last executing test programs: 19.735084169s ago: executing program 4 (id=1481): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x4) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={r5, 0xfffffc48}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r6, 0x8b1b, &(0x7f0000000040)) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0xffff}, 0xe) listen(r7, 0x0) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000040)={r8, r9/1000+60000}, 0x10) accept4(r7, 0x0, 0x0, 0x80800) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000300)={'tunl0\x00', 0x4, 0x7}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x3ff, 0x8}, 0x67) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 18.83596592s ago: executing program 4 (id=1505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000206010100000000001e710000000a000000050004000200001b0900020073797a32000000005298f90431200a04c3fe75f6f5cbbee9beffe43dff902b179a0012400000e54a050005000200000005000100"], 0x54}}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x18, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x96d3}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) syz_emit_ethernet(0x6e, &(0x7f00000006c0)=ANY=[@ANYBLOB="33bc228f3cc1b5b42f5236d269929402ff6603f573433730a3b2f3f81f0526da70c4fec9149abc1c4edae84e6f0cc95500d2ed8c9f42174501e3e80708b79e30d26d39fe37bb3425978ab41e64da5d2ed8c3340252bbed17bd7d4e6dc24e5f8cafe4ed0a131a8fd4cf4428a13147b17d4898c3448d013bdfeaec44d554aaf0ab523080527af1d01d3d2da08d6b1d5973520a4ff1f5d99d"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfef8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x60008805}, 0x44800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r4, @ANYRES32=r1, @ANYRESDEC=0x0], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_emit_ethernet(0x36, &(0x7f0000000d00)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x64010102}, {{0x0, 0x8035, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc1}}}}}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x10000000, 0x8001, 0xfd3, 0x0, 0x60000, 0x27, 0xfffffffa, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xd3d1ffa94a24e252}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xfff0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x3}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0x8000}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0xfff3}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0xc040) socket$netlink(0x10, 0x3, 0x0) 18.602729961s ago: executing program 4 (id=1510): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x6b, 0x0, &(0x7f0000000080)="dc188619b95d02ff4284860188a86a4e08", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2, @ANYRESHEX, @ANYRES64=0x0, @ANYRES32=r0, @ANYRES8=r3, @ANYRESDEC=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4c044}, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="18fcfffffcffffff00000000feffffff850000006d000000180000000300000000000000060000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x14) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, &(0x7f0000000440)=0xa) sendmsg$NL80211_CMD_GET_WIPHY(r1, 0x0, 0x41) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 17.201330064s ago: executing program 4 (id=1531): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xe, 0x0, 0xffffffffffffffff, 0xc1aa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000140)='./file0\x00', r5, 0x4000, r4}, 0x18) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) shutdown(r7, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xfff2, 0x4}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x1, 0x7, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4800) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000200000d0a00465025d48a5e546a59d1"], &(0x7f0000000f40)=""/4089, 0x36, 0xff9, 0x1}, 0x28) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0xfffffffe, 0x2a}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x4e23, 0x2000, 0xc24, 0x0, 0xfffffff9}}, 0x44) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) 16.939981129s ago: executing program 0 (id=1537): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x600000a, 0x12, r0, 0x6fcf8000) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'pimreg1\x00'}}, 0x1e) unshare(0x22020680) r1 = socket(0x8, 0x80000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x4b, r3, 0xffffffff}, 0xc) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x9a, &(0x7f0000000b00)=""/154, 0x41000, 0xa}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000240), &(0x7f0000000380)=r9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010480)=@delchain={0x34, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x5, 0x2}, {0x1, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$netlink(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYRES64], 0x20}], 0x1, 0x0, 0x0, 0x20}, 0x0) socket$packet(0x11, 0x2, 0x300) 16.555166049s ago: executing program 2 (id=1540): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0xe4, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x2f, &(0x7f0000002100)={@local, @multicast, @void, {@arp={0x806, @generic={0x2, 0x6006, 0x6, 0xb, 0x3, @random="7e47e7b077bb", "6eaf77eed7f7d5c336dd0d", @empty, "a876"}}}}, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x3, 0xb, 0xbffc}, 0x20) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) (async, rerun: 64) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) (async) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'erspan0\x00', r4, 0x10, 0x40, 0x8, 0x100040, {{0x23, 0x4, 0x2, 0x3, 0x8c, 0x65, 0x1, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_addr={0x44, 0x1c, 0xd6, 0x1, 0x4, [{@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010100, 0x6}]}, @timestamp={0x44, 0x24, 0xb8, 0x0, 0x4, [0x4, 0x5, 0x4, 0x2, 0x7e, 0x4, 0x7, 0xdb1]}, @cipso={0x86, 0x36, 0x3, [{0x3, 0x8, "ba1f98a67d1c"}, {0x5, 0x12, "d8a11764f156a0d771404211dfd0230a"}, {0x0, 0x4, "3fee"}, {0x1, 0x6, "7eb73948"}, {0x6, 0xc, "9e74b75d0c1d4d4f8961"}]}, @end]}}}}}) (async) r6 = socket$inet6(0xa, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) (async) close(0x4) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x46, r5}) (async) sendto$inet6(r0, &(0x7f00000000c0)="db8e80a32c7f05f755194fe4de21d5281535bd48aa867cb710b849e44cf79240e699155ed7a4fba54e71aa49f276b0c58c700dbcef1aa80ba08960fab30d27fbbac363db918ec207e0fd7e2d7ad371dbabe442387b6ed3e90519bc588906d41498d18defa71bb1c27aea5302ae502e93475b0560f66804b2dd069d", 0x7b, 0x44084001, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x385ef14f}, 0x1c) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r8, 0x0) (async, rerun: 64) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x28) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001008000000000000fedbdf2500"], 0x2c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x884) (async, rerun: 64) syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 64) 16.500936896s ago: executing program 1 (id=1542): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b40)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000e00)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0xa5dc347979cd229c}, 0x840) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)={@cgroup=r3, 0x16, 0x1, 0x300, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0]}, 0x40) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd01000000fde1140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 16.500114185s ago: executing program 0 (id=1543): syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @loopback}}}}}}, 0x0) 16.423740537s ago: executing program 4 (id=1545): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) recvmmsg(r0, &(0x7f0000007b40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000001440)=""/4096, 0x5c}], 0x1}, 0x40}], 0x1, 0x100, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.401939321s ago: executing program 2 (id=1547): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x2, 0x3, 0xfe, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x80000000, @rand_addr=' \x01\x00', 0x1694}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}]}, 0x80}, 0x1, 0x7}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x401}, 0x14}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYRESOCT=r4, @ANYRES16=r4, @ANYRESOCT=r2, @ANYRESHEX=r3, @ANYRES64=r3, @ANYRESDEC=r4, @ANYRESOCT=0x0], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000500000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x2070bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r7, {0x6, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-'], 0xfe33) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000140)=@req3={0x401, 0x3a, 0x1000, 0x40, 0x8, 0xf83, 0x4682}, 0x1c) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) 16.346598808s ago: executing program 0 (id=1548): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xd1}, @exit], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x40004, 0x90}, 0x94) 16.259850677s ago: executing program 3 (id=1549): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) 16.253154606s ago: executing program 1 (id=1550): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x11}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000002900)=""/4133, 0x1025}, {&(0x7f0000000080)=""/118, 0x76}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000001c0)=""/45, 0x2d}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4100}, 0x80000}, {{0x0, 0x0, 0x0}, 0x8004007}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x401}], 0x8, 0x2042, 0x0) 16.239927046s ago: executing program 2 (id=1551): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='pids.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f0000000000)=[{&(0x7f0000000280)="95", 0x1}], 0x1, 0x3, 0x8800007c) close(0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendfile(r4, r3, 0x0, 0xf03a0005) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x8fe02, {0x0, 0x0, 0x0, r2, {0x0, 0xffed}, {0x2, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0xf, &(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES32, @ANYRESHEX=r1], &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={r6, 0x0, 0x80000001, 0x8}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001500)}, 0x0) r8 = socket(0x10, 0x2, 0x1ff) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x2d, &(0x7f00000004c0)=0x8073, 0x4) unshare(0x400) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) setsockopt$inet_opts(r9, 0x0, 0xd, &(0x7f0000000600)="7aebc98f5b360b2e9a49443bc162976706ca59e082f543d24220ae7e0cb5b4d17c7cb0a995cec4b2652fc7eb262ab6c5ca7c4a4cb539854cdb67867b91af973ea9daa97e498d55f1df371e0e29b90b04b9c60b3957fa11536df9c7d11f8146ac789207341224d6e1708715972c60a6d1432e6e92c762938a65570a52fe99d3a59efc3fa28ae653364aa1459ca8953a0d4e0b436f485e82e35fc1304ec1a1cd1209d0eabccff031fbb8ab12e009c186c8c6b4a005d7253d74b64a8b8bff72e04ec4926fe21e8bc523c72ab9291f7cbcf8a0e47a987d6f331fff69b954d60b74de447040f0df33af947958e52f04a86706c065c3", 0xf3) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x10000, 0x4, 0xff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'gretap0\x00', r10, 0x700, 0x8000, 0x1, 0x4, {{0x15, 0x4, 0x0, 0x5, 0x54, 0x65, 0x0, 0x3, 0x4, 0x0, @multicast1, @empty, {[@noop, @rr={0x7, 0x13, 0xe9, [@loopback, @multicast1, @multicast2, @loopback]}, @rr={0x7, 0xf, 0xac, [@private=0xa010100, @rand_addr=0x64010101, @loopback]}, @timestamp_addr={0x44, 0x14, 0x10, 0x1, 0x3, [{@local, 0x81}, {@loopback, 0x2}]}, @rr={0x7, 0x7, 0x6d, [@rand_addr=0x64010102]}]}}}}}) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r5, @ANYRES16=0x0, @ANYRESOCT], 0x104}, 0x1, 0x0, 0x0, 0x24008080}, 0x40010) setsockopt$inet_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "343c833f4727198d", "d6dc6894e6861074073d2a939139277a0219e1947c027b103547d5cc77d6be8b", "5e1444ee", "fde1c9582517f0c8"}, 0x38) 16.179562157s ago: executing program 0 (id=1552): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x21, 0x10, 0x0, 0x0, 0x336c}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r0, r1, 0x0, 0x800) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000000)=0xfff) 16.152279056s ago: executing program 3 (id=1553): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'gretap0\x00', 0x0}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x1f00}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x141053, r0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x80d, &(0x7f0000003600)=ANY=[@ANYBLOB="e727dc071f80aaaaaaaaaabb86dd60dd07a707d72c00cb697a653e336f000000500000000000ff0200000000000000000000000000012e14002e"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000003000000000000000102000003"], 0x0) 16.135778809s ago: executing program 1 (id=1554): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001500010300000000000000010a"], 0x14}}, 0x0) recvmsg(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002b40)=""/4081, 0xff1}], 0x1}, 0x10002) 16.075267434s ago: executing program 2 (id=1555): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x80811501, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x0, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x310, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x258, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x800006, 0x0, 0x2f, 0x0, 0x0, 0x80000000, 0x5, 0x3, 0x0, 0x20}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x2, 0x5, 0x4023, 0x20}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x6, 0x1}, {0x4, 0x6, 0x2}, {0x2, 0x2, 0x3}, 0x1, 0x7f}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x3, 0x400, 0x2, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x408) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r4}, 0x38) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x8, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x200, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 16.074337535s ago: executing program 0 (id=1556): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000"], 0x50) socket$inet6(0xa, 0x802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) socket$kcm(0x29, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(r2, r3, 0x0, 0xffffffff000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@delchain={0x214c, 0x65, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x5, 0x8}, {0x1f, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xd76}, @filter_kind_options=@f_bpf={{0x8}, {0x2118, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x8, 0x98, 0x8, 0x3}, {0x4, 0x3, 0x9, 0xfffffff4}, {0x5, 0x1, 0x2, 0x6}]}}, @TCA_BPF_ACT={0x20c8, 0x1, [@m_pedit={0x1ce8, 0x5, 0x0, 0x0, {{0xa}, {0x1ca4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x5, 0xfffffff8, 0x5, 0x8, 0x1}, 0xa, 0x2, [{0x1, 0x1, 0x4, 0x24000, 0x1, 0x7}, {0xfffffffd, 0x8, 0x5, 0x7023, 0x7ff, 0x3}]}, [{0x8, 0x2, 0x4, 0x9, 0x2, 0x5}, {0xffffffff, 0x1571, 0x7, 0x2, 0x1, 0x6}, {0x1, 0x7, 0x0, 0x2, 0x3, 0x8}, {0x80000001, 0x8, 0x8, 0x4, 0x1, 0x73}, {0x3, 0x6, 0xe, 0x7, 0x7918f95c, 0x4}, {0x1b, 0x9, 0x62b1dada, 0xfff, 0x7fff, 0x6a}, {0x6, 0x3, 0x1, 0x10001, 0x44, 0x3}, {0x4, 0x4, 0x1, 0xe31, 0x4, 0x68}, {0xffff7b7a, 0x5, 0xffffffff, 0x80000009, 0x10, 0x1}, {0x1126, 0x4, 0x3, 0x0, 0x2}, {0x40, 0x7, 0xbcc, 0x7, 0x0, 0x3ff}, {0x7, 0x2, 0x4, 0x8001, 0x2, 0x6}, {0xe46, 0x4, 0x7, 0x2, 0x2, 0x57}, {0x7, 0x3d27, 0x4, 0x5, 0x2, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x7, 0x5}, {0x5, 0x4d5, 0x7, 0x2, 0x5, 0x9}, {0x8, 0x2, 0xa5, 0x8, 0xfff, 0x7}, {0x3, 0x5, 0x8001, 0x8}, {0x200, 0x2, 0x1, 0x8, 0xff, 0x5c7b}, {0x28, 0x7, 0x6, 0x10, 0x2}, {0x2, 0x2, 0xffff8000, 0x6, 0x0, 0x3a}, {0x800, 0x2, 0x7, 0x5, 0x7fffffff, 0x8}, {0xc9, 0x3, 0xb, 0x3, 0x7fffffff, 0xff}, {0xfffffffe, 0x5c4, 0x9, 0x0, 0xfffffbff, 0xfffffff7}, {0x1fffc000, 0xffffbf54, 0xea, 0x6, 0x8d7, 0x1}, {0x8, 0x5, 0x6c2, 0x8, 0x7ff, 0x3}, {0x0, 0x3, 0x5, 0x40, 0x4, 0x6}, {0xffffffff, 0x730, 0x4, 0x8001, 0xe0, 0x1ff}, {0xfffffff7, 0xcafa, 0x8, 0x62f3, 0x4, 0x3}, {0x800, 0x1, 0x1ff, 0x35547e4, 0x6, 0x1000}, {0x1, 0x5, 0x0, 0x4, 0x81, 0x9}, {0x400, 0x101, 0x9, 0x0, 0x2, 0x3}, {0x4, 0x7, 0x401, 0xb, 0x1}, {0x1317, 0x1, 0x0, 0x80000001, 0x7, 0x94d}, {0x2, 0x40, 0x6, 0x400019c, 0x9, 0x5}, {0x1, 0xc0fa, 0x2, 0x80, 0x0, 0xff}, {0x81, 0x0, 0x44c, 0x3, 0x1, 0x6}, {0x3, 0xff, 0x5eac1937, 0x100, 0x1}, {0xfffffffe, 0xfff, 0x4, 0x2, 0x28000, 0x7fffffff}, {0x5, 0x1, 0x8, 0x3, 0x1, 0x80}, {0x100, 0x889c, 0xb, 0x8000, 0x0, 0x5}, {0x8, 0x300, 0x1, 0x9, 0x5f80c74e, 0xa59}, {0x6, 0x4, 0x4, 0x4, 0x3, 0x2}, {0x8, 0x0, 0x1, 0x6, 0xade7, 0xfffffffc}, {0x574b, 0x7, 0x4, 0x8}, {0xc, 0x4, 0x8, 0xc1f, 0xf, 0x8000}, {0x5, 0x37f, 0x1000, 0x4, 0x1fc, 0x9}, {0xffff3ecd, 0xffffff45, 0x7f, 0xaee, 0xb, 0x7}, {0x3ff, 0x0, 0xc3, 0x7, 0x80}, {0xc9, 0x9, 0x1, 0x7b0a7f11, 0x200, 0x9}, {0x8, 0xf37, 0x80000001, 0xe, 0x2, 0x500}, {0x0, 0x3, 0x2a81, 0x8001, 0x2, 0x9}, {0x5, 0x6, 0x1000, 0xfffffff9, 0x70e, 0x4}, {0x7, 0x1, 0x5, 0x9, 0xc34, 0x8001}, {0x4, 0x7, 0xcd89, 0x565f, 0x6, 0x1000}, {0x5, 0x3f29cd3c, 0x81, 0x6, 0x6, 0x1ef}, {0x6, 0x9, 0x2, 0x7ff, 0x5, 0x800}, {0x8ab, 0xd3a, 0x4, 0x3, 0xa, 0x3}, {0x80, 0x7fff, 0xc2c000, 0x1, 0x5f3c, 0x4}, {0x10000, 0x8, 0xffffffff, 0x400cf, 0x2, 0x1}, {0x9, 0x86af, 0x7a, 0x3e, 0x1}, {0x2, 0x8000, 0x2, 0x7c, 0x80000001, 0xffffc3d8}, {0xa, 0xb, 0x4, 0x2, 0x4, 0x9}, {0x1, 0x7ff, 0x24, 0x5, 0x7, 0x1}, {0xffffffff, 0x8, 0x0, 0x8001, 0x89, 0x3}, {0xc, 0x1, 0xfffff182, 0x400, 0x2, 0x7fff}, {0xcc, 0x8000, 0x9, 0xfffffff7, 0x4, 0xd08f}, {0xe, 0x9, 0x8, 0xb, 0x0, 0x8}, {0xdb15, 0x40, 0x46fe, 0x5, 0x4, 0x80}, {0x2, 0x200, 0x3, 0x7, 0xe0, 0xcbc1}, {0x7, 0x3, 0x0, 0xed0, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x1, 0xffffffc0, 0x8}, {0x7, 0x3, 0x5, 0xffffffff, 0x400}, {0x14a, 0x7, 0x0, 0x4df6, 0x2, 0x7}, {0x10, 0x0, 0x29, 0xfffffffc, 0x2, 0x101}, {0x4, 0x6, 0x608d, 0x9427, 0x9, 0x1}, {0x40, 0x3, 0x11, 0x9, 0x80000000, 0x8000}, {0x6, 0x3, 0x32c8, 0xef, 0x9346, 0x800}, {0xf, 0x4, 0xfa6, 0x1, 0x7ff, 0x5}, {0x8, 0x5, 0xc, 0x6, 0x104, 0x7}, {0x0, 0x400, 0x1ff, 0x53, 0x7, 0x7f}, {0x4, 0x8, 0x2, 0x7, 0x40, 0x4}, {0x2, 0x6e, 0x4, 0x1000007, 0x2, 0xffff039d}, {0x6, 0x7, 0x80000000, 0x5, 0x6d, 0x8}, {0x9, 0x6, 0x5, 0xf1, 0x3, 0x1}, {0x10, 0x2, 0x745, 0xfffffff9, 0x7, 0x7}, {0x8, 0x9, 0x17e6, 0x8, 0x101, 0x9}, {0xd, 0x9, 0x61, 0x0, 0x916, 0xf8}, {0xfffff870, 0x2, 0x4, 0x89, 0x4, 0x8}, {0x1, 0x9, 0x0, 0x0, 0x6, 0x1}, {0x5a, 0xffff0000, 0x80000001, 0x81, 0x1, 0xfffffff4}, {0x1, 0x4, 0x3, 0x0, 0x4, 0xfffffffc}, {0x1, 0x2, 0xe, 0xcd33, 0x9, 0x8}, {0x5, 0x400, 0x1, 0xd, 0x80000001, 0xf}, {0x3ff, 0x4, 0x3, 0x6b, 0x5, 0x3}, {0x2, 0x100000, 0x5, 0xcc, 0x88e, 0xffffffff}, {0x7fffffff, 0x80, 0x5de1d231, 0x6, 0x3, 0x3}, {0x0, 0x6, 0x1fe, 0x2, 0x9, 0x9}, {0x400, 0xd, 0x5, 0x7, 0x0, 0xd9}, {0xf238, 0x4, 0x1, 0xffff, 0xf99, 0x8}, {0x3, 0x401, 0x1, 0xfffffffa, 0x8000}, {0x5, 0xfff, 0x8100000, 0x100, 0x3, 0x2}, {0x39, 0x5, 0x5, 0x9, 0xffffffff, 0x6}, {0x0, 0xb3df, 0x8, 0xffff, 0x2, 0xa1c7}, {0x800, 0x1, 0x2, 0xb8, 0x4, 0x7}, {0xc1, 0x6, 0x8, 0x6, 0x6}, {0x2, 0x8, 0xfffff001, 0x2, 0x10000, 0x53}, {0xd3, 0x10001, 0xf1, 0x9, 0xa9, 0x7b2f}, {0x76, 0x4, 0xb06e, 0x9, 0x70, 0x1}, {0xf, 0x1, 0x8, 0x9668, 0x1fcf, 0xb70}, {0x6, 0x6, 0xfffffff5, 0x7, 0x7, 0x3}, {0x8, 0x8, 0x6ad, 0x1fa1, 0x29, 0x1ff}, {0x2e90, 0xffff, 0x58, 0xab, 0x3, 0x5}, {0x7, 0x5, 0x5, 0xffffffff, 0x1, 0x6}, {0xfbbb, 0x2, 0x7, 0x5, 0x8, 0x9}, {0x7, 0x5, 0x2, 0x1000, 0xc}, {0x401, 0xee1, 0xfffffe00, 0x0, 0x2, 0x5}, {0x0, 0x480000, 0x282, 0x0, 0xffff2d43, 0x8}, {0x7, 0x4, 0x9, 0xac6, 0x6, 0x9}, {0xfffffff7, 0x0, 0xd, 0x2, 0x4, 0x6}, {0x7fff, 0x10001, 0x1000, 0xffff, 0x4, 0x4}, {0xffff, 0xecb, 0x5, 0x81, 0xfffffe01, 0x10001}, {0x9, 0x8e01, 0xc5, 0xae06, 0x4000, 0x7f}, {0x2, 0x8, 0x5, 0x2, 0x0, 0x5}, {0x0, 0x3225, 0x41, 0x8, 0x1, 0x4}, {0x3, 0x8, 0x8, 0x1, 0x2c1d, 0x6}, {0xe, 0x1, 0xc, 0x8, 0x8, 0xfffffe01}, {0x1d, 0x2, 0x7, 0x0, 0x159, 0x1}], [{0x1}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x6f430f49ed6ac6bd}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x1, 0xf61cabe603c30892}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x1}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4, 0xc6ccb7e81ed9de50}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x2}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x1}, {0xb28d00a83ffcc2c7}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x3}, {0x1}, {0x3, 0x2}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x5}, {0x3, 0x119e686731f243b4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0xf9, 0x8, 0x0, 0x0, 0x6}, 0xc5, 0x5, [{0x4, 0x1d9, 0x6f37, 0x3, 0x1}, {0x0, 0x67497ca5, 0x6ba6, 0x80000000, 0x4, 0x3002}]}, [{0x1, 0x8, 0x8, 0x7, 0x5, 0xfffffe74}, {0x1, 0x6, 0x9, 0xfffffffe, 0x7, 0x9}, {0x0, 0x21a, 0x9, 0x1, 0x800, 0x40}, {0x6, 0x24, 0x111, 0xf, 0x1}, {0x7, 0x69c, 0x400, 0xc7f, 0x5, 0x71}, {0xb40, 0x8, 0xe, 0x9, 0x45a47ecd, 0x5}, {0x3, 0x6b, 0x880, 0x8, 0x1, 0x1000}, {0x9, 0x3, 0xd, 0xfffffff7, 0x4a77, 0x10001}, {0x9, 0x8b5f, 0x2, 0xf, 0xf1a, 0x7}, {0x200, 0xf0000000, 0x3, 0xa6f, 0xb49, 0x7}, {0x8790, 0xffffffb0, 0x7, 0x8, 0xfffff000, 0xffff8000}, {0x3, 0x7, 0x9, 0x7313f36f, 0x1, 0x7ff}, {0xcd9, 0x5c, 0x3ff, 0x7, 0xc0e3, 0xf93e}, {0x4, 0xffffffff, 0x9e, 0xd, 0x3, 0x4}, {0x5, 0xf6, 0x7, 0x1, 0x5, 0x5}, {0x1, 0x1, 0xe, 0x7, 0x2}, {0x82, 0x7c17, 0x770c, 0x4, 0x1, 0x7fff}, {0x5, 0x9, 0x522, 0x7, 0xd23, 0x4}, {0x1, 0x8b29, 0x1, 0x8, 0x2, 0x8}, {0x9, 0x9, 0x9, 0xffff, 0x669, 0xe}, {0x8000, 0x0, 0x6, 0xfb13, 0x291, 0x6}, {0x6, 0x0, 0xc, 0x9}, {0x5658747, 0x3, 0x0, 0x8, 0x6, 0x8}, {0x6, 0x89, 0x5, 0xea, 0x800, 0x7}, {0x4, 0xa, 0x6, 0x3, 0x76, 0x1ff}, {0x7e7, 0x1, 0xd, 0xb9, 0x8, 0x7ff}, {0x3, 0x2, 0x9, 0x7, 0xf72}, {0xe0f, 0x5, 0x800, 0x5, 0x44f5, 0x3}, {0x8, 0x9, 0x1, 0x2a, 0x4, 0x6}, {0x8, 0x9, 0x2, 0x7, 0x3, 0x3}, {0x5, 0x5, 0x1, 0x8, 0x9, 0xfffffffd}, {0x9, 0xe, 0x5, 0x5, 0xfffffe47}, {0x1, 0x8000, 0xf, 0x1, 0x8, 0x7ef}, {0x0, 0x5ae, 0x10, 0x4, 0xd8f, 0x6}, {0x9, 0xc, 0x6, 0xd, 0x8, 0x5}, {0x10000, 0x2, 0x4, 0x80, 0x4, 0x2}, {0x100, 0xc, 0x10000, 0x9, 0x6, 0x7fff}, {0x6, 0x3ff800, 0x0, 0xd, 0x8, 0x1d}, {0x80000000, 0x4, 0x8, 0x7819, 0x400, 0x10}, {0x596, 0x1, 0x1, 0x0, 0x4c81ae93, 0x5d4c}, {0x101, 0x0, 0xe, 0x1948, 0x111, 0x1ff}, {0x7, 0x3, 0x5f31, 0x8, 0x8, 0x8a6b}, {0xf1, 0xffffff80, 0x5, 0x6, 0x5, 0x10000}, {0x5, 0xfffff38e, 0x8, 0x0, 0x2, 0xda}, {0x7, 0x5, 0x95, 0x10f, 0xffffffff, 0x8001}, {0x1, 0x6, 0xfffffffc, 0x0, 0x1, 0xa}, {0x5, 0x1, 0x0, 0x0, 0x1000, 0x7}, {0x8, 0x2, 0x5, 0xf4, 0xf8, 0xe}, {0x80, 0x8f7, 0x5714, 0x6, 0x7fffffff, 0x7}, {0x8, 0x3, 0xb708, 0x80000001, 0x5, 0xff}, {0x6, 0x80000000, 0x354, 0x1ff, 0x3, 0x1}, {0x8, 0x3, 0x758, 0x1, 0xa, 0xfffffffa}, {0x9, 0x0, 0x5, 0xc15, 0x80000001, 0x9}, {0x3, 0x8, 0x4, 0x6, 0x9, 0x5}, {0x101, 0x9, 0x87, 0x1000, 0x8, 0x1}, {0x9, 0x0, 0xfffff000, 0x9, 0x10, 0x7}, {0x86a7, 0x1dbe, 0x6e41, 0xfffffff6, 0x7, 0x101}, {0x7, 0x2, 0x2, 0x7, 0x7, 0xdd9a}, {0x3, 0x4, 0x4, 0x5, 0x2, 0x7}, {0x2, 0x9, 0x2d, 0x2, 0x5, 0x8}, {0xded8, 0x6, 0x9a3, 0xffff, 0x67, 0xa}, {0x4, 0x7, 0x1, 0xffffffff, 0xb, 0x9a2}, {0x21641a49, 0x3, 0x1ff, 0x40, 0x5, 0x2}, {0x18e000, 0x6, 0x8001, 0xffffffff, 0x10001, 0x1}, {0x0, 0x7fff, 0x0, 0xffffffb0, 0x0, 0x140000}, {0x9, 0x101, 0x80000000, 0x2, 0xc39, 0x7}, {0x7, 0x1, 0x8000, 0x4, 0x2, 0x3f3}, {0x7, 0x8000, 0x1, 0x0, 0x1, 0x3}, {0xf, 0x9, 0xb, 0x0, 0xfffffffc, 0xc}, {0x1, 0x4005, 0x7, 0x8001, 0x0, 0xb}, {0x6b9, 0x4, 0x7, 0x4, 0x9, 0x2}, {0x2, 0x3, 0x4d147f5d, 0x3, 0x7fc00, 0x2}, {0x4, 0x1, 0x9, 0x3ff, 0x3, 0x81}, {0x101, 0x7fff, 0x5, 0x7fff, 0x8, 0x6}, {0x6cc, 0xd, 0xe880, 0x1, 0x3, 0x4}, {0x74f2, 0x1c, 0x7f, 0x1aa, 0x1000, 0x7f}, {0x9, 0x1, 0x7fffffff, 0x1, 0x3, 0x6}, {0x100, 0x8, 0x4, 0x7, 0x4, 0x8000000}, {0x4, 0x926, 0x1ff, 0xfffffffb, 0x1, 0x3}, {0x5, 0x6, 0xb, 0x3ff, 0xfffeffff, 0x6}, {0x8, 0x5, 0x6ad, 0x0, 0x5, 0x7}, {0x7, 0x6348, 0xc20, 0xffff7fff, 0xfffffffe, 0x800}, {0x6, 0xa655, 0x7, 0xf4, 0x7, 0x10}, {0x6, 0x5, 0xffff, 0x40, 0x60a45127, 0xd}, {0xec, 0xffffffff, 0x1128, 0x192c, 0xa, 0x800}, {0x5, 0x9, 0x100, 0x5, 0xfffffffa, 0xffffffff}, {0xfff, 0xfff, 0x4, 0x8001, 0x5, 0xe289}, {0xe, 0x1ff, 0x4, 0x4, 0x0, 0x8}, {0x1, 0x9, 0x9, 0x0, 0x6, 0xbfb5}, {0x40000, 0x96, 0xbe5, 0x1ff, 0x8, 0x9}, {0x0, 0x67, 0xff, 0x5, 0x10, 0x8}, {0x20000000, 0x0, 0x7, 0x7, 0x0, 0x8000}, {0x9, 0x4, 0x1, 0x9, 0x3, 0x8000}, {0xb, 0x3, 0x0, 0x8, 0x8b4, 0x7}, {0x86f, 0x1, 0x1, 0x2, 0x3, 0x3}, {0x47, 0x6012, 0x8001, 0xfffffff8, 0x0, 0x5}, {0x0, 0x100, 0x9, 0x6, 0x5, 0x7}, {0xffffffff, 0x8, 0x5a6, 0x8000, 0x2, 0x2}, {0x2e, 0xc7c, 0x4, 0x8000, 0xd, 0xfff}, {0x6, 0x9, 0x0, 0x7, 0x3, 0x6}, {0x4, 0xb3, 0x1, 0x8, 0x7fffffff, 0x2}, {0x28a, 0x5, 0x8, 0x4, 0x7, 0x5}, {0x38, 0x4, 0x4, 0x6, 0x81, 0x3}, {0x8, 0x1000, 0x8, 0x4, 0x5, 0x2}, {0x400, 0xbb, 0x8, 0x5, 0x5, 0x2}, {0x8, 0x9, 0x1, 0xfff, 0x200, 0x471}, {0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, {0x1, 0xa, 0x3a, 0x3ff, 0x7, 0x1137}, {0x0, 0x0, 0x8000, 0x5, 0x5, 0x9}, {0x8001, 0x8e2, 0x7, 0x8, 0x4, 0x1b43}, {0x400, 0x4, 0xc, 0x6, 0x698, 0x6}, {0x6314, 0x0, 0x10001, 0x3ff, 0x8000, 0x7fff}, {0x6, 0x1, 0x5, 0x8, 0x88}, {0x8, 0xf22a, 0xe475, 0xa, 0x8004, 0x744b8102}, {0x7, 0x2a6, 0x8, 0x5, 0x1, 0xd}, {0x5, 0x2, 0x5, 0x9, 0xd9eb12d, 0x5}, {0xd8, 0x1, 0x7, 0x3d, 0x100}, {0xe, 0x0, 0x10000, 0x3, 0x800, 0x6}, {0x68000000, 0x1, 0xfff, 0x3, 0x67, 0x8}, {0x101, 0x4, 0x8, 0x4, 0x1000, 0xfffffffe}, {0xa28d, 0x4, 0xffffff7e, 0xcf, 0x7fffffff, 0x2}, {0x80b, 0x54, 0xe02, 0xd90a, 0xd, 0x3}, {0x7645, 0x2, 0x4c9, 0x800, 0x3, 0x1}, {0x8, 0x37, 0x3, 0x9, 0x2, 0x3}, {0x3, 0x3, 0x8, 0x3, 0x0, 0xfffffdbc}, {0xfffffffe, 0x1, 0xd89e, 0x1000, 0x3, 0xffff}, {0x9, 0xf574e1e, 0x3, 0x0, 0x8, 0xb}, {0xfffffff2, 0x8, 0x3, 0x6, 0x5, 0x7ff}], [{0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0xaf8bba8d0517b9e0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x2}, {}, {}, {0x3}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x46ad83950480526d}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}], 0x3}}]}, {0x1c, 0x6, "ad708099198a0ec1c38872c6b6baebd4c106afa40a3f91a9"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x6c, 0xb, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x6, 0x2, 0x4, 0x400}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0xff, 0xfe, 0x8}]}]}, {0x13, 0x6, "6d36347a1242181465b574a64f523b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x114, 0x5, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0xde, 0x6, "69deacbdb4d5354b30928698782d736f79e7c689cee4c3027b569f62a841f2be5fc5fa659f7c79d435fdb9eb4130bd9a6e3eb3200751586ff5ebdbe62df3b5244259af3f5ab21497e550eb025982bb3aa9d76283e85cc2b6f4eba308b31283715dd3781e328e5a49c8fc610eb9a8974697a5f320053b221f97769a90b0caea859a8a0cbe58102aaff47f853d9ee7bf8f72ca959b7262a0819604a2d6ba6413d1e50f9c88ed91e089a5c2afb38e863f46d780a1b627ed66d93754d9a23cc9588ffebf1dd4753859e1a9c0d2ed16fd969b8d5943a06cfc9b822dcf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x25c, 0x15, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x72523fe1, 0x7, 0x0, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x4, 0x5, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x3, 0x20000004, 0xb, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4674, 0xa444, 0x2, 0x7d2b, 0xb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xaa4, 0x6, 0xffffffffffffffff, 0x2, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6366, 0x5, 0xc, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x2, 0x2, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x20000003, 0x6, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa3c, 0x967, 0x5, 0x6, 0x80000001}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x480, 0x3, 0x8001, 0x2d5}, 0x1}}]}, {0xee, 0x6, "d5ef8b5f42f53bb630ae6a50d648f8db0da6ec9de7b6ed4b891485781d2737a05144751ea216feb8fea7f028badf7d9963b01a1342cb62d463074d2b2a31fda8391398621e9540f33c7156ca45fda84d4f64296dcbd827f37628708490db199c49ad999ec23719dfa8575af2554fde2bc5a24ea7eca62ed49122be5e79147a6b087cda880c7b4cfd2a29f74807ee36fe5c6584c9e5aa2d114b4d0dbc2a672d21e1f20f6acee403ac8599a3095cd44241a7ca22609226f1108b4d2467c57efec0af77b76e2326fcb8b5c378501c0d2a914d28304beac051584d3f064e9f573a85b5b42c8dd95d94696b4d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}]}, 0x214c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 16.043879387s ago: executing program 3 (id=1557): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x2b3c2a1e4a4c63e8, 0x800, 0x7ff, 0x6}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) socket$inet6(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, 0x0, 0x17000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2}, 0x20) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x300}, 0xe) 16.03855226s ago: executing program 1 (id=1558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206010800000000000020000700000114000780080011400000008b05001500200000000500010006000000050005000200000005000400020000000900020073797a300000000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) 15.975557962s ago: executing program 2 (id=1559): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x20000, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x5, 0x4, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x50}}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=""/4136, 0x1028}], 0x1}, 0x10100) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1728}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) accept4$alg(r0, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa, 0x1}, 0x28) syz_emit_ethernet(0x9e, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x68, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x2, [{0x3, 0x9, "bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}]}}}}}}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x33, &(0x7f0000000040), 0x4) 15.936077978s ago: executing program 1 (id=1560): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x1c8, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xffffffff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0521000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 15.920369754s ago: executing program 3 (id=1561): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x2, 0x3, 0xfe, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x80000000, @rand_addr=' \x01\x00', 0x1694}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}]}, 0x80}, 0x1, 0x7}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x401}, 0x14}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYRESOCT=r4, @ANYRES16=r4, @ANYRESOCT=r2, @ANYRESHEX=r3, @ANYRES64=r3, @ANYRESDEC=r4, @ANYRESOCT=0x0], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000500000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x2070bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r7, {0x6, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-'], 0xfe33) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000140)=@req3={0x401, 0x3a, 0x1000, 0x40, 0x8, 0xf83, 0x4682}, 0x1c) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) 15.744538986s ago: executing program 1 (id=1562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'ipvlan0\x00', {0x2}, 0x136a}) socket$nl_crypto(0x10, 0x3, 0x15) getpid() ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40001) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7ff, 0x7f}}}}, 0xfdef) 15.586895647s ago: executing program 4 (id=1563): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000087020000f8ffffffb70300000800001eb704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@allocspi={0x1dc, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@private2, 0x4e24, 0x5, 0x4e22, 0x8175, 0x2, 0x80, 0x40, 0x16}, {@in=@multicast1, 0x4d2, 0xf7b07c621d3cd55b}, @in=@multicast1, {0x45, 0x1, 0x9, 0x9, 0x8, 0x8, 0xfffffffffffff800, 0x6}, {0x9, 0xc, 0x6}, {0x8, 0x3, 0x3}, 0x70bd2a, 0x3503, 0x2, 0x4, 0x6, 0x99}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdffffff00000008fa000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r7, 0x64e90, 0x16ac1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000feff04000000"], 0x50) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x12) 15.3224078s ago: executing program 3 (id=1564): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'batadv_slave_0\x00', {}, 0x6}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xfff, 0x3, 0xc}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000d80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000140)={0xbd4, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xaa4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0xfc, 0x7f, [@ht={0x2d, 0x1a, {0x302, 0x1, 0x5, 0x0, {0x0, 0x2, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2}, 0x400, 0x8, 0x80}}, @ht={0x2d, 0x1a, {0x1, 0x3, 0x7, 0x0, {0x2, 0x10, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x6}}, @tim={0x5, 0x80, {0x40, 0xc3, 0x7, "20d61c827de351120e2d3bfe900ebae4acd40d9279f59ff804a17302adfc8fc14e14f6b97beeb20bd52b5c500bc3f8011d3879730264aa0318393651bb9a73163a39ec50b2ca4d569583666b0e6ad55f04e3acd636079a748d9a53413f3db2c7224b6238413e865f39342aa0b1ed38769d936922a29fc443c4a182462c"}}, @chsw_timing={0x68, 0x4, {0x8001, 0x3}}, @ibss={0x6, 0x2, 0xda5}, @mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0x9, 0x8001}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @mic={0x8c, 0x10, {0x599, "3833d9c719e2", @short="69d615078f1bf511"}}]}, @NL80211_ATTR_BEACON_TAIL={0x60, 0xf, [@channel_switch={0x25, 0x3, {0x0, 0x8, 0x5}}, @preq={0x82, 0x36, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x8d, 0x2, 0x2, @device_a, 0xf58d, @value=@device_b, 0x7d0ea365, 0x7fffffff, 0x2, [{{0x1, 0x0, 0x1}, @device_b, 0x6}, {{0x1, 0x0, 0x1}, @broadcast, 0x4}]}}, @mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0x5, 0x7f, @broadcast, 0xffffff80, 0x3}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0xfff7, 0x1, 0x3, 0x66, 0x5, 0x6]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x18, 0xba, [0x484, 0x81, 0x800, 0x6, 0x1, 0x3, 0x682, 0x1, 0x3, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x8, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x4, 0x6, 0x6, 0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x18, 0xba, [0x324, 0x4, 0xc, 0x9, 0x7, 0x8, 0xe, 0x6e, 0x96, 0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x3, 0x1, 0x5, 0x100]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x100]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x5c2, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x1b2, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1b5}, @broadcast, @device_b, @random="b135f944e707", {0xd, 0x5}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x5, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x8e, {0x2, 0x20, 0x6, "6bd53094e5f15117aa434ebeef72c18d9445877db4a6deaf5dbaacb4160de93318d2a581f8cc124b99597b598a4d4ad7cafa051f1345973bcbfd3169aea0a3756e5003f5a774e5313eb166187f62c068826ac381618a97b25517522d904e2bf4ef0ce5b92c94a724333c75a0abb486e22015572b76f525266f257616ebaaea3fc3a42f0cbe62014be74ad8"}}, @val={0x25, 0x3, {0xd6, 0xb, 0x3}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}}, @val={0x76, 0x6, {0x6, 0xfd, 0x16, 0x400}}, [{0xdd, 0x48, "00743b7e5e5385bc09c3456484161b925d3c531ce6aec81b9c8c98638f20a00a9d58b1860afa5ddbb17decbfeeca076e78cdc292b434bceb4fc16956aaf01d2267b44f437200c083"}, {0xdd, 0x8c, "82a4b6abfe299fcb5063e93e1d70797f7bee6aa4dec2c8d9233c29d9dbae9a345a23d1828f886346cdbc143263d4dc6341863dc266f51faef7a234dfcb4c874a71153b47a85328dd463f40bfc3b313ddfaff200ca49bad5cd4d990ad05d833d8e2d151248d41ceb445b172dbae7dd167a42dc4aacee0527d23a6d626bf10bca611bc590ac01634d73d607ebe"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x164, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x48, 0x2, "459261a630927da9b31f812cd4d2ed0fa2dc3db45defa3a1b789bd443213bd22e7304523553e4760fcfc92bdbaf83ea96b1d024dc8d2a7bcc5b08ad88658ca8cf106b4b2"}, @NL80211_FTM_RESP_ATTR_LCI={0x71, 0x2, "8803b0fe26acee4576705b73bdd3a9354cb00d32c6dfc132be1a5eb298bf369c900d2b401fee7ae640e41bf0e3fba637fd0de23a0d1033f2229269a68880f7d68df2bb836772f576048854769267158f8cee22273a0c8043e2793ab7eac29f65487aec2ac0df653e3c50c70e0f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x19, 0x3, "d3457d69e38d0526450f29f1e2da95275fccd1dd37"}, @NL80211_FTM_RESP_ATTR_LCI={0x7d, 0x2, "ede87c59325749c4431bd645d578a392cc4d3daabba6e5d56088177f78362325aa5665389b64ff10f3c7d9d8533fcf39a52eec6de6f1876827f7769e24832c0e0c5a79763579559cf6dbb279e24aca74ee7fea1c6a657f63969b0a9b252580d1b1bea5f4cc173755bdf7a07469ff4b652dc4c19d31b025c56a"}]}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf5}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x6c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x5, 0x3, 0x1, 0x25, 0x9, 0xff, 0x100, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x7, 0x1, 0x1, 0x80, 0xff, 0x3, 0x5, 0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x18, 0xba, [0x8001, 0x9, 0x3ff, 0x4240, 0x9, 0x4, 0x7fff, 0xcd, 0x600, 0x3]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x3ff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x18, 0xba, [0xfff, 0xcc3, 0x42, 0x6, 0x30d, 0x1000, 0xc8, 0xa, 0x2, 0x7f]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}]]}, 0xbd4}, 0x1, 0x0, 0x0, 0x4000081}, 0x804) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0x90, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0x39, 0xa8, @random="913ec47c5e6d1c825afb02371c62cf6a7c81d3b2a78527f0b7e95557f28d5facb12a28162a58c360aaf9d8d72018955048adf16fef"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r6 = accept(r0, &(0x7f0000000f80)=@ax25={{0x3, @rose}, [@default, @bcast, @netrom, @default, @remote, @bcast, @default, @netrom]}, &(0x7f0000001000)=0x80) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000001040)={0x0, 0x0, 0x8000, 0xde0, 0x100, 0x8}, &(0x7f0000001080)=0x14) setsockopt$inet_sctp_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000010c0)={r7, 0x7ff, 0x1, 'v'}, 0x9) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001180)={'syztnl1\x00', &(0x7f0000001100)={'gre0\x00', 0x0, 0x700, 0x7, 0x9, 0x0, {{0xd, 0x4, 0x2, 0x9, 0x34, 0x67, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0x64010102, {[@generic={0x82, 0x12, "c822bddbc4d19b14bee5b7739b635d72"}, @timestamp_prespec={0x44, 0xc, 0x34, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}]}}}}}) connect$packet(r6, &(0x7f00000011c0)={0x11, 0x4, r8, 0x1, 0xff, 0x6, @broadcast}, 0x14) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001240), r2) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0xb0, r9, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x67}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0xc010) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001440)={'sit0\x00', &(0x7f00000013c0)={'gretap0\x00', r8, 0x8, 0x1, 0x8, 0x7, {{0x9, 0x4, 0x1, 0x0, 0x24, 0x64, 0x0, 0x80, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@ssrr={0x89, 0xb, 0xcd, [@private=0xa010102, @multicast2]}, @ra={0x94, 0x4}]}}}}}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), r6) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001880)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001840)={&(0x7f0000001500)={0x340, r11, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x13c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\a\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_MASK={0xd2, 0x5, "8150c84396ed727233253768092f916a6a94765b56caa346a0b21eaf3c26805e09e20699fa77756c8fabf96f1e759bf5319aaf0439afc6d8687c7e09180672e678de68abf85c412f52f678f9a71639613b27128bfd5c93ab79f95614d0799aa964407ead2ff1322a3b7f8c0fcfeb920741a6dd414f2d0fd440acb4e2d8cc2bf7428874fe6c595cad05c3f4cca65637ed22ddd3687b6d0916dd8c91feba8c774251012c796c3b9e70dcf069d2f3263dab80845551b67b7e3dface6bb09bfe5c48ca007cceda9542c56bb97098b63d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1d, 0x5, "eea11c0564fe14e4751de3c580929b25cb5f1b9b4ab4822eec"}]}, @ETHTOOL_A_FEATURES_WANTED={0x1b4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x51, 0x4, "201eed50e2fef5ec55a3a3b9eac40a785d8b5d0d262fc42f1c411fed11630aa7f97f60c2f101138b7e27dd01f866c657b316d759a4adc5c56ab7ebde5cb413843a2f745a82e4a539be0aa100a2"}, @ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xae}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x84*%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'secondname\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2573}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x63b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x1e, 0x2, '\\--~(]+\\%%$}/-:*\'(-/$@!\xffJ\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x03\x03\x03\x03\x03\x03'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x77, 0x4, "be081cd1bd8235ef8925fb42cc0ec0ca2c2367399ce4eef5ce334cddeb2abc16df8845b1bb7bdde9680d88010b7b678bf396574cc825ea23bccbdd8d794b4175f36e3626f16c563b45fba387a0c6fdff221b451a601a5d9327a825ef65925ae3f276f674ffca313cc0b26577f87fabde912c55"}]}]}, 0x340}}, 0x81) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001980)={'ip6_vti0\x00', &(0x7f0000001900)={'syztnl1\x00', r8, 0x29, 0x6, 0x5, 0x5, 0x19, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x7, 0x7, 0x35a6}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000019c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001a80)={'ip6tnl0\x00', &(0x7f0000001a00)={'syztnl0\x00', r8, 0x2b, 0x6c, 0x5, 0x3, 0x56, @loopback, @dev={0xfe, 0x80, '\x00', 0x22}, 0x20, 0x40, 0x1, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001b40)={'ip6_vti0\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', r10, 0x29, 0x8, 0xd, 0x10, 0x2, @mcast1, @empty, 0x80, 0x20, 0x80000000, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001d00)={'gretap0\x00', &(0x7f0000001b80)={'syztnl1\x00', r8, 0x7, 0x40, 0x10000, 0xfffffff8, {{0x4b, 0x4, 0x1, 0x8, 0x12c, 0x68, 0x0, 0x7, 0x29, 0x0, @local, @empty, {[@rr={0x7, 0xf, 0xa9, [@initdev={0xac, 0x1e, 0x8, 0x0}, @local, @loopback]}, @cipso={0x86, 0x5b, 0x2, [{0x7, 0xd, "f9a6fe541147213347c880"}, {0x6, 0x10, "b56b79d780fda704d51013dd08ff"}, {0x7, 0x9, "44f54c9491a6ae"}, {0x5, 0x6, "8885a0c3"}, {0x0, 0x12, "ed27ea651855e025acca39b4a669a504"}, {0x7, 0xd, "1c70e437e7e849b956f03e"}, {0x6, 0xa, "8c0996cd855ecbff"}]}, @timestamp={0x44, 0x18, 0x91, 0x0, 0x6, [0xfff, 0x350, 0x41, 0x7, 0x101]}, @rr={0x7, 0x23, 0xb8, [@local, @multicast1, @broadcast, @broadcast, @remote, @remote, @private=0xa010101, @multicast1]}, @cipso={0x86, 0x2c, 0x1, [{0x2, 0x5, "970a35"}, {0x1, 0xd, "7ad74c20102f5051af6743"}, {0x2, 0x3, 'M'}, {0x0, 0x11, "a2b40fa6707f0d255c718234d01bb0"}]}, @lsrr={0x83, 0x1f, 0xa8, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @end, @timestamp_addr={0x44, 0x24, 0xfd, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1, 0x4}, {@local, 0x8}, {@local, 0x4}]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f00000020c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002080)={&(0x7f0000001d40)={0x310, r11, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc6d4748e7cdc38d8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x4}]}, 0x310}, 0x1, 0x0, 0x0, 0xc000}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002240)={r2, &(0x7f0000002100)="8a158d2080c2c23d967bcbf68b63ea4034f54c07419d6f89c429f9e6500a057136c2e3b8a7bec528fba4c6f3e101e517b06399dca0cbb0c7d91f9d61247175c682fe3ce4d6fbfe0969703ca3874c9a", &(0x7f0000002180)=""/189, 0x4}, 0x20) r17 = accept4$packet(r1, 0x0, &(0x7f0000002280), 0x180000) setsockopt$packet_tx_ring(r17, 0x107, 0xd, &(0x7f00000022c0)=@req3={0x7, 0xdab, 0x5f7, 0xfffff796, 0x3, 0x2d}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000002300)=""/38, &(0x7f0000002340)=0x26) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0010}, 0x44000) 15.219309474s ago: executing program 3 (id=1565): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="6220d5"], 0x9) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)="66ecc5", 0x3}], 0x1, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x3f, &(0x7f0000000140)=""/161, &(0x7f0000000000)=0xdc) write$tun(r3, 0x0, 0x4a) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000004000)) write$tun(r3, &(0x7f0000000080)={@void, @void, @x25={0x0, 0x2, 0xf1}}, 0x3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r9, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r8, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000003ec0)={0x6c, r10, 0x701, 0x0, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x0, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4001}, @NL80211_ATTR_VENDOR_SUBCMD={0x4e, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_ID={0x0, 0xc3, 0xfffffffe}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xed2}]}, 0x6c}}, 0x40) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000003e80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003700)={&(0x7f00000005c0)={0x28, r5, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000800)={0x0, 0x6}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000009c0)={0x0, 0xd, 0x9, 0x9, 0xffffff4c, 0x10}, &(0x7f0000000a00)=0x14) sendmmsg$inet_sctp(r3, &(0x7f0000003d00)=[{&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x7, @mcast1, 0xd}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000100)="37437c5cce48bf", 0x7}, {&(0x7f0000000140)="02e1cf31c838b511ee7ba4b37c8870018f03fc3186eec292c3002bf278bfa585b17396424401f16234f065c4fc6ed3c534dcf4fe6030003deda7918acdfee11b0b9d14099a001c1eec15a4581f27f920af95885cfa3b17ccbf84568cfde633aef095f1c1057dbda07238f4e48f466dece4355c9104055c3524c285dde442", 0x7e}, {&(0x7f0000000280)="9a6ce89a4a5a9a0b0f9d9095f4fbafad91d30759e51cec691b46f237c2550561dd1ce656438e4cb699f4e96610e6b78b5d7ba707f5c38422dcfc9ce093dbac12f47a605c3e3c288385384b8c683d08f8cc52c517784e", 0x56}, {&(0x7f0000000300)}, {&(0x7f0000000400)="3899b8c68b9dd81e152ea860a140e75c19383415aa46309c9c44f329", 0x1c}, {&(0x7f00000004c0)="a7db5c913a3ca40c546ab092da29a7cab46c28509bfc83a65a13d667f4cafadbec86e2fd4e97f9eebdeefaa3ee6b7bd9f1890aaaa993abfc1a2631b9a3418505899070abd1eba3f31762e322c74ef21f389c3b0d0adb2037d31f56548764e8669d8ef56dc92ce45258bd353a87cf63f13653ac550c795d0491a962cef69b487ec18c52a770a277426d84c082ef844741a4382e5912c617d4d4a624ed102913275adce8e0c49dc285985860d8fd9df9cd204b402418d991795e7c98de028803300eaed94ecf9173e3353340c458697b8a3d6da74506e3fcb2529e9978e6447930", 0xe0}, {&(0x7f0000000680)="391a5c42af3c6b5f5826d61492e2091ccf15578fa3345339f02d3e858222fc70d3a1fd44908a36a85490ba0d50db5789ed644296892940d4ccd8cc606a20bacd056c8153c735a6ca705bde310bc1a3124078f59fefb24210d79f8a4b0fb49e9bff2509efe93842a9b6f1efcdee4291883cfd97021b42ad35c5c763b5ceb621dad616d29cc58f91c59f5820dfefcadf3b3fcd8db44b719e0a9817f3dd7c765794709de855d8cf273d59ce6225cd658c58c7adce57ce8fd26e40f3d462dcda9a14135114fc3625e553a40a10c09d291712f986e4973c3edf4bdf0f20aa7f41e2a91b241534f75fd0a4eb68f908117fd44f4afcd849e5", 0xf5}], 0x7, &(0x7f0000000880)=[@authinfo={0x18, 0x84, 0x6, {0x9}}, @sndrcv={0x30, 0x84, 0x1, {0xc, 0xf3df, 0x8004, 0x8, 0x1, 0x5, 0x6, 0x9, r11}}], 0x48}, {&(0x7f0000000900)=@in6={0xa, 0x4e22, 0x17, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000940)="cdbd04e0ea7178e072a828edd2b0aa6b3a8c867d36d2", 0x16}], 0x1, &(0x7f0000000a40)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x400, 0x4, 0x2, 0x2, 0x3168, 0x11, 0xa}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @authinfo={0x18, 0x84, 0x6, {0x40}}, @sndrcv={0x30, 0x84, 0x1, {0x7fff, 0x8, 0x8204, 0xe3, 0xfab, 0x3, 0x10001, 0xbd8, r12}}], 0xc8, 0x4040050}, {&(0x7f0000000b40)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000b80)="07fd96b6d1c152f2a264fcfdc6854d3c8a13adff920a3a3557602a71305aba01113ed018b0fe6394a498c073aeeefcc5c32ed1c68d3c9eabcc538c88050f2bcd975abf18dc4fd94e2409e4def62660ae9da3d654989b5fbd6f88ed567f76b62db54b43e1834fa3826da1802748f3321cb2a8b7d2d06942a941e61235c1b56d041d6737bc9944b4aabc52ebbef08a38db611b1b92fbe9e1413e675e5269dbb6a88e040c31c68cef8738675ed59eea5ae9edde1b6dfcad7fdd56f6992a8d4542a989d9b5b142f7b32edcff6b3faa0024", 0xcf}, {&(0x7f0000000c80)="db36a4bbc39e6cbe4a00", 0xa}], 0x2, &(0x7f0000000d00)=[@init={0x18, 0x84, 0x0, {0x0, 0x8, 0x6, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x1, 0x8004, 0x9, 0x7, 0x19, 0x9, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}}], 0x88, 0x4000000}, {&(0x7f0000000dc0)=@in6={0xa, 0x4e24, 0x0, @remote, 0x8}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000e00)="7b6382788feb67e707f7a2794811cbfcebe9ee0358878e56aecbba0e9fbdbbc2a5f8cb6f27c62a93827fb89ae97be620a0de0d4864a98bd7650cf3f75cf3262bc7aeef882ec7be58488111415ad585e6f7b557ee1bf13619e44d00"/100, 0x64}, {&(0x7f0000000e80)="fd10c4935bf5083ba5631e835a5ae9cdc0b6c1645cdcb28e214c7b4fb4741c7e0f459736922c43851e5ab2f6d07b61eae5e5291b19efbdf19a706a8676b0d595aec87d3262a0835d4690f674cd2bf7848a5a643892d8e1cad5639179896f914578c964aa02cbfebce3309687b6b2d73a20c9cf78203c0a05b3a42fbe664d635c8e2252d9f889b8b1c92bbea5fa75f0b79d361f0895dede88e2198a5e0fd404fef30baf37c561d5087b5867f151808d811db9c98d941cad0e0438acc934cf28b176f2d536204104433d9114274e46f8de", 0xd0}, {&(0x7f0000000f80)="258a9d642fb300198f4743e66caf0822bf4caa60d4ecae9a0233a44eb77453750515d2f86d0dbee5b8191eb517af6d2145b425e0dc7170adcf12023c58b180606815c8968863ee5650a00d02a0a0901f040d9dc3c5c3e201e853d1db533ba9894be04e7e2f440fe4ead131967d7ce1ce0b5c57571c44044b212f04b5e1c675556cb99b08e232e47b515eba0913f18708e415e9cf7bf463a8d423134847f7bbc018d8dfcb69fb8e30bb6c67bcb271c48493178cfa5405032ae620", 0xba}, {&(0x7f00000010c0)="e3ab590be9cdf04195debde28a20a2fa1374775833", 0x15}, {&(0x7f0000001100)="b3f671d6083af67e86c031fd1156026c509a480edc4b2e527a6771383b697d46ee9c7965fc138c6b0363d884634b7248525de8981244d5b2f28b09b061c1d6ae455168d6ab4788c9cab3eb64c1c877f0c770b25d483f92588c8ef153441c64e9c4ad840036ce51a2989bdf9d82d47e95c47089a197f577d846e5e105c1f27b5f441c99ff73d362f01ecf969232faafcab738bb75fe0cdb5803f0f3cd59dc50923247c9fa15699a2c26fa99a59651251906f25e68b755f1eb9607d5a004c8338f882cb171b32173baa5f43a1fafb87bdb0e260ad4367445e5da9da1591c7b8cc61db741829220a028ef", 0xe9}], 0x5, &(0x7f0000001280)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x400}}, @authinfo={0x18, 0x84, 0x6, {0xfe}}, @authinfo={0x18, 0x84, 0x6, {0x9711}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @authinfo={0x18, 0x84, 0x6, {0x100}}, @init={0x18, 0x84, 0x0, {0xe, 0x9d7, 0x30, 0xb7a2}}, @authinfo={0x18, 0x84, 0x6, {0xd}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x4}}, @init={0x18, 0x84, 0x0, {0x1, 0xfff8, 0x1000, 0x9}}], 0xf0}, {&(0x7f0000001380)=@in6={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x6000000}, 0x1c, &(0x7f0000003740), 0x0, &(0x7f0000003800)=ANY=[@ANYBLOB="20000000000000008400000008000000ff01000000000000000000000000000118000000000000008400000000000000f9ffcffc0800090018000000000000000200000d0018000000000000008400000006000000f3ff00000000000018000000000000008400000007000000ac1414bb000000001800000000000000840000000500000000000000b800000018000000000000008400000005000000100000000200000020000000000000008400000008000000fc0200"/197], 0xd0, 0x4044090}, {&(0x7f0000003900)=@in6={0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000003c00)=[{&(0x7f0000003940)="29f6f8c95f2b3fa408a30a5e597d454021beda16e780c8d3ad7980ee07a85bfd89a309151891131c7e7bf73d43d7f2ad486c042874908b8107240e5a3732d6dce8df65ef329c657b96b8bafbce793019a82a66a63645e4be3b1719e1505b48b2c70cbd92bbac2e0bec1b9b3169c1", 0x6e}, {&(0x7f00000039c0)="4a3030db26de8bc449dd2c23e5c8f6bed5e30bf3d83847a196c68f0bbd82fbda3af093811c6f777e7224ef31d75db4b72503cccf6e5ea552767d6a6bb366290830b28673047d1f", 0x47}, {&(0x7f0000003a40)="f257c936d7763cc0816d152514051ba8e0bcafae3c3b1d20858efb89b0", 0x1d}, {&(0x7f0000003a80)="b0f0b567b6526044fc3e21215b2fd6e651ca2ae762bb958fbef36da28f7e1cbb9911bb5197862a75d2a3c7056e3711eff20a5874b04aa9024c5417eb01b408bbf464ffa916d976f8d5891c6432779fff3956f0f83a3cab13cac1f2cb0c2a", 0x5e}, {&(0x7f0000003b00)="5b8aa3529b1eb0f80a1fa11e73d67b88b1686b81e6e13cc8b83c1d2de531026468a53d7404ef86c34e739b91616afd68b122867ec198477f528bea12ce9166f145f042e26e0ebc9c0924e0345d289220e67ddb5ec833523b89e95df822b45534a13b853be5508d14a2074b2aa30efa077ea1606931208705183a1f7ae585ceb3bfad45d9e442af024c32e91a3fe39e3a0cbf48a67a418b9d13bcb7604c9078b0374f35ba5422c74476e85342d08f0910e1a58a0cfe7ecb96e5b4cd3552343471417033dd249677050785fb", 0xcb}], 0x5, &(0x7f0000003c80)=[@authinfo={0x18, 0x84, 0x6, {0x8}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @init={0x18, 0x84, 0x0, {0xb, 0x3, 0x4}}], 0x48, 0x4000}], 0x6, 0x20048040) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 15.15801709s ago: executing program 0 (id=1566): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaa0046aa2986dd6d002008001011ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20001090"], 0x4a) 15.137115615s ago: executing program 2 (id=1567): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'}) syz_emit_ethernet(0xc3, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d0000b50000000000119078000000000000000001441c1531ac1e0101000000037f6800000100007640000000000000ffff00000000004e20008190780100000108215ff01c46fde1f90cffb295b95f3b5a216cbddf7fb88e1bb7d6ea80005ee86ff6ad6a1773dbb5518daea29dccd36031b1dca3779ffb0be82f8247d79f401ad639187891746e2695d5b06b0ea4899215de0dc61438998193eec68d119ec919a9afbf0905fb9dfa485ed65cda2f28428fa8c231"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000980)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x800) close(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x697d}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendto$packet(r6, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r0}, 0x38) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x100, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@broadcast, @loopback, 0xff, 0xffffffff, 'wg1\x00', 'macvtap0\x00', {0xe3ac034b102198d1}, {}, 0x8, 0x1, 0x49}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'gre0\x00', 'veth1_virt_wifi\x00', 0x38, 0x0, 0x1, 0x200, 0xffff7fff, 0x0, {0x7}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1, 0x1, 0x2, 0x6}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x609}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x80000000, 0x59}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) 593.92786ms ago: executing program 32 (id=1562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'ipvlan0\x00', {0x2}, 0x136a}) socket$nl_crypto(0x10, 0x3, 0x15) getpid() ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40001) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7ff, 0x7f}}}}, 0xfdef) 93.070311ms ago: executing program 33 (id=1566): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaa0046aa2986dd6d002008001011ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20001090"], 0x4a) 68.301616ms ago: executing program 34 (id=1567): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'}) syz_emit_ethernet(0xc3, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d0000b50000000000119078000000000000000001441c1531ac1e0101000000037f6800000100007640000000000000ffff00000000004e20008190780100000108215ff01c46fde1f90cffb295b95f3b5a216cbddf7fb88e1bb7d6ea80005ee86ff6ad6a1773dbb5518daea29dccd36031b1dca3779ffb0be82f8247d79f401ad639187891746e2695d5b06b0ea4899215de0dc61438998193eec68d119ec919a9afbf0905fb9dfa485ed65cda2f28428fa8c231"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000980)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x800) close(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x697d}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendto$packet(r6, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r0}, 0x38) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x100, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@broadcast, @loopback, 0xff, 0xffffffff, 'wg1\x00', 'macvtap0\x00', {0xe3ac034b102198d1}, {}, 0x8, 0x1, 0x49}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'gre0\x00', 'veth1_virt_wifi\x00', 0x38, 0x0, 0x1, 0x200, 0xffff7fff, 0x0, {0x7}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1, 0x1, 0x2, 0x6}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x609}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x80000000, 0x59}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) 44.673487ms ago: executing program 35 (id=1565): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="6220d5"], 0x9) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)="66ecc5", 0x3}], 0x1, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x3f, &(0x7f0000000140)=""/161, &(0x7f0000000000)=0xdc) write$tun(r3, 0x0, 0x4a) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000004000)) write$tun(r3, &(0x7f0000000080)={@void, @void, @x25={0x0, 0x2, 0xf1}}, 0x3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r9, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r8, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000003ec0)={0x6c, r10, 0x701, 0x0, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x0, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4001}, @NL80211_ATTR_VENDOR_SUBCMD={0x4e, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_ID={0x0, 0xc3, 0xfffffffe}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xed2}]}, 0x6c}}, 0x40) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000003e80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003700)={&(0x7f00000005c0)={0x28, r5, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000800)={0x0, 0x6}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000009c0)={0x0, 0xd, 0x9, 0x9, 0xffffff4c, 0x10}, &(0x7f0000000a00)=0x14) sendmmsg$inet_sctp(r3, &(0x7f0000003d00)=[{&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x7, @mcast1, 0xd}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000100)="37437c5cce48bf", 0x7}, {&(0x7f0000000140)="02e1cf31c838b511ee7ba4b37c8870018f03fc3186eec292c3002bf278bfa585b17396424401f16234f065c4fc6ed3c534dcf4fe6030003deda7918acdfee11b0b9d14099a001c1eec15a4581f27f920af95885cfa3b17ccbf84568cfde633aef095f1c1057dbda07238f4e48f466dece4355c9104055c3524c285dde442", 0x7e}, {&(0x7f0000000280)="9a6ce89a4a5a9a0b0f9d9095f4fbafad91d30759e51cec691b46f237c2550561dd1ce656438e4cb699f4e96610e6b78b5d7ba707f5c38422dcfc9ce093dbac12f47a605c3e3c288385384b8c683d08f8cc52c517784e", 0x56}, {&(0x7f0000000300)}, {&(0x7f0000000400)="3899b8c68b9dd81e152ea860a140e75c19383415aa46309c9c44f329", 0x1c}, {&(0x7f00000004c0)="a7db5c913a3ca40c546ab092da29a7cab46c28509bfc83a65a13d667f4cafadbec86e2fd4e97f9eebdeefaa3ee6b7bd9f1890aaaa993abfc1a2631b9a3418505899070abd1eba3f31762e322c74ef21f389c3b0d0adb2037d31f56548764e8669d8ef56dc92ce45258bd353a87cf63f13653ac550c795d0491a962cef69b487ec18c52a770a277426d84c082ef844741a4382e5912c617d4d4a624ed102913275adce8e0c49dc285985860d8fd9df9cd204b402418d991795e7c98de028803300eaed94ecf9173e3353340c458697b8a3d6da74506e3fcb2529e9978e6447930", 0xe0}, {&(0x7f0000000680)="391a5c42af3c6b5f5826d61492e2091ccf15578fa3345339f02d3e858222fc70d3a1fd44908a36a85490ba0d50db5789ed644296892940d4ccd8cc606a20bacd056c8153c735a6ca705bde310bc1a3124078f59fefb24210d79f8a4b0fb49e9bff2509efe93842a9b6f1efcdee4291883cfd97021b42ad35c5c763b5ceb621dad616d29cc58f91c59f5820dfefcadf3b3fcd8db44b719e0a9817f3dd7c765794709de855d8cf273d59ce6225cd658c58c7adce57ce8fd26e40f3d462dcda9a14135114fc3625e553a40a10c09d291712f986e4973c3edf4bdf0f20aa7f41e2a91b241534f75fd0a4eb68f908117fd44f4afcd849e5", 0xf5}], 0x7, &(0x7f0000000880)=[@authinfo={0x18, 0x84, 0x6, {0x9}}, @sndrcv={0x30, 0x84, 0x1, {0xc, 0xf3df, 0x8004, 0x8, 0x1, 0x5, 0x6, 0x9, r11}}], 0x48}, {&(0x7f0000000900)=@in6={0xa, 0x4e22, 0x17, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000940)="cdbd04e0ea7178e072a828edd2b0aa6b3a8c867d36d2", 0x16}], 0x1, &(0x7f0000000a40)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x400, 0x4, 0x2, 0x2, 0x3168, 0x11, 0xa}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @authinfo={0x18, 0x84, 0x6, {0x40}}, @sndrcv={0x30, 0x84, 0x1, {0x7fff, 0x8, 0x8204, 0xe3, 0xfab, 0x3, 0x10001, 0xbd8, r12}}], 0xc8, 0x4040050}, {&(0x7f0000000b40)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000b80)="07fd96b6d1c152f2a264fcfdc6854d3c8a13adff920a3a3557602a71305aba01113ed018b0fe6394a498c073aeeefcc5c32ed1c68d3c9eabcc538c88050f2bcd975abf18dc4fd94e2409e4def62660ae9da3d654989b5fbd6f88ed567f76b62db54b43e1834fa3826da1802748f3321cb2a8b7d2d06942a941e61235c1b56d041d6737bc9944b4aabc52ebbef08a38db611b1b92fbe9e1413e675e5269dbb6a88e040c31c68cef8738675ed59eea5ae9edde1b6dfcad7fdd56f6992a8d4542a989d9b5b142f7b32edcff6b3faa0024", 0xcf}, {&(0x7f0000000c80)="db36a4bbc39e6cbe4a00", 0xa}], 0x2, &(0x7f0000000d00)=[@init={0x18, 0x84, 0x0, {0x0, 0x8, 0x6, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x1, 0x8004, 0x9, 0x7, 0x19, 0x9, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}}], 0x88, 0x4000000}, {&(0x7f0000000dc0)=@in6={0xa, 0x4e24, 0x0, @remote, 0x8}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000e00)="7b6382788feb67e707f7a2794811cbfcebe9ee0358878e56aecbba0e9fbdbbc2a5f8cb6f27c62a93827fb89ae97be620a0de0d4864a98bd7650cf3f75cf3262bc7aeef882ec7be58488111415ad585e6f7b557ee1bf13619e44d00"/100, 0x64}, {&(0x7f0000000e80)="fd10c4935bf5083ba5631e835a5ae9cdc0b6c1645cdcb28e214c7b4fb4741c7e0f459736922c43851e5ab2f6d07b61eae5e5291b19efbdf19a706a8676b0d595aec87d3262a0835d4690f674cd2bf7848a5a643892d8e1cad5639179896f914578c964aa02cbfebce3309687b6b2d73a20c9cf78203c0a05b3a42fbe664d635c8e2252d9f889b8b1c92bbea5fa75f0b79d361f0895dede88e2198a5e0fd404fef30baf37c561d5087b5867f151808d811db9c98d941cad0e0438acc934cf28b176f2d536204104433d9114274e46f8de", 0xd0}, {&(0x7f0000000f80)="258a9d642fb300198f4743e66caf0822bf4caa60d4ecae9a0233a44eb77453750515d2f86d0dbee5b8191eb517af6d2145b425e0dc7170adcf12023c58b180606815c8968863ee5650a00d02a0a0901f040d9dc3c5c3e201e853d1db533ba9894be04e7e2f440fe4ead131967d7ce1ce0b5c57571c44044b212f04b5e1c675556cb99b08e232e47b515eba0913f18708e415e9cf7bf463a8d423134847f7bbc018d8dfcb69fb8e30bb6c67bcb271c48493178cfa5405032ae620", 0xba}, {&(0x7f00000010c0)="e3ab590be9cdf04195debde28a20a2fa1374775833", 0x15}, {&(0x7f0000001100)="b3f671d6083af67e86c031fd1156026c509a480edc4b2e527a6771383b697d46ee9c7965fc138c6b0363d884634b7248525de8981244d5b2f28b09b061c1d6ae455168d6ab4788c9cab3eb64c1c877f0c770b25d483f92588c8ef153441c64e9c4ad840036ce51a2989bdf9d82d47e95c47089a197f577d846e5e105c1f27b5f441c99ff73d362f01ecf969232faafcab738bb75fe0cdb5803f0f3cd59dc50923247c9fa15699a2c26fa99a59651251906f25e68b755f1eb9607d5a004c8338f882cb171b32173baa5f43a1fafb87bdb0e260ad4367445e5da9da1591c7b8cc61db741829220a028ef", 0xe9}], 0x5, &(0x7f0000001280)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x400}}, @authinfo={0x18, 0x84, 0x6, {0xfe}}, @authinfo={0x18, 0x84, 0x6, {0x9711}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @authinfo={0x18, 0x84, 0x6, {0x100}}, @init={0x18, 0x84, 0x0, {0xe, 0x9d7, 0x30, 0xb7a2}}, @authinfo={0x18, 0x84, 0x6, {0xd}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x4}}, @init={0x18, 0x84, 0x0, {0x1, 0xfff8, 0x1000, 0x9}}], 0xf0}, {&(0x7f0000001380)=@in6={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x6000000}, 0x1c, &(0x7f0000003740), 0x0, &(0x7f0000003800)=ANY=[@ANYBLOB="20000000000000008400000008000000ff01000000000000000000000000000118000000000000008400000000000000f9ffcffc0800090018000000000000000200000d0018000000000000008400000006000000f3ff00000000000018000000000000008400000007000000ac1414bb000000001800000000000000840000000500000000000000b800000018000000000000008400000005000000100000000200000020000000000000008400000008000000fc0200"/197], 0xd0, 0x4044090}, {&(0x7f0000003900)=@in6={0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000003c00)=[{&(0x7f0000003940)="29f6f8c95f2b3fa408a30a5e597d454021beda16e780c8d3ad7980ee07a85bfd89a309151891131c7e7bf73d43d7f2ad486c042874908b8107240e5a3732d6dce8df65ef329c657b96b8bafbce793019a82a66a63645e4be3b1719e1505b48b2c70cbd92bbac2e0bec1b9b3169c1", 0x6e}, {&(0x7f00000039c0)="4a3030db26de8bc449dd2c23e5c8f6bed5e30bf3d83847a196c68f0bbd82fbda3af093811c6f777e7224ef31d75db4b72503cccf6e5ea552767d6a6bb366290830b28673047d1f", 0x47}, {&(0x7f0000003a40)="f257c936d7763cc0816d152514051ba8e0bcafae3c3b1d20858efb89b0", 0x1d}, {&(0x7f0000003a80)="b0f0b567b6526044fc3e21215b2fd6e651ca2ae762bb958fbef36da28f7e1cbb9911bb5197862a75d2a3c7056e3711eff20a5874b04aa9024c5417eb01b408bbf464ffa916d976f8d5891c6432779fff3956f0f83a3cab13cac1f2cb0c2a", 0x5e}, {&(0x7f0000003b00)="5b8aa3529b1eb0f80a1fa11e73d67b88b1686b81e6e13cc8b83c1d2de531026468a53d7404ef86c34e739b91616afd68b122867ec198477f528bea12ce9166f145f042e26e0ebc9c0924e0345d289220e67ddb5ec833523b89e95df822b45534a13b853be5508d14a2074b2aa30efa077ea1606931208705183a1f7ae585ceb3bfad45d9e442af024c32e91a3fe39e3a0cbf48a67a418b9d13bcb7604c9078b0374f35ba5422c74476e85342d08f0910e1a58a0cfe7ecb96e5b4cd3552343471417033dd249677050785fb", 0xcb}], 0x5, &(0x7f0000003c80)=[@authinfo={0x18, 0x84, 0x6, {0x8}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @init={0x18, 0x84, 0x0, {0xb, 0x3, 0x4}}], 0x48, 0x4000}], 0x6, 0x20048040) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 0s ago: executing program 36 (id=1563): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000087020000f8ffffffb70300000800001eb704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@allocspi={0x1dc, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@private2, 0x4e24, 0x5, 0x4e22, 0x8175, 0x2, 0x80, 0x40, 0x16}, {@in=@multicast1, 0x4d2, 0xf7b07c621d3cd55b}, @in=@multicast1, {0x45, 0x1, 0x9, 0x9, 0x8, 0x8, 0xfffffffffffff800, 0x6}, {0x9, 0xc, 0x6}, {0x8, 0x3, 0x3}, 0x70bd2a, 0x3503, 0x2, 0x4, 0x6, 0x99}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdffffff00000008fa000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r7, 0x64e90, 0x16ac1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000feff04000000"], 0x50) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x12) kernel console output (not intermixed with test programs): 0.768'. [ 137.639479][ T8281] netlink: 14 bytes leftover after parsing attributes in process `syz.0.768'. [ 137.660537][ T8281] netlink: 14 bytes leftover after parsing attributes in process `syz.0.768'. [ 137.678753][ T8292] syzkaller0: entered promiscuous mode [ 137.694913][ T8292] syzkaller0: entered allmulticast mode [ 137.702674][ T8281] netlink: 14 bytes leftover after parsing attributes in process `syz.0.768'. [ 137.715493][ T8281] netlink: 14 bytes leftover after parsing attributes in process `syz.0.768'. [ 137.759195][ T8292] tipc: Started in network mode [ 137.765311][ T8292] tipc: Node identity de71b0ce6f84, cluster identity 4711 [ 137.786627][ T8292] tipc: Enabled bearer , priority 0 [ 137.948842][ T8306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.038812][ T8282] tipc: Resetting bearer [ 138.051692][ T8282] tipc: Disabling bearer [ 138.175624][ T30] audit: type=1800 audit(1781781427.382:6): pid=8310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.774" name="blkio.bfq.time_recursive" dev="tmpfs" ino=827 res=0 errno=0 [ 138.216323][ T8310] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 138.238666][ T8310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.604451][ T8323] netlink: 'syz.0.779': attribute type 13 has an invalid length. [ 138.823589][ T8328] xt_hashlimit: size too large, truncated to 1048576 [ 139.189708][ T8338] validate_nla: 1 callbacks suppressed [ 139.189732][ T8338] netlink: 'syz.3.782': attribute type 4 has an invalid length. [ 139.249398][ T8322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.294848][ T8322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.557499][ T8322] tipc: Resetting bearer [ 139.705005][ T30] audit: type=1800 audit(1781781428.912:7): pid=8350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.786" name="blkio.bfq.time_recursive" dev="tmpfs" ino=839 res=0 errno=0 [ 139.719555][ T8350] netlink: 'syz.4.786': attribute type 1 has an invalid length. [ 139.800745][ T8323] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.811424][ T8323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.833550][ T8323] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.840774][ T8323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.859320][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.869335][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.886385][ T8323] veth1_vlan: left promiscuous mode [ 139.893259][ T8323] veth0_vlan: left promiscuous mode [ 139.899846][ T8323] veth0_vlan: entered promiscuous mode [ 139.909199][ T8323] veth1_vlan: entered promiscuous mode [ 139.916914][ T8323] tipc: Resetting bearer [ 139.926539][ T8323] veth1_macvtap: left promiscuous mode [ 139.933391][ T8323] veth0_macvtap: left promiscuous mode [ 139.940495][ T8323] veth0_macvtap: entered promiscuous mode [ 139.947055][ T8323] macvtap0: left promiscuous mode [ 139.954506][ T8323] veth1_macvtap: entered promiscuous mode [ 139.964558][ T8323] bridge0: port 3(vlan2) entered blocking state [ 139.970967][ T8323] bridge0: port 3(vlan2) entered forwarding state [ 139.983126][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.991362][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 140.001868][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 140.010003][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 140.022871][ T8323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.030956][ T8323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.039805][ T8324] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.111257][ T8350] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.118889][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.171603][ T8355] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.193134][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.233681][ T8364] FAULT_INJECTION: forcing a failure. [ 140.233681][ T8364] name failslab, interval 1, probability 0, space 0, times 0 [ 140.247625][ T8364] CPU: 0 UID: 0 PID: 8364 Comm: syz.2.790 Not tainted syzkaller #0 PREEMPT(full) [ 140.247652][ T8364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 140.247665][ T8364] Call Trace: [ 140.247673][ T8364] [ 140.247681][ T8364] dump_stack_lvl+0xe8/0x150 [ 140.247708][ T8364] should_fail_ex+0x40c/0x560 [ 140.247730][ T8364] should_failslab+0xa8/0x100 [ 140.247761][ T8364] __kmalloc_noprof+0xe8/0x750 [ 140.247788][ T8364] ? rcu_is_watching+0x15/0xb0 [ 140.247809][ T8364] ? sock_kmalloc+0xd6/0x160 [ 140.247826][ T8364] ? hash_recvmsg+0x134/0x860 [ 140.247851][ T8364] sock_kmalloc+0xd6/0x160 [ 140.247869][ T8364] hash_recvmsg+0x1d0/0x860 [ 140.247891][ T8364] ? __pfx_hash_recvmsg+0x10/0x10 [ 140.247916][ T8364] sock_recvmsg_nosec+0x10c/0x140 [ 140.247940][ T8364] ____sys_recvmsg+0x3e3/0x4a0 [ 140.247974][ T8364] ? __pfx_____sys_recvmsg+0x10/0x10 [ 140.248019][ T8364] ? import_iovec+0x73/0xa0 [ 140.248047][ T8364] ___sys_recvmsg+0x213/0x5a0 [ 140.248077][ T8364] ? __pfx____sys_recvmsg+0x10/0x10 [ 140.248108][ T8364] ? __fget_files+0x2a/0x420 [ 140.248129][ T8364] ? rcu_is_watching+0x15/0xb0 [ 140.248155][ T8364] ? rcu_is_watching+0x15/0xb0 [ 140.248174][ T8364] ? lock_release+0x4b/0x3c0 [ 140.248203][ T8364] ? __might_fault+0xcb/0x130 [ 140.248229][ T8364] do_recvmmsg+0x31a/0x7f0 [ 140.248261][ T8364] ? __pfx_do_recvmmsg+0x10/0x10 [ 140.248297][ T8364] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 140.248326][ T8364] ? __fget_files+0x3a2/0x420 [ 140.248353][ T8364] __x64_sys_recvmmsg+0x198/0x250 [ 140.248385][ T8364] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 140.248419][ T8364] ? rcu_is_watching+0x15/0xb0 [ 140.248440][ T8364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.248462][ T8364] do_syscall_64+0x174/0x580 [ 140.248487][ T8364] ? trace_irq_disable+0x3b/0x140 [ 140.248515][ T8364] ? clear_bhb_loop+0x40/0x90 [ 140.248537][ T8364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.248557][ T8364] RIP: 0033:0x7f3e4139ce59 [ 140.248576][ T8364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.248594][ T8364] RSP: 002b:00007f3e4222d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 140.248617][ T8364] RAX: ffffffffffffffda RBX: 00007f3e41615fa0 RCX: 00007f3e4139ce59 [ 140.248632][ T8364] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 140.248646][ T8364] RBP: 00007f3e4222d090 R08: 0000000000000000 R09: 0000000000000000 [ 140.248658][ T8364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.248669][ T8364] R13: 00007f3e41616038 R14: 00007f3e41615fa0 R15: 00007ffc9d3ec4c8 [ 140.248692][ T8364] [ 140.582318][ T8355] bond2: (slave veth5): Enslaving as an active interface with an up link [ 140.620537][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.632149][ T8373] xt_hashlimit: size too large, truncated to 1048576 [ 140.636775][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.668879][ T8359] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 140.703137][ T8359] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 140.925025][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.011140][ T8398] netlink: 'syz.3.797': attribute type 13 has an invalid length. [ 141.044088][ T8398] netlink: 'syz.3.797': attribute type 17 has an invalid length. [ 141.125662][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.427433][ T8392] bridge0: port 3(vlan2) entered disabled state [ 141.434013][ T8392] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.545603][ T8428] netlink: 'syz.0.801': attribute type 1 has an invalid length. [ 141.549888][ T30] audit: type=1800 audit(1781781430.742:8): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.801" name="blkio.bfq.time_recursive" dev="tmpfs" ino=864 res=0 errno=0 [ 141.629901][ T8392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.645460][ T8392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.704428][ T1182] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.805034][ T8398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.825250][ T8398] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.865954][ T8398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.933017][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.943299][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.957775][ T8398] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 141.968914][ T8398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.985175][ T8398] veth1_vlan: left promiscuous mode [ 141.991574][ T8398] veth0_vlan: left promiscuous mode [ 141.998213][ T8398] veth0_vlan: entered promiscuous mode [ 142.006434][ T8398] veth1_vlan: entered promiscuous mode [ 142.021699][ T8398] veth1_macvtap: left promiscuous mode [ 142.028473][ T8398] veth0_macvtap: left promiscuous mode [ 142.039919][ T8398] veth0_macvtap: entered promiscuous mode [ 142.054743][ T8398] veth1_macvtap: entered promiscuous mode [ 142.066009][ T8398] bridge0: port 3(vlan2) entered blocking state [ 142.072489][ T8398] bridge0: port 3(vlan2) entered forwarding state [ 142.082462][ T8398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 142.091458][ T8398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.099950][ T8398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.110412][ T8398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.118698][ T8398] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 142.128001][ T8398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.136447][ T8398] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 142.146215][ T8398] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.154095][ T8398] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.163719][ T8403] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.206115][ T8419] syzkaller0: entered promiscuous mode [ 142.211754][ T8419] syzkaller0: entered allmulticast mode [ 142.245795][ T8428] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.322131][ T6262] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.329468][ T6262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.380994][ T8459] xt_hashlimit: size too large, truncated to 1048576 [ 142.389099][ T1182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.563328][ C0] bridge0: received packet on vlan2 with own address as source address (addr:02:00:00:00:00:00, vlan:0) [ 142.579712][ T8464] __nla_validate_parse: 66 callbacks suppressed [ 142.579732][ T8464] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.812'. [ 142.811224][ T8481] FAULT_INJECTION: forcing a failure. [ 142.811224][ T8481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.842764][ T8481] CPU: 1 UID: 0 PID: 8481 Comm: syz.3.819 Not tainted syzkaller #0 PREEMPT(full) [ 142.842794][ T8481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 142.842806][ T8481] Call Trace: [ 142.842814][ T8481] [ 142.842822][ T8481] dump_stack_lvl+0xe8/0x150 [ 142.842847][ T8481] should_fail_ex+0x40c/0x560 [ 142.842871][ T8481] _copy_from_user+0x2d/0xb0 [ 142.842899][ T8481] ___sys_sendmsg+0x1c6/0x360 [ 142.842933][ T8481] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.842980][ T8481] ? rcu_is_watching+0x15/0xb0 [ 142.843001][ T8481] ? lock_release+0x4b/0x3c0 [ 142.843031][ T8481] ? __might_fault+0xcb/0x130 [ 142.843057][ T8481] __sys_sendmmsg+0x273/0x4d0 [ 142.843089][ T8481] ? __pfx___sys_sendmmsg+0x10/0x10 [ 142.843123][ T8481] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.843158][ T8481] ? ksys_write+0x242/0x270 [ 142.843185][ T8481] ? __pfx_ksys_write+0x10/0x10 [ 142.843211][ T8481] __x64_sys_sendmmsg+0xa0/0xc0 [ 142.843236][ T8481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.843256][ T8481] do_syscall_64+0x174/0x580 [ 142.843282][ T8481] ? trace_irq_disable+0x3b/0x140 [ 142.843309][ T8481] ? clear_bhb_loop+0x40/0x90 [ 142.843332][ T8481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.843351][ T8481] RIP: 0033:0x7f7213d9ce59 [ 142.843370][ T8481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.843387][ T8481] RSP: 002b:00007f7214c76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 142.843409][ T8481] RAX: ffffffffffffffda RBX: 00007f7214015fa0 RCX: 00007f7213d9ce59 [ 142.843424][ T8481] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000004 [ 142.843437][ T8481] RBP: 00007f7214c76090 R08: 0000000000000000 R09: 0000000000000000 [ 142.843449][ T8481] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 142.843462][ T8481] R13: 00007f7214016038 R14: 00007f7214015fa0 R15: 00007ffd438216a8 [ 142.843484][ T8481] [ 143.058859][ T8487] netlink: 'syz.4.817': attribute type 13 has an invalid length. [ 143.067304][ T8487] netlink: 'syz.4.817': attribute type 17 has an invalid length. [ 143.177834][ T30] audit: type=1800 audit(1781781432.372:9): pid=8499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.822" name="blkio.bfq.time_recursive" dev="tmpfs" ino=885 res=0 errno=0 [ 143.181454][ T8499] netlink: 'syz.0.822': attribute type 1 has an invalid length. [ 143.472465][ T8484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.486307][ T8484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.517351][ T8509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.824'. [ 143.608865][ T8516] xt_hashlimit: size too large, truncated to 1048576 [ 143.688238][ T8487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.698296][ T8487] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.712250][ T8487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.734525][ T8487] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.742503][ T8487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.754392][ T8487] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.761615][ T8487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.786040][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.794107][ T8487] veth1_to_batadv: left allmulticast mode [ 143.802442][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.848562][ T8487] veth1_vlan: left promiscuous mode [ 143.855424][ T8487] veth0_vlan: left promiscuous mode [ 143.862078][ T8487] veth0_vlan: entered promiscuous mode [ 143.873434][ T8487] veth1_vlan: entered promiscuous mode [ 143.884047][ T8487] veth1_macvtap: left promiscuous mode [ 143.890684][ T8487] veth0_macvtap: left promiscuous mode [ 143.898187][ T8487] veth0_macvtap: entered promiscuous mode [ 143.914980][ T8487] veth1_macvtap: entered promiscuous mode [ 143.927368][ T8487] bridge0: port 3(vlan3) entered blocking state [ 143.933744][ T8487] bridge0: port 3(vlan3) entered forwarding state [ 143.943633][ T8487] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 143.956885][ T8487] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 143.970028][ T8487] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 143.983218][ T8487] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 143.996239][ T8487] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 144.004807][ T8487] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 144.014023][ T8487] vlan2: left promiscuous mode [ 144.018820][ T8487] bridge0: left promiscuous mode [ 144.028021][ T8487] ip6gre1: left promiscuous mode [ 144.033514][ T8487] ip6gre1: left allmulticast mode [ 144.041150][ T8487] ip6gre2: left promiscuous mode [ 144.046235][ T8487] ip6gre2: left allmulticast mode [ 144.054095][ T8487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.062287][ T8487] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.071706][ T8487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.096313][ T8499] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.107674][ T8493] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.169245][ T8529] netlink: 'syz.3.828': attribute type 10 has an invalid length. [ 144.288748][ T8539] netlink: 52 bytes leftover after parsing attributes in process `syz.0.831'. [ 144.321809][ T8523] syzkaller0: entered promiscuous mode [ 144.339533][ T8523] syzkaller0: entered allmulticast mode [ 144.370664][ T8529] bridge0: port 3(vlan2) entered disabled state [ 144.377244][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.440035][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 144.641714][ T8555] netlink: 68 bytes leftover after parsing attributes in process `syz.0.835'. [ 144.701147][ T8557] xt_hashlimit: size too large, truncated to 1048576 [ 144.728408][ T1182] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.803465][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.854162][ T8569] netlink: 'syz.4.839': attribute type 13 has an invalid length. [ 144.876001][ T8569] netlink: 'syz.4.839': attribute type 17 has an invalid length. [ 145.101027][ T30] audit: type=1800 audit(1781781434.302:10): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.841" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1046 res=0 errno=0 [ 145.134036][ T8578] netlink: 'syz.3.841': attribute type 1 has an invalid length. [ 145.304777][ T8564] bridge0: port 3(vlan3) entered disabled state [ 145.312729][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.611826][ T8564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.630702][ T8564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.678363][ T8566] netlink: 68 bytes leftover after parsing attributes in process `syz.2.838'. [ 145.695891][ T8582] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.842'. [ 145.735375][ T8569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.743872][ T8569] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.755958][ T8569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.760307][ T8585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.843'. [ 145.778849][ T8569] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.786101][ T8569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.805827][ T8569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.815497][ T8569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.832058][ T8569] veth1_vlan: left promiscuous mode [ 145.838588][ T8569] veth0_vlan: left promiscuous mode [ 145.846023][ T8569] veth0_vlan: entered promiscuous mode [ 145.855075][ T8569] veth1_vlan: entered promiscuous mode [ 145.865273][ T8569] veth1_macvtap: left promiscuous mode [ 145.871536][ T8569] veth0_macvtap: left promiscuous mode [ 145.878816][ T8569] veth0_macvtap: entered promiscuous mode [ 145.886002][ T8569] veth1_macvtap: entered promiscuous mode [ 145.895592][ T8569] bridge0: port 3(vlan3) entered blocking state [ 145.903232][ T8569] bridge0: port 3(vlan3) entered forwarding state [ 145.912232][ T8569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 145.921370][ T8569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 145.931262][ T8569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 145.940434][ T8569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.954401][ T8569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.961975][ T8569] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.969655][ T8569] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.977795][ T8572] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.016388][ T8578] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.091607][ T1182] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.129678][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 146.201038][ T8594] netlink: 'syz.0.847': attribute type 10 has an invalid length. [ 146.210724][ T8594] bridge0: port 3(vlan2) entered disabled state [ 146.217495][ T8594] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.310149][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 146.346634][ T8605] xt_hashlimit: size too large, truncated to 1048576 [ 146.409063][ T8606] syzkaller1: entered promiscuous mode [ 146.421344][ T8606] syzkaller1: entered allmulticast mode [ 146.437320][ T8609] SET target dimension over the limit! [ 146.483569][ C0] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 146.537734][ T8614] FAULT_INJECTION: forcing a failure. [ 146.537734][ T8614] name failslab, interval 1, probability 0, space 0, times 0 [ 146.551358][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.853'. [ 146.551982][ T8614] CPU: 0 UID: 0 PID: 8614 Comm: syz.0.854 Not tainted syzkaller #0 PREEMPT(full) [ 146.552012][ T8614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 146.552025][ T8614] Call Trace: [ 146.552033][ T8614] [ 146.552041][ T8614] dump_stack_lvl+0xe8/0x150 [ 146.552068][ T8614] should_fail_ex+0x40c/0x560 [ 146.552093][ T8614] should_failslab+0xa8/0x100 [ 146.552124][ T8614] __kmalloc_noprof+0xe8/0x750 [ 146.552151][ T8614] ? kernfs_fop_write_iter+0x157/0x540 [ 146.552180][ T8614] kernfs_fop_write_iter+0x157/0x540 [ 146.552202][ T8614] vfs_write+0x612/0xba0 [ 146.552238][ T8614] ? __pfx_vfs_write+0x10/0x10 [ 146.552269][ T8614] ? __fget_files+0x2a/0x420 [ 146.552295][ T8614] ksys_write+0x150/0x270 [ 146.552326][ T8614] ? __pfx_ksys_write+0x10/0x10 [ 146.552358][ T8614] ? rcu_is_watching+0x15/0xb0 [ 146.552381][ T8614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.552402][ T8614] do_syscall_64+0x174/0x580 [ 146.552428][ T8614] ? trace_irq_disable+0x3b/0x140 [ 146.552455][ T8614] ? clear_bhb_loop+0x40/0x90 [ 146.552477][ T8614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.552498][ T8614] RIP: 0033:0x7f560c99ce59 [ 146.552517][ T8614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.552535][ T8614] RSP: 002b:00007f560abf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.552556][ T8614] RAX: ffffffffffffffda RBX: 00007f560cc15fa0 RCX: 00007f560c99ce59 [ 146.552571][ T8614] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000004 [ 146.552581][ T8614] RBP: 00007f560abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 146.552636][ T8614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.552677][ T8614] R13: 00007f560cc16038 R14: 00007f560cc15fa0 R15: 00007ffd949409e8 [ 146.552765][ T8614] [ 146.764071][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'. [ 146.808224][ T8617] hsr_slave_1 (unregistering): left promiscuous mode [ 146.843410][ T30] audit: type=1800 audit(1781781436.052:11): pid=8619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.856" name="blkio.bfq.time_recursive" dev="tmpfs" ino=926 res=0 errno=0 [ 146.858029][ T8619] netlink: 'syz.0.856': attribute type 1 has an invalid length. [ 146.969512][ T8619] 8021q: adding VLAN 0 to HW filter on device bond5 [ 147.348840][ T8649] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 147.348840][ T8649] Please contact the netfilter-devel mailing list or update your nftables rules. [ 147.432170][ T8651] netlink: 'syz.0.867': attribute type 2 has an invalid length. [ 147.534603][ T30] audit: type=1800 audit(1781781436.742:12): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.870" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1072 res=0 errno=0 [ 147.575145][ T8658] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 147.683836][ T8658] 8021q: adding VLAN 0 to HW filter on device bond5 [ 147.717267][ T8660] __nla_validate_parse: 6 callbacks suppressed [ 147.717288][ T8660] netlink: 68 bytes leftover after parsing attributes in process `syz.1.869'. [ 147.875393][ T8668] netlink: 56 bytes leftover after parsing attributes in process `syz.4.871'. [ 147.905798][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.871'. [ 147.969106][ T8676] syzkaller1: entered promiscuous mode [ 147.991260][ T8676] syzkaller1: entered allmulticast mode [ 148.352799][ T30] audit: type=1800 audit(1781781437.552:13): pid=8696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.883" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1093 res=0 errno=0 [ 148.380411][ T8696] netlink: 'syz.3.883': attribute type 1 has an invalid length. [ 148.416428][ T8696] 8021q: adding VLAN 0 to HW filter on device bond6 [ 148.442133][ T8697] netlink: 56 bytes leftover after parsing attributes in process `syz.2.880'. [ 148.472327][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 148.514805][ T8707] FAULT_INJECTION: forcing a failure. [ 148.514805][ T8707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.524542][ T8706] netlink: 'syz.4.882': attribute type 8 has an invalid length. [ 148.535976][ T6249] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 148.565495][ T8706] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.882'. [ 148.593860][ T8707] CPU: 0 UID: 0 PID: 8707 Comm: syz.3.884 Not tainted syzkaller #0 PREEMPT(full) [ 148.593887][ T8707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 148.593899][ T8707] Call Trace: [ 148.593907][ T8707] [ 148.593915][ T8707] dump_stack_lvl+0xe8/0x150 [ 148.593943][ T8707] should_fail_ex+0x40c/0x560 [ 148.593966][ T8707] _copy_from_user+0x2d/0xb0 [ 148.593993][ T8707] do_ip_vs_set_ctl+0x35d/0xaf0 [ 148.594022][ T8707] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 148.594049][ T8707] ? rcu_is_watching+0x15/0xb0 [ 148.594078][ T8707] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 148.594108][ T8707] ? __pfx_aa_sk_perm+0x10/0x10 [ 148.594137][ T8707] ? lock_release+0x4b/0x3c0 [ 148.594180][ T8707] nf_setsockopt+0x26f/0x290 [ 148.594205][ T8707] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 148.594230][ T8707] do_sock_setsockopt+0x17c/0x1b0 [ 148.594260][ T8707] __x64_sys_setsockopt+0x13d/0x1b0 [ 148.594289][ T8707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.594309][ T8707] do_syscall_64+0x174/0x580 [ 148.594333][ T8707] ? trace_irq_disable+0x3b/0x140 [ 148.594361][ T8707] ? clear_bhb_loop+0x40/0x90 [ 148.594384][ T8707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.594403][ T8707] RIP: 0033:0x7f7213d9ce59 [ 148.594424][ T8707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.594441][ T8707] RSP: 002b:00007f7214c76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 148.594463][ T8707] RAX: ffffffffffffffda RBX: 00007f7214015fa0 RCX: 00007f7213d9ce59 [ 148.594478][ T8707] RDX: 0000000000000488 RSI: 0000000000000000 RDI: 0000000000000003 [ 148.594490][ T8707] RBP: 00007f7214c76090 R08: 0000000000000044 R09: 0000000000000000 [ 148.594502][ T8707] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 148.594515][ T8707] R13: 00007f7214016038 R14: 00007f7214015fa0 R15: 00007ffd438216a8 [ 148.594569][ T8707] [ 149.249103][ T8729] Cannot find add_set index 2 as target [ 149.317028][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.456269][ T8734] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.892'. [ 149.923882][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 150.082909][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.484297][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 151.352091][ T8698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 151.477345][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'. [ 151.619121][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'. [ 151.794736][ T8750] syzkaller0: entered promiscuous mode [ 151.816890][ T8750] syzkaller0: entered allmulticast mode [ 152.046289][ T8775] netlink: 20 bytes leftover after parsing attributes in process `syz.4.902'. [ 152.528093][ T8801] FAULT_INJECTION: forcing a failure. [ 152.528093][ T8801] name failslab, interval 1, probability 0, space 0, times 0 [ 152.560245][ T8801] CPU: 0 UID: 0 PID: 8801 Comm: syz.0.917 Not tainted syzkaller #0 PREEMPT(full) [ 152.560276][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 152.560289][ T8801] Call Trace: [ 152.560297][ T8801] [ 152.560306][ T8801] dump_stack_lvl+0xe8/0x150 [ 152.560334][ T8801] should_fail_ex+0x40c/0x560 [ 152.560358][ T8801] should_failslab+0xa8/0x100 [ 152.560388][ T8801] ? skb_clone+0x212/0x3a0 [ 152.560406][ T8801] kmem_cache_alloc_noprof+0x87/0x650 [ 152.560430][ T8801] ? rcu_is_watching+0x15/0xb0 [ 152.560452][ T8801] ? lock_release+0x4b/0x3c0 [ 152.560483][ T8801] skb_clone+0x212/0x3a0 [ 152.560502][ T8801] __netlink_deliver_tap+0x413/0x860 [ 152.560538][ T8801] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.560568][ T8801] netlink_deliver_tap+0x19c/0x1b0 [ 152.560597][ T8801] __netlink_sendskb+0x47/0x90 [ 152.560624][ T8801] netlink_dump+0xa8c/0xee0 [ 152.560659][ T8801] ? __pfx_netlink_dump+0x10/0x10 [ 152.560694][ T8801] ? netlink_lookup+0x30/0x200 [ 152.560723][ T8801] __netlink_dump_start+0x589/0x7b0 [ 152.560755][ T8801] rtnetlink_rcv_msg+0xa48/0xc00 [ 152.560782][ T8801] ? __pfx_tc_dump_action+0x10/0x10 [ 152.560807][ T8801] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 152.560833][ T8801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.560859][ T8801] ? ref_tracker_free+0x689/0x830 [ 152.560881][ T8801] ? __pfx_rtnl_dumpit+0x10/0x10 [ 152.560915][ T8801] ? __pfx_tc_dump_action+0x10/0x10 [ 152.560940][ T8801] ? __asan_memcpy+0x40/0x70 [ 152.560963][ T8801] ? __skb_clone+0x5c/0x6c0 [ 152.560994][ T8801] netlink_rcv_skb+0x226/0x4a0 [ 152.561024][ T8801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.561052][ T8801] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 152.561089][ T8801] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.561122][ T8801] netlink_unicast+0x7bb/0x940 [ 152.561154][ T8801] netlink_sendmsg+0x813/0xb40 [ 152.561189][ T8801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.561222][ T8801] ? aa_sock_msg_perm+0xf1/0x1b0 [ 152.561243][ T8801] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 152.561272][ T8801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.561303][ T8801] ____sys_sendmsg+0x9b9/0xa20 [ 152.561336][ T8801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.561367][ T8801] ? lock_release+0x4b/0x3c0 [ 152.561397][ T8801] ? import_iovec+0x73/0xa0 [ 152.561426][ T8801] ___sys_sendmsg+0x2a5/0x360 [ 152.561454][ T8801] ? rcu_is_watching+0x15/0xb0 [ 152.561472][ T8801] ? get_pid_task+0x20/0x1f0 [ 152.561491][ T8801] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.561523][ T8801] ? rcu_is_watching+0x15/0xb0 [ 152.561557][ T8801] ? __fget_files+0x2a/0x420 [ 152.561579][ T8801] ? __fget_files+0x3a2/0x420 [ 152.561606][ T8801] __x64_sys_sendmsg+0x1b1/0x290 [ 152.561637][ T8801] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.561675][ T8801] ? rcu_is_watching+0x15/0xb0 [ 152.561696][ T8801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.561717][ T8801] do_syscall_64+0x174/0x580 [ 152.561751][ T8801] ? trace_irq_disable+0x3b/0x140 [ 152.561779][ T8801] ? clear_bhb_loop+0x40/0x90 [ 152.561801][ T8801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.561820][ T8801] RIP: 0033:0x7f560c99ce59 [ 152.561838][ T8801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.561854][ T8801] RSP: 002b:00007f560abf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.561876][ T8801] RAX: ffffffffffffffda RBX: 00007f560cc15fa0 RCX: 00007f560c99ce59 [ 152.561897][ T8801] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 152.561910][ T8801] RBP: 00007f560abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 152.561922][ T8801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.561934][ T8801] R13: 00007f560cc16038 R14: 00007f560cc15fa0 R15: 00007ffd949409e8 [ 152.561958][ T8801] [ 153.022331][ T8810] netlink: 'syz.0.920': attribute type 5 has an invalid length. [ 153.064073][ T8813] FAULT_INJECTION: forcing a failure. [ 153.064073][ T8813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.110868][ T8813] CPU: 1 UID: 0 PID: 8813 Comm: syz.4.921 Not tainted syzkaller #0 PREEMPT(full) [ 153.110898][ T8813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.110910][ T8813] Call Trace: [ 153.110918][ T8813] [ 153.110926][ T8813] dump_stack_lvl+0xe8/0x150 [ 153.110953][ T8813] should_fail_ex+0x40c/0x560 [ 153.110977][ T8813] _copy_to_user+0x31/0xb0 [ 153.111005][ T8813] simple_read_from_buffer+0xe1/0x170 [ 153.111031][ T8813] proc_fail_nth_read+0x1bb/0x230 [ 153.111059][ T8813] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.111087][ T8813] ? rw_verify_area+0x24a/0x4c0 [ 153.111114][ T8813] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.111139][ T8813] vfs_read+0x213/0xa80 [ 153.111167][ T8813] ? __pfx___mutex_lock+0x10/0x10 [ 153.111194][ T8813] ? __pfx_vfs_read+0x10/0x10 [ 153.111223][ T8813] ? __fget_files+0x3a2/0x420 [ 153.111245][ T8813] ? __fget_files+0x2a/0x420 [ 153.111271][ T8813] ksys_read+0x150/0x270 [ 153.111297][ T8813] ? __pfx_ksys_read+0x10/0x10 [ 153.111324][ T8813] ? rcu_is_watching+0x15/0xb0 [ 153.111346][ T8813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.111368][ T8813] do_syscall_64+0x174/0x580 [ 153.111393][ T8813] ? trace_irq_disable+0x3b/0x140 [ 153.111421][ T8813] ? clear_bhb_loop+0x40/0x90 [ 153.111443][ T8813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.111462][ T8813] RIP: 0033:0x7ffb6475d68e [ 153.111480][ T8813] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.111498][ T8813] RSP: 002b:00007ffb629f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.111520][ T8813] RAX: ffffffffffffffda RBX: 00007ffb629f66c0 RCX: 00007ffb6475d68e [ 153.111536][ T8813] RDX: 000000000000000f RSI: 00007ffb629f60a0 RDI: 0000000000000004 [ 153.111549][ T8813] RBP: 00007ffb629f6090 R08: 0000000000000000 R09: 0000000000000000 [ 153.111562][ T8813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.111574][ T8813] R13: 00007ffb64a16038 R14: 00007ffb64a15fa0 R15: 00007ffcedc83c28 [ 153.111598][ T8813] [ 153.441830][ T8818] netlink: 'syz.2.922': attribute type 1 has an invalid length. [ 153.463354][ T8818] netlink: 'syz.2.922': attribute type 3 has an invalid length. [ 153.471099][ T8818] __nla_validate_parse: 3 callbacks suppressed [ 153.471118][ T8818] netlink: 224 bytes leftover after parsing attributes in process `syz.2.922'. [ 153.504008][ T8830] netlink: 'syz.4.928': attribute type 10 has an invalid length. [ 153.551637][ T8830] bridge0: port 3(vlan3) entered disabled state [ 153.558284][ T8830] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.623411][ T8839] syzkaller1: entered promiscuous mode [ 153.630960][ T8841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.644996][ T8839] syzkaller1: entered allmulticast mode [ 153.775972][ T8848] macsec1: entered promiscuous mode [ 153.861266][ T8850] block nbd3: not configured, cannot reconfigure [ 153.888537][ T8850] syzkaller0: entered promiscuous mode [ 153.896163][ T8850] syzkaller0: entered allmulticast mode [ 153.905728][ T8850] TC_ACT_REPEAT abuse ? [ 153.921740][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 154.263890][ T8873] netlink: 'syz.4.945': attribute type 10 has an invalid length. [ 154.276997][ T8879] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.948'. [ 154.537602][ T8891] xt_hashlimit: size too large, truncated to 1048576 [ 154.636463][ T8902] netlink: 'syz.4.956': attribute type 4 has an invalid length. [ 154.660727][ T8902] netlink: 152 bytes leftover after parsing attributes in process `syz.4.956'. [ 154.789714][ T8881] netlink: 'syz.3.949': attribute type 2 has an invalid length. [ 154.805058][ T8881] netlink: 232 bytes leftover after parsing attributes in process `syz.3.949'. [ 154.845485][ T8912] FAULT_INJECTION: forcing a failure. [ 154.845485][ T8912] name failslab, interval 1, probability 0, space 0, times 0 [ 154.882015][ T8912] CPU: 0 UID: 0 PID: 8912 Comm: syz.4.959 Not tainted syzkaller #0 PREEMPT(full) [ 154.882047][ T8912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.882060][ T8912] Call Trace: [ 154.882067][ T8912] [ 154.882076][ T8912] dump_stack_lvl+0xe8/0x150 [ 154.882101][ T8912] should_fail_ex+0x40c/0x560 [ 154.882125][ T8912] should_failslab+0xa8/0x100 [ 154.882156][ T8912] __kmalloc_node_noprof+0xf0/0x7b0 [ 154.882195][ T8912] ? alloc_slab_obj_exts+0xbf/0x250 [ 154.882220][ T8912] alloc_slab_obj_exts+0xbf/0x250 [ 154.882245][ T8912] __memcg_slab_post_alloc_hook+0x5b6/0xe60 [ 154.882278][ T8912] kmem_cache_alloc_node_noprof+0x40a/0x680 [ 154.882304][ T8912] ? __alloc_skb+0x1d7/0x7a0 [ 154.882327][ T8912] ? kmem_cache_alloc_node_noprof+0x23a/0x680 [ 154.882354][ T8912] __alloc_skb+0x1d7/0x7a0 [ 154.882381][ T8912] alloc_skb_with_frags+0xc6/0x760 [ 154.882411][ T8912] ? sk_filter_trim_cap+0x192/0xd00 [ 154.882430][ T8912] ? rcu_is_watching+0x15/0xb0 [ 154.882452][ T8912] sock_alloc_send_pskb+0x878/0x990 [ 154.882479][ T8912] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 154.882499][ T8912] ? lock_release+0x4b/0x3c0 [ 154.882528][ T8912] ? rcu_is_watching+0x15/0xb0 [ 154.882551][ T8912] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 154.882581][ T8912] unix_dgram_sendmsg+0x4da/0x17b0 [ 154.882628][ T8912] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 154.882659][ T8912] ? aa_sock_msg_perm+0xda/0x1b0 [ 154.882679][ T8912] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 154.882697][ T8912] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 154.882716][ T8912] ____sys_sendmsg+0x9b9/0xa20 [ 154.882750][ T8912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.882780][ T8912] ? lock_release+0x4b/0x3c0 [ 154.882810][ T8912] ? import_iovec+0x73/0xa0 [ 154.882838][ T8912] ___sys_sendmsg+0x2a5/0x360 [ 154.882870][ T8912] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.882918][ T8912] ? rcu_is_watching+0x15/0xb0 [ 154.882939][ T8912] ? lock_release+0x4b/0x3c0 [ 154.882968][ T8912] ? __might_fault+0xcb/0x130 [ 154.882993][ T8912] __sys_sendmmsg+0x273/0x4d0 [ 154.883025][ T8912] ? __pfx___sys_sendmmsg+0x10/0x10 [ 154.883059][ T8912] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 154.883094][ T8912] ? ksys_write+0x242/0x270 [ 154.883122][ T8912] ? __pfx_ksys_write+0x10/0x10 [ 154.883152][ T8912] __x64_sys_sendmmsg+0xa0/0xc0 [ 154.883188][ T8912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.883209][ T8912] do_syscall_64+0x174/0x580 [ 154.883235][ T8912] ? trace_irq_disable+0x3b/0x140 [ 154.883262][ T8912] ? clear_bhb_loop+0x40/0x90 [ 154.883284][ T8912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.883304][ T8912] RIP: 0033:0x7ffb6479ce59 [ 154.883322][ T8912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.883340][ T8912] RSP: 002b:00007ffb629f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 154.883362][ T8912] RAX: ffffffffffffffda RBX: 00007ffb64a15fa0 RCX: 00007ffb6479ce59 [ 154.883377][ T8912] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000004 [ 154.883391][ T8912] RBP: 00007ffb629f6090 R08: 0000000000000000 R09: 0000000000000000 [ 154.883405][ T8912] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 154.883417][ T8912] R13: 00007ffb64a16038 R14: 00007ffb64a15fa0 R15: 00007ffcedc83c28 [ 154.883441][ T8912] [ 155.261113][ T8914] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.960'. [ 155.377071][ T8919] netlink: 'syz.4.962': attribute type 10 has an invalid length. [ 155.672351][ T8932] syzkaller0: entered promiscuous mode [ 155.678288][ T8932] syzkaller0: entered allmulticast mode [ 155.724860][ T8935] syzkaller0: entered promiscuous mode [ 155.743691][ T8935] syzkaller0: entered allmulticast mode [ 155.769294][ T8940] xt_hashlimit: size too large, truncated to 1048576 [ 156.147794][ T8949] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.974'. [ 156.220055][ T8953] FAULT_INJECTION: forcing a failure. [ 156.220055][ T8953] name failslab, interval 1, probability 0, space 0, times 0 [ 156.256429][ T8953] CPU: 0 UID: 0 PID: 8953 Comm: syz.1.976 Not tainted syzkaller #0 PREEMPT(full) [ 156.256459][ T8953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.256472][ T8953] Call Trace: [ 156.256479][ T8953] [ 156.256488][ T8953] dump_stack_lvl+0xe8/0x150 [ 156.256515][ T8953] should_fail_ex+0x40c/0x560 [ 156.256539][ T8953] should_failslab+0xa8/0x100 [ 156.256570][ T8953] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 156.256596][ T8953] ? rcu_is_watching+0x15/0xb0 [ 156.256617][ T8953] ? __alloc_skb+0x1d7/0x7a0 [ 156.256642][ T8953] ? trace_irq_enable+0x3b/0x140 [ 156.256672][ T8953] __alloc_skb+0x1d7/0x7a0 [ 156.256700][ T8953] netlink_ack+0x136/0xb30 [ 156.256728][ T8953] ? __pfx_genl_rcv_msg+0x10/0x10 [ 156.256752][ T8953] ? __netlink_lookup+0xc6/0x8b0 [ 156.256769][ T8953] ? rcu_is_watching+0x15/0xb0 [ 156.256795][ T8953] netlink_rcv_skb+0x2a4/0x4a0 [ 156.256824][ T8953] ? __pfx_genl_rcv_msg+0x10/0x10 [ 156.256848][ T8953] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 156.256884][ T8953] ? down_read+0x2be/0x330 [ 156.256914][ T8953] genl_rcv+0x28/0x40 [ 156.256936][ T8953] netlink_unicast+0x7bb/0x940 [ 156.256968][ T8953] netlink_sendmsg+0x813/0xb40 [ 156.257002][ T8953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.257034][ T8953] ? aa_sock_msg_perm+0xf1/0x1b0 [ 156.257054][ T8953] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 156.257080][ T8953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.257109][ T8953] ____sys_sendmsg+0x9b9/0xa20 [ 156.257143][ T8953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.257172][ T8953] ? lock_release+0x4b/0x3c0 [ 156.257203][ T8953] ? import_iovec+0x73/0xa0 [ 156.257231][ T8953] ___sys_sendmsg+0x2a5/0x360 [ 156.257258][ T8953] ? rcu_is_watching+0x15/0xb0 [ 156.257277][ T8953] ? get_pid_task+0x20/0x1f0 [ 156.257298][ T8953] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.257329][ T8953] ? rcu_is_watching+0x15/0xb0 [ 156.257364][ T8953] ? __fget_files+0x2a/0x420 [ 156.257386][ T8953] ? __fget_files+0x3a2/0x420 [ 156.257422][ T8953] __x64_sys_sendmsg+0x1b1/0x290 [ 156.257451][ T8953] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.257487][ T8953] ? rcu_is_watching+0x15/0xb0 [ 156.257508][ T8953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.257529][ T8953] do_syscall_64+0x174/0x580 [ 156.257555][ T8953] ? trace_irq_disable+0x3b/0x140 [ 156.257581][ T8953] ? clear_bhb_loop+0x40/0x90 [ 156.257604][ T8953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.257624][ T8953] RIP: 0033:0x7fad3ad9ce59 [ 156.257642][ T8953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.257659][ T8953] RSP: 002b:00007fad3bca4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.257682][ T8953] RAX: ffffffffffffffda RBX: 00007fad3b015fa0 RCX: 00007fad3ad9ce59 [ 156.257697][ T8953] RDX: 00000000240000c0 RSI: 0000200000001380 RDI: 0000000000000004 [ 156.257710][ T8953] RBP: 00007fad3bca4090 R08: 0000000000000000 R09: 0000000000000000 [ 156.257722][ T8953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.257734][ T8953] R13: 00007fad3b016038 R14: 00007fad3b015fa0 R15: 00007ffc20947ce8 [ 156.257758][ T8953] [ 156.596042][ T8958] netlink: 36 bytes leftover after parsing attributes in process `syz.4.979'. [ 156.818447][ T8966] xt_hashlimit: size too large, truncated to 1048576 [ 156.866935][ T8932] Set syz1 is full, maxelem 65536 reached [ 157.094519][ T8981] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.987'. [ 157.240587][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 157.299690][ T8985] netlink: 'syz.2.988': attribute type 11 has an invalid length. [ 157.537658][ T9006] syzkaller0: entered promiscuous mode [ 157.550105][ T9006] syzkaller0: entered allmulticast mode [ 157.734071][ T9014] xt_hashlimit: size too large, truncated to 1048576 [ 158.003133][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.158943][ T9029] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 158.184506][ T9029] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 158.320946][ T9042] syzkaller0: entered promiscuous mode [ 158.327213][ T9042] syzkaller0: entered allmulticast mode [ 159.014382][ T9042] Set syz1 is full, maxelem 65536 reached [ 159.097066][ T9050] __nla_validate_parse: 2 callbacks suppressed [ 159.097086][ T9050] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.1012'. [ 159.239855][ T9057] xt_hashlimit: size too large, truncated to 1048576 [ 159.280308][ T9060] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1016'. [ 159.395504][ T9066] FAULT_INJECTION: forcing a failure. [ 159.395504][ T9066] name failslab, interval 1, probability 0, space 0, times 0 [ 159.425033][ T9066] CPU: 1 UID: 0 PID: 9066 Comm: syz.0.1018 Not tainted syzkaller #0 PREEMPT(full) [ 159.425061][ T9066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 159.425074][ T9066] Call Trace: [ 159.425081][ T9066] [ 159.425090][ T9066] dump_stack_lvl+0xe8/0x150 [ 159.425116][ T9066] should_fail_ex+0x40c/0x560 [ 159.425140][ T9066] should_failslab+0xa8/0x100 [ 159.425172][ T9066] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 159.425198][ T9066] ? rcu_is_watching+0x15/0xb0 [ 159.425219][ T9066] ? __alloc_skb+0x1d7/0x7a0 [ 159.425244][ T9066] ? trace_irq_enable+0x3b/0x140 [ 159.425280][ T9066] __alloc_skb+0x1d7/0x7a0 [ 159.425308][ T9066] netlink_sendmsg+0x5d4/0xb40 [ 159.425344][ T9066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.425376][ T9066] ? aa_sock_msg_perm+0xf1/0x1b0 [ 159.425396][ T9066] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 159.425421][ T9066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.425451][ T9066] ____sys_sendmsg+0x9b9/0xa20 [ 159.425484][ T9066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.425515][ T9066] ? lock_release+0x4b/0x3c0 [ 159.425545][ T9066] ? import_iovec+0x73/0xa0 [ 159.425574][ T9066] ___sys_sendmsg+0x2a5/0x360 [ 159.425602][ T9066] ? rcu_is_watching+0x15/0xb0 [ 159.425621][ T9066] ? get_pid_task+0x20/0x1f0 [ 159.425640][ T9066] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.425672][ T9066] ? rcu_is_watching+0x15/0xb0 [ 159.425706][ T9066] ? __fget_files+0x2a/0x420 [ 159.425728][ T9066] ? __fget_files+0x3a2/0x420 [ 159.425754][ T9066] __x64_sys_sendmsg+0x1b1/0x290 [ 159.425784][ T9066] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.425821][ T9066] ? rcu_is_watching+0x15/0xb0 [ 159.425842][ T9066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.425864][ T9066] do_syscall_64+0x174/0x580 [ 159.425890][ T9066] ? trace_irq_disable+0x3b/0x140 [ 159.425916][ T9066] ? clear_bhb_loop+0x40/0x90 [ 159.425939][ T9066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.425958][ T9066] RIP: 0033:0x7f560c99ce59 [ 159.425977][ T9066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.425995][ T9066] RSP: 002b:00007f560abf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.426017][ T9066] RAX: ffffffffffffffda RBX: 00007f560cc15fa0 RCX: 00007f560c99ce59 [ 159.426037][ T9066] RDX: 0000000000000014 RSI: 0000200000001640 RDI: 000000000000000b [ 159.426050][ T9066] RBP: 00007f560abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 159.426062][ T9066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.426074][ T9066] R13: 00007f560cc16038 R14: 00007f560cc15fa0 R15: 00007ffd949409e8 [ 159.426099][ T9066] [ 159.940679][ T9076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.980947][ T9072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.025082][ T9079] vlan3: entered promiscuous mode [ 160.030195][ T9079] bridge0: entered promiscuous mode [ 160.055444][ T9082] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1022'. [ 160.377864][ T9090] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1025'. [ 160.392165][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1026'. [ 160.435463][ T9091] ipvlan2: entered allmulticast mode [ 160.457227][ T9091] batadv0: entered allmulticast mode [ 160.469763][ T9091] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 160.830237][ T9104] xt_hashlimit: size too large, truncated to 1048576 [ 161.545012][ T9140] xt_hashlimit: size too large, truncated to 1048576 [ 161.558853][ T9135] syzkaller0: entered promiscuous mode [ 161.576262][ T9135] syzkaller0: entered allmulticast mode [ 162.627943][ T9157] xt_hashlimit: size too large, truncated to 1048576 [ 162.697120][ T9164] SET target dimension over the limit! [ 162.829558][ T9170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1052'. [ 162.870048][ T9170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1052'. [ 162.897425][ T9170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1052'. [ 163.574754][ T9212] xt_hashlimit: size too large, truncated to 1048576 [ 163.855569][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'. [ 164.062921][ T9230] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1074'. [ 164.166606][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 164.181418][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 164.212056][ T9237] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1076'. [ 164.224207][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 164.299978][ T9237] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1076'. [ 164.352730][ T9237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.881510][ T9265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1086'. [ 164.925108][ T9265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1086'. [ 164.993270][ T9265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1086'. [ 165.017426][ T9265] gretap0: left promiscuous mode [ 165.029735][ T9265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1086'. [ 165.054404][ T9265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1086'. [ 165.121337][ T9265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.140405][ T9265] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.171520][ T9265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.269072][ T9265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.308045][ T9265] batadv_slave_1: left promiscuous mode [ 165.326033][ T9265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.357723][ T9265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.369314][ T9265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.388940][ T9265] veth1_vlan: left promiscuous mode [ 165.398486][ T9265] veth0_vlan: left promiscuous mode [ 165.405030][ T9265] veth0_vlan: entered promiscuous mode [ 165.414430][ T9265] veth1_vlan: entered promiscuous mode [ 165.435911][ T9265] veth1_macvtap: left promiscuous mode [ 165.449561][ T9265] veth0_macvtap: left promiscuous mode [ 165.461784][ T9265] veth0_macvtap: entered promiscuous mode [ 165.481307][ T9265] veth1_macvtap: entered promiscuous mode [ 165.505539][ T9265] bridge0: port 3(vlan2) entered blocking state [ 165.512119][ T9265] bridge0: port 3(vlan2) entered forwarding state [ 165.541986][ T9265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.559668][ T9265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.581705][ T9265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 165.603872][ T9265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.625612][ T9265] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 165.664085][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.671314][ T6259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.721036][ T6259] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.728427][ T6259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.864653][ T9274] syzkaller0: entered promiscuous mode [ 165.870609][ T9274] syzkaller0: entered allmulticast mode [ 165.880237][ T1163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.909110][ T1163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.933526][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 166.163358][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 166.209675][ T1163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.236058][ T1163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.273968][ T6249] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 166.299080][ T6249] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 166.308934][ T5738] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 166.414834][ T9303] FAULT_INJECTION: forcing a failure. [ 166.414834][ T9303] name failslab, interval 1, probability 0, space 0, times 0 [ 166.427808][ T9303] CPU: 1 UID: 0 PID: 9303 Comm: syz.1.1097 Not tainted syzkaller #0 PREEMPT(full) [ 166.427833][ T9303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 166.427844][ T9303] Call Trace: [ 166.427850][ T9303] [ 166.427857][ T9303] dump_stack_lvl+0xe8/0x150 [ 166.427882][ T9303] should_fail_ex+0x40c/0x560 [ 166.427905][ T9303] should_failslab+0xa8/0x100 [ 166.427932][ T9303] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 166.427960][ T9303] ? shmem_getattr+0x5e9/0x780 [ 166.427987][ T9303] ? ima_collect_measurement+0x5b8/0xa00 [ 166.428014][ T9303] ? ima_collect_measurement+0x5b8/0xa00 [ 166.428040][ T9303] krealloc_node_align_noprof+0x19a/0x390 [ 166.428070][ T9303] ima_collect_measurement+0x5b8/0xa00 [ 166.428100][ T9303] ? __pfx_ima_collect_measurement+0x10/0x10 [ 166.428129][ T9303] ? trace_contention_end+0x3d/0x140 [ 166.428166][ T9303] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 166.428191][ T9303] process_measurement+0x1272/0x1c10 [ 166.428231][ T9303] ? __might_fault+0xaf/0x130 [ 166.428254][ T9303] ? __pfx_process_measurement+0x10/0x10 [ 166.428277][ T9303] ? aa_file_perm+0x18b/0x15f0 [ 166.428296][ T9303] ? rcu_is_watching+0x15/0xb0 [ 166.428328][ T9303] ? __mutex_trylock_common+0x15f/0x270 [ 166.428351][ T9303] ? get_pid_task+0x20/0x1f0 [ 166.428370][ T9303] ? rcu_is_watching+0x15/0xb0 [ 166.428390][ T9303] ? lock_release+0x4b/0x3c0 [ 166.428418][ T9303] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 166.428448][ T9303] ima_file_mmap+0x1b0/0x200 [ 166.428471][ T9303] ? __pfx_ima_file_mmap+0x10/0x10 [ 166.428497][ T9303] ? apparmor_mmap_file+0x2da/0x3e0 [ 166.428525][ T9303] security_mmap_file+0x773/0xa20 [ 166.428553][ T9303] vm_mmap_pgoff+0x134/0x4e0 [ 166.428573][ T9303] ? __fget_files+0x2a/0x420 [ 166.428594][ T9303] ? rcu_is_watching+0x15/0xb0 [ 166.428616][ T9303] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 166.428635][ T9303] ? lock_release+0x4b/0x3c0 [ 166.428667][ T9303] ? __fget_files+0x3a2/0x420 [ 166.428689][ T9303] ? __fget_files+0x2a/0x420 [ 166.428714][ T9303] ksys_mmap_pgoff+0x4dc/0x760 [ 166.428740][ T9303] ? rcu_is_watching+0x15/0xb0 [ 166.428762][ T9303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.428782][ T9303] do_syscall_64+0x174/0x580 [ 166.428809][ T9303] ? clear_bhb_loop+0x40/0x90 [ 166.428832][ T9303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.428851][ T9303] RIP: 0033:0x7fad3ad9ce59 [ 166.428870][ T9303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.428887][ T9303] RSP: 002b:00007fad3bca4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 166.428909][ T9303] RAX: ffffffffffffffda RBX: 00007fad3b015fa0 RCX: 00007fad3ad9ce59 [ 166.428923][ T9303] RDX: 0000000003000006 RSI: 0000000000003000 RDI: 0000200000001000 [ 166.428936][ T9303] RBP: 00007fad3bca4090 R08: 0000000000000007 R09: 00000000607d8000 [ 166.428948][ T9303] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 166.428961][ T9303] R13: 00007fad3b016038 R14: 00007fad3b015fa0 R15: 00007ffc20947ce8 [ 166.428982][ T9303] [ 166.429289][ T30] audit: type=1800 audit(1781781455.632:14): pid=9303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1097" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1039 res=0 errno=0 [ 166.446380][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 166.493073][ T9303] netlink: 'syz.1.1097': attribute type 1 has an invalid length. [ 166.685003][ T9304] netlink: 'syz.0.1096': attribute type 10 has an invalid length. [ 167.050954][ T9318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.071018][ T9319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.123312][ T5976] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 167.218466][ T9303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.286802][ T5738] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 167.591232][ T9334] syzkaller0: entered promiscuous mode [ 167.603986][ T9334] syzkaller0: entered allmulticast mode [ 167.633413][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 168.087329][ T9342] xt_hashlimit: size too large, truncated to 1048576 [ 168.130648][ T9347] syz_tun: entered allmulticast mode [ 168.183645][ T9344] xt_hashlimit: size too large, truncated to 1048576 [ 168.192175][ T5738] IPVS: starting estimator thread 0... [ 168.302945][ T9352] IPVS: using max 48 ests per chain, 115200 per kthread [ 169.032639][ T9334] Set syz1 is full, maxelem 65536 reached [ 169.270002][ T9370] __nla_validate_parse: 79 callbacks suppressed [ 169.270024][ T9370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1116'. [ 169.511553][ T9383] netlink: 'syz.4.1119': attribute type 1 has an invalid length. [ 169.649733][ T9396] xt_hashlimit: size too large, truncated to 1048576 [ 169.686365][ T9383] bond4: (slave bridge1): making interface the new active one [ 169.700645][ T9383] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 169.817470][ T9404] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1127'. [ 170.083474][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 170.249056][ T9434] netlink: 'syz.2.1136': attribute type 2 has an invalid length. [ 170.264260][ T9434] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1136'. [ 170.309255][ T9437] xt_hashlimit: size too large, truncated to 1048576 [ 170.321496][ T9440] netlink: 'syz.3.1139': attribute type 21 has an invalid length. [ 170.627636][ T9461] FAULT_INJECTION: forcing a failure. [ 170.627636][ T9461] name failslab, interval 1, probability 0, space 0, times 0 [ 170.648070][ T9461] CPU: 1 UID: 0 PID: 9461 Comm: syz.1.1147 Not tainted syzkaller #0 PREEMPT(full) [ 170.648098][ T9461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 170.648111][ T9461] Call Trace: [ 170.648118][ T9461] [ 170.648126][ T9461] dump_stack_lvl+0xe8/0x150 [ 170.648153][ T9461] should_fail_ex+0x40c/0x560 [ 170.648176][ T9461] should_failslab+0xa8/0x100 [ 170.648207][ T9461] __kmalloc_noprof+0xe8/0x750 [ 170.648231][ T9461] ? rcu_is_watching+0x15/0xb0 [ 170.648252][ T9461] ? sock_kmalloc+0xd6/0x160 [ 170.648281][ T9461] ? hash_recvmsg+0x134/0x860 [ 170.648306][ T9461] sock_kmalloc+0xd6/0x160 [ 170.648325][ T9461] hash_recvmsg+0x1d0/0x860 [ 170.648349][ T9461] ? __pfx_hash_recvmsg+0x10/0x10 [ 170.648372][ T9461] sock_recvmsg_nosec+0x10c/0x140 [ 170.648399][ T9461] ____sys_recvmsg+0x3e3/0x4a0 [ 170.648432][ T9461] ? __pfx_____sys_recvmsg+0x10/0x10 [ 170.648470][ T9461] ? import_iovec+0x73/0xa0 [ 170.648497][ T9461] ___sys_recvmsg+0x213/0x5a0 [ 170.648529][ T9461] ? __pfx____sys_recvmsg+0x10/0x10 [ 170.648561][ T9461] ? __fget_files+0x2a/0x420 [ 170.648582][ T9461] ? rcu_is_watching+0x15/0xb0 [ 170.648610][ T9461] ? rcu_is_watching+0x15/0xb0 [ 170.648630][ T9461] ? lock_release+0x4b/0x3c0 [ 170.648659][ T9461] ? __might_fault+0xcb/0x130 [ 170.648684][ T9461] do_recvmmsg+0x31a/0x7f0 [ 170.648717][ T9461] ? __pfx_do_recvmmsg+0x10/0x10 [ 170.648753][ T9461] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 170.648782][ T9461] ? __fget_files+0x3a2/0x420 [ 170.648809][ T9461] __x64_sys_recvmmsg+0x198/0x250 [ 170.648841][ T9461] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 170.648874][ T9461] ? rcu_is_watching+0x15/0xb0 [ 170.648894][ T9461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.648914][ T9461] do_syscall_64+0x174/0x580 [ 170.648939][ T9461] ? clear_bhb_loop+0x40/0x90 [ 170.648961][ T9461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.648980][ T9461] RIP: 0033:0x7fad3ad9ce59 [ 170.648997][ T9461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.649014][ T9461] RSP: 002b:00007fad3bca4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 170.649035][ T9461] RAX: ffffffffffffffda RBX: 00007fad3b015fa0 RCX: 00007fad3ad9ce59 [ 170.649049][ T9461] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 170.649061][ T9461] RBP: 00007fad3bca4090 R08: 0000000000000000 R09: 0000000000000000 [ 170.649074][ T9461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 170.649085][ T9461] R13: 00007fad3b016038 R14: 00007fad3b015fa0 R15: 00007ffc20947ce8 [ 170.649109][ T9461] [ 171.012157][ T9471] syzkaller0: entered promiscuous mode [ 171.068598][ T9471] syzkaller0: entered allmulticast mode [ 171.144639][ T9474] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 171.245983][ T9473] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1153'. [ 172.154399][ T9502] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1162'. [ 172.371538][ T9516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1166'. [ 172.429308][ T9516] netlink: 'syz.1.1166': attribute type 3 has an invalid length. [ 172.448787][ T9516] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1166'. [ 172.477968][ T9521] FAULT_INJECTION: forcing a failure. [ 172.477968][ T9521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.526819][ T9521] CPU: 1 UID: 0 PID: 9521 Comm: syz.0.1168 Not tainted syzkaller #0 PREEMPT(full) [ 172.526849][ T9521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 172.526862][ T9521] Call Trace: [ 172.526870][ T9521] [ 172.526878][ T9521] dump_stack_lvl+0xe8/0x150 [ 172.526905][ T9521] should_fail_ex+0x40c/0x560 [ 172.526933][ T9521] _copy_from_user+0x2d/0xb0 [ 172.526962][ T9521] kstrtouint_from_user+0xd6/0x180 [ 172.526983][ T9521] ? __might_fault+0xaf/0x130 [ 172.527007][ T9521] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 172.527031][ T9521] ? __mutex_trylock_common+0x15f/0x270 [ 172.527055][ T9521] ? vfs_write+0x22b/0xba0 [ 172.527079][ T9521] ? rcu_is_watching+0x15/0xb0 [ 172.527102][ T9521] proc_fail_nth_write+0x8e/0x210 [ 172.527130][ T9521] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 172.527158][ T9521] ? preempt_count_add+0x91/0x190 [ 172.527186][ T9521] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 172.527212][ T9521] vfs_write+0x296/0xba0 [ 172.527242][ T9521] ? __pfx_vfs_write+0x10/0x10 [ 172.527272][ T9521] ? __fget_files+0x3a2/0x420 [ 172.527294][ T9521] ? __fget_files+0x2a/0x420 [ 172.527320][ T9521] ksys_write+0x150/0x270 [ 172.527347][ T9521] ? __pfx_ksys_write+0x10/0x10 [ 172.527375][ T9521] ? rcu_is_watching+0x15/0xb0 [ 172.527396][ T9521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.527418][ T9521] do_syscall_64+0x174/0x580 [ 172.527444][ T9521] ? trace_irq_disable+0x3b/0x140 [ 172.527472][ T9521] ? clear_bhb_loop+0x40/0x90 [ 172.527495][ T9521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.527515][ T9521] RIP: 0033:0x7f560c95d68e [ 172.527532][ T9521] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 172.527548][ T9521] RSP: 002b:00007f560abf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.527568][ T9521] RAX: ffffffffffffffda RBX: 00007f560abf66c0 RCX: 00007f560c95d68e [ 172.527582][ T9521] RDX: 0000000000000001 RSI: 00007f560abf60a0 RDI: 0000000000000004 [ 172.527593][ T9521] RBP: 00007f560abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 172.527615][ T9521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.527626][ T9521] R13: 00007f560cc16038 R14: 00007f560cc15fa0 R15: 00007ffd949409e8 [ 172.527650][ T9521] [ 172.928033][ T9523] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1169'. [ 173.034764][ T9532] syzkaller0: entered promiscuous mode [ 173.052242][ T9532] syzkaller0: entered allmulticast mode [ 173.251749][ T9539] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1174'. [ 173.320742][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 173.427054][ T9544] FAULT_INJECTION: forcing a failure. [ 173.427054][ T9544] name failslab, interval 1, probability 0, space 0, times 0 [ 173.439802][ T9544] CPU: 0 UID: 0 PID: 9544 Comm: syz.3.1176 Not tainted syzkaller #0 PREEMPT(full) [ 173.439829][ T9544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 173.439841][ T9544] Call Trace: [ 173.439849][ T9544] [ 173.439856][ T9544] dump_stack_lvl+0xe8/0x150 [ 173.439884][ T9544] should_fail_ex+0x40c/0x560 [ 173.439909][ T9544] should_failslab+0xa8/0x100 [ 173.439950][ T9544] ? skb_clone+0x212/0x3a0 [ 173.439969][ T9544] kmem_cache_alloc_noprof+0x87/0x650 [ 173.440001][ T9544] skb_clone+0x212/0x3a0 [ 173.440021][ T9544] bpf_clone_redirect+0x170/0x4b0 [ 173.440050][ T9544] ? bpf_test_run+0x1d1/0x830 [ 173.440079][ T9544] bpf_prog_885767c90d177146+0x62/0x6b [ 173.440098][ T9544] ? rescuer_thread+0xd20/0x10b0 [ 173.440126][ T9544] ? __kernel_text_address+0xd/0x30 [ 173.440149][ T9544] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 173.440182][ T9544] ? __pfx___schedule+0x10/0x10 [ 173.440210][ T9544] ? rcu_is_watching+0x15/0xb0 [ 173.440231][ T9544] ? preempt_schedule_thunk+0x16/0x40 [ 173.440255][ T9544] ? preempt_schedule_common+0x82/0xd0 [ 173.440275][ T9544] ? bpf_test_run+0x1d1/0x830 [ 173.440302][ T9544] ? bpf_test_timer_continue+0x10c/0x320 [ 173.440321][ T9544] bpf_test_run+0x354/0x830 [ 173.440357][ T9544] ? __pfx_bpf_test_run+0x10/0x10 [ 173.440391][ T9544] ? trace_kmem_cache_alloc+0x29/0xe0 [ 173.440418][ T9544] ? __kasan_krealloc+0xec/0x110 [ 173.440452][ T9544] ? skb_dst_set+0x72/0x140 [ 173.440482][ T9544] bpf_prog_test_run_skb+0xe35/0x2230 [ 173.440521][ T9544] ? __fget_files+0x3a2/0x420 [ 173.440542][ T9544] ? __fget_files+0x2a/0x420 [ 173.440567][ T9544] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 173.440595][ T9544] bpf_prog_test_run+0x2c5/0x340 [ 173.440626][ T9544] __sys_bpf+0x643/0x950 [ 173.440652][ T9544] ? __pfx___sys_bpf+0x10/0x10 [ 173.440684][ T9544] ? ksys_write+0x242/0x270 [ 173.440711][ T9544] ? __pfx_ksys_write+0x10/0x10 [ 173.440739][ T9544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.440760][ T9544] __x64_sys_bpf+0x7c/0x90 [ 173.440784][ T9544] do_syscall_64+0x174/0x580 [ 173.440811][ T9544] ? clear_bhb_loop+0x40/0x90 [ 173.440834][ T9544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.440854][ T9544] RIP: 0033:0x7f7213d9ce59 [ 173.440873][ T9544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.440890][ T9544] RSP: 002b:00007f7214c76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.440912][ T9544] RAX: ffffffffffffffda RBX: 00007f7214015fa0 RCX: 00007f7213d9ce59 [ 173.440937][ T9544] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 173.440950][ T9544] RBP: 00007f7214c76090 R08: 0000000000000000 R09: 0000000000000000 [ 173.440963][ T9544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.440975][ T9544] R13: 00007f7214016038 R14: 00007f7214015fa0 R15: 00007ffd438216a8 [ 173.440998][ T9544] [ 174.328243][ T30] audit: type=1800 audit(1781781463.532:15): pid=9576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1185" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1415 res=0 errno=0 [ 174.349602][ T9576] netlink: 'syz.3.1185': attribute type 1 has an invalid length. [ 174.445989][ T9583] __nla_validate_parse: 2 callbacks suppressed [ 174.446010][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1187'. [ 174.464474][ T9576] 8021q: adding VLAN 0 to HW filter on device bond7 [ 174.504047][ T9580] bond7: (slave geneve4): making interface the new active one [ 174.513593][ T9580] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 174.590409][ T9585] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1186'. [ 174.643540][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.775796][ T9592] block nbd4: not configured, cannot reconfigure [ 175.001017][ T9600] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1191'. [ 175.173466][ T9608] syzkaller0: entered promiscuous mode [ 175.184894][ T9608] syzkaller0: entered allmulticast mode [ 175.214400][ T9611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1194'. [ 175.248143][ T9612] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1195'. [ 175.579277][ T30] audit: type=1800 audit(1781781464.782:16): pid=9623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1200" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1143 res=0 errno=0 [ 175.798007][ T9629] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 175.826629][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1201'. [ 175.864864][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'. [ 175.904582][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'. [ 175.941740][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'. [ 175.960182][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'. [ 176.600972][ T9649] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 176.616972][ T9649] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 176.881661][ T9661] macvtap0: entered promiscuous mode [ 177.842743][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 178.015179][ T9649] Set syz1 is full, maxelem 65536 reached [ 179.115881][ T9740] syzkaller0: entered promiscuous mode [ 179.127190][ T9740] syzkaller0: entered allmulticast mode [ 179.387569][ T9757] syzkaller0: entered promiscuous mode [ 179.394390][ T9757] syzkaller0: entered allmulticast mode [ 180.303217][ T9740] Set syz1 is full, maxelem 65536 reached [ 181.014927][ T9770] __nla_validate_parse: 22 callbacks suppressed [ 181.014950][ T9770] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1247'. [ 181.046075][ T9772] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1249'. [ 181.807968][ T9764] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 181.824658][ T9771] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1248'. [ 182.081201][ T9788] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 182.106776][ T9788] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 182.151857][ T9797] sctp: [Deprecated]: syz.4.1257 (pid 9797) Use of int in maxseg socket option. [ 182.151857][ T9797] Use struct sctp_assoc_value instead [ 182.262034][ T30] audit: type=1800 audit(1781781471.462:17): pid=9799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1259" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1194 res=0 errno=0 [ 182.296341][ T9805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1262'. [ 182.304839][ T9799] netlink: 'syz.1.1259': attribute type 1 has an invalid length. [ 182.336941][ T9799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.370616][ T9799] bond2: (slave geneve3): making interface the new active one [ 182.380844][ T9799] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 182.433273][ T9809] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1260'. [ 182.489055][ T9801] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1261'. [ 182.525648][ T9816] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 182.559477][ T9816] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 182.593114][ T9820] netlink: 'syz.4.1267': attribute type 39 has an invalid length. [ 182.676057][ T6259] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 182.820450][ T9831] team0 (unregistering): Port device team_slave_0 removed [ 182.876568][ T9831] team0 (unregistering): Port device team_slave_1 removed [ 183.040214][ T9848] FAULT_INJECTION: forcing a failure. [ 183.040214][ T9848] name failslab, interval 1, probability 0, space 0, times 0 [ 183.053733][ T9848] CPU: 0 UID: 0 PID: 9848 Comm: syz.4.1273 Not tainted syzkaller #0 PREEMPT(full) [ 183.053758][ T9848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 183.053771][ T9848] Call Trace: [ 183.053778][ T9848] [ 183.053785][ T9848] dump_stack_lvl+0xe8/0x150 [ 183.053812][ T9848] should_fail_ex+0x40c/0x560 [ 183.053834][ T9848] should_failslab+0xa8/0x100 [ 183.053864][ T9848] __kmalloc_noprof+0xe8/0x750 [ 183.053890][ T9848] ? rcu_is_watching+0x15/0xb0 [ 183.053910][ T9848] ? sock_kmalloc+0xd6/0x160 [ 183.053927][ T9848] ? hash_recvmsg+0x134/0x860 [ 183.053951][ T9848] sock_kmalloc+0xd6/0x160 [ 183.053969][ T9848] hash_recvmsg+0x1d0/0x860 [ 183.053993][ T9848] ? __pfx_hash_recvmsg+0x10/0x10 [ 183.054016][ T9848] sock_recvmsg_nosec+0x10c/0x140 [ 183.054041][ T9848] ____sys_recvmsg+0x3e3/0x4a0 [ 183.054073][ T9848] ? __pfx_____sys_recvmsg+0x10/0x10 [ 183.054111][ T9848] ? import_iovec+0x73/0xa0 [ 183.054139][ T9848] ___sys_recvmsg+0x213/0x5a0 [ 183.054170][ T9848] ? __pfx____sys_recvmsg+0x10/0x10 [ 183.054203][ T9848] ? __fget_files+0x2a/0x420 [ 183.054224][ T9848] ? rcu_is_watching+0x15/0xb0 [ 183.054250][ T9848] ? rcu_is_watching+0x15/0xb0 [ 183.054269][ T9848] ? lock_release+0x4b/0x3c0 [ 183.054298][ T9848] ? __might_fault+0xcb/0x130 [ 183.054324][ T9848] do_recvmmsg+0x31a/0x7f0 [ 183.054358][ T9848] ? __pfx_do_recvmmsg+0x10/0x10 [ 183.054393][ T9848] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 183.054422][ T9848] ? __fget_files+0x3a2/0x420 [ 183.054450][ T9848] __x64_sys_recvmmsg+0x198/0x250 [ 183.054482][ T9848] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 183.054515][ T9848] ? rcu_is_watching+0x15/0xb0 [ 183.054536][ T9848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.054557][ T9848] do_syscall_64+0x174/0x580 [ 183.054582][ T9848] ? trace_irq_disable+0x3b/0x140 [ 183.054610][ T9848] ? clear_bhb_loop+0x40/0x90 [ 183.054644][ T9848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.054664][ T9848] RIP: 0033:0x7ffb6479ce59 [ 183.054682][ T9848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.054700][ T9848] RSP: 002b:00007ffb629f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 183.054721][ T9848] RAX: ffffffffffffffda RBX: 00007ffb64a15fa0 RCX: 00007ffb6479ce59 [ 183.054737][ T9848] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 183.054750][ T9848] RBP: 00007ffb629f6090 R08: 0000000000000000 R09: 0000000000000000 [ 183.054763][ T9848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.054774][ T9848] R13: 00007ffb64a16038 R14: 00007ffb64a15fa0 R15: 00007ffcedc83c28 [ 183.054798][ T9848] [ 183.651251][ T9816] Set syz1 is full, maxelem 65536 reached [ 184.801079][ T9869] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1279'. [ 185.939450][ T9841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.950639][ T9857] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1275'. [ 186.253637][ T9880] syzkaller0: entered promiscuous mode [ 186.262306][ T9880] syzkaller0: entered allmulticast mode [ 186.312002][ T9880] pimreg: entered allmulticast mode [ 186.331907][ T9880] pimreg: left allmulticast mode [ 186.376764][ T9896] netlink: 'syz.2.1291': attribute type 3 has an invalid length. [ 186.438839][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 186.450701][ T9901] netlink: 'syz.1.1290': attribute type 13 has an invalid length. [ 186.462482][ T9897] bridge0: port 3(vlan2) entered disabled state [ 186.491536][ T9901] netlink: 'syz.1.1290': attribute type 17 has an invalid length. [ 186.711910][ T9897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.722512][ T9897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.748585][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'. [ 186.766211][ T9906] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1293'. [ 186.875481][ T9901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.887488][ T9901] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.912870][ T9901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.935716][ T9901] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.942945][ T9901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.981294][ T9901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.002056][ T9901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.038106][ T9901] veth1_vlan: left promiscuous mode [ 187.056928][ T9901] veth0_vlan: left promiscuous mode [ 187.075239][ T9901] veth0_vlan: entered promiscuous mode [ 187.107557][ T9901] veth1_vlan: entered promiscuous mode [ 187.118381][ T9901] veth1_macvtap: left promiscuous mode [ 187.125121][ T9901] veth0_macvtap: left promiscuous mode [ 187.133276][ T9901] veth0_macvtap: entered promiscuous mode [ 187.140650][ T9901] veth1_macvtap: entered promiscuous mode [ 187.150698][ T9901] bridge0: port 3(vlan2) entered blocking state [ 187.157149][ T9901] bridge0: port 3(vlan2) entered forwarding state [ 187.167903][ T9901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 187.176694][ T9901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 187.185411][ T9901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 187.193779][ T9901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.225548][ T9901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.236891][ T9901] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 187.244642][ T9901] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 187.252100][ T9901] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 187.269707][ T9903] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.401314][ T9931] Bluetooth: MGMT ver 1.23 [ 187.595288][ T9941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.806739][ T9957] netlink: 'syz.0.1307': attribute type 13 has an invalid length. [ 187.831063][ T9957] netlink: 'syz.0.1307': attribute type 17 has an invalid length. [ 187.964181][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1309'. [ 187.989087][ T9967] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1309'. [ 188.104352][ T9951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.129571][ T9951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.414343][ T9951] tipc: Resetting bearer [ 188.793583][ T9952] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 188.807636][ T9952] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 188.818197][ T9952] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 188.842989][ T9957] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.854696][ T9957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.880505][ T9957] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.887756][ T9957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.910851][ T9957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.925581][ T9957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.941248][ T9957] veth1_vlan: left promiscuous mode [ 188.947695][ T9957] veth0_vlan: left promiscuous mode [ 188.954473][ T9957] veth0_vlan: entered promiscuous mode [ 188.964018][ T9957] veth1_vlan: entered promiscuous mode [ 188.971355][ T9957] tipc: Resetting bearer [ 188.980506][ T9957] veth1_macvtap: left promiscuous mode [ 188.987415][ T9957] veth0_macvtap: left promiscuous mode [ 188.994830][ T9957] veth0_macvtap: entered promiscuous mode [ 189.002228][ T9957] veth1_macvtap: entered promiscuous mode [ 189.012455][ T9957] bridge0: port 3(vlan2) entered blocking state [ 189.018886][ T9957] bridge0: port 3(vlan2) entered forwarding state [ 189.029774][ T9957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 189.038210][ T9957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.047327][ T9957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 189.056060][ T9957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 189.070213][ T9957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.078368][ T9957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.086441][ T9957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.096746][ T9957] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 189.105050][ T9957] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.113254][ T9957] 8021q: adding VLAN 0 to HW filter on device bond4 [ 189.121766][ T9957] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.136404][ T9962] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.263588][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.297192][ T9978] syzkaller0: entered promiscuous mode [ 189.313973][ T9978] syzkaller0: entered allmulticast mode [ 189.371614][ T9991] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1317'. [ 189.381778][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.394338][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.743269][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.778392][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1325'. [ 189.809146][T10013] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1325'. [ 189.843291][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.906627][T10020] netlink: 'syz.3.1328': attribute type 10 has an invalid length. [ 190.333444][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.500631][T10046] sctp: [Deprecated]: syz.3.1335 (pid 10046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.500631][T10046] Use struct sctp_sack_info instead [ 190.757649][T10053] xt_hashlimit: size too large, truncated to 1048576 [ 190.786292][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1336'. [ 190.997843][T10061] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1339'. [ 191.250595][T10074] netlink: 'syz.0.1344': attribute type 1 has an invalid length. [ 191.343812][T10074] 8021q: adding VLAN 0 to HW filter on device bond6 [ 191.442744][ T9996] Bluetooth: hci1: command 0x0406 tx timeout [ 191.448894][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 191.455235][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 191.530463][T10089] veth1_to_bond: entered allmulticast mode [ 191.537500][T10089] vlan1: entered promiscuous mode [ 191.550895][T10089] __nla_validate_parse: 1 callbacks suppressed [ 191.550915][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1348'. [ 191.618280][T10094] netlink: 'syz.0.1349': attribute type 11 has an invalid length. [ 191.650614][T10089] veth1_to_bond (unregistering): left allmulticast mode [ 191.675201][T10095] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1348'. [ 191.686694][T10089] bond0: (slave bond_slave_1): Releasing backup interface [ 191.724983][T10094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1349'. [ 191.755007][T10094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1349'. [ 191.789929][T10094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1349'. [ 191.815412][T10094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1349'. [ 191.842385][T10094] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1349'. [ 191.873800][T10088] vlan1: left promiscuous mode [ 191.984031][T10099] xt_hashlimit: size too large, truncated to 1048576 [ 192.398215][T10115] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1356'. [ 192.503748][T10129] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1358'. [ 192.561993][T10124] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.1359'. [ 192.572085][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 193.374233][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.795708][T10180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.450459][T10211] FAULT_INJECTION: forcing a failure. [ 194.450459][T10211] name failslab, interval 1, probability 0, space 0, times 0 [ 194.463275][T10211] CPU: 1 UID: 0 PID: 10211 Comm: syz.1.1391 Not tainted syzkaller #0 PREEMPT(full) [ 194.463305][T10211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 194.463318][T10211] Call Trace: [ 194.463328][T10211] [ 194.463337][T10211] dump_stack_lvl+0xe8/0x150 [ 194.463365][T10211] should_fail_ex+0x40c/0x560 [ 194.463390][T10211] should_failslab+0xa8/0x100 [ 194.463420][T10211] ? skb_clone+0x212/0x3a0 [ 194.463439][T10211] kmem_cache_alloc_noprof+0x87/0x650 [ 194.463469][T10211] skb_clone+0x212/0x3a0 [ 194.463489][T10211] bpf_clone_redirect+0x170/0x4b0 [ 194.463518][T10211] ? bpf_test_run+0x1d1/0x830 [ 194.463547][T10211] bpf_prog_885767c90d177146+0x62/0x6b [ 194.463566][T10211] ? rescuer_thread+0xd20/0x10b0 [ 194.463595][T10211] ? __kernel_text_address+0xd/0x30 [ 194.463616][T10211] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 194.463649][T10211] ? __pfx___schedule+0x10/0x10 [ 194.463678][T10211] ? rcu_is_watching+0x15/0xb0 [ 194.463699][T10211] ? preempt_schedule_thunk+0x16/0x40 [ 194.463727][T10211] ? preempt_schedule_common+0x82/0xd0 [ 194.463751][T10211] ? bpf_test_run+0x1d1/0x830 [ 194.463781][T10211] ? bpf_test_timer_continue+0x10c/0x320 [ 194.463802][T10211] bpf_test_run+0x354/0x830 [ 194.463842][T10211] ? __pfx_bpf_test_run+0x10/0x10 [ 194.463877][T10211] ? trace_kmem_cache_alloc+0x29/0xe0 [ 194.463902][T10211] ? __kasan_krealloc+0xec/0x110 [ 194.463935][T10211] ? skb_dst_set+0x72/0x140 [ 194.463964][T10211] bpf_prog_test_run_skb+0xe35/0x2230 [ 194.464003][T10211] ? __fget_files+0x3a2/0x420 [ 194.464026][T10211] ? __fget_files+0x2a/0x420 [ 194.464050][T10211] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 194.464093][T10211] bpf_prog_test_run+0x2c5/0x340 [ 194.464128][T10211] __sys_bpf+0x643/0x950 [ 194.464156][T10211] ? __pfx___sys_bpf+0x10/0x10 [ 194.464198][T10211] ? ksys_write+0x242/0x270 [ 194.464226][T10211] ? __pfx_ksys_write+0x10/0x10 [ 194.464255][T10211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.464276][T10211] __x64_sys_bpf+0x7c/0x90 [ 194.464302][T10211] do_syscall_64+0x174/0x580 [ 194.464329][T10211] ? trace_irq_disable+0x3b/0x140 [ 194.464356][T10211] ? clear_bhb_loop+0x40/0x90 [ 194.464379][T10211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.464399][T10211] RIP: 0033:0x7fad3ad9ce59 [ 194.464418][T10211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.464435][T10211] RSP: 002b:00007fad3bc83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.464457][T10211] RAX: ffffffffffffffda RBX: 00007fad3b016090 RCX: 00007fad3ad9ce59 [ 194.464472][T10211] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 194.464485][T10211] RBP: 00007fad3bc83090 R08: 0000000000000000 R09: 0000000000000000 [ 194.464498][T10211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.464510][T10211] R13: 00007fad3b016128 R14: 00007fad3b016090 R15: 00007ffc20947ce8 [ 194.464534][T10211] [ 194.764387][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.770801][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.117392][T10227] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 195.144933][T10227] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 195.154255][T10226] tipc: Started in network mode [ 195.159208][T10226] tipc: Node identity 080211000001, cluster identity 4711 [ 195.168655][T10226] tipc: Enabled bearer , priority 0 [ 195.177210][T10227] tipc: Resetting bearer [ 195.399389][T10242] netlink: 'syz.1.1401': attribute type 10 has an invalid length. [ 195.763821][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 195.865100][T10238] syzkaller0: entered promiscuous mode [ 195.877148][T10238] syzkaller0: entered allmulticast mode [ 195.889410][T10242] bridge0: port 3(vlan2) entered disabled state [ 195.895977][T10242] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.926039][T10242] bridge0: port 3(vlan2) entered blocking state [ 195.932510][T10242] bridge0: port 3(vlan2) entered forwarding state [ 195.939277][T10242] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.946646][T10242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.957251][T10242] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 195.980737][T10248] netlink: 'syz.2.1403': attribute type 1 has an invalid length. [ 196.098186][T10248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.168913][ T5976] tipc: Node number set to 134418688 [ 196.234351][T10253] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 196.274722][T10253] batman_adv: batadv0: Adding interface: gretap1 [ 196.294510][T10253] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.320948][T10253] batman_adv: batadv0: Interface activated: gretap1 [ 196.346391][T10262] bond2: ARP target 9.0.0.0 is already present [ 196.353306][T10262] bond2: option arp_ip_target: invalid value (9) [ 196.362220][T10262] bond2 (unregistering): Released all slaves [ 196.569552][T10271] SET target dimension over the limit! [ 196.760578][T10273] Cannot find set identified by id 65534 to match [ 196.890350][T10279] __nla_validate_parse: 7 callbacks suppressed [ 196.890373][T10279] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1413'. [ 196.918885][T10281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1415'. [ 196.929819][T10281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1415'. [ 197.010502][T10283] syzkaller0: entered promiscuous mode [ 197.026898][T10283] syzkaller0: entered allmulticast mode [ 197.048272][T10283] 0: reclassify loop, rule prio 0, protocol 800 [ 197.081707][T10285] netlink: 'syz.1.1416': attribute type 4 has an invalid length. [ 197.090710][T10285] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1416'. [ 197.220445][T10287] openvswitch: netlink: IP tunnel TTL not specified. [ 197.511743][T10308] FAULT_INJECTION: forcing a failure. [ 197.511743][T10308] name failslab, interval 1, probability 0, space 0, times 0 [ 197.524833][ T30] audit: type=1800 audit(1781781486.712:18): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1422" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1396 res=0 errno=0 [ 197.538510][T10303] bond0: (slave vlan4): Enslaving as an active interface with an up link [ 197.556367][T10308] CPU: 1 UID: 0 PID: 10308 Comm: syz.1.1422 Not tainted syzkaller #0 PREEMPT(full) [ 197.556396][T10308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 197.556409][T10308] Call Trace: [ 197.556417][T10308] [ 197.556426][T10308] dump_stack_lvl+0xe8/0x150 [ 197.556454][T10308] should_fail_ex+0x40c/0x560 [ 197.556485][T10308] should_failslab+0xa8/0x100 [ 197.556517][T10308] __kmalloc_cache_noprof+0x88/0x660 [ 197.556545][T10308] ? ima_add_digest_entry+0x56/0x350 [ 197.556571][T10308] ima_add_digest_entry+0x56/0x350 [ 197.556597][T10308] ima_add_template_entry+0x5f4/0x830 [ 197.556621][T10308] ? ima_add_template_entry+0x20a/0x830 [ 197.556646][T10308] ? __pfx_ima_add_template_entry+0x10/0x10 [ 197.556671][T10308] ? ima_calc_field_array_hash+0x432/0x4a0 [ 197.556701][T10308] ima_store_measurement+0x2af/0x690 [ 197.556732][T10308] ? __pfx_ima_store_measurement+0x10/0x10 [ 197.556764][T10308] ? ima_d_path+0x16b/0x230 [ 197.556793][T10308] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 197.556819][T10308] process_measurement+0x15ac/0x1c10 [ 197.556851][T10308] ? __might_fault+0xaf/0x130 [ 197.556876][T10308] ? __pfx_process_measurement+0x10/0x10 [ 197.556901][T10308] ? aa_file_perm+0x18b/0x15f0 [ 197.556922][T10308] ? rcu_is_watching+0x15/0xb0 [ 197.556958][T10308] ? __mutex_trylock_common+0x15f/0x270 [ 197.556982][T10308] ? get_pid_task+0x20/0x1f0 [ 197.557002][T10308] ? rcu_is_watching+0x15/0xb0 [ 197.557022][T10308] ? lock_release+0x4b/0x3c0 [ 197.557051][T10308] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 197.557080][T10308] ima_file_mmap+0x1b0/0x200 [ 197.557104][T10308] ? __pfx_ima_file_mmap+0x10/0x10 [ 197.557130][T10308] ? apparmor_mmap_file+0x2da/0x3e0 [ 197.557158][T10308] security_mmap_file+0x773/0xa20 [ 197.557186][T10308] vm_mmap_pgoff+0x134/0x4e0 [ 197.557206][T10308] ? __fget_files+0x2a/0x420 [ 197.557227][T10308] ? rcu_is_watching+0x15/0xb0 [ 197.557248][T10308] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 197.557269][T10308] ? lock_release+0x4b/0x3c0 [ 197.557300][T10308] ? __fget_files+0x3a2/0x420 [ 197.557322][T10308] ? __fget_files+0x2a/0x420 [ 197.557352][T10308] ksys_mmap_pgoff+0x4dc/0x760 [ 197.557375][T10308] ? rcu_is_watching+0x15/0xb0 [ 197.557396][T10308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.557417][T10308] do_syscall_64+0x174/0x580 [ 197.557444][T10308] ? trace_irq_disable+0x3b/0x140 [ 197.557471][T10308] ? clear_bhb_loop+0x40/0x90 [ 197.557494][T10308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.557514][T10308] RIP: 0033:0x7fad3ad9ce59 [ 197.557532][T10308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.557550][T10308] RSP: 002b:00007fad3bca4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 197.557572][T10308] RAX: ffffffffffffffda RBX: 00007fad3b015fa0 RCX: 00007fad3ad9ce59 [ 197.557587][T10308] RDX: 0000000003000006 RSI: 0000000000003000 RDI: 0000200000001000 [ 197.557600][T10308] RBP: 00007fad3bca4090 R08: 0000000000000007 R09: 00000000607d8000 [ 197.557613][T10308] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000002 [ 197.557625][T10308] R13: 00007fad3b016038 R14: 00007fad3b015fa0 R15: 00007ffc20947ce8 [ 197.557648][T10308] [ 197.558137][T10308] ima: OUT OF MEMORY ERROR creating queue entry [ 197.629209][T10292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.672911][ T30] audit: type=1804 audit(1781781486.872:19): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.1422" name="/newroot/268/blkio.bfq.time_recursive" dev="tmpfs" ino=1396 res=0 errno=0 [ 197.702544][ T9915] dummy0: entered promiscuous mode [ 197.760087][T10308] netlink: 'syz.1.1422': attribute type 1 has an invalid length. [ 198.019533][T10308] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.052063][T10318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1426'. [ 198.061521][T10318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1426'. [ 198.094905][T10312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1423'. [ 198.189256][T10323] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 198.208701][ T30] audit: type=1800 audit(1781781487.412:20): pid=10320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1428" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1506 res=0 errno=0 [ 198.272875][T10329] netlink: 'syz.0.1428': attribute type 1 has an invalid length. [ 198.462487][T10339] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1434'. [ 198.537965][T10343] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1436'. [ 198.683798][T10351] FAULT_INJECTION: forcing a failure. [ 198.683798][T10351] name failslab, interval 1, probability 0, space 0, times 0 [ 198.716373][T10352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1440'. [ 198.724281][T10351] CPU: 1 UID: 0 PID: 10351 Comm: syz.1.1439 Not tainted syzkaller #0 PREEMPT(full) [ 198.724374][T10351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 198.724407][T10351] Call Trace: [ 198.724435][T10351] [ 198.724456][T10351] dump_stack_lvl+0xe8/0x150 [ 198.724523][T10351] should_fail_ex+0x40c/0x560 [ 198.724594][T10351] should_failslab+0xa8/0x100 [ 198.724679][T10351] __kmalloc_cache_noprof+0x88/0x660 [ 198.724759][T10351] ? __xdp_reg_mem_model+0x1e9/0x5a0 [ 198.724851][T10351] __xdp_reg_mem_model+0x1e9/0x5a0 [ 198.724949][T10351] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 198.725034][T10351] xdp_reg_mem_model+0x22/0x40 [ 198.725116][T10351] bpf_test_run_xdp_live+0x292/0x1c20 [ 198.725186][T10351] ? rcu_is_watching+0x15/0xb0 [ 198.725239][T10351] ? lock_release+0x4b/0x3c0 [ 198.725320][T10351] ? preempt_count_add+0x91/0x190 [ 198.725388][T10351] ? __mutex_unlock_slowpath+0x724/0x8e0 [ 198.725419][T10351] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 198.725459][T10351] ? 0xffffffffa0201658 [ 198.725487][T10351] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 198.725511][T10351] ? _copy_from_user+0x94/0xb0 [ 198.725537][T10351] ? bpf_test_init+0x113/0x150 [ 198.725581][T10351] ? xdp_convert_md_to_buff+0x5b/0x330 [ 198.725689][T10351] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 198.725772][T10351] ? lock_release+0x4b/0x3c0 [ 198.725861][T10351] ? rcu_is_watching+0x15/0xb0 [ 198.725914][T10351] ? lock_release+0x4b/0x3c0 [ 198.725994][T10351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 198.726076][T10351] ? __fget_files+0x2a/0x420 [ 198.726135][T10351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 198.726228][T10351] bpf_prog_test_run+0x2c5/0x340 [ 198.726319][T10351] __sys_bpf+0x643/0x950 [ 198.726391][T10351] ? __pfx___sys_bpf+0x10/0x10 [ 198.726478][T10351] ? ksys_write+0x242/0x270 [ 198.726551][T10351] ? __pfx_ksys_write+0x10/0x10 [ 198.726625][T10351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.726684][T10351] __x64_sys_bpf+0x7c/0x90 [ 198.726747][T10351] do_syscall_64+0x174/0x580 [ 198.726820][T10351] ? trace_irq_disable+0x3b/0x140 [ 198.726890][T10351] ? clear_bhb_loop+0x40/0x90 [ 198.726940][T10351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.726991][T10351] RIP: 0033:0x7fad3ad9ce59 [ 198.727058][T10351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.727115][T10351] RSP: 002b:00007fad3bca4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.727135][T10351] RAX: ffffffffffffffda RBX: 00007fad3b015fa0 RCX: 00007fad3ad9ce59 [ 198.727147][T10351] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 198.727166][T10351] RBP: 00007fad3bca4090 R08: 0000000000000000 R09: 0000000000000000 [ 198.727204][T10351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.727234][T10351] R13: 00007fad3b016038 R14: 00007fad3b015fa0 R15: 00007ffc20947ce8 [ 198.727298][T10351] [ 199.094605][T10361] bond9: entered allmulticast mode [ 199.103010][T10361] 8021q: adding VLAN 0 to HW filter on device bond9 [ 199.245665][T10368] netlink: 'syz.4.1445': attribute type 10 has an invalid length. [ 199.318922][T10375] netlink: 'syz.0.1447': attribute type 4 has an invalid length. [ 199.340486][T10376] netlink: 'syz.2.1446': attribute type 49 has an invalid length. [ 199.444475][T10376] ip6gretap0: entered promiscuous mode [ 199.461567][T10376] ip6gretap0: entered allmulticast mode [ 199.637816][T10391] FAULT_INJECTION: forcing a failure. [ 199.637816][T10391] name failslab, interval 1, probability 0, space 0, times 0 [ 199.681115][T10391] CPU: 1 UID: 0 PID: 10391 Comm: syz.4.1453 Not tainted syzkaller #0 PREEMPT(full) [ 199.681145][T10391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 199.681158][T10391] Call Trace: [ 199.681165][T10391] [ 199.681174][T10391] dump_stack_lvl+0xe8/0x150 [ 199.681202][T10391] should_fail_ex+0x40c/0x560 [ 199.681227][T10391] should_failslab+0xa8/0x100 [ 199.681260][T10391] __kmalloc_noprof+0xe8/0x750 [ 199.681286][T10391] ? rcu_is_watching+0x15/0xb0 [ 199.681307][T10391] ? sock_kmalloc+0xd6/0x160 [ 199.681324][T10391] ? hash_recvmsg+0x134/0x860 [ 199.681350][T10391] sock_kmalloc+0xd6/0x160 [ 199.681370][T10391] hash_recvmsg+0x1d0/0x860 [ 199.681395][T10391] ? __pfx_hash_recvmsg+0x10/0x10 [ 199.681419][T10391] sock_recvmsg_nosec+0x10c/0x140 [ 199.681444][T10391] ____sys_recvmsg+0x3e3/0x4a0 [ 199.681479][T10391] ? __pfx_____sys_recvmsg+0x10/0x10 [ 199.681516][T10391] ? import_iovec+0x73/0xa0 [ 199.681545][T10391] ___sys_recvmsg+0x213/0x5a0 [ 199.681578][T10391] ? __pfx____sys_recvmsg+0x10/0x10 [ 199.681610][T10391] ? __fget_files+0x2a/0x420 [ 199.681630][T10391] ? rcu_is_watching+0x15/0xb0 [ 199.681658][T10391] ? rcu_is_watching+0x15/0xb0 [ 199.681678][T10391] ? lock_release+0x4b/0x3c0 [ 199.681708][T10391] ? __might_fault+0xcb/0x130 [ 199.681732][T10391] do_recvmmsg+0x31a/0x7f0 [ 199.681764][T10391] ? __pfx_do_recvmmsg+0x10/0x10 [ 199.681799][T10391] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 199.681827][T10391] ? __fget_files+0x3a2/0x420 [ 199.681855][T10391] __x64_sys_recvmmsg+0x198/0x250 [ 199.681887][T10391] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 199.681919][T10391] ? rcu_is_watching+0x15/0xb0 [ 199.681938][T10391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.681960][T10391] do_syscall_64+0x174/0x580 [ 199.681984][T10391] ? trace_irq_disable+0x3b/0x140 [ 199.682012][T10391] ? clear_bhb_loop+0x40/0x90 [ 199.682035][T10391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.682055][T10391] RIP: 0033:0x7ffb6479ce59 [ 199.682082][T10391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.682098][T10391] RSP: 002b:00007ffb629f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 199.682119][T10391] RAX: ffffffffffffffda RBX: 00007ffb64a15fa0 RCX: 00007ffb6479ce59 [ 199.682133][T10391] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 199.682145][T10391] RBP: 00007ffb629f6090 R08: 0000000000000000 R09: 0000000000000000 [ 199.682157][T10391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.682168][T10391] R13: 00007ffb64a16038 R14: 00007ffb64a15fa0 R15: 00007ffcedc83c28 [ 199.682190][T10391] [ 200.506453][T10424] netlink: 'syz.4.1461': attribute type 10 has an invalid length. [ 200.640289][T10434] openvswitch: netlink: Message has 2 unknown bytes. [ 201.151610][T10463] --map-set only usable from mangle table [ 201.266811][T10467] set match dimension is over the limit! [ 201.292372][T10473] IPv6: Can't replace route, no match found [ 201.311832][T10473] IPv6: Can't replace route, no match found [ 201.437526][T10477] netlink: 'syz.2.1480': attribute type 10 has an invalid length. [ 201.446226][T10477] bridge0: port 3(vlan2) entered disabled state [ 201.453299][T10477] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.460643][T10477] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.011613][T10521] Cannot find set identified by id 65534 to match [ 202.218839][T10533] __nla_validate_parse: 16 callbacks suppressed [ 202.218856][T10533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1502'. [ 202.319578][T10536] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1503'. [ 202.338134][T10539] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1505'. [ 202.593197][T10551] SET target dimension over the limit! [ 202.628114][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'. [ 202.806289][T10563] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.1516'. [ 203.147108][T10571] veth0_macvtap: entered allmulticast mode [ 203.175127][T10571] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 203.249089][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'. [ 203.392091][T10582] netlink: 'syz.3.1522': attribute type 4 has an invalid length. [ 203.411246][T10582] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1522'. [ 203.426123][T10583] --map-set only usable from mangle table [ 203.511758][T10589] FAULT_INJECTION: forcing a failure. [ 203.511758][T10589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.531217][T10589] CPU: 0 UID: 0 PID: 10589 Comm: syz.0.1527 Not tainted syzkaller #0 PREEMPT(full) [ 203.531246][T10589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 203.531259][T10589] Call Trace: [ 203.531267][T10589] [ 203.531275][T10589] dump_stack_lvl+0xe8/0x150 [ 203.531302][T10589] should_fail_ex+0x40c/0x560 [ 203.531327][T10589] _copy_from_iter+0x1d3/0x1660 [ 203.531351][T10589] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 203.531384][T10589] ? __pfx_policy_nodemask+0x10/0x10 [ 203.531414][T10589] ? unwind_next_frame+0x8f/0x2550 [ 203.531437][T10589] ? __pfx__copy_from_iter+0x10/0x10 [ 203.531462][T10589] ? alloc_pages_mpol+0x24a/0x380 [ 203.531497][T10589] copy_page_from_iter+0x219/0x2d0 [ 203.531523][T10589] tun_get_user+0x1bd0/0x4350 [ 203.531548][T10589] ? is_bpf_text_address+0x292/0x2b0 [ 203.531580][T10589] ? tun_get_user+0x718/0x4350 [ 203.531611][T10589] ? aa_file_perm+0x4ed/0x15f0 [ 203.531633][T10589] ? __pfx_tun_get_user+0x10/0x10 [ 203.531667][T10589] ? ref_tracker_alloc+0x341/0x4b0 [ 203.531689][T10589] ? get_pid_task+0x20/0x1f0 [ 203.531707][T10589] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 203.531729][T10589] ? rcu_is_watching+0x15/0xb0 [ 203.531760][T10589] ? tun_get+0x1c/0x2f0 [ 203.531783][T10589] ? tun_get+0x1c/0x2f0 [ 203.531805][T10589] ? rcu_is_watching+0x15/0xb0 [ 203.531824][T10589] ? tun_get+0x1c/0x2f0 [ 203.531846][T10589] ? lock_release+0x4b/0x3c0 [ 203.531875][T10589] ? apparmor_file_permission+0x1f4/0x300 [ 203.531902][T10589] ? tun_get+0x1c/0x2f0 [ 203.531927][T10589] tun_chr_write_iter+0x113/0x200 [ 203.531953][T10589] vfs_write+0x612/0xba0 [ 203.531984][T10589] ? __pfx_vfs_write+0x10/0x10 [ 203.532015][T10589] ? __fget_files+0x2a/0x420 [ 203.532042][T10589] ksys_write+0x150/0x270 [ 203.532069][T10589] ? __pfx_ksys_write+0x10/0x10 [ 203.532097][T10589] ? rcu_is_watching+0x15/0xb0 [ 203.532118][T10589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.532138][T10589] do_syscall_64+0x174/0x580 [ 203.532164][T10589] ? trace_irq_disable+0x3b/0x140 [ 203.532191][T10589] ? clear_bhb_loop+0x40/0x90 [ 203.532213][T10589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.532233][T10589] RIP: 0033:0x7f560c95d68e [ 203.532256][T10589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.532273][T10589] RSP: 002b:00007f560abf5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 203.532295][T10589] RAX: ffffffffffffffda RBX: 00007f560abf66c0 RCX: 00007f560c95d68e [ 203.532310][T10589] RDX: 000000000000003e RSI: 0000200000000040 RDI: 00000000000000c8 [ 203.532323][T10589] RBP: 00007f560abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 203.532336][T10589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.532347][T10589] R13: 00007f560cc16038 R14: 00007f560cc15fa0 R15: 00007ffd949409e8 [ 203.532371][T10589] [ 204.032460][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1533'. [ 204.087784][T10610] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1535'. [ 204.178612][T10614] FAULT_INJECTION: forcing a failure. [ 204.178612][T10614] name failslab, interval 1, probability 0, space 0, times 0 [ 204.200830][T10614] CPU: 1 UID: 0 PID: 10614 Comm: syz.1.1536 Not tainted syzkaller #0 PREEMPT(full) [ 204.200861][T10614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 204.200874][T10614] Call Trace: [ 204.200882][T10614] [ 204.200890][T10614] dump_stack_lvl+0xe8/0x150 [ 204.200918][T10614] should_fail_ex+0x40c/0x560 [ 204.200943][T10614] should_failslab+0xa8/0x100 [ 204.200973][T10614] __kmalloc_noprof+0xe8/0x750 [ 204.201000][T10614] ? rcu_is_watching+0x15/0xb0 [ 204.201021][T10614] ? sock_kmalloc+0xd6/0x160 [ 204.201038][T10614] ? hash_recvmsg+0x134/0x860 [ 204.201063][T10614] sock_kmalloc+0xd6/0x160 [ 204.201081][T10614] hash_recvmsg+0x1d0/0x860 [ 204.201106][T10614] ? __pfx_hash_recvmsg+0x10/0x10 [ 204.201129][T10614] sock_recvmsg_nosec+0x10c/0x140 [ 204.201161][T10614] ____sys_recvmsg+0x3e3/0x4a0 [ 204.201196][T10614] ? __pfx_____sys_recvmsg+0x10/0x10 [ 204.201234][T10614] ? import_iovec+0x73/0xa0 [ 204.201263][T10614] ___sys_recvmsg+0x213/0x5a0 [ 204.201296][T10614] ? __pfx____sys_recvmsg+0x10/0x10 [ 204.201329][T10614] ? __fget_files+0x2a/0x420 [ 204.201351][T10614] ? rcu_is_watching+0x15/0xb0 [ 204.201379][T10614] ? rcu_is_watching+0x15/0xb0 [ 204.201399][T10614] ? lock_release+0x4b/0x3c0 [ 204.201428][T10614] ? __might_fault+0xcb/0x130 [ 204.201453][T10614] do_recvmmsg+0x31a/0x7f0 [ 204.201487][T10614] ? __pfx_do_recvmmsg+0x10/0x10 [ 204.201523][T10614] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 204.201552][T10614] ? __fget_files+0x3a2/0x420 [ 204.201580][T10614] __x64_sys_recvmmsg+0x198/0x250 [ 204.201612][T10614] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 204.201645][T10614] ? rcu_is_watching+0x15/0xb0 [ 204.201667][T10614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.201688][T10614] do_syscall_64+0x174/0x580 [ 204.201714][T10614] ? trace_irq_disable+0x3b/0x140 [ 204.201742][T10614] ? clear_bhb_loop+0x40/0x90 [ 204.201764][T10614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.201784][T10614] RIP: 0033:0x7fad3ad9ce59 [ 204.201802][T10614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.201820][T10614] RSP: 002b:00007fad3bca4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 204.201842][T10614] RAX: ffffffffffffffda RBX: 00007fad3b015fa0 RCX: 00007fad3ad9ce59 [ 204.201858][T10614] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 204.201871][T10614] RBP: 00007fad3bca4090 R08: 0000000000000000 R09: 0000000000000000 [ 204.201884][T10614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.201896][T10614] R13: 00007fad3b016038 R14: 00007fad3b015fa0 R15: 00007ffc20947ce8 [ 204.201918][T10614] [ 204.536728][T10620] netlink: 'syz.3.1538': attribute type 1 has an invalid length. [ 204.804154][T10642] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.1547'. [ 205.268292][T10672] Cannot find set identified by id 65534 to match [ 205.361392][T10678] 8021q: VLANs not supported on ipvlan0 [ 205.638353][T10682] netlink: 'syz.4.1563': attribute type 13 has an invalid length. [ 205.653015][T10682] netlink: 'syz.4.1563': attribute type 17 has an invalid length. [ 206.642928][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.673667][T10681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.743931][T10681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.846614][T10682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.585603][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.593741][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.601058][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.609401][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.616986][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.723047][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 221.189213][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 221.196696][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 221.206971][ T5626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 221.216516][ T5626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 221.224465][ T5626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 221.242501][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 221.253680][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 221.264022][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 221.273110][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 221.285327][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 221.337611][ T5626] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 221.348457][ T5626] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 221.357737][ T5626] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 221.366867][ T5626] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 221.374848][ T5626] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 221.401628][ T5626] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 221.410843][ T5626] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 221.421762][ T5626] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 221.432831][ T5626] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 221.440338][ T5626] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 222.642913][ T50] Bluetooth: hci5: command tx timeout [ 223.282986][ T50] Bluetooth: hci6: command tx timeout [ 223.362754][ T50] Bluetooth: hci7: command tx timeout [ 223.442934][ T50] Bluetooth: hci8: command tx timeout [ 223.522768][ T50] Bluetooth: hci9: command tx timeout [ 224.722721][ T50] Bluetooth: hci5: command tx timeout [ 225.363113][ T50] Bluetooth: hci6: command tx timeout [ 225.442760][ T50] Bluetooth: hci7: command tx timeout [ 225.522766][ T50] Bluetooth: hci8: command tx timeout [ 225.602750][ T50] Bluetooth: hci9: command tx timeout [ 226.802748][ T50] Bluetooth: hci5: command tx timeout [ 227.442832][ T50] Bluetooth: hci6: command tx timeout [ 227.522709][ T50] Bluetooth: hci7: command tx timeout [ 227.602790][ T50] Bluetooth: hci8: command tx timeout [ 227.682734][ T50] Bluetooth: hci9: command tx timeout [ 228.882768][ T50] Bluetooth: hci5: command tx timeout [ 229.522768][ T50] Bluetooth: hci6: command tx timeout [ 229.602757][ T50] Bluetooth: hci7: command tx timeout [ 229.683399][ T50] Bluetooth: hci8: command tx timeout [ 229.762725][ T50] Bluetooth: hci9: command tx timeout [ 255.924685][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.931240][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 276.402834][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 280.647774][ T5626] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 280.655337][ T5626] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 280.664079][ T5626] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 280.671934][ T5626] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 280.679894][ T5626] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 281.168549][ T5626] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 281.176263][ T5626] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 281.184310][ T5626] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 281.192039][ T5626] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 281.199725][ T5626] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 281.212367][ T5626] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 281.219948][ T5626] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 281.227756][ T5626] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 281.236542][ T5626] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 281.244187][ T5626] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 281.690844][ T50] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 281.698324][T10085] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 281.705704][ T50] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 281.707766][T10085] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 281.715202][ T50] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 281.720897][T10085] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 281.728404][ T50] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 281.739747][T10085] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 281.743646][ T50] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 281.750429][T10085] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 282.722910][ T4938] Bluetooth: hci10: command tx timeout [ 283.282701][ T4938] Bluetooth: hci12: command tx timeout [ 283.282724][T10085] Bluetooth: hci11: command tx timeout [ 283.762682][T10085] Bluetooth: hci13: command tx timeout [ 283.842752][T10085] Bluetooth: hci14: command tx timeout [ 284.802705][T10085] Bluetooth: hci10: command tx timeout [ 285.362839][T10085] Bluetooth: hci11: command tx timeout [ 285.362971][ T4938] Bluetooth: hci12: command tx timeout [ 285.842748][ T4938] Bluetooth: hci13: command tx timeout [ 285.922718][ T4938] Bluetooth: hci14: command tx timeout [ 286.882787][ T4938] Bluetooth: hci10: command tx timeout [ 287.442693][ T4938] Bluetooth: hci12: command tx timeout [ 287.442711][T10085] Bluetooth: hci11: command tx timeout [ 287.922910][T10085] Bluetooth: hci13: command tx timeout [ 288.002776][T10085] Bluetooth: hci14: command tx timeout [ 288.962753][T10085] Bluetooth: hci10: command tx timeout [ 289.522755][T10085] Bluetooth: hci12: command tx timeout [ 289.524344][ T4938] Bluetooth: hci11: command tx timeout [ 290.002745][ T4938] Bluetooth: hci13: command tx timeout [ 290.082696][ T4938] Bluetooth: hci14: command tx timeout [ 317.364498][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.370908][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.683127][ T4938] Bluetooth: hci3: command 0x0406 tx timeout [ 340.710815][ T4938] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 340.719779][ T4938] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 340.728049][ T4938] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 340.735890][ T4938] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 340.743638][ T4938] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 341.239628][ T4938] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 341.247768][ T4938] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 341.255966][ T4938] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 341.264206][ T4938] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 341.271819][ T4938] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 341.286239][ T4938] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 341.295347][ T4938] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 341.302903][ T4938] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 341.310804][ T4938] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 341.320344][ T4938] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 341.742322][ T4938] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 341.749791][ T4938] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 341.757353][ T4938] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 341.765596][ T4938] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 341.773401][ T4938] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 341.791455][ T4938] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 341.799075][ T4938] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 341.807115][ T4938] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 341.815349][ T4938] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 341.823108][ T4938] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 342.803228][ T4938] Bluetooth: hci15: command tx timeout [ 343.282742][ T5623] Bluetooth: hci16: command tx timeout [ 343.362722][ T5623] Bluetooth: hci17: command tx timeout [ 343.843084][ T5623] Bluetooth: hci19: command tx timeout [ 343.843113][T10799] Bluetooth: hci18: command tx timeout [ 344.883019][T10799] Bluetooth: hci15: command tx timeout [ 345.043065][T10799] Bluetooth: hci7: command 0x0406 tx timeout [ 345.043104][ T5623] Bluetooth: hci6: command 0x0406 tx timeout [ 345.049979][ T9996] Bluetooth: hci8: command 0x0406 tx timeout [ 345.055799][ T5623] Bluetooth: hci9: command 0x0406 tx timeout [ 345.062007][T10799] Bluetooth: hci5: command 0x0406 tx timeout [ 345.362713][ T4938] Bluetooth: hci16: command tx timeout [ 345.442796][ T4938] Bluetooth: hci17: command tx timeout [ 345.923108][ T4938] Bluetooth: hci18: command tx timeout [ 345.923128][ T5621] Bluetooth: hci19: command tx timeout [ 346.963098][ T4938] Bluetooth: hci15: command tx timeout [ 347.443032][ T4938] Bluetooth: hci16: command tx timeout [ 347.522703][ T4938] Bluetooth: hci17: command tx timeout [ 348.003084][ T5621] Bluetooth: hci19: command tx timeout [ 348.008844][ T4938] Bluetooth: hci18: command tx timeout [ 349.043050][ T4938] Bluetooth: hci15: command tx timeout [ 349.522676][ T4938] Bluetooth: hci16: command tx timeout [ 349.602685][ T4938] Bluetooth: hci17: command tx timeout [ 350.082932][ T5621] Bluetooth: hci19: command tx timeout [ 350.088491][ T4938] Bluetooth: hci18: command tx timeout [ 367.923068][ T31] INFO: task kworker/u8:8:1130 blocked for more than 143 seconds. [ 367.931043][ T31] Not tainted syzkaller #0 [ 367.936200][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 367.944981][ T31] task:kworker/u8:8 state:D stack:21864 pid:1130 tgid:1130 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 367.957078][ T31] Workqueue: events_unbound linkwatch_event [ 367.963242][ T31] Call Trace: [ 367.966647][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 367.969639][ T31] __schedule+0x17d9/0x56c0 [ 367.974355][ T31] ? rcu_is_watching+0x15/0xb0 [ 367.979637][ T31] ? rcu_is_watching+0x15/0xb0 [ 367.985090][ T31] ? irqentry_exit+0x218/0x8f0 [ 367.990006][ T31] ? trace_irq_disable+0x3b/0x140 [ 367.995216][ T31] ? __pfx___schedule+0x10/0x10 [ 368.000119][ T31] ? rcu_is_watching+0x15/0xb0 [ 368.005119][ T31] ? rcu_is_watching+0x15/0xb0 [ 368.009950][ T31] ? lock_release+0x4b/0x3c0 [ 368.014758][ T31] ? wq_worker_sleeping+0x66/0x250 [ 368.025478][ T31] schedule+0x164/0x360 [ 368.048809][ T31] schedule_preempt_disabled+0x13/0x30 [ 368.067457][ T31] __mutex_lock+0x7bf/0x1550 [ 368.078217][ T31] ? __mutex_lock+0x5d4/0x1550 [ 368.083502][ T31] ? linkwatch_event+0xe/0x60 [ 368.088248][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 368.093506][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 368.099292][ T31] ? rcu_is_watching+0x15/0xb0 [ 368.104194][ T31] ? rcu_is_watching+0x15/0xb0 [ 368.109006][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 368.115006][ T31] linkwatch_event+0xe/0x60 [ 368.119571][ T31] process_scheduled_works+0xa8e/0x14e0 [ 368.125247][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 368.131267][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.136443][ T31] ? assign_work+0x3cf/0x5d0 [ 368.141064][ T31] worker_thread+0xa47/0xfb0 [ 368.145777][ T31] ? __kthread_parkme+0x71/0x1f0 [ 368.150779][ T31] kthread+0x388/0x470 [ 368.154922][ T31] ? __pfx_worker_thread+0x10/0x10 [ 368.160077][ T31] ? __pfx_kthread+0x10/0x10 [ 368.164794][ T31] ret_from_fork+0x514/0xb70 [ 368.169542][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 368.174759][ T31] ? __switch_to+0xc89/0x1420 [ 368.179475][ T31] ? __pfx_kthread+0x10/0x10 [ 368.184186][ T31] ret_from_fork_asm+0x1a/0x30 [ 368.189038][ T31] [ 368.192157][ T31] INFO: task kworker/u8:9:1163 blocked for more than 143 seconds. [ 368.200049][ T31] Not tainted syzkaller #0 [ 368.205147][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 368.214002][ T31] task:kworker/u8:9 state:D stack:20720 pid:1163 tgid:1163 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 368.226203][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 368.232314][ T31] Call Trace: [ 368.235685][ T31] [ 368.238647][ T31] __schedule+0x17d9/0x56c0 [ 368.243301][ T31] ? deref_stack_reg+0x18e/0x220 [ 368.248546][ T31] ? unwind_next_frame+0x8f/0x2550 [ 368.253923][ T31] ? unwind_next_frame+0x1baf/0x2550 [ 368.259691][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 368.264726][ T31] ? unwind_next_frame+0x8f/0x2550 [ 368.269908][ T31] ? arch_stack_walk+0x11b/0x150 [ 368.274954][ T31] ? __pfx___schedule+0x10/0x10 [ 368.279854][ T31] ? rcu_is_watching+0x15/0xb0 [ 368.284725][ T31] ? rcu_is_watching+0x15/0xb0 [ 368.289545][ T31] ? lock_release+0x4b/0x3c0 [ 368.294246][ T31] ? wq_worker_sleeping+0x66/0x250 [ 368.299414][ T31] schedule+0x164/0x360 [ 368.303705][ T31] schedule_preempt_disabled+0x13/0x30 [ 368.309286][ T31] __mutex_lock+0x7bf/0x1550 [ 368.314240][ T31] ? __mutex_lock+0x5d4/0x1550 [ 368.319087][ T31] ? addrconf_dad_work+0x116/0x15c0 [ 368.324419][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 368.329508][ T31] ? rcu_is_watching+0x15/0xb0 [ 368.334494][ T31] ? trace_hrtimer_start+0x82/0x200 [ 368.339795][ T31] addrconf_dad_work+0x116/0x15c0 [ 368.344937][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 368.350349][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 368.355933][ T31] ? rcu_is_watching+0x15/0xb0 [ 368.360733][ T31] ? lock_acquire+0x5f/0x350 [ 368.365422][ T31] ? rcu_is_watching+0x15/0xb0 [ 368.370245][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 368.376057][ T31] process_scheduled_works+0xa8e/0x14e0 [ 368.381658][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 368.387755][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.392875][ T31] ? assign_work+0x3cf/0x5d0 [ 368.397498][ T31] worker_thread+0xa47/0xfb0 [ 368.402115][ T31] ? __kthread_parkme+0x71/0x1f0 [ 368.407175][ T31] kthread+0x388/0x470 [ 368.411281][ T31] ? __pfx_worker_thread+0x10/0x10 [ 368.416485][ T31] ? __pfx_kthread+0x10/0x10 [ 368.421129][ T31] ret_from_fork+0x514/0xb70 [ 368.425955][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 368.431140][ T31] ? __switch_to+0xc89/0x1420 [ 368.435938][ T31] ? __pfx_kthread+0x10/0x10 [ 368.440563][ T31] ret_from_fork_asm+0x1a/0x30 [ 368.445513][ T31] [ 368.448672][ T31] INFO: task dhcpcd:5284 blocked for more than 143 seconds. [ 368.456039][ T31] Not tainted syzkaller #0 [ 368.461022][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 368.469793][ T31] task:dhcpcd state:D stack:22072 pid:5284 tgid:5284 ppid:5283 task_flags:0x400140 flags:0x00080000 [ 368.481877][ T31] Call Trace: [ 368.485282][ T31] [ 368.488265][ T31] __schedule+0x17d9/0x56c0 [ 368.492838][ T31] ? lock_release+0x4b/0x3c0 [ 368.497489][ T31] ? __pfx___schedule+0x10/0x10 [ 368.502363][ T31] ? rcu_is_watching+0x15/0xb0 [ 368.507236][ T31] ? rcu_is_watching+0x15/0xb0 [ 368.512041][ T31] ? lock_release+0x4b/0x3c0 [ 368.516729][ T31] ? rcu_is_watching+0x15/0xb0 [ 368.521589][ T31] schedule+0x164/0x360 [ 368.525871][ T31] schedule_preempt_disabled+0x13/0x30 [ 368.531387][ T31] __mutex_lock+0x7bf/0x1550 [ 368.536267][ T31] ? __mutex_lock+0x5d4/0x1550 [ 368.541114][ T31] ? inet_rtm_newaddr+0x464/0x19e0 [ 368.546415][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 368.551524][ T31] ? __nla_parse+0x40/0x60 [ 368.556222][ T31] inet_rtm_newaddr+0x464/0x19e0 [ 368.561288][ T31] ? __kernel_text_address+0xd/0x30 [ 368.566632][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 368.573132][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 368.578598][ T31] ? lock_release+0x4b/0x3c0 [ 368.583288][ T31] ? bpf_lsm_capable+0x9/0x20 [ 368.588064][ T31] ? security_capable+0x7e/0x2c0 [ 368.593221][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 368.598680][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 368.603711][ T31] ? kasan_save_track+0x3e/0x80 [ 368.608741][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 368.614098][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 368.619609][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 368.624735][ T31] ? rcu_is_watching+0x15/0xb0 [ 368.629576][ T31] netlink_rcv_skb+0x226/0x4a0 [ 368.634526][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 368.640044][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 368.645586][ T31] ? net_generic+0x1e/0x240 [ 368.650162][ T31] ? net_generic+0x1e/0x240 [ 368.654873][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 368.660124][ T31] netlink_unicast+0x7bb/0x940 [ 368.665021][ T31] netlink_sendmsg+0x813/0xb40 [ 368.669857][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.675234][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 368.680357][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 368.685800][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.691162][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 368.696203][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.701538][ T31] ? import_iovec+0x73/0xa0 [ 368.706235][ T31] ___sys_sendmsg+0x2a5/0x360 [ 368.710969][ T31] ? count_memcg_event_mm+0x21/0x260 [ 368.716381][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.721626][ T31] ? rcu_is_watching+0x15/0xb0 [ 368.726507][ T31] ? __pfx_handle_mm_fault+0x10/0x10 [ 368.731835][ T31] ? lock_vma_under_rcu+0x45a/0x500 [ 368.737139][ T31] ? __pfx_set_user_sigmask+0x10/0x10 [ 368.742860][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 368.747850][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 368.753572][ T31] ? lock_release+0x4b/0x3c0 [ 368.758225][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 368.763604][ T31] ? rcu_is_watching+0x15/0xb0 [ 368.768436][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.774643][ T31] do_syscall_64+0x174/0x580 [ 368.779376][ T31] ? trace_irq_disable+0x3b/0x140 [ 368.784503][ T31] ? clear_bhb_loop+0x40/0x90 [ 368.789221][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.795220][ T31] RIP: 0033:0x7f5334501407 [ 368.799662][ T31] RSP: 002b:00007ffc436940c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 368.808732][ T31] RAX: ffffffffffffffda RBX: 00007f5334477780 RCX: 00007f5334501407 [ 368.816983][ T31] RDX: 0000000000000000 RSI: 00007ffc436a82a0 RDI: 0000000000000004 [ 368.825060][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 368.833157][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc436b84d0 [ 368.841168][ T31] R13: 00007f5334477708 R14: 0000000000000044 R15: 00007ffc436a82a0 [ 368.849493][ T31] [ 368.852660][ T31] INFO: task kworker/1:9:5974 blocked for more than 144 seconds. [ 368.860435][ T31] Not tainted syzkaller #0 [ 368.869094][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 368.877898][ T31] task:kworker/1:9 state:D stack:24344 pid:5974 tgid:5974 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 368.890178][ T31] Workqueue: events netdev_rx_mode_work [ 368.896234][ T31] Call Trace: [ 368.899597][ T31] [ 368.902622][ T31] __schedule+0x17d9/0x56c0 [ 368.907180][ T31] ? kasan_save_track+0x4f/0x80 [ 368.912058][ T31] ? kasan_save_track+0x3e/0x80 [ 368.917012][ T31] ? kasan_save_free_info+0x40/0x50 [ 368.922281][ T31] ? __kasan_slab_free+0x5c/0x80 [ 368.927326][ T31] ? kfree+0x1c5/0x640 [ 368.931436][ T31] ? iterate_cleanup_work+0x110/0x180 [ 368.936997][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.942098][ T31] ? __pfx___schedule+0x10/0x10 [ 368.947076][ T31] ? rcu_is_watching+0x15/0xb0 [ 368.951895][ T31] ? rcu_is_watching+0x15/0xb0 [ 368.956755][ T31] ? lock_release+0x4b/0x3c0 [ 368.961391][ T31] ? rcu_is_watching+0x15/0xb0 [ 368.966247][ T31] ? schedule+0x90/0x360 [ 368.970547][ T31] ? trace_irq_enable+0x3b/0x140 [ 368.975683][ T31] schedule+0x164/0x360 [ 368.979998][ T31] schedule_preempt_disabled+0x13/0x30 [ 368.985572][ T31] __mutex_lock+0x7bf/0x1550 [ 368.990207][ T31] ? __mutex_lock+0x5d4/0x1550 [ 368.995067][ T31] ? netdev_rx_mode_work+0x18/0x3c0 [ 369.000359][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 369.005558][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 369.011161][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 369.017008][ T31] ? rcu_is_watching+0x15/0xb0 [ 369.021811][ T31] ? lock_acquire+0x5f/0x350 [ 369.026513][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 369.032311][ T31] netdev_rx_mode_work+0x18/0x3c0 [ 369.037491][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 369.043417][ T31] process_scheduled_works+0xa8e/0x14e0 [ 369.049038][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 369.055104][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 369.060194][ T31] ? assign_work+0x3cf/0x5d0 [ 369.064900][ T31] worker_thread+0xa47/0xfb0 [ 369.069569][ T31] kthread+0x388/0x470 [ 369.073735][ T31] ? __pfx_worker_thread+0x10/0x10 [ 369.078904][ T31] ? __pfx_kthread+0x10/0x10 [ 369.083778][ T31] ret_from_fork+0x514/0xb70 [ 369.088449][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 369.093656][ T31] ? __switch_to+0xc89/0x1420 [ 369.098413][ T31] ? __pfx_kthread+0x10/0x10 [ 369.103107][ T31] ret_from_fork_asm+0x1a/0x30 [ 369.107938][ T31] [ 369.111031][ T31] INFO: task kworker/u8:13:6249 blocked for more than 144 seconds. [ 369.119044][ T31] Not tainted syzkaller #0 [ 369.124154][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.133011][ T31] task:kworker/u8:13 state:D stack:22936 pid:6249 tgid:6249 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 369.145128][ T31] Workqueue: tc_filter_workqueue fw_delete_filter_work [ 369.152150][ T31] Call Trace: [ 369.155516][ T31] [ 369.158479][ T31] __schedule+0x17d9/0x56c0 [ 369.163069][ T31] ? __pfx_do_sync_core+0x10/0x10 [ 369.168129][ T31] ? smp_call_function_many_cond+0x112a/0x14b0 [ 369.174412][ T31] ? __pfx___schedule+0x10/0x10 [ 369.179303][ T31] ? rcu_is_watching+0x15/0xb0 [ 369.184234][ T31] ? rcu_is_watching+0x15/0xb0 [ 369.189033][ T31] ? lock_release+0x4b/0x3c0 [ 369.193849][ T31] ? wq_worker_sleeping+0x66/0x250 [ 369.199019][ T31] schedule+0x164/0x360 [ 369.203385][ T31] schedule_preempt_disabled+0x13/0x30 [ 369.208924][ T31] __mutex_lock+0x7bf/0x1550 [ 369.213595][ T31] ? __mutex_lock+0x5d4/0x1550 [ 369.218447][ T31] ? fw_delete_filter_work+0x16/0x30 [ 369.223826][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 369.228901][ T31] ? lock_acquire+0x5f/0x350 [ 369.233591][ T31] ? rcu_is_watching+0x15/0xb0 [ 369.238406][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 369.244216][ T31] fw_delete_filter_work+0x16/0x30 [ 369.249363][ T31] process_scheduled_works+0xa8e/0x14e0 [ 369.255010][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 369.261051][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 369.266210][ T31] ? assign_work+0x3cf/0x5d0 [ 369.270844][ T31] worker_thread+0xa47/0xfb0 [ 369.275526][ T31] kthread+0x388/0x470 [ 369.279807][ T31] ? __pfx_worker_thread+0x10/0x10 [ 369.285058][ T31] ? __pfx_kthread+0x10/0x10 [ 369.289693][ T31] ret_from_fork+0x514/0xb70 [ 369.294367][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 369.299518][ T31] ? __switch_to+0xc89/0x1420 [ 369.304491][ T31] ? __pfx_kthread+0x10/0x10 [ 369.309667][ T31] ret_from_fork_asm+0x1a/0x30 [ 369.314606][ T31] [ 369.317706][ T31] INFO: task kworker/u8:19:6264 blocked for more than 144 seconds. [ 369.325705][ T31] Not tainted syzkaller #0 [ 369.330703][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.339479][ T31] task:kworker/u8:19 state:D stack:22648 pid:6264 tgid:6264 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 369.351561][ T31] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 369.359044][ T31] Call Trace: [ 369.362373][ T31] [ 369.365376][ T31] __schedule+0x17d9/0x56c0 [ 369.369924][ T31] ? arch_stack_walk+0x11b/0x150 [ 369.374955][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 369.379967][ T31] ? __pfx___schedule+0x10/0x10 [ 369.384947][ T31] ? rcu_is_watching+0x15/0xb0 [ 369.389765][ T31] ? rcu_is_watching+0x15/0xb0 [ 369.394642][ T31] ? lock_release+0x4b/0x3c0 [ 369.399275][ T31] ? wq_worker_sleeping+0x66/0x250 [ 369.404467][ T31] schedule+0x164/0x360 [ 369.408654][ T31] schedule_preempt_disabled+0x13/0x30 [ 369.414338][ T31] __mutex_lock+0x7bf/0x1550 [ 369.418982][ T31] ? __mutex_lock+0x5d4/0x1550 [ 369.423887][ T31] ? udp_tunnel_nic_device_sync_work+0x29/0xa20 [ 369.430175][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 369.435303][ T31] ? rcu_is_watching+0x15/0xb0 [ 369.440130][ T31] ? trace_irq_enable+0x3b/0x140 [ 369.445169][ T31] ? irqentry_exit+0x218/0x8f0 [ 369.450024][ T31] ? trace_irq_disable+0x3b/0x140 [ 369.455152][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 369.461013][ T31] ? rcu_is_watching+0x15/0xb0 [ 369.466038][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 369.471802][ T31] udp_tunnel_nic_device_sync_work+0x29/0xa20 [ 369.477980][ T31] ? rcu_is_watching+0x15/0xb0 [ 369.482831][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 369.488601][ T31] process_scheduled_works+0xa8e/0x14e0 [ 369.494276][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 369.500391][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 369.505540][ T31] ? assign_work+0x3cf/0x5d0 [ 369.510185][ T31] worker_thread+0xa47/0xfb0 [ 369.514883][ T31] kthread+0x388/0x470 [ 369.518985][ T31] ? __pfx_worker_thread+0x10/0x10 [ 369.524316][ T31] ? __pfx_kthread+0x10/0x10 [ 369.528960][ T31] ret_from_fork+0x514/0xb70 [ 369.533614][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 369.538757][ T31] ? __switch_to+0xc89/0x1420 [ 369.543516][ T31] ? __pfx_kthread+0x10/0x10 [ 369.548130][ T31] ret_from_fork_asm+0x1a/0x30 [ 369.552952][ T31] [ 369.556044][ T31] INFO: task syz.1.1562:10677 blocked for more than 144 seconds. [ 369.563923][ T31] Not tainted syzkaller #0 [ 369.568886][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.577876][ T31] task:syz.1.1562 state:D stack:25976 pid:10677 tgid:10677 ppid:5631 task_flags:0x400040 flags:0x00080002 [ 369.589875][ T31] Call Trace: [ 369.593303][ T31] [ 369.596257][ T31] __schedule+0x17d9/0x56c0 [ 369.600777][ T31] ? stack_trace_save+0xa9/0x100 [ 369.605796][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 369.611223][ T31] ? __pfx___schedule+0x10/0x10 [ 369.616190][ T31] ? rcu_is_watching+0x15/0xb0 [ 369.620986][ T31] ? rcu_is_watching+0x15/0xb0 [ 369.625842][ T31] ? lock_release+0x4b/0x3c0 [ 369.630480][ T31] ? rcu_is_watching+0x15/0xb0 [ 369.635493][ T31] schedule+0x164/0x360 [ 369.639719][ T31] schedule_preempt_disabled+0x13/0x30 [ 369.645391][ T31] __mutex_lock+0x7bf/0x1550 [ 369.650016][ T31] ? __mutex_lock+0x5d4/0x1550 [ 369.654846][ T31] ? tun_chr_close+0x3e/0x1c0 [ 369.659683][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 369.664818][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 369.669962][ T31] tun_chr_close+0x3e/0x1c0 [ 369.674585][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 369.679767][ T31] __fput+0x418/0xa50 [ 369.683983][ T31] task_work_run+0x1d9/0x270 [ 369.688603][ T31] ? __pfx_task_work_run+0x10/0x10 [ 369.693829][ T31] ? rcu_is_watching+0x15/0xb0 [ 369.698624][ T31] exit_to_user_mode_loop+0x1fa/0x730 [ 369.704095][ T31] ? rcu_is_watching+0x15/0xb0 [ 369.708891][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.715046][ T31] do_syscall_64+0x353/0x580 [ 369.719718][ T31] ? clear_bhb_loop+0x40/0x90 [ 369.724484][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.730414][ T31] RIP: 0033:0x7fad3ad9ce59 [ 369.734935][ T31] RSP: 002b:00007ffc20947e48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 369.743504][ T31] RAX: 0000000000000000 RBX: 00007ffc20947f30 RCX: 00007fad3ad9ce59 [ 369.751513][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 369.759566][ T31] RBP: 00000000000321ae R08: 0000000000000001 R09: 0000000000000000 [ 369.767614][ T31] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007ffc20947f70 [ 369.775680][ T31] R13: 00007fad3b015fac R14: 00000000000321f9 R15: 00007fad3b015fa0 [ 369.783744][ T31] [ 369.786811][ T31] INFO: task syz.4.1563:10682 blocked for more than 145 seconds. [ 369.794623][ T31] Not tainted syzkaller #0 [ 369.799616][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.808389][ T31] task:syz.4.1563 state:D stack:22168 pid:10682 tgid:10680 ppid:5620 task_flags:0x400140 flags:0x00080002 [ 369.820495][ T31] Call Trace: [ 369.823855][ T31] [ 369.826815][ T31] __schedule+0x17d9/0x56c0 [ 369.831338][ T31] ? rcu_is_watching+0x15/0xb0 [ 369.836201][ T31] ? rcu_is_watching+0x15/0xb0 [ 369.841029][ T31] ? irqentry_exit+0x218/0x8f0 [ 369.846042][ T31] ? trace_irq_disable+0x3b/0x140 [ 369.851134][ T31] ? __pfx___schedule+0x10/0x10 [ 369.856265][ T31] ? rcu_is_watching+0x15/0xb0 [ 369.861188][ T31] ? rcu_is_watching+0x15/0xb0 [ 369.866068][ T31] ? lock_release+0x4b/0x3c0 [ 369.870704][ T31] ? rcu_is_watching+0x15/0xb0 [ 369.875539][ T31] schedule+0x164/0x360 [ 369.879747][ T31] schedule_preempt_disabled+0x13/0x30 [ 369.885292][ T31] __mutex_lock+0x7bf/0x1550 [ 369.889928][ T31] ? __mutex_lock+0x5d4/0x1550 [ 369.894775][ T31] ? __ethtool_get_link_ksettings+0x109/0x250 [ 369.900966][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 369.906090][ T31] ? igmp_group_added+0x238/0x910 [ 369.911237][ T31] ? igmpv3_del_delrec+0x204/0x710 [ 369.916427][ T31] __ethtool_get_link_ksettings+0x109/0x250 [ 369.922360][ T31] bond_netdev_event+0x643/0xf80 [ 369.927936][ T31] ? __pfx_bond_netdev_event+0x10/0x10 [ 369.933540][ T31] ? __pfx_inetdev_event+0x10/0x10 [ 369.938707][ T31] ? preempt_schedule_notrace+0x57/0x90 [ 369.944345][ T31] ? ipmr_device_event+0x1f6/0x220 [ 369.949580][ T31] notifier_call_chain+0x1a5/0x3d0 [ 369.954810][ T31] __dev_notify_flags+0x1aa/0x310 [ 369.959979][ T31] ? __pfx___dev_notify_flags+0x10/0x10 [ 369.965756][ T31] ? __dev_change_flags+0x5f1/0x820 [ 369.971024][ T31] ? __pfx___dev_change_flags+0x10/0x10 [ 369.976652][ T31] netif_change_flags+0xde/0x1b0 [ 369.981639][ T31] dev_change_flags+0x128/0x260 [ 369.986565][ T31] vlan_device_event+0x1b4e/0x1f00 [ 369.991825][ T31] ? packet_notifier+0xf1b/0xf70 [ 369.996955][ T31] ? br_device_event+0x282/0x9c0 [ 370.002006][ T31] ? __pfx_phonet_device_notify+0x10/0x10 [ 370.007928][ T31] ? __pfx_vlan_device_event+0x10/0x10 [ 370.013484][ T31] ? bcm_notifier+0xa9/0x890 [ 370.018192][ T31] ? nlmsg_notify+0x142/0x1a0 [ 370.022948][ T31] ? raw_notifier+0x9d/0x7d0 [ 370.027567][ T31] ? cgw_notifier+0x314/0x380 [ 370.032254][ T31] notifier_call_chain+0x1a5/0x3d0 [ 370.037461][ T31] __dev_notify_flags+0x1aa/0x310 [ 370.042606][ T31] ? __pfx___dev_notify_flags+0x10/0x10 [ 370.048211][ T31] ? __dev_change_flags+0x5f1/0x820 [ 370.053503][ T31] ? __pfx___dev_change_flags+0x10/0x10 [ 370.059090][ T31] ? netif_rx_mode_sync+0x15d/0x1e0 [ 370.064361][ T31] ? trace_irq_enable+0x3b/0x140 [ 370.069359][ T31] netif_change_flags+0xde/0x1b0 [ 370.074531][ T31] do_setlink+0xdd6/0x4670 [ 370.079053][ T31] ? trace_sched_exit_tp+0x3a/0x130 [ 370.084461][ T31] ? __schedule+0x17ef/0x56c0 [ 370.089194][ T31] ? __pfx_do_setlink+0x10/0x10 [ 370.094125][ T31] ? _printk+0xdd/0x130 [ 370.098351][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 370.103452][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.108276][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.113121][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.117909][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.122768][ T31] ? trace_irq_enable+0x3b/0x140 [ 370.127742][ T31] ? __mutex_lock+0x1092/0x1550 [ 370.132690][ T31] ? __mutex_lock+0x5d4/0x1550 [ 370.137500][ T31] ? rtnl_newlink+0x8a3/0x1bd0 [ 370.142284][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 370.147421][ T31] ? ns_capable+0x89/0xe0 [ 370.151799][ T31] ? rtnl_link_get_net_capable+0xd3/0x310 [ 370.157598][ T31] rtnl_newlink+0x148e/0x1bd0 [ 370.162314][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 370.167426][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.173565][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.178350][ T31] ? trace_irq_enable+0x3b/0x140 [ 370.183497][ T31] ? nlmon_xmit+0xb0/0x100 [ 370.188071][ T31] ? kmem_cache_free+0x182/0x650 [ 370.193129][ T31] ? dev_hard_start_xmit+0x7c7/0x830 [ 370.198586][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 370.203814][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 370.208961][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.213799][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 370.218937][ T31] ? trace_irq_enable+0x3b/0x140 [ 370.223967][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 370.229107][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 370.234288][ T31] ? __local_bh_enable_ip+0xd0/0x130 [ 370.239609][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 370.244859][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 370.250201][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.255100][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 370.260164][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.265023][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 370.270082][ T31] ? lock_release+0x4b/0x3c0 [ 370.274743][ T31] ? bpf_lsm_capable+0x9/0x20 [ 370.279448][ T31] ? security_capable+0x7e/0x2c0 [ 370.284504][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 370.289611][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 370.294819][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 370.300004][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 370.305566][ T31] ? ref_tracker_free+0x689/0x830 [ 370.310665][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 370.316124][ T31] ? __asan_memcpy+0x40/0x70 [ 370.320748][ T31] ? __skb_clone+0x5c/0x6c0 [ 370.325407][ T31] netlink_rcv_skb+0x226/0x4a0 [ 370.330259][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 370.335827][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 370.341161][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.346467][ T31] netlink_unicast+0x7bb/0x940 [ 370.351278][ T31] netlink_sendmsg+0x813/0xb40 [ 370.356157][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.361505][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 370.366560][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 370.371887][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.377481][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 370.382333][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.387735][ T31] ? lock_release+0x4b/0x3c0 [ 370.392376][ T31] ? import_iovec+0x73/0xa0 [ 370.396990][ T31] ___sys_sendmsg+0x2a5/0x360 [ 370.401762][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.407186][ T31] ? futex_wake+0x51b/0x5f0 [ 370.411768][ T31] ? __fget_files+0x2a/0x420 [ 370.416434][ T31] ? __fget_files+0x3a2/0x420 [ 370.421144][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 370.426154][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.431662][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.436536][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.442665][ T31] do_syscall_64+0x174/0x580 [ 370.447315][ T31] ? clear_bhb_loop+0x40/0x90 [ 370.452028][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.457997][ T31] RIP: 0033:0x7ffb6479ce59 [ 370.462456][ T31] RSP: 002b:00007ffb629d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.470965][ T31] RAX: ffffffffffffffda RBX: 00007ffb64a16090 RCX: 00007ffb6479ce59 [ 370.479104][ T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 370.487261][ T31] RBP: 00007ffb64832e6f R08: 0000000000000000 R09: 0000000000000000 [ 370.495311][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.503356][ T31] R13: 00007ffb64a16128 R14: 00007ffb64a16090 R15: 00007ffcedc83c28 [ 370.511371][ T31] [ 370.514642][ T31] INFO: task syz.4.1563:10683 blocked for more than 145 seconds. [ 370.522407][ T31] Not tainted syzkaller #0 [ 370.527459][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.536174][ T31] task:syz.4.1563 state:D stack:26136 pid:10683 tgid:10680 ppid:5620 task_flags:0x400140 flags:0x00080002 [ 370.548176][ T31] Call Trace: [ 370.551483][ T31] [ 370.554497][ T31] __schedule+0x17d9/0x56c0 [ 370.559048][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 370.564169][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.568964][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.573983][ T31] ? __pfx___schedule+0x10/0x10 [ 370.578882][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.583713][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.588508][ T31] ? lock_release+0x4b/0x3c0 [ 370.593190][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.597996][ T31] schedule+0x164/0x360 [ 370.602194][ T31] schedule_preempt_disabled+0x13/0x30 [ 370.607771][ T31] __mutex_lock+0x7bf/0x1550 [ 370.612409][ T31] ? __mutex_lock+0x5d4/0x1550 [ 370.617309][ T31] ? rtnl_newlink+0x8a3/0x1bd0 [ 370.622141][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 370.627506][ T31] ? ns_capable+0x89/0xe0 [ 370.631906][ T31] ? rtnl_link_get_net_capable+0xd3/0x310 [ 370.637773][ T31] rtnl_newlink+0x8a3/0x1bd0 [ 370.642413][ T31] ? rtnl_newlink+0x8c1/0x1bd0 [ 370.647279][ T31] ? netlink_deliver_tap+0x19c/0x1b0 [ 370.652655][ T31] ? netlink_unicast+0x77f/0x940 [ 370.657633][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 370.662804][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.668932][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.673825][ T31] ? trace_irq_enable+0x3b/0x140 [ 370.678804][ T31] ? nlmon_xmit+0xb0/0x100 [ 370.683303][ T31] ? kmem_cache_free+0x182/0x650 [ 370.688286][ T31] ? dev_hard_start_xmit+0x7c7/0x830 [ 370.693694][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 370.698843][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 370.704024][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.708823][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 370.714037][ T31] ? trace_irq_enable+0x3b/0x140 [ 370.719012][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 370.724208][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 370.729344][ T31] ? __local_bh_enable_ip+0xd0/0x130 [ 370.734852][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 370.740033][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 370.745187][ T31] ? lock_release+0x4b/0x3c0 [ 370.749828][ T31] ? bpf_lsm_capable+0x9/0x20 [ 370.754605][ T31] ? security_capable+0x7e/0x2c0 [ 370.759612][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 370.764728][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 370.769725][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 370.774918][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 370.780423][ T31] ? ref_tracker_free+0x689/0x830 [ 370.785559][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 370.790987][ T31] ? __asan_memcpy+0x40/0x70 [ 370.795681][ T31] ? __skb_clone+0x5c/0x6c0 [ 370.800237][ T31] netlink_rcv_skb+0x226/0x4a0 [ 370.805159][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 370.810662][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 370.816151][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.821400][ T31] netlink_unicast+0x7bb/0x940 [ 370.826749][ T31] netlink_sendmsg+0x813/0xb40 [ 370.831664][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.837055][ T31] ? futex_unqueue+0x22/0x240 [ 370.841779][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 370.846938][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 370.852294][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.857680][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 370.862565][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.867915][ T31] ? lock_release+0x4b/0x3c0 [ 370.872627][ T31] ? import_iovec+0x73/0xa0 [ 370.877189][ T31] ___sys_sendmsg+0x2a5/0x360 [ 370.881902][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.887275][ T31] ? futex_wait+0x2a2/0x390 [ 370.892118][ T31] ? __fget_files+0x2a/0x420 [ 370.896876][ T31] ? __fget_files+0x3a2/0x420 [ 370.902295][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 370.907366][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.912924][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.917728][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.923931][ T31] do_syscall_64+0x174/0x580 [ 370.928577][ T31] ? trace_irq_disable+0x3b/0x140 [ 370.933697][ T31] ? clear_bhb_loop+0x40/0x90 [ 370.938419][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.944430][ T31] RIP: 0033:0x7ffb6479ce59 [ 370.948882][ T31] RSP: 002b:00007ffb629b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.957567][ T31] RAX: ffffffffffffffda RBX: 00007ffb64a16180 RCX: 00007ffb6479ce59 [ 370.965853][ T31] RDX: 00000000200088c2 RSI: 0000200000000340 RDI: 0000000000000008 [ 370.975054][ T31] RBP: 00007ffb64832e6f R08: 0000000000000000 R09: 0000000000000000 [ 370.983427][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.991500][ T31] R13: 00007ffb64a16218 R14: 00007ffb64a16180 R15: 00007ffcedc83c28 [ 370.999629][ T31] [ 371.002836][ T31] INFO: task syz.3.1565:10690 blocked for more than 146 seconds. [ 371.010615][ T31] Not tainted syzkaller #0 [ 371.015684][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.025966][ T31] task:syz.3.1565 state:D stack:26968 pid:10690 tgid:10688 ppid:5630 task_flags:0x400140 flags:0x00080002 [ 371.038081][ T31] Call Trace: [ 371.041387][ T31] [ 371.044511][ T31] __schedule+0x17d9/0x56c0 [ 371.049090][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 371.054725][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 371.059998][ T31] ? kernel_text_address+0xa5/0xe0 [ 371.065363][ T31] ? unwind_get_return_address+0x4d/0x90 [ 371.071144][ T31] ? __pfx___schedule+0x10/0x10 [ 371.076086][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.080883][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.085769][ T31] ? lock_release+0x4b/0x3c0 [ 371.090431][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.095396][ T31] schedule+0x164/0x360 [ 371.099599][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.105270][ T31] __mutex_lock+0x7bf/0x1550 [ 371.109924][ T31] ? __mutex_lock+0x5d4/0x1550 [ 371.114793][ T31] ? nl80211_vendor_cmd_dump+0x8d/0x15a0 [ 371.120559][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.125983][ T31] nl80211_vendor_cmd_dump+0x8d/0x15a0 [ 371.131839][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.137054][ T31] ? __pfx_nl80211_vendor_cmd_dump+0x10/0x10 [ 371.143670][ T31] ? __kmalloc_node_track_caller_noprof+0x4f5/0x7b0 [ 371.150354][ T31] genl_dumpit+0x10b/0x1b0 [ 371.154950][ T31] netlink_dump+0x711/0xee0 [ 371.159530][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 371.164657][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 371.169463][ T31] ? genl_start+0x497/0x6d0 [ 371.174252][ T31] __netlink_dump_start+0x589/0x7b0 [ 371.179515][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 371.185542][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 371.191847][ T31] ? __pfx_genl_start+0x10/0x10 [ 371.196785][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 371.201755][ T31] ? __pfx_genl_done+0x10/0x10 [ 371.206608][ T31] ? bpf_lsm_capable+0x9/0x20 [ 371.211324][ T31] ? security_capable+0x7e/0x2c0 [ 371.216358][ T31] genl_rcv_msg+0x5e1/0x7a0 [ 371.220900][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.226050][ T31] ? ref_tracker_free+0x689/0x830 [ 371.231132][ T31] ? __pfx_nl80211_vendor_cmd_dump+0x10/0x10 [ 371.237260][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 371.242830][ T31] ? __asan_memcpy+0x40/0x70 [ 371.247578][ T31] ? __skb_clone+0x5c/0x6c0 [ 371.252126][ T31] netlink_rcv_skb+0x226/0x4a0 [ 371.257129][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.262216][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.267702][ T31] ? down_read+0x2be/0x330 [ 371.272194][ T31] genl_rcv+0x28/0x40 [ 371.276245][ T31] netlink_unicast+0x7bb/0x940 [ 371.281137][ T31] netlink_sendmsg+0x813/0xb40 [ 371.286157][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.291512][ T31] ? futex_unqueue+0x22/0x240 [ 371.296378][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 371.301386][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.307081][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.312432][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 371.317415][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.323054][ T31] ? lock_release+0x4b/0x3c0 [ 371.327712][ T31] ? import_iovec+0x73/0xa0 [ 371.332227][ T31] ___sys_sendmsg+0x2a5/0x360 [ 371.337189][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.342455][ T31] ? futex_wait+0x2a2/0x390 [ 371.347060][ T31] ? __fget_files+0x2a/0x420 [ 371.351789][ T31] ? __fget_files+0x3a2/0x420 [ 371.356612][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 371.361603][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.367182][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.371981][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.378178][ T31] do_syscall_64+0x174/0x580 [ 371.382874][ T31] ? clear_bhb_loop+0x40/0x90 [ 371.387586][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.393582][ T31] RIP: 0033:0x7f7213d9ce59 [ 371.398024][ T31] RSP: 002b:00007f7214c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.406550][ T31] RAX: ffffffffffffffda RBX: 00007f7214016090 RCX: 00007f7213d9ce59 [ 371.414619][ T31] RDX: 0000000000000040 RSI: 0000200000000080 RDI: 0000000000000009 [ 371.422691][ T31] RBP: 00007f7213e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 371.430707][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.438759][ T31] R13: 00007f7214016128 R14: 00007f7214016090 R15: 00007ffd438216a8 [ 371.446810][ T31] [ 371.449840][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 371.459088][ T31] INFO: task syz.2.1567:10692 blocked for more than 146 seconds. [ 371.467003][ T31] Not tainted syzkaller #0 [ 371.471971][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.480748][ T31] task:syz.2.1567 state:D stack:28696 pid:10692 tgid:10691 ppid:5627 task_flags:0x400040 flags:0x00080002 [ 371.492743][ T31] Call Trace: [ 371.496032][ T31] [ 371.498995][ T31] __schedule+0x17d9/0x56c0 [ 371.503605][ T31] ? __pfx___schedule+0x10/0x10 [ 371.508507][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.513359][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.518168][ T31] ? lock_release+0x4b/0x3c0 [ 371.522972][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.527775][ T31] schedule+0x164/0x360 [ 371.531995][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.537628][ T31] __mutex_lock+0x7bf/0x1550 [ 371.542257][ T31] ? __mutex_lock+0x5d4/0x1550 [ 371.547116][ T31] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 371.552183][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.557286][ T31] ? lock_release+0x4b/0x3c0 [ 371.562021][ T31] ? __might_fault+0xaf/0x130 [ 371.566812][ T31] ? __might_fault+0xcb/0x130 [ 371.571619][ T31] __tun_chr_ioctl+0x3bc/0x1e10 [ 371.576562][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 371.581895][ T31] ? __fget_files+0x2a/0x420 [ 371.586567][ T31] ? __fget_files+0x3a2/0x420 [ 371.591277][ T31] ? __fget_files+0x2a/0x420 [ 371.595986][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 371.601000][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 371.606269][ T31] __se_sys_ioctl+0xfc/0x170 [ 371.610928][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.617067][ T31] do_syscall_64+0x174/0x580 [ 371.621702][ T31] ? trace_irq_disable+0x3b/0x140 [ 371.626818][ T31] ? clear_bhb_loop+0x40/0x90 [ 371.631534][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.637575][ T31] RIP: 0033:0x7f3e4139ce59 [ 371.642040][ T31] RSP: 002b:00007f3e4222d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.650538][ T31] RAX: ffffffffffffffda RBX: 00007f3e41615fa0 RCX: 00007f3e4139ce59 [ 371.658756][ T31] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005 [ 371.667013][ T31] RBP: 00007f3e41432e6f R08: 0000000000000000 R09: 0000000000000000 [ 371.675122][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.683182][ T31] R13: 00007f3e41616038 R14: 00007f3e41615fa0 R15: 00007ffc9d3ec4c8 [ 371.691210][ T31] [ 371.694332][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 371.703622][ T31] INFO: task syz.2.1567:10694 blocked for more than 147 seconds. [ 371.711385][ T31] Not tainted syzkaller #0 [ 371.717347][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.726103][ T31] task:syz.2.1567 state:D stack:27056 pid:10694 tgid:10691 ppid:5627 task_flags:0x400040 flags:0x00080002 [ 371.738102][ T31] Call Trace: [ 371.741421][ T31] [ 371.744439][ T31] __schedule+0x17d9/0x56c0 [ 371.748988][ T31] ? __futex_wait+0x358/0x400 [ 371.753754][ T31] ? __pfx___schedule+0x10/0x10 [ 371.758635][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.763509][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.768308][ T31] ? lock_release+0x4b/0x3c0 [ 371.773332][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.778342][ T31] schedule+0x164/0x360 [ 371.782987][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.788590][ T31] __mutex_lock+0x7bf/0x1550 [ 371.793301][ T31] ? __mutex_lock+0x5d4/0x1550 [ 371.798116][ T31] ? tun_chr_close+0x3e/0x1c0 [ 371.802947][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.808046][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 371.813299][ T31] tun_chr_close+0x3e/0x1c0 [ 371.817861][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 371.823076][ T31] __fput+0x418/0xa50 [ 371.827115][ T31] fput_close_sync+0x11f/0x240 [ 371.831956][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 371.837431][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.843796][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.849926][ T31] __x64_sys_close+0x7e/0x110 [ 371.854705][ T31] do_syscall_64+0x174/0x580 [ 371.859339][ T31] ? trace_irq_disable+0x3b/0x140 [ 371.864438][ T31] ? clear_bhb_loop+0x40/0x90 [ 371.869145][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.875096][ T31] RIP: 0033:0x7f3e4139ce59 [ 371.879591][ T31] RSP: 002b:00007f3e4220c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 371.888077][ T31] RAX: ffffffffffffffda RBX: 00007f3e41616090 RCX: 00007f3e4139ce59 [ 371.896107][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 371.904148][ T31] RBP: 00007f3e41432e6f R08: 0000000000000000 R09: 0000000000000000 [ 371.912156][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.920196][ T31] R13: 00007f3e41616128 R14: 00007f3e41616090 R15: 00007ffc9d3ec4c8 [ 371.929005][ T31] [ 371.932209][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 371.941386][ T31] INFO: task syz.2.1567:10697 blocked for more than 147 seconds. [ 371.949210][ T31] Not tainted syzkaller #0 [ 371.954238][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.962968][ T31] task:syz.2.1567 state:D stack:27568 pid:10697 tgid:10691 ppid:5627 task_flags:0x400140 flags:0x00080002 [ 371.974974][ T31] Call Trace: [ 371.978284][ T31] [ 371.981234][ T31] __schedule+0x17d9/0x56c0 [ 371.985824][ T31] ? trace_irq_enable+0x3b/0x140 [ 371.990821][ T31] ? __pfx___schedule+0x10/0x10 [ 371.995813][ T31] ? rcu_is_watching+0x15/0xb0 [ 372.000624][ T31] ? rcu_is_watching+0x15/0xb0 [ 372.005619][ T31] ? lock_release+0x4b/0x3c0 [ 372.010445][ T31] ? rcu_is_watching+0x15/0xb0 [ 372.015320][ T31] schedule+0x164/0x360 [ 372.019526][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.025086][ T31] __mutex_lock+0x7bf/0x1550 [ 372.029732][ T31] ? __mutex_lock+0x5d4/0x1550 [ 372.034598][ T31] ? rtnetlink_rcv_msg+0x767/0xc00 [ 372.039748][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.044860][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 372.050016][ T31] ? rcu_is_watching+0x15/0xb0 [ 372.055287][ T31] ? lock_release+0x4b/0x3c0 [ 372.059923][ T31] ? bpf_lsm_capable+0x9/0x20 [ 372.064679][ T31] ? security_capable+0x7e/0x2c0 [ 372.069670][ T31] rtnetlink_rcv_msg+0x767/0xc00 [ 372.074692][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 372.079846][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 372.085641][ T31] ? ref_tracker_free+0x689/0x830 [ 372.090718][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 372.096176][ T31] ? __asan_memcpy+0x40/0x70 [ 372.100803][ T31] ? __skb_clone+0x5c/0x6c0 [ 372.105406][ T31] netlink_rcv_skb+0x226/0x4a0 [ 372.110250][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 372.115803][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.121154][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 372.126429][ T31] netlink_unicast+0x7bb/0x940 [ 372.131238][ T31] netlink_sendmsg+0x813/0xb40 [ 372.136087][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.141414][ T31] ? futex_unqueue+0x22/0x240 [ 372.146190][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 372.151171][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.156552][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.161911][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 372.166784][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.172112][ T31] ? lock_release+0x4b/0x3c0 [ 372.176788][ T31] ? import_iovec+0x73/0xa0 [ 372.181330][ T31] ___sys_sendmsg+0x2a5/0x360 [ 372.186097][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.191341][ T31] ? futex_wait+0x2a2/0x390 [ 372.195951][ T31] ? __fget_files+0x2a/0x420 [ 372.200574][ T31] ? __fget_files+0x3a2/0x420 [ 372.205339][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 372.210317][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.215870][ T31] ? rcu_is_watching+0x15/0xb0 [ 372.220694][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.226874][ T31] do_syscall_64+0x174/0x580 [ 372.231529][ T31] ? trace_irq_disable+0x3b/0x140 [ 372.236658][ T31] ? clear_bhb_loop+0x40/0x90 [ 372.241386][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.247375][ T31] RIP: 0033:0x7f3e4139ce59 [ 372.251834][ T31] RSP: 002b:00007f3e421eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.260343][ T31] RAX: ffffffffffffffda RBX: 00007f3e41616180 RCX: 00007f3e4139ce59 [ 372.268393][ T31] RDX: 0000000000004890 RSI: 00002000000003c0 RDI: 0000000000000006 [ 372.276457][ T31] RBP: 00007f3e41432e6f R08: 0000000000000000 R09: 0000000000000000 [ 372.284630][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.292672][ T31] R13: 00007f3e41616218 R14: 00007f3e41616180 R15: 00007ffc9d3ec4c8 [ 372.300694][ T31] [ 372.303795][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 372.312894][ T31] INFO: task syz.2.1567:10701 blocked for more than 147 seconds. [ 372.320714][ T31] Not tainted syzkaller #0 [ 372.325753][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.334504][ T31] task:syz.2.1567 state:D stack:27568 pid:10701 tgid:10691 ppid:5627 task_flags:0x400140 flags:0x00080002 [ 372.346619][ T31] Call Trace: [ 372.349967][ T31] [ 372.352959][ T31] __schedule+0x17d9/0x56c0 [ 372.357522][ T31] ? trace_irq_enable+0x3b/0x140 [ 372.362568][ T31] ? __pfx___schedule+0x10/0x10 [ 372.367465][ T31] ? rcu_is_watching+0x15/0xb0 [ 372.372268][ T31] ? rcu_is_watching+0x15/0xb0 [ 372.377100][ T31] ? lock_release+0x4b/0x3c0 [ 372.381729][ T31] ? rcu_is_watching+0x15/0xb0 [ 372.386600][ T31] schedule+0x164/0x360 [ 372.390792][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.396333][ T31] __mutex_lock+0x7bf/0x1550 [ 372.400975][ T31] ? __mutex_lock+0x5d4/0x1550 [ 372.405945][ T31] ? rtnetlink_rcv_msg+0x767/0xc00 [ 372.411117][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.416257][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 372.421414][ T31] ? rcu_is_watching+0x15/0xb0 [ 372.426309][ T31] ? lock_release+0x4b/0x3c0 [ 372.430961][ T31] ? bpf_lsm_capable+0x9/0x20 [ 372.435713][ T31] ? security_capable+0x7e/0x2c0 [ 372.440691][ T31] rtnetlink_rcv_msg+0x767/0xc00 [ 372.445753][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 372.450903][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 372.456546][ T31] ? ref_tracker_free+0x689/0x830 [ 372.461617][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 372.467096][ T31] ? __asan_memcpy+0x40/0x70 [ 372.471716][ T31] ? __skb_clone+0x5c/0x6c0 [ 372.476287][ T31] netlink_rcv_skb+0x226/0x4a0 [ 372.481090][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 372.486680][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.492040][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 372.497353][ T31] netlink_unicast+0x7bb/0x940 [ 372.502175][ T31] netlink_sendmsg+0x813/0xb40 [ 372.507068][ T31] ? format_decode+0xdc/0xe20 [ 372.511779][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.517170][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 372.522138][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.527566][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.532942][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 372.537731][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.543087][ T31] ? lock_release+0x4b/0x3c0 [ 372.547714][ T31] ? import_iovec+0x73/0xa0 [ 372.552228][ T31] ___sys_sendmsg+0x2a5/0x360 [ 372.556984][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.562218][ T31] ? kfree+0x1c5/0x640 [ 372.566620][ T31] ? tomoyo_path_number_perm+0x219/0x5f0 [ 372.572879][ T31] ? __fget_files+0x2a/0x420 [ 372.577556][ T31] ? __fget_files+0x3a2/0x420 [ 372.582250][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 372.587295][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.592845][ T31] ? kfree+0x4d/0x640 [ 372.596874][ T31] ? __pfx_kcov_ioctl+0x10/0x10 [ 372.601770][ T31] ? rcu_is_watching+0x15/0xb0 [ 372.606601][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.612783][ T31] do_syscall_64+0x174/0x580 [ 372.617437][ T31] ? trace_irq_disable+0x3b/0x140 [ 372.622573][ T31] ? clear_bhb_loop+0x40/0x90 [ 372.627283][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.633287][ T31] RIP: 0033:0x7f3e4139ce59 [ 372.637761][ T31] RSP: 002b:00007f3e421ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.646294][ T31] RAX: ffffffffffffffda RBX: 00007f3e41616270 RCX: 00007f3e4139ce59 [ 372.654372][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 372.662370][ T31] RBP: 00007f3e41432e6f R08: 0000000000000000 R09: 0000000000000000 [ 372.670447][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.678483][ T31] R13: 00007f3e41616308 R14: 00007f3e41616270 R15: 00007ffc9d3ec4c8 [ 372.686554][ T31] [ 372.689599][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 372.698708][ T31] INFO: task syz.2.1567:10705 blocked for more than 148 seconds. [ 372.706497][ T31] Not tainted syzkaller #0 [ 372.711434][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.720171][ T31] task:syz.2.1567 state:D stack:27664 pid:10705 tgid:10691 ppid:5627 task_flags:0x400140 flags:0x00080002 [ 372.732173][ T31] Call Trace: [ 372.735548][ T31] [ 372.738509][ T31] __schedule+0x17d9/0x56c0 [ 372.743086][ T31] ? trace_irq_enable+0x3b/0x140 [ 372.748065][ T31] ? __pfx___schedule+0x10/0x10 [ 372.752994][ T31] ? rcu_is_watching+0x15/0xb0 [ 372.757889][ T31] ? rcu_is_watching+0x15/0xb0 [ 372.762774][ T31] ? lock_release+0x4b/0x3c0 [ 372.767406][ T31] ? rcu_is_watching+0x15/0xb0 [ 372.772220][ T31] schedule+0x164/0x360 [ 372.776486][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.781980][ T31] __mutex_lock+0x7bf/0x1550 [ 372.786691][ T31] ? __mutex_lock+0x5d4/0x1550 [ 372.791498][ T31] ? dev_ioctl+0x7a4/0x1150 [ 372.796207][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.801273][ T31] ? apparmor_capable+0x126/0x170 [ 372.806442][ T31] ? dev_load+0x21/0x1f0 [ 372.810756][ T31] dev_ioctl+0x7a4/0x1150 [ 372.815222][ T31] sock_do_ioctl+0x23e/0x320 [ 372.819858][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 372.825055][ T31] ? hook_file_ioctl+0x1f0/0x5c0 [ 372.830156][ T31] sock_ioctl+0x57a/0x7e0 [ 372.834560][ T31] ? lock_release+0x4b/0x3c0 [ 372.839187][ T31] ? rcu_is_watching+0x15/0xb0 [ 372.844073][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 372.848956][ T31] ? __fget_files+0x2a/0x420 [ 372.853687][ T31] ? __fget_files+0x3a2/0x420 [ 372.858572][ T31] ? __fget_files+0x2a/0x420 [ 372.863354][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 372.868348][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 372.873288][ T31] __se_sys_ioctl+0xfc/0x170 [ 372.877938][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.884315][ T31] do_syscall_64+0x174/0x580 [ 372.888977][ T31] ? trace_irq_disable+0x3b/0x140 [ 372.894180][ T31] ? clear_bhb_loop+0x40/0x90 [ 372.898927][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.905134][ T31] RIP: 0033:0x7f3e4139ce59 [ 372.909624][ T31] RSP: 002b:00007f3e421a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.918126][ T31] RAX: ffffffffffffffda RBX: 00007f3e41616360 RCX: 00007f3e4139ce59 [ 372.926153][ T31] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000006 [ 372.934186][ T31] RBP: 00007f3e41432e6f R08: 0000000000000000 R09: 0000000000000000 [ 372.942186][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.950239][ T31] R13: 00007f3e416163f8 R14: 00007f3e41616360 R15: 00007ffc9d3ec4c8 [ 372.958302][ T31] [ 372.961333][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 372.970944][ T31] INFO: task syz.0.1566:10696 blocked for more than 148 seconds. [ 372.978754][ T31] Not tainted syzkaller #0 [ 372.983754][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.992449][ T31] task:syz.0.1566 state:D stack:27896 pid:10696 tgid:10695 ppid:5619 task_flags:0x400040 flags:0x00080002 [ 373.004532][ T31] Call Trace: [ 373.007847][ T31] [ 373.010781][ T31] __schedule+0x17d9/0x56c0 [ 373.015409][ T31] ? __pfx___schedule+0x10/0x10 [ 373.020321][ T31] ? rcu_is_watching+0x15/0xb0 [ 373.025243][ T31] ? rcu_is_watching+0x15/0xb0 [ 373.030049][ T31] ? lock_release+0x4b/0x3c0 [ 373.034736][ T31] ? rcu_is_watching+0x15/0xb0 [ 373.039537][ T31] schedule+0x164/0x360 [ 373.044160][ T31] schedule_preempt_disabled+0x13/0x30 [ 373.049696][ T31] __mutex_lock+0x7bf/0x1550 [ 373.054387][ T31] ? __mutex_lock+0x5d4/0x1550 [ 373.059202][ T31] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 373.064340][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 373.069447][ T31] ? lock_release+0x4b/0x3c0 [ 373.074154][ T31] ? __might_fault+0xaf/0x130 [ 373.078868][ T31] ? __might_fault+0xcb/0x130 [ 373.083625][ T31] __tun_chr_ioctl+0x3bc/0x1e10 [ 373.088521][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 373.093875][ T31] ? __fget_files+0x2a/0x420 [ 373.098503][ T31] ? __fget_files+0x3a2/0x420 [ 373.103237][ T31] ? __fget_files+0x2a/0x420 [ 373.107864][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 373.112887][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 373.118054][ T31] __se_sys_ioctl+0xfc/0x170 [ 373.122734][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.128847][ T31] do_syscall_64+0x174/0x580 [ 373.133523][ T31] ? trace_irq_disable+0x3b/0x140 [ 373.138605][ T31] ? clear_bhb_loop+0x40/0x90 [ 373.143371][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.149306][ T31] RIP: 0033:0x7f560c99ce59 [ 373.153813][ T31] RSP: 002b:00007f560abf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.162252][ T31] RAX: ffffffffffffffda RBX: 00007f560cc15fa0 RCX: 00007f560c99ce59 [ 373.170342][ T31] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000003 [ 373.178453][ T31] RBP: 00007f560ca32e6f R08: 0000000000000000 R09: 0000000000000000 [ 373.186502][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.194564][ T31] R13: 00007f560cc16038 R14: 00007f560cc15fa0 R15: 00007ffd949409e8 [ 373.202913][ T31] [ 373.205979][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 373.215065][ T31] INFO: task syz.0.1566:10699 blocked for more than 148 seconds. [ 373.222850][ T31] Not tainted syzkaller #0 [ 373.227814][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.236550][ T31] task:syz.0.1566 state:D stack:28472 pid:10699 tgid:10695 ppid:5619 task_flags:0x400140 flags:0x00080002 [ 373.248558][ T31] Call Trace: [ 373.251847][ T31] [ 373.254849][ T31] __schedule+0x17d9/0x56c0 [ 373.259398][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 373.264525][ T31] ? rcu_is_watching+0x15/0xb0 [ 373.269396][ T31] ? rcu_is_watching+0x15/0xb0 [ 373.274241][ T31] ? __pfx___schedule+0x10/0x10 [ 373.279145][ T31] ? rcu_is_watching+0x15/0xb0 [ 373.283991][ T31] ? rcu_is_watching+0x15/0xb0 [ 373.288790][ T31] ? lock_release+0x4b/0x3c0 [ 373.293556][ T31] ? rcu_is_watching+0x15/0xb0 [ 373.298400][ T31] schedule+0x164/0x360 [ 373.302630][ T31] schedule_preempt_disabled+0x13/0x30 [ 373.308143][ T31] __mutex_lock+0x7bf/0x1550 [ 373.312821][ T31] ? __mutex_lock+0x5d4/0x1550 [ 373.317621][ T31] ? devinet_ioctl+0x2fb/0x1c50 [ 373.322627][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 373.327694][ T31] ? bpf_lsm_capable+0x9/0x20 [ 373.332388][ T31] ? security_capable+0x7e/0x2c0 [ 373.337445][ T31] devinet_ioctl+0x2fb/0x1c50 [ 373.342156][ T31] ? lock_release+0x4b/0x3c0 [ 373.346844][ T31] ? __might_fault+0xaf/0x130 [ 373.351563][ T31] ? __pfx_devinet_ioctl+0x10/0x10 [ 373.356785][ T31] ? get_user_ifreq+0x12b/0x180 [ 373.362380][ T31] inet_ioctl+0x42a/0x560 [ 373.367713][ T31] ? __pfx_inet_ioctl+0x10/0x10 [ 373.372665][ T31] ? lock_release+0x4b/0x3c0 [ 373.377305][ T31] ? kfree+0x1c5/0x640 [ 373.381392][ T31] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 373.387154][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 373.392220][ T31] ? packet_ioctl+0x26b/0x350 [ 373.396991][ T31] sock_do_ioctl+0x101/0x320 [ 373.401631][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 373.406885][ T31] ? hook_file_ioctl+0x1f0/0x5c0 [ 373.411884][ T31] sock_ioctl+0x57a/0x7e0 [ 373.416291][ T31] ? lock_release+0x4b/0x3c0 [ 373.420914][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 373.425834][ T31] ? __fget_files+0x2a/0x420 [ 373.430547][ T31] ? __fget_files+0x3a2/0x420 [ 373.435300][ T31] ? __fget_files+0x2a/0x420 [ 373.439930][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 373.445027][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 373.449924][ T31] __se_sys_ioctl+0xfc/0x170 [ 373.454626][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.460729][ T31] do_syscall_64+0x174/0x580 [ 373.465405][ T31] ? trace_irq_disable+0x3b/0x140 [ 373.470470][ T31] ? clear_bhb_loop+0x40/0x90 [ 373.475225][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.481267][ T31] RIP: 0033:0x7f560c99ce59 [ 373.485777][ T31] RSP: 002b:00007f560abd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.494258][ T31] RAX: ffffffffffffffda RBX: 00007f560cc16090 RCX: 00007f560c99ce59 [ 373.502267][ T31] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000005 [ 373.510379][ T31] RBP: 00007f560ca32e6f R08: 0000000000000000 R09: 0000000000000000 [ 373.518434][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.526582][ T31] R13: 00007f560cc16128 R14: 00007f560cc16090 R15: 00007ffd949409e8 [ 373.534689][ T31] [ 373.537747][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 373.546839][ T31] INFO: task syz-executor:10716 blocked for more than 148 seconds. [ 373.554781][ T31] Not tainted syzkaller #0 [ 373.559751][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.568505][ T31] task:syz-executor state:D stack:27088 pid:10716 tgid:10716 ppid:1 task_flags:0x400140 flags:0x00080002 [ 373.580531][ T31] Call Trace: [ 373.583898][ T31] [ 373.586854][ T31] __schedule+0x17d9/0x56c0 [ 373.591386][ T31] ? __update_page_owner_handle+0x5a/0x570 [ 373.597469][ T31] ? __pfx___schedule+0x10/0x10 [ 373.602407][ T31] ? rcu_is_watching+0x15/0xb0 [ 373.607310][ T31] ? rcu_is_watching+0x15/0xb0 [ 373.612183][ T31] ? lock_release+0x4b/0x3c0 [ 373.616858][ T31] ? rcu_is_watching+0x15/0xb0 [ 373.621661][ T31] schedule+0x164/0x360 [ 373.625905][ T31] schedule_preempt_disabled+0x13/0x30 [ 373.631408][ T31] __mutex_lock+0x7bf/0x1550 [ 373.636179][ T31] ? __mutex_lock+0x5d4/0x1550 [ 373.641009][ T31] ? inet_rtm_newaddr+0x464/0x19e0 [ 373.646206][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 373.651280][ T31] ? __nla_parse+0x40/0x60 [ 373.655791][ T31] inet_rtm_newaddr+0x464/0x19e0 [ 373.660895][ T31] ? __kernel_text_address+0xd/0x30 [ 373.666219][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 373.672425][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 373.677903][ T31] ? lock_release+0x4b/0x3c0 [ 373.682689][ T31] ? bpf_lsm_capable+0x9/0x20 [ 373.687430][ T31] ? security_capable+0x7e/0x2c0 [ 373.692428][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 373.697928][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 373.703215][ T31] ? kasan_save_track+0x3e/0x80 [ 373.708118][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 373.713331][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 373.718870][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 373.723896][ T31] ? rcu_is_watching+0x15/0xb0 [ 373.728711][ T31] netlink_rcv_skb+0x226/0x4a0 [ 373.733546][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 373.739039][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 373.744431][ T31] ? net_generic+0x1e/0x240 [ 373.748967][ T31] ? net_generic+0x1e/0x240 [ 373.753543][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 373.758781][ T31] netlink_unicast+0x7bb/0x940 [ 373.763636][ T31] netlink_sendmsg+0x813/0xb40 [ 373.768475][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.773861][ T31] ? __might_fault+0xaf/0x130 [ 373.778572][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 373.783587][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.788908][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.794280][ T31] __sys_sendto+0x626/0x6c0 [ 373.798871][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 373.803988][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 373.809326][ T31] __x64_sys_sendto+0xde/0x100 [ 373.814240][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.820346][ T31] do_syscall_64+0x174/0x580 [ 373.825001][ T31] ? trace_irq_disable+0x3b/0x140 [ 373.830074][ T31] ? clear_bhb_loop+0x40/0x90 [ 373.834844][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.840782][ T31] RIP: 0033:0x7ffb7335d68e [ 373.845270][ T31] RSP: 002b:00007ffce6ee3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 373.853763][ T31] RAX: ffffffffffffffda RBX: 000055557713e500 RCX: 00007ffb7335d68e [ 373.861919][ T31] RDX: 0000000000000028 RSI: 00007ffb74144670 RDI: 0000000000000003 [ 373.869968][ T31] RBP: 0000000000000001 R08: 00007ffce6ee30a4 R09: 000000000000000c [ 373.878072][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 373.886154][ T31] R13: 0000000000000000 R14: 00007ffb74144670 R15: 0000000000000000 [ 373.894205][ T31] [ 373.897248][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 373.906406][ T31] INFO: task syz-executor:10725 blocked for more than 149 seconds. [ 373.914466][ T31] Not tainted syzkaller #0 [ 373.919428][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.928296][ T31] task:syz-executor state:D stack:27088 pid:10725 tgid:10725 ppid:1 task_flags:0x400140 flags:0x00080002 [ 373.940323][ T31] Call Trace: [ 373.943717][ T31] [ 373.946670][ T31] __schedule+0x17d9/0x56c0 [ 373.951219][ T31] ? __update_page_owner_handle+0x5a/0x570 [ 373.957107][ T31] ? __pfx___schedule+0x10/0x10 [ 373.962006][ T31] ? rcu_is_watching+0x15/0xb0 [ 373.966862][ T31] ? rcu_is_watching+0x15/0xb0 [ 373.971666][ T31] ? lock_release+0x4b/0x3c0 [ 373.976346][ T31] ? rcu_is_watching+0x15/0xb0 [ 373.981149][ T31] schedule+0x164/0x360 [ 373.985407][ T31] schedule_preempt_disabled+0x13/0x30 [ 373.990902][ T31] __mutex_lock+0x7bf/0x1550 [ 373.995570][ T31] ? __mutex_lock+0x5d4/0x1550 [ 374.000375][ T31] ? inet_rtm_newaddr+0x464/0x19e0 [ 374.005768][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 374.010928][ T31] ? __nla_parse+0x40/0x60 [ 374.016062][ T31] inet_rtm_newaddr+0x464/0x19e0 [ 374.021280][ T31] ? __kernel_text_address+0xd/0x30 [ 374.026611][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 374.032851][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 374.038373][ T31] ? lock_release+0x4b/0x3c0 [ 374.043108][ T31] ? bpf_lsm_capable+0x9/0x20 [ 374.047814][ T31] ? security_capable+0x7e/0x2c0 [ 374.052863][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 374.058263][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 374.063275][ T31] ? kasan_save_track+0x3e/0x80 [ 374.068160][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 374.073346][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 374.078848][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 374.083943][ T31] ? rcu_is_watching+0x15/0xb0 [ 374.088915][ T31] netlink_rcv_skb+0x226/0x4a0 [ 374.093789][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 374.099292][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 374.104722][ T31] ? net_generic+0x1e/0x240 [ 374.109273][ T31] ? net_generic+0x1e/0x240 [ 374.113890][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 374.119134][ T31] netlink_unicast+0x7bb/0x940 [ 374.124172][ T31] netlink_sendmsg+0x813/0xb40 [ 374.129058][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.134425][ T31] ? __might_fault+0xaf/0x130 [ 374.139243][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 374.144276][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 374.149620][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.155013][ T31] __sys_sendto+0x626/0x6c0 [ 374.159573][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 374.164865][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 374.170186][ T31] __x64_sys_sendto+0xde/0x100 [ 374.175056][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.181179][ T31] do_syscall_64+0x174/0x580 [ 374.185850][ T31] ? trace_irq_disable+0x3b/0x140 [ 374.190910][ T31] ? clear_bhb_loop+0x40/0x90 [ 374.195664][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.201584][ T31] RIP: 0033:0x7f594e55d68e [ 374.206077][ T31] RSP: 002b:00007ffc00c130f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 374.214561][ T31] RAX: ffffffffffffffda RBX: 00005555805f0500 RCX: 00007f594e55d68e [ 374.222603][ T31] RDX: 0000000000000028 RSI: 00007f594f344670 RDI: 0000000000000003 [ 374.230609][ T31] RBP: 0000000000000001 R08: 00007ffc00c13174 R09: 000000000000000c [ 374.238751][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 374.246849][ T31] R13: 0000000000000000 R14: 00007f594f344670 R15: 0000000000000000 [ 374.254900][ T31] [ 374.257925][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 374.267005][ T31] INFO: task syz-executor:10727 blocked for more than 149 seconds. [ 374.274963][ T31] Not tainted syzkaller #0 [ 374.279947][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.288685][ T31] task:syz-executor state:D stack:25944 pid:10727 tgid:10727 ppid:1 task_flags:0x400140 flags:0x00080002 [ 374.300674][ T31] Call Trace: [ 374.304018][ T31] [ 374.306974][ T31] __schedule+0x17d9/0x56c0 [ 374.311494][ T31] ? __update_page_owner_handle+0x5a/0x570 [ 374.317386][ T31] ? __pfx___schedule+0x10/0x10 [ 374.322268][ T31] ? rcu_is_watching+0x15/0xb0 [ 374.327108][ T31] ? rcu_is_watching+0x15/0xb0 [ 374.331896][ T31] ? lock_release+0x4b/0x3c0 [ 374.336644][ T31] ? rcu_is_watching+0x15/0xb0 [ 374.341514][ T31] schedule+0x164/0x360 [ 374.345770][ T31] schedule_preempt_disabled+0x13/0x30 [ 374.351273][ T31] __mutex_lock+0x7bf/0x1550 [ 374.355982][ T31] ? __mutex_lock+0x5d4/0x1550 [ 374.360780][ T31] ? inet_rtm_newaddr+0x464/0x19e0 [ 374.365961][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 374.371034][ T31] ? __nla_parse+0x40/0x60 [ 374.375549][ T31] inet_rtm_newaddr+0x464/0x19e0 [ 374.380572][ T31] ? __kernel_text_address+0xd/0x30 [ 374.387189][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 374.393480][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 374.398887][ T31] ? lock_release+0x4b/0x3c0 [ 374.403545][ T31] ? bpf_lsm_capable+0x9/0x20 [ 374.408248][ T31] ? security_capable+0x7e/0x2c0 [ 374.413332][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 374.418763][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 374.423843][ T31] ? kasan_save_track+0x3e/0x80 [ 374.428755][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 374.434036][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 374.439530][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 374.444543][ T31] ? rcu_is_watching+0x15/0xb0 [ 374.450212][ T31] netlink_rcv_skb+0x226/0x4a0 [ 374.455122][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 374.460711][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 374.466180][ T31] ? net_generic+0x1e/0x240 [ 374.470767][ T31] ? net_generic+0x1e/0x240 [ 374.475371][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 374.480614][ T31] netlink_unicast+0x7bb/0x940 [ 374.485484][ T31] netlink_sendmsg+0x813/0xb40 [ 374.490297][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.495938][ T31] ? __might_fault+0xaf/0x130 [ 374.500692][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 374.505816][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 374.511258][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.516683][ T31] __sys_sendto+0x626/0x6c0 [ 374.521243][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 374.526425][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 374.531747][ T31] __x64_sys_sendto+0xde/0x100 [ 374.536673][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.542877][ T31] do_syscall_64+0x174/0x580 [ 374.547509][ T31] ? trace_irq_disable+0x3b/0x140 [ 374.552720][ T31] ? clear_bhb_loop+0x40/0x90 [ 374.557528][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.563505][ T31] RIP: 0033:0x7fba2015d68e [ 374.567951][ T31] RSP: 002b:00007ffe2d9b6048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 374.576856][ T31] RAX: ffffffffffffffda RBX: 000055559501c500 RCX: 00007fba2015d68e [ 374.584941][ T31] RDX: 0000000000000028 RSI: 00007fba20f44670 RDI: 0000000000000003 [ 374.592984][ T31] RBP: 0000000000000001 R08: 00007ffe2d9b60c4 R09: 000000000000000c [ 374.600972][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 374.609355][ T31] R13: 0000000000000000 R14: 00007fba20f44670 R15: 0000000000000000 [ 374.617508][ T31] [ 374.620557][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 374.629772][ T31] INFO: task syz-executor:10733 blocked for more than 150 seconds. [ 374.637761][ T31] Not tainted syzkaller #0 [ 374.642771][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.651472][ T31] task:syz-executor state:D stack:26904 pid:10733 tgid:10733 ppid:1 task_flags:0x400140 flags:0x00080002 [ 374.663628][ T31] Call Trace: [ 374.666960][ T31] [ 374.669906][ T31] __schedule+0x17d9/0x56c0 [ 374.674502][ T31] ? __update_page_owner_handle+0x5a/0x570 [ 374.680353][ T31] ? __pfx___schedule+0x10/0x10 [ 374.685284][ T31] ? rcu_is_watching+0x15/0xb0 [ 374.690077][ T31] ? rcu_is_watching+0x15/0xb0 [ 374.694903][ T31] ? lock_release+0x4b/0x3c0 [ 374.699531][ T31] ? rcu_is_watching+0x15/0xb0 [ 374.704361][ T31] schedule+0x164/0x360 [ 374.708548][ T31] schedule_preempt_disabled+0x13/0x30 [ 374.714085][ T31] __mutex_lock+0x7bf/0x1550 [ 374.718729][ T31] ? __mutex_lock+0x5d4/0x1550 [ 374.723578][ T31] ? inet_rtm_newaddr+0x464/0x19e0 [ 374.728721][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 374.733823][ T31] ? __nla_parse+0x40/0x60 [ 374.738277][ T31] inet_rtm_newaddr+0x464/0x19e0 [ 374.743282][ T31] ? __kernel_text_address+0xd/0x30 [ 374.748507][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 374.754739][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 374.760141][ T31] ? lock_release+0x4b/0x3c0 [ 374.764796][ T31] ? bpf_lsm_capable+0x9/0x20 [ 374.769494][ T31] ? security_capable+0x7e/0x2c0 [ 374.774633][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 374.780061][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 374.785082][ T31] ? kasan_save_track+0x3e/0x80 [ 374.789998][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 374.795176][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 374.800684][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 374.805698][ T31] ? rcu_is_watching+0x15/0xb0 [ 374.810492][ T31] netlink_rcv_skb+0x226/0x4a0 [ 374.815355][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 374.820874][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 374.826236][ T31] ? net_generic+0x1e/0x240 [ 374.830781][ T31] ? net_generic+0x1e/0x240 [ 374.835348][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 374.840584][ T31] netlink_unicast+0x7bb/0x940 [ 374.845415][ T31] netlink_sendmsg+0x813/0xb40 [ 374.850220][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.855621][ T31] ? __might_fault+0xaf/0x130 [ 374.860343][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 374.865352][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 374.870670][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.876038][ T31] __sys_sendto+0x626/0x6c0 [ 374.880583][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 374.885825][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 374.891168][ T31] __x64_sys_sendto+0xde/0x100 [ 374.896051][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.902177][ T31] do_syscall_64+0x174/0x580 [ 374.906874][ T31] ? trace_irq_disable+0x3b/0x140 [ 374.911938][ T31] ? clear_bhb_loop+0x40/0x90 [ 374.916783][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.922783][ T31] RIP: 0033:0x7f6c79d5d68e [ 374.927215][ T31] RSP: 002b:00007ffdf0523758 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 374.935833][ T31] RAX: ffffffffffffffda RBX: 000055558495c500 RCX: 00007f6c79d5d68e [ 374.943878][ T31] RDX: 0000000000000028 RSI: 00007f6c7ab44670 RDI: 0000000000000003 [ 374.951889][ T31] RBP: 0000000000000001 R08: 00007ffdf05237d4 R09: 000000000000000c [ 374.959931][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 374.968152][ T31] R13: 0000000000000000 R14: 00007f6c7ab44670 R15: 0000000000000000 [ 374.976237][ T31] [ 374.979292][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 374.988360][ T31] INFO: task syz-executor:10735 blocked for more than 150 seconds. [ 374.996442][ T31] Not tainted syzkaller #0 [ 375.001397][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 375.010153][ T31] task:syz-executor state:D stack:27088 pid:10735 tgid:10735 ppid:1 task_flags:0x400140 flags:0x00080002 [ 375.022158][ T31] Call Trace: [ 375.025515][ T31] [ 375.028487][ T31] __schedule+0x17d9/0x56c0 [ 375.033095][ T31] ? __update_page_owner_handle+0x5a/0x570 [ 375.038937][ T31] ? __pfx___schedule+0x10/0x10 [ 375.044220][ T31] ? rcu_is_watching+0x15/0xb0 [ 375.049061][ T31] ? rcu_is_watching+0x15/0xb0 [ 375.053963][ T31] ? lock_release+0x4b/0x3c0 [ 375.058663][ T31] ? rcu_is_watching+0x15/0xb0 [ 375.063610][ T31] schedule+0x164/0x360 [ 375.067812][ T31] schedule_preempt_disabled+0x13/0x30 [ 375.073348][ T31] __mutex_lock+0x7bf/0x1550 [ 375.077979][ T31] ? __mutex_lock+0x5d4/0x1550 [ 375.082840][ T31] ? inet_rtm_newaddr+0x464/0x19e0 [ 375.088011][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 375.093120][ T31] ? __nla_parse+0x40/0x60 [ 375.097572][ T31] inet_rtm_newaddr+0x464/0x19e0 [ 375.102722][ T31] ? __kernel_text_address+0xd/0x30 [ 375.107968][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 375.114206][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 375.119614][ T31] ? lock_release+0x4b/0x3c0 [ 375.125161][ T31] ? bpf_lsm_capable+0x9/0x20 [ 375.129914][ T31] ? security_capable+0x7e/0x2c0 [ 375.135293][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 375.140727][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 375.145799][ T31] ? kasan_save_track+0x3e/0x80 [ 375.150727][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 375.155947][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 375.161438][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 375.166904][ T31] ? rcu_is_watching+0x15/0xb0 [ 375.171741][ T31] netlink_rcv_skb+0x226/0x4a0 [ 375.176698][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 375.182218][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 375.187682][ T31] ? net_generic+0x1e/0x240 [ 375.192240][ T31] ? net_generic+0x1e/0x240 [ 375.196834][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 375.202070][ T31] netlink_unicast+0x7bb/0x940 [ 375.206950][ T31] netlink_sendmsg+0x813/0xb40 [ 375.211763][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.217169][ T31] ? __might_fault+0xaf/0x130 [ 375.221891][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 375.226988][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 375.232332][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.237696][ T31] __sys_sendto+0x626/0x6c0 [ 375.242239][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 375.247567][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 375.252973][ T31] __x64_sys_sendto+0xde/0x100 [ 375.257794][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.264008][ T31] do_syscall_64+0x174/0x580 [ 375.268661][ T31] ? trace_irq_disable+0x3b/0x140 [ 375.274036][ T31] ? clear_bhb_loop+0x40/0x90 [ 375.278780][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.284765][ T31] RIP: 0033:0x7f3d1195d68e [ 375.289233][ T31] RSP: 002b:00007ffe6f994a08 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 375.297778][ T31] RAX: ffffffffffffffda RBX: 00005555833c6500 RCX: 00007f3d1195d68e [ 375.305881][ T31] RDX: 0000000000000028 RSI: 00007f3d12744670 RDI: 0000000000000003 [ 375.314055][ T31] RBP: 0000000000000001 R08: 00007ffe6f994a84 R09: 000000000000000c [ 375.322117][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 375.330260][ T31] R13: 0000000000000000 R14: 00007f3d12744670 R15: 0000000000000000 [ 375.338339][ T31] [ 375.341375][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 375.350503][ T31] INFO: lockdep is turned off. [ 375.355636][ T31] NMI backtrace for cpu 0 [ 375.355664][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 375.355681][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 375.355690][ T31] Call Trace: [ 375.355696][ T31] [ 375.355702][ T31] dump_stack_lvl+0xe8/0x150 [ 375.355722][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 375.355797][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 375.355831][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 375.355848][ T31] sys_info+0x135/0x170 [ 375.355860][ T31] watchdog+0xfd7/0x1030 [ 375.355882][ T31] ? watchdog+0x1c7/0x1030 [ 375.355902][ T31] kthread+0x388/0x470 [ 375.355915][ T31] ? __pfx_watchdog+0x10/0x10 [ 375.355932][ T31] ? __pfx_kthread+0x10/0x10 [ 375.355944][ T31] ret_from_fork+0x514/0xb70 [ 375.355959][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 375.355972][ T31] ? __switch_to+0xc89/0x1420 [ 375.355993][ T31] ? __pfx_kthread+0x10/0x10 [ 375.356005][ T31] ret_from_fork_asm+0x1a/0x30 [ 375.356027][ T31] [ 375.356032][ T31] Sending NMI from CPU 0 to CPUs 1: [ 375.466267][ C1] NMI backtrace for cpu 1 [ 375.466287][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 375.466306][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 375.466318][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 375.466347][ C1] Code: 0c 80 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 a7 21 00 fb f4 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 375.466432][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 375.466448][ C1] RAX: ffff88812537c000 RBX: ffffffff819a5170 RCX: 0000000080000001 [ 375.466461][ C1] RDX: 0000000000000001 RSI: ffffffff8c291100 RDI: ffffffff819a5170 [ 375.466474][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 375.466487][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 375.466499][ C1] R13: 1ffff11003bd0000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 375.466512][ C1] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 375.466526][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.466538][ C1] CR2: 00007f2ab6f47e20 CR3: 000000000e746000 CR4: 00000000003526f0 [ 375.466553][ C1] Call Trace: [ 375.466561][ C1] [ 375.466568][ C1] default_idle+0x9/0x20 [ 375.466593][ C1] default_idle_call+0x72/0xb0 [ 375.466642][ C1] do_idle+0x2e0/0x540 [ 375.466668][ C1] ? __pfx_do_idle+0x10/0x10 [ 375.466697][ C1] cpu_startup_entry+0x43/0x60 [ 375.466722][ C1] start_secondary+0x101/0x110 [ 375.466748][ C1] common_startup_64+0x13e/0x157 [ 375.466784][ C1] [ 375.627362][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 375.634270][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 375.643394][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 375.653722][ T31] Call Trace: [ 375.657014][ T31] [ 375.659952][ T31] vpanic+0x56c/0xa60 [ 375.663960][ T31] ? __pfx___schedule+0x10/0x10 [ 375.668821][ T31] ? __pfx_vpanic+0x10/0x10 [ 375.673327][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 375.679492][ T31] panic+0xc5/0xd0 [ 375.683218][ T31] ? __pfx_panic+0x10/0x10 [ 375.687641][ T31] ? preempt_schedule_common+0x82/0xd0 [ 375.693129][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 375.698531][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 375.704690][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 375.710855][ T31] watchdog+0x1030/0x1030 [ 375.715199][ T31] ? watchdog+0x1c7/0x1030 [ 375.719660][ T31] kthread+0x388/0x470 [ 375.723740][ T31] ? __pfx_watchdog+0x10/0x10 [ 375.728428][ T31] ? __pfx_kthread+0x10/0x10 [ 375.733022][ T31] ret_from_fork+0x514/0xb70 [ 375.737623][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 375.742740][ T31] ? __switch_to+0xc89/0x1420 [ 375.747430][ T31] ? __pfx_kthread+0x10/0x10 [ 375.752025][ T31] ret_from_fork_asm+0x1a/0x30 [ 375.756807][ T31] [ 375.760511][ T31] Kernel Offset: disabled [ 375.764878][ T31] Rebooting in 86400 seconds..