last executing test programs: 4m6.951413247s ago: executing program 1 (id=2758): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b000000000400000000000009"], 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x50, &(0x7f00000000c0), 0x48) sendmsg$nl_generic(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010024000000729429fc76df015e783080a91f18015e8f07922ef58717e0151d40a10716c2f9364e83077ccbf32e82b71f2df9ba1cbfdbb1130903ce42ce6b544ca8c5"], 0x1c}}, 0x0) 4m6.795236022s ago: executing program 1 (id=2760): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x3000000, @mcast2, 0x6}, 0x1c) write(r0, &(0x7f0000000180)="8f2a", 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="07960e0300000000000031d9a58695a5f844d3cb97292f371d5923927db467e15c90628c0abb1fbba39fb49f85f8f261a9960da9b7a47c07f50eff5a8d2fc532738204", 0x43}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x50) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000004c0)='0', 0x1}], 0x1, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000006119040000000000950000000000000090"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) syz_emit_ethernet(0x22, &(0x7f0000000640)={@local, @remote, @void, {@ipv4={0x86dd, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x69ca, 0x4) 4m6.519241625s ago: executing program 1 (id=2764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000100)='espintcp', 0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000340)=0x80000001, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000380)) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @numgen={{0xb}, @void}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000040000901feffffff00000000017c0000040042800c0001800600060080350000500002"], 0x74}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 4m6.262127911s ago: executing program 1 (id=2766): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newsa={0x150, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x8f, 0xa, 0x80, 0x80, 0x11}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x9}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, '1234567890123456dcba'}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80, 0x11}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x32}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r1, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0xc0000}, &(0x7f0000000040)=0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000200)={r4, 0x10, "1fe473a8cb3169d4d5b7259627b5cf5b"}, &(0x7f0000000240)=0x18) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000300)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000340)=0x2c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={r4, 0xfffffff2}, &(0x7f00000002c0)=0x8) sendto$inet6(r1, 0x0, 0x0, 0x4003e8, &(0x7f0000000e00)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 4m5.043341082s ago: executing program 1 (id=2773): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d04000000000000000000001004000000040000000000000803000000000000"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d80)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x2}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x7ffffffe}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x48804}, 0x4080) sendto$inet6(r2, &(0x7f0000000280)='W', 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0xfffffffffffffee9) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x1c, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f0000000b40)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x0, 0xe, 0x0, &(0x7f0000000c00)="00112233445500112233445688ca", 0x0, 0x10002c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r10 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000c40)={0x1, &(0x7f0000000c80)=[{0x80000006}]}, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x195) sendmmsg$unix(r8, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="a1", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001f0001000000000000000000a800008008000100070000000926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072bf08009600", @ANYRES32=r12, @ANYBLOB="0400f1800800c300", @ANYRES32, @ANYBLOB="bdf89d7d995fe3b440e812383148c6eb4285dc960deb533b25deb4d8aec5e4dbcd263cac816e2acfe8139cceeb07c1cc7654eab253d1838c0598abd5ca985ab434f32f519a27000000"], 0xb8}], 0x1, 0x0, 0x46, 0x20000080}, 0x0) splice(r7, 0x0, r11, 0x0, 0xa85, 0xf) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000800)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r14, 0x77, &(0x7f0000000880)}, 0x38) write$ppp(r11, &(0x7f0000000200)="3c12b03e766a46f57dee0b9c7e804765d6c7f316bcb0726302f901e3f5820c9fed0e2dec234476ad072c4ac1c7bda0d6fc55e7145f47ad1a80c614edc801143d56d9a1ea2c1c6249a5471c9b3f969c3fc1d405", 0x53) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x44, r5, 0x800, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x8}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4810) 4m1.844389924s ago: executing program 1 (id=2777): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000ac0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x4ba346f6d29095b8, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendto$inet(r0, &(0x7f0000000b00), 0xffffffffffffff58, 0x20008005, &(0x7f0000000b80)={0x2, 0x4e20}, 0x10) unshare(0x40000000) shutdown(r0, 0x0) recvfrom(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 3m46.678066286s ago: executing program 32 (id=2777): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000ac0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x4ba346f6d29095b8, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendto$inet(r0, &(0x7f0000000b00), 0xffffffffffffff58, 0x20008005, &(0x7f0000000b80)={0x2, 0x4e20}, 0x10) unshare(0x40000000) shutdown(r0, 0x0) recvfrom(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 26.596918718s ago: executing program 5 (id=4078): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x3e7, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 26.087416848s ago: executing program 2 (id=4081): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="e7", 0x1}], 0x1, 0x2, 0x80) pwrite64(r0, 0x0, 0x0, 0x102) (fail_nth: 2) 25.575350272s ago: executing program 2 (id=4082): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r1], 0x0, 0x56}, 0x28) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000500)) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f00000000c0)={0x24, @long={0x3, 0x1}}, 0x9) setsockopt(r2, 0x4, 0x42a, &(0x7f0000000100)="802a847635ee44b14b10dcb6c0e06e29a5e9c7b69bf50726332cb44977222a5298ac5992cbbcb81a5acceb6facc713cbb45c2764c8c01f2d830ab80b8577255b0a0e7b23e9316fd04ce3a6b2547eb8465b36328fb9d70e29fa6e040fa3b93ae77a4ed27dd4e492c4062e51b114954bcb00ddaf1d97d159a935654affe9904b5148bea6d01ae7f0f02a6c823406835f1ff1dfc0b68fc7e1caa1f588cb0da89ecf91ba6df97b", 0xa5) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000000)={0x2}, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf2502000000", @ANYRES32=r5, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 24.66832669s ago: executing program 4 (id=4084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000040000000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fbffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002002000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffd1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x4}, 0x8) pipe(&(0x7f0000000580)) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/cgroup\x00') r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0xa, 0xff5c, &(0x7f00000007c0)=""/222, 0x0, 0x8}, 0x78) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='memory.events\x00', 0x275a, 0x0) write$tun(r8, &(0x7f0000000900)=ANY=[], 0x141) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r11) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000009c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r11, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, r12, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24880}, 0x800) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000005002900000000000c000600030000000000000008002c00d8fcffff08002c000600000008000300", @ANYRES32=r13, @ANYBLOB="08002c000200000008000300", @ANYRES32=r13, @ANYBLOB="0c002b8008000100010000000500290000000000"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000c00)={0x100000011, @remote, 0x0, 0x4, 'none\x00', 0x9, 0x100f, 0x8000068}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, r6, 0x215eb000) 22.716352908s ago: executing program 5 (id=4085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, 0x0, 0x8000) 22.603301166s ago: executing program 5 (id=4087): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={r3, r1, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x52, &(0x7f0000000a00)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x1c, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x5, 0x1, [{0x5, 0x0, 0x0, @mcast1}]}}}}}}, 0x0) 22.587774578s ago: executing program 2 (id=4088): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}}, &(0x7f0000000080)=""/19, 0x2e, 0x13, 0x1, 0x38}, 0x28) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000840)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000900)={0x30, 0x0, 0xb, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0xa, 0x1, 'wpan0\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000b80)=[0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ec0)={'sit0\x00', &(0x7f0000000e40)={'tunl0\x00', 0x0, 0x10, 0x1, 0x2, 0x1, {{0xe, 0x4, 0x0, 0x3a, 0x38, 0x64, 0x0, 0x3, 0x2f, 0x0, @multicast2, @multicast2, {[@ssrr={0x89, 0x23, 0xc6, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010102, @multicast1, @multicast1]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f80)={0xffffffffffffffff, 0x58, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001080)={'erspan0\x00', &(0x7f0000000fc0)={'syztnl1\x00', 0x0, 0x10, 0x40, 0x1, 0x3, {{0x1e, 0x4, 0x1, 0x2, 0x78, 0x67, 0x0, 0x1, 0x29, 0x0, @loopback, @loopback, {[@end, @noop, @end, @rr={0x7, 0x23, 0xa, [@loopback, @broadcast, @multicast1, @private=0xa010100, @local, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x1a, 0x3, [{0x2, 0xc, "a30334272ea1e506cfbd"}, {0x7, 0x8, "65ece7aca08a"}]}, @timestamp_addr={0x44, 0x14, 0xdc, 0x1, 0x8, [{@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x2}]}, @rr={0x7, 0xf, 0xc7, [@dev={0xac, 0x14, 0x14, 0x2f}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000002f00)=@newtaction={0x1d94, 0x30, 0x9, 0x0, 0x25dfdbfc, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x4}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x81f5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x1d20, 0x1, [@m_mirred={0x164, 0x16, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x11, 0x3ff, 0xffffffffffffffff, 0x38, 0xffff5d96}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffff81, 0x10001, 0x8, 0x4, 0x4}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffff00, 0x9c, 0x10000000, 0x2, 0x31}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x6, 0x0, 0x4}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x2, 0x4, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x38, 0x1, 0x4, 0x8, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4277, 0x8, 0x2, 0x7, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x101, 0xa, 0x3, 0xc, 0x6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xca86, 0x4, 0x10000, 0x2fc000}, 0x1}}]}, {0x17, 0x6, "32a48c02b3469c62dad9d2cea89b6749005783"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x150, 0x10, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x8, 0x1, 0xc90, 0xb}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xd8, 0x6, "d3451172367d1bbfbdf094addd6cc1bfdb7a5d548c18e4a09257889f3be61374c29fc1ecb69dc33f9f945606dd30656cac774d3a5701bf93fce497686666b91b6f468c907305c6b352769e529a98ddbd91e06c9ff9440f273c5ccba1b5881dce09811860fa155b0724d922c11d10a907946cc435fb22586ec458ad14c2d3ec48569606af39c0ee3d862d807631a3a67a582448eae7041c8eff1f27a6df865f13c0254340bb28cefcc7a8ccf6168512f3b4b27e7fbf991cdc851c9669633a533e44d79beaf81d2c12d7f80ac6f9d760f44860f6a5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x10dc, 0xb, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc3b, 0x9, 0x6, 0x7fff, 0xab}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x4, 0x3, 0x0, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x0, 0xfffffff9, 0x9}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xa51f, 0x2, 0xffffffff, 0x5ef}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x1000, 0x10000000, 0xb658, 0xff}, 0xfffd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x6, 0xffffffffffffffff, 0x4, 0xe5a}, 0x5}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x98, 0xb, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="3d4292ca9762"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x3b, 0x6, "6a6338c96bb6d63d9b73120ae2fed6967320847eea0ff905afa11132e88e92a937f432070456b79e5030fa3b9bccaa57f32a1dbc08a7ab"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0xc4, 0x1b, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3c24, 0x6, 0x4, 0x6}, 0xbd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x2000000c, 0x2925, 0x3}, 0x5}}]}, {0x5b, 0x6, "a600b513388297506c4035fc3a3487640bf3fa92171eafea1f840abccf98726f787500aeb629f3eea0a64be75f8a5f31fa468cd686d1b7501bfdf2326d23a14e6cb99601f17639181b2d4e8c2a5e6ac86ecf7597b5fb76"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_gact={0x94, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xc0d, 0x7}}]}, {0x59, 0x6, "0043d47123ffc32074dda4f9982bc9680e72a5f2b524c21974b48bb44f455092efedbeae0a8deff8259792471cc5f6a4e015232f45eeca18a05690f1b58c6e84fd7eaa440cce3f69403ba9132dad0bd747e47aa39a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_police={0x458, 0x16, 0x0, 0x0, {{0xb}, {0x41c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x1, 0x7, 0x10001, 0x8, 0x5, 0xff, 0xffffffb7, 0x0, 0xffff, 0xa, 0x10001, 0x7, 0x0, 0x7, 0x8, 0xc, 0xd3be, 0x403, 0xaa, 0x4, 0x6, 0x0, 0x8, 0x0, 0x7ff, 0x3, 0x81, 0xf4, 0x0, 0xffffffc0, 0x3, 0xfffffff9, 0xc8de, 0x8773, 0x7f, 0x0, 0x8000, 0x8, 0x9, 0x7ff, 0x1, 0x6, 0x5, 0x911, 0x3c83, 0x1, 0x7, 0x2, 0x7, 0x81, 0x0, 0x1, 0xe5b, 0x2, 0x2, 0x6, 0x1, 0x9, 0x2, 0x800, 0x9, 0x2, 0x80000001, 0x6, 0x9, 0x2, 0x40, 0x101, 0x3, 0x7fffffff, 0xc0, 0x1, 0x8, 0x327, 0xc4, 0xa5ee, 0x10, 0x8000, 0x1, 0x1, 0x2531, 0xfffffffb, 0x5, 0x84, 0x8e66, 0x6, 0x9, 0xdd4, 0x4, 0x13, 0x2b9f, 0x3, 0x0, 0x8, 0xffff5fff, 0x2, 0xffffffff, 0x0, 0x401, 0x5, 0x7, 0x3d3089c3, 0x5, 0x2, 0x7f, 0x0, 0x21c, 0xfffeffff, 0x5, 0x8, 0x0, 0x8, 0x4, 0x7, 0x1, 0x3, 0x2000200, 0x1, 0xff, 0x5, 0x4, 0xe964, 0x6, 0x5, 0x2, 0xf, 0x1, 0xfffffffb, 0x6dc, 0x8000, 0xf, 0x1, 0x0, 0x5, 0x0, 0x0, 0xc7a, 0x9, 0x7, 0x9, 0xf, 0xb, 0x2, 0x8, 0x80, 0x8, 0x2, 0x1, 0x4, 0x9, 0x37, 0x5, 0xfe, 0x5, 0x9, 0x8001, 0x8, 0x94a, 0xd4e3, 0x800, 0x9, 0x0, 0xb1df, 0x3, 0x1, 0xa2f3, 0x3ff, 0x6, 0x8, 0xe7e, 0xf8, 0xfffffff7, 0x7, 0xfffffff1, 0x9, 0x6, 0x0, 0x4, 0x5, 0x4, 0x3, 0x6, 0x2a38, 0x3, 0x4, 0x7, 0x8, 0x8, 0x3ff, 0x7, 0x7, 0x8000, 0x8000, 0xf5, 0xfffffc28, 0x5, 0x0, 0x9, 0x0, 0x2, 0x9, 0x7f, 0x3ff, 0xffffffff, 0x6, 0x8, 0x8, 0x692, 0x8, 0x10, 0x0, 0x2, 0x42d, 0x1, 0x5, 0xc, 0x101, 0x4868be81, 0x6, 0xc0000000, 0xb6, 0x80000001, 0x2, 0xd, 0x4, 0x28, 0x2, 0x0, 0x5, 0x9, 0x3, 0x1, 0xddb, 0x855, 0x9, 0x6, 0x8, 0x1, 0xfff, 0x3fe6, 0x8, 0x8000, 0x80000001, 0x0, 0xbb9, 0x6, 0xfffffffa, 0x1, 0x0, 0x7, 0x6, 0x5, 0x3, 0xb649, 0x8]}]]}, {0x11, 0x6, "cd13831a2f58df41ddc203e1a0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xb8, 0xf, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x100}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x48, 0x6, "6bc0c4c6153aa3669cfa72e12e32541a5ff4235e6e3fc7295115a4159946ef9cc3398c44d6f846bdf157b67226a679882b8b459c7bdab771fa5915d0721cbc7fe86c2c46"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mirred={0x1a0, 0xf, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x9, 0x5, 0xfffffffb, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x37, 0x4, 0x3ff, 0x100}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x3f74, 0x1, 0x7ff, 0x1ff}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff8, 0x0, 0x5, 0x2, 0x4}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x3, 0x8, 0x3, 0x1}, 0x3}}]}, {0xd4, 0x6, "3c4958481479a7365c2dbd8fa617104492b4691221e673d8c282c3970c2694e27d60c2b7408f8e692f25ce376e2551107095ce3194c613b50c98c65f6ced584e11b4ba5c0ee648614730fcc2cae0cf695ca4659e12877bd1e70ea6a040fa4e1eefe7a44b2cc00aaa6ab3bde3a584becf10f5a0cd21a77e5e07e1c180293f0b430b4af38870bdc830eeb6d1c7958c74d9229f4606927c757a71a2c59af41a8bd35ddc6e681a24c0ddb769f38e4f12df84d9cfd2b72407698851ad2133d7baeb30c4d4d8cbf3dc7c0a52be7a542b7cb6c7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0xec, 0x15, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80000001}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x39, 0x1, 0x6, 0x1, 0x4}}]}, {0xa0, 0x6, "021d5a8afcd25d22446c6b0f93e1714ba282572272966190b568a2f309d01b689344eaaac1a69b545c6d66ec9d82ca3b70e4b3f37caaca6f8ebe39455dff1df1f2329175c56cbe6a016e82cae3edc903141653ce04dda1f79150099ac536caec0e55f2e08a7f083dfafeeeafcac99b7124d39fc9e75c2e56370b58a064109ec8ea78dc2aa3d4d68c95ccc6fcfe9d6462643cbb64e6c10d545b7ea44c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x1d94}, 0x1, 0x0, 0x0, 0x1}, 0x800) r8 = accept4(r1, 0x0, 0x0, 0x800) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000000140)='vxcan1\x00') r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x2d, 0x2, 0x0) connect$netlink(r11, &(0x7f0000000800)=@unspec, 0xc) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000a40)={0x0, @multicast1, @private}, &(0x7f0000000a80)=0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r12, r0, 0x1, 0x5, 0x4}, 0x50) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, r13, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$NL80211_CMD_GET_MPATH(r8, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)={0x88, r13, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x8080) sendmsg$NFT_BATCH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x20048040) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000008ca2170e4"], 0x48) recvmmsg$unix(r8, &(0x7f00000007c0)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x28, 0x301, 0x2270bd24, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4808}, 0x2000) 22.174061545s ago: executing program 5 (id=4091): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x5001}) socket$kcm(0x2, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000640)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r1, &(0x7f0000000680)='X', 0x1, 0xe0, &(0x7f00000006c0)={0xa, 0x4e23, 0x0, @loopback, 0x400}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) (fail_nth: 7) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 22.111379117s ago: executing program 4 (id=4092): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="181e000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) 22.050060271s ago: executing program 2 (id=4094): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac47037fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5ed838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901d", 0xb9}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="32d33a47d96ceacc565129f837dfc4ec8df24612082800303fbc4c7dae05b96c2dc595b8a542", 0x26}, {&(0x7f0000000500)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f319afaae6058b0a13fa0258fb74bf114e1a95c71a81b46d5d333aef5db36219c3bd7f905a25f5bb07bd3055d210022f04b5acf6a8e20086a71b6b5c7bb87d9c7a209b7f0e56dac72bf77c9773d1b702c45c9460829ffbf704fbbe1635b301183a8867463de2a0fae686630b7db109ed37404eadf39e858bee704a9d000bc1aae96b1b4d529573e38241eed0ecb1a9498", 0xe1}, {&(0x7f0000000600)="20b946e4ffc923", 0x7}, {&(0x7f0000000640)="e705ba567be6127d85d39375b10960531cc5504726702fa92b283ee716613616ab01f6e820db6e5cfcb4d90015ea", 0x2e}], 0x4}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{0x0}], 0x1) 21.854983233s ago: executing program 4 (id=4095): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x41}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f00000001c0)="6e33b0f435") r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000b80)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000bc0)={0x2, 0x4e21, @local}, 0x10) pselect6(0x40, &(0x7f0000000200)={0x554, 0x4, 0x1, 0x0, 0x70a, 0xfffffffffffffffd, 0xba23}, &(0x7f0000000240)={0x7, 0x8, 0x8000000000000001, 0x5, 0xb, 0x2, 0x6, 0x43}, &(0x7f0000000280)={0xd, 0x8, 0x7, 0x7, 0x8000000000000000, 0x4, 0x0, 0x101}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0xffffffff80000000]}, 0x8}) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='westwood', 0x8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000180)={r2, &(0x7f0000000040)='westwood', 0x200000, &(0x7f0000000080)={@_ha_fsid={[0x1, 0x40]}, {0x9, 0x5, 0xfc000000, 0x6}}, 0xffc00000, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x2}) sendto$inet(r2, &(0x7f0000000cc0), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000d00)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 21.83128828s ago: executing program 0 (id=4096): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000980)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101d42, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) syz_80211_join_ibss(&(0x7f00000001c0)='wlan1\x00', &(0x7f0000000200), 0x6, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000280)=0x632a, 0x4) setsockopt$inet6_int(r7, 0x29, 0x5, &(0x7f00000002c0)=0x2ffffffc, 0x4) sendmmsg$inet6(r7, &(0x7f0000000300)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0x10001, @mcast1}, 0x1c, 0x0}}], 0x1, 0x80) recvmmsg(r7, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x2163, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x888e, r6, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r10, &(0x7f0000000440)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f00)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000780)="34a5de4516ee4c68586916525c7f8a7ad06a4555d30a063ed36c70fe4bd3e3f0f1a36ed33e02fbad6ef81a87147ff8af93db93c26a31ca0e428363d1c1f0dbedf6ad273c952a67e3cca92b65675cb80a005dd1b6aa4906b5996607f5debd948717d1c41e0f02113ff20577f8d5e18678ea4123f7caaa07813411c41439f94fa6933e1a41fae25783b80b3af8703460f00e1af7052a9c13df7aae59f2", 0x9c}, {&(0x7f0000000840)="abab9eb09fde13112ccd47a6095acb691a36da9e804f6d5563f2ad8ff8b8ccca4f32aa62f40b0d5dc150c6e287e9067790ac77fd39745c6ecaffba23a0281b77db11b1546dcfe7e8884b0017e2d6db241a7899b9f9c23982b9bfbefbebca6704a2f26e36d46ebcacff434a812af70420c4d4251808728f16b9a2006c1c0951a61a9527d1f00533ea7f311c894e648816d898b70b75083ba7791e314a527b673817c7b36fc4fc4e419cf6e0abe2207e2e23ffdd02057b44b1e50ce6613a7def94323ba136cb183451446be8ec0b39e85fcb28223deb79c3ffafb09a3fa9e06f4a", 0xe0}], 0x2, &(0x7f0000000a00)}}, {{&(0x7f0000000a40)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000a80)="1d5958e09504b53f16e5385ef05ce1384c772e68c43511898a96ef6d4b9c88ce84410fbc5af36bff182d0afb211f6398c93d974466c8377250692a264587cc3a7bdc8a28b224b1afac678460d391e24cc303ba", 0x53}, {&(0x7f0000000b00)="1cf2233091503bc6e21e6c99af18154951b758f83a77ae1c4b225871d5a71199903e92307eac232e88709009c55b4db58f2cfa21eaf935771ed05c2bc4da2bcb4ee265922eb42e9d4529f6a2f0f45a35ed9a4177d4663bfa3fc15f9faf6d4206b2dd8088593c3eb0d07d", 0x6a}, {&(0x7f0000000b80)="1a62c9de2319", 0x6}, {&(0x7f0000000bc0)="0a4f2339bdb9076a649c81f60ad61f7224b0dbe638de1cd9506f97f67bee75716da8ca225429d91edde9466bc9449773dc7ff96a02975cb49b7dc63aad2f5e5dda2c37d6bb7a1262e1f3d66cea5febeef85663d616090cb57f95fa30998ca72e60501480a465c887a79b1762cac2358c2f32e377d1c38c3ed8a4e3796c33c1aede51c2c4aaaf3c7a37cc1bb6da487b63db82ead5e81ee46663881bbcd03642bd1d836ceb793702ca4fefe7d107", 0xad}, {&(0x7f0000000c80)="6a5bab44da253b24d9bcfc8449a08d3ffde9100f5a96805608c4b2c9a0568fb4f8f09bbef977a3a0ebdc1fbcb24c7bb6002eb528ffd2c70b6df4efe65c7bf98d26f9f62a8bc7a45260b13d864c3c3558808931fb74a588cbef88e2e795a80a824f0bbb3f420e5f22008b6e71fb3dc09ea4413a2a4bc0f5f572087a0cfeb695ee8f9ff21d9dbc61f0e691580a6718863369bd2adb8b80c580b37980ccb6", 0x9d}], 0x5, &(0x7f0000000dc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0x13, 0x55, [@loopback, @loopback, @multicast2, @multicast1]}]}}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@cipso={0x86, 0x69, 0x3, [{0x7, 0xd, "6114b0d63a50fb2a2f2f5c"}, {0x7, 0xb, "685dddd6bce870e540"}, {0x2, 0x6, "8fd27fec"}, {0x7, 0xb, "bcba364d1787a89b75"}, {0x7, 0xc, "a551f12d89f45cbdbaef"}, {0x2, 0xa, "f37581726aa1ed11"}, {0x6, 0x5, "c9238b"}, {0x0, 0x9, "5f3124b76245da"}, {0x1, 0xf, "08ce42ed439db77de24d21c1ae"}, {0x1, 0x7, "97f2a8a972"}]}, @ssrr={0x89, 0x13, 0x80, [@loopback, @dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x7, @dev={0xac, 0x14, 0x14, 0x41}]}, @noop, @ssrr={0x89, 0x7, 0x3f, [@dev={0xac, 0x14, 0x14, 0x1c}]}, @noop, @end, @ssrr={0x89, 0x27, 0xff, [@multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, @empty, @multicast1, @private=0xa010101, @multicast1, @local, @local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x86}}, @ip_retopts={{0x10}}], 0x128}}], 0x3, 0x4008000) shutdown(r10, 0x1) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) 21.760743123s ago: executing program 5 (id=4097): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x5c}}, 0x2000501c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000200)=[{&(0x7f0000000240)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket$nl_audit(0x10, 0x3, 0x9) splice(r2, 0x0, r4, 0x0, 0x25a5, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000280)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000140)=0x1) 21.7043387s ago: executing program 0 (id=4098): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x1, 0x6, "7d52f5", 0x10, 0x11, 0x1, @remote, @local, {[], {0x4e24, 0x4e23, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0xd, &(0x7f0000001280)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000000700000000000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000008500000005"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r4) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)="bc04eb08fdc4928b79e3243e5bd4a09d8dfa8ba03781d8808afa4300c0a7696f3ebe1fc04744906d6517596175db13b8f3bc9df1a3050b747d644ea6c0a47a112a9b0faa1a4165b32d203dbac53e0b37c80241bfd91c35653a91cfe0ef835a63847e10403fb1d263596f5a65285363a2398f8f5c0510c2864dcd06f6d9bd9fdfa156cbfeb5f75d5e3ee95dab16f8a5a159c6a5f9bcc7a7824ae0fa715da606f5c45f8c51271933fe8f", 0xa9) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000240)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001340)={r1}, 0xc) 21.51161511s ago: executing program 5 (id=4099): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x6001, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='highspeed', 0x6) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x1, 0x1, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x20, 0x6, 0x2}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000e8"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000d40)={r4, r3}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') preadv(r7, 0x0, 0x0, 0x3, 0xffffffff) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@deltfilter={0x418, 0x2d, 0x20, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x6, 0x2}, {0xd, 0x3}, {0xa, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x60}}, @filter_kind_options=@f_fw={{0x7}, {0x390, 0x2, [@TCA_FW_ACT={0x38c, 0x4, [@m_mirred={0x78, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0x6, 0x2, 0x4}, 0x4, r6}}]}, {0x2a, 0x6, "8522148da69af504167cb32501bd2e6f84fb0f168d37cdb1386882f292926c3def0dfe57a722"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x108, 0x1f, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedc9fa5, 0x11, 0x2, 0x1, 0x6}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf92}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xa8, 0x6, "5ad5f1743362fabd32ffc6660c38a707ad9d25f9dd7ad5122c9f2df5492fcbdbbcaef25a46cebfc4763a5216f6ed983cc2f192647016b88e4060d53ed63f6fd18259316399b4dc71d1bddf9b5a952a18635458b2aa3ac874eb517d5ad78f2f1d740151d9eab41e6e1c835c0a0da3e67eb759e7f2483091418498bdf652f1df2e9f68ff28e9d95cdf040474eb5258dca66508f1cfd09dbf7f53793b188210377f945be0f8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x118, 0x8, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x5, 0x0, 0x401, 0xd5f5}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xbf, 0x6, "939fc7460479781ad9bc36ce43d72a1b1b47f295014bcfd3749e928c456fd94c7a6f6150ac8a617c8034bb866defcc33c09e5bd030762e79b4b75fe73b834c16bb82caa3d3ff82d85eccac188a10c274d0ffd538dee59847571a807e59997ca2d3f21b422ac56221a91ca58b4e12a7aa6bc1195ebf9a9ae32fc35bb7d922550b1c70a57f489d602fac7c279d4e634142927a82661af7fcc6aa6fc9b6c2d37000c22deaad5d87ea4a499d77da8e0f3009f37442aecf49c60b2afa83"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0xf0, 0x11, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x80000000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8bb3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xfff1}}]}, {0x92, 0x6, "d6fc3c61d68578dcdddec6c5932709b2138f332a3461797a1d6c20e38afab4e07ca71ea911ae778bc1f54755eb7f22c25a1c079da90f82aa31766cf1d63f9466578b58e353a2827e5b7bcabee42a039d24b2129c0b6ba10f5eb54d043ab95f75234fba11114c802ad7fe2c7e81b544e4536c1a3965184a067ad759a9512759aa1f32deeec86fe20694cacb6e3ed0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast2}]}}, @TCA_RATE={0x6, 0x5, {0xb2, 0xff}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x15, 0xe}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x418}, 0x1, 0x0, 0x0, 0x24004864}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x0, 0x1, 0xf, 0xfff, 0x0, @private0, @remote, 0x20, 0x8049, 0x1}}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@bridge_getlink={0x104, 0x12, 0x8, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0xb1c8b8d4574c1192, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8}, {0x8c, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x7}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x1}], @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x7ff}, @IFLA_VTI_OKEY={0x8, 0x3, 0x7ff}, @IFLA_VTI_LINK={0x8, 0x1, r2}, @IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0xdc}], @IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xb}}, @IFLA_VTI_REMOTE={0x8, 0x5, @broadcast}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x40}, @IFLA_VTI_FWMARK={0x8, 0x6, 0xffffffff}, @IFLA_VTI_OKEY={0x8, 0x3, 0x6}, @IFLA_VTI_IKEY={0x8, 0x2, 0x3}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x9}, @IFLA_VTI_OKEY={0x8, 0x3, 0x7f}, @IFLA_VTI_LINK={0x8, 0x1, r8}]]}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x6}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_1\x00'}]}, 0x104}, 0x1, 0x0, 0x0, 0x20004014}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x2, 0x900, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002bbd7000ffdbdf25030000000c00050003010000000000000c000200feffff7f000000000800010000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4004) socket$nl_route(0x10, 0x3, 0x0) 21.464105697s ago: executing program 0 (id=4100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) listen(r3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000440)="5800fe001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 21.283904996s ago: executing program 0 (id=4102): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000002680)={0x0, 0xfffa, 0x7, 0x7, 0x9, 0x8}, 0x14) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xf00, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="f6", 0x1}], 0x1}}], 0x3ffffffffffffd1, 0x0) (fail_nth: 8) 20.719283096s ago: executing program 4 (id=4104): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) r3 = accept$packet(r2, 0x0, &(0x7f00000000c0)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="700000001000370427bd7000000000000000", @ANYRES32=r4, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac14", @ANYRES32=r2], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={@loopback, 0x33, r4}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf7, 0x2, 0x35, 0x3, 0x8}, {0x77, 0x0, 0x7f, 0x8000, 0x4}, 0x1, 0x9ccd, 0x1941}}, @TCA_TBF_RATE64={0xc, 0x4, 0xa508c888da3da3d9}]}}]}, 0x64}}, 0x4000010) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000000)={0xfffffffffffffffb, 0x8001}) 20.708905621s ago: executing program 2 (id=4105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0xa00, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 20.663884716s ago: executing program 0 (id=4106): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xfdec}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r2, 0x29, 0xb7, 0x6, 0xc0, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7, 0x7, 0x0, 0x40}}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000040)=""/247, 0xf7, 0x0, &(0x7f0000000140)=""/121, 0x79}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000000000008110000", @ANYRESDEC=r3, @ANYRES8=0x0], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x13, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) getpeername$l2tp6(r5, &(0x7f00000007c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000800)=0x20) unshare(0x72010c00) 20.611270934s ago: executing program 4 (id=4107): ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x1, 0x8000000000005, 0x5, 0x80006, 0xfffffffe, 0x7}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfd, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0xfffffffffffffcf3, 0x15, 0x10, 0xfffffffc, 0x30000, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x3b5e04dbc8e794b7}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x134}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) close(0x3) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000940)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000009c0)='GPL\x00', 0x4, 0x7, &(0x7f0000000a00)=""/4101, 0x0, 0xc}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000027c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1811"}, {0x0, 0x1, '\x00'/12}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x4, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 20.573772993s ago: executing program 2 (id=4108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000980)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101d42, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) syz_80211_join_ibss(&(0x7f00000001c0)='wlan1\x00', &(0x7f0000000200), 0x6, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000280)=0x632a, 0x4) setsockopt$inet6_int(r7, 0x29, 0x5, &(0x7f00000002c0)=0x2ffffffc, 0x4) sendmmsg$inet6(r7, &(0x7f0000000300)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0x10001, @mcast1}, 0x1c, 0x0}}], 0x1, 0x80) recvmmsg(r7, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x2163, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x888e, r6, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r10, &(0x7f0000000440)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f00)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000780)="34a5de4516ee4c68586916525c7f8a7ad06a4555d30a063ed36c70fe4bd3e3f0f1a36ed33e02fbad6ef81a87147ff8af93db93c26a31ca0e428363d1c1f0dbedf6ad273c952a67e3cca92b65675cb80a005dd1b6aa4906b5996607f5debd948717d1c41e0f02113ff20577f8d5e18678ea4123f7caaa07813411c41439f94fa6933e1a41fae25783b80b3af8703460f00e1af7052a9c13df7aae59f2", 0x9c}, {&(0x7f0000000840)="abab9eb09fde13112ccd47a6095acb691a36da9e804f6d5563f2ad8ff8b8ccca4f32aa62f40b0d5dc150c6e287e9067790ac77fd39745c6ecaffba23a0281b77db11b1546dcfe7e8884b0017e2d6db241a7899b9f9c23982b9bfbefbebca6704a2f26e36d46ebcacff434a812af70420c4d4251808728f16b9a2006c1c0951a61a9527d1f00533ea7f311c894e648816d898b70b75083ba7791e314a527b673817c7b36fc4fc4e419cf6e0abe2207e2e23ffdd02057b44b1e50ce6613a7def94323ba136cb183451446be8ec0b39e85fcb28223deb79c3ffafb09a3fa9e06f4a", 0xe0}], 0x2, &(0x7f0000000a00)}}, {{&(0x7f0000000a40)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000a80)="1d5958e09504b53f16e5385ef05ce1384c772e68c43511898a96ef6d4b9c88ce84410fbc5af36bff182d0afb211f6398c93d974466c8377250692a264587cc3a7bdc8a28b224b1afac678460d391e24cc303ba", 0x53}, {&(0x7f0000000b00)="1cf2233091503bc6e21e6c99af18154951b758f83a77ae1c4b225871d5a71199903e92307eac232e88709009c55b4db58f2cfa21eaf935771ed05c2bc4da2bcb4ee265922eb42e9d4529f6a2f0f45a35ed9a4177d4663bfa3fc15f9faf6d4206b2dd8088593c3eb0d07d", 0x6a}, {&(0x7f0000000b80)="1a62c9de2319", 0x6}, {&(0x7f0000000bc0)="0a4f2339bdb9076a649c81f60ad61f7224b0dbe638de1cd9506f97f67bee75716da8ca225429d91edde9466bc9449773dc7ff96a02975cb49b7dc63aad2f5e5dda2c37d6bb7a1262e1f3d66cea5febeef85663d616090cb57f95fa30998ca72e60501480a465c887a79b1762cac2358c2f32e377d1c38c3ed8a4e3796c33c1aede51c2c4aaaf3c7a37cc1bb6da487b63db82ead5e81ee46663881bbcd03642bd1d836ceb793702ca4fefe7d107", 0xad}, {&(0x7f0000000c80)="6a5bab44da253b24d9bcfc8449a08d3ffde9100f5a96805608c4b2c9a0568fb4f8f09bbef977a3a0ebdc1fbcb24c7bb6002eb528ffd2c70b6df4efe65c7bf98d26f9f62a8bc7a45260b13d864c3c3558808931fb74a588cbef88e2e795a80a824f0bbb3f420e5f22008b6e71fb3dc09ea4413a2a4bc0f5f572087a0cfeb695ee8f9ff21d9dbc61f0e691580a6718863369bd2adb8b80c580b37980ccb6", 0x9d}], 0x5, &(0x7f0000000dc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0x13, 0x55, [@loopback, @loopback, @multicast2, @multicast1]}]}}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@cipso={0x86, 0x69, 0x3, [{0x7, 0xd, "6114b0d63a50fb2a2f2f5c"}, {0x7, 0xb, "685dddd6bce870e540"}, {0x2, 0x6, "8fd27fec"}, {0x7, 0xb, "bcba364d1787a89b75"}, {0x7, 0xc, "a551f12d89f45cbdbaef"}, {0x2, 0xa, "f37581726aa1ed11"}, {0x6, 0x5, "c9238b"}, {0x0, 0x9, "5f3124b76245da"}, {0x1, 0xf, "08ce42ed439db77de24d21c1ae"}, {0x1, 0x7, "97f2a8a972"}]}, @ssrr={0x89, 0x13, 0x80, [@loopback, @dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x7, @dev={0xac, 0x14, 0x14, 0x41}]}, @noop, @ssrr={0x89, 0x7, 0x3f, [@dev={0xac, 0x14, 0x14, 0x1c}]}, @noop, @end, @ssrr={0x89, 0x27, 0xff, [@multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, @empty, @multicast1, @private=0xa010101, @multicast1, @local, @local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x86}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x130}}], 0x3, 0x4008000) shutdown(r10, 0x1) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) 20.406566915s ago: executing program 4 (id=4109): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) connect(r0, &(0x7f0000000480)=@nfc={0x27, r4, 0x1, 0x3}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x36, 0x0, &(0x7f00000002c0)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed88f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffd8}, 0x48) 20.335364068s ago: executing program 0 (id=4110): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x24052814}, 0x84) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f00000000c0)) connect$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10) connect$tipc(0xffffffffffffffff, &(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 19.72732673s ago: executing program 3 (id=4112): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x26, 0x1, 0x8f0bd22, 0xfffffff9, {0x54}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c953}, 0x4000000) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000240)={0x11, 0xc, 0x1, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(r3, &(0x7f0000000280)={0x11, 0x3, 0x1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000d182b27737ecf7b0d084710795497cbf08082295"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x5, 0x50, 0x0, &(0x7f0000000480)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 19.634855427s ago: executing program 3 (id=4113): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={r3, r1, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x52, &(0x7f0000000a00)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x1c, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x5, 0x1, [{0x5, 0x0, 0x0, @mcast1}]}}}}}}, 0x0) 19.612190569s ago: executing program 3 (id=4114): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x16, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001000), 0x8}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3800000015002927000000000000008b050021"], 0x38}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) pipe(0x0) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000011c0), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000001240)=0x9, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000001280)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000001300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001340)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001380)='memory.events\x00', 0x7a05, 0x1700) bind$inet(0xffffffffffffffff, &(0x7f00000013c0)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000001400)=0x10001, 0x12) sendfile(r5, r4, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='memory.events\x00', 0x7a44, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) 19.387890578s ago: executing program 3 (id=4115): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac47037fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5ed838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901d", 0xb9}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="32d33a47d96ceacc565129f837dfc4ec8df24612082800303fbc4c7dae05b96c2dc595b8a542", 0x26}, {&(0x7f0000000500)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f319afaae6058b0a13fa0258fb74bf114e1a95c71a81b46d5d333aef5db36219c3bd7f905a25f5bb07bd3055d210022f04b5acf6a8e20086a71b6b5c7bb87d9c7a209b7f0e56dac72bf77c9773d1b702c45c9460829ffbf704fbbe1635b301183a8867463de2a0fae686630b7db109ed37404eadf39e858bee704a9d000bc1aae96b1b4d529573e38241eed0ecb1a9498", 0xe1}, {&(0x7f0000000600)="20b946e4ffc923", 0x7}, {&(0x7f0000000640)="e705ba567be6127d85d39375b10960531cc5504726702fa92b283ee716613616ab01f6e820db6e5cfcb4d90015ea", 0x2e}], 0x4}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{0x0}], 0x1) 18.455353787s ago: executing program 3 (id=4116): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5f}]}]}, 0x58}}, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001500)=@bpf_lsm={0x1e, 0x3, &(0x7f00000015c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001640)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket(0x11, 0xa, 0x6f0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x3, 0x24, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f00000018c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001900)={r4, 0x0, 0xe, 0x0, &(0x7f0000001980)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.411574639s ago: executing program 3 (id=4117): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r2, 0x20, &(0x7f0000000140)={&(0x7f0000001000)=""/4116, 0x1014, 0x0, &(0x7f0000002040)=""/89, 0x59}}, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf25010000001400020077673200000000000000000000000000700008802800008024000100d1732899f611cd8994034d7e413dc957630e5493c285aca4006b44000080140004"], 0x98}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 6.006393709s ago: executing program 33 (id=4099): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x6001, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='highspeed', 0x6) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x1, 0x1, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x20, 0x6, 0x2}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000e8"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000d40)={r4, r3}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') preadv(r7, 0x0, 0x0, 0x3, 0xffffffff) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@deltfilter={0x418, 0x2d, 0x20, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x6, 0x2}, {0xd, 0x3}, {0xa, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x60}}, @filter_kind_options=@f_fw={{0x7}, {0x390, 0x2, [@TCA_FW_ACT={0x38c, 0x4, [@m_mirred={0x78, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0x6, 0x2, 0x4}, 0x4, r6}}]}, {0x2a, 0x6, "8522148da69af504167cb32501bd2e6f84fb0f168d37cdb1386882f292926c3def0dfe57a722"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x108, 0x1f, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedc9fa5, 0x11, 0x2, 0x1, 0x6}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf92}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xa8, 0x6, "5ad5f1743362fabd32ffc6660c38a707ad9d25f9dd7ad5122c9f2df5492fcbdbbcaef25a46cebfc4763a5216f6ed983cc2f192647016b88e4060d53ed63f6fd18259316399b4dc71d1bddf9b5a952a18635458b2aa3ac874eb517d5ad78f2f1d740151d9eab41e6e1c835c0a0da3e67eb759e7f2483091418498bdf652f1df2e9f68ff28e9d95cdf040474eb5258dca66508f1cfd09dbf7f53793b188210377f945be0f8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x118, 0x8, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x5, 0x0, 0x401, 0xd5f5}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xbf, 0x6, "939fc7460479781ad9bc36ce43d72a1b1b47f295014bcfd3749e928c456fd94c7a6f6150ac8a617c8034bb866defcc33c09e5bd030762e79b4b75fe73b834c16bb82caa3d3ff82d85eccac188a10c274d0ffd538dee59847571a807e59997ca2d3f21b422ac56221a91ca58b4e12a7aa6bc1195ebf9a9ae32fc35bb7d922550b1c70a57f489d602fac7c279d4e634142927a82661af7fcc6aa6fc9b6c2d37000c22deaad5d87ea4a499d77da8e0f3009f37442aecf49c60b2afa83"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0xf0, 0x11, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x80000000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8bb3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xfff1}}]}, {0x92, 0x6, "d6fc3c61d68578dcdddec6c5932709b2138f332a3461797a1d6c20e38afab4e07ca71ea911ae778bc1f54755eb7f22c25a1c079da90f82aa31766cf1d63f9466578b58e353a2827e5b7bcabee42a039d24b2129c0b6ba10f5eb54d043ab95f75234fba11114c802ad7fe2c7e81b544e4536c1a3965184a067ad759a9512759aa1f32deeec86fe20694cacb6e3ed0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast2}]}}, @TCA_RATE={0x6, 0x5, {0xb2, 0xff}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x15, 0xe}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x418}, 0x1, 0x0, 0x0, 0x24004864}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x0, 0x1, 0xf, 0xfff, 0x0, @private0, @remote, 0x20, 0x8049, 0x1}}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@bridge_getlink={0x104, 0x12, 0x8, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0xb1c8b8d4574c1192, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8}, {0x8c, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x7}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x1}], @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x7ff}, @IFLA_VTI_OKEY={0x8, 0x3, 0x7ff}, @IFLA_VTI_LINK={0x8, 0x1, r2}, @IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0xdc}], @IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xb}}, @IFLA_VTI_REMOTE={0x8, 0x5, @broadcast}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x40}, @IFLA_VTI_FWMARK={0x8, 0x6, 0xffffffff}, @IFLA_VTI_OKEY={0x8, 0x3, 0x6}, @IFLA_VTI_IKEY={0x8, 0x2, 0x3}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x9}, @IFLA_VTI_OKEY={0x8, 0x3, 0x7f}, @IFLA_VTI_LINK={0x8, 0x1, r8}]]}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x6}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_1\x00'}]}, 0x104}, 0x1, 0x0, 0x0, 0x20004014}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x2, 0x900, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002bbd7000ffdbdf25030000000c00050003010000000000000c000200feffff7f000000000800010000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4004) socket$nl_route(0x10, 0x3, 0x0) 5.499512323s ago: executing program 34 (id=4108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000980)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101d42, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) syz_80211_join_ibss(&(0x7f00000001c0)='wlan1\x00', &(0x7f0000000200), 0x6, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000280)=0x632a, 0x4) setsockopt$inet6_int(r7, 0x29, 0x5, &(0x7f00000002c0)=0x2ffffffc, 0x4) sendmmsg$inet6(r7, &(0x7f0000000300)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0x10001, @mcast1}, 0x1c, 0x0}}], 0x1, 0x80) recvmmsg(r7, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x2163, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x888e, r6, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r10, &(0x7f0000000440)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f00)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000780)="34a5de4516ee4c68586916525c7f8a7ad06a4555d30a063ed36c70fe4bd3e3f0f1a36ed33e02fbad6ef81a87147ff8af93db93c26a31ca0e428363d1c1f0dbedf6ad273c952a67e3cca92b65675cb80a005dd1b6aa4906b5996607f5debd948717d1c41e0f02113ff20577f8d5e18678ea4123f7caaa07813411c41439f94fa6933e1a41fae25783b80b3af8703460f00e1af7052a9c13df7aae59f2", 0x9c}, {&(0x7f0000000840)="abab9eb09fde13112ccd47a6095acb691a36da9e804f6d5563f2ad8ff8b8ccca4f32aa62f40b0d5dc150c6e287e9067790ac77fd39745c6ecaffba23a0281b77db11b1546dcfe7e8884b0017e2d6db241a7899b9f9c23982b9bfbefbebca6704a2f26e36d46ebcacff434a812af70420c4d4251808728f16b9a2006c1c0951a61a9527d1f00533ea7f311c894e648816d898b70b75083ba7791e314a527b673817c7b36fc4fc4e419cf6e0abe2207e2e23ffdd02057b44b1e50ce6613a7def94323ba136cb183451446be8ec0b39e85fcb28223deb79c3ffafb09a3fa9e06f4a", 0xe0}], 0x2, &(0x7f0000000a00)}}, {{&(0x7f0000000a40)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000a80)="1d5958e09504b53f16e5385ef05ce1384c772e68c43511898a96ef6d4b9c88ce84410fbc5af36bff182d0afb211f6398c93d974466c8377250692a264587cc3a7bdc8a28b224b1afac678460d391e24cc303ba", 0x53}, {&(0x7f0000000b00)="1cf2233091503bc6e21e6c99af18154951b758f83a77ae1c4b225871d5a71199903e92307eac232e88709009c55b4db58f2cfa21eaf935771ed05c2bc4da2bcb4ee265922eb42e9d4529f6a2f0f45a35ed9a4177d4663bfa3fc15f9faf6d4206b2dd8088593c3eb0d07d", 0x6a}, {&(0x7f0000000b80)="1a62c9de2319", 0x6}, {&(0x7f0000000bc0)="0a4f2339bdb9076a649c81f60ad61f7224b0dbe638de1cd9506f97f67bee75716da8ca225429d91edde9466bc9449773dc7ff96a02975cb49b7dc63aad2f5e5dda2c37d6bb7a1262e1f3d66cea5febeef85663d616090cb57f95fa30998ca72e60501480a465c887a79b1762cac2358c2f32e377d1c38c3ed8a4e3796c33c1aede51c2c4aaaf3c7a37cc1bb6da487b63db82ead5e81ee46663881bbcd03642bd1d836ceb793702ca4fefe7d107", 0xad}, {&(0x7f0000000c80)="6a5bab44da253b24d9bcfc8449a08d3ffde9100f5a96805608c4b2c9a0568fb4f8f09bbef977a3a0ebdc1fbcb24c7bb6002eb528ffd2c70b6df4efe65c7bf98d26f9f62a8bc7a45260b13d864c3c3558808931fb74a588cbef88e2e795a80a824f0bbb3f420e5f22008b6e71fb3dc09ea4413a2a4bc0f5f572087a0cfeb695ee8f9ff21d9dbc61f0e691580a6718863369bd2adb8b80c580b37980ccb6", 0x9d}], 0x5, &(0x7f0000000dc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0x13, 0x55, [@loopback, @loopback, @multicast2, @multicast1]}]}}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@cipso={0x86, 0x69, 0x3, [{0x7, 0xd, "6114b0d63a50fb2a2f2f5c"}, {0x7, 0xb, "685dddd6bce870e540"}, {0x2, 0x6, "8fd27fec"}, {0x7, 0xb, "bcba364d1787a89b75"}, {0x7, 0xc, "a551f12d89f45cbdbaef"}, {0x2, 0xa, "f37581726aa1ed11"}, {0x6, 0x5, "c9238b"}, {0x0, 0x9, "5f3124b76245da"}, {0x1, 0xf, "08ce42ed439db77de24d21c1ae"}, {0x1, 0x7, "97f2a8a972"}]}, @ssrr={0x89, 0x13, 0x80, [@loopback, @dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x7, @dev={0xac, 0x14, 0x14, 0x41}]}, @noop, @ssrr={0x89, 0x7, 0x3f, [@dev={0xac, 0x14, 0x14, 0x1c}]}, @noop, @end, @ssrr={0x89, 0x27, 0xff, [@multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, @empty, @multicast1, @private=0xa010101, @multicast1, @local, @local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x86}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x130}}], 0x3, 0x4008000) shutdown(r10, 0x1) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) 4.976378596s ago: executing program 35 (id=4110): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x24052814}, 0x84) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f00000000c0)) connect$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10) connect$tipc(0xffffffffffffffff, &(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 4.927567479s ago: executing program 36 (id=4109): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) connect(r0, &(0x7f0000000480)=@nfc={0x27, r4, 0x1, 0x3}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x36, 0x0, &(0x7f00000002c0)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed88f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a400fe0000000071102800000000001d400500000000004704000001ed00000f030000000000006f44000000000000730afefe000000007203000000000006b500f3ffffff00009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ed680b3fafa7c37388f8d3f4d62bc15ecb4d91675767999d146aef7798738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9b008537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bda00000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a3d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d6122966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffd8}, 0x48) 0s ago: executing program 37 (id=4117): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r2, 0x20, &(0x7f0000000140)={&(0x7f0000001000)=""/4116, 0x1014, 0x0, &(0x7f0000002040)=""/89, 0x59}}, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf25010000001400020077673200000000000000000000000000700008802800008024000100d1732899f611cd8994034d7e413dc957630e5493c285aca4006b44000080140004"], 0x98}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) kernel console output (not intermixed with test programs): 28825fa0 RCX: 00007fb72859fb19 [ 755.347407][T18723] RDX: 0000000024000052 RSI: 0000200000000040 RDI: 0000000000000003 [ 755.347423][T18723] RBP: 00007fb7294e0090 R08: 0000000000000000 R09: 0000000000000000 [ 755.347438][T18723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 755.347453][T18723] R13: 00007fb728826038 R14: 00007fb728825fa0 R15: 00007ffd5d7bead8 [ 755.347498][T18723] [ 756.013224][T18734] netlink: 'syz.0.3721': attribute type 2 has an invalid length. [ 756.168113][T18746] netlink: 5740 bytes leftover after parsing attributes in process `syz.2.3726'. [ 756.189518][T18749] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3725'. [ 756.840797][T18775] syzkaller0: entered promiscuous mode [ 756.840825][T18775] syzkaller0: entered allmulticast mode [ 756.976416][T18779] netlink: 'syz.5.3738': attribute type 2 has an invalid length. [ 757.636434][T18800] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.637174][T18800] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.462868][T18828] netlink: 'syz.0.3753': attribute type 2 has an invalid length. [ 758.489582][T18800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.507510][T18800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.682093][ T48] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.682135][ T48] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.682522][ T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.682555][ T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.682670][ T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.682701][ T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.682741][ T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.682768][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.018310][T18843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3757'. [ 759.032059][T18845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3757'. [ 759.073706][T18848] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 759.504023][T18861] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3764'. [ 759.504055][T18861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3764'. [ 759.504089][T18861] netlink: 'syz.4.3764': attribute type 1 has an invalid length. [ 759.940439][T18875] netlink: 'syz.4.3769': attribute type 2 has an invalid length. [ 760.078651][T18882] syzkaller0: entered promiscuous mode [ 760.078677][T18882] syzkaller0: entered allmulticast mode [ 760.199556][T16034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.199582][T16034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.314219][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3774'. [ 760.314263][T18893] netlink: 'syz.3.3774': attribute type 30 has an invalid length. [ 760.333699][T18893] vxlan0: entered promiscuous mode [ 760.333779][T18893] vxlan0: entered allmulticast mode [ 760.352619][T16037] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.352717][T16037] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.352756][T16037] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.352803][T16037] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.416549][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3774'. [ 760.416593][T18893] netlink: 'syz.3.3774': attribute type 30 has an invalid length. [ 760.444399][T18893] vxlan1: entered promiscuous mode [ 760.444425][T18893] vxlan1: entered allmulticast mode [ 760.451568][T18893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3774'. [ 760.629362][T18899] FAULT_INJECTION: forcing a failure. [ 760.629362][T18899] name failslab, interval 1, probability 0, space 0, times 0 [ 760.629395][T18899] CPU: 0 UID: 0 PID: 18899 Comm: syz.4.3777 Not tainted syzkaller #0 PREEMPT(full) [ 760.629422][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 760.629436][T18899] Call Trace: [ 760.629446][T18899] [ 760.629457][T18899] dump_stack_lvl+0xe8/0x150 [ 760.629501][T18899] should_fail_ex+0x3eb/0x540 [ 760.629534][T18899] ? __alloc_skb+0x1db/0x7a0 [ 760.629570][T18899] should_failslab+0xa8/0x100 [ 760.629606][T18899] ? __alloc_skb+0x1db/0x7a0 [ 760.629639][T18899] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 760.629666][T18899] ? __alloc_skb+0x18d/0x7a0 [ 760.629702][T18899] ? __alloc_skb+0x1db/0x7a0 [ 760.629745][T18899] __alloc_skb+0x1db/0x7a0 [ 760.629786][T18899] netlink_ack+0x136/0xb30 [ 760.629816][T18899] ? __pfx_genl_rcv_msg+0x10/0x10 [ 760.629862][T18899] netlink_rcv_skb+0x2a4/0x4a0 [ 760.629896][T18899] ? __pfx_genl_rcv_msg+0x10/0x10 [ 760.629924][T18899] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 760.629976][T18899] ? down_read+0x2b9/0x320 [ 760.630012][T18899] genl_rcv+0x28/0x40 [ 760.630035][T18899] netlink_unicast+0x8ef/0xa80 [ 760.630085][T18899] netlink_sendmsg+0x7f0/0xb20 [ 760.630130][T18899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.630169][T18899] ? aa_sock_msg_perm+0x144/0x210 [ 760.630199][T18899] ? apparmor_socket_sendmsg+0x98/0x360 [ 760.630242][T18899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.630274][T18899] sock_sendmsg_nosec+0x14e/0x190 [ 760.630309][T18899] ____sys_sendmsg+0x54e/0x850 [ 760.630341][T18899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 760.630378][T18899] ? import_iovec+0x73/0xa0 [ 760.630411][T18899] ___sys_sendmsg+0x2a5/0x360 [ 760.630434][T18899] ? __lock_acquire+0x747/0x2de0 [ 760.630470][T18899] ? __pfx____sys_sendmsg+0x10/0x10 [ 760.630538][T18899] ? __fget_files+0x3a2/0x420 [ 760.630566][T18899] ? __fget_files+0x2a/0x420 [ 760.630605][T18899] __x64_sys_sendmsg+0x1b1/0x290 [ 760.630634][T18899] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 760.630686][T18899] do_syscall_64+0x166/0x520 [ 760.630711][T18899] ? trace_irq_disable+0x3b/0x140 [ 760.630744][T18899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.630769][T18899] ? clear_bhb_loop+0x70/0xc0 [ 760.630798][T18899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.630822][T18899] RIP: 0033:0x7fb72859fb19 [ 760.630844][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.630865][T18899] RSP: 002b:00007fb7294e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.630890][T18899] RAX: ffffffffffffffda RBX: 00007fb728825fa0 RCX: 00007fb72859fb19 [ 760.630907][T18899] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 760.630923][T18899] RBP: 00007fb7294e0090 R08: 0000000000000000 R09: 0000000000000000 [ 760.630938][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.630953][T18899] R13: 00007fb728826038 R14: 00007fb728825fa0 R15: 00007ffd5d7bead8 [ 760.630991][T18899] [ 761.030877][T18901] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 761.075695][T18903] vcan1: entered promiscuous mode [ 761.075725][T18903] vcan1: entered allmulticast mode [ 761.127168][T18906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3779'. [ 761.159266][T18907] syzkaller0: entered promiscuous mode [ 761.159291][T18907] syzkaller0: entered allmulticast mode [ 761.179720][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3780'. [ 761.191973][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3780'. [ 761.503910][T18921] syzkaller0: entered promiscuous mode [ 761.503936][T18921] syzkaller0: entered allmulticast mode [ 761.936726][T18906] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 762.163439][T18945] netlink: 'syz.0.3790': attribute type 1 has an invalid length. [ 762.513730][T18969] ip_tables: iptables: counters copy to user failed while replacing table [ 762.623719][T18974] syzkaller0: entered promiscuous mode [ 762.623745][T18974] syzkaller0: entered allmulticast mode [ 762.667535][T18978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3797'. [ 763.017584][T18986] x_tables: duplicate entry at hook 3 [ 763.086498][T18981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3799'. [ 763.191066][T18989] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 763.225506][ T5647] Bluetooth: hci3: link tx timeout [ 763.225530][ T5647] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 763.228065][ T53] Bluetooth: hci3: link tx timeout [ 763.228084][ T53] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 763.446359][T16038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.446382][T16038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.447996][T17801] wlan1 speed is unknown, defaulting to 1000 [ 763.448019][T17801] syz1: Port: 1 Link ACTIVE [ 763.583003][T19001] FAULT_INJECTION: forcing a failure. [ 763.583003][T19001] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 763.583037][T19001] CPU: 0 UID: 0 PID: 19001 Comm: syz.2.3807 Not tainted syzkaller #0 PREEMPT(full) [ 763.583063][T19001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 763.583078][T19001] Call Trace: [ 763.583087][T19001] [ 763.583097][T19001] dump_stack_lvl+0xe8/0x150 [ 763.583140][T19001] should_fail_ex+0x3eb/0x540 [ 763.583174][T19001] prepare_alloc_pages+0x21e/0x5f0 [ 763.583212][T19001] __alloc_frozen_pages_noprof+0x17c/0x410 [ 763.583247][T19001] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 763.583277][T19001] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 763.583311][T19001] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 763.583347][T19001] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 763.583375][T19001] ? __get_vm_area_node+0x155/0x2f0 [ 763.583402][T19001] __alloc_pages_noprof+0x10/0x100 [ 763.583433][T19001] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 763.583482][T19001] ? alloc_pages_noprof+0x140/0x2b0 [ 763.583523][T19001] __kasan_populate_vmalloc+0xb7/0x1c0 [ 763.583563][T19001] alloc_vmap_area+0xd10/0x1410 [ 763.583603][T19001] ? __pfx_alloc_vmap_area+0x10/0x10 [ 763.583624][T19001] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 763.583654][T19001] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 763.583682][T19001] ? __get_vm_area_node+0x155/0x2f0 [ 763.583711][T19001] __get_vm_area_node+0x200/0x2f0 [ 763.583743][T19001] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 763.583769][T19001] ? bpf_check+0x14ae/0x34e0 [ 763.583801][T19001] ? lock_acquire+0x115/0x350 [ 763.583834][T19001] ? hook_capable+0x1c3/0x5e0 [ 763.583866][T19001] ? __pfx_hook_capable+0x10/0x10 [ 763.583893][T19001] ? rcu_is_watching+0x16/0xb0 [ 763.583933][T19001] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 763.583961][T19001] ? apparmor_capable+0x126/0x170 [ 763.583992][T19001] ? bpf_lsm_capable+0x9/0x20 [ 763.584013][T19001] ? security_capable+0x7e/0x2c0 [ 763.584050][T19001] ? bpf_check+0x14ae/0x34e0 [ 763.584071][T19001] __vmalloc_noprof+0xd2/0x120 [ 763.584096][T19001] ? bpf_check+0x14ae/0x34e0 [ 763.584123][T19001] bpf_check+0x14ae/0x34e0 [ 763.584160][T19001] ? ktime_get_with_offset+0x93/0x2d0 [ 763.584192][T19001] ? ktime_get_with_offset+0x93/0x2d0 [ 763.584225][T19001] ? __pfx_bpf_check+0x10/0x10 [ 763.584252][T19001] ? bpf_obj_name_cpy+0x194/0x1e0 [ 763.584286][T19001] bpf_prog_load+0x14da/0x1c60 [ 763.584323][T19001] ? __pfx_bpf_prog_load+0x10/0x10 [ 763.584364][T19001] ? __might_fault+0xaf/0x130 [ 763.584396][T19001] __sys_bpf+0xd86/0xe00 [ 763.584428][T19001] ? __pfx___sys_bpf+0x10/0x10 [ 763.584469][T19001] ? __fget_files+0x2a/0x420 [ 763.584518][T19001] ? ksys_write+0x242/0x270 [ 763.584550][T19001] ? __pfx_ksys_write+0x10/0x10 [ 763.584586][T19001] __x64_sys_bpf+0xba/0xd0 [ 763.584624][T19001] do_syscall_64+0x166/0x520 [ 763.584651][T19001] ? trace_irq_disable+0x3b/0x140 [ 763.584682][T19001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.584705][T19001] ? clear_bhb_loop+0x70/0xc0 [ 763.584734][T19001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.584758][T19001] RIP: 0033:0x7fbbfef9fb19 [ 763.584780][T19001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.584801][T19001] RSP: 002b:00007fbbfff03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 763.584825][T19001] RAX: ffffffffffffffda RBX: 00007fbbff225fa0 RCX: 00007fbbfef9fb19 [ 763.584843][T19001] RDX: 0000000000000094 RSI: 0000200000000740 RDI: 0000000000000005 [ 763.584858][T19001] RBP: 00007fbbfff03090 R08: 0000000000000000 R09: 0000000000000000 [ 763.584872][T19001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 763.584886][T19001] R13: 00007fbbff226038 R14: 00007fbbff225fa0 R15: 00007ffe85919c98 [ 763.584923][T19001] [ 763.584997][T19001] syz.2.3807: vmalloc error: size 800, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 763.585065][T19001] CPU: 0 UID: 0 PID: 19001 Comm: syz.2.3807 Not tainted syzkaller #0 PREEMPT(full) [ 763.585089][T19001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 763.585103][T19001] Call Trace: [ 763.585112][T19001] [ 763.585121][T19001] dump_stack_lvl+0xe8/0x150 [ 763.585160][T19001] warn_alloc+0x24d/0x270 [ 763.585189][T19001] ? lockdep_hardirqs_on+0x7b/0x110 [ 763.585218][T19001] ? __pfx_warn_alloc+0x10/0x10 [ 763.585245][T19001] ? kfree+0x1c5/0x650 [ 763.585276][T19001] ? __get_vm_area_node+0x219/0x2f0 [ 763.585308][T19001] __vmalloc_node_range_noprof+0x396/0x16f0 [ 763.585343][T19001] ? lock_acquire+0x115/0x350 [ 763.585375][T19001] ? hook_capable+0x1c3/0x5e0 [ 763.585406][T19001] ? __pfx_hook_capable+0x10/0x10 [ 763.585433][T19001] ? rcu_is_watching+0x16/0xb0 [ 763.585481][T19001] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 763.585509][T19001] ? apparmor_capable+0x126/0x170 [ 763.585540][T19001] ? bpf_lsm_capable+0x9/0x20 [ 763.585561][T19001] ? security_capable+0x7e/0x2c0 [ 763.585597][T19001] ? bpf_check+0x14ae/0x34e0 [ 763.585618][T19001] __vmalloc_noprof+0xd2/0x120 [ 763.585643][T19001] ? bpf_check+0x14ae/0x34e0 [ 763.585670][T19001] bpf_check+0x14ae/0x34e0 [ 763.585708][T19001] ? ktime_get_with_offset+0x93/0x2d0 [ 763.585740][T19001] ? ktime_get_with_offset+0x93/0x2d0 [ 763.585772][T19001] ? __pfx_bpf_check+0x10/0x10 [ 763.585800][T19001] ? bpf_obj_name_cpy+0x194/0x1e0 [ 763.585834][T19001] bpf_prog_load+0x14da/0x1c60 [ 763.585871][T19001] ? __pfx_bpf_prog_load+0x10/0x10 [ 763.585912][T19001] ? __might_fault+0xaf/0x130 [ 763.585944][T19001] __sys_bpf+0xd86/0xe00 [ 763.585996][T19001] ? __pfx___sys_bpf+0x10/0x10 [ 763.586032][T19001] ? __fget_files+0x2a/0x420 [ 763.586080][T19001] ? ksys_write+0x242/0x270 [ 763.586112][T19001] ? __pfx_ksys_write+0x10/0x10 [ 763.586148][T19001] __x64_sys_bpf+0xba/0xd0 [ 763.586184][T19001] do_syscall_64+0x166/0x520 [ 763.586210][T19001] ? trace_irq_disable+0x3b/0x140 [ 763.586241][T19001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.586265][T19001] ? clear_bhb_loop+0x70/0xc0 [ 763.586294][T19001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.586317][T19001] RIP: 0033:0x7fbbfef9fb19 [ 763.586337][T19001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.586357][T19001] RSP: 002b:00007fbbfff03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 763.586379][T19001] RAX: ffffffffffffffda RBX: 00007fbbff225fa0 RCX: 00007fbbfef9fb19 [ 763.586397][T19001] RDX: 0000000000000094 RSI: 0000200000000740 RDI: 0000000000000005 [ 763.586412][T19001] RBP: 00007fbbfff03090 R08: 0000000000000000 R09: 0000000000000000 [ 763.586427][T19001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 763.586441][T19001] R13: 00007fbbff226038 R14: 00007fbbff225fa0 R15: 00007ffe85919c98 [ 763.586485][T19001] [ 763.586494][T19001] Mem-Info: [ 763.586505][T19001] active_anon:6373 inactive_anon:0 isolated_anon:0 [ 763.586505][T19001] active_file:0 inactive_file:44212 isolated_file:0 [ 763.586505][T19001] unevictable:0 dirty:272 writeback:0 [ 763.586505][T19001] slab_reclaimable:13895 slab_unreclaimable:111761 [ 763.586505][T19001] mapped:29968 shmem:621 pagetables:1394 [ 763.586505][T19001] sec_pagetables:0 bounce:0 [ 763.586505][T19001] kernel_misc_reclaimable:0 [ 763.586505][T19001] free:1297649 free_pcp:11429 free_cma:0 [ 763.586564][T19001] Node 0 active_anon:25492kB inactive_anon:0kB active_file:0kB inactive_file:176640kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119872kB dirty:1088kB writeback:0kB shmem:2484kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15964kB pagetables:5436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 763.586627][T19001] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 763.586686][T19001] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 763.586751][T19001] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 763.586793][T19001] Node 0 DMA32 free:1237380kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25492kB inactive_anon:0kB active_file:0kB inactive_file:176640kB unevictable:0kB writepending:1088kB zspages:0kB present:3129332kB managed:2523116kB mlocked:0kB bounce:0kB free_pcp:43956kB local_pcp:22728kB free_cma:0kB [ 763.586862][T19001] lowmem_reserve[]: 0 0 1 1 1 [ 763.586902][T19001] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 763.586967][T19001] lowmem_reserve[]: 0 0 0 0 0 [ 763.587005][T19001] Node 1 Normal free:3937856kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1760kB local_pcp:1760kB free_cma:0kB [ 763.587071][T19001] lowmem_reserve[]: 0 0 0 0 0 [ 763.587110][T19001] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 763.587283][T19001] Node 0 DMA32: 3255*4kB (UME) 2519*8kB (UME) 933*16kB (UME) 224*32kB (UME) 105*64kB (UME) 50*128kB (UME) 34*256kB (UME) 14*512kB (UME) 10*1024kB (UME) 2*2048kB (ME) 278*4096kB (UM) = 1237284kB [ 763.587472][T19001] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 763.587586][T19001] Node 1 Normal: 2*4kB (M) 1*8kB (M) 1*16kB (M) 3*32kB (UM) 3*64kB (UM) 2*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3937856kB [ 763.587765][T19001] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 763.587785][T19001] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 763.587804][T19001] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 763.587823][T19001] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 763.587842][T19001] 44829 total pagecache pages [ 763.587852][T19001] 0 pages in swap cache [ 763.587861][T19001] Free swap = 124996kB [ 763.587871][T19001] Total swap = 124996kB [ 763.587880][T19001] 2097051 pages RAM [ 763.587889][T19001] 0 pages HighMem/MovableOnly [ 763.587897][T19001] 434241 pages reserved [ 763.587906][T19001] 0 pages cma reserved [ 764.004382][ T48] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.010265][T16035] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.106420][ T53] Bluetooth: hci3: link tx timeout [ 764.106476][ T53] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 764.234490][ T53] Bluetooth: hci3: link tx timeout [ 764.234561][ T53] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 764.268936][T16034] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.269065][T16034] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.385199][ T53] Bluetooth: hci3: link tx timeout [ 764.385264][ T53] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 764.905021][T19009] FAULT_INJECTION: forcing a failure. [ 764.905021][T19009] name failslab, interval 1, probability 0, space 0, times 0 [ 764.905055][T19009] CPU: 1 UID: 0 PID: 19009 Comm: syz.2.3808 Not tainted syzkaller #0 PREEMPT(full) [ 764.905081][T19009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 764.905096][T19009] Call Trace: [ 764.905105][T19009] [ 764.905115][T19009] dump_stack_lvl+0xe8/0x150 [ 764.905158][T19009] should_fail_ex+0x3eb/0x540 [ 764.905192][T19009] should_failslab+0xa8/0x100 [ 764.905259][T19009] __kmalloc_cache_noprof+0x9e/0x600 [ 764.905286][T19009] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 764.905311][T19009] ? __request_module+0x2d0/0x630 [ 764.905343][T19009] ? __request_module+0x2d0/0x630 [ 764.905369][T19009] __request_module+0x2d0/0x630 [ 764.905439][T19009] ? rtnl_link_ops_get+0x23/0x250 [ 764.905487][T19009] ? __pfx___request_module+0x10/0x10 [ 764.905522][T19009] ? rtnl_link_ops_get+0x23/0x250 [ 764.905545][T19009] ? rtnl_link_ops_get+0x23/0x250 [ 764.905572][T19009] ? rtnl_link_ops_get+0x215/0x250 [ 764.905601][T19009] rtnl_newlink+0x66c/0x1c30 [ 764.905636][T19009] ? __pfx_rtnl_newlink+0x10/0x10 [ 764.905656][T19009] ? __lock_acquire+0x747/0x2de0 [ 764.905697][T19009] ? __lock_acquire+0x747/0x2de0 [ 764.905734][T19009] ? __lock_acquire+0x747/0x2de0 [ 764.905779][T19009] ? lock_acquire+0x115/0x350 [ 764.905816][T19009] ? lock_acquire+0x115/0x350 [ 764.905856][T19009] ? __lock_acquire+0x747/0x2de0 [ 764.905888][T19009] ? is_bpf_text_address+0x292/0x2b0 [ 764.905918][T19009] ? __pfx_hook_capable+0x10/0x10 [ 764.905943][T19009] ? kernel_text_address+0xa5/0xe0 [ 764.905974][T19009] ? __pfx_hook_capable+0x10/0x10 [ 764.906004][T19009] ? unwind_get_return_address+0x4d/0x90 [ 764.906066][T19009] ? __pfx_rtnl_newlink+0x10/0x10 [ 764.906089][T19009] rtnetlink_rcv_msg+0x802/0xc00 [ 764.906117][T19009] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 764.906140][T19009] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 764.906165][T19009] ? __lock_acquire+0x747/0x2de0 [ 764.906208][T19009] netlink_rcv_skb+0x226/0x4a0 [ 764.906242][T19009] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 764.906268][T19009] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 764.906315][T19009] ? netlink_deliver_tap+0x2e/0x1b0 [ 764.906347][T19009] ? netlink_deliver_tap+0x2e/0x1b0 [ 764.906385][T19009] netlink_unicast+0x8ef/0xa80 [ 764.906434][T19009] netlink_sendmsg+0x7f0/0xb20 [ 764.906475][T19009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.906513][T19009] ? aa_sock_msg_perm+0x144/0x210 [ 764.906543][T19009] ? apparmor_socket_sendmsg+0x98/0x360 [ 764.906578][T19009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.906610][T19009] sock_sendmsg_nosec+0x14e/0x190 [ 764.906644][T19009] ____sys_sendmsg+0x54e/0x850 [ 764.906676][T19009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 764.906711][T19009] ? import_iovec+0x73/0xa0 [ 764.906744][T19009] ___sys_sendmsg+0x2a5/0x360 [ 764.906766][T19009] ? __lock_acquire+0x747/0x2de0 [ 764.906801][T19009] ? __pfx____sys_sendmsg+0x10/0x10 [ 764.906867][T19009] ? __fget_files+0x3a2/0x420 [ 764.906894][T19009] ? __fget_files+0x2a/0x420 [ 764.906932][T19009] __x64_sys_sendmsg+0x1b1/0x290 [ 764.906961][T19009] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 764.907017][T19009] do_syscall_64+0x166/0x520 [ 764.907044][T19009] ? trace_irq_disable+0x3b/0x140 [ 764.907075][T19009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.907100][T19009] ? clear_bhb_loop+0x70/0xc0 [ 764.907128][T19009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.907151][T19009] RIP: 0033:0x7fbbfef9fb19 [ 764.907172][T19009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.907193][T19009] RSP: 002b:00007fbbfff03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 764.907219][T19009] RAX: ffffffffffffffda RBX: 00007fbbff225fa0 RCX: 00007fbbfef9fb19 [ 764.907237][T19009] RDX: 0000000000004040 RSI: 0000200000000240 RDI: 0000000000000003 [ 764.907252][T19009] RBP: 00007fbbfff03090 R08: 0000000000000000 R09: 0000000000000000 [ 764.907266][T19009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.907280][T19009] R13: 00007fbbff226038 R14: 00007fbbff225fa0 R15: 00007ffe85919c98 [ 764.907317][T19009] [ 765.002918][ T53] Bluetooth: hci3: link tx timeout [ 765.002938][ T53] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 765.246435][ T53] Bluetooth: hci3: command 0x1407 tx timeout [ 765.412932][T19015] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3810'. [ 765.585566][T19019] syzkaller0: entered promiscuous mode [ 765.585593][T19019] syzkaller0: entered allmulticast mode [ 765.617946][T19025] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3814'. [ 766.211106][T19054] ip_tables: iptables: counters copy to user failed while replacing table [ 766.269485][T19058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3822'. [ 766.604991][T19072] x_tables: unsorted underflow at hook 3 [ 766.607336][T19072] x_tables: duplicate underflow at hook 2 [ 766.621434][T19070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3824'. [ 767.119108][T19087] syzkaller0: entered promiscuous mode [ 767.119136][T19087] syzkaller0: entered allmulticast mode [ 767.207523][T19090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3830'. [ 767.271522][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3826'. [ 767.284113][T19076] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3826'. [ 767.286555][T19076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3826'. [ 767.344203][T19076] bridge2: entered promiscuous mode [ 767.565653][T19100] ip_tables: iptables: counters copy to user failed while replacing table [ 767.845854][T19113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3837'. [ 767.845885][T19113] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3837'. [ 768.151142][T16038] IPVS: starting estimator thread 0... [ 768.189365][T19125] syzkaller0: entered promiscuous mode [ 768.189393][T19125] syzkaller0: entered allmulticast mode [ 768.232834][T19124] IPVS: using max 25 ests per chain, 60000 per kthread [ 768.313229][T19129] netlink: 'syz.5.3844': attribute type 1 has an invalid length. [ 768.479540][T19137] lo: entered allmulticast mode [ 768.545917][T19137] dvmrp6: entered allmulticast mode [ 768.562937][T19131] lo: left allmulticast mode [ 768.581591][T19139] x_tables: unsorted underflow at hook 3 [ 768.590055][T19139] x_tables: duplicate underflow at hook 2 [ 768.715084][T19143] ip_tables: iptables: counters copy to user failed while replacing table [ 768.827682][T19146] syzkaller0: left promiscuous mode [ 768.827710][T19146] syzkaller0: left allmulticast mode [ 769.392480][T19173] tipc: Started in network mode [ 769.392515][T19173] tipc: Node identity a62ae53f251a, cluster identity 4711 [ 769.392690][T19173] tipc: Enabled bearer , priority 0 [ 769.426455][T19173] syzkaller0: mtu less than device minimum [ 769.455998][T19172] tipc: Disabling bearer [ 769.755779][T19189] ip_tables: iptables: counters copy to user failed while replacing table [ 770.027435][T19205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 770.042368][ T5647] Bluetooth: hci4: command 0x0406 tx timeout [ 770.325163][T19218] tipc: Started in network mode [ 770.325190][T19218] tipc: Node identity 1001001, cluster identity 4711 [ 770.325206][T19218] tipc: Node number set to 16781313 [ 770.415829][T19224] x_tables: unsorted underflow at hook 3 [ 770.416511][T19224] x_tables: duplicate underflow at hook 2 [ 770.778967][T19235] dvmrp0: entered allmulticast mode [ 770.796611][T19235] dvmrp0: left allmulticast mode [ 771.061277][T19248] __nla_validate_parse: 4 callbacks suppressed [ 771.061300][T19248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3875'. [ 771.107138][T19248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.459119][T19264] ip_tables: iptables: counters copy to user failed while replacing table [ 771.488315][T19261] caif0: tun_chr_ioctl cmd 1074025681 [ 771.504734][T16038] IPVS: starting estimator thread 0... [ 771.505391][T19265] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 771.529086][T19265] netlink: 'syz.2.3881': attribute type 1 has an invalid length. [ 771.591885][T19266] IPVS: using max 25 ests per chain, 60000 per kthread [ 771.656215][T19273] nbd0: detected capacity change from 0 to 63 [ 771.853766][ T53] block nbd0: Receive control failed (result -104) [ 772.047389][T19287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3884'. [ 772.067463][T19290] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3884'. [ 772.067494][T19290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3884'. [ 772.067513][T19290] netlink: 'syz.2.3884': attribute type 1 has an invalid length. [ 772.067649][T19290] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3884'. [ 772.067671][T19290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3884'. [ 772.067688][T19290] netlink: 'syz.2.3884': attribute type 1 has an invalid length. [ 772.067822][T19290] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3884'. [ 772.067844][T19290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3884'. [ 772.067861][T19290] netlink: 'syz.2.3884': attribute type 1 has an invalid length. [ 772.067989][T19290] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3884'. [ 772.068010][T19290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3884'. [ 772.068028][T19290] netlink: 'syz.2.3884': attribute type 1 has an invalid length. [ 772.083664][T19290] netlink: 'syz.2.3884': attribute type 1 has an invalid length. [ 772.083853][T19290] netlink: 'syz.2.3884': attribute type 1 has an invalid length. [ 772.084079][T19290] netlink: 'syz.2.3884': attribute type 1 has an invalid length. [ 772.084448][T19290] netlink: 'syz.2.3884': attribute type 1 has an invalid length. [ 772.609651][T19301] FAULT_INJECTION: forcing a failure. [ 772.609651][T19301] name failslab, interval 1, probability 0, space 0, times 0 [ 772.609686][T19301] CPU: 1 UID: 0 PID: 19301 Comm: syz.4.3888 Not tainted syzkaller #0 PREEMPT(full) [ 772.609712][T19301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 772.609726][T19301] Call Trace: [ 772.609735][T19301] [ 772.609746][T19301] dump_stack_lvl+0xe8/0x150 [ 772.609792][T19301] should_fail_ex+0x3eb/0x540 [ 772.609835][T19301] should_failslab+0xa8/0x100 [ 772.609881][T19301] ? mas_alloc_nodes+0x291/0x350 [ 772.609911][T19301] kmem_cache_alloc_noprof+0x9c/0x600 [ 772.609941][T19301] ? mas_alloc_nodes+0x291/0x350 [ 772.609977][T19301] mas_alloc_nodes+0x291/0x350 [ 772.610010][T19301] mas_preallocate+0x42a/0x840 [ 772.610038][T19301] ? rcu_is_watching+0x16/0xb0 [ 772.610076][T19301] ? trace_kmem_cache_alloc+0x29/0xe0 [ 772.610103][T19301] ? __pfx_mas_preallocate+0x10/0x10 [ 772.610148][T19301] ? __mas_set_range+0x11a/0x3a0 [ 772.610189][T19301] __split_vma+0x2fb/0xa90 [ 772.610231][T19301] ? __pfx___split_vma+0x10/0x10 [ 772.610273][T19301] ? validate_mm+0x3f5/0x4c0 [ 772.610303][T19301] ? can_vma_merge_left+0xf3/0x510 [ 772.610340][T19301] vma_modify+0xa3f/0x1c50 [ 772.610393][T19301] vma_modify_flags+0x2a4/0x3c0 [ 772.610428][T19301] ? __pfx_vma_modify_flags+0x10/0x10 [ 772.610478][T19301] ? rcu_is_watching+0x16/0xb0 [ 772.610511][T19301] ? percpu_counter_add_batch+0xec/0x1d0 [ 772.610545][T19301] ? __vm_enough_memory+0x11a/0x380 [ 772.610578][T19301] mprotect_fixup+0x539/0xda0 [ 772.610624][T19301] ? __pfx_mprotect_fixup+0x10/0x10 [ 772.610651][T19301] ? mas_next_slot+0xc91/0xd70 [ 772.610697][T19301] ? apparmor_file_mprotect+0x1ec/0x3a0 [ 772.610728][T19301] ? security_file_mprotect+0x1a/0x290 [ 772.610769][T19301] do_mprotect_pkey+0x8e7/0xd40 [ 772.610816][T19301] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 772.610852][T19301] ? do_vmi_munmap+0x252/0x2d0 [ 772.610899][T19301] ? __pfx___vm_munmap+0x10/0x10 [ 772.610931][T19301] ? vm_mmap_pgoff+0x378/0x520 [ 772.610972][T19301] ? rcu_is_watching+0x16/0xb0 [ 772.611018][T19301] __x64_sys_mprotect+0x80/0x90 [ 772.611049][T19301] do_syscall_64+0x166/0x520 [ 772.611076][T19301] ? trace_irq_disable+0x3b/0x140 [ 772.611109][T19301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.611134][T19301] ? clear_bhb_loop+0x70/0xc0 [ 772.611163][T19301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.611186][T19301] RIP: 0033:0x7fb72859f917 [ 772.611208][T19301] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.611227][T19301] RSP: 002b:00007fb7294ded18 EFLAGS: 00000217 ORIG_RAX: 000000000000000a [ 772.611251][T19301] RAX: ffffffffffffffda RBX: 00007fb720000000 RCX: 00007fb72859f917 [ 772.611268][T19301] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 00007fb720000000 [ 772.611284][T19301] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 772.611299][T19301] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 772.611314][T19301] R13: 0000000000001000 R14: 00007fb724000000 R15: 0000000001a00000 [ 772.611352][T19301] [ 773.234852][T19322] syzkaller0: entered promiscuous mode [ 773.234878][T19322] syzkaller0: entered allmulticast mode [ 773.296695][T19324] ip_tables: iptables: counters copy to user failed while replacing table [ 773.468390][T19332] syzkaller1: entered promiscuous mode [ 773.468416][T19332] syzkaller1: entered allmulticast mode [ 773.748006][T19334] tipc: Resetting bearer [ 773.786489][T19334] syzkaller0: entered promiscuous mode [ 773.786515][T19334] syzkaller0: entered allmulticast mode [ 773.852962][T19347] SET target dimension over the limit! [ 773.994563][T19342] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 773.995594][T19342] syzkaller1: tun_chr_ioctl cmd 2147767517 [ 774.063831][T19356] ip_tables: iptables: counters copy to user failed while replacing table [ 774.177865][T19361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.305238][T19365] ip_tables: iptables: counters copy to user failed while replacing table [ 774.808648][T19383] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20000 [ 774.809680][T19382] syzkaller1: entered promiscuous mode [ 774.809704][T19382] syzkaller1: entered allmulticast mode [ 774.821480][T19383] validate_nla: 58 callbacks suppressed [ 774.821540][T19383] netlink: 'syz.0.3913': attribute type 1 has an invalid length. [ 774.870030][T19382] netlink: 'syz.2.3912': attribute type 1 has an invalid length. [ 775.163102][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 775.340595][T19401] ip_tables: iptables: counters copy to user failed while replacing table [ 775.784385][T19421] netlink: 'syz.4.3925': attribute type 2 has an invalid length. [ 776.157254][T19438] __nla_validate_parse: 164 callbacks suppressed [ 776.157278][T19438] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3931'. [ 776.258960][T19445] ip_tables: iptables: counters copy to user failed while replacing table [ 776.408227][T19452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3936'. [ 776.898855][T19472] pim6reg: entered allmulticast mode [ 776.899910][T19473] pim6reg: left allmulticast mode [ 777.082739][T19486] ip_tables: iptables: counters copy to user failed while replacing table [ 777.205745][T19489] syzkaller0: mtu less than device minimum [ 777.719364][T19515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3951'. [ 777.732576][T19515] FAULT_INJECTION: forcing a failure. [ 777.732576][T19515] name failslab, interval 1, probability 0, space 0, times 0 [ 777.732608][T19515] CPU: 1 UID: 0 PID: 19515 Comm: syz.0.3951 Not tainted syzkaller #0 PREEMPT(full) [ 777.732642][T19515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 777.732656][T19515] Call Trace: [ 777.732665][T19515] [ 777.732675][T19515] dump_stack_lvl+0xe8/0x150 [ 777.732716][T19515] should_fail_ex+0x3eb/0x540 [ 777.732750][T19515] should_failslab+0xa8/0x100 [ 777.732787][T19515] __kmalloc_cache_noprof+0x9e/0x600 [ 777.732818][T19515] ? netdev_alloc_config+0x4f/0xc0 [ 777.732956][T19515] ? netdev_alloc_config+0x4f/0xc0 [ 777.732988][T19515] ? alloc_netdev_mqs+0xc4a/0x1240 [ 777.733029][T19515] netdev_alloc_config+0x4f/0xc0 [ 777.733062][T19515] alloc_netdev_mqs+0xc84/0x1240 [ 777.733099][T19515] rtnl_create_link+0x321/0xd70 [ 777.733138][T19515] rtnl_newlink_create+0x258/0x7b0 [ 777.733173][T19515] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 777.733205][T19515] ? __pfx___mutex_lock+0x10/0x10 [ 777.733246][T19515] ? ns_capable+0x84/0xe0 [ 777.733285][T19515] rtnl_newlink+0x167a/0x1c30 [ 777.733329][T19515] ? __pfx_rtnl_newlink+0x10/0x10 [ 777.733366][T19515] ? __lock_acquire+0x747/0x2de0 [ 777.733405][T19515] ? __lock_acquire+0x747/0x2de0 [ 777.733452][T19515] ? lock_acquire+0x115/0x350 [ 777.733489][T19515] ? lock_acquire+0x115/0x350 [ 777.733529][T19515] ? __lock_acquire+0x747/0x2de0 [ 777.733560][T19515] ? is_bpf_text_address+0x292/0x2b0 [ 777.733587][T19515] ? __pfx_hook_capable+0x10/0x10 [ 777.733619][T19515] ? kernel_text_address+0xa5/0xe0 [ 777.733651][T19515] ? __pfx_hook_capable+0x10/0x10 [ 777.733674][T19515] ? unwind_get_return_address+0x4d/0x90 [ 777.733736][T19515] ? __pfx_rtnl_newlink+0x10/0x10 [ 777.733756][T19515] rtnetlink_rcv_msg+0x802/0xc00 [ 777.733785][T19515] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 777.733807][T19515] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 777.733830][T19515] ? __lock_acquire+0x747/0x2de0 [ 777.733873][T19515] netlink_rcv_skb+0x226/0x4a0 [ 777.733905][T19515] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 777.733932][T19515] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 777.733980][T19515] ? netlink_deliver_tap+0x2e/0x1b0 [ 777.734012][T19515] ? netlink_deliver_tap+0x2e/0x1b0 [ 777.734053][T19515] netlink_unicast+0x8ef/0xa80 [ 777.734105][T19515] netlink_sendmsg+0x7f0/0xb20 [ 777.734146][T19515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.734185][T19515] ? aa_sock_msg_perm+0x144/0x210 [ 777.734215][T19515] ? apparmor_socket_sendmsg+0x98/0x360 [ 777.734251][T19515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.734283][T19515] sock_sendmsg_nosec+0x14e/0x190 [ 777.734320][T19515] ____sys_sendmsg+0x54e/0x850 [ 777.734352][T19515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 777.734388][T19515] ? import_iovec+0x73/0xa0 [ 777.734423][T19515] ___sys_sendmsg+0x2a5/0x360 [ 777.734445][T19515] ? __lock_acquire+0x747/0x2de0 [ 777.734502][T19515] ? __pfx____sys_sendmsg+0x10/0x10 [ 777.734572][T19515] ? __fget_files+0x3a2/0x420 [ 777.734601][T19515] ? __fget_files+0x2a/0x420 [ 777.734648][T19515] __x64_sys_sendmsg+0x1b1/0x290 [ 777.734678][T19515] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 777.734730][T19515] do_syscall_64+0x166/0x520 [ 777.734757][T19515] ? trace_irq_disable+0x3b/0x140 [ 777.734788][T19515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.734813][T19515] ? clear_bhb_loop+0x70/0xc0 [ 777.734843][T19515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.734867][T19515] RIP: 0033:0x7f0eaab9fb19 [ 777.734890][T19515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.734912][T19515] RSP: 002b:00007f0eabb30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 777.734937][T19515] RAX: ffffffffffffffda RBX: 00007f0eaae25fa0 RCX: 00007f0eaab9fb19 [ 777.734955][T19515] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000005 [ 777.734971][T19515] RBP: 00007f0eabb30090 R08: 0000000000000000 R09: 0000000000000000 [ 777.734986][T19515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 777.735001][T19515] R13: 00007f0eaae26038 R14: 00007f0eaae25fa0 R15: 00007ffcbbce2df8 [ 777.735040][T19515] [ 778.563283][T19533] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3957'. [ 778.792757][T19545] ip_tables: iptables: counters copy to user failed while replacing table [ 778.827789][T19545] syzkaller1: entered promiscuous mode [ 778.827819][T19545] syzkaller1: entered allmulticast mode [ 778.842874][T19546] syzkaller1: entered promiscuous mode [ 778.842939][T19546] syzkaller1: entered allmulticast mode [ 778.857811][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3958'. [ 778.877530][T19546] ip_tables: iptables: counters copy to user failed while replacing table [ 778.884575][T19546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3960'. [ 779.309565][T19567] FAULT_INJECTION: forcing a failure. [ 779.309565][T19567] name failslab, interval 1, probability 0, space 0, times 0 [ 779.309600][T19567] CPU: 0 UID: 0 PID: 19567 Comm: syz.4.3965 Not tainted syzkaller #0 PREEMPT(full) [ 779.309627][T19567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 779.309642][T19567] Call Trace: [ 779.309651][T19567] [ 779.309662][T19567] dump_stack_lvl+0xe8/0x150 [ 779.309703][T19567] should_fail_ex+0x3eb/0x540 [ 779.309736][T19567] should_failslab+0xa8/0x100 [ 779.309772][T19567] __kvmalloc_node_noprof+0x171/0x820 [ 779.309805][T19567] ? rcu_is_watching+0x16/0xb0 [ 779.309840][T19567] ? analyze_subprog+0xb8f/0xac60 [ 779.309868][T19567] ? analyze_subprog+0xb8f/0xac60 [ 779.309903][T19567] analyze_subprog+0xb8f/0xac60 [ 779.309943][T19567] ? is_bpf_text_address+0x26/0x2b0 [ 779.309972][T19567] ? kernel_text_address+0xa5/0xe0 [ 779.310003][T19567] ? __kernel_text_address+0xd/0x30 [ 779.310036][T19567] ? unwind_get_return_address+0x4d/0x90 [ 779.310078][T19567] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 779.310126][T19567] ? stack_trace_save+0xa9/0x100 [ 779.310156][T19567] ? __pfx_stack_trace_save+0x10/0x10 [ 779.310196][T19567] ? __pfx_analyze_subprog+0x10/0x10 [ 779.310227][T19567] ? kasan_save_track+0x4f/0x80 [ 779.310255][T19567] ? kasan_save_track+0x3e/0x80 [ 779.310283][T19567] ? __kasan_kmalloc+0x93/0xb0 [ 779.310312][T19567] ? __kvmalloc_node_noprof+0x50a/0x820 [ 779.310341][T19567] ? call_instance+0x263/0x560 [ 779.310367][T19567] ? bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 779.310397][T19567] ? bpf_compute_live_registers+0x10b0/0x1df0 [ 779.310427][T19567] ? bpf_check+0x2d0b/0x34e0 [ 779.310449][T19567] ? bpf_prog_load+0x14da/0x1c60 [ 779.310470][T19567] ? __sys_bpf+0xd86/0xe00 [ 779.310489][T19567] ? __x64_sys_bpf+0xba/0xd0 [ 779.310519][T19567] ? do_syscall_64+0x166/0x520 [ 779.310546][T19567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.310611][T19567] ? call_instance+0x263/0x560 [ 779.310640][T19567] ? rcu_is_watching+0x16/0xb0 [ 779.310674][T19567] ? call_instance+0x263/0x560 [ 779.310701][T19567] ? trace_kmalloc+0x2a/0xf0 [ 779.310729][T19567] ? call_instance+0x263/0x560 [ 779.310757][T19567] ? __kvmalloc_node_noprof+0x52a/0x820 [ 779.310789][T19567] ? __kvmalloc_node_noprof+0x340/0x820 [ 779.310819][T19567] ? call_instance+0x263/0x560 [ 779.310847][T19567] ? call_instance+0x263/0x560 [ 779.310883][T19567] ? call_instance+0x42e/0x560 [ 779.310921][T19567] bpf_compute_subprog_arg_access+0x2f1/0x15c0 [ 779.310978][T19567] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 779.311016][T19567] ? __kvmalloc_node_noprof+0x340/0x820 [ 779.311046][T19567] ? bpf_compute_live_registers+0x142/0x1df0 [ 779.311083][T19567] ? bpf_compute_live_registers+0x142/0x1df0 [ 779.311122][T19567] bpf_compute_live_registers+0x10b0/0x1df0 [ 779.311179][T19567] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 779.311224][T19567] bpf_check+0x2d0b/0x34e0 [ 779.311261][T19567] ? ktime_get_with_offset+0x93/0x2d0 [ 779.311293][T19567] ? ktime_get_with_offset+0x93/0x2d0 [ 779.311326][T19567] ? __pfx_bpf_check+0x10/0x10 [ 779.311353][T19567] ? bpf_obj_name_cpy+0x194/0x1e0 [ 779.311387][T19567] bpf_prog_load+0x14da/0x1c60 [ 779.311424][T19567] ? __pfx_bpf_prog_load+0x10/0x10 [ 779.311466][T19567] ? __might_fault+0xaf/0x130 [ 779.311497][T19567] __sys_bpf+0xd86/0xe00 [ 779.311529][T19567] ? __pfx___sys_bpf+0x10/0x10 [ 779.311565][T19567] ? __fget_files+0x2a/0x420 [ 779.311613][T19567] ? ksys_write+0x242/0x270 [ 779.311646][T19567] ? __pfx_ksys_write+0x10/0x10 [ 779.311682][T19567] __x64_sys_bpf+0xba/0xd0 [ 779.311718][T19567] do_syscall_64+0x166/0x520 [ 779.311744][T19567] ? trace_irq_disable+0x3b/0x140 [ 779.311775][T19567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.311799][T19567] ? clear_bhb_loop+0x70/0xc0 [ 779.311826][T19567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.311850][T19567] RIP: 0033:0x7fb72859fb19 [ 779.311872][T19567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.311893][T19567] RSP: 002b:00007fb7294e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 779.311917][T19567] RAX: ffffffffffffffda RBX: 00007fb728825fa0 RCX: 00007fb72859fb19 [ 779.311934][T19567] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 779.311949][T19567] RBP: 00007fb7294e0090 R08: 0000000000000000 R09: 0000000000000000 [ 779.311964][T19567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 779.311977][T19567] R13: 00007fb728826038 R14: 00007fb728825fa0 R15: 00007ffd5d7bead8 [ 779.312015][T19567] [ 779.884260][T19571] FAULT_INJECTION: forcing a failure. [ 779.884260][T19571] name failslab, interval 1, probability 0, space 0, times 0 [ 779.884291][T19571] CPU: 1 UID: 0 PID: 19571 Comm: syz.5.3966 Not tainted syzkaller #0 PREEMPT(full) [ 779.884317][T19571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 779.884332][T19571] Call Trace: [ 779.884342][T19571] [ 779.884352][T19571] dump_stack_lvl+0xe8/0x150 [ 779.884410][T19571] should_fail_ex+0x3eb/0x540 [ 779.884446][T19571] should_failslab+0xa8/0x100 [ 779.884524][T19571] ? __pmd_alloc+0xc1/0x5c0 [ 779.884559][T19571] kmem_cache_alloc_noprof+0x9c/0x600 [ 779.884584][T19571] ? alloc_pages_mpol+0x256/0x390 [ 779.884620][T19571] ? __pmd_alloc+0xc1/0x5c0 [ 779.884661][T19571] __pmd_alloc+0xc1/0x5c0 [ 779.884701][T19571] handle_mm_fault+0xe9d/0x3750 [ 779.884749][T19571] ? handle_mm_fault+0xf1/0x3750 [ 779.884800][T19571] ? __pfx_handle_mm_fault+0x10/0x10 [ 779.884851][T19571] ? __lock_acquire+0x747/0x2de0 [ 779.884886][T19571] ? lock_mm_and_find_vma+0xa7/0x340 [ 779.884914][T19571] do_user_addr_fault+0x7f6/0x1480 [ 779.884960][T19571] exc_page_fault+0x6a/0xc0 [ 779.884987][T19571] asm_exc_page_fault+0x26/0x30 [ 779.885009][T19571] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 779.885044][T19571] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 80 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 779.885063][T19571] RSP: 0018:ffffc900044dfb60 EFLAGS: 00050202 [ 779.885086][T19571] RAX: 00007ffffffff001 RBX: 0000000000000028 RCX: 0000000000000028 [ 779.885102][T19571] RDX: 0000000000000001 RSI: 0000200000000440 RDI: ffffc900044dfc00 [ 779.885118][T19571] RBP: 0000000000000000 R08: ffffc900044dfc27 R09: 1ffff9200089bf84 [ 779.885135][T19571] R10: dffffc0000000000 R11: fffff5200089bf85 R12: ffff888036b63e90 [ 779.885152][T19571] R13: dffffc0000000000 R14: ffffc900044dfc00 R15: 0000200000000440 [ 779.885190][T19571] _copy_from_user+0x7a/0xb0 [ 779.885220][T19571] get_user_ifreq+0x6b/0x180 [ 779.885252][T19571] ieee802154_sock_ioctl+0xf1/0x430 [ 779.885290][T19571] ? __pfx_ieee802154_sock_ioctl+0x10/0x10 [ 779.885330][T19571] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 779.885379][T19571] sock_do_ioctl+0x101/0x320 [ 779.885413][T19571] ? __pfx_sock_do_ioctl+0x10/0x10 [ 779.885470][T19571] sock_ioctl+0x57a/0x7e0 [ 779.885500][T19571] ? __fget_files+0x2a/0x420 [ 779.885528][T19571] ? __pfx_sock_ioctl+0x10/0x10 [ 779.885556][T19571] ? __fget_files+0x2a/0x420 [ 779.885585][T19571] ? __fget_files+0x2a/0x420 [ 779.885617][T19571] ? bpf_lsm_file_ioctl+0x9/0x20 [ 779.885650][T19571] ? __pfx_sock_ioctl+0x10/0x10 [ 779.885678][T19571] __se_sys_ioctl+0xfc/0x170 [ 779.885716][T19571] do_syscall_64+0x166/0x520 [ 779.885742][T19571] ? trace_irq_disable+0x3b/0x140 [ 779.885774][T19571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.885799][T19571] ? clear_bhb_loop+0x70/0xc0 [ 779.885828][T19571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.885852][T19571] RIP: 0033:0x7f87da39fb19 [ 779.885874][T19571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.885895][T19571] RSP: 002b:00007f87db1c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.885919][T19571] RAX: ffffffffffffffda RBX: 00007f87da625fa0 RCX: 00007f87da39fb19 [ 779.885936][T19571] RDX: 0000200000000440 RSI: 0000000000008916 RDI: 0000000000000004 [ 779.885951][T19571] RBP: 00007f87db1c8090 R08: 0000000000000000 R09: 0000000000000000 [ 779.885965][T19571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.885979][T19571] R13: 00007f87da626038 R14: 00007f87da625fa0 R15: 00007ffcd699c8c8 [ 779.886017][T19571] [ 780.696787][T19583] netlink: 'syz.4.3972': attribute type 1 has an invalid length. [ 780.753043][T19595] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3973'. [ 780.888018][T19603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3975'. [ 781.103963][T19607] syzkaller1: entered promiscuous mode [ 781.103991][T19607] syzkaller1: entered allmulticast mode [ 781.296545][T19615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3978'. [ 781.326380][T19612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3977'. [ 781.326409][T19612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3977'. [ 782.026859][T19642] ip_tables: iptables: counters copy to user failed while replacing table [ 782.030388][T19643] syzkaller1: entered promiscuous mode [ 782.030412][T19643] syzkaller1: entered allmulticast mode [ 782.149179][T19641] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3987'. [ 783.044985][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.045011][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.078546][T19665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3995'. [ 783.078599][T19665] nbd: socks must be embedded in a SOCK_ITEM attr [ 783.687867][T19698] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4005'. [ 783.690248][T19698] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4005'. [ 783.741811][T19698] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4005'. [ 783.745570][T19693] geneve2: entered promiscuous mode [ 783.777947][T19319] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.780177][T14979] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.780239][T14979] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.780279][T14979] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.087378][T19703] syzkaller1: entered promiscuous mode [ 784.087404][T19703] syzkaller1: entered allmulticast mode [ 784.114175][T19706] ip_tables: iptables: counters copy to user failed while replacing table [ 784.740622][T19719] netlink: 'syz.4.4013': attribute type 1 has an invalid length. [ 784.740648][T19719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4013'. [ 784.760826][T19719] netlink: 'syz.4.4013': attribute type 11 has an invalid length. [ 784.976067][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4015'. [ 785.032928][T19738] syzkaller1: entered promiscuous mode [ 785.032953][T19738] syzkaller1: entered allmulticast mode [ 785.231487][T19742] IPv6: NLM_F_CREATE should be specified when creating new route [ 785.283513][T19744] netlink: 'syz.0.4022': attribute type 6 has an invalid length. [ 785.899724][T14979] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 786.311274][T19787] tipc: Enabled bearer , priority 10 [ 786.450673][T19790] syzkaller1: entered promiscuous mode [ 786.450709][T19790] syzkaller1: entered allmulticast mode [ 786.507572][T19778] infiniband syz0: set down [ 786.507685][T19778] infiniband syz0: added bridge_slave_1 [ 786.556278][T19778] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 786.556323][T19778] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 786.556370][T19778] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 786.651787][T19778] RDS/IB: syz0: added [ 786.651848][T19778] smc: adding ib device syz0 with port count 1 [ 786.651870][T19778] smc: ib device syz0 port 1 has no pnetid [ 787.038163][T19809] __nla_validate_parse: 10 callbacks suppressed [ 787.038187][T19809] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4038'. [ 787.074364][T19809] 8021q: VLANs not supported on wg0 [ 787.081019][T19809] ip_tables: iptables: counters copy to user failed while replacing table [ 787.327500][T17788] tipc: Node number set to 2858199950 [ 787.587485][T19817] netlink: 'syz.4.4042': attribute type 1 has an invalid length. [ 787.648658][T19818] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4042'. [ 788.411492][T19800] rdma_rxe: rxe_newlink: failed to add lo [ 788.708971][T19835] FAULT_INJECTION: forcing a failure. [ 788.708971][T19835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.709007][T19835] CPU: 1 UID: 0 PID: 19835 Comm: syz.4.4049 Not tainted syzkaller #0 PREEMPT(full) [ 788.709034][T19835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 788.709049][T19835] Call Trace: [ 788.709059][T19835] [ 788.709069][T19835] dump_stack_lvl+0xe8/0x150 [ 788.709113][T19835] should_fail_ex+0x3eb/0x540 [ 788.709148][T19835] _copy_from_user+0x2d/0xb0 [ 788.709180][T19835] kstrtouint_from_user+0xd6/0x180 [ 788.709208][T19835] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 788.709243][T19835] ? lock_acquire+0x115/0x350 [ 788.709290][T19835] proc_fail_nth_write+0x8e/0x210 [ 788.709328][T19835] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 788.709373][T19835] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 788.709408][T19835] vfs_write+0x296/0xba0 [ 788.709447][T19835] ? __pfx_vfs_write+0x10/0x10 [ 788.709476][T19835] ? __fget_files+0x2a/0x420 [ 788.709502][T19835] ? __fget_files+0x3a2/0x420 [ 788.709526][T19835] ? __fget_files+0x2a/0x420 [ 788.709556][T19835] ? fdget+0x1ac/0x250 [ 788.709588][T19835] ksys_write+0x150/0x270 [ 788.709619][T19835] ? __pfx_ksys_write+0x10/0x10 [ 788.709659][T19835] do_syscall_64+0x166/0x520 [ 788.709685][T19835] ? trace_irq_disable+0x3b/0x140 [ 788.709715][T19835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.709736][T19835] ? clear_bhb_loop+0x70/0xc0 [ 788.709764][T19835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.709786][T19835] RIP: 0033:0x7fb72856034e [ 788.709808][T19835] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 788.709827][T19835] RSP: 002b:00007fb7294dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 788.709849][T19835] RAX: ffffffffffffffda RBX: 00007fb7294e06c0 RCX: 00007fb72856034e [ 788.709865][T19835] RDX: 0000000000000001 RSI: 00007fb7294e00a0 RDI: 0000000000000004 [ 788.709879][T19835] RBP: 00007fb7294e0090 R08: 0000000000000000 R09: 0000000000000000 [ 788.709893][T19835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.709906][T19835] R13: 00007fb728826038 R14: 00007fb728825fa0 R15: 00007ffd5d7bead8 [ 788.709950][T19835] [ 789.125747][T19838] SET target dimension over the limit! [ 789.167904][T19845] FAULT_INJECTION: forcing a failure. [ 789.167904][T19845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.167940][T19845] CPU: 1 UID: 0 PID: 19845 Comm: syz.0.4053 Not tainted syzkaller #0 PREEMPT(full) [ 789.167967][T19845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 789.167983][T19845] Call Trace: [ 789.167993][T19845] [ 789.168003][T19845] dump_stack_lvl+0xe8/0x150 [ 789.168048][T19845] should_fail_ex+0x3eb/0x540 [ 789.168083][T19845] _copy_to_user+0x31/0xb0 [ 789.168116][T19845] simple_read_from_buffer+0xe1/0x170 [ 789.168153][T19845] proc_fail_nth_read+0x1bb/0x230 [ 789.168194][T19845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.168234][T19845] ? rw_verify_area+0x24a/0x4c0 [ 789.168266][T19845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.168302][T19845] vfs_read+0x213/0xa80 [ 789.168337][T19845] ? __pfx___mutex_lock+0x10/0x10 [ 789.168367][T19845] ? __pfx_vfs_read+0x10/0x10 [ 789.168398][T19845] ? __fget_files+0x2a/0x420 [ 789.168424][T19845] ? __fget_files+0x3a2/0x420 [ 789.168451][T19845] ? __fget_files+0x2a/0x420 [ 789.168484][T19845] ? fdget+0x1ac/0x250 [ 789.168520][T19845] ksys_read+0x150/0x270 [ 789.168552][T19845] ? __pfx_ksys_read+0x10/0x10 [ 789.168595][T19845] do_syscall_64+0x166/0x520 [ 789.168621][T19845] ? trace_irq_disable+0x3b/0x140 [ 789.168658][T19845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.168682][T19845] ? clear_bhb_loop+0x70/0xc0 [ 789.168712][T19845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.168735][T19845] RIP: 0033:0x7f0eaab6034e [ 789.168757][T19845] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 789.168777][T19845] RSP: 002b:00007f0eabb2ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 789.168801][T19845] RAX: ffffffffffffffda RBX: 00007f0eabb306c0 RCX: 00007f0eaab6034e [ 789.168819][T19845] RDX: 000000000000000f RSI: 00007f0eabb300a0 RDI: 0000000000000004 [ 789.168841][T19845] RBP: 00007f0eabb30090 R08: 0000000000000000 R09: 0000000000000000 [ 789.168857][T19845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.168871][T19845] R13: 00007f0eaae26038 R14: 00007f0eaae25fa0 R15: 00007ffcbbce2df8 [ 789.168910][T19845] [ 789.595425][T19852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4055'. [ 789.666146][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4058'. [ 789.666171][T19856] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4058'. [ 789.666190][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4058'. [ 789.940472][T16040] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 789.996699][T19859] syzkaller1: entered promiscuous mode [ 789.996725][T19859] syzkaller1: entered allmulticast mode [ 790.141400][T19883] netlink: 23 bytes leftover after parsing attributes in process `syz.2.4065'. [ 790.141443][T19883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4065'. [ 790.254859][T19887] FAULT_INJECTION: forcing a failure. [ 790.254859][T19887] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 790.254897][T19887] CPU: 1 UID: 0 PID: 19887 Comm: syz.3.4066 Not tainted syzkaller #0 PREEMPT(full) [ 790.254923][T19887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 790.254938][T19887] Call Trace: [ 790.254947][T19887] [ 790.254958][T19887] dump_stack_lvl+0xe8/0x150 [ 790.255002][T19887] should_fail_ex+0x3eb/0x540 [ 790.255036][T19887] prepare_alloc_pages+0x21e/0x5f0 [ 790.255073][T19887] __alloc_frozen_pages_noprof+0x17c/0x410 [ 790.255109][T19887] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 790.255138][T19887] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 790.255172][T19887] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 790.255219][T19887] __alloc_pages_noprof+0x10/0x100 [ 790.255251][T19887] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 790.255300][T19887] ? alloc_pages_noprof+0x140/0x2b0 [ 790.255341][T19887] __kasan_populate_vmalloc+0xb7/0x1c0 [ 790.255377][T19887] alloc_vmap_area+0xd10/0x1410 [ 790.255417][T19887] ? __pfx_alloc_vmap_area+0x10/0x10 [ 790.255437][T19887] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 790.255467][T19887] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 790.255496][T19887] ? __get_vm_area_node+0x155/0x2f0 [ 790.255525][T19887] __get_vm_area_node+0x200/0x2f0 [ 790.255557][T19887] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 790.255583][T19887] ? bpf_check+0x14ae/0x34e0 [ 790.255614][T19887] ? lock_acquire+0x115/0x350 [ 790.255645][T19887] ? hook_capable+0x1c3/0x5e0 [ 790.255675][T19887] ? __pfx_hook_capable+0x10/0x10 [ 790.255710][T19887] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 790.255738][T19887] ? apparmor_capable+0x126/0x170 [ 790.255769][T19887] ? bpf_lsm_capable+0x9/0x20 [ 790.255790][T19887] ? security_capable+0x7e/0x2c0 [ 790.255829][T19887] ? bpf_check+0x14ae/0x34e0 [ 790.255851][T19887] __vmalloc_noprof+0xd2/0x120 [ 790.255875][T19887] ? bpf_check+0x14ae/0x34e0 [ 790.255902][T19887] bpf_check+0x14ae/0x34e0 [ 790.255939][T19887] ? ktime_get_with_offset+0x93/0x2d0 [ 790.255971][T19887] ? ktime_get_with_offset+0x93/0x2d0 [ 790.256003][T19887] ? __pfx_bpf_check+0x10/0x10 [ 790.256031][T19887] ? bpf_obj_name_cpy+0x194/0x1e0 [ 790.256064][T19887] bpf_prog_load+0x14da/0x1c60 [ 790.256102][T19887] ? __pfx_bpf_prog_load+0x10/0x10 [ 790.256144][T19887] ? __might_fault+0xaf/0x130 [ 790.256175][T19887] __sys_bpf+0xd86/0xe00 [ 790.256207][T19887] ? __pfx___sys_bpf+0x10/0x10 [ 790.256242][T19887] ? __fget_files+0x2a/0x420 [ 790.256296][T19887] ? ksys_write+0x242/0x270 [ 790.256329][T19887] ? __pfx_ksys_write+0x10/0x10 [ 790.256365][T19887] __x64_sys_bpf+0xba/0xd0 [ 790.256401][T19887] do_syscall_64+0x166/0x520 [ 790.256428][T19887] ? trace_irq_disable+0x3b/0x140 [ 790.256459][T19887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.256484][T19887] ? clear_bhb_loop+0x70/0xc0 [ 790.256513][T19887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.256537][T19887] RIP: 0033:0x7f8fab79fb19 [ 790.256561][T19887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.256582][T19887] RSP: 002b:00007f8fac65e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 790.256608][T19887] RAX: ffffffffffffffda RBX: 00007f8faba25fa0 RCX: 00007f8fab79fb19 [ 790.256625][T19887] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 790.256641][T19887] RBP: 00007f8fac65e090 R08: 0000000000000000 R09: 0000000000000000 [ 790.256656][T19887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 790.256670][T19887] R13: 00007f8faba26038 R14: 00007f8faba25fa0 R15: 00007ffe6cc1a798 [ 790.256708][T19887] [ 790.261077][T19887] syz.3.4066: vmalloc error: size 13084800, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 790.265695][T19887] CPU: 1 UID: 0 PID: 19887 Comm: syz.3.4066 Not tainted syzkaller #0 PREEMPT(full) [ 790.265762][T19887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 790.265797][T19887] Call Trace: [ 790.265820][T19887] [ 790.265846][T19887] dump_stack_lvl+0xe8/0x150 [ 790.265957][T19887] warn_alloc+0x24d/0x270 [ 790.266044][T19887] ? lockdep_hardirqs_on+0x7b/0x110 [ 790.266121][T19887] ? __pfx_warn_alloc+0x10/0x10 [ 790.266213][T19887] ? kfree+0x1c5/0x650 [ 790.266306][T19887] ? __get_vm_area_node+0x219/0x2f0 [ 790.266389][T19887] __vmalloc_node_range_noprof+0x396/0x16f0 [ 790.266473][T19887] ? lock_acquire+0x115/0x350 [ 790.266557][T19887] ? hook_capable+0x1c3/0x5e0 [ 790.266633][T19887] ? __pfx_hook_capable+0x10/0x10 [ 790.266725][T19887] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 790.266790][T19887] ? apparmor_capable+0x126/0x170 [ 790.266867][T19887] ? bpf_lsm_capable+0x9/0x20 [ 790.266921][T19887] ? security_capable+0x7e/0x2c0 [ 790.267003][T19887] ? bpf_check+0x14ae/0x34e0 [ 790.267058][T19887] __vmalloc_noprof+0xd2/0x120 [ 790.267122][T19887] ? bpf_check+0x14ae/0x34e0 [ 790.267192][T19887] bpf_check+0x14ae/0x34e0 [ 790.267297][T19887] ? ktime_get_with_offset+0x93/0x2d0 [ 790.267376][T19887] ? ktime_get_with_offset+0x93/0x2d0 [ 790.267463][T19887] ? __pfx_bpf_check+0x10/0x10 [ 790.267545][T19887] ? bpf_obj_name_cpy+0x194/0x1e0 [ 790.267657][T19887] bpf_prog_load+0x14da/0x1c60 [ 790.267754][T19887] ? __pfx_bpf_prog_load+0x10/0x10 [ 790.267853][T19887] ? __might_fault+0xaf/0x130 [ 790.267931][T19887] __sys_bpf+0xd86/0xe00 [ 790.268016][T19887] ? __pfx___sys_bpf+0x10/0x10 [ 790.268111][T19887] ? __fget_files+0x2a/0x420 [ 790.268228][T19887] ? ksys_write+0x242/0x270 [ 790.268313][T19887] ? __pfx_ksys_write+0x10/0x10 [ 790.268398][T19887] __x64_sys_bpf+0xba/0xd0 [ 790.268493][T19887] do_syscall_64+0x166/0x520 [ 790.268556][T19887] ? trace_irq_disable+0x3b/0x140 [ 790.268640][T19887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.268694][T19887] ? clear_bhb_loop+0x70/0xc0 [ 790.268767][T19887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.268824][T19887] RIP: 0033:0x7f8fab79fb19 [ 790.268870][T19887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.268930][T19887] RSP: 002b:00007f8fac65e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 790.268999][T19887] RAX: ffffffffffffffda RBX: 00007f8faba25fa0 RCX: 00007f8fab79fb19 [ 790.269048][T19887] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 790.269089][T19887] RBP: 00007f8fac65e090 R08: 0000000000000000 R09: 0000000000000000 [ 790.269128][T19887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 790.269163][T19887] R13: 00007f8faba26038 R14: 00007f8faba25fa0 R15: 00007ffe6cc1a798 [ 790.269260][T19887] [ 790.287760][T19887] Mem-Info: [ 790.287803][T19887] active_anon:6373 inactive_anon:0 isolated_anon:0 [ 790.287803][T19887] active_file:0 inactive_file:44223 isolated_file:0 [ 790.287803][T19887] unevictable:0 dirty:283 writeback:0 [ 790.287803][T19887] slab_reclaimable:14209 slab_unreclaimable:115285 [ 790.287803][T19887] mapped:29957 shmem:572 pagetables:1419 [ 790.287803][T19887] sec_pagetables:0 bounce:0 [ 790.287803][T19887] kernel_misc_reclaimable:0 [ 790.287803][T19887] free:1295718 free_pcp:9158 free_cma:0 [ 790.287966][T19887] Node 0 active_anon:25492kB inactive_anon:0kB active_file:0kB inactive_file:176684kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119828kB dirty:1132kB writeback:0kB shmem:2288kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16308kB pagetables:5536kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 790.288122][T19887] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 790.288279][T19887] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 790.288486][T19887] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 790.291383][T19887] Node 0 DMA32 free:1227896kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25492kB inactive_anon:0kB active_file:0kB inactive_file:176684kB unevictable:0kB writepending:1132kB zspages:0kB present:3129332kB managed:2523116kB mlocked:0kB bounce:0kB free_pcp:36632kB local_pcp:15068kB free_cma:0kB [ 790.291562][T19887] lowmem_reserve[]: 0 0 1 1 1 [ 790.304082][T19887] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 790.304265][T19887] lowmem_reserve[]: 0 0 0 0 0 [ 790.304374][T19887] Node 1 Normal free:3939616kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 790.304543][T19887] lowmem_reserve[]: 0 0 0 0 0 [ 790.304641][T19887] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 790.304923][T19887] Node 0 DMA32: 1040*4kB (UME) 1672*8kB (UM) 572*16kB (UME) 668*32kB (UME) 152*64kB (UM) 45*128kB (ME) 22*256kB (M) 11*512kB (ME) 8*1024kB (ME) 7*2048kB (UME) 276*4096kB (UM) = 1227840kB [ 790.326145][T19887] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 790.326594][T19887] Node 1 Normal: 2*4kB (M) 1*8kB (M) 9*16kB (UM) 10*32kB (UM) 11*64kB (UM) 9*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3939616kB [ 790.329830][T19887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 790.329883][T19887] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 790.329934][T19887] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 790.329986][T19887] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 790.330031][T19887] 44791 total pagecache pages [ 790.330053][T19887] 0 pages in swap cache [ 790.330076][T19887] Free swap = 124996kB [ 790.330099][T19887] Total swap = 124996kB [ 790.330129][T19887] 2097051 pages RAM [ 790.333401][T19887] 0 pages HighMem/MovableOnly [ 790.333435][T19887] 434241 pages reserved [ 790.333458][T19887] 0 pages cma reserved [ 790.737218][T19891] netlink: 'syz.0.4068': attribute type 1 has an invalid length. [ 790.737293][T19891] netlink: 'syz.0.4068': attribute type 268 has an invalid length. [ 790.737329][T19891] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4068'. [ 791.678849][T19894] smc: adding net device macvtap0 with user defined pnetid SYZ0 [ 791.815200][T19911] syzkaller0: entered promiscuous mode [ 791.815227][T19911] syzkaller0: entered allmulticast mode [ 792.497729][T19319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.497755][T19319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.597464][T19933] syzkaller0: entered promiscuous mode [ 792.597490][T19933] syzkaller0: entered allmulticast mode [ 792.759093][T19953] FAULT_INJECTION: forcing a failure. [ 792.759093][T19953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.759125][T19953] CPU: 1 UID: 0 PID: 19953 Comm: syz.2.4081 Not tainted syzkaller #0 PREEMPT(full) [ 792.759151][T19953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 792.759165][T19953] Call Trace: [ 792.759174][T19953] [ 792.759185][T19953] dump_stack_lvl+0xe8/0x150 [ 792.759233][T19953] should_fail_ex+0x3eb/0x540 [ 792.759265][T19953] _copy_to_user+0x31/0xb0 [ 792.759296][T19953] simple_read_from_buffer+0xe1/0x170 [ 792.759332][T19953] proc_fail_nth_read+0x1bb/0x230 [ 792.759373][T19953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 792.759411][T19953] ? rw_verify_area+0x24a/0x4c0 [ 792.759441][T19953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 792.759473][T19953] vfs_read+0x213/0xa80 [ 792.759507][T19953] ? __pfx___mutex_lock+0x10/0x10 [ 792.759537][T19953] ? __pfx_vfs_read+0x10/0x10 [ 792.759566][T19953] ? __fget_files+0x2a/0x420 [ 792.759591][T19953] ? __fget_files+0x3a2/0x420 [ 792.759617][T19953] ? __fget_files+0x2a/0x420 [ 792.759648][T19953] ? fdget+0x1ac/0x250 [ 792.759682][T19953] ksys_read+0x150/0x270 [ 792.759714][T19953] ? __pfx_ksys_read+0x10/0x10 [ 792.759754][T19953] do_syscall_64+0x166/0x520 [ 792.759778][T19953] ? trace_irq_disable+0x3b/0x140 [ 792.759809][T19953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.759832][T19953] ? clear_bhb_loop+0x70/0xc0 [ 792.759861][T19953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.759885][T19953] RIP: 0033:0x7fbbfef6034e [ 792.759907][T19953] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 792.759929][T19953] RSP: 002b:00007fbbffee1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 792.759953][T19953] RAX: ffffffffffffffda RBX: 00007fbbffee26c0 RCX: 00007fbbfef6034e [ 792.759970][T19953] RDX: 000000000000000f RSI: 00007fbbffee20a0 RDI: 0000000000000004 [ 792.759984][T19953] RBP: 00007fbbffee2090 R08: 0000000000000000 R09: 0000000000000000 [ 792.759999][T19953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.760013][T19953] R13: 00007fbbff226128 R14: 00007fbbff226090 R15: 00007ffe85919c98 [ 792.760062][T19953] [ 794.488843][T19972] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 796.729063][T20012] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4093'. [ 796.801392][T20016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.001183][T20028] veth5: entered allmulticast mode [ 797.149453][T20027] veth5: left allmulticast mode [ 797.446020][T20045] FAULT_INJECTION: forcing a failure. [ 797.446020][T20045] name failslab, interval 1, probability 0, space 0, times 0 [ 797.446055][T20045] CPU: 0 UID: 0 PID: 20045 Comm: syz.0.4102 Not tainted syzkaller #0 PREEMPT(full) [ 797.446081][T20045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 797.446095][T20045] Call Trace: [ 797.446105][T20045] [ 797.446115][T20045] dump_stack_lvl+0xe8/0x150 [ 797.446159][T20045] should_fail_ex+0x3eb/0x540 [ 797.446193][T20045] should_failslab+0xa8/0x100 [ 797.446241][T20045] __kmalloc_cache_noprof+0x9e/0x600 [ 797.446269][T20045] ? lock_acquire+0x115/0x350 [ 797.446298][T20045] ? sctp_add_bind_addr+0x8c/0x370 [ 797.446325][T20045] ? sctp_add_bind_addr+0x8c/0x370 [ 797.446360][T20045] sctp_add_bind_addr+0x8c/0x370 [ 797.446393][T20045] sctp_copy_local_addr_list+0x31a/0x4e0 [ 797.446424][T20045] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 797.446453][T20045] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 797.446484][T20045] ? sctp_v6_is_any+0x64/0x80 [ 797.446515][T20045] ? sctp_copy_one_addr+0x93/0x360 [ 797.446547][T20045] sctp_bind_addr_copy+0xb3/0x3c0 [ 797.446576][T20045] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 797.446622][T20045] sctp_connect_new_asoc+0x2ff/0x6b0 [ 797.446659][T20045] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 797.446701][T20045] ? __local_bh_enable_ip+0xd6/0x140 [ 797.446731][T20045] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 797.446763][T20045] ? security_sctp_bind_connect+0x7e/0x2c0 [ 797.446800][T20045] sctp_sendmsg+0x159b/0x2d00 [ 797.446851][T20045] ? __pfx_sctp_sendmsg+0x10/0x10 [ 797.446890][T20045] ? __lock_acquire+0x747/0x2de0 [ 797.446935][T20045] ? aa_sock_msg_perm+0xf5/0x210 [ 797.446957][T20045] ? sock_rps_record_flow+0x19/0x350 [ 797.446988][T20045] ? inet_sendmsg+0x298/0x320 [ 797.447016][T20045] ? __pfx_inet_sendmsg+0x10/0x10 [ 797.447046][T20045] sock_sendmsg_nosec+0x10f/0x190 [ 797.447082][T20045] ____sys_sendmsg+0x54e/0x850 [ 797.447114][T20045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 797.447151][T20045] ? import_iovec+0x73/0xa0 [ 797.447184][T20045] ___sys_sendmsg+0x2a5/0x360 [ 797.447213][T20045] ? __lock_acquire+0x747/0x2de0 [ 797.447248][T20045] ? __pfx____sys_sendmsg+0x10/0x10 [ 797.447280][T20045] ? kstrtouint+0x6e/0xe0 [ 797.447349][T20045] ? __fget_files+0x3a2/0x420 [ 797.447376][T20045] ? __fget_files+0x2a/0x420 [ 797.447415][T20045] __sys_sendmmsg+0x273/0x4e0 [ 797.447448][T20045] ? __pfx___sys_sendmmsg+0x10/0x10 [ 797.447485][T20045] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 797.447532][T20045] ? ksys_write+0x242/0x270 [ 797.447566][T20045] ? __pfx_ksys_write+0x10/0x10 [ 797.447604][T20045] __x64_sys_sendmmsg+0xa0/0xc0 [ 797.447632][T20045] do_syscall_64+0x166/0x520 [ 797.447657][T20045] ? trace_irq_disable+0x3b/0x140 [ 797.447689][T20045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.447713][T20045] ? clear_bhb_loop+0x70/0xc0 [ 797.447742][T20045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.447765][T20045] RIP: 0033:0x7f0eaab9fb19 [ 797.447787][T20045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.447808][T20045] RSP: 002b:00007f0eabb30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 797.447833][T20045] RAX: ffffffffffffffda RBX: 00007f0eaae25fa0 RCX: 00007f0eaab9fb19 [ 797.447851][T20045] RDX: 03ffffffffffffd1 RSI: 0000200000000000 RDI: 0000000000000003 [ 797.447867][T20045] RBP: 00007f0eabb30090 R08: 0000000000000000 R09: 0000000000000000 [ 797.447882][T20045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.447896][T20045] R13: 00007f0eaae26038 R14: 00007f0eaae25fa0 R15: 00007ffcbbce2df8 [ 797.447935][T20045] [ 797.764653][T20042] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4099'. [ 797.955062][T20051] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4104'. [ 798.834609][T20079] syzkaller1: entered promiscuous mode [ 798.834636][T20079] syzkaller1: entered allmulticast mode [ 801.884501][ T1924] block nbd0: Possible stuck request ffff88807fd85080: control (read@0,1024B). Runtime 30 seconds [ 801.885055][ T1924] block nbd0: Possible stuck request ffff88807fd85240: control (read@1024,1024B). Runtime 30 seconds [ 801.885090][ T1924] block nbd0: Possible stuck request ffff88807fd85400: control (read@2048,1024B). Runtime 30 seconds [ 801.885111][ T1924] block nbd0: Possible stuck request ffff88807fd855c0: control (read@3072,1024B). Runtime 30 seconds [ 803.200867][T16037] ip6gretap0: left allmulticast mode [ 803.200896][T16037] ip6gretap0: left promiscuous mode [ 803.201104][T16037] bridge0: port 5(ip6gretap0) entered disabled state [ 803.220659][T16037] batadv_slave_1: left allmulticast mode [ 803.220678][T16037] batadv_slave_1: left promiscuous mode [ 803.220842][T16037] bridge0: port 3(batadv_slave_1) entered disabled state [ 803.244371][T16037] bridge_slave_1: left allmulticast mode [ 803.244399][T16037] bridge_slave_1: left promiscuous mode [ 803.244612][T16037] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.249679][T16037] bridge_slave_0: left allmulticast mode [ 803.249713][T16037] bridge_slave_0: left promiscuous mode [ 803.249848][T16037] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.335403][T16037] pimreg: left allmulticast mode [ 803.624648][T16037] erspan0 (unregistering): left promiscuous mode [ 803.791399][T16037] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 803.810826][T16037] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 803.848879][T16037] bond5 (unregistering): (slave bridge6): Releasing backup interface [ 803.895522][T16037] bond1 (unregistering): (slave ): Releasing active interface [ 803.900674][T16037]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.926066][T16037]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.927066][T16037]  (unregistering): Released all slaves [ 803.955952][T16037] bond1 (unregistering): Released all slaves [ 803.976798][T16037] bond2 (unregistering): Released all slaves [ 804.005153][T16037] bond3 (unregistering): Released all slaves [ 804.030870][T16037] bond4 (unregistering): Released all slaves [ 804.055538][T16037] bond5 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 804.056477][T16037] bond5 (unregistering): Released all slaves [ 804.097721][T16037] bond0 (unregistering): Released all slaves [ 804.239703][T16037] tipc: Left network mode [ 805.377374][T16037] hsr_slave_0: left promiscuous mode [ 805.378243][T16037] hsr_slave_1: left promiscuous mode [ 805.379218][T16037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.829211][T16037] team0 (unregistering): Port device team_slave_1 removed [ 805.875366][T16037] team0 (unregistering): Port device team_slave_0 removed [ 806.455210][T16037] IPVS: stop unused estimator thread 0... [ 808.923861][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.760637][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 812.761555][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 812.776887][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 812.778691][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 812.779315][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 813.097554][T20165] rxe_eth0 speed is unknown, defaulting to 1000 [ 813.299942][T20165] wlan1 speed is unknown, defaulting to 1000 [ 813.397716][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 813.400925][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 813.414152][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 813.430248][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 813.430868][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 813.946092][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 813.948532][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 813.954096][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 813.978685][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 813.979379][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 814.076634][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 814.081049][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 814.090604][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 814.106214][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 814.109341][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 814.466768][T20165] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.468608][T20165] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.468775][T20165] bridge_slave_0: entered allmulticast mode [ 814.474653][T20165] bridge_slave_0: entered promiscuous mode [ 814.491329][T20165] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.491617][T20165] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.495345][T20165] bridge_slave_1: entered allmulticast mode [ 814.508425][T20165] bridge_slave_1: entered promiscuous mode [ 814.564844][T20177] rxe_eth0 speed is unknown, defaulting to 1000 [ 814.628999][T20165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.645590][T20165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.778256][T20165] team0: Port device team_slave_0 added [ 814.794948][T20165] team0: Port device team_slave_1 added [ 814.842041][ T5647] Bluetooth: hci2: command tx timeout [ 814.889777][T20165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.889798][T20165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.889828][T20165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.904165][T20165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.904217][T20165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.904354][T20165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.056767][T20177] wlan1 speed is unknown, defaulting to 1000 [ 815.086479][T20165] hsr_slave_0: entered promiscuous mode [ 815.090849][T20165] hsr_slave_1: entered promiscuous mode [ 815.100386][T20165] debugfs: 'hsr0' already exists in 'hsr' [ 815.100453][T20165] Cannot create hsr debugfs directory [ 815.305032][T20189] rxe_eth0 speed is unknown, defaulting to 1000 [ 815.482043][ T5647] Bluetooth: hci6: command tx timeout [ 815.582884][T20189] wlan1 speed is unknown, defaulting to 1000 [ 815.588562][T20194] rxe_eth0 speed is unknown, defaulting to 1000 [ 815.926583][T20194] wlan1 speed is unknown, defaulting to 1000 [ 816.046133][ T5647] Bluetooth: hci7: command tx timeout [ 816.179822][T20177] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.179950][T20177] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.180097][T20177] bridge_slave_0: entered allmulticast mode [ 816.184957][T20177] bridge_slave_0: entered promiscuous mode [ 816.203693][ T5647] Bluetooth: hci8: command tx timeout [ 816.218743][T20177] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.219023][T20177] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.219438][T20177] bridge_slave_1: entered allmulticast mode [ 816.244966][T20177] bridge_slave_1: entered promiscuous mode [ 816.327123][T20177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.345198][T20177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.414020][T20177] team0: Port device team_slave_0 added [ 816.420906][T20177] team0: Port device team_slave_1 added [ 816.493892][T20177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.493914][T20177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.493943][T20177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.500563][T20177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.500582][T20177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.500612][T20177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.690453][T20177] hsr_slave_0: entered promiscuous mode [ 816.691468][T20177] hsr_slave_1: entered promiscuous mode [ 816.707626][T20177] debugfs: 'hsr0' already exists in 'hsr' [ 816.707652][T20177] Cannot create hsr debugfs directory [ 816.902817][T20189] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.903092][T20189] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.903286][T20189] bridge_slave_0: entered allmulticast mode [ 816.904861][T20189] bridge_slave_0: entered promiscuous mode [ 816.911916][T20189] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.912190][T20189] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.912533][T20189] bridge_slave_1: entered allmulticast mode [ 816.914107][T20189] bridge_slave_1: entered promiscuous mode [ 816.923162][ T5647] Bluetooth: hci2: command tx timeout [ 817.071226][T20189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.115664][T20189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.203876][T20189] team0: Port device team_slave_0 added [ 817.206841][T20189] team0: Port device team_slave_1 added [ 817.282129][T20194] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.282274][T20194] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.282686][T20194] bridge_slave_0: entered allmulticast mode [ 817.284245][T20194] bridge_slave_0: entered promiscuous mode [ 817.292283][T20189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.292301][T20189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.293701][T20189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.300479][T20189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.300534][T20189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.300602][T20189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.394139][T20194] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.394436][T20194] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.394901][T20194] bridge_slave_1: entered allmulticast mode [ 817.410684][T20194] bridge_slave_1: entered promiscuous mode [ 817.508265][T20194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.537612][T20189] hsr_slave_0: entered promiscuous mode [ 817.538425][T20189] hsr_slave_1: entered promiscuous mode [ 817.538982][T20189] debugfs: 'hsr0' already exists in 'hsr' [ 817.538997][T20189] Cannot create hsr debugfs directory [ 817.541477][T20194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.565878][ T5647] Bluetooth: hci6: command tx timeout [ 817.636895][T20194] team0: Port device team_slave_0 added [ 817.639507][T20194] team0: Port device team_slave_1 added [ 817.696841][T20194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.696862][T20194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.696899][T20194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.717953][T20194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.718006][T20194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.718081][T20194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.866727][T20194] hsr_slave_0: entered promiscuous mode [ 817.867569][T20194] hsr_slave_1: entered promiscuous mode [ 817.868165][T20194] debugfs: 'hsr0' already exists in 'hsr' [ 817.868187][T20194] Cannot create hsr debugfs directory [ 818.122206][ T5647] Bluetooth: hci7: command tx timeout [ 818.285553][ T5647] Bluetooth: hci8: command tx timeout [ 818.774672][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 818.777194][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 818.777971][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 818.778981][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 818.779593][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 819.001998][ T5647] Bluetooth: hci2: command tx timeout [ 819.109319][T20238] rxe_eth0 speed is unknown, defaulting to 1000 [ 819.252735][T20238] wlan1 speed is unknown, defaulting to 1000 [ 819.642036][ T5647] Bluetooth: hci6: command tx timeout [ 819.648760][T20238] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.648945][T20238] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.649101][T20238] bridge_slave_0: entered allmulticast mode [ 819.651039][T20238] bridge_slave_0: entered promiscuous mode [ 819.685115][T20238] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.685229][T20238] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.685397][T20238] bridge_slave_1: entered allmulticast mode [ 819.687394][T20238] bridge_slave_1: entered promiscuous mode [ 819.755165][T20238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.758204][T20238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.797422][T20238] team0: Port device team_slave_0 added [ 819.799687][T20238] team0: Port device team_slave_1 added [ 819.833281][T20238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.833303][T20238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.833334][T20238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.834867][T20238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.834884][T20238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.834913][T20238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.975750][T20238] hsr_slave_0: entered promiscuous mode [ 819.976560][T20238] hsr_slave_1: entered promiscuous mode [ 819.977101][T20238] debugfs: 'hsr0' already exists in 'hsr' [ 819.977122][T20238] Cannot create hsr debugfs directory [ 820.202959][ T5647] Bluetooth: hci7: command tx timeout [ 820.376456][ T5647] Bluetooth: hci8: command tx timeout [ 820.842431][ T5647] Bluetooth: hci9: command tx timeout [ 821.084921][ T5647] Bluetooth: hci2: command tx timeout [ 821.721883][ T5647] Bluetooth: hci6: command tx timeout [ 822.283517][ T5647] Bluetooth: hci7: command tx timeout [ 822.446056][ T5647] Bluetooth: hci8: command tx timeout [ 822.922131][ T5647] Bluetooth: hci9: command tx timeout [ 825.012087][ T5647] Bluetooth: hci9: command tx timeout [ 827.081929][ T5647] Bluetooth: hci9: command tx timeout [ 829.714921][ T5647] Bluetooth: hci3: link tx timeout [ 829.714944][ T5647] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 831.721940][ T53] Bluetooth: hci3: command 0x1407 tx timeout [ 831.964588][ T1924] block nbd0: Possible stuck request ffff88807fd85080: control (read@0,1024B). Runtime 60 seconds [ 831.964636][ T1924] block nbd0: Possible stuck request ffff88807fd85240: control (read@1024,1024B). Runtime 60 seconds [ 831.964666][ T1924] block nbd0: Possible stuck request ffff88807fd85400: control (read@2048,1024B). Runtime 60 seconds [ 831.964694][ T1924] block nbd0: Possible stuck request ffff88807fd855c0: control (read@3072,1024B). Runtime 60 seconds [ 834.843795][ T5001] udevd[5001]: worker [19209] /devices/virtual/block/nbd0 is taking a long time [ 862.042354][ T1924] block nbd0: Possible stuck request ffff88807fd85080: control (read@0,1024B). Runtime 90 seconds [ 862.042401][ T1924] block nbd0: Possible stuck request ffff88807fd85240: control (read@1024,1024B). Runtime 90 seconds [ 862.042448][ T1924] block nbd0: Possible stuck request ffff88807fd85400: control (read@2048,1024B). Runtime 90 seconds [ 862.042478][ T1924] block nbd0: Possible stuck request ffff88807fd855c0: control (read@3072,1024B). Runtime 90 seconds [ 870.363717][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.857114][ T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 872.857952][ T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 872.858730][ T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 872.859710][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 872.860376][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 873.188142][T20536] rxe_eth0 speed is unknown, defaulting to 1000 [ 873.418629][T20536] wlan1 speed is unknown, defaulting to 1000 [ 873.444720][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 873.446983][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 873.448209][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 873.449242][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 873.450032][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 873.988679][ T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 874.004954][ T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 874.007448][ T53] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 874.008555][ T53] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 874.009193][ T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 874.328407][T20536] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.330143][T20536] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.330395][T20536] bridge_slave_0: entered allmulticast mode [ 874.354727][T20536] bridge_slave_0: entered promiscuous mode [ 874.366449][T20536] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.368188][T20536] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.368366][T20536] bridge_slave_1: entered allmulticast mode [ 874.370343][T20536] bridge_slave_1: entered promiscuous mode [ 874.479189][T20536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.507369][T20536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.509175][T20547] rxe_eth0 speed is unknown, defaulting to 1000 [ 874.643738][T20536] team0: Port device team_slave_0 added [ 874.650118][T20536] team0: Port device team_slave_1 added [ 874.730666][ T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 874.746789][ T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 874.750510][ T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 874.751500][ T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 874.777966][ T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 874.778661][T20536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.778807][T20536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.778839][T20536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.856309][T20536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.856330][T20536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.856359][T20536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.931987][ T53] Bluetooth: hci10: command tx timeout [ 875.075239][T20536] hsr_slave_0: entered promiscuous mode [ 875.076378][T20536] hsr_slave_1: entered promiscuous mode [ 875.077146][T20536] debugfs: 'hsr0' already exists in 'hsr' [ 875.077178][T20536] Cannot create hsr debugfs directory [ 875.209286][T20559] rxe_eth0 speed is unknown, defaulting to 1000 [ 875.210820][T20547] wlan1 speed is unknown, defaulting to 1000 [ 875.562208][ T53] Bluetooth: hci11: command tx timeout [ 875.719768][T20575] rxe_eth0 speed is unknown, defaulting to 1000 [ 875.728007][T20559] wlan1 speed is unknown, defaulting to 1000 [ 876.094872][T20575] wlan1 speed is unknown, defaulting to 1000 [ 876.121958][ T53] Bluetooth: hci12: command tx timeout [ 876.511418][T20547] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.512200][T20547] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.512715][T20547] bridge_slave_0: entered allmulticast mode [ 876.514440][T20547] bridge_slave_0: entered promiscuous mode [ 876.547456][T20547] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.547533][T20547] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.547687][T20547] bridge_slave_1: entered allmulticast mode [ 876.549000][T20547] bridge_slave_1: entered promiscuous mode [ 876.646836][T20547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.670841][T20547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.754894][T20547] team0: Port device team_slave_0 added [ 876.769466][T20547] team0: Port device team_slave_1 added [ 876.839364][T20547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.839391][T20547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.839423][T20547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.841784][ T53] Bluetooth: hci13: command tx timeout [ 876.898992][T20547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.899012][T20547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.899042][T20547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.004623][ T53] Bluetooth: hci10: command tx timeout [ 877.063848][T20547] hsr_slave_0: entered promiscuous mode [ 877.064978][T20547] hsr_slave_1: entered promiscuous mode [ 877.065751][T20547] debugfs: 'hsr0' already exists in 'hsr' [ 877.065773][T20547] Cannot create hsr debugfs directory [ 877.236545][T20559] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.236703][T20559] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.236819][T20559] bridge_slave_0: entered allmulticast mode [ 877.238078][T20559] bridge_slave_0: entered promiscuous mode [ 877.297460][T20559] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.297593][T20559] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.297710][T20559] bridge_slave_1: entered allmulticast mode [ 877.299026][T20559] bridge_slave_1: entered promiscuous mode [ 877.385339][T20559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.421540][T20559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.467816][T20575] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.468015][T20575] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.468167][T20575] bridge_slave_0: entered allmulticast mode [ 877.469702][T20575] bridge_slave_0: entered promiscuous mode [ 877.511446][T20575] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.511544][T20575] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.512105][T20575] bridge_slave_1: entered allmulticast mode [ 877.516920][T20575] bridge_slave_1: entered promiscuous mode [ 877.546910][T20559] team0: Port device team_slave_0 added [ 877.572263][T20559] team0: Port device team_slave_1 added [ 877.592970][T20575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.618686][T20575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.652134][ T53] Bluetooth: hci11: command tx timeout [ 877.690342][T20559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.690362][T20559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.690392][T20559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.697434][T20575] team0: Port device team_slave_0 added [ 877.702288][T20559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.702331][T20559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.702406][T20559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.766676][T20575] team0: Port device team_slave_1 added [ 877.850915][T20575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.850937][T20575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.850965][T20575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.937224][T20575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.937244][T20575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.937273][T20575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.953186][T20559] hsr_slave_0: entered promiscuous mode [ 877.956424][T20559] hsr_slave_1: entered promiscuous mode [ 877.958800][T20559] debugfs: 'hsr0' already exists in 'hsr' [ 877.958863][T20559] Cannot create hsr debugfs directory [ 878.095671][T20575] hsr_slave_0: entered promiscuous mode [ 878.096863][T20575] hsr_slave_1: entered promiscuous mode [ 878.097778][T20575] debugfs: 'hsr0' already exists in 'hsr' [ 878.097800][T20575] Cannot create hsr debugfs directory [ 878.211884][ T53] Bluetooth: hci12: command tx timeout [ 878.914622][ T5647] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 878.919113][ T5647] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 878.920613][ T5647] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 878.921555][ T5647] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 878.937586][ T5647] Bluetooth: hci13: command tx timeout [ 878.937812][ T5647] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 879.084927][ T5647] Bluetooth: hci10: command tx timeout [ 879.336977][T20608] rxe_eth0 speed is unknown, defaulting to 1000 [ 879.495114][T20608] wlan1 speed is unknown, defaulting to 1000 [ 879.732110][ T5647] Bluetooth: hci11: command tx timeout [ 879.876396][T20608] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.876531][T20608] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.876633][T20608] bridge_slave_0: entered allmulticast mode [ 879.877827][T20608] bridge_slave_0: entered promiscuous mode [ 879.885644][T20608] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.885927][T20608] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.886086][T20608] bridge_slave_1: entered allmulticast mode [ 879.887696][T20608] bridge_slave_1: entered promiscuous mode [ 879.964135][T20608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.968893][T20608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.008857][T20608] team0: Port device team_slave_0 added [ 880.011259][T20608] team0: Port device team_slave_1 added [ 880.043121][T20608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.043142][T20608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.043171][T20608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.045558][T20608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.045574][T20608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.045604][T20608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 880.164625][T20608] hsr_slave_0: entered promiscuous mode [ 880.165721][T20608] hsr_slave_1: entered promiscuous mode [ 880.166355][T20608] debugfs: 'hsr0' already exists in 'hsr' [ 880.166376][T20608] Cannot create hsr debugfs directory [ 880.282433][ T5647] Bluetooth: hci12: command tx timeout [ 881.001991][ T5647] Bluetooth: hci14: command tx timeout [ 881.011928][ T5647] Bluetooth: hci13: command tx timeout [ 881.162062][ T5647] Bluetooth: hci10: command tx timeout [ 881.802186][ T5647] Bluetooth: hci11: command tx timeout [ 882.371964][ T5647] Bluetooth: hci12: command tx timeout [ 883.082362][ T5647] Bluetooth: hci13: command tx timeout [ 883.082377][ T53] Bluetooth: hci14: command tx timeout [ 885.162150][ T53] Bluetooth: hci14: command tx timeout [ 887.241996][ T53] Bluetooth: hci14: command tx timeout [ 892.122289][ T1924] block nbd0: Possible stuck request ffff88807fd85080: control (read@0,1024B). Runtime 120 seconds [ 892.122324][ T1924] block nbd0: Possible stuck request ffff88807fd85240: control (read@1024,1024B). Runtime 120 seconds [ 892.122345][ T1924] block nbd0: Possible stuck request ffff88807fd85400: control (read@2048,1024B). Runtime 120 seconds [ 892.122365][ T1924] block nbd0: Possible stuck request ffff88807fd855c0: control (read@3072,1024B). Runtime 120 seconds [ 922.202104][ T1924] block nbd0: Possible stuck request ffff88807fd85080: control (read@0,1024B). Runtime 150 seconds [ 922.202185][ T1924] block nbd0: Possible stuck request ffff88807fd85240: control (read@1024,1024B). Runtime 150 seconds [ 922.202215][ T1924] block nbd0: Possible stuck request ffff88807fd85400: control (read@2048,1024B). Runtime 150 seconds [ 922.202243][ T1924] block nbd0: Possible stuck request ffff88807fd855c0: control (read@3072,1024B). Runtime 150 seconds [ 931.803633][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.918361][ T5647] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 932.919186][ T5647] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 932.919953][ T5647] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 932.920927][ T5647] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 932.921548][ T5647] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 933.277186][T20630] rxe_eth0 speed is unknown, defaulting to 1000 [ 933.486286][ T5647] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 933.490190][ T5647] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 933.500703][ T5647] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 933.515575][ T5647] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 933.516244][ T5647] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 933.574359][T20630] wlan1 speed is unknown, defaulting to 1000 [ 934.019508][ T53] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 934.021217][ T53] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 934.036657][ T53] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 934.040059][ T53] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 934.040847][ T53] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 934.271522][T20641] rxe_eth0 speed is unknown, defaulting to 1000 [ 934.557939][T20630] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.558932][T20630] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.559099][T20630] bridge_slave_0: entered allmulticast mode [ 934.561058][T20630] bridge_slave_0: entered promiscuous mode [ 934.576048][T20630] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.576142][T20630] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.578063][T20630] bridge_slave_1: entered allmulticast mode [ 934.593298][T20630] bridge_slave_1: entered promiscuous mode [ 934.715412][T20630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.715489][T20641] wlan1 speed is unknown, defaulting to 1000 [ 934.721002][T20630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.810888][T20630] team0: Port device team_slave_0 added [ 934.811507][T20652] rxe_eth0 speed is unknown, defaulting to 1000 [ 934.830420][T20630] team0: Port device team_slave_1 added [ 935.001214][ T53] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 935.011048][ T53] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 935.014652][T19388] Bluetooth: hci15: command tx timeout [ 935.027299][ T53] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 935.029670][T20630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.029688][T20630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.030635][ T53] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 935.031038][T20630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.039707][ T53] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 935.138795][T20630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.138822][T20630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.138852][T20630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.358768][T20630] hsr_slave_0: entered promiscuous mode [ 935.361519][T20630] hsr_slave_1: entered promiscuous mode [ 935.368722][T20630] debugfs: 'hsr0' already exists in 'hsr' [ 935.368787][T20630] Cannot create hsr debugfs directory [ 935.562079][ T53] Bluetooth: hci16: command tx timeout [ 935.614194][T20652] wlan1 speed is unknown, defaulting to 1000 [ 935.961161][T20670] rxe_eth0 speed is unknown, defaulting to 1000 [ 936.122181][ T53] Bluetooth: hci17: command tx timeout [ 936.364521][T20670] wlan1 speed is unknown, defaulting to 1000 [ 936.477353][T20641] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.477467][T20641] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.477630][T20641] bridge_slave_0: entered allmulticast mode [ 936.480347][T20641] bridge_slave_0: entered promiscuous mode [ 936.507217][T20641] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.507513][T20641] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.508002][T20641] bridge_slave_1: entered allmulticast mode [ 936.549195][T20641] bridge_slave_1: entered promiscuous mode [ 936.694564][T20641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.739001][T20641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.816269][T20641] team0: Port device team_slave_0 added [ 936.842392][T20641] team0: Port device team_slave_1 added [ 936.908139][T20641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 936.908158][T20641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.908184][T20641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 936.986474][T20641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 936.986495][T20641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.986525][T20641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.025850][T20652] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.025969][T20652] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.026151][T20652] bridge_slave_0: entered allmulticast mode [ 937.054014][T20652] bridge_slave_0: entered promiscuous mode [ 937.081989][T20695] Bluetooth: hci15: command tx timeout [ 937.091830][T20652] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.091946][T20652] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.092112][T20652] bridge_slave_1: entered allmulticast mode [ 937.098439][T20652] bridge_slave_1: entered promiscuous mode [ 937.162067][T20695] Bluetooth: hci18: command tx timeout [ 937.187040][T20641] hsr_slave_0: entered promiscuous mode [ 937.187887][T20641] hsr_slave_1: entered promiscuous mode [ 937.188690][T20641] debugfs: 'hsr0' already exists in 'hsr' [ 937.188712][T20641] Cannot create hsr debugfs directory [ 937.223722][T20652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.249449][T20652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.339946][T20652] team0: Port device team_slave_0 added [ 937.358538][T20652] team0: Port device team_slave_1 added [ 937.424413][T20652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.424431][T20652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.424456][T20652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.500801][T20652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.500822][T20652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.500854][T20652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.642109][T20695] Bluetooth: hci16: command tx timeout [ 937.710555][T20652] hsr_slave_0: entered promiscuous mode [ 937.711389][T20652] hsr_slave_1: entered promiscuous mode [ 937.719245][T20652] debugfs: 'hsr0' already exists in 'hsr' [ 937.719300][T20652] Cannot create hsr debugfs directory [ 937.833719][T20670] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.833851][T20670] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.833952][T20670] bridge_slave_0: entered allmulticast mode [ 937.835853][T20670] bridge_slave_0: entered promiscuous mode [ 937.866682][T20670] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.866884][T20670] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.867041][T20670] bridge_slave_1: entered allmulticast mode [ 937.868393][T20670] bridge_slave_1: entered promiscuous mode [ 937.963586][T20670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.982857][T20670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.051199][T20670] team0: Port device team_slave_0 added [ 938.071402][T20670] team0: Port device team_slave_1 added [ 938.101051][T20670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.101073][T20670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.101101][T20670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.117448][T20670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.117493][T20670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.117583][T20670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.201950][T20695] Bluetooth: hci17: command tx timeout [ 938.286581][T20670] hsr_slave_0: entered promiscuous mode [ 938.287738][T20670] hsr_slave_1: entered promiscuous mode [ 938.288691][T20670] debugfs: 'hsr0' already exists in 'hsr' [ 938.288712][T20670] Cannot create hsr debugfs directory [ 939.011938][T20695] Bluetooth: hci6: command 0x0406 tx timeout [ 939.012037][T20695] Bluetooth: hci2: command 0x0406 tx timeout [ 939.012066][T20695] Bluetooth: hci7: command 0x0406 tx timeout [ 939.012111][T20695] Bluetooth: hci8: command 0x0406 tx timeout [ 939.155453][T14895] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 939.160726][T14895] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 939.162500][ T5647] Bluetooth: hci15: command tx timeout [ 939.173499][T14895] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 939.195458][T14895] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 939.198591][T14895] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 939.242898][ T5647] Bluetooth: hci18: command tx timeout [ 939.569854][T20705] rxe_eth0 speed is unknown, defaulting to 1000 [ 939.699770][T20705] wlan1 speed is unknown, defaulting to 1000 [ 939.721953][T19388] Bluetooth: hci16: command tx timeout [ 940.097689][T20705] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.097840][T20705] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.098151][T20705] bridge_slave_0: entered allmulticast mode [ 940.099436][T20705] bridge_slave_0: entered promiscuous mode [ 940.107564][T20705] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.107751][T20705] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.108271][T20705] bridge_slave_1: entered allmulticast mode [ 940.112398][T20705] bridge_slave_1: entered promiscuous mode [ 940.178234][T20705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.181150][T20705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.226328][T20705] team0: Port device team_slave_0 added [ 940.228671][T20705] team0: Port device team_slave_1 added [ 940.258582][T20705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.258603][T20705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.258637][T20705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.260130][T20705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.260146][T20705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.260175][T20705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.282358][T19388] Bluetooth: hci17: command tx timeout [ 940.407659][T20705] hsr_slave_0: entered promiscuous mode [ 940.408494][T20705] hsr_slave_1: entered promiscuous mode [ 940.409043][T20705] debugfs: 'hsr0' already exists in 'hsr' [ 940.409065][T20705] Cannot create hsr debugfs directory [ 941.242182][T19388] Bluetooth: hci19: command tx timeout [ 941.242187][T14895] Bluetooth: hci15: command tx timeout [ 941.321860][T19388] Bluetooth: hci18: command tx timeout [ 941.802134][T19388] Bluetooth: hci16: command tx timeout [ 942.361852][T19388] Bluetooth: hci17: command tx timeout [ 943.321966][ T5647] Bluetooth: hci19: command tx timeout [ 943.322400][ T33] INFO: task syz.5.4099:20042 blocked for more than 143 seconds. [ 943.322425][ T33] Not tainted syzkaller #0 [ 943.322437][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 943.322449][ T33] task:syz.5.4099 state:D stack:25336 pid:20042 tgid:20035 ppid:15102 task_flags:0x480140 flags:0x00080002 [ 943.322520][ T33] Call Trace: [ 943.322529][ T33] [ 943.322545][ T33] __schedule+0x17dd/0x5830 [ 943.322580][ T33] ? __lock_acquire+0x747/0x2de0 [ 943.322642][ T33] ? __pfx___schedule+0x10/0x10 [ 943.322668][ T33] ? lock_acquire+0x115/0x350 [ 943.322706][ T33] ? schedule+0x90/0x2b0 [ 943.322734][ T33] schedule+0x164/0x2b0 [ 943.322762][ T33] blk_mq_freeze_queue_wait+0xfc/0x180 [ 943.322909][ T33] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 943.322941][ T33] ? __pfx_autoremove_wake_function+0x10/0x10 [ 943.322999][ T33] queue_limits_commit_update_frozen+0x55/0xd0 [ 943.323065][ T33] nbd_set_size+0x4c5/0x7d0 [ 943.323172][ T33] ? __pfx_nbd_set_size+0x10/0x10 [ 943.323220][ T33] ? nla_memcpy+0x5b/0xc0 [ 943.323265][ T33] nbd_genl_reconfigure+0x7e1/0x1040 [ 943.323344][ T33] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 943.323389][ T33] ? __kmalloc_noprof+0x387/0x710 [ 943.323423][ T33] ? __nla_parse+0x40/0x60 [ 943.323460][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 943.323500][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 943.323535][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 943.323606][ T33] ? __lock_acquire+0x747/0x2de0 [ 943.323760][ T33] genl_rcv_msg+0x614/0x7a0 [ 943.323796][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 943.323821][ T33] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 943.323875][ T33] netlink_rcv_skb+0x226/0x4a0 [ 943.323909][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 943.323936][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 943.323987][ T33] ? down_read+0x2b9/0x320 [ 943.324022][ T33] genl_rcv+0x28/0x40 [ 943.324045][ T33] netlink_unicast+0x8ef/0xa80 [ 943.324106][ T33] netlink_sendmsg+0x7f0/0xb20 [ 943.324147][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.324191][ T33] ? aa_sock_msg_perm+0x144/0x210 [ 943.324222][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 943.324258][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.324290][ T33] sock_sendmsg_nosec+0x14e/0x190 [ 943.324327][ T33] ____sys_sendmsg+0x54e/0x850 [ 943.324359][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 943.324395][ T33] ? import_iovec+0x73/0xa0 [ 943.324429][ T33] ___sys_sendmsg+0x2a5/0x360 [ 943.324452][ T33] ? __lock_acquire+0x747/0x2de0 [ 943.324488][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 943.324518][ T33] ? futex_wait+0x2a2/0x390 [ 943.324582][ T33] ? __fget_files+0x3a2/0x420 [ 943.324610][ T33] ? __fget_files+0x2a/0x420 [ 943.324649][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 943.324678][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 943.324728][ T33] do_syscall_64+0x166/0x520 [ 943.324755][ T33] ? trace_irq_disable+0x3b/0x140 [ 943.324787][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.324812][ T33] ? clear_bhb_loop+0x70/0xc0 [ 943.324841][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.324865][ T33] RIP: 0033:0x7f87da39fb19 [ 943.324886][ T33] RSP: 002b:00007f87db1a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 943.324910][ T33] RAX: ffffffffffffffda RBX: 00007f87da626090 RCX: 00007f87da39fb19 [ 943.324928][ T33] RDX: 0000000000004004 RSI: 0000200000000040 RDI: 000000000000000a [ 943.324944][ T33] RBP: 00007f87da437b70 R08: 0000000000000000 R09: 0000000000000000 [ 943.324957][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 943.324970][ T33] R13: 00007f87da626128 R14: 00007f87da626090 R15: 00007ffcd699c8c8 [ 943.325008][ T33] [ 943.325020][ T33] INFO: task syz.2.4108:20061 blocked for more than 143 seconds. [ 943.325038][ T33] Not tainted syzkaller #0 [ 943.325050][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 943.325061][ T33] task:syz.2.4108 state:D stack:27848 pid:20061 tgid:20060 ppid:16517 task_flags:0x400140 flags:0x00080002 [ 943.325150][ T33] Call Trace: [ 943.325162][ T33] [ 943.325172][ T33] __schedule+0x17dd/0x5830 [ 943.325230][ T33] ? __pfx___schedule+0x10/0x10 [ 943.325256][ T33] ? schedule+0x90/0x2b0 [ 943.325275][ T33] schedule+0x164/0x2b0 [ 943.325295][ T33] schedule_preempt_disabled+0x13/0x30 [ 943.325312][ T33] __mutex_lock+0x7c4/0x15a0 [ 943.325335][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 943.325359][ T33] ? genl_rcv_msg+0x10b/0x7a0 [ 943.325378][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 943.325404][ T33] ? __lock_acquire+0x747/0x2de0 [ 943.325428][ T33] ? radix_tree_lookup+0x240/0x290 [ 943.325450][ T33] genl_rcv_msg+0x10b/0x7a0 [ 943.325472][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 943.325503][ T33] netlink_rcv_skb+0x226/0x4a0 [ 943.325528][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 943.325548][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 943.325584][ T33] ? down_read+0x2b9/0x320 [ 943.325608][ T33] genl_rcv+0x28/0x40 [ 943.325629][ T33] netlink_unicast+0x8ef/0xa80 [ 943.325667][ T33] netlink_sendmsg+0x7f0/0xb20 [ 943.325697][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.325724][ T33] ? aa_sock_msg_perm+0x144/0x210 [ 943.325745][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 943.325771][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.325795][ T33] sock_sendmsg_nosec+0x14e/0x190 [ 943.325819][ T33] __sys_sendto+0x408/0x5a0 [ 943.325850][ T33] ? __pfx___sys_sendto+0x10/0x10 [ 943.325899][ T33] ? do_user_addr_fault+0xd3f/0x1480 [ 943.325925][ T33] __x64_sys_sendto+0xde/0x100 [ 943.325955][ T33] do_syscall_64+0x166/0x520 [ 943.325973][ T33] ? trace_irq_disable+0x3b/0x140 [ 943.325997][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.326015][ T33] ? clear_bhb_loop+0x70/0xc0 [ 943.326035][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.326052][ T33] RIP: 0033:0x7fbbfef6034e [ 943.326066][ T33] RSP: 002b:00007fbbfff01e28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 943.326083][ T33] RAX: ffffffffffffffda RBX: 00007fbbfff036c0 RCX: 00007fbbfef6034e [ 943.326096][ T33] RDX: 0000000000000020 RSI: 00007fbbfff01fe0 RDI: 0000000000000008 [ 943.326107][ T33] RBP: 0000000000000000 R08: 00007fbbfff01ea4 R09: 000000000000000c [ 943.326118][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 943.326128][ T33] R13: 00007fbbfff01ef8 R14: 00007fbbfff01fe0 R15: 0000000000000000 [ 943.326153][ T33] [ 943.326167][ T33] INFO: task syz.4.4109:20066 blocked for more than 143 seconds. [ 943.326179][ T33] Not tainted syzkaller #0 [ 943.326187][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 943.326195][ T33] task:syz.4.4109 state:D stack:24976 pid:20066 tgid:20065 ppid:15565 task_flags:0x400140 flags:0x00080002 [ 943.326241][ T33] Call Trace: [ 943.326247][ T33] [ 943.326256][ T33] __schedule+0x17dd/0x5830 [ 943.326295][ T33] ? __pfx___schedule+0x10/0x10 [ 943.326319][ T33] ? schedule+0x90/0x2b0 [ 943.326338][ T33] schedule+0x164/0x2b0 [ 943.326357][ T33] schedule_preempt_disabled+0x13/0x30 [ 943.326374][ T33] __mutex_lock+0x7c4/0x15a0 [ 943.326397][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 943.326420][ T33] ? genl_rcv_msg+0x10b/0x7a0 [ 943.326439][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 943.326464][ T33] ? __lock_acquire+0x747/0x2de0 [ 943.326488][ T33] ? radix_tree_lookup+0x240/0x290 [ 943.326508][ T33] genl_rcv_msg+0x10b/0x7a0 [ 943.326531][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 943.326562][ T33] netlink_rcv_skb+0x226/0x4a0 [ 943.326586][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 943.326605][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 943.326641][ T33] ? down_read+0x2b9/0x320 [ 943.326666][ T33] genl_rcv+0x28/0x40 [ 943.326683][ T33] netlink_unicast+0x8ef/0xa80 [ 943.326718][ T33] netlink_sendmsg+0x7f0/0xb20 [ 943.326748][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.326776][ T33] ? aa_sock_msg_perm+0x144/0x210 [ 943.326796][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 943.326822][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.326847][ T33] sock_sendmsg_nosec+0x14e/0x190 [ 943.326871][ T33] __sys_sendto+0x408/0x5a0 [ 943.326902][ T33] ? __pfx___sys_sendto+0x10/0x10 [ 943.326949][ T33] ? do_user_addr_fault+0xd3f/0x1480 [ 943.326975][ T33] __x64_sys_sendto+0xde/0x100 [ 943.327003][ T33] do_syscall_64+0x166/0x520 [ 943.327022][ T33] ? trace_irq_disable+0x3b/0x140 [ 943.327045][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.327062][ T33] ? clear_bhb_loop+0x70/0xc0 [ 943.327083][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.327100][ T33] RIP: 0033:0x7fb72856034e [ 943.327113][ T33] RSP: 002b:00007fb7294dee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 943.327129][ T33] RAX: ffffffffffffffda RBX: 00007fb7294e06c0 RCX: 00007fb72856034e [ 943.327141][ T33] RDX: 000000000000001c RSI: 00007fb7294df000 RDI: 0000000000000007 [ 943.327152][ T33] RBP: 0000000000000000 R08: 00007fb7294def04 R09: 000000000000000c [ 943.327168][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 943.327178][ T33] R13: 00007fb7294def58 R14: 00007fb7294df000 R15: 0000000000000000 [ 943.327203][ T33] [ 943.327210][ T33] INFO: task syz.0.4110:20071 blocked for more than 143 seconds. [ 943.327222][ T33] Not tainted syzkaller #0 [ 943.327230][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 943.327237][ T33] task:syz.0.4110 state:D stack:26520 pid:20071 tgid:20070 ppid:15937 task_flags:0x400040 flags:0x00080002 [ 943.327283][ T33] Call Trace: [ 943.327289][ T33] [ 943.327299][ T33] __schedule+0x17dd/0x5830 [ 943.327338][ T33] ? __pfx___schedule+0x10/0x10 [ 943.327362][ T33] ? schedule+0x90/0x2b0 [ 943.327381][ T33] schedule+0x164/0x2b0 [ 943.327400][ T33] schedule_preempt_disabled+0x13/0x30 [ 943.327417][ T33] __mutex_lock+0x7c4/0x15a0 [ 943.327439][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 943.327462][ T33] ? genl_rcv_msg+0x10b/0x7a0 [ 943.327481][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 943.327506][ T33] ? __lock_acquire+0x747/0x2de0 [ 943.327530][ T33] ? radix_tree_lookup+0x240/0x290 [ 943.327550][ T33] genl_rcv_msg+0x10b/0x7a0 [ 943.327572][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 943.327603][ T33] netlink_rcv_skb+0x226/0x4a0 [ 943.327626][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 943.327646][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 943.327683][ T33] ? down_read+0x2b9/0x320 [ 943.327708][ T33] genl_rcv+0x28/0x40 [ 943.327724][ T33] netlink_unicast+0x8ef/0xa80 [ 943.327759][ T33] netlink_sendmsg+0x7f0/0xb20 [ 943.327788][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.327815][ T33] ? aa_sock_msg_perm+0x144/0x210 [ 943.327835][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 943.327861][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.327885][ T33] sock_sendmsg_nosec+0x14e/0x190 [ 943.327909][ T33] ____sys_sendmsg+0x54e/0x850 [ 943.327931][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 943.327956][ T33] ? import_iovec+0x73/0xa0 [ 943.327979][ T33] ___sys_sendmsg+0x2a5/0x360 [ 943.327996][ T33] ? __lock_acquire+0x747/0x2de0 [ 943.328020][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 943.328041][ T33] ? futex_wait+0x2a2/0x390 [ 943.328085][ T33] ? __fget_files+0x3a2/0x420 [ 943.328105][ T33] ? __fget_files+0x2a/0x420 [ 943.328134][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 943.328160][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 943.328195][ T33] do_syscall_64+0x166/0x520 [ 943.328213][ T33] ? trace_irq_disable+0x3b/0x140 [ 943.328236][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.328253][ T33] ? clear_bhb_loop+0x70/0xc0 [ 943.328273][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.328290][ T33] RIP: 0033:0x7f0eaab9fb19 [ 943.328303][ T33] RSP: 002b:00007f0eabb30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 943.328318][ T33] RAX: ffffffffffffffda RBX: 00007f0eaae25fa0 RCX: 00007f0eaab9fb19 [ 943.328330][ T33] RDX: 0000000000000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 943.328341][ T33] RBP: 00007f0eaac37b70 R08: 0000000000000000 R09: 0000000000000000 [ 943.328351][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 943.328361][ T33] R13: 00007f0eaae26038 R14: 00007f0eaae25fa0 R15: 00007ffcbbce2df8 [ 943.328387][ T33] [ 943.328434][ T33] [ 943.328434][ T33] Showing all locks held in the system: [ 943.328460][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 943.328533][ T33] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 943.328641][ T33] locks held by getty/5393: 2, on CPU#1: [ 943.328653][ T33] #0: ffff8880375ed0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 943.328730][ T33] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 943.328808][ T33] locks held by kworker/u9:1/14895: 3, on CPU#1: [ 943.328820][ T33] #0: ffff88806788c148 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 943.328867][ T33] #1: ffffc9000517fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 943.328913][ T33] #2: ffff88805246cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 943.329000][ T33] locks held by udevd/19209: 1, on CPU#0: [ 943.329011][ T33] #0: ffff88802c048350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 943.329097][ T33] locks held by syz.5.4099/20042: 6, on CPU#0: [ 943.329109][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.329146][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.329189][ T33] #2: ffff88802bf24a18 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040 [ 943.329237][ T33] #3: ffff88802a3c3528 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0 [ 943.329274][ T33] #4: ffff88802a3c2ef0 (&q->q_usage_counter(io)#104){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 943.329330][ T33] #5: ffff88802a3c2f28 (&q->q_usage_counter(queue)#86){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 943.329384][ T33] locks held by syz.2.4108/20061: 2, on CPU#1: [ 943.329396][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.329433][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.329476][ T33] locks held by syz.4.4109/20066: 2, on CPU#1: [ 943.329487][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.329524][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.329562][ T33] locks held by syz.0.4110/20071: 2, on CPU#0: [ 943.329573][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.329609][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.329647][ T33] locks held by syz.3.4117/20094: 2, on CPU#0: [ 943.329660][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.329703][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.329742][ T33] locks held by syz-executor/20165: 2, on CPU#0: [ 943.329753][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.329789][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.329827][ T33] locks held by syz-executor/20177: 2, on CPU#0: [ 943.329838][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.329878][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.329916][ T33] locks held by syz-executor/20189: 2, on CPU#1: [ 943.329928][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.329967][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.330005][ T33] locks held by syz-executor/20194: 2, on CPU#0: [ 943.330017][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.330053][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.330093][ T33] locks held by syz-executor/20238: 2, on CPU#0: [ 943.330104][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.330141][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.330185][ T33] locks held by syz-executor/20536: 2, on CPU#1: [ 943.330196][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.330233][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.330270][ T33] locks held by syz-executor/20547: 2, on CPU#0: [ 943.330282][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.330318][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.330356][ T33] locks held by syz-executor/20559: 2, on CPU#1: [ 943.330367][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.330404][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.330442][ T33] locks held by syz-executor/20575: 2, on CPU#1: [ 943.330454][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.330490][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.330530][ T33] locks held by syz-executor/20608: 2, on CPU#1: [ 943.330542][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.330578][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.330617][ T33] locks held by syz-executor/20630: 2, on CPU#1: [ 943.330629][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.330665][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.330703][ T33] locks held by syz-executor/20641: 2, on CPU#0: [ 943.330715][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.330754][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.330793][ T33] locks held by syz-executor/20652: 2, on CPU#0: [ 943.330805][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.330841][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.330881][ T33] locks held by syz-executor/20670: 2, on CPU#1: [ 943.330893][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.330931][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.330971][ T33] locks held by syz-executor/20705: 2, on CPU#0: [ 943.330983][ T33] #0: ffffffff914f05e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 943.331019][ T33] #1: ffffffff914f0420 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 943.331058][ T33] [ 943.331062][ T33] ============================================= [ 943.331062][ T33] [ 943.331076][ T33] NMI backtrace for cpu 1 [ 943.331088][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 943.331111][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 943.331123][ T33] Call Trace: [ 943.331133][ T33] [ 943.331142][ T33] dump_stack_lvl+0xe8/0x150 [ 943.331174][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 943.331191][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 943.331213][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 943.331242][ T33] sys_info+0x135/0x170 [ 943.331265][ T33] watchdog+0x1073/0x10f0 [ 943.331301][ T33] ? watchdog+0x209/0x10f0 [ 943.331329][ T33] kthread+0x38b/0x480 [ 943.331348][ T33] ? __pfx_watchdog+0x10/0x10 [ 943.331369][ T33] ? __pfx_kthread+0x10/0x10 [ 943.331389][ T33] ret_from_fork+0x514/0xb70 [ 943.331419][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 943.331437][ T33] ? __switch_to+0xc78/0x1410 [ 943.331466][ T33] ? __pfx_kthread+0x10/0x10 [ 943.331486][ T33] ret_from_fork_asm+0x1a/0x30 [ 943.331516][ T33] [ 943.331522][ T33] Sending NMI from CPU 1 to CPUs 0: [ 943.331583][ C0] NMI backtrace for cpu 0 [ 943.331598][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 943.331624][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 943.331637][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 943.331671][ C0] Code: db 94 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 ea 26 00 fb f4 3c 17 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 943.331690][ C0] RSP: 0018:ffffffff8fc07ca0 EFLAGS: 00000246 [ 943.331707][ C0] RAX: 00000000001d3527 RBX: ffffffff819c9e60 RCX: 8000000000000001 [ 943.331723][ C0] RDX: 0000000000000001 RSI: ffffffff8e6a2103 RDI: ffffffff8c8e8c80 [ 943.331737][ C0] RBP: ffffffff8fc07d78 R08: ffff8880b8233d9b R09: 1ffff110170467b3 [ 943.331752][ C0] R10: dffffc0000000000 R11: ffffed10170467b4 R12: 0000000000000000 [ 943.331766][ C0] R13: 1ffffffff1f91df8 R14: 1ffffffff1f80f9c R15: dffffc0000000000 [ 943.331782][ C0] FS: 0000000000000000(0000) GS:ffff88812361f000(0000) knlGS:0000000000000000 [ 943.331799][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 943.331813][ C0] CR2: 00007fe57d8aad51 CR3: 00000000279e8000 CR4: 00000000003526f0 [ 943.331831][ C0] Call Trace: [ 943.331838][ C0] [ 943.331846][ C0] default_idle+0x9/0x20 [ 943.331871][ C0] default_idle_call+0x72/0xb0 [ 943.331896][ C0] do_idle+0x2e0/0x540 [ 943.331933][ C0] ? __pfx_do_idle+0x10/0x10 [ 943.331962][ C0] cpu_startup_entry+0x43/0x60 [ 943.331984][ C0] rest_init+0x378/0x3a0 [ 943.332011][ C0] ? __pfx_rest_init+0x10/0x10 [ 943.332043][ C0] ? __pfx_kernel_init+0x10/0x10 [ 943.332070][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 943.332140][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 943.332189][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 943.332219][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 943.332331][ C0] start_kernel+0x392/0x3e0 [ 943.332390][ C0] x86_64_start_reservations+0x24/0x30 [ 943.332461][ C0] x86_64_start_kernel+0x137/0x1b0 [ 943.332489][ C0] common_startup_64+0x13e/0x157 [ 943.332529][ C0] [ 943.332595][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 945.466890][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 945.476009][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 945.486248][ T33] Call Trace: [ 945.489561][ T33] [ 945.492496][ T33] vpanic+0x26f/0x710 [ 945.496518][ T33] panic+0xc5/0xd0 [ 945.500242][ T33] ? __pfx_panic+0x10/0x10 [ 945.504665][ T33] ? wq_watchdog_touch+0xf9/0x160 [ 945.509703][ T33] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 945.515875][ T33] watchdog+0x10e7/0x10f0 [ 945.520224][ T33] ? watchdog+0x209/0x10f0 [ 945.524669][ T33] kthread+0x38b/0x480 [ 945.528754][ T33] ? __pfx_watchdog+0x10/0x10 [ 945.533455][ T33] ? __pfx_kthread+0x10/0x10 [ 945.538067][ T33] ret_from_fork+0x514/0xb70 [ 945.542692][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 945.547823][ T33] ? __switch_to+0xc78/0x1410 [ 945.552533][ T33] ? __pfx_kthread+0x10/0x10 [ 945.557178][ T33] ret_from_fork_asm+0x1a/0x30 [ 945.561981][ T33] [ 945.565660][ T33] Kernel Offset: disabled [ 945.570009][ T33] Rebooting in 86400 seconds..