' already exists in 'hsr' [ 364.750464][T14451] Cannot create hsr debugfs directory [ 364.903386][T14531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2798'. [ 365.102089][T14541] syzkaller0: entered promiscuous mode [ 365.102119][T14541] syzkaller0: entered allmulticast mode [ 365.169250][T14541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.267680][T14553] FAULT_INJECTION: forcing a failure. [ 365.267680][T14553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.267714][T14553] CPU: 1 UID: 0 PID: 14553 Comm: syz.1.2806 Not tainted syzkaller #0 PREEMPT(full) [ 365.267744][T14553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 365.267759][T14553] Call Trace: [ 365.267768][T14553] [ 365.267779][T14553] dump_stack_lvl+0xe8/0x150 [ 365.267822][T14553] should_fail_ex+0x3eb/0x540 [ 365.267857][T14553] _copy_from_user+0x2d/0xb0 [ 365.267888][T14553] generic_map_update_batch+0x6b1/0xad0 [ 365.267934][T14553] ? __pfx_generic_map_update_batch+0x10/0x10 [ 365.267963][T14553] ? __fget_files+0x3a2/0x420 [ 365.267990][T14553] ? __fget_files+0x2a/0x420 [ 365.268022][T14553] ? fdget+0x1ac/0x250 [ 365.268049][T14553] ? __pfx_generic_map_update_batch+0x10/0x10 [ 365.268080][T14553] bpf_map_do_batch+0x391/0x630 [ 365.268112][T14553] __sys_bpf+0x977/0xe00 [ 365.268144][T14553] ? __pfx___sys_bpf+0x10/0x10 [ 365.268180][T14553] ? __fget_files+0x2a/0x420 [ 365.268228][T14553] ? ksys_write+0x242/0x270 [ 365.268260][T14553] ? __pfx_ksys_write+0x10/0x10 [ 365.268296][T14553] __x64_sys_bpf+0xba/0xd0 [ 365.268333][T14553] do_syscall_64+0x166/0x520 [ 365.268360][T14553] ? trace_irq_disable+0x3b/0x140 [ 365.268391][T14553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.268416][T14553] ? clear_bhb_loop+0x70/0xc0 [ 365.268445][T14553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.268468][T14553] RIP: 0033:0x7fb5b979fb19 [ 365.268489][T14553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.268509][T14553] RSP: 002b:00007fb5ba597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 365.268540][T14553] RAX: ffffffffffffffda RBX: 00007fb5b9a25fa0 RCX: 00007fb5b979fb19 [ 365.268558][T14553] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 000000000000001a [ 365.268573][T14553] RBP: 00007fb5ba597090 R08: 0000000000000000 R09: 0000000000000000 [ 365.268588][T14553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 365.268602][T14553] R13: 00007fb5b9a26038 R14: 00007fb5b9a25fa0 R15: 00007ffcf458ef38 [ 365.268640][T14553] [ 365.841192][T14451] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 365.852287][T14451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 365.853318][T14451] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 365.872857][T14451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 365.881134][T14451] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 365.893445][T14451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 365.898745][T14451] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 365.910014][T14451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 366.002783][T14451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.028565][T14451] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.046183][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.046261][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.068939][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.069050][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.457552][T14588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2815'. [ 366.631474][T14595] netlink: 'syz.2.2818': attribute type 1 has an invalid length. [ 366.632398][T14595] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2818'. [ 366.667969][T14597] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2817'. [ 366.668004][T14597] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2817'. [ 366.744372][ T4952] Bluetooth: hci5: command tx timeout [ 366.794479][T14451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.962848][T14608] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2820'. [ 366.980166][T14451] veth0_vlan: entered promiscuous mode [ 367.029874][T14451] veth1_vlan: entered promiscuous mode [ 367.131937][T14451] veth0_macvtap: entered promiscuous mode [ 367.153364][T14451] veth1_macvtap: entered promiscuous mode [ 367.207193][T14451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.232726][T14451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.276371][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.304261][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.304310][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.304347][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.426100][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.426124][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.435895][T14624] x_tables: unsorted underflow at hook 1 [ 367.501331][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.501349][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.068001][T14645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2832'. [ 368.068033][T14645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2832'. [ 368.186777][T14646] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2831'. [ 368.428347][T14653] xt_IDLETIMER: label is empty or not nul-terminated [ 368.824438][ T4952] Bluetooth: hci5: command tx timeout [ 369.101707][T14678] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 369.148870][T14685] FAULT_INJECTION: forcing a failure. [ 369.148870][T14685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.148906][T14685] CPU: 1 UID: 0 PID: 14685 Comm: syz.1.2842 Not tainted syzkaller #0 PREEMPT(full) [ 369.148932][T14685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 369.148947][T14685] Call Trace: [ 369.148959][T14685] [ 369.148969][T14685] dump_stack_lvl+0xe8/0x150 [ 369.149012][T14685] should_fail_ex+0x3eb/0x540 [ 369.149055][T14685] _copy_from_user+0x2d/0xb0 [ 369.149087][T14685] bpf_test_init+0xd8/0x150 [ 369.149126][T14685] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 369.149179][T14685] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 369.149230][T14685] ? __fget_files+0x2a/0x420 [ 369.149265][T14685] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 369.149302][T14685] bpf_prog_test_run+0x2c5/0x340 [ 369.149332][T14685] __sys_bpf+0xb1e/0xe00 [ 369.149365][T14685] ? __pfx___sys_bpf+0x10/0x10 [ 369.149401][T14685] ? __fget_files+0x2a/0x420 [ 369.149449][T14685] ? ksys_write+0x242/0x270 [ 369.149482][T14685] ? __pfx_ksys_write+0x10/0x10 [ 369.149518][T14685] __x64_sys_bpf+0xba/0xd0 [ 369.149555][T14685] do_syscall_64+0x166/0x520 [ 369.149581][T14685] ? trace_irq_disable+0x3b/0x140 [ 369.149613][T14685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.149637][T14685] ? clear_bhb_loop+0x70/0xc0 [ 369.149666][T14685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.149689][T14685] RIP: 0033:0x7fb5b979fb19 [ 369.149711][T14685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.149731][T14685] RSP: 002b:00007fb5ba597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.149756][T14685] RAX: ffffffffffffffda RBX: 00007fb5b9a25fa0 RCX: 00007fb5b979fb19 [ 369.149773][T14685] RDX: 0000000000000050 RSI: 0000200000000800 RDI: 000000000000000a [ 369.149788][T14685] RBP: 00007fb5ba597090 R08: 0000000000000000 R09: 0000000000000000 [ 369.149803][T14685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.149818][T14685] R13: 00007fb5b9a26038 R14: 00007fb5b9a25fa0 R15: 00007ffcf458ef38 [ 369.149856][T14685] [ 369.516386][T14690] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2844'. [ 369.876318][T14713] ip_tables: iptables: counters copy to user failed while replacing table [ 370.336432][T14726] FAULT_INJECTION: forcing a failure. [ 370.336432][T14726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.336467][T14726] CPU: 0 UID: 0 PID: 14726 Comm: syz.0.2856 Not tainted syzkaller #0 PREEMPT(full) [ 370.336495][T14726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 370.336509][T14726] Call Trace: [ 370.336519][T14726] [ 370.336529][T14726] dump_stack_lvl+0xe8/0x150 [ 370.336571][T14726] should_fail_ex+0x3eb/0x540 [ 370.336606][T14726] _copy_from_user+0x2d/0xb0 [ 370.336641][T14726] generic_map_update_batch+0x6b1/0xad0 [ 370.336688][T14726] ? __pfx_generic_map_update_batch+0x10/0x10 [ 370.336717][T14726] ? __fget_files+0x3a2/0x420 [ 370.336744][T14726] ? __fget_files+0x2a/0x420 [ 370.336777][T14726] ? fdget+0x1ac/0x250 [ 370.336805][T14726] ? __pfx_generic_map_update_batch+0x10/0x10 [ 370.336836][T14726] bpf_map_do_batch+0x391/0x630 [ 370.336869][T14726] __sys_bpf+0x977/0xe00 [ 370.336901][T14726] ? __pfx___sys_bpf+0x10/0x10 [ 370.336938][T14726] ? __fget_files+0x2a/0x420 [ 370.336985][T14726] ? ksys_write+0x242/0x270 [ 370.337018][T14726] ? __pfx_ksys_write+0x10/0x10 [ 370.337055][T14726] __x64_sys_bpf+0xba/0xd0 [ 370.337091][T14726] do_syscall_64+0x166/0x520 [ 370.337117][T14726] ? trace_irq_disable+0x3b/0x140 [ 370.337149][T14726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.337174][T14726] ? clear_bhb_loop+0x70/0xc0 [ 370.337203][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.337227][T14726] RIP: 0033:0x7f203ef9fb19 [ 370.337250][T14726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.337270][T14726] RSP: 002b:00007f203ff18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 370.337294][T14726] RAX: ffffffffffffffda RBX: 00007f203f225fa0 RCX: 00007f203ef9fb19 [ 370.337310][T14726] RDX: 0000000000000038 RSI: 0000200000000080 RDI: 000000000000001a [ 370.337326][T14726] RBP: 00007f203ff18090 R08: 0000000000000000 R09: 0000000000000000 [ 370.337341][T14726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 370.337355][T14726] R13: 00007f203f226038 R14: 00007f203f225fa0 R15: 00007ffd557e9048 [ 370.337402][T14726] [ 370.698854][T14728] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2857'. [ 370.905051][ T4952] Bluetooth: hci5: command tx timeout [ 371.177632][T14751] ip_tables: iptables: counters copy to user failed while replacing table [ 371.179170][T14754] FAULT_INJECTION: forcing a failure. [ 371.179170][T14754] name failslab, interval 1, probability 0, space 0, times 0 [ 371.179201][T14754] CPU: 1 UID: 0 PID: 14754 Comm: syz.3.2863 Not tainted syzkaller #0 PREEMPT(full) [ 371.179231][T14754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 371.179246][T14754] Call Trace: [ 371.179255][T14754] [ 371.179265][T14754] dump_stack_lvl+0xe8/0x150 [ 371.179307][T14754] should_fail_ex+0x3eb/0x540 [ 371.179341][T14754] should_failslab+0xa8/0x100 [ 371.179378][T14754] __kmalloc_noprof+0xf9/0x710 [ 371.179405][T14754] ? __netlink_lookup+0x82e/0x8f0 [ 371.179439][T14754] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 371.179465][T14754] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 371.179522][T14754] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 371.179560][T14754] genl_start+0x180/0x6d0 [ 371.179595][T14754] __netlink_dump_start+0x442/0x7b0 [ 371.179635][T14754] genl_family_rcv_msg_dumpit+0x213/0x310 [ 371.179667][T14754] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 371.179693][T14754] ? genl_get_cmd+0x6cc/0x960 [ 371.179724][T14754] ? __pfx_genl_start+0x10/0x10 [ 371.179746][T14754] ? __pfx_genl_dumpit+0x10/0x10 [ 371.179769][T14754] ? __pfx_genl_done+0x10/0x10 [ 371.179812][T14754] genl_rcv_msg+0x5e1/0x7a0 [ 371.179853][T14754] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.179877][T14754] ? __pfx_ethnl_tunnel_info_start+0x10/0x10 [ 371.179901][T14754] ? __pfx_ethnl_tunnel_info_dumpit+0x10/0x10 [ 371.179945][T14754] netlink_rcv_skb+0x226/0x4a0 [ 371.179979][T14754] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.180007][T14754] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.180059][T14754] ? down_read+0x2b9/0x320 [ 371.180094][T14754] genl_rcv+0x28/0x40 [ 371.180117][T14754] netlink_unicast+0x8ef/0xa80 [ 371.180168][T14754] netlink_sendmsg+0x7f0/0xb20 [ 371.180209][T14754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.180247][T14754] ? aa_sock_msg_perm+0x144/0x210 [ 371.180277][T14754] ? apparmor_socket_sendmsg+0x98/0x360 [ 371.180312][T14754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.180344][T14754] sock_sendmsg_nosec+0x14e/0x190 [ 371.180379][T14754] ____sys_sendmsg+0x54e/0x850 [ 371.180411][T14754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.180447][T14754] ? import_iovec+0x73/0xa0 [ 371.180481][T14754] ___sys_sendmsg+0x2a5/0x360 [ 371.180503][T14754] ? __lock_acquire+0x747/0x2de0 [ 371.180539][T14754] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.180609][T14754] ? __fget_files+0x3a2/0x420 [ 371.180636][T14754] ? __fget_files+0x2a/0x420 [ 371.180676][T14754] __x64_sys_sendmsg+0x1b1/0x290 [ 371.180704][T14754] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.180756][T14754] do_syscall_64+0x166/0x520 [ 371.180781][T14754] ? trace_irq_disable+0x3b/0x140 [ 371.180813][T14754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.180844][T14754] ? clear_bhb_loop+0x70/0xc0 [ 371.180873][T14754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.180896][T14754] RIP: 0033:0x7f207b79fb19 [ 371.180918][T14754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.180939][T14754] RSP: 002b:00007f207c5e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.180965][T14754] RAX: ffffffffffffffda RBX: 00007f207ba26090 RCX: 00007f207b79fb19 [ 371.180982][T14754] RDX: 0000000000040006 RSI: 00002000000004c0 RDI: 0000000000000008 [ 371.180998][T14754] RBP: 00007f207c5e9090 R08: 0000000000000000 R09: 0000000000000000 [ 371.181013][T14754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.181027][T14754] R13: 00007f207ba26128 R14: 00007f207ba26090 R15: 00007fffcaac5418 [ 371.181067][T14754] [ 371.872260][T14770] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2872'. [ 371.961644][T14776] tipc: Enabled bearer , priority 0 [ 372.161945][T14785] ip_tables: iptables: counters copy to user failed while replacing table [ 372.171219][T14776] syzkaller0: entered promiscuous mode [ 372.171283][T14776] syzkaller0: entered allmulticast mode [ 372.173369][T14776] tipc: Resetting bearer [ 372.202088][T14775] tipc: Resetting bearer [ 374.239090][T14775] tipc: Disabling bearer [ 374.262674][T14804] ip6gretap1: entered allmulticast mode [ 374.271719][T14804] batman_adv: batadv0: Adding interface: ip6gretap1 [ 374.271738][T14804] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.271773][T14804] batman_adv: batadv0: Interface activated: ip6gretap1 [ 374.319301][T14807] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 374.502972][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2886'. [ 374.563501][T14822] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2887'. [ 374.685011][T14828] ip_tables: iptables: counters copy to user failed while replacing table [ 375.272492][T14852] FAULT_INJECTION: forcing a failure. [ 375.272492][T14852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.272524][T14852] CPU: 0 UID: 0 PID: 14852 Comm: syz.3.2899 Not tainted syzkaller #0 PREEMPT(full) [ 375.272549][T14852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 375.272564][T14852] Call Trace: [ 375.272573][T14852] [ 375.272583][T14852] dump_stack_lvl+0xe8/0x150 [ 375.272626][T14852] should_fail_ex+0x3eb/0x540 [ 375.272660][T14852] _copy_from_user+0x2d/0xb0 [ 375.272691][T14852] sk_setsockopt+0x2b5/0x2fe0 [ 375.272734][T14852] ? __pfx_sk_setsockopt+0x10/0x10 [ 375.272769][T14852] ? __lock_acquire+0x747/0x2de0 [ 375.272801][T14852] ? __pfx_aa_unix_opt_perm+0x10/0x10 [ 375.272849][T14852] ? ksys_write+0x1e6/0x270 [ 375.272889][T14852] ? lock_acquire+0x115/0x350 [ 375.272924][T14852] unix_setsockopt+0x15f/0x340 [ 375.272952][T14852] ? __pfx_unix_setsockopt+0x10/0x10 [ 375.272980][T14852] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 375.273009][T14852] ? __pfx_unix_setsockopt+0x10/0x10 [ 375.273035][T14852] do_sock_setsockopt+0x17c/0x1b0 [ 375.273068][T14852] __x64_sys_setsockopt+0x13d/0x1b0 [ 375.273099][T14852] do_syscall_64+0x166/0x520 [ 375.273125][T14852] ? trace_irq_disable+0x3b/0x140 [ 375.273156][T14852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.273182][T14852] ? clear_bhb_loop+0x70/0xc0 [ 375.273211][T14852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.273234][T14852] RIP: 0033:0x7f207b79fb19 [ 375.273256][T14852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.273277][T14852] RSP: 002b:00007f207c60a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 375.273301][T14852] RAX: ffffffffffffffda RBX: 00007f207ba25fa0 RCX: 00007f207b79fb19 [ 375.273319][T14852] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 375.273334][T14852] RBP: 00007f207c60a090 R08: 0000000000000010 R09: 0000000000000000 [ 375.273357][T14852] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 375.273372][T14852] R13: 00007f207ba26038 R14: 00007f207ba25fa0 R15: 00007fffcaac5418 [ 375.273411][T14852] [ 375.600687][T14860] FAULT_INJECTION: forcing a failure. [ 375.600687][T14860] name failslab, interval 1, probability 0, space 0, times 0 [ 375.600721][T14860] CPU: 0 UID: 0 PID: 14860 Comm: syz.3.2900 Not tainted syzkaller #0 PREEMPT(full) [ 375.600747][T14860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 375.600762][T14860] Call Trace: [ 375.600771][T14860] [ 375.600781][T14860] dump_stack_lvl+0xe8/0x150 [ 375.600826][T14860] should_fail_ex+0x3eb/0x540 [ 375.600858][T14860] should_failslab+0xa8/0x100 [ 375.600892][T14860] ? dst_alloc+0x105/0x170 [ 375.600923][T14860] kmem_cache_alloc_noprof+0x9c/0x600 [ 375.600950][T14860] ? do_raw_spin_lock+0x12b/0x2f0 [ 375.600976][T14860] ? dst_alloc+0x105/0x170 [ 375.601014][T14860] dst_alloc+0x105/0x170 [ 375.601040][T14860] ? ip_check_mc_rcu+0x49f/0x7c0 [ 375.601080][T14860] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 375.601118][T14860] ? ip_route_output_key_hash+0xd8/0x2a0 [ 375.601146][T14860] ip_route_output_key_hash+0x18d/0x2a0 [ 375.601176][T14860] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 375.601206][T14860] ? lock_acquire+0x115/0x350 [ 375.601248][T14860] ip_route_output_flow+0x2a/0x150 [ 375.601283][T14860] ? security_sk_classify_flow+0x6d/0x150 [ 375.601319][T14860] udp_sendmsg+0x144a/0x2140 [ 375.601369][T14860] ? __pfx_udp_sendmsg+0x10/0x10 [ 375.601410][T14860] ? __lock_acquire+0x747/0x2de0 [ 375.601455][T14860] ? current_check_autobind_udp_socket+0x210/0x4b0 [ 375.601505][T14860] ? aa_sock_msg_perm+0xfc/0x210 [ 375.601529][T14860] ? sock_rps_record_flow+0x19/0x350 [ 375.601562][T14860] ? inet_sendmsg+0x23e/0x320 [ 375.601583][T14860] ? apparmor_socket_sendmsg+0x98/0x360 [ 375.601619][T14860] ? __pfx_inet_sendmsg+0x10/0x10 [ 375.601642][T14860] sock_sendmsg_nosec+0x10f/0x190 [ 375.601677][T14860] ____sys_sendmsg+0x54e/0x850 [ 375.601708][T14860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.601744][T14860] ? import_iovec+0x73/0xa0 [ 375.601778][T14860] ___sys_sendmsg+0x2a5/0x360 [ 375.601801][T14860] ? __lock_acquire+0x747/0x2de0 [ 375.601836][T14860] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.601858][T14860] ? __lock_acquire+0x747/0x2de0 [ 375.601891][T14860] ? kstrtouint+0x6e/0xe0 [ 375.601975][T14860] __sys_sendmmsg+0x273/0x4e0 [ 375.602011][T14860] ? __pfx___sys_sendmmsg+0x10/0x10 [ 375.602050][T14860] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 375.602097][T14860] ? ksys_write+0x242/0x270 [ 375.602130][T14860] ? __pfx_ksys_write+0x10/0x10 [ 375.602169][T14860] __x64_sys_sendmmsg+0xa0/0xc0 [ 375.602197][T14860] do_syscall_64+0x166/0x520 [ 375.602223][T14860] ? trace_irq_disable+0x3b/0x140 [ 375.602255][T14860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.602280][T14860] ? clear_bhb_loop+0x70/0xc0 [ 375.602309][T14860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.602333][T14860] RIP: 0033:0x7f207b79fb19 [ 375.602355][T14860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.602377][T14860] RSP: 002b:00007f207c5e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 375.602401][T14860] RAX: ffffffffffffffda RBX: 00007f207ba26090 RCX: 00007f207b79fb19 [ 375.602418][T14860] RDX: 000000000800001d RSI: 0000200000000d00 RDI: 0000000000000003 [ 375.602442][T14860] RBP: 00007f207c5e9090 R08: 0000000000000000 R09: 0000000000000000 [ 375.602456][T14860] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 375.602471][T14860] R13: 00007f207ba26128 R14: 00007f207ba26090 R15: 00007fffcaac5418 [ 375.602510][T14860] [ 375.999707][T14866] FAULT_INJECTION: forcing a failure. [ 375.999707][T14866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.999742][T14866] CPU: 1 UID: 0 PID: 14866 Comm: syz.0.2902 Not tainted syzkaller #0 PREEMPT(full) [ 375.999768][T14866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 375.999782][T14866] Call Trace: [ 375.999792][T14866] [ 375.999803][T14866] dump_stack_lvl+0xe8/0x150 [ 375.999845][T14866] should_fail_ex+0x3eb/0x540 [ 375.999878][T14866] _copy_from_user+0x2d/0xb0 [ 375.999908][T14866] ___sys_recvmsg+0x173/0x5a0 [ 375.999956][T14866] ? __pfx____sys_recvmsg+0x10/0x10 [ 375.999988][T14866] ? lock_acquire+0x115/0x350 [ 376.000052][T14866] do_recvmmsg+0x31a/0x800 [ 376.000087][T14866] ? __pfx_do_recvmmsg+0x10/0x10 [ 376.000127][T14866] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 376.000164][T14866] ? fdget+0x1ac/0x250 [ 376.000200][T14866] __x64_sys_recvmmsg+0x198/0x250 [ 376.000230][T14866] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 376.000269][T14866] do_syscall_64+0x166/0x520 [ 376.000295][T14866] ? trace_irq_disable+0x3b/0x140 [ 376.000326][T14866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.000349][T14866] ? clear_bhb_loop+0x70/0xc0 [ 376.000379][T14866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.000402][T14866] RIP: 0033:0x7f203ef9fb19 [ 376.000424][T14866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.000445][T14866] RSP: 002b:00007f203ff18028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 376.000469][T14866] RAX: ffffffffffffffda RBX: 00007f203f225fa0 RCX: 00007f203ef9fb19 [ 376.000487][T14866] RDX: 00000000040001af RSI: 00002000000003c0 RDI: 0000000000000004 [ 376.000503][T14866] RBP: 00007f203ff18090 R08: 0000000000000000 R09: 0000000000000000 [ 376.000517][T14866] R10: 0000000000012122 R11: 0000000000000246 R12: 0000000000000002 [ 376.000532][T14866] R13: 00007f203f226038 R14: 00007f203f225fa0 R15: 00007ffd557e9048 [ 376.000571][T14866] [ 376.337446][T14869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2903'. [ 376.652287][T14876] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2906'. [ 377.092751][T14887] x_tables: duplicate underflow at hook 1 [ 377.240476][T14904] netlink: 'syz.0.2916': attribute type 1 has an invalid length. [ 377.240744][T14904] netlink: 'syz.0.2916': attribute type 1 has an invalid length. [ 377.240976][T14904] netlink: 'syz.0.2916': attribute type 1 has an invalid length. [ 377.241204][T14904] netlink: 'syz.0.2916': attribute type 1 has an invalid length. [ 377.241448][T14904] netlink: 'syz.0.2916': attribute type 1 has an invalid length. [ 377.241691][T14904] netlink: 'syz.0.2916': attribute type 1 has an invalid length. [ 377.254054][T14904] netlink: 'syz.0.2916': attribute type 1 has an invalid length. [ 377.254719][T14904] netlink: 'syz.0.2916': attribute type 1 has an invalid length. [ 377.267090][T14904] netlink: 'syz.0.2916': attribute type 1 has an invalid length. [ 377.267859][T14904] netlink: 'syz.0.2916': attribute type 1 has an invalid length. [ 377.711717][T14915] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2918'. [ 377.826234][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.830973][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.848944][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.852367][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.853124][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.200741][ T5645] bridge0: port 3(syz_tun) entered disabled state [ 378.273336][ T5645] syz_tun (unregistering): left allmulticast mode [ 378.273365][ T5645] syz_tun (unregistering): left promiscuous mode [ 378.273464][ T5645] bridge0: port 3(syz_tun) entered disabled state [ 378.719340][T14957] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2930'. [ 378.736955][T14957] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 378.830929][T14953] iwpm_parse_nlmsg: Invalid attribute (msg type Add Mapping response ret = -34) [ 379.019554][T14921] wg0 speed is unknown, defaulting to 1000 [ 379.264822][T14970] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 379.822153][T14993] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2940'. [ 379.856347][T14993] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 379.943886][ T4952] Bluetooth: hci0: command tx timeout [ 379.991723][T14921] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.992207][T14921] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.992376][T14921] bridge_slave_0: entered allmulticast mode [ 380.017658][T14921] bridge_slave_0: entered promiscuous mode [ 380.032421][T14921] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.032586][T14921] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.033027][T14921] bridge_slave_1: entered allmulticast mode [ 380.057215][T14921] bridge_slave_1: entered promiscuous mode [ 380.115999][T14921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.119380][T14921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.173378][T14921] team0: Port device team_slave_0 added [ 380.182604][T14921] team0: Port device team_slave_1 added [ 380.221363][T14921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.221384][T14921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.221413][T14921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.223444][T14921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.223460][T14921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.223489][T14921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.365841][T14921] hsr_slave_0: entered promiscuous mode [ 380.366933][T14921] hsr_slave_1: entered promiscuous mode [ 380.368088][T14921] debugfs: 'hsr0' already exists in 'hsr' [ 380.368110][T14921] Cannot create hsr debugfs directory [ 380.894152][T15024] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2952'. [ 380.919661][T15024] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 381.018282][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2951'. [ 381.273056][T15034] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2955'. [ 381.350139][T11598] hid-generic 0005:0008:0007.0003: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 381.487912][T15042] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 381.569569][T14921] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 381.624528][T14921] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 381.628774][T14921] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 381.659018][T14921] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 381.663166][T14921] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 381.707751][T14921] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 381.711197][T14921] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 381.739539][T15051] IPVS: set_ctl: invalid protocol: 47 172.30.0.1:20003 [ 381.740904][T14921] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 381.889608][T14921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.924732][T14921] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.949793][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.949907][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.988274][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.988391][ T6125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.023911][ T4952] Bluetooth: hci0: command tx timeout [ 382.316148][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2962'. [ 382.407833][T15064] IPVS: set_ctl: invalid protocol: 47 172.30.0.3:20003 [ 382.420875][T15068] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2964'. [ 382.459596][T15068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 383.117714][T14921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.301574][T15094] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 383.390877][T14921] veth0_vlan: entered promiscuous mode [ 383.431892][T14921] veth1_vlan: entered promiscuous mode [ 383.551787][T14921] veth0_macvtap: entered promiscuous mode [ 383.579441][T14921] veth1_macvtap: entered promiscuous mode [ 383.675536][T14921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.718518][T14921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.764234][ T6125] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.765686][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.765767][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.835691][ T6125] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.019610][ T6125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.019634][ T6125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.107615][ T4952] Bluetooth: hci0: command tx timeout [ 384.137049][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.137076][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.342765][T15125] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 384.642284][T15142] FAULT_INJECTION: forcing a failure. [ 384.642284][T15142] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 384.642319][T15142] CPU: 1 UID: 0 PID: 15142 Comm: syz.1.2919 Not tainted syzkaller #0 PREEMPT(full) [ 384.642347][T15142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 384.642362][T15142] Call Trace: [ 384.642371][T15142] [ 384.642381][T15142] dump_stack_lvl+0xe8/0x150 [ 384.642423][T15142] should_fail_ex+0x3eb/0x540 [ 384.642459][T15142] prepare_alloc_pages+0x21e/0x5f0 [ 384.642497][T15142] __alloc_frozen_pages_noprof+0x17c/0x410 [ 384.642527][T15142] ? __lock_acquire+0x747/0x2de0 [ 384.642559][T15142] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 384.642595][T15142] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 384.642623][T15142] ? __get_vm_area_node+0x155/0x2f0 [ 384.642645][T15142] ? __vmalloc_node_range_noprof+0x36e/0x16f0 [ 384.642673][T15142] ? policy_nodemask+0x31b/0x980 [ 384.642705][T15142] ? __sys_bpf+0xd86/0xe00 [ 384.642724][T15142] ? __x64_sys_bpf+0xba/0xd0 [ 384.642755][T15142] ? do_syscall_64+0x166/0x520 [ 384.642781][T15142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.642810][T15142] alloc_pages_mpol+0x21e/0x390 [ 384.642852][T15142] alloc_pages_noprof+0xb1/0x2b0 [ 384.642902][T15142] get_free_pages_noprof+0xf/0x80 [ 384.642932][T15142] __kasan_populate_vmalloc+0x38/0x1c0 [ 384.642961][T15142] ? do_raw_spin_unlock+0xf5/0x200 [ 384.642990][T15142] alloc_vmap_area+0xd10/0x1410 [ 384.643032][T15142] ? __pfx_alloc_vmap_area+0x10/0x10 [ 384.643052][T15142] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 384.643083][T15142] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 384.643112][T15142] ? __get_vm_area_node+0x155/0x2f0 [ 384.643142][T15142] __get_vm_area_node+0x200/0x2f0 [ 384.643175][T15142] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 384.643202][T15142] ? bpf_prog_calc_tag+0x51/0x370 [ 384.643233][T15142] ? __sys_bpf+0xd81/0xe00 [ 384.643252][T15142] ? __x64_sys_bpf+0xba/0xd0 [ 384.643282][T15142] ? do_syscall_64+0x166/0x520 [ 384.643312][T15142] ? kasan_save_track+0x4f/0x80 [ 384.643341][T15142] ? kasan_save_track+0x3e/0x80 [ 384.643369][T15142] ? __kvmalloc_node_noprof+0x50a/0x820 [ 384.643400][T15142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.643434][T15142] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 384.643474][T15142] ? bpf_prog_calc_tag+0x51/0x370 [ 384.643495][T15142] __vmalloc_noprof+0xd2/0x120 [ 384.643518][T15142] ? bpf_prog_calc_tag+0x51/0x370 [ 384.643542][T15142] bpf_prog_calc_tag+0x51/0x370 [ 384.643569][T15142] check_and_resolve_insns+0xc0/0x28e0 [ 384.643595][T15142] ? __asan_memset+0x22/0x50 [ 384.643622][T15142] ? add_subprog+0x40b/0x550 [ 384.643650][T15142] ? bpf_check+0x1934/0x34e0 [ 384.643676][T15142] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 384.643701][T15142] ? check_subprogs+0x413/0x540 [ 384.643737][T15142] bpf_check+0x1c12/0x34e0 [ 384.643775][T15142] ? ktime_get_with_offset+0x93/0x2d0 [ 384.643807][T15142] ? ktime_get_with_offset+0x93/0x2d0 [ 384.643840][T15142] ? __pfx_bpf_check+0x10/0x10 [ 384.643868][T15142] ? bpf_obj_name_cpy+0x194/0x1e0 [ 384.643910][T15142] bpf_prog_load+0x14da/0x1c60 [ 384.643948][T15142] ? __pfx_bpf_prog_load+0x10/0x10 [ 384.643990][T15142] ? __might_fault+0xaf/0x130 [ 384.644022][T15142] __sys_bpf+0xd86/0xe00 [ 384.644054][T15142] ? __pfx___sys_bpf+0x10/0x10 [ 384.644091][T15142] ? __fget_files+0x2a/0x420 [ 384.644140][T15142] ? ksys_write+0x242/0x270 [ 384.644172][T15142] ? __pfx_ksys_write+0x10/0x10 [ 384.644209][T15142] __x64_sys_bpf+0xba/0xd0 [ 384.644246][T15142] do_syscall_64+0x166/0x520 [ 384.644271][T15142] ? trace_irq_disable+0x3b/0x140 [ 384.644303][T15142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.644326][T15142] ? clear_bhb_loop+0x70/0xc0 [ 384.644356][T15142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.644379][T15142] RIP: 0033:0x7f44edf9fb19 [ 384.644399][T15142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.644420][T15142] RSP: 002b:00007f44eeee0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.644445][T15142] RAX: ffffffffffffffda RBX: 00007f44ee225fa0 RCX: 00007f44edf9fb19 [ 384.644463][T15142] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 384.644478][T15142] RBP: 00007f44eeee0090 R08: 0000000000000000 R09: 0000000000000000 [ 384.644492][T15142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.644507][T15142] R13: 00007f44ee226038 R14: 00007f44ee225fa0 R15: 00007fffaa42bcc8 [ 384.644544][T15142] [ 384.817500][T15142] syz.1.2919: vmalloc error: size 32, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 384.817676][T15142] CPU: 0 UID: 0 PID: 15142 Comm: syz.1.2919 Not tainted syzkaller #0 PREEMPT(full) [ 384.817739][T15142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 384.817780][T15142] Call Trace: [ 384.817809][T15142] [ 384.817831][T15142] dump_stack_lvl+0xe8/0x150 [ 384.817923][T15142] warn_alloc+0x24d/0x270 [ 384.818013][T15142] ? lockdep_hardirqs_on+0x7b/0x110 [ 384.818141][T15142] ? __pfx_warn_alloc+0x10/0x10 [ 384.818212][T15142] ? kfree+0x1c5/0x650 [ 384.818286][T15142] ? __get_vm_area_node+0x219/0x2f0 [ 384.818378][T15142] __vmalloc_node_range_noprof+0x396/0x16f0 [ 384.818462][T15142] ? __sys_bpf+0xd81/0xe00 [ 384.818512][T15142] ? __x64_sys_bpf+0xba/0xd0 [ 384.818587][T15142] ? do_syscall_64+0x166/0x520 [ 384.818663][T15142] ? kasan_save_track+0x4f/0x80 [ 384.818734][T15142] ? kasan_save_track+0x3e/0x80 [ 384.818806][T15142] ? __kvmalloc_node_noprof+0x50a/0x820 [ 384.818883][T15142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.818979][T15142] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 384.819077][T15142] ? bpf_prog_calc_tag+0x51/0x370 [ 384.819123][T15142] __vmalloc_noprof+0xd2/0x120 [ 384.819186][T15142] ? bpf_prog_calc_tag+0x51/0x370 [ 384.819259][T15142] bpf_prog_calc_tag+0x51/0x370 [ 384.819324][T15142] check_and_resolve_insns+0xc0/0x28e0 [ 384.819406][T15142] ? __asan_memset+0x22/0x50 [ 384.819485][T15142] ? add_subprog+0x40b/0x550 [ 384.819564][T15142] ? bpf_check+0x1934/0x34e0 [ 384.819627][T15142] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 384.819684][T15142] ? check_subprogs+0x413/0x540 [ 384.819776][T15142] bpf_check+0x1c12/0x34e0 [ 384.819868][T15142] ? ktime_get_with_offset+0x93/0x2d0 [ 384.819961][T15142] ? ktime_get_with_offset+0x93/0x2d0 [ 384.820045][T15142] ? __pfx_bpf_check+0x10/0x10 [ 384.820111][T15142] ? bpf_obj_name_cpy+0x194/0x1e0 [ 384.820197][T15142] bpf_prog_load+0x14da/0x1c60 [ 384.820291][T15142] ? __pfx_bpf_prog_load+0x10/0x10 [ 384.820398][T15142] ? __might_fault+0xaf/0x130 [ 384.820480][T15142] __sys_bpf+0xd86/0xe00 [ 384.820555][T15142] ? __pfx___sys_bpf+0x10/0x10 [ 384.820649][T15142] ? __fget_files+0x2a/0x420 [ 384.820774][T15142] ? ksys_write+0x242/0x270 [ 384.820862][T15142] ? __pfx_ksys_write+0x10/0x10 [ 384.820948][T15142] __x64_sys_bpf+0xba/0xd0 [ 384.821041][T15142] do_syscall_64+0x166/0x520 [ 384.821109][T15142] ? trace_irq_disable+0x3b/0x140 [ 384.821138][T15142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.821161][T15142] ? clear_bhb_loop+0x70/0xc0 [ 384.821247][T15142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.821325][T15142] RIP: 0033:0x7f44edf9fb19 [ 384.821396][T15142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.821448][T15142] RSP: 002b:00007f44eeee0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.821502][T15142] RAX: ffffffffffffffda RBX: 00007f44ee225fa0 RCX: 00007f44edf9fb19 [ 384.821546][T15142] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 384.821587][T15142] RBP: 00007f44eeee0090 R08: 0000000000000000 R09: 0000000000000000 [ 384.821621][T15142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.821661][T15142] R13: 00007f44ee226038 R14: 00007f44ee225fa0 R15: 00007fffaa42bcc8 [ 384.821748][T15142] [ 384.922741][T15142] Mem-Info: [ 384.922784][T15142] active_anon:5832 inactive_anon:0 isolated_anon:0 [ 384.922784][T15142] active_file:0 inactive_file:43889 isolated_file:0 [ 384.922784][T15142] unevictable:0 dirty:349 writeback:0 [ 384.922784][T15142] slab_reclaimable:11665 slab_unreclaimable:109861 [ 384.922784][T15142] mapped:29809 shmem:522 pagetables:1252 [ 384.922784][T15142] sec_pagetables:0 bounce:0 [ 384.922784][T15142] kernel_misc_reclaimable:0 [ 384.922784][T15142] free:1272753 free_pcp:9436 free_cma:0 [ 384.922964][T15142] Node 0 active_anon:23328kB inactive_anon:0kB active_file:0kB inactive_file:175352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119236kB dirty:1396kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14688kB pagetables:4880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 384.923122][T15142] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 384.923259][T15142] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 384.923436][T15142] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 384.932056][T15142] Node 0 DMA32 free:1138764kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23328kB inactive_anon:0kB active_file:0kB inactive_file:175352kB unevictable:0kB writepending:1396kB zspages:0kB present:3129332kB managed:2523116kB mlocked:0kB bounce:0kB free_pcp:37692kB local_pcp:15848kB free_cma:0kB [ 384.937002][T15142] lowmem_reserve[]: 0 0 1 1 1 [ 384.937047][T15142] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 384.937221][T15142] lowmem_reserve[]: 0 0 0 0 0 [ 384.937339][T15142] Node 1 Normal free:3936888kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 384.937496][T15142] lowmem_reserve[]: 0 0 0 0 0 [ 384.937605][T15142] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 384.937917][T15142] Node 0 DMA32: 55*4kB (ME) 104*8kB (ME) 157*16kB (UM) 195*32kB (UME) 82*64kB (UME) 15*128kB (UM) 24*256kB (UME) 7*512kB (ME) 4*1024kB (UME) 5*2048kB (UME) 268*4096kB (UM) = 1138764kB [ 384.946358][T15142] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 384.946643][T15142] Node 1 Normal: 2*4kB (UM) 6*8kB (UM) 10*16kB (UM) 9*32kB (UM) 8*64kB (UM) 7*128kB (UM) 3*256kB (UM) 2*512kB (M) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3936888kB [ 384.955937][T15142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 384.955984][T15142] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 384.956035][T15142] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 384.956080][T15142] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 384.956124][T15142] 44407 total pagecache pages [ 384.956153][T15142] 0 pages in swap cache [ 384.956167][T15142] Free swap = 124996kB [ 384.956197][T15142] Total swap = 124996kB [ 384.956220][T15142] 2097051 pages RAM [ 384.956242][T15142] 0 pages HighMem/MovableOnly [ 384.956263][T15142] 434241 pages reserved [ 384.956284][T15142] 0 pages cma reserved [ 386.183920][ T4952] Bluetooth: hci0: command tx timeout [ 386.573218][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 386.585836][ T5639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 386.594721][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 386.607298][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 386.610124][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 386.820769][T15175] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2994'. [ 386.871749][T15175] syzkaller1: entered promiscuous mode [ 386.871774][T15175] syzkaller1: entered allmulticast mode [ 387.112236][T15187] syzkaller0: entered promiscuous mode [ 387.112261][T15187] syzkaller0: entered allmulticast mode [ 387.133489][T15187] tipc: Started in network mode [ 387.142903][T15187] tipc: Node identity e64d88a0b08b, cluster identity 4711 [ 387.143130][T15187] tipc: Enabled bearer , priority 0 [ 387.167432][T15186] tipc: Resetting bearer [ 387.232766][T15186] tipc: Disabling bearer [ 387.550241][T15168] wg0 speed is unknown, defaulting to 1000 [ 387.833238][T15214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3007'. [ 387.961262][T15218] block nbd0: Unsupported socket: should be TCP or UNIX. [ 388.664300][ T4952] Bluetooth: hci4: command tx timeout [ 389.408736][T15168] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.408864][T15168] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.409036][T15168] bridge_slave_0: entered allmulticast mode [ 389.438657][T15168] bridge_slave_0: entered promiscuous mode [ 389.461085][T15168] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.461218][T15168] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.461407][T15168] bridge_slave_1: entered allmulticast mode [ 389.487252][T15168] bridge_slave_1: entered promiscuous mode [ 389.595419][T15168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.629795][T15168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.688623][T15168] team0: Port device team_slave_0 added [ 389.699975][T15168] team0: Port device team_slave_1 added [ 389.833708][T15168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.833730][T15168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.833759][T15168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.842131][T15168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.842151][T15168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.842182][T15168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.998261][T15168] hsr_slave_0: entered promiscuous mode [ 389.999478][T15168] hsr_slave_1: entered promiscuous mode [ 390.000265][T15168] debugfs: 'hsr0' already exists in 'hsr' [ 390.000296][T15168] Cannot create hsr debugfs directory [ 390.114955][T15280] ip_tables: iptables: counters copy to user failed while replacing table [ 390.333155][T15284] bond1 (unregistering): Released all slaves [ 390.607079][T15168] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.609316][T15168] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.646463][T15295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3031'. [ 390.747949][ T4952] Bluetooth: hci4: command tx timeout [ 390.819356][T15168] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.819397][T15168] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.075903][T15168] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.075944][T15168] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.249456][T15168] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.249497][T15168] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.804845][T15168] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 391.811665][T15168] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 391.812881][T15168] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 391.848875][T15168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 391.850474][T15168] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 391.880188][T15168] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 391.895015][T15168] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 391.924155][T15168] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.159662][T15168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.213148][T15168] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.261732][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.261883][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.308460][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.308611][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.678450][T15361] block nbd0: reconnected socket [ 392.679726][ T4952] block nbd0: Receive control failed (result -32) [ 392.826187][ T4952] Bluetooth: hci4: command tx timeout [ 392.870030][T15367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3058'. [ 392.945110][T15370] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3059'. [ 393.506152][T15392] block nbd0: reconnected socket [ 393.506180][T15392] block nbd0: Unsupported socket: should be TCP or UNIX. [ 393.509671][ T4952] block nbd0: Receive control failed (result -32) [ 393.671693][T15168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.870608][T15404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3072'. [ 393.995759][T15168] veth0_vlan: entered promiscuous mode [ 394.013246][T15168] veth1_vlan: entered promiscuous mode [ 394.022319][T15408] FAULT_INJECTION: forcing a failure. [ 394.022319][T15408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.022365][T15408] CPU: 0 UID: 0 PID: 15408 Comm: syz.2.3073 Not tainted syzkaller #0 PREEMPT(full) [ 394.022394][T15408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 394.022410][T15408] Call Trace: [ 394.022421][T15408] [ 394.022432][T15408] dump_stack_lvl+0xe8/0x150 [ 394.022479][T15408] should_fail_ex+0x3eb/0x540 [ 394.022518][T15408] _copy_from_user+0x2d/0xb0 [ 394.022552][T15408] ____sys_sendmsg+0x303/0x850 [ 394.022588][T15408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.022626][T15408] ? import_iovec+0x73/0xa0 [ 394.022663][T15408] ___sys_sendmsg+0x2a5/0x360 [ 394.022688][T15408] ? __lock_acquire+0x747/0x2de0 [ 394.022728][T15408] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.022803][T15408] ? __fget_files+0x3a2/0x420 [ 394.022833][T15408] ? __fget_files+0x2a/0x420 [ 394.022876][T15408] __x64_sys_sendmsg+0x1b1/0x290 [ 394.022908][T15408] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.022964][T15408] do_syscall_64+0x166/0x520 [ 394.022993][T15408] ? trace_irq_disable+0x3b/0x140 [ 394.023027][T15408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.023055][T15408] ? clear_bhb_loop+0x70/0xc0 [ 394.023087][T15408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.023121][T15408] RIP: 0033:0x7f3de659fb19 [ 394.023146][T15408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.023170][T15408] RSP: 002b:00007f3de7519028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.023197][T15408] RAX: ffffffffffffffda RBX: 00007f3de6825fa0 RCX: 00007f3de659fb19 [ 394.023217][T15408] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 394.023234][T15408] RBP: 00007f3de7519090 R08: 0000000000000000 R09: 0000000000000000 [ 394.023250][T15408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.023275][T15408] R13: 00007f3de6826038 R14: 00007f3de6825fa0 R15: 00007ffc9ab2c7f8 [ 394.023322][T15408] [ 394.114246][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 394.299689][T15168] veth0_macvtap: entered promiscuous mode [ 394.321003][T15168] veth1_macvtap: entered promiscuous mode [ 394.371659][T15168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.416532][T15168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.524823][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.569459][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.569511][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.569550][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.680381][T15417] block nbd0: reconnected socket [ 394.680410][T15417] block nbd0: Unsupported socket: should be TCP or UNIX. [ 394.682938][ T4952] block nbd0: Receive control failed (result -32) [ 394.904964][ T4952] Bluetooth: hci4: command tx timeout [ 394.924983][ T6125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.925007][ T6125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.073295][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.073318][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.292922][T15434] FAULT_INJECTION: forcing a failure. [ 395.292922][T15434] name failslab, interval 1, probability 0, space 0, times 0 [ 395.292953][T15434] CPU: 1 UID: 0 PID: 15434 Comm: syz.1.3083 Not tainted syzkaller #0 PREEMPT(full) [ 395.292979][T15434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 395.292993][T15434] Call Trace: [ 395.293002][T15434] [ 395.293013][T15434] dump_stack_lvl+0xe8/0x150 [ 395.293060][T15434] should_fail_ex+0x3eb/0x540 [ 395.293092][T15434] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 395.293121][T15434] should_failslab+0xa8/0x100 [ 395.293158][T15434] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 395.293184][T15434] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 395.293224][T15434] ? alloc_inode+0x6a/0x1b0 [ 395.293247][T15434] ? alloc_inode+0x6a/0x1b0 [ 395.293277][T15434] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 395.293305][T15434] alloc_inode+0x6a/0x1b0 [ 395.293333][T15434] new_inode+0x1f/0x170 [ 395.293364][T15434] __debugfs_create_file+0xb8/0x400 [ 395.293397][T15434] debugfs_create_file_full+0x3f/0x60 [ 395.293430][T15434] ref_tracker_dir_debugfs+0x197/0x360 [ 395.293462][T15434] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 395.293522][T15434] ? __kvmalloc_node_noprof+0x52a/0x820 [ 395.293555][T15434] ? __kvmalloc_node_noprof+0x340/0x820 [ 395.293591][T15434] ? __raw_spin_lock_init+0x45/0x100 [ 395.293619][T15434] alloc_netdev_mqs+0x275/0x1240 [ 395.293647][T15434] ? __pfx_snprintf+0x10/0x10 [ 395.293681][T15434] ? __pfx_ip6gre_tap_setup+0x10/0x10 [ 395.293715][T15434] rtnl_create_link+0x321/0xd70 [ 395.293754][T15434] rtnl_newlink_create+0x258/0x7b0 [ 395.293789][T15434] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 395.293820][T15434] ? __pfx___mutex_lock+0x10/0x10 [ 395.293860][T15434] ? ns_capable+0x84/0xe0 [ 395.293897][T15434] rtnl_newlink+0x167a/0x1c30 [ 395.293940][T15434] ? __pfx_rtnl_newlink+0x10/0x10 [ 395.293961][T15434] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 395.293993][T15434] ? netlink_deliver_tap+0x19c/0x1b0 [ 395.294022][T15434] ? netlink_unicast+0x8c1/0xa80 [ 395.294049][T15434] ? netlink_sendmsg+0x7f0/0xb20 [ 395.294080][T15434] ? sock_sendmsg_nosec+0x14e/0x190 [ 395.294108][T15434] ? ____sys_sendmsg+0x54e/0x850 [ 395.294130][T15434] ? ___sys_sendmsg+0x2a5/0x360 [ 395.294151][T15434] ? __x64_sys_sendmsg+0x1b1/0x290 [ 395.294174][T15434] ? do_syscall_64+0x166/0x520 [ 395.294206][T15434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.294276][T15434] ? kasan_quarantine_put+0xbb/0x1f0 [ 395.294304][T15434] ? lockdep_hardirqs_on+0x7b/0x110 [ 395.294335][T15434] ? nlmon_xmit+0xb0/0x100 [ 395.294361][T15434] ? kmem_cache_free+0x182/0x650 [ 395.294401][T15434] ? __lock_acquire+0x747/0x2de0 [ 395.294438][T15434] ? __pfx_hook_capable+0x10/0x10 [ 395.294461][T15434] ? __dev_queue_xmit+0x29b/0x3920 [ 395.294492][T15434] ? __pfx_hook_capable+0x10/0x10 [ 395.294516][T15434] ? lockdep_hardirqs_on+0x7b/0x110 [ 395.294574][T15434] ? __pfx_rtnl_newlink+0x10/0x10 [ 395.294596][T15434] rtnetlink_rcv_msg+0x802/0xc00 [ 395.294624][T15434] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 395.294647][T15434] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 395.294674][T15434] ? __copy_skb_header+0xa3/0x4a0 [ 395.294714][T15434] netlink_rcv_skb+0x226/0x4a0 [ 395.294749][T15434] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 395.294775][T15434] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 395.294824][T15434] ? netlink_deliver_tap+0x2e/0x1b0 [ 395.294856][T15434] ? netlink_deliver_tap+0x2e/0x1b0 [ 395.294896][T15434] netlink_unicast+0x8ef/0xa80 [ 395.294948][T15434] netlink_sendmsg+0x7f0/0xb20 [ 395.294989][T15434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.295026][T15434] ? aa_sock_msg_perm+0x144/0x210 [ 395.295055][T15434] ? apparmor_socket_sendmsg+0x98/0x360 [ 395.295092][T15434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.295123][T15434] sock_sendmsg_nosec+0x14e/0x190 [ 395.295157][T15434] ____sys_sendmsg+0x54e/0x850 [ 395.295189][T15434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.295233][T15434] ? import_iovec+0x73/0xa0 [ 395.295265][T15434] ___sys_sendmsg+0x2a5/0x360 [ 395.295286][T15434] ? __lock_acquire+0x747/0x2de0 [ 395.295317][T15434] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.295383][T15434] ? __fget_files+0x3a2/0x420 [ 395.295410][T15434] ? __fget_files+0x2a/0x420 [ 395.295449][T15434] __x64_sys_sendmsg+0x1b1/0x290 [ 395.295479][T15434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.295529][T15434] do_syscall_64+0x166/0x520 [ 395.295555][T15434] ? trace_irq_disable+0x3b/0x140 [ 395.295584][T15434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.295608][T15434] ? clear_bhb_loop+0x70/0xc0 [ 395.295638][T15434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.295662][T15434] RIP: 0033:0x7f44edf9fb19 [ 395.295684][T15434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.295704][T15434] RSP: 002b:00007f44eeee0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.295728][T15434] RAX: ffffffffffffffda RBX: 00007f44ee225fa0 RCX: 00007f44edf9fb19 [ 395.295745][T15434] RDX: 0000000000000840 RSI: 00002000000002c0 RDI: 0000000000000009 [ 395.295760][T15434] RBP: 00007f44eeee0090 R08: 0000000000000000 R09: 0000000000000000 [ 395.295775][T15434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.295788][T15434] R13: 00007f44ee226038 R14: 00007f44ee225fa0 R15: 00007fffaa42bcc8 [ 395.295827][T15434] [ 395.498429][T15434] debugfs: out of free dentries, can not create file 'netdev@ffff88807fc6c720' [ 395.847835][T15434] ip6gretap1: entered allmulticast mode [ 395.859984][T15434] batman_adv: batadv0: Adding interface: ip6gretap1 [ 395.860003][T15434] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.860036][T15434] batman_adv: batadv0: Interface activated: ip6gretap1 [ 396.114299][T11605] hid-generic 0005:0008:0007.0004: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 396.190455][T15449] block nbd0: reconnected socket [ 396.190481][T15449] block nbd0: Unsupported socket: should be TCP or UNIX. [ 396.191212][ T4952] block nbd0: Receive control failed (result -32) [ 396.514923][T15454] syzkaller0: entered promiscuous mode [ 396.514950][T15454] syzkaller0: entered allmulticast mode [ 396.596722][T15454] tipc: Started in network mode [ 396.596760][T15454] tipc: Node identity 828d3664336a, cluster identity 4711 [ 396.596936][T15454] tipc: Enabled bearer , priority 0 [ 396.651435][T15451] tipc: Resetting bearer [ 396.721813][T15451] tipc: Disabling bearer [ 396.770373][T15470] netlink: 292 bytes leftover after parsing attributes in process `syz.0.3096'. [ 396.795809][T15470] validate_nla: 55 callbacks suppressed [ 396.795835][T15470] netlink: 'syz.0.3096': attribute type 7 has an invalid length. [ 397.109056][T15480] block nbd0: reconnected socket [ 397.109944][ T4952] block nbd0: Receive control failed (result -32) [ 397.392463][T15492] FAULT_INJECTION: forcing a failure. [ 397.392463][T15492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.392503][T15492] CPU: 0 UID: 0 PID: 15492 Comm: syz.1.3104 Not tainted syzkaller #0 PREEMPT(full) [ 397.392529][T15492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 397.392544][T15492] Call Trace: [ 397.392553][T15492] [ 397.392564][T15492] dump_stack_lvl+0xe8/0x150 [ 397.392610][T15492] should_fail_ex+0x3eb/0x540 [ 397.392645][T15492] _copy_from_user+0x2d/0xb0 [ 397.392676][T15492] generic_map_update_batch+0x662/0xad0 [ 397.392722][T15492] ? __pfx_generic_map_update_batch+0x10/0x10 [ 397.392750][T15492] ? __fget_files+0x3a2/0x420 [ 397.392777][T15492] ? __fget_files+0x2a/0x420 [ 397.392810][T15492] ? fdget+0x1ac/0x250 [ 397.392838][T15492] ? __pfx_generic_map_update_batch+0x10/0x10 [ 397.392869][T15492] bpf_map_do_batch+0x391/0x630 [ 397.392901][T15492] __sys_bpf+0x977/0xe00 [ 397.392934][T15492] ? __pfx___sys_bpf+0x10/0x10 [ 397.392971][T15492] ? __fget_files+0x2a/0x420 [ 397.393025][T15492] ? ksys_write+0x242/0x270 [ 397.393059][T15492] ? __pfx_ksys_write+0x10/0x10 [ 397.393097][T15492] __x64_sys_bpf+0xba/0xd0 [ 397.393135][T15492] do_syscall_64+0x166/0x520 [ 397.393162][T15492] ? trace_irq_disable+0x3b/0x140 [ 397.393194][T15492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.393219][T15492] ? clear_bhb_loop+0x70/0xc0 [ 397.393249][T15492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.393273][T15492] RIP: 0033:0x7f44edf9fb19 [ 397.393295][T15492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.393316][T15492] RSP: 002b:00007f44eeee0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.393340][T15492] RAX: ffffffffffffffda RBX: 00007f44ee225fa0 RCX: 00007f44edf9fb19 [ 397.393358][T15492] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 000000000000001a [ 397.393373][T15492] RBP: 00007f44eeee0090 R08: 0000000000000000 R09: 0000000000000000 [ 397.393388][T15492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 397.393402][T15492] R13: 00007f44ee226038 R14: 00007f44ee225fa0 R15: 00007fffaa42bcc8 [ 397.393439][T15492] [ 397.623708][T15494] FAULT_INJECTION: forcing a failure. [ 397.623708][T15494] name failslab, interval 1, probability 0, space 0, times 0 [ 397.623740][T15494] CPU: 1 UID: 0 PID: 15494 Comm: syz.0.3107 Not tainted syzkaller #0 PREEMPT(full) [ 397.623765][T15494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 397.623780][T15494] Call Trace: [ 397.623789][T15494] [ 397.623798][T15494] dump_stack_lvl+0xe8/0x150 [ 397.623840][T15494] should_fail_ex+0x3eb/0x540 [ 397.623875][T15494] should_failslab+0xa8/0x100 [ 397.623911][T15494] __kvmalloc_node_noprof+0x171/0x820 [ 397.623939][T15494] ? security_capable+0x7e/0x2c0 [ 397.623987][T15494] ? proc_sys_call_handler+0x3cb/0x830 [ 397.624011][T15494] ? proc_sys_call_handler+0x3cb/0x830 [ 397.624045][T15494] proc_sys_call_handler+0x3cb/0x830 [ 397.624079][T15494] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 397.624118][T15494] vfs_write+0x612/0xba0 [ 397.624159][T15494] ? __pfx_vfs_write+0x10/0x10 [ 397.624191][T15494] ? __fget_files+0x3a2/0x420 [ 397.624217][T15494] ? __fget_files+0x2a/0x420 [ 397.624247][T15494] ? fdget+0x1ac/0x250 [ 397.624280][T15494] ksys_write+0x150/0x270 [ 397.624313][T15494] ? __pfx_ksys_write+0x10/0x10 [ 397.624358][T15494] do_syscall_64+0x166/0x520 [ 397.624384][T15494] ? trace_irq_disable+0x3b/0x140 [ 397.624416][T15494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.624441][T15494] ? clear_bhb_loop+0x70/0xc0 [ 397.624472][T15494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.624496][T15494] RIP: 0033:0x7f203ef9fb19 [ 397.624518][T15494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.624540][T15494] RSP: 002b:00007f203ff18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 397.624566][T15494] RAX: ffffffffffffffda RBX: 00007f203f225fa0 RCX: 00007f203ef9fb19 [ 397.624584][T15494] RDX: 0000000000000003 RSI: 0000200000000040 RDI: 0000000000000003 [ 397.624599][T15494] RBP: 00007f203ff18090 R08: 0000000000000000 R09: 0000000000000000 [ 397.624615][T15494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.624629][T15494] R13: 00007f203f226038 R14: 00007f203f225fa0 R15: 00007ffd557e9048 [ 397.624669][T15494] [ 398.014709][T15503] block nbd0: reconnected socket [ 398.016240][ T4952] block nbd0: Receive control failed (result -32) [ 398.123988][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 398.125464][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 398.126226][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 398.129008][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 398.129692][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 398.893241][ T6939] infiniband s`z1: ib_query_port failed (-19) [ 398.987694][ T6125] smbdirect: ib_dev[s`z1] removed [ 399.139614][T15543] x_tables: unsorted underflow at hook 1 [ 399.292744][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3122'. [ 399.592935][T15552] block nbd0: reconnected socket [ 399.602344][ T5639] block nbd0: Receive control failed (result -32) [ 399.629147][T15508] wg0 speed is unknown, defaulting to 1000 [ 399.858561][T15558] wg0 speed is unknown, defaulting to 1000 [ 400.137625][T15571] netlink: 'syz.4.3132': attribute type 10 has an invalid length. [ 400.137657][T15571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3132'. [ 400.176119][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3132'. [ 400.264329][ T5639] Bluetooth: hci3: command tx timeout [ 400.296604][T15574] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3132'. [ 400.732565][T15591] block nbd0: reconnected socket [ 400.740143][ T5639] block nbd0: Receive control failed (result -32) [ 400.945033][T15601] FAULT_INJECTION: forcing a failure. [ 400.945033][T15601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.945066][T15601] CPU: 0 UID: 0 PID: 15601 Comm: syz.4.3137 Not tainted syzkaller #0 PREEMPT(full) [ 400.945096][T15601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 400.945111][T15601] Call Trace: [ 400.945121][T15601] [ 400.945131][T15601] dump_stack_lvl+0xe8/0x150 [ 400.945173][T15601] should_fail_ex+0x3eb/0x540 [ 400.945206][T15601] _copy_from_user+0x2d/0xb0 [ 400.945238][T15601] __sys_connect+0x155/0x450 [ 400.945277][T15601] ? __pfx___sys_connect+0x10/0x10 [ 400.945326][T15601] ? __pfx_ksys_write+0x10/0x10 [ 400.945365][T15601] __x64_sys_connect+0x7a/0x90 [ 400.945401][T15601] do_syscall_64+0x166/0x520 [ 400.945427][T15601] ? trace_irq_disable+0x3b/0x140 [ 400.945459][T15601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.945484][T15601] ? clear_bhb_loop+0x70/0xc0 [ 400.945514][T15601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.945537][T15601] RIP: 0033:0x7f89c5d9fb19 [ 400.945559][T15601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.945580][T15601] RSP: 002b:00007f89c6cbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 400.945605][T15601] RAX: ffffffffffffffda RBX: 00007f89c6025fa0 RCX: 00007f89c5d9fb19 [ 400.945622][T15601] RDX: 000000000000001c RSI: 0000200000000140 RDI: 0000000000000003 [ 400.945637][T15601] RBP: 00007f89c6cbe090 R08: 0000000000000000 R09: 0000000000000000 [ 400.945652][T15601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.945666][T15601] R13: 00007f89c6026038 R14: 00007f89c6025fa0 R15: 00007ffc12523d08 [ 400.945704][T15601] [ 401.253149][T15605] syzkaller1: entered promiscuous mode [ 401.253174][T15605] syzkaller1: entered allmulticast mode [ 401.327069][T15508] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.331983][T15508] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.332154][T15508] bridge_slave_0: entered allmulticast mode [ 401.358072][T15508] bridge_slave_0: entered promiscuous mode [ 401.368974][T15508] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.369956][T15508] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.370408][T15508] bridge_slave_1: entered allmulticast mode [ 401.381340][T15508] bridge_slave_1: entered promiscuous mode [ 401.518730][T15508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.550601][T15508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.880502][T15508] team0: Port device team_slave_0 added [ 401.900028][T15508] team0: Port device team_slave_1 added [ 402.363710][ T5639] Bluetooth: hci3: command tx timeout [ 402.454853][T15633] block nbd0: reconnected socket [ 402.455611][ T5639] block nbd0: Receive control failed (result -32) [ 402.637716][T15508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.637740][T15508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.637775][T15508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.835514][T15508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.835536][T15508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.835570][T15508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.120992][T15508] hsr_slave_0: entered promiscuous mode [ 403.131805][T15508] hsr_slave_1: entered promiscuous mode [ 403.132962][T15508] debugfs: 'hsr0' already exists in 'hsr' [ 403.132985][T15508] Cannot create hsr debugfs directory [ 403.380625][T15650] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 404.182757][T15508] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.182799][T15508] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.425413][ T5639] Bluetooth: hci3: command tx timeout [ 406.503714][ T5639] Bluetooth: hci3: command tx timeout [ 407.878617][T15693] FAULT_INJECTION: forcing a failure. [ 407.878617][T15693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.878655][T15693] CPU: 0 UID: 0 PID: 15693 Comm: syz.0.3163 Not tainted syzkaller #0 PREEMPT(full) [ 407.878685][T15693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 407.878702][T15693] Call Trace: [ 407.878712][T15693] [ 407.878724][T15693] dump_stack_lvl+0xe8/0x150 [ 407.878770][T15693] should_fail_ex+0x3eb/0x540 [ 407.878808][T15693] _copy_from_user+0x2d/0xb0 [ 407.878843][T15693] __copy_msghdr+0x390/0x590 [ 407.878878][T15693] ___sys_sendmsg+0x213/0x360 [ 407.878905][T15693] ? __lock_acquire+0x747/0x2de0 [ 407.878945][T15693] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.878981][T15693] ? kstrtouint+0x6e/0xe0 [ 407.879066][T15693] ? __fget_files+0x3a2/0x420 [ 407.879097][T15693] ? __fget_files+0x2a/0x420 [ 407.879141][T15693] __sys_sendmmsg+0x273/0x4e0 [ 407.879177][T15693] ? __pfx___sys_sendmmsg+0x10/0x10 [ 407.879223][T15693] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 407.879275][T15693] ? ksys_write+0x242/0x270 [ 407.879312][T15693] ? __pfx_ksys_write+0x10/0x10 [ 407.879355][T15693] __x64_sys_sendmmsg+0xa0/0xc0 [ 407.879387][T15693] do_syscall_64+0x166/0x520 [ 407.879423][T15693] ? trace_irq_disable+0x3b/0x140 [ 407.879460][T15693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.879488][T15693] ? clear_bhb_loop+0x70/0xc0 [ 407.879521][T15693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.879547][T15693] RIP: 0033:0x7f203ef9fb19 [ 407.879571][T15693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.879594][T15693] RSP: 002b:00007f203ff18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 407.879621][T15693] RAX: ffffffffffffffda RBX: 00007f203f225fa0 RCX: 00007f203ef9fb19 [ 407.879641][T15693] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 407.879658][T15693] RBP: 00007f203ff18090 R08: 0000000000000000 R09: 0000000000000000 [ 407.879674][T15693] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.879690][T15693] R13: 00007f203f226038 R14: 00007f203f225fa0 R15: 00007ffd557e9048 [ 407.879732][T15693] [ 408.211866][T15508] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.211908][T15508] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.423885][T15699] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3166'. [ 408.496098][T15699] syzkaller1: entered promiscuous mode [ 408.496126][T15699] syzkaller1: entered allmulticast mode [ 411.359720][T15719] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3173'. [ 411.380904][T15719] syzkaller1: entered promiscuous mode [ 411.380930][T15719] syzkaller1: entered allmulticast mode [ 411.856831][T15726] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3175'. [ 413.531430][T15744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3178'. [ 415.030208][T15508] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.030250][T15508] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.111061][T15744] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 415.156250][T15745] kthread_run failed with err -4 [ 415.366050][T15754] netlink: 'syz.4.3181': attribute type 1 has an invalid length. [ 415.366072][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3181'. [ 415.367674][T15754] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3181'. [ 415.367704][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3181'. [ 416.322006][T15766] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3184'. [ 416.342554][T15766] syzkaller1: entered promiscuous mode [ 416.342580][T15766] syzkaller1: entered allmulticast mode [ 417.118635][T15508] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.118676][T15508] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.022252][T15785] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3188'. [ 419.022279][T15785] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3188'. [ 420.037798][T15792] netlink: 'syz.4.3191': attribute type 1 has an invalid length. [ 420.037823][T15792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3191'. [ 420.062820][T15792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3191'. [ 420.062862][T15792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3191'. [ 421.298062][T15508] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 421.354822][T15508] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.509599][T15508] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 421.526862][T15508] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.528389][T15508] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 421.558198][T15508] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.559919][T15508] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 421.592932][T15508] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.718751][T15508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.743027][T15508] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.795718][T15508] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 421.795747][T15508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.852808][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.852933][ T6123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.872404][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.872512][ T6123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.552956][T15508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.807300][T15508] veth0_vlan: entered promiscuous mode [ 422.826340][T15508] veth1_vlan: entered promiscuous mode [ 422.879337][T15508] veth0_macvtap: entered promiscuous mode [ 422.892462][T15508] veth1_macvtap: entered promiscuous mode [ 423.201708][T15508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.237108][T15508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.325973][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.328631][ T6123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.646356][ T1119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.646441][ T1119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.810233][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.810258][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.915880][ T6123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.915904][ T6123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.588339][ T1119] IPVS: starting estimator thread 0... [ 424.625760][T15859] netlink: 'syz.1.3205': attribute type 1 has an invalid length. [ 424.683764][T15860] IPVS: using max 24 ests per chain, 57600 per kthread [ 424.915395][T15862] bond1: (slave geneve2): making interface the new active one [ 424.923120][T15862] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 424.931596][ T6123] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 424.932203][ T6123] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 424.932250][ T6123] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 424.932291][ T6123] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 425.556076][T15873] Bluetooth: MGMT ver 1.23 [ 425.654435][T15868] netlink: 'syz.3.3207': attribute type 12 has an invalid length. [ 425.654460][T15868] netlink: 'syz.3.3207': attribute type 29 has an invalid length. [ 425.654475][T15868] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3207'. [ 425.654512][T15868] netlink: 'syz.3.3207': attribute type 1 has an invalid length. [ 425.654527][T15868] netlink: 'syz.3.3207': attribute type 2 has an invalid length. [ 426.693185][ T4952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 426.709505][ T4952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 426.712748][ T4952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 426.735199][ T4952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 426.739446][ T4952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 426.934204][T15897] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 427.794836][T15910] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3217'. [ 427.830118][ T5634] batman_adv: batadv0: Removing interface: syz_tun [ 428.013968][T15915] FAULT_INJECTION: forcing a failure. [ 428.013968][T15915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.014014][T15915] CPU: 0 UID: 0 PID: 15915 Comm: syz.2.3219 Not tainted syzkaller #0 PREEMPT(full) [ 428.014040][T15915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 428.014059][T15915] Call Trace: [ 428.014068][T15915] [ 428.014078][T15915] dump_stack_lvl+0xe8/0x150 [ 428.014120][T15915] should_fail_ex+0x3eb/0x540 [ 428.014154][T15915] _copy_to_user+0x31/0xb0 [ 428.014186][T15915] simple_read_from_buffer+0xe1/0x170 [ 428.014221][T15915] proc_fail_nth_read+0x1bb/0x230 [ 428.014262][T15915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 428.014301][T15915] ? rw_verify_area+0x24a/0x4c0 [ 428.014333][T15915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 428.014367][T15915] vfs_read+0x213/0xa80 [ 428.014402][T15915] ? __pfx___mutex_lock+0x10/0x10 [ 428.014431][T15915] ? __pfx_vfs_read+0x10/0x10 [ 428.014461][T15915] ? __fget_files+0x2a/0x420 [ 428.014487][T15915] ? __fget_files+0x3a2/0x420 [ 428.014513][T15915] ? __fget_files+0x2a/0x420 [ 428.014545][T15915] ? fdget+0x1ac/0x250 [ 428.014580][T15915] ksys_read+0x150/0x270 [ 428.014613][T15915] ? __pfx_ksys_read+0x10/0x10 [ 428.014655][T15915] do_syscall_64+0x166/0x520 [ 428.014680][T15915] ? trace_irq_disable+0x3b/0x140 [ 428.014711][T15915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.014744][T15915] ? clear_bhb_loop+0x70/0xc0 [ 428.014773][T15915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.014802][T15915] RIP: 0033:0x7f728296034e [ 428.014824][T15915] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 428.014844][T15915] RSP: 002b:00007f7283898fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 428.014868][T15915] RAX: ffffffffffffffda RBX: 00007f72838996c0 RCX: 00007f728296034e [ 428.014885][T15915] RDX: 000000000000000f RSI: 00007f72838990a0 RDI: 0000000000000004 [ 428.014900][T15915] RBP: 00007f7283899090 R08: 0000000000000000 R09: 0000000000000000 [ 428.014914][T15915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.014928][T15915] R13: 00007f7282c26038 R14: 00007f7282c25fa0 R15: 00007fffde352c88 [ 428.014967][T15915] [ 428.744764][ T4952] Bluetooth: hci2: command tx timeout [ 428.961227][T15925] netlink: 'syz.2.3221': attribute type 12 has an invalid length. [ 428.961255][T15925] netlink: 'syz.2.3221': attribute type 29 has an invalid length. [ 428.961271][T15925] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3221'. [ 428.961291][T15925] netlink: 'syz.2.3221': attribute type 1 has an invalid length. [ 428.961306][T15925] netlink: 'syz.2.3221': attribute type 2 has an invalid length. [ 429.120647][T15929] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3222'. [ 429.204913][T15929] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 429.618292][T15891] wg0 speed is unknown, defaulting to 1000 [ 430.824790][ T4952] Bluetooth: hci2: command tx timeout [ 431.143544][ C1] sched: DL replenish lagged too much [ 431.449633][T15959] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 431.582768][ T5719] hid-generic 0005:0008:0007.0005: item fetching failed at offset 9/13 [ 431.602693][ T5719] hid-generic 0005:0008:0007.0005: probe with driver hid-generic failed with error -22 [ 431.671915][T15965] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 432.093175][T15975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3234'. [ 432.361574][T15982] Bluetooth: MGMT ver 1.23 [ 432.361612][T15982] Bluetooth: hci0: unsupported parameter 5161 [ 432.361629][T15982] Bluetooth: hci0: unsupported parameter 8192 [ 432.361643][T15982] Bluetooth: hci0: unsupported parameter 5161 [ 432.361658][T15982] Bluetooth: hci0: unsupported parameter 8192 [ 432.903944][ T4952] Bluetooth: hci2: command tx timeout [ 433.128386][T15891] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.130289][T15891] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.132213][T15891] bridge_slave_0: entered allmulticast mode [ 433.169855][T15891] bridge_slave_0: entered promiscuous mode [ 433.188992][T15891] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.189999][T15891] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.190821][T15891] bridge_slave_1: entered allmulticast mode [ 433.230444][T15891] bridge_slave_1: entered promiscuous mode [ 433.405498][T15891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.491999][T15891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.687268][T15891] team0: Port device team_slave_0 added [ 433.708536][T16004] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3242'. [ 433.710588][T15891] team0: Port device team_slave_1 added [ 433.748829][T16004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3242'. [ 433.748866][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3242'. [ 433.929787][T15891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.929809][T15891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.929839][T15891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.990693][T15891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.990715][T15891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.990744][T15891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.238209][T16010] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 434.411458][T15891] hsr_slave_0: entered promiscuous mode [ 434.422506][T15891] hsr_slave_1: entered promiscuous mode [ 434.436847][T15891] debugfs: 'hsr0' already exists in 'hsr' [ 434.436875][T15891] Cannot create hsr debugfs directory [ 434.985051][ T4952] Bluetooth: hci2: command tx timeout [ 435.258069][T16017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3247'. [ 436.023926][T16032] Bluetooth: MGMT ver 1.23 [ 436.275161][T16036] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3254'. [ 436.298814][T16036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3254'. [ 436.298852][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3254'. [ 436.552222][T16038] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3255'. [ 436.604547][T16038] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 436.652929][T16040] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 436.850237][T16044] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3257'. [ 437.627230][ T5760] hid-generic 0005:0008:0007.0006: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 441.563775][T16090] __nla_validate_parse: 2 callbacks suppressed [ 441.563800][T16090] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3267'. [ 441.601376][T16090] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 441.724854][T16097] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3268'. [ 442.109171][T16106] batman_adv: batadv0: Adding interface: syzkaller0 [ 442.109193][T16106] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.109228][T16106] batman_adv: batadv0: Interface activated: syzkaller0 [ 442.561071][T16100] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 442.696900][T16100] batman_adv: batadv0: Removing interface: syzkaller0 [ 442.755120][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3274'. [ 444.812922][T16139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3279'. [ 444.812975][T16139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3279'. [ 444.942210][T16132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3279'. [ 445.133198][T16142] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3281'. [ 445.288493][T16146] bridge1: entered promiscuous mode [ 445.288519][T16146] bridge1: entered allmulticast mode [ 445.322583][T16146] team0: Port device bridge1 added [ 445.599136][T16153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3284'. [ 447.173764][T16170] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3292'. [ 447.247095][T16179] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3294'. [ 447.912863][T16192] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3297'. [ 447.931361][T16194] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 447.991293][T16180] syzkaller1: entered promiscuous mode [ 447.991333][T16180] syzkaller1: entered allmulticast mode [ 448.300626][T15891] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 448.349360][T15891] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 448.353217][T15891] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 448.397456][T15891] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.398841][T15891] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 448.430457][T15891] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 448.446408][T15891] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 448.565283][T15891] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 448.889794][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3300'. [ 449.084200][T15891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.167745][T15891] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.229058][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.229174][ T6125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.296268][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.296439][ T6125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.767242][T16222] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3305'. [ 450.656811][T16235] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3308'. [ 450.756538][T16242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3311'. [ 450.756569][T16242] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3311'. [ 450.756588][T16242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3311'. [ 450.756838][T16242] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3311'. [ 450.757359][T16243] syzkaller1: entered promiscuous mode [ 450.757379][T16243] syzkaller1: entered allmulticast mode [ 450.936456][T16245] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20002 [ 451.910415][T16264] netlink: 'syz.3.3316': attribute type 11 has an invalid length. [ 452.454739][T16270] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3318'. [ 452.482157][T15891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.499700][T16270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3318'. [ 452.499747][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3318'. [ 452.917186][T16279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3322'. [ 453.410169][T16290] Bluetooth: MGMT ver 1.23 [ 453.580874][T16290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3325'. [ 454.270027][T16299] sctp: [Deprecated]: syz.2.3326 (pid 16299) Use of int in maxseg socket option. [ 454.270027][T16299] Use struct sctp_assoc_value instead [ 454.972211][T15891] veth0_vlan: entered promiscuous mode [ 455.032956][T15891] veth1_vlan: entered promiscuous mode [ 455.055718][T16312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3331'. [ 455.055754][T16312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3331'. [ 455.199459][T15891] veth0_macvtap: entered promiscuous mode [ 455.328180][T15891] veth1_macvtap: entered promiscuous mode [ 455.421104][T15891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.465334][ T5639] Bluetooth: hci4: command 0x0405 tx timeout [ 456.137526][T16330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3338'. [ 503.821429][ T5639] Bluetooth: hci5: command 0x0406 tx timeout [ 524.276701][ T5641] Bluetooth: hci4: command 0x0405 tx timeout [ 524.276755][ T5641] Bluetooth: hci3: command 0x0406 tx timeout [ 532.351759][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 565.952575][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 613.707543][ T33] INFO: task kworker/u8:1:13 blocked for more than 145 seconds. [ 613.707576][ T33] Not tainted syzkaller #0 [ 613.707599][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 613.707611][ T33] task:kworker/u8:1 state:D stack:21544 pid:13 tgid:13 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 613.707677][ T33] Workqueue: ipv6_addrconf addrconf_dad_work [ 613.707713][ T33] Call Trace: [ 613.707722][ T33] [ 613.707741][ T33] __schedule+0x17dd/0x5830 [ 613.707803][ T33] ? __pfx___schedule+0x10/0x10 [ 613.707841][ T33] ? schedule+0x90/0x2b0 [ 613.707870][ T33] schedule+0x164/0x2b0 [ 613.707897][ T33] schedule_preempt_disabled+0x13/0x30 [ 613.707922][ T33] __mutex_lock+0x7c4/0x15a0 [ 613.707956][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 613.707989][ T33] ? addrconf_dad_work+0x116/0x15c0 [ 613.708022][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 613.708074][ T33] addrconf_dad_work+0x116/0x15c0 [ 613.708116][ T33] ? __pfx_addrconf_dad_work+0x10/0x10 [ 613.708156][ T33] ? rcu_is_watching+0x16/0xb0 [ 613.708194][ T33] ? process_scheduled_works+0x97a/0x1630 [ 613.708231][ T33] process_scheduled_works+0xc3d/0x1630 [ 613.708306][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 613.708350][ T33] ? assign_work+0x3cf/0x5d0 [ 613.708391][ T33] worker_thread+0xa47/0xfb0 [ 613.708457][ T33] kthread+0x38b/0x480 [ 613.708486][ T33] ? __pfx_worker_thread+0x10/0x10 [ 613.708520][ T33] ? __pfx_kthread+0x10/0x10 [ 613.708550][ T33] ret_from_fork+0x514/0xb70 [ 613.708581][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 613.708616][ T33] ? __switch_to+0xc78/0x1410 [ 613.708656][ T33] ? __pfx_kthread+0x10/0x10 [ 613.708686][ T33] ret_from_fork_asm+0x1a/0x30 [ 613.708731][ T33] [ 613.708777][ T33] INFO: task kworker/u8:6:759 blocked for more than 145 seconds. [ 613.708795][ T33] Not tainted syzkaller #0 [ 613.708807][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 613.708819][ T33] task:kworker/u8:6 state:D stack:22480 pid:759 tgid:759 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 613.708885][ T33] Workqueue: events_unbound linkwatch_event [ 613.708917][ T33] Call Trace: [ 613.708925][ T33] [ 613.708940][ T33] __schedule+0x17dd/0x5830 [ 613.709000][ T33] ? __pfx___schedule+0x10/0x10 [ 613.709034][ T33] ? schedule+0x90/0x2b0 [ 613.709062][ T33] schedule+0x164/0x2b0 [ 613.709088][ T33] schedule_preempt_disabled+0x13/0x30 [ 613.709112][ T33] __mutex_lock+0x7c4/0x15a0 [ 613.709144][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 613.709175][ T33] ? linkwatch_event+0xe/0x60 [ 613.709206][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 613.709235][ T33] ? lock_acquire+0x115/0x350 [ 613.709274][ T33] ? rcu_is_watching+0x16/0xb0 [ 613.709309][ T33] ? process_scheduled_works+0x97a/0x1630 [ 613.709345][ T33] linkwatch_event+0xe/0x60 [ 613.709373][ T33] process_scheduled_works+0xc3d/0x1630 [ 613.709445][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 613.709488][ T33] ? assign_work+0x3cf/0x5d0 [ 613.709530][ T33] worker_thread+0xa47/0xfb0 [ 613.709583][ T33] ? __kthread_parkme+0x71/0x1f0 [ 613.709628][ T33] kthread+0x38b/0x480 [ 613.709656][ T33] ? __pfx_worker_thread+0x10/0x10 [ 613.709689][ T33] ? __pfx_kthread+0x10/0x10 [ 613.709718][ T33] ret_from_fork+0x514/0xb70 [ 613.709749][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 613.709776][ T33] ? __switch_to+0xc78/0x1410 [ 613.709816][ T33] ? __pfx_kthread+0x10/0x10 [ 613.709846][ T33] ret_from_fork_asm+0x1a/0x30 [ 613.709892][ T33] [ 613.709921][ T33] INFO: task kworker/0:2:1564 blocked for more than 145 seconds. [ 613.709939][ T33] Not tainted syzkaller #0 [ 613.709951][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 613.709962][ T33] task:kworker/0:2 state:D stack:23200 pid:1564 tgid:1564 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 613.710027][ T33] Workqueue: events netdev_work_proc [ 613.710059][ T33] Call Trace: [ 613.710067][ T33] [ 613.710082][ T33] __schedule+0x17dd/0x5830 [ 613.710127][ T33] ? __pfx___schedule+0x10/0x10 [ 613.710152][ T33] ? do_raw_spin_unlock+0xf5/0x200 [ 613.710186][ T33] ? __pfx___schedule+0x10/0x10 [ 613.710221][ T33] ? schedule+0x90/0x2b0 [ 613.710251][ T33] schedule+0x164/0x2b0 [ 613.710279][ T33] schedule_preempt_disabled+0x13/0x30 [ 613.710303][ T33] __mutex_lock+0x7c4/0x15a0 [ 613.710336][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 613.710369][ T33] ? netdev_work_proc+0x209/0x780 [ 613.710403][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 613.710429][ T33] ? kthread+0x38b/0x480 [ 613.710463][ T33] ? netdev_work_proc+0x12b/0x780 [ 613.710498][ T33] ? __local_bh_enable_ip+0xd6/0x140 [ 613.710537][ T33] netdev_work_proc+0x209/0x780 [ 613.710573][ T33] ? __pfx_netdev_work_proc+0x10/0x10 [ 613.710616][ T33] ? rcu_is_watching+0x16/0xb0 [ 613.710654][ T33] ? process_scheduled_works+0x97a/0x1630 [ 613.710690][ T33] process_scheduled_works+0xc3d/0x1630 [ 613.710763][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 613.710807][ T33] ? assign_work+0x3cf/0x5d0 [ 613.710848][ T33] worker_thread+0xa47/0xfb0 [ 613.710901][ T33] ? __kthread_parkme+0x71/0x1f0 [ 613.710938][ T33] kthread+0x38b/0x480 [ 613.710966][ T33] ? __pfx_worker_thread+0x10/0x10 [ 613.711000][ T33] ? __pfx_kthread+0x10/0x10 [ 613.711030][ T33] ret_from_fork+0x514/0xb70 [ 613.711060][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 613.711088][ T33] ? __switch_to+0xc78/0x1410 [ 613.711128][ T33] ? __pfx_kthread+0x10/0x10 [ 613.711158][ T33] ret_from_fork_asm+0x1a/0x30 [ 613.711204][ T33] [ 613.711358][ T33] INFO: task syz-executor:15891 blocked for more than 145 seconds. [ 613.711377][ T33] Not tainted syzkaller #0 [ 613.711388][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 613.711399][ T33] task:syz-executor state:D stack:22312 pid:15891 tgid:15891 ppid:15872 task_flags:0x400140 flags:0x00080000 [ 613.711462][ T33] Call Trace: [ 613.711471][ T33] [ 613.711485][ T33] __schedule+0x17dd/0x5830 [ 613.711530][ T33] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 613.711568][ T33] ? __pfx___schedule+0x10/0x10 [ 613.711613][ T33] ? schedule+0x90/0x2b0 [ 613.711642][ T33] schedule+0x164/0x2b0 [ 613.711670][ T33] schedule_preempt_disabled+0x13/0x30 [ 613.711696][ T33] __mutex_lock+0x7c4/0x15a0 [ 613.711729][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 613.711763][ T33] ? rtnl_newlink+0xc1d/0x1c30 [ 613.711789][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 613.711830][ T33] ? ns_capable+0x84/0xe0 [ 613.711863][ T33] ? rtnl_nets_add+0x16c/0x300 [ 613.711887][ T33] ? refcount_inc+0x46/0x70 [ 613.711924][ T33] rtnl_newlink+0xc1d/0x1c30 [ 613.711959][ T33] ? kasan_save_free_info+0x40/0x50 [ 613.711988][ T33] ? __pfx_rtnl_newlink+0x10/0x10 [ 613.712010][ T33] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 613.712042][ T33] ? netlink_deliver_tap+0x19c/0x1b0 [ 613.712074][ T33] ? netlink_unicast+0x8c1/0xa80 [ 613.712102][ T33] ? netlink_sendmsg+0x7f0/0xb20 [ 613.712134][ T33] ? sock_sendmsg_nosec+0x14e/0x190 [ 613.712163][ T33] ? __sys_sendto+0x408/0x5a0 [ 613.712196][ T33] ? __x64_sys_sendto+0xde/0x100 [ 613.712230][ T33] ? do_syscall_64+0x166/0x520 [ 613.712255][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.712324][ T33] ? kasan_quarantine_put+0xbb/0x1f0 [ 613.712354][ T33] ? lockdep_hardirqs_on+0x7b/0x110 [ 613.712385][ T33] ? nlmon_xmit+0xb0/0x100 [ 613.712412][ T33] ? kmem_cache_free+0x182/0x650 [ 613.712450][ T33] ? __lock_acquire+0x747/0x2de0 [ 613.712490][ T33] ? __dev_queue_xmit+0x29b/0x3920 [ 613.712523][ T33] ? __pfx_hook_capable+0x10/0x10 [ 613.712549][ T33] ? lockdep_hardirqs_on+0x7b/0x110 [ 613.712575][ T33] ? __dev_queue_xmit+0x29b/0x3920 [ 613.712617][ T33] ? lock_acquire+0x115/0x350 [ 613.712647][ T33] ? __pfx_rtnl_newlink+0x10/0x10 [ 613.712687][ T33] ? __pfx_rtnl_newlink+0x10/0x10 [ 613.712710][ T33] rtnetlink_rcv_msg+0x802/0xc00 [ 613.712739][ T33] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 613.712763][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 613.712792][ T33] ? __copy_skb_header+0xa3/0x4a0 [ 613.712831][ T33] netlink_rcv_skb+0x226/0x4a0 [ 613.712867][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 613.712894][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 613.712944][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 613.712977][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 613.713018][ T33] netlink_unicast+0x8ef/0xa80 [ 613.713071][ T33] netlink_sendmsg+0x7f0/0xb20 [ 613.713113][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.713153][ T33] ? aa_sock_msg_perm+0x144/0x210 [ 613.713183][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 613.713220][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.713253][ T33] sock_sendmsg_nosec+0x14e/0x190 [ 613.713289][ T33] __sys_sendto+0x408/0x5a0 [ 613.713332][ T33] ? __pfx___sys_sendto+0x10/0x10 [ 613.713382][ T33] ? fput_close_sync+0x11f/0x240 [ 613.713409][ T33] ? kmem_cache_free+0x471/0x650 [ 613.731878][ T33] ? __pfx_fput_close_sync+0x10/0x10 [ 613.731920][ T33] ? do_raw_spin_unlock+0xf5/0x200 [ 613.731952][ T33] __x64_sys_sendto+0xde/0x100 [ 613.731996][ T33] do_syscall_64+0x166/0x520 [ 613.732025][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.732050][ T33] ? clear_bhb_loop+0x70/0xc0 [ 613.732081][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.732103][ T33] RIP: 0033:0x7fbb9696034e [ 613.732126][ T33] RSP: 002b:00007ffcbe19a9c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 613.732152][ T33] RAX: ffffffffffffffda RBX: 000055558b794500 RCX: 00007fbb9696034e [ 613.732171][ T33] RDX: 000000000000002c RSI: 00007fbb97754670 RDI: 0000000000000003 [ 613.732186][ T33] RBP: 0000000000000001 R08: 00007ffcbe19aa44 R09: 000000000000000c [ 613.732202][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 613.732217][ T33] R13: 0000000000000000 R14: 00007fbb97754670 R15: 0000000000000000 [ 613.732254][ T33] [ 613.732273][ T33] INFO: task syz.3.3337:16328 blocked for more than 145 seconds. [ 613.732292][ T33] Not tainted syzkaller #0 [ 613.732304][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 613.732316][ T33] task:syz.3.3337 state:D stack:27400 pid:16328 tgid:16327 ppid:15168 task_flags:0x400140 flags:0x00080002 [ 613.732387][ T33] Call Trace: [ 613.732396][ T33] [ 613.732411][ T33] __schedule+0x17dd/0x5830 [ 613.732455][ T33] ? __kasan_slab_free+0x5c/0x80 [ 613.732487][ T33] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 613.732522][ T33] ? do_syscall_64+0x166/0x520 [ 613.732560][ T33] ? __pfx___schedule+0x10/0x10 [ 613.732622][ T33] ? schedule+0x90/0x2b0 [ 613.732652][ T33] schedule+0x164/0x2b0 [ 613.732680][ T33] schedule_preempt_disabled+0x13/0x30 [ 613.732706][ T33] __mutex_lock+0x7c4/0x15a0 [ 613.732740][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 613.732773][ T33] ? wext_ioctl_dispatch+0xa2/0x410 [ 613.732810][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 613.732848][ T33] ? dev_load+0x21/0x1f0 [ 613.732874][ T33] ? dev_load+0x21/0x1f0 [ 613.732898][ T33] ? __pfx_ioctl_standard_call+0x10/0x10 [ 613.732930][ T33] wext_ioctl_dispatch+0xa2/0x410 [ 613.732969][ T33] wext_handle_ioctl+0x110/0x1d0 [ 613.733005][ T33] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 613.733035][ T33] ? do_futex+0x458/0x4e0 [ 613.733078][ T33] sock_ioctl+0x159/0x7e0 [ 613.733109][ T33] ? __fget_files+0x2a/0x420 [ 613.733138][ T33] ? __pfx_sock_ioctl+0x10/0x10 [ 613.733177][ T33] ? __fget_files+0x2a/0x420 [ 613.733206][ T33] ? __fget_files+0x2a/0x420 [ 613.733239][ T33] ? bpf_lsm_file_ioctl+0x9/0x20 [ 613.733273][ T33] ? __pfx_sock_ioctl+0x10/0x10 [ 613.733302][ T33] __se_sys_ioctl+0xfc/0x170 [ 613.733340][ T33] do_syscall_64+0x166/0x520 [ 613.733367][ T33] ? trace_irq_disable+0x3b/0x140 [ 613.733399][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.180418][ T33] ? clear_bhb_loop+0x70/0xc0 [ 619.180463][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.180490][ T33] RIP: 0033:0x7fe72839fb19 [ 619.180513][ T33] RSP: 002b:00007fe7291bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 619.180538][ T33] RAX: ffffffffffffffda RBX: 00007fe728625fa0 RCX: 00007fe72839fb19 [ 619.180557][ T33] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000013 [ 619.180573][ T33] RBP: 00007fe728437b70 R08: 0000000000000000 R09: 0000000000000000 [ 619.180589][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.180603][ T33] R13: 00007fe728626038 R14: 00007fe728625fa0 R15: 00007fffb794a3c8 [ 619.180643][ T33] [ 619.180675][ T33] [ 619.180675][ T33] Showing all locks held in the system: [ 619.180686][ T33] locks held by kthreadd/2: 1, last CPU#1: [ 619.180703][ T33] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 619.180779][ T33] locks held by kworker/0:0/9: 3, last CPU#0: [ 619.180797][ T33] #0: ffff88801f377148 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 619.180895][ T33] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 619.180981][ T33] #2: ffff888079749700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 619.181040][ T33] locks held by kworker/u8:0/12: 3, last CPU#1: [ 619.181057][ T33] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 619.181122][ T33] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 619.181189][ T33] #2: ffff888065fa0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 619.181251][ T33] locks held by kworker/u8:1/13: 3, on CPU#0: [ 619.181268][ T33] #0: ffff88801e731948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 619.181331][ T33] #1: ffffc90000127c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 619.181427][ T33] #2: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 619.181488][ T33] locks held by kworker/1:0/24: 2, last CPU#1: [ 619.181505][ T33] #0: ffff88801f377148 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 619.181576][ T33] #1: ffffc900001e7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 619.181664][ T33] locks held by kworker/u8:2/31: 3, last CPU#1: [ 619.181681][ T33] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 619.181747][ T33] #1: ffffc90000a77c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 619.181814][ T33] #2: ffff888053d20800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 619.181881][ T33] locks held by pr/ttyS0/32: 1, last CPU#1: [ 619.181898][ T33] #0: ffffffff8fe33dd8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 619.181962][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 619.181979][ T33] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 619.182037][ T33] locks held by kworker/u8:3/50: 2, on CPU#0: [ 619.182053][ T33] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 619.182118][ T33] #1: ffffc90000ba7c40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 619.182185][ T33] locks held by kworker/u8:4/62: 4, on CPU#0: [ 619.182201][ T33] #0: ffff88805251a148 ((wq_completion)wg-kex-wg0#15){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 619.182271][ T33] #1: ffffc9000203fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 619.182338][ T33] #2: ffff8880514b5480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 619.182395][ T33] #3: ffff8880768a9700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 619.182451][ T33] locks held by kworker/u8:5/63: 3, last CPU#1: [ 619.182469][ T33] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 619.182533][ T33] #1: ffffc9000205fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 619.182599][ T33] #2: ffff88805ac70800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420