last executing test programs: 29.229944289s ago: executing program 3 (id=2931): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xffffffc6) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$can_j1939(r0, 0x0, 0x4000000) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001880)=""/4096, 0x1000}], 0x1) 28.293746152s ago: executing program 3 (id=2935): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647", 0x9}], 0x2, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x28044854}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000080000000500000007000000c1000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000340), 0x0}, 0x20) 27.188655928s ago: executing program 3 (id=2939): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0xa00}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x977, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket(0x10, 0x80002, 0x0) unshare(0x62000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0xa00, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000f3437b00001e3b"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000004d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10160, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x8000) 26.353189629s ago: executing program 1 (id=2944): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfc000000}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) 25.672486373s ago: executing program 3 (id=2952): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b54c2be7983a4e4e11a8906105f36f652d7135bda20b939abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff9719993882242846b", 0x49}, {&(0x7f0000000500)="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", 0x108}, {&(0x7f00000007c0)="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", 0xffffff50}], 0x4}}], 0x1, 0x4044805) r4 = socket$alg(0x26, 0x5, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) bind$alg(r4, &(0x7f0000001600)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-arm64-neon\x00'}, 0xfffffffffffffd7b) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f00000000c0)="feffffff", 0x4) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x8000000000025a5, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000001740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001700)={&(0x7f0000001780)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0002ff7f0000fcdbdf250000000014000c002001000000000000000000000000000008000700", @ANYRES32=r0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r1, @ANYBLOB="0200010000000800fcb4c8affedc66fee60cc881c00c8d20b9ddb2fa84e039c8a73a0345c6deb5fa7fbd881fd7a52abd2d4a0f4615f20ae7cf40de4fcf05c6c5465ab857172408e506b8d7ac1850381f02450b0374fe91924fff3950fe8b3504595b8f16c4238faf3b6b20d9b0f155504b131c6dd32f63d47faad6ffddac9ad1aba634f0bfe8fb3d6be0d28cc91fc372f0234118dbbf71ee01bf8b2548df37371e1ee57accc6c8de00"/181, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800040064010101"], 0x60}, 0x1, 0x0, 0x0, 0x80c0}, 0x20040000) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000640)) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000200)=0x8) r8 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000240)='\x00', 0x0, 0x10}, 0x18) sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1010000007c0004060000000000bf852c8986626691b01b5f44e4ce28712829"], 0xe0}], 0x1}, 0x40040) shutdown(r2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched_retired(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000025c0)=@newtfilter={0x24, 0x2c, 0x10, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xfff2, 0x10}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004010}, 0x4010) 25.428971322s ago: executing program 1 (id=2956): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) socket(0x15, 0x800, 0x200) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) recvmmsg(r1, &(0x7f0000004d00)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/126, 0x7e}, {&(0x7f0000000240)=""/186, 0xba}], 0x2, &(0x7f0000000380)=""/68, 0x44}, 0x6}, {{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000480)=""/72, 0x48}, 0x6}, {{&(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000400)}], 0x2, &(0x7f00000005c0)=""/17, 0x11}, 0x8}, {{&(0x7f0000000600)=@ax25={{}, [@bcast, @default, @netrom, @default, @bcast, @default, @null, @default]}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=""/35, 0x23}, 0x8}, {{&(0x7f0000000d80), 0x80, &(0x7f00000012c0)=[{&(0x7f0000000e00)=""/137, 0x89}, {&(0x7f0000000ec0)=""/99, 0x63}, {&(0x7f0000000f40)=""/215, 0xd7}, {&(0x7f0000001040)=""/106, 0x6a}, {&(0x7f00000010c0)=""/105, 0x69}, {&(0x7f0000001140)=""/224, 0xe0}, {&(0x7f0000001240)}, {&(0x7f0000001280)=""/46, 0x2e}], 0x8, &(0x7f0000001340)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002340)=""/204, 0xcc}], 0x1, &(0x7f0000002480)=""/215, 0xd7}, 0xe}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002580)=""/27, 0x1b}, {&(0x7f00000025c0)=""/250, 0xfa}, {&(0x7f00000026c0)=""/252, 0xfc}, {&(0x7f00000027c0)=""/60, 0x3c}, {&(0x7f0000002800)=""/202, 0xca}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/4096, 0x1000}], 0x7, &(0x7f0000002a00)=""/189, 0xbd}, 0x40}, {{&(0x7f0000002ac0)=@l2, 0x80, &(0x7f0000002980)=[{&(0x7f0000004b80)=""/255, 0xff}], 0x1, &(0x7f0000004c80)=""/117, 0x75}, 0xffffffff}], 0x8, 0x40012002, &(0x7f0000004f00)) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x7d, 0x0, &(0x7f00000005c0)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040), 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}}, 0x24) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 24.921823516s ago: executing program 3 (id=2960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}}, 0x14}}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0xe1fd, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 24.535072094s ago: executing program 1 (id=2964): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x6e, 0x4, 0xba, 0x2, 0x3, 0xfc, 0x0, 0x70, 0x9, 0xfd, 0x8, 0x0, 0xfc, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x83, &(0x7f0000001000)={r1}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000f90000000000ba000000000000bd00"/32], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r3, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0xfffffffffffffdd4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0xd, 0x7}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) 23.98219576s ago: executing program 3 (id=2967): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x2, '\x00', {0x7, 0x6, "0f0d29", 0x7, 0x33, 0x0, @private1, @empty}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x812484}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000014c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{0x1}, &(0x7f0000001540), &(0x7f0000001580)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001680)={{}, &(0x7f0000001600), 0x0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001840)={'erspan0\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001880), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001940)={0x0, 0xc8, "d4fad3d476b55d5f734f926f6f0996f2b8d603c14caf2471c2194ce02a323807bcd8aa5ced81c333af3ebff86b4ff0633bd5e61c7fbbb7b21d19ed31f135dfbb1f5dd13683658c84664007fe01ac9d0b85ef503dcb6c18cf59fb00b41bab9428ee774404ac3c309780228666c7aa4ed222b8c9dacd98e421e547e6f83281de95d9d2f6a1d1cf0a06621c5496022b0ead1a91fef0b8b68dd40645591d5b702abe6e20611b6b2b1aa998a37028ad36628cbdf019db73e1ab19a45600cb15cedfe69fbe69c8a02f7208"}, &(0x7f0000001a40)=0xd0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001b80)={&(0x7f0000001a80), 0xc, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000001fc0)={0x7, 'vlan0\x00', {0x2}, 0x81}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x80004000, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x10, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @NDA_VLAN={0x6, 0x5, 0x1004}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 21.590467662s ago: executing program 2 (id=2978): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000080)=0x6, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000380)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000380), &(0x7f00000005c0)=0x4) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010002000000fcdbdf258217635183000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x401c404) bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r3 = socket$phonet(0x23, 0x2, 0x1) r4 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f0000000280)={'ipvlan1\x00', 0x5, 0x7f}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000300)}}, {{&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000480)="4f72fb8858", 0x5}], 0x1}}], 0x2, 0xc000) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000003c0)={r8, 0x0, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000180)={r8, 0x401, 0x1e, 0x4, 0x1}, &(0x7f00000001c0)=0x14) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000600)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x5, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, 0xfffffffffffffffd, 0x20000000) 20.601115258s ago: executing program 2 (id=2980): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[], 0x1c}}, 0x4008054) read$nci(r0, &(0x7f0000000440)=""/87, 0x57) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) 20.486635131s ago: executing program 0 (id=2981): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bind$isdn(r0, &(0x7f00000001c0)={0x22, 0x9, 0x81, 0x7, 0x5}, 0x6) mmap(&(0x7f000082d000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0xf34c2000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffffffffffc96, r2, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4141}, 0x8800) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f0000000140)={'bond_slave_0\x00', @ifru_names='bridge_slave_1\x00'}}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x8, 0x48001}}, 0x44) 20.339682954s ago: executing program 0 (id=2982): unshare(0x6a040000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="29c82b790580f9c5655f60c74e4ec0204cf5f5a7db5cd5a562df", 0x1a) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$sock(r2, &(0x7f00000004c0)={&(0x7f00000005c0)=@l2tp6={0xa, 0x0, 0x101, @private2, 0xc, 0x2}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000640)='>', 0x1}], 0x1}, 0x20040010) sendmsg$inet6(r2, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x400000}, 0x8) r3 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87d", 0x3f}, {&(0x7f00000023c0)="b0a72f5a7bb7550a097f743c7b13f5b641ad6f1b724473657d8b7c613caea8c5e5f1b3d035f26ed1ef515e471016512bb25cdf441c9d48740970762742cdb18d7c6ba6f8e8bda4b9c9656f413ba6d1a8318b0cd0a0c6442584b00fc8b8eb7f662f1a72a02c8c794e0be7cb01cd994bf103631362811806ceee46564b6e6aab5352ac28a63082884d9f02a81cc1b27189a4f1e7ba8a03738229f54373ec9867505656492ac9f93eb3cf87b47a003a460b1d579736516e8aa6087d91869f0055c1d436873126d52fdd766953e9e39aec35fbbacee79bf07a69102b96e7f9f0aced311033d31a1805b90c20394c613e9d1681685694", 0xf4}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f0000000e00)=""/247, 0xf7}], 0x2}, 0x7fff}], 0x1, 0x10000, 0x0) read$alg(r3, &(0x7f00000024c0)=""/4088, 0xff8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @remote}, 0x3, 0x0, 0x3, 0x8}}, 0x26) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x8, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x1}, {0x2, 0x4}, {0x10, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="33fe000078009106000000000000004a07"], 0xfe33) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00'}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) splice(r8, 0x0, r10, 0x0, 0x10d00, 0xf) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25020000fd", @ANYRESOCT=r3, @ANYBLOB="080002007f"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}}) 19.577615448s ago: executing program 2 (id=2985): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000100)=0x101, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0xa, 0x0, 0x5, 0x0, 0x4, 0x3], 0x5, 0x1}, {0xffffffffffffffff, [0x2, 0x4, 0x0, 0x4, 0x1, 0x4], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x3, 0x194c, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r7, r6, 0x0, 0x59) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000090601010000000000000000030000000900020073797a310000000005000100070000003c0007801800018014000240fe800000e6ff000000000000000000aa1800148014000240fc000000000000002000000000000000060004404e1f0000"], 0x64}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 17.814174652s ago: executing program 2 (id=2987): socket(0x40000000015, 0x5, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f0000001980)={0x27, 0x0, 0x1, 0x2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x39}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x62}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x4, 0x0, 0x0, {[@fastopen={0x22, 0x4, "d9de"}]}}}}}}}}, 0x0) 17.573760914s ago: executing program 1 (id=2988): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x864d, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) (rerun: 64) 17.454659058s ago: executing program 2 (id=2990): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00'}) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000240)={0x1, 0x71}, 0x8) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="81b641f1f3843704b6", 0x9}], 0x1}, 0x0) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000400)=[{0x3, 0x2, {0x0, 0x1}, {0x1, 0x0, 0x4}, 0xfd}, {0x2, 0x3, {0x2, 0xff, 0x1}, {0x1, 0x0, 0x2}, 0x0, 0x1}, {0x3, 0x1, {0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}, 0x0, 0x1}, {0x100003, 0x0, {0x2, 0x0, 0x4}, {0x0, 0xf0}, 0x2, 0x52b2fbb7afe37025}], 0x80) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0x0, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 17.363984915s ago: executing program 0 (id=2992): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f00000024c0)=0x5b6c, 0x4) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xe, 0xfff3}, {0x9, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x4}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, r2, 0xb, r3}, 0x10) 17.251914922s ago: executing program 1 (id=2993): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x60}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x204}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x4850) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0xa6ff, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x40}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) getsockopt$inet6_mreq(r5, 0x29, 0x1c, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x70b529, 0x25dfdbfe, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) r7 = socket(0x1e, 0x4, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x2d) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r11 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r11, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(0x3) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x9, 0x1202, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.108414923s ago: executing program 0 (id=2995): r0 = socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080)=0x852, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000038eb010327bd7000fcff4a6d04000000"], 0x14}, 0x1, 0x0, 0x0, 0x48d3}, 0x0) 16.964327683s ago: executing program 0 (id=2996): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x1, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x25, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x1, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x25, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000400)={0x81, 0xf9, 0x80, 0x1, 0x0, 0x3, 0x0, 0x4, 0x6, 0x8, 0x0, 0x9, 0x0, 0x22}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000001c0)={r3}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000001c0)={r3}, &(0x7f00000000c0)=0x8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000180)=0xf, 0x4) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000180)=0xf, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x3}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x3}]}}}]}, 0x44}}, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="f5ffffff04550000e0ffffff05de5a2c2d6a15cf008b4e5864ab4250396893059485314ee90a5a55bbe9671c992cc1b9099900061b5f515262a18c362b99a8d962fdb45e285ca99a3b2b2dc6ca3d5f6e449e0fb2f4e6adc69e9cc1204a5f93ea211bf171bd86b8c56f6da9085c15031973850613f97d62b0afadb31be55aa7ea86a04ca87a24671fdee8fb4519", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e5", 0x26}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24", 0xf0}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641", 0xb0}, {&(0x7f0000000d00)="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", 0x12e}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd9", 0x44}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) (async) sendmmsg$inet(r4, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e5", 0x26}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24", 0xf0}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641", 0xb0}, {&(0x7f0000000d00)="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", 0x12e}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd9", 0x44}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r5, 0x1, 0x27, &(0x7f0000000600)=0x7ff, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 16.350639519s ago: executing program 2 (id=2997): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(r2, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x204, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7]}]}, 0x34}}, 0x8840) setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r8, r7, 0x0, 0x59) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="04d40000dc28", @ANYRES16=r6, @ANYBLOB="010500000000000000000f000000"], 0x14}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, &(0x7f0000000300)="89", 0x1) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10020, 0x0) 16.291298726s ago: executing program 1 (id=2998): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0xd, 0x8, 0x5, 0x1000007, r3}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x34, r1, 0x421, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x48040) 16.239205287s ago: executing program 0 (id=2999): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180062106a99039"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002", @ANYRES16, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000040000701feffffff00000000017c0000040042800c00018006000600800a0000180002801200148004000b0004"], 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) pipe(&(0x7f0000000300)) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x0, 0x0, @opaque="03000000"}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4020}}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x400) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES32=r2], 0xfc}}, 0x4004010) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00442c2f"], 0xfdef) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r9, 0x40085875) sendmmsg$inet(r8, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 16.169362554s ago: executing program 4 (id=3000): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'ip6tnl0\x00', {0x2, 0x0, @initdev}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xd12e49c5}]}}}]}, 0x3c}}, 0x4040001) 16.066620045s ago: executing program 4 (id=3001): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000d80)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 15.924660968s ago: executing program 4 (id=3002): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd, 0xa00}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 15.845365892s ago: executing program 4 (id=3003): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) (fail_nth: 1) 15.599541517s ago: executing program 4 (id=3004): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b54c2be7983a4e4e11a8906105f36f652d7135bda20b939abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff9719993882242846b", 0x49}, {&(0x7f0000000500)="648a6282c6e91b973836904a4a88affa0c371dd1b9c133c5e594714579d6bb3addfd43e78272aef64427ce5467d6994320cf139092452c7944ddab49e459f7e0c73f890e9e2463bd3390e20b1e472bd2aedb47094547a767a098a94a402e6aba65c0ef07eaa87f8663c763d9bb491243eb129eec434e5603956c8333a6ecdf4d3a601b9c8d3d63e3a4a57b38033e2b004f6c3e45f1645c3b7ca0d5ba5eea059b5aa4f0f80ac66904076cc60e47e1afc7d81ad937dee5efc0580e38d96cf0f53808f37d5a8811b07165e8b9aabceac06e4fa7f7668b8832877783a727a1fa8b972bfaeb232cf3e9b500965820f4adf64f1e5eddd65f5734fb43644347e98af7eb6abe95dcb6ed1acc22c8abdd5ea116242d5b7b2ecff3d9c635bce6a377112b4adbd75b71fcc8a6e3693c82ed7fd11ad63683cc89f0a35b", 0x108}, {&(0x7f00000007c0)="a96a428426d96522dbf395b96cda5289bbfe3d97be8f413c48ec17c91194c66443ac9ed513c32242f54abb9a8ad671c6786dd7161962a8cf0dc4c7c0a1f86f7d1b17cc1660980f64e0b66a61b77eed3c8497ff551a20db0aa749c5ed3d49c05b1f787665fc8ed059d872289988b78549f8e5f01c2dab0e462f618669d1ca60666c010a55e46421284abe14fdfa39da550161c5410c37fbd11866c3e2f710e557408f5c4a5d494e87bcacc70ecbc69322da9f6a2388ffece43aeee909aa68d00e2137407fbcf0e749eb6ef98960c1ed54e532722c05c0038e8a9c25a560b3569cc7928a66d41c3dcf80263869467cd8a905d56a7b327d0354d81554f98b1e85ae5d86502a1b3ed1e250f71cb5c5b7aa755326d9d6ab836db15f6107023fe99229e48a9008bd8ed0141577f1f1ea58b10e6ceeacfe98ff142e57f0dd1c88ae37752e200657282cda4177730d24a77a941e21675fa53da47992cce0a954ae826fff35039dc74bd9d0e5973ee99b00200cff625fb828ebc36189f3013291fe121a0810e1008854633b5890b810817609e8311f2e34cf3b78d666a1207a4fdbf77cc2d87410bb8533054f39eeff0602c72476ea86bbd68e3bf4976c16a3a8d60b4fa1c1ff02275718e1f7028119bcb785b0d95369dea71f559a32891ad8b3ef21b0f43f8db1f88fc0984c24ea1a38bc89b3b23c4cf9a67ad08f3fb635736350dfb726f8177efadd377073ba05878ab62d2a18481922e6c48f09f057aba001fb8eb233eb23a67e74d006bdaad1fa9a8a622c17947f34b89d0fc0a6dd3a7b6fa0beabb98875112036ab1ec22090369dc72d3c385b2679f0b99af9bcc6ef785c0b51473d8864ec867ea3c754856199152f000b2afe739b5c568c1619d2af08fb2fc6844fac0035cceb0d0656d3af9bbd686fd99275e7f81aeafd33481c5778b279e5870348ec4495684bdcb71c0c8131cdc8330159d8c92adb613dac99fedb3c50c22243ee61ebb8645f94cd0994b02c5f5b544887b11b2fd3655e115889ebeb8617eb1cdb5dbec30c407ee4f09d17d2ecca77b25604cfbd308a91b0b2e8cd1249a2e1f441989657efc8584ceb7e443f2ae30191c5623b06fac91bab61a40f31f2863b4b508998ded6abd8f55e503401c2e9e298655d50ab3f775f9159d0765b4ee1fef3aa1fe608d5dade41cd16a3c1ec7868b18ff3f1449d3900f7d77489c1bb4cdb99beac51942f8a7c4ab3e3a43e13b6c69b63623a970aec5426b58c63d9ffc229efb58e7b58eb27a12b91c4a0f253e1d5f13e59ffcecb003c5e46b1cc236b9fe508b37c3f2046c53eabbc2a7b1f2c0d04a86ba8918239e1dda997c5612fb43dc86905f79f1503ac47d5ea8399dc5d5cc284a3a789d77cc5e887ce3c25ae3f7a636429873970930ebdeec9690b62f46f480a4a102cfa3ce2a61f056bedf3ca698c4f2666bf55f035daca9fb2efcfd96d18cb7afd6e2592e460c4638f261a4a7a85c290c78a921edbc01e2d7a60c6b6a2608fb52f31b73471dd610f3703242273de21261656df6cd8c3847c730819e402933a40a4c560d9651a95764179f4a1a39e60c80deece7b0eacbafd5efe40eee56424b3e0921524397bd4f554e4a0ccc6e9b2be09e0ae6810a9fef7b027ee3cff9b5e674f793579eac25cee7c4e9351a8d7412e2c6cf9ba4082059a35878771744b8d0c572e10250035630b30db9030bf67c6dca054f6a219c51984f37ec9a2e2ac6e85d97475e5821bbb376af98e1e180cd94c22a2246dc757da46421b85487b7291f68fa595451999c32c869cbabcfe6be628f0909bb62ee174c97bef3f92fbb1072d66b5d28427b1695913bb86759fc20c74acf75df87ded19a81966e7dda1be3cec73f23df8b255ceff270af0ee99253426f5d4866afd89766c498652d5c5f6d4d3d6fbb52931b10613ba80a3d8a23464c30414e89897b90d5e0c90f0c72931b5ad4cbf69c0fc2eda242a56a789af5f4f0f0fb51f26c7a102ce6e0b76cf3a1f84de55f21df446ec9b9409cd1fb919b02a515994166e7ae29ad0783e0adf2c4296ed7fc19c84378a35e83f739a3e370faef047ef39fc7926ebf06f09db535aae1d5558f83f1e434556de25e6d2aa78d4eac784a7407521e1626d038d652d0320c0558c42e9e9ac731404c26248934d23dd3a8812de7622c230888db650f7846770ddc8059447fd03ccf862574d9b548054afb63e32986caf80a57fc2fa01d904ec94ad1c8b6cb56cb782b47b5a5626ab094c196e2e1f9fd25a39ec1ad45a7ae94c9ae64ac4bb45c828295c195fbfed9171d142fb8ece8af614953ad5ca1e5d65c52c4d9633c458b5e788bfd3469328b9e6e4df03f3da9e5d3d11284e791a67d0856666ee21f8ea4b1d76d7a1f07863756029a4b5cb820edb63dc0efe6fc2577a79383f280f241b35dff9cfb92cf04451f5767f95e5d5ff0c808acddf406127e9ceb8d1f55749a5781e9b185e45072d181d069c715febebc1ab63126697d145d63b3a41ba202a387dcfdfbb96de0d05454fecc286fd296bb10d498b49d3bcdeda3035699837dfac86ce61641ee7105f4b441031bea7ae0d1787bf772cfa2f48c3062d232b23b5b328e6ea9e0de0130db2500e37d28a52c490b2fa9d39c3d5c9b8a298f2aeb348b962fee1d6a7d6d2c661113c2b8101f39dba91a3199bab5b70f5bed7871580b54bf34f2851c14b69e16ad97223ab8eb0b2725e00efa7b1e75264a65ad61cfca62f6d5d651c193c123f9bf77b3aed591e8161b767fc2977b56f3849362559dffd3414ef1e5cb2d611f7bb3d7d4c28c0a6de2993eb89c0805622f9fe4136e856e103d931aae07469efc077f9dd6df11c1eeba7468ca78e2e8027b2f672f9b965a6d88756b531321fb181702794ce58299b0cd34e481dc6760b4f9b32cfae5e0a35b4a19a4dbd26870bcb8ccb7724a294b10697763d6b3f7141bf7ca09d0871dceaf364f5aca649d77203328b8ad463a144961595e978043be434cd08dd5120bc36c5d895745ce5cc10f9a7f22baad125d60beaeb8c98279f5b3a363eda42bfc9fef669b2f4fb663700dcc5a47515b9adec65cc99cfea4cc2246dcdff878eae17441c69f4127c49fdd7935bb0c0c8053c9b788aa74a7ff174b7fc8b36ddc5ffa89fe7a98a14805ce96447e00a8b32b3f46af448aa29f326d03477bde78b147fec195cc5b253becf53a80f08ddde4529c2f53f40eb59f8598ed0c045dd60cb8ee90669091d1e2e970791f687db9b28c43c74813b6364b3a0f5762bfaa867bcdd7d44d0eccc1e0149b6ba5c4412b16493330a41352c682dfd88aff599459c6d7beb392925338e9bb1469f59dc833d0e685dc8ac9fc708123d1a1d483e6ccd45f58edac266f5517f5711402a83bacb634e4a28e8d32121be30a2aaeb2adc5cc3e2b0d15cd94b4fab7f37ffa77e477099ea6dd6167e292921f5957fc4e2f3c7a1396e60154bb638dccb5fd0d7bedc36591901dbd5cf63914c401fc79036f4a26f7b4df5fd776b7ef156c33a180ec8615ec6f24659794da3af2cb75a5905b891a0b269405d4471fbeb3e90b19f502f0b36a32f9f8bbac6a1fa6fb7a50cb563b4fa41d0f2639da50773356cce00000000000000016721701a47a54d76c93fbd00f408c270897159bf168ab2ec326978f48f7d845b6e64d856de829fd8b45b86489abb7537e372df0ddc96ed4826ee76b28d8999d7e170b1db1dc9316d51504f7cf7740f354f0255f83a31ef9c8e70d33a256e909bad11ae1217f66260dc5c52682a6e84fec98221de47463b6d37b6a100fe5893b668d316b78f1cc0f67c481c50e275d4613a0b2acf73f86898b2506dc72b427e0476ab342f3c18b0949ee09c2d56154fc7b36a44c0771851186e83619f73945258dfe80304a591b2fe7057e80a2127c5e8b00c6d4809e72d931ffd7bce4b4d9fce0cf6135c47ad63fd7f9ed8beba4de84c087fcd42eaf8474a01bd752bba36dd487c0ae725f8e7ec695aa2958616f6c59413f235f176300a9457d3caf0b4e972b6b9339b4de6e7bf29aa1af48de7a834700a9c999c0198b3f6234aee737c96e02120b79725322aafe19139cc725db0b578cfccd8666b66ae8e034e4240768f03e0ff8ee072245b28f42ceb784133e99071b36709992fa81a9736d89018a2b361877a2fb05bceb0bfa5ee0eb7fc5d78c534f6ea4edcd0f530067c530f7bea92bddc9c61b268d5bc1ad3ff852ab93f3e810002133d0d8e16b1d71e1db2bdb91d416a6bfcb4864d58da1758abff7ca03d379bd48b03f019c33c434bdf25822465ae322b38ae83dd90597db8c781f48efedb66da368f3d9f67f27612c51c07b9aeb419c32ff028a77e3abc5bd531d7bb29bd1c6c1119820abfd881f660e5a7072cdbc0e888d97cbc2105782204f34d093c1e0e6195e51e2e8b639a0f656aa21e29d0fa2a2f868b77995e7ada252a30a31b219be7c1b107ddd737654546340e424f13521ed73f0ed33ad3664f1b9b68eee0f7255119d585c09a2467b22de08104a37202cb737e934b1bdb83102b680d9cfd21c55fd00e33fba7651b2c36a87272945c371303c7e4ca181c1f7d2fe09815c1732d8d777e7b9a430d6b237c7c9fc8758e8456fb4e6ffc2aa421ab5942204e54cb52197e14aae9ae34376ac1d56d009f07babcb3d3492c87faf3e44bdd7d16dbce8148e2c7cb44d30ca29908aaf7c9ef39e791a9a988a5381942e3daf05f85be245f4ef26b08d83b1c1b58892b462783dc27602d8931d3232e5be295d479f9600cc4c3ed2e6a2fbb925c602d251b13f2ec2b7ca99fcd4bc2aa6115ddb0b842ed35c70d867734ee7518fd5299e07818f024a1682aacaa4e28d9f5db71006beb8bcc1e3a43cf27fb3d9475fbd632912d83f4e95b4390068f55f2f832a2e2c9f4ba5ca59d185a655375c6f5779d9fe5a47d1f417cf6f6405eab89f755f9a90623270c2b2a444b6b79662964199f7bedd2a2939e03ec6a334b78a6166ebf70562819a273bb6de9a3d7c2383a569cbeb08859e742ec5f947d1817c2dbfa3b72e5d3afdc4582cad9e25ba954234522bd33e6c6d3fda50a90a33f5c8d7746f3c7c70fd3b7", 0xffffff50}], 0x4}}], 0x1, 0x4044805) r4 = socket$alg(0x26, 0x5, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bind$alg(r4, &(0x7f0000001600)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-arm64-neon\x00'}, 0xfffffffffffffd7b) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f00000000c0)="feffffff", 0x4) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x8000000000025a5, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001700)={&(0x7f0000001780)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0002ff7f0000fcdbdf250000000014000c002001000000000000000000000000000008000700", @ANYRES32=r0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r1, @ANYBLOB="0200010000000800fcb4c8affedc66fee60cc881c00c8d20b9ddb2fa84e039c8a73a0345c6deb5fa7fbd881fd7a52abd2d4a0f4615f20ae7cf40de4fcf05c6c5465ab857172408e506b8d7ac1850381f02450b0374fe91924fff3950fe8b3504595b8f16c4238faf3b6b20d9b0f155504b131c6dd32f63d47faad6ffddac9ad1aba634f0bfe8fb3d6be0d28cc91fc372f0234118dbbf71ee01bf8b2548df37371e1ee57accc6c8de00"/181, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800040064010101"], 0x60}, 0x1, 0x0, 0x0, 0x80c0}, 0x20040000) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000640)) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000200)=0x8) r9 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000240)='\x00', 0x0, 0x10}, 0x18) sendmsg$netlink(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1010000007c0004060000000000bf852c8986626691b01b5f44e4ce28712829"], 0xe0}], 0x1}, 0x40040) shutdown(r2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched_retired(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000025c0)=@newtfilter={0x24, 0x2c, 0x10, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xfff2, 0x10}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004010}, 0x4010) 15.245536681s ago: executing program 4 (id=3005): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.001987083s ago: executing program 32 (id=2999): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180062106a99039"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002", @ANYRES16, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000040000701feffffff00000000017c0000040042800c00018006000600800a0000180002801200148004000b0004"], 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) pipe(&(0x7f0000000300)) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x0, 0x0, @opaque="03000000"}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4020}}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x400) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES32=r2], 0xfc}}, 0x4004010) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00442c2f"], 0xfdef) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r9, 0x40085875) sendmmsg$inet(r8, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 950.106319ms ago: executing program 33 (id=2998): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0xd, 0x8, 0x5, 0x1000007, r3}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x34, r1, 0x421, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x48040) 905.848095ms ago: executing program 34 (id=2997): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(r2, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x204, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7]}]}, 0x34}}, 0x8840) setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r8, r7, 0x0, 0x59) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="04d40000dc28", @ANYRES16=r6, @ANYBLOB="010500000000000000000f000000"], 0x14}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, &(0x7f0000000300)="89", 0x1) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10020, 0x0) 0s ago: executing program 35 (id=3005): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): ? __fget_files+0x2a/0x420 [ 298.036688][T14235] ? __fget_files+0x3a0/0x420 [ 298.036727][T14235] __x64_sys_sendmsg+0x1bd/0x2a0 [ 298.036755][T14235] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 298.036790][T14235] ? __pfx_ksys_write+0x10/0x10 [ 298.036825][T14235] do_syscall_64+0x14d/0xf80 [ 298.036847][T14235] ? trace_irq_disable+0x3b/0x150 [ 298.036873][T14235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.036894][T14235] ? clear_bhb_loop+0x40/0x90 [ 298.036926][T14235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.036945][T14235] RIP: 0033:0x7f83dd79c799 [ 298.036964][T14235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.036981][T14235] RSP: 002b:00007f83de71b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.037001][T14235] RAX: ffffffffffffffda RBX: 00007f83dda16090 RCX: 00007f83dd79c799 [ 298.037016][T14235] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000009 [ 298.037028][T14235] RBP: 00007f83de71b090 R08: 0000000000000000 R09: 0000000000000000 [ 298.037040][T14235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 298.037052][T14235] R13: 00007f83dda16128 R14: 00007f83dda16090 R15: 00007ffe6b22e768 [ 298.037085][T14235] [ 298.929552][T14256] tipc: Enabling of bearer rejected, already enabled [ 299.247877][T14259] 8021q: adding VLAN 0 to HW filter on device bond8 [ 299.414429][T14272] openvswitch: netlink: IP tunnel dst address not specified [ 299.449636][T14275] netlink: 'syz.3.2567': attribute type 2 has an invalid length. [ 299.542655][T14276] bond0: (slave bridge0): Releasing backup interface [ 299.583201][T14276] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 299.736366][T14289] __nla_validate_parse: 1 callbacks suppressed [ 299.736388][T14289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2571'. [ 299.930853][T14289] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2571'. [ 300.142618][T14306] 8021q: adding VLAN 0 to HW filter on device bond9 [ 300.389316][T14321] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2582'. [ 300.683588][T14338] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2588'. [ 300.758595][T14338] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2588'. [ 300.800975][T14338] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2588'. [ 300.870611][T14344] 8021q: adding VLAN 0 to HW filter on device bond6 [ 301.097180][T14365] netlink: 'syz.0.2593': attribute type 1 has an invalid length. [ 301.242940][T14365] netlink: 'syz.0.2593': attribute type 32 has an invalid length. [ 301.258276][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2593'. [ 301.329414][T14374] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2596'. [ 301.353861][T14365] bond9: option coupled_control: invalid value (12) [ 301.402705][T14365] bond9 (unregistering): Released all slaves [ 301.614815][T14385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2599'. [ 301.766175][T14382] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2600'. [ 301.983221][T14397] 8021q: adding VLAN 0 to HW filter on device bond9 [ 302.476467][T14423] No such timeout policy "syz1" [ 302.632690][T14360] lo speed is unknown, defaulting to 1000 [ 302.807204][T14439] 8021q: adding VLAN 0 to HW filter on device bond7 [ 303.213720][T14455] FAULT_INJECTION: forcing a failure. [ 303.213720][T14455] name failslab, interval 1, probability 0, space 0, times 0 [ 303.247695][T14455] CPU: 0 UID: 0 PID: 14455 Comm: syz.4.2620 Not tainted syzkaller #0 PREEMPT(full) [ 303.247724][T14455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 303.247737][T14455] Call Trace: [ 303.247745][T14455] [ 303.247753][T14455] dump_stack_lvl+0xe8/0x150 [ 303.247784][T14455] should_fail_ex+0x412/0x560 [ 303.247815][T14455] should_failslab+0xa8/0x100 [ 303.247841][T14455] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 303.247864][T14455] ? __alloc_skb+0x186/0x7d0 [ 303.247884][T14455] ? __alloc_skb+0x1d0/0x7d0 [ 303.247902][T14455] ? __local_bh_enable_ip+0xd0/0x130 [ 303.247931][T14455] __alloc_skb+0x1d0/0x7d0 [ 303.247957][T14455] pfkey_sendmsg+0x212/0x1120 [ 303.247981][T14455] ? __lock_acquire+0x6b5/0x2cf0 [ 303.248018][T14455] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 303.248045][T14455] ? aa_sk_perm+0x6d5/0x900 [ 303.248079][T14455] ? __pfx_aa_sk_perm+0x10/0x10 [ 303.248102][T14455] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 303.248138][T14455] ? aa_sock_msg_perm+0xf1/0x1b0 [ 303.248184][T14455] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 303.248207][T14455] ____sys_sendmsg+0x972/0x9f0 [ 303.248230][T14455] ? __lock_acquire+0x6b5/0x2cf0 [ 303.248261][T14455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.248293][T14455] ? import_iovec+0x73/0xa0 [ 303.248318][T14455] ___sys_sendmsg+0x2a5/0x360 [ 303.248347][T14455] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.248425][T14455] __sys_sendmmsg+0x27c/0x4e0 [ 303.248455][T14455] ? __pfx___sys_sendmmsg+0x10/0x10 [ 303.248477][T14455] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 303.248525][T14455] ? ksys_write+0x242/0x270 [ 303.248548][T14455] ? __pfx_ksys_write+0x10/0x10 [ 303.248576][T14455] __x64_sys_sendmmsg+0xa0/0xc0 [ 303.248603][T14455] do_syscall_64+0x14d/0xf80 [ 303.248625][T14455] ? trace_irq_disable+0x3b/0x150 [ 303.248652][T14455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.248672][T14455] ? clear_bhb_loop+0x40/0x90 [ 303.248696][T14455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.248715][T14455] RIP: 0033:0x7fbfdf39c799 [ 303.248734][T14455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.248751][T14455] RSP: 002b:00007fbfe01bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 303.248771][T14455] RAX: ffffffffffffffda RBX: 00007fbfdf615fa0 RCX: 00007fbfdf39c799 [ 303.248786][T14455] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000003 [ 303.248799][T14455] RBP: 00007fbfe01bd090 R08: 0000000000000000 R09: 0000000000000000 [ 303.248811][T14455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 303.248824][T14455] R13: 00007fbfdf616038 R14: 00007fbfdf615fa0 R15: 00007ffede354768 [ 303.248855][T14455] [ 303.553149][T14457] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 303.921929][T14469] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 303.929806][T14464] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 304.363696][T14493] FAULT_INJECTION: forcing a failure. [ 304.363696][T14493] name failslab, interval 1, probability 0, space 0, times 0 [ 304.408691][T14493] CPU: 1 UID: 0 PID: 14493 Comm: syz.4.2633 Not tainted syzkaller #0 PREEMPT(full) [ 304.408720][T14493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 304.408732][T14493] Call Trace: [ 304.408740][T14493] [ 304.408749][T14493] dump_stack_lvl+0xe8/0x150 [ 304.408782][T14493] should_fail_ex+0x412/0x560 [ 304.408815][T14493] should_failslab+0xa8/0x100 [ 304.408842][T14493] __kmalloc_noprof+0xe8/0x760 [ 304.408864][T14493] ? rds_info_getsockopt+0x1ee/0x4a0 [ 304.408887][T14493] ? __might_fault+0xaf/0x130 [ 304.408909][T14493] rds_info_getsockopt+0x1ee/0x4a0 [ 304.408948][T14493] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 304.408974][T14493] ? __might_fault+0xaf/0x130 [ 304.408996][T14493] ? rds_getsockopt+0x2e6/0x500 [ 304.409014][T14493] ? __pfx_rds_getsockopt+0x10/0x10 [ 304.409035][T14493] do_sock_getsockopt+0x2d3/0x3f0 [ 304.409062][T14493] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 304.409086][T14493] ? __fget_files+0x3a0/0x420 [ 304.409113][T14493] ? __fget_files+0x2a/0x420 [ 304.409147][T14493] __x64_sys_getsockopt+0x1a4/0x240 [ 304.409183][T14493] do_syscall_64+0x14d/0xf80 [ 304.409205][T14493] ? trace_irq_disable+0x3b/0x150 [ 304.409231][T14493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.409249][T14493] ? clear_bhb_loop+0x40/0x90 [ 304.409272][T14493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.409291][T14493] RIP: 0033:0x7fbfdf39c799 [ 304.409310][T14493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.409326][T14493] RSP: 002b:00007fbfe01bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 304.409347][T14493] RAX: ffffffffffffffda RBX: 00007fbfdf615fa0 RCX: 00007fbfdf39c799 [ 304.409361][T14493] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000004 [ 304.409373][T14493] RBP: 00007fbfe01bd090 R08: 0000200000000400 R09: 0000000000000000 [ 304.409390][T14493] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 304.409402][T14493] R13: 00007fbfdf616038 R14: 00007fbfdf615fa0 R15: 00007ffede354768 [ 304.409432][T14493] [ 304.793182][T14507] netlink: 'syz.4.2638': attribute type 1 has an invalid length. [ 304.915964][T14509] bond9: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 304.970387][T14509] bond9 (unregistering): Released all slaves [ 305.216276][T14528] FAULT_INJECTION: forcing a failure. [ 305.216276][T14528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.240179][T14529] macsec2: entered promiscuous mode [ 305.245435][T14529] macsec2: entered allmulticast mode [ 305.253991][T14528] CPU: 0 UID: 0 PID: 14528 Comm: syz.0.2647 Not tainted syzkaller #0 PREEMPT(full) [ 305.254017][T14528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 305.254029][T14528] Call Trace: [ 305.254037][T14528] [ 305.254045][T14528] dump_stack_lvl+0xe8/0x150 [ 305.254077][T14528] should_fail_ex+0x412/0x560 [ 305.254110][T14528] _copy_to_user+0x31/0xb0 [ 305.254134][T14528] simple_read_from_buffer+0xe1/0x170 [ 305.254163][T14528] proc_fail_nth_read+0x1bb/0x230 [ 305.254191][T14528] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.254222][T14528] ? rw_verify_area+0x2a6/0x4d0 [ 305.254243][T14528] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.254269][T14528] vfs_read+0x20c/0xa70 [ 305.254288][T14528] ? fdget_pos+0x246/0x320 [ 305.254309][T14528] ? __pfx___mutex_lock+0x10/0x10 [ 305.254332][T14528] ? __pfx_vfs_read+0x10/0x10 [ 305.254354][T14528] ? __fget_files+0x2a/0x420 [ 305.254384][T14528] ? __fget_files+0x3a0/0x420 [ 305.254410][T14528] ? __fget_files+0x2a/0x420 [ 305.254445][T14528] ksys_read+0x150/0x270 [ 305.254469][T14528] ? __pfx_ksys_read+0x10/0x10 [ 305.254501][T14528] do_syscall_64+0x14d/0xf80 [ 305.254521][T14528] ? trace_irq_disable+0x3b/0x150 [ 305.254546][T14528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.254565][T14528] ? clear_bhb_loop+0x40/0x90 [ 305.254589][T14528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.254608][T14528] RIP: 0033:0x7f7aeb35cfce [ 305.254626][T14528] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 305.254641][T14528] RSP: 002b:00007f7aec332fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 305.254661][T14528] RAX: ffffffffffffffda RBX: 00007f7aec3336c0 RCX: 00007f7aeb35cfce [ 305.254674][T14528] RDX: 000000000000000f RSI: 00007f7aec3330a0 RDI: 0000000000000005 [ 305.254687][T14528] RBP: 00007f7aec333090 R08: 0000000000000000 R09: 0000000000000000 [ 305.254697][T14528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.254708][T14528] R13: 00007f7aeb616038 R14: 00007f7aeb615fa0 R15: 00007fffbce05b78 [ 305.254739][T14528] [ 305.504671][T14533] syzkaller1: entered promiscuous mode [ 305.510640][T14533] syzkaller1: entered allmulticast mode [ 305.534222][T14536] __nla_validate_parse: 6 callbacks suppressed [ 305.534240][T14536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2649'. [ 305.631974][T14536] bond9: entered promiscuous mode [ 305.637556][T14536] 8021q: adding VLAN 0 to HW filter on device bond9 [ 305.677463][T14544] FAULT_INJECTION: forcing a failure. [ 305.677463][T14544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.698167][T14544] CPU: 1 UID: 0 PID: 14544 Comm: syz.2.2651 Not tainted syzkaller #0 PREEMPT(full) [ 305.698194][T14544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 305.698205][T14544] Call Trace: [ 305.698213][T14544] [ 305.698221][T14544] dump_stack_lvl+0xe8/0x150 [ 305.698254][T14544] should_fail_ex+0x412/0x560 [ 305.698283][T14544] _copy_from_user+0x2d/0xb0 [ 305.698303][T14544] ___sys_sendmsg+0x1c6/0x360 [ 305.698333][T14544] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.698395][T14544] ? __fget_files+0x2a/0x420 [ 305.698423][T14544] ? __fget_files+0x3a0/0x420 [ 305.698460][T14544] __x64_sys_sendmsg+0x1bd/0x2a0 [ 305.698487][T14544] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 305.698520][T14544] ? __pfx_ksys_write+0x10/0x10 [ 305.698552][T14544] do_syscall_64+0x14d/0xf80 [ 305.698574][T14544] ? trace_irq_disable+0x3b/0x150 [ 305.698601][T14544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.698621][T14544] ? clear_bhb_loop+0x40/0x90 [ 305.698644][T14544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.698663][T14544] RIP: 0033:0x7f83dd79c799 [ 305.698682][T14544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.698699][T14544] RSP: 002b:00007f83de73c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.698719][T14544] RAX: ffffffffffffffda RBX: 00007f83dda15fa0 RCX: 00007f83dd79c799 [ 305.698734][T14544] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 305.698746][T14544] RBP: 00007f83de73c090 R08: 0000000000000000 R09: 0000000000000000 [ 305.698759][T14544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.698771][T14544] R13: 00007f83dda16038 R14: 00007f83dda15fa0 R15: 00007ffe6b22e768 [ 305.698818][T14544] [ 305.915654][T14539] 8021q: adding VLAN 0 to HW filter on device bond9 [ 305.923476][T14539] bond9: (slave sit3): The slave device specified does not support setting the MAC address [ 305.935366][T14539] bond9: (slave sit3): Error -95 calling set_mac_address [ 305.974614][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2652'. [ 306.037481][T14549] netlink: 'syz.1.2652': attribute type 1 has an invalid length. [ 306.048027][T14546] 8021q: adding VLAN 0 to HW filter on device bond8 [ 306.054844][T14549] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2652'. [ 306.079635][T14549] netlink: 'syz.1.2652': attribute type 1 has an invalid length. [ 306.163483][T14549] netlink: 'syz.1.2652': attribute type 8 has an invalid length. [ 306.216409][T14546] macsec1: entered promiscuous mode [ 306.246385][T14549] netlink: 606 bytes leftover after parsing attributes in process `syz.1.2652'. [ 306.285142][T14546] bond8: entered promiscuous mode [ 306.315980][T14549] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2652'. [ 306.344275][T14546] bond8: left promiscuous mode [ 306.610908][T14574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2659'. [ 306.670085][T14577] delete_channel: no stack [ 306.918516][T14583] gretap0: entered promiscuous mode [ 306.924324][T14583] vlan3: entered promiscuous mode [ 307.162353][T14596] netlink: 'syz.0.2666': attribute type 1 has an invalid length. [ 307.188568][T14596] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2666'. [ 307.224449][T14595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.253753][T14595] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 307.301604][T14595] bond0: (slave sit0): Error -95 calling set_mac_address [ 307.464632][T14613] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2671'. [ 307.521211][T14613] netlink: 'syz.0.2671': attribute type 1 has an invalid length. [ 307.834771][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2676'. [ 307.895391][T14629] netlink: 'syz.3.2676': attribute type 1 has an invalid length. [ 307.903646][T14629] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2676'. [ 307.914327][T14629] netlink: 'syz.3.2676': attribute type 1 has an invalid length. [ 307.933602][T14629] netlink: 'syz.3.2676': attribute type 8 has an invalid length. [ 308.304291][T14652] Bluetooth: MGMT ver 1.23 [ 308.331395][T14650] FAULT_INJECTION: forcing a failure. [ 308.331395][T14650] name failslab, interval 1, probability 0, space 0, times 0 [ 308.390605][T14650] CPU: 1 UID: 0 PID: 14650 Comm: syz.2.2681 Not tainted syzkaller #0 PREEMPT(full) [ 308.390632][T14650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 308.390644][T14650] Call Trace: [ 308.390652][T14650] [ 308.390660][T14650] dump_stack_lvl+0xe8/0x150 [ 308.390692][T14650] should_fail_ex+0x412/0x560 [ 308.390725][T14650] should_failslab+0xa8/0x100 [ 308.390749][T14650] ? skb_clone+0x212/0x3a0 [ 308.390774][T14650] kmem_cache_alloc_noprof+0x87/0x650 [ 308.390794][T14650] ? sk_filter_trim_cap+0x1e1/0xd90 [ 308.390827][T14650] skb_clone+0x212/0x3a0 [ 308.390855][T14650] __netlink_deliver_tap+0x404/0x850 [ 308.390887][T14650] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.390909][T14650] netlink_deliver_tap+0x19c/0x1b0 [ 308.390930][T14650] netlink_dump+0x926/0xe80 [ 308.390961][T14650] ? __pfx_netlink_dump+0x10/0x10 [ 308.390997][T14650] ? kmem_cache_free+0x187/0x630 [ 308.391018][T14650] ? netlink_recvmsg+0x5d6/0xa50 [ 308.391043][T14650] netlink_recvmsg+0x690/0xa50 [ 308.391063][T14650] ? __lock_acquire+0x6b5/0x2cf0 [ 308.391104][T14650] ? __pfx_netlink_recvmsg+0x10/0x10 [ 308.391139][T14650] ? __pfx_netlink_recvmsg+0x10/0x10 [ 308.391160][T14650] sock_recvmsg_nosec+0x10c/0x140 [ 308.391192][T14650] ____sys_recvmsg+0x3e3/0x4a0 [ 308.391226][T14650] ? __pfx_____sys_recvmsg+0x10/0x10 [ 308.391265][T14650] ? import_iovec+0x73/0xa0 [ 308.391289][T14650] ___sys_recvmsg+0x215/0x590 [ 308.391312][T14650] ? __lock_acquire+0x6b5/0x2cf0 [ 308.391341][T14650] ? __pfx____sys_recvmsg+0x10/0x10 [ 308.391403][T14650] do_recvmmsg+0x334/0x800 [ 308.391436][T14650] ? __pfx_do_recvmmsg+0x10/0x10 [ 308.391473][T14650] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 308.391513][T14650] __x64_sys_recvmmsg+0x198/0x250 [ 308.391544][T14650] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 308.391581][T14650] do_syscall_64+0x14d/0xf80 [ 308.391602][T14650] ? trace_irq_disable+0x3b/0x150 [ 308.391628][T14650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.391648][T14650] ? clear_bhb_loop+0x40/0x90 [ 308.391672][T14650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.391691][T14650] RIP: 0033:0x7f83dd79c799 [ 308.391710][T14650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.391727][T14650] RSP: 002b:00007f83de73c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 308.391747][T14650] RAX: ffffffffffffffda RBX: 00007f83dda15fa0 RCX: 00007f83dd79c799 [ 308.391762][T14650] RDX: 0000000000000004 RSI: 0000200000005c40 RDI: 0000000000000003 [ 308.391774][T14650] RBP: 00007f83de73c090 R08: 0000000000000000 R09: 0000000000000000 [ 308.391786][T14650] R10: 0000000000002120 R11: 0000000000000246 R12: 0000000000000002 [ 308.391799][T14650] R13: 00007f83dda16038 R14: 00007f83dda15fa0 R15: 00007ffe6b22e768 [ 308.391830][T14650] [ 309.312935][T14675] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 309.385999][T14675] bond10 (unregistering): Released all slaves [ 309.715878][T14696] xfrm1: entered promiscuous mode [ 309.733564][T14696] xfrm1: entered allmulticast mode [ 311.032967][T14762] tipc: Enabling of bearer rejected, already enabled [ 311.062526][T14762] syzkaller0: mtu greater than device maximum [ 311.296230][T14770] tipc: Enabling of bearer rejected, already enabled [ 311.474227][T14777] __nla_validate_parse: 6 callbacks suppressed [ 311.474245][T14777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2714'. [ 311.589569][T14786] macvlan2: left allmulticast mode [ 311.677472][T14786] sit2: left allmulticast mode [ 311.789077][T14786] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 311.817053][T14786] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 311.856944][T14786] vlan0: left promiscuous mode [ 311.874437][T14786] vlan0: left allmulticast mode [ 311.890326][T14786] macsec1: left promiscuous mode [ 311.911346][T14786] macsec1: left allmulticast mode [ 311.944528][T14786] hsr0: left allmulticast mode [ 311.961408][T14786] hsr_slave_0: left allmulticast mode [ 311.980708][T14786] hsr_slave_1: left allmulticast mode [ 311.997234][T14786] macvlan0: left allmulticast mode [ 312.060183][ T7858] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.073660][ T7858] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.120511][ T7858] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.156555][ T7858] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.181433][ T7858] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.212906][ T7858] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.247428][ T7858] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.310358][ T7858] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.481516][T14810] FAULT_INJECTION: forcing a failure. [ 312.481516][T14810] name failslab, interval 1, probability 0, space 0, times 0 [ 312.501494][T14811] netlink: 'syz.0.2724': attribute type 1 has an invalid length. [ 312.567144][T14807] netlink: 'syz.0.2724': attribute type 32 has an invalid length. [ 312.587870][T14807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2724'. [ 312.588556][T14810] CPU: 1 UID: 0 PID: 14810 Comm: syz.3.2725 Not tainted syzkaller #0 PREEMPT(full) [ 312.588581][T14810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 312.588593][T14810] Call Trace: [ 312.588602][T14810] [ 312.588611][T14810] dump_stack_lvl+0xe8/0x150 [ 312.588644][T14810] should_fail_ex+0x412/0x560 [ 312.588676][T14810] should_failslab+0xa8/0x100 [ 312.588700][T14810] ? ep_insert+0x52e/0x1a40 [ 312.588727][T14810] kmem_cache_alloc_noprof+0x87/0x650 [ 312.588747][T14810] ? ep_insert+0x283/0x1a40 [ 312.588774][T14810] ? ep_insert+0x3cc/0x1a40 [ 312.588806][T14810] ep_insert+0x52e/0x1a40 [ 312.588847][T14810] ? __pfx_ep_insert+0x10/0x10 [ 312.588875][T14810] ? __pfx___mutex_lock+0x10/0x10 [ 312.588904][T14810] ? apparmor_capable+0x126/0x170 [ 312.588927][T14810] ? bpf_lsm_capable+0x9/0x20 [ 312.588962][T14810] do_epoll_ctl+0x7f4/0xe80 [ 312.588998][T14810] __x64_sys_epoll_ctl+0x165/0x1b0 [ 312.589029][T14810] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 312.589070][T14810] do_syscall_64+0x14d/0xf80 [ 312.589090][T14810] ? trace_irq_disable+0x3b/0x150 [ 312.589116][T14810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.589135][T14810] ? clear_bhb_loop+0x40/0x90 [ 312.589159][T14810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.589178][T14810] RIP: 0033:0x7ffbec39c799 [ 312.589196][T14810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.589213][T14810] RSP: 002b:00007ffbed1f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 312.589239][T14810] RAX: ffffffffffffffda RBX: 00007ffbec615fa0 RCX: 00007ffbec39c799 [ 312.589253][T14810] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 312.589264][T14810] RBP: 00007ffbed1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 312.589276][T14810] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 312.589288][T14810] R13: 00007ffbec616038 R14: 00007ffbec615fa0 R15: 00007ffea2bfd9a8 [ 312.589318][T14810] [ 312.952857][T14807] bond10: option coupled_control: invalid value (12) [ 313.037457][T14807] bond10 (unregistering): Released all slaves [ 313.542066][T14854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2739'. [ 313.689399][T14859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2741'. [ 313.710998][T14857] syzkaller0: entered promiscuous mode [ 313.716582][T14857] syzkaller0: entered allmulticast mode [ 313.729716][T14859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2741'. [ 313.761501][T14811] lo speed is unknown, defaulting to 1000 [ 314.060111][T14866] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 314.224488][T14852] ieee802154 phy1 wpan1: encryption failed: -22 [ 314.266555][T14875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 314.273896][T14875] IPv6: NLM_F_CREATE should be set when creating new route [ 314.281230][T14875] IPv6: NLM_F_CREATE should be set when creating new route [ 314.329983][T14875] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2747'. [ 314.540414][T14882] tipc: Enabling of bearer rejected, failed to enable media [ 314.582288][T14885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2751'. [ 314.759855][T14891] FAULT_INJECTION: forcing a failure. [ 314.759855][T14891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.828345][T14891] CPU: 1 UID: 0 PID: 14891 Comm: syz.3.2753 Not tainted syzkaller #0 PREEMPT(full) [ 314.828374][T14891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.828387][T14891] Call Trace: [ 314.828395][T14891] [ 314.828404][T14891] dump_stack_lvl+0xe8/0x150 [ 314.828437][T14891] should_fail_ex+0x412/0x560 [ 314.828470][T14891] _copy_from_iter+0x1d3/0x1670 [ 314.828504][T14891] ? rcu_is_watching+0x15/0xb0 [ 314.828535][T14891] ? __pfx__copy_from_iter+0x10/0x10 [ 314.828571][T14891] ? netlink_sendmsg+0x650/0xb40 [ 314.828591][T14891] ? skb_put+0x11b/0x210 [ 314.828617][T14891] netlink_sendmsg+0x6c0/0xb40 [ 314.828647][T14891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.828672][T14891] ? aa_sock_msg_perm+0xf1/0x1b0 [ 314.828701][T14891] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 314.828726][T14891] ____sys_sendmsg+0x972/0x9f0 [ 314.828759][T14891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.828792][T14891] ? import_iovec+0x73/0xa0 [ 314.828816][T14891] ___sys_sendmsg+0x2a5/0x360 [ 314.828845][T14891] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.828904][T14891] ? __fget_files+0x2a/0x420 [ 314.828931][T14891] ? __fget_files+0x3a0/0x420 [ 314.828968][T14891] __x64_sys_sendmsg+0x1bd/0x2a0 [ 314.828994][T14891] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.829033][T14891] ? __pfx_ksys_write+0x10/0x10 [ 314.829067][T14891] do_syscall_64+0x14d/0xf80 [ 314.829088][T14891] ? trace_irq_disable+0x3b/0x150 [ 314.829115][T14891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.829135][T14891] ? clear_bhb_loop+0x40/0x90 [ 314.829159][T14891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.829178][T14891] RIP: 0033:0x7ffbec39c799 [ 314.829196][T14891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.829213][T14891] RSP: 002b:00007ffbed1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.829233][T14891] RAX: ffffffffffffffda RBX: 00007ffbec615fa0 RCX: 00007ffbec39c799 [ 314.829248][T14891] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 314.829260][T14891] RBP: 00007ffbed1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 314.829272][T14891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.829284][T14891] R13: 00007ffbec616038 R14: 00007ffbec615fa0 R15: 00007ffea2bfd9a8 [ 314.829315][T14891] [ 315.126762][T14902] FAULT_INJECTION: forcing a failure. [ 315.126762][T14902] name failslab, interval 1, probability 0, space 0, times 0 [ 315.206634][T14902] CPU: 0 UID: 0 PID: 14902 Comm: syz.4.2757 Not tainted syzkaller #0 PREEMPT(full) [ 315.206660][T14902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.206672][T14902] Call Trace: [ 315.206681][T14902] [ 315.206690][T14902] dump_stack_lvl+0xe8/0x150 [ 315.206727][T14902] should_fail_ex+0x412/0x560 [ 315.206759][T14902] should_failslab+0xa8/0x100 [ 315.206786][T14902] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 315.206810][T14902] ? __alloc_skb+0x1d0/0x7d0 [ 315.206838][T14902] ? __local_bh_enable_ip+0xd0/0x130 [ 315.206869][T14902] __alloc_skb+0x1d0/0x7d0 [ 315.206890][T14902] ? coalesce_prepare_data+0x16e/0x1e0 [ 315.206915][T14902] ethnl_default_notify+0x5af/0xbe0 [ 315.206938][T14902] ? __pfx___ethnl_set_coalesce+0x10/0x10 [ 315.206966][T14902] ? __pfx_ethnl_default_notify+0x10/0x10 [ 315.207003][T14902] ? mutex_is_locked+0x17/0x50 [ 315.207030][T14902] ? rtnl_is_locked+0x15/0x20 [ 315.207058][T14902] ethnl_default_set_doit+0x6a5/0xad0 [ 315.207093][T14902] genl_family_rcv_msg_doit+0x22a/0x330 [ 315.207119][T14902] ? __asan_memcpy+0x40/0x70 [ 315.207143][T14902] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 315.207182][T14902] ? bpf_lsm_capable+0x9/0x20 [ 315.207224][T14902] ? security_capable+0x7e/0x2c0 [ 315.207259][T14902] genl_rcv_msg+0x61c/0x7a0 [ 315.207292][T14902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.207320][T14902] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 315.207348][T14902] ? __lock_acquire+0x6b5/0x2cf0 [ 315.207394][T14902] netlink_rcv_skb+0x232/0x4b0 [ 315.207424][T14902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.207451][T14902] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.207497][T14902] ? down_read+0x272/0x2e0 [ 315.207521][T14902] ? genl_rcv+0xd/0x40 [ 315.207547][T14902] genl_rcv+0x28/0x40 [ 315.207573][T14902] netlink_unicast+0x80f/0x9b0 [ 315.207616][T14902] ? __pfx_netlink_unicast+0x10/0x10 [ 315.207647][T14902] ? netlink_sendmsg+0x650/0xb40 [ 315.207666][T14902] ? skb_put+0x11b/0x210 [ 315.207692][T14902] netlink_sendmsg+0x813/0xb40 [ 315.207723][T14902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.207748][T14902] ? aa_sock_msg_perm+0xf1/0x1b0 [ 315.207778][T14902] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 315.207804][T14902] ____sys_sendmsg+0x972/0x9f0 [ 315.207839][T14902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.207874][T14902] ? import_iovec+0x73/0xa0 [ 315.207899][T14902] ___sys_sendmsg+0x2a5/0x360 [ 315.207930][T14902] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.207992][T14902] ? __fget_files+0x2a/0x420 [ 315.208020][T14902] ? __fget_files+0x3a0/0x420 [ 315.208063][T14902] __x64_sys_sendmsg+0x1bd/0x2a0 [ 315.208091][T14902] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.208125][T14902] ? __pfx_ksys_write+0x10/0x10 [ 315.208160][T14902] do_syscall_64+0x14d/0xf80 [ 315.208179][T14902] ? trace_irq_disable+0x3b/0x150 [ 315.208202][T14902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.208221][T14902] ? clear_bhb_loop+0x40/0x90 [ 315.208245][T14902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.208265][T14902] RIP: 0033:0x7fbfdf39c799 [ 315.208283][T14902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.208299][T14902] RSP: 002b:00007fbfe01bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.208320][T14902] RAX: ffffffffffffffda RBX: 00007fbfdf615fa0 RCX: 00007fbfdf39c799 [ 315.208334][T14902] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 315.208346][T14902] RBP: 00007fbfe01bd090 R08: 0000000000000000 R09: 0000000000000000 [ 315.208358][T14902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.208370][T14902] R13: 00007fbfdf616038 R14: 00007fbfdf615fa0 R15: 00007ffede354768 [ 315.208402][T14902] [ 315.912759][T14916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2764'. [ 316.105963][T14924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2766'. [ 316.457463][T14926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2768'. [ 316.993792][T14912] lo speed is unknown, defaulting to 1000 [ 317.129017][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.393546][T14956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2775'. [ 317.645086][T14967] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2777'. [ 317.739367][T14976] Bluetooth: MGMT ver 1.23 [ 317.746296][T14977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2780'. [ 318.002124][T14984] debugfs: '1ùà^!' already exists in 'ieee80211' [ 318.469754][T14999] FAULT_INJECTION: forcing a failure. [ 318.469754][T14999] name failslab, interval 1, probability 0, space 0, times 0 [ 318.508431][T14999] CPU: 1 UID: 0 PID: 14999 Comm: syz.1.2786 Not tainted syzkaller #0 PREEMPT(full) [ 318.508459][T14999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 318.508471][T14999] Call Trace: [ 318.508479][T14999] [ 318.508488][T14999] dump_stack_lvl+0xe8/0x150 [ 318.508518][T14999] should_fail_ex+0x412/0x560 [ 318.508551][T14999] should_failslab+0xa8/0x100 [ 318.508577][T14999] __kmalloc_cache_noprof+0x88/0x660 [ 318.508601][T14999] ? sctp_add_bind_addr+0x8c/0x370 [ 318.508631][T14999] sctp_add_bind_addr+0x8c/0x370 [ 318.508662][T14999] sctp_copy_local_addr_list+0x314/0x4f0 [ 318.508693][T14999] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 318.508719][T14999] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 318.508749][T14999] ? sctp_v4_is_any+0x35/0x60 [ 318.508774][T14999] ? sctp_copy_one_addr+0x93/0x360 [ 318.508803][T14999] sctp_bind_addr_copy+0xb3/0x3c0 [ 318.508830][T14999] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 318.508857][T14999] sctp_connect_new_asoc+0x2ff/0x6b0 [ 318.508890][T14999] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 318.508912][T14999] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 318.508932][T14999] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 318.508950][T14999] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 318.508971][T14999] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 318.508995][T14999] __sctp_connect+0x5cb/0xdc0 [ 318.509025][T14999] ? __pfx___sctp_connect+0x10/0x10 [ 318.509044][T14999] ? security_sctp_bind_connect+0x7e/0x2c0 [ 318.509071][T14999] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 318.509099][T14999] sctp_getsockopt_connectx3+0x227/0x360 [ 318.509129][T14999] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 318.509160][T14999] ? sctp_getsockopt+0x12f/0xb90 [ 318.509191][T14999] ? __local_bh_enable_ip+0xd0/0x130 [ 318.509221][T14999] sctp_getsockopt+0x984/0xb90 [ 318.509249][T14999] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 318.509282][T14999] do_sock_getsockopt+0x2d3/0x3f0 [ 318.509309][T14999] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 318.509334][T14999] ? __fget_files+0x3a0/0x420 [ 318.509361][T14999] ? __fget_files+0x2a/0x420 [ 318.509394][T14999] __x64_sys_getsockopt+0x1a4/0x240 [ 318.509427][T14999] do_syscall_64+0x14d/0xf80 [ 318.509449][T14999] ? trace_irq_disable+0x3b/0x150 [ 318.509476][T14999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.509496][T14999] ? clear_bhb_loop+0x40/0x90 [ 318.509521][T14999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.509540][T14999] RIP: 0033:0x7f855259c799 [ 318.509559][T14999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.509574][T14999] RSP: 002b:00007f855345f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 318.509595][T14999] RAX: ffffffffffffffda RBX: 00007f8552815fa0 RCX: 00007f855259c799 [ 318.509609][T14999] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 318.509621][T14999] RBP: 00007f855345f090 R08: 0000200000000100 R09: 0000000000000000 [ 318.509634][T14999] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 318.509646][T14999] R13: 00007f8552816038 R14: 00007f8552815fa0 R15: 00007ffd4c617468 [ 318.509678][T14999] [ 319.699064][T15048] macvtap1: entered promiscuous mode [ 319.715893][T15048] ipvlan1: entered promiscuous mode [ 319.733911][T15048] macvtap1: entered allmulticast mode [ 319.792110][T15048] ipvlan1: entered allmulticast mode [ 319.820113][T15053] FAULT_INJECTION: forcing a failure. [ 319.820113][T15053] name failslab, interval 1, probability 0, space 0, times 0 [ 319.852785][T15053] CPU: 0 UID: 0 PID: 15053 Comm: syz.0.2796 Not tainted syzkaller #0 PREEMPT(full) [ 319.852811][T15053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 319.852824][T15053] Call Trace: [ 319.852832][T15053] [ 319.852840][T15053] dump_stack_lvl+0xe8/0x150 [ 319.852871][T15053] should_fail_ex+0x412/0x560 [ 319.852904][T15053] should_failslab+0xa8/0x100 [ 319.852930][T15053] __kmalloc_cache_noprof+0x88/0x660 [ 319.852954][T15053] ? __hw_addr_add_ex+0x1dc/0x650 [ 319.852983][T15053] __hw_addr_add_ex+0x1dc/0x650 [ 319.853008][T15053] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 319.853037][T15053] dev_addr_init+0x15e/0x240 [ 319.853065][T15053] ? __pfx_dev_addr_init+0x10/0x10 [ 319.853091][T15053] ? alloc_netdev_mqs+0xa6/0x11b0 [ 319.853125][T15053] alloc_netdev_mqs+0x2b1/0x11b0 [ 319.853151][T15053] ? __pfx_macvtap_setup+0x10/0x10 [ 319.853183][T15053] rtnl_create_link+0x31f/0xd70 [ 319.853217][T15053] rtnl_newlink_create+0x277/0xb70 [ 319.853245][T15053] ? __mutex_lock+0x5ac/0x1300 [ 319.853273][T15053] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 319.853300][T15053] ? __pfx___mutex_lock+0x10/0x10 [ 319.853332][T15053] ? ns_capable+0x89/0xe0 [ 319.853360][T15053] rtnl_newlink+0x1666/0x1be0 [ 319.853395][T15053] ? __pfx_rtnl_newlink+0x10/0x10 [ 319.853425][T15053] ? __lock_acquire+0x6b5/0x2cf0 [ 319.853457][T15053] ? __lock_acquire+0x6b5/0x2cf0 [ 319.853483][T15053] ? __lock_acquire+0x6b5/0x2cf0 [ 319.853518][T15053] ? unwind_next_frame+0xa5/0x23c0 [ 319.853567][T15053] ? __lock_acquire+0x6b5/0x2cf0 [ 319.853602][T15053] ? is_bpf_text_address+0x26/0x2b0 [ 319.853625][T15053] ? kernel_text_address+0xa5/0xe0 [ 319.853670][T15053] ? __pfx_rtnl_newlink+0x10/0x10 [ 319.853690][T15053] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 319.853714][T15053] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 319.853733][T15053] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.853756][T15053] ? __lock_acquire+0x6b5/0x2cf0 [ 319.853789][T15053] netlink_rcv_skb+0x232/0x4b0 [ 319.853812][T15053] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.853834][T15053] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.853862][T15053] ? netlink_deliver_tap+0x2e/0x1b0 [ 319.853890][T15053] netlink_unicast+0x80f/0x9b0 [ 319.853928][T15053] ? __pfx_netlink_unicast+0x10/0x10 [ 319.853958][T15053] ? netlink_sendmsg+0x650/0xb40 [ 319.853976][T15053] ? skb_put+0x11b/0x210 [ 319.854001][T15053] netlink_sendmsg+0x813/0xb40 [ 319.854031][T15053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.854055][T15053] ? aa_sock_msg_perm+0xf1/0x1b0 [ 319.854085][T15053] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.854109][T15053] ____sys_sendmsg+0x972/0x9f0 [ 319.854142][T15053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.854174][T15053] ? import_iovec+0x73/0xa0 [ 319.854199][T15053] ___sys_sendmsg+0x2a5/0x360 [ 319.854229][T15053] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.854288][T15053] ? __fget_files+0x2a/0x420 [ 319.854315][T15053] ? __fget_files+0x3a0/0x420 [ 319.854352][T15053] __x64_sys_sendmsg+0x1bd/0x2a0 [ 319.854380][T15053] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.854414][T15053] ? __pfx_ksys_write+0x10/0x10 [ 319.854447][T15053] do_syscall_64+0x14d/0xf80 [ 319.854470][T15053] ? trace_irq_disable+0x3b/0x150 [ 319.854496][T15053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.854516][T15053] ? clear_bhb_loop+0x40/0x90 [ 319.854539][T15053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.854558][T15053] RIP: 0033:0x7f7aeb39c799 [ 319.854577][T15053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.854602][T15053] RSP: 002b:00007f7aec312028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.854623][T15053] RAX: ffffffffffffffda RBX: 00007f7aeb616090 RCX: 00007f7aeb39c799 [ 319.854638][T15053] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 319.854650][T15053] RBP: 00007f7aec312090 R08: 0000000000000000 R09: 0000000000000000 [ 319.854662][T15053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 319.854673][T15053] R13: 00007f7aeb616128 R14: 00007f7aeb616090 R15: 00007fffbce05b78 [ 319.854704][T15053] [ 320.397437][T15057] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2800'. [ 320.855469][T15079] FAULT_INJECTION: forcing a failure. [ 320.855469][T15079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.901667][T15079] CPU: 1 UID: 0 PID: 15079 Comm: syz.0.2806 Not tainted syzkaller #0 PREEMPT(full) [ 320.901695][T15079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 320.901706][T15079] Call Trace: [ 320.901714][T15079] [ 320.901723][T15079] dump_stack_lvl+0xe8/0x150 [ 320.901755][T15079] should_fail_ex+0x412/0x560 [ 320.901787][T15079] _copy_from_iter+0x1d3/0x1670 [ 320.901820][T15079] ? rcu_is_watching+0x15/0xb0 [ 320.901852][T15079] ? __pfx__copy_from_iter+0x10/0x10 [ 320.901888][T15079] ? netlink_sendmsg+0x650/0xb40 [ 320.901908][T15079] ? skb_put+0x11b/0x210 [ 320.901933][T15079] netlink_sendmsg+0x6c0/0xb40 [ 320.901963][T15079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.901986][T15079] ? aa_sock_msg_perm+0xf1/0x1b0 [ 320.902017][T15079] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.902041][T15079] ____sys_sendmsg+0x972/0x9f0 [ 320.902075][T15079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.902107][T15079] ? import_iovec+0x73/0xa0 [ 320.902131][T15079] ___sys_sendmsg+0x2a5/0x360 [ 320.902160][T15079] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.902216][T15079] ? __fget_files+0x2a/0x420 [ 320.902243][T15079] ? __fget_files+0x3a0/0x420 [ 320.902279][T15079] __x64_sys_sendmsg+0x1bd/0x2a0 [ 320.902306][T15079] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.902339][T15079] ? __pfx_ksys_write+0x10/0x10 [ 320.902379][T15079] do_syscall_64+0x14d/0xf80 [ 320.902401][T15079] ? trace_irq_disable+0x3b/0x150 [ 320.902428][T15079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.902447][T15079] ? clear_bhb_loop+0x40/0x90 [ 320.902470][T15079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.902489][T15079] RIP: 0033:0x7f7aeb39c799 [ 320.902507][T15079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.902524][T15079] RSP: 002b:00007f7aec333028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.902551][T15079] RAX: ffffffffffffffda RBX: 00007f7aeb615fa0 RCX: 00007f7aeb39c799 [ 320.902566][T15079] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 320.902577][T15079] RBP: 00007f7aec333090 R08: 0000000000000000 R09: 0000000000000000 [ 320.902588][T15079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.902599][T15079] R13: 00007f7aeb616038 R14: 00007f7aeb615fa0 R15: 00007fffbce05b78 [ 320.902627][T15079] [ 321.542616][T15095] netlink: 'syz.0.2811': attribute type 10 has an invalid length. [ 321.627338][T15097] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2813'. [ 321.723245][T15102] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2815'. [ 321.799504][T15102] netlink: 'syz.1.2815': attribute type 1 has an invalid length. [ 321.818277][T15102] netlink: 936 bytes leftover after parsing attributes in process `syz.1.2815'. [ 321.847885][T15102] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2815'. [ 322.054289][T15122] xt_hashlimit: size too large, truncated to 1048576 [ 322.113076][T15128] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 322.113538][T15127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2824'. [ 322.234372][T15130] vlan0: entered promiscuous mode [ 322.250427][T15130] geneve1: entered promiscuous mode [ 322.260991][T15130] vlan0: entered allmulticast mode [ 322.270965][T15130] geneve1: entered allmulticast mode [ 322.365104][T15135] bond9: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 322.736324][T15146] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20003 [ 322.944341][T15160] FAULT_INJECTION: forcing a failure. [ 322.944341][T15160] name failslab, interval 1, probability 0, space 0, times 0 [ 322.957445][T15160] CPU: 0 UID: 0 PID: 15160 Comm: syz.3.2831 Not tainted syzkaller #0 PREEMPT(full) [ 322.957470][T15160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 322.957482][T15160] Call Trace: [ 322.957491][T15160] [ 322.957499][T15160] dump_stack_lvl+0xe8/0x150 [ 322.957527][T15160] should_fail_ex+0x412/0x560 [ 322.957556][T15160] should_failslab+0xa8/0x100 [ 322.957576][T15160] ? sctp_get_port_local+0x6f2/0x1730 [ 322.957594][T15160] kmem_cache_alloc_noprof+0x87/0x650 [ 322.957614][T15160] ? __lock_acquire+0x6b5/0x2cf0 [ 322.957642][T15160] sctp_get_port_local+0x6f2/0x1730 [ 322.957674][T15160] ? __pfx_sctp_get_port_local+0x10/0x10 [ 322.957694][T15160] ? sctp_bind_addr_match+0x28b/0x2b0 [ 322.957721][T15160] sctp_do_bind+0x4f1/0x9d0 [ 322.957747][T15160] sctp_connect_new_asoc+0x270/0x6b0 [ 322.957767][T15160] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 322.957788][T15160] ? __ipv6_addr_type+0x124/0x2f0 [ 322.957811][T15160] ? sctp_inet6_send_verify+0x6e/0x300 [ 322.957833][T15160] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 322.957856][T15160] __sctp_connect+0x5cb/0xdc0 [ 322.957887][T15160] ? __pfx___sctp_connect+0x10/0x10 [ 322.957903][T15160] ? sctp_inet_connect+0xa0/0x210 [ 322.957933][T15160] ? __local_bh_enable_ip+0xd0/0x130 [ 322.957971][T15160] sctp_inet_connect+0x12e/0x210 [ 322.958001][T15160] __sys_connect+0x312/0x450 [ 322.958025][T15160] ? __pfx___sys_connect+0x10/0x10 [ 322.958058][T15160] ? __pfx_ksys_write+0x10/0x10 [ 322.958087][T15160] __x64_sys_connect+0x7a/0x90 [ 322.958109][T15160] do_syscall_64+0x14d/0xf80 [ 322.958131][T15160] ? trace_irq_disable+0x3b/0x150 [ 322.958157][T15160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.958178][T15160] ? clear_bhb_loop+0x40/0x90 [ 322.958200][T15160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.958217][T15160] RIP: 0033:0x7ffbec39c799 [ 322.958234][T15160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.958250][T15160] RSP: 002b:00007ffbed1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 322.958269][T15160] RAX: ffffffffffffffda RBX: 00007ffbec615fa0 RCX: 00007ffbec39c799 [ 322.958282][T15160] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003 [ 322.958293][T15160] RBP: 00007ffbed1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 322.958305][T15160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.958317][T15160] R13: 00007ffbec616038 R14: 00007ffbec615fa0 R15: 00007ffea2bfd9a8 [ 322.958348][T15160] [ 323.588537][ T5157] block nbd1: Possible stuck request ffff888026d58000: control (read@0,1024B). Runtime 120 seconds [ 323.599479][ T5157] block nbd1: Possible stuck request ffff888026d58200: control (read@1024,1024B). Runtime 120 seconds [ 323.610916][ T5157] block nbd1: Possible stuck request ffff888026d58400: control (read@2048,1024B). Runtime 120 seconds [ 323.623334][ T5157] block nbd1: Possible stuck request ffff888026d58600: control (read@3072,1024B). Runtime 120 seconds [ 323.697706][T15172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2835'. [ 323.779275][T15169] netlink: 'syz.0.2834': attribute type 2 has an invalid length. [ 324.166478][T15194] syzkaller1: entered promiscuous mode [ 324.180944][T15194] syzkaller1: entered allmulticast mode [ 324.255197][T15199] rdma_rxe: rxe_newlink: failed to add gre0 [ 324.310668][T15199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2844'. [ 324.349006][T15199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2844'. [ 324.369664][T15199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2844'. [ 324.444579][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2847'. [ 324.473880][T15205] 8021q: adding VLAN 0 to HW filter on device .` [ 324.486079][T15205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.534599][ T5890] lo speed is unknown, defaulting to 1000 [ 324.546081][ T5890] syz2: Port: 1 Link ACTIVE [ 324.559615][ T29] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 324.677865][T15215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2848'. [ 324.786312][T15217] netlink: 'syz.3.2849': attribute type 1 has an invalid length. [ 324.798326][T15217] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2849'. [ 324.809983][T15217] netlink: 'syz.3.2849': attribute type 1 has an invalid length. [ 324.817738][T15217] netlink: 'syz.3.2849': attribute type 8 has an invalid length. [ 324.836298][T15217] netlink: 606 bytes leftover after parsing attributes in process `syz.3.2849'. [ 324.885215][T15223] netlink: 'syz.1.2851': attribute type 1 has an invalid length. [ 324.969489][ T29] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 324.990135][ T7858] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 325.097837][T15231] bond10: (slave gretap1): making interface the new active one [ 325.148762][T15237] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2851'. [ 325.176383][T15231] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 325.237495][T15242] openvswitch: netlink: Flow key attr not present in new flow. [ 325.788569][T15268] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2865'. [ 326.001660][ T5931] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 326.025211][ T5931] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 326.180004][T15280] bond10: (slave bond_slave_1): Device is not bonding slave [ 326.187754][T15280] bond10: option active_slave: invalid value (bond_slave_1) [ 326.203636][T15280] bond10 (unregistering): Released all slaves [ 326.270184][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 326.419893][T15294] FAULT_INJECTION: forcing a failure. [ 326.419893][T15294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.451717][T15294] CPU: 1 UID: 0 PID: 15294 Comm: syz.3.2871 Not tainted syzkaller #0 PREEMPT(full) [ 326.451744][T15294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 326.451756][T15294] Call Trace: [ 326.451764][T15294] [ 326.451773][T15294] dump_stack_lvl+0xe8/0x150 [ 326.451805][T15294] should_fail_ex+0x412/0x560 [ 326.451838][T15294] _copy_to_user+0x31/0xb0 [ 326.451861][T15294] simple_read_from_buffer+0xe1/0x170 [ 326.451893][T15294] proc_fail_nth_read+0x1bb/0x230 [ 326.451923][T15294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.451952][T15294] ? rw_verify_area+0x2a6/0x4d0 [ 326.451972][T15294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.451999][T15294] vfs_read+0x20c/0xa70 [ 326.452031][T15294] ? __pfx_vfs_read+0x10/0x10 [ 326.452054][T15294] ? kmem_cache_free+0x187/0x630 [ 326.452090][T15294] ksys_read+0x150/0x270 [ 326.452112][T15294] ? __pfx_ksys_read+0x10/0x10 [ 326.452142][T15294] do_syscall_64+0x14d/0xf80 [ 326.452165][T15294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.452185][T15294] ? clear_bhb_loop+0x40/0x90 [ 326.452208][T15294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.452227][T15294] RIP: 0033:0x7ffbec35cfce [ 326.452245][T15294] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 326.452262][T15294] RSP: 002b:00007ffbed1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 326.452282][T15294] RAX: ffffffffffffffda RBX: 00007ffbed1f66c0 RCX: 00007ffbec35cfce [ 326.452294][T15294] RDX: 000000000000000f RSI: 00007ffbed1f60a0 RDI: 0000000000000009 [ 326.452306][T15294] RBP: 00007ffbed1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 326.452318][T15294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.452329][T15294] R13: 00007ffbec616038 R14: 00007ffbec615fa0 R15: 00007ffea2bfd9a8 [ 326.452361][T15294] [ 327.110046][T15313] No such timeout policy "syz1" [ 327.176346][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 327.185875][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 327.199276][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 327.214398][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 327.224689][T15318] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 327.232222][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 327.272739][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 327.283402][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 327.293498][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 327.309513][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 327.319654][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 327.488010][T15325] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 327.506636][T15325] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 327.520677][T15325] tipc: Resetting bearer [ 328.341777][T15350] syzkaller0: entered promiscuous mode [ 328.347381][T15350] syzkaller0: entered allmulticast mode [ 328.590577][T15315] lo speed is unknown, defaulting to 1000 [ 328.788695][T15360] tipc: Enabled bearer , priority 0 [ 328.884475][T15358] tipc: Disabling bearer [ 329.149065][T15315] chnl_net:caif_netlink_parms(): no params data found [ 329.359692][ T5820] Bluetooth: hci5: command tx timeout [ 329.535228][T15333] lo speed is unknown, defaulting to 1000 [ 329.575803][T15315] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.592396][T15315] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.618812][T15379] __nla_validate_parse: 7 callbacks suppressed [ 329.618834][T15379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2899'. [ 329.638764][T15315] bridge_slave_0: entered allmulticast mode [ 329.657352][T15315] bridge_slave_0: entered promiscuous mode [ 329.678574][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 329.692916][T15315] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.700202][T15315] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.707446][T15315] bridge_slave_1: entered allmulticast mode [ 329.715940][T15315] bridge_slave_1: entered promiscuous mode [ 329.830143][T15384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2901'. [ 329.852735][T15315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.858369][T15384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2901'. [ 329.891853][T15315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.958121][T15384] gretap0: entered promiscuous mode [ 329.967818][T15384] gretap0: left promiscuous mode [ 330.031124][T15386] tipc: Enabled bearer , priority 0 [ 330.101336][T15315] team0: Port device team_slave_0 added [ 330.119846][T15385] tipc: Disabling bearer [ 330.147344][T15315] team0: Port device team_slave_1 added [ 330.174383][T15340] lo speed is unknown, defaulting to 1000 [ 330.446322][T15315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.463502][T15315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.557576][T15315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.630485][T15401] macvtap2: entered promiscuous mode [ 330.656361][T15401] macvtap2: entered allmulticast mode [ 330.693677][T15315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.701592][T15315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.729021][T15315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.748837][T15406] tipc: Enabling of bearer rejected, already enabled [ 331.003510][T15412] sctp: [Deprecated]: syz.0.2908 (pid 15412) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.003510][T15412] Use struct sctp_sack_info instead [ 331.005856][T15315] hsr_slave_0: entered promiscuous mode [ 331.050868][T15315] hsr_slave_1: entered promiscuous mode [ 331.070116][T15315] debugfs: 'hsr0' already exists in 'hsr' [ 331.075884][T15315] Cannot create hsr debugfs directory [ 331.115953][T15411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2908'. [ 331.439175][ T5820] Bluetooth: hci5: command tx timeout [ 331.548458][T15422] dvmrp0: entered allmulticast mode [ 331.593595][T15426] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2913'. [ 331.612807][T15426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2913'. [ 331.778994][T15432] netlink: 'syz.3.2915': attribute type 1 has an invalid length. [ 331.868778][T15435] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2916'. [ 331.877773][T15435] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2916'. [ 331.941811][T15315] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.049761][T15443] FAULT_INJECTION: forcing a failure. [ 332.049761][T15443] name failslab, interval 1, probability 0, space 0, times 0 [ 332.080773][T15443] CPU: 1 UID: 0 PID: 15443 Comm: syz.1.2919 Not tainted syzkaller #0 PREEMPT(full) [ 332.080800][T15443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.080812][T15443] Call Trace: [ 332.080821][T15443] [ 332.080830][T15443] dump_stack_lvl+0xe8/0x150 [ 332.080863][T15443] should_fail_ex+0x412/0x560 [ 332.080897][T15443] should_failslab+0xa8/0x100 [ 332.080924][T15443] __kmalloc_cache_noprof+0x88/0x660 [ 332.080948][T15443] ? __hw_addr_add_ex+0x1dc/0x650 [ 332.080978][T15443] __hw_addr_add_ex+0x1dc/0x650 [ 332.081003][T15443] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 332.081032][T15443] dev_addr_init+0x15e/0x240 [ 332.081060][T15443] ? __pfx_dev_addr_init+0x10/0x10 [ 332.081087][T15443] ? alloc_netdev_mqs+0xa6/0x11b0 [ 332.081123][T15443] alloc_netdev_mqs+0x2b1/0x11b0 [ 332.081148][T15443] ? __pfx_ipip_tunnel_setup+0x10/0x10 [ 332.081178][T15443] rtnl_create_link+0x31f/0xd70 [ 332.081220][T15443] rtnl_newlink_create+0x277/0xb70 [ 332.081244][T15443] ? __pfx___nla_validate_parse+0x10/0x10 [ 332.081276][T15443] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 332.081303][T15443] ? __pfx___mutex_lock+0x10/0x10 [ 332.081337][T15443] ? ns_capable+0x89/0xe0 [ 332.081366][T15443] rtnl_newlink+0x1666/0x1be0 [ 332.081403][T15443] ? __pfx_rtnl_newlink+0x10/0x10 [ 332.081422][T15443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.081480][T15443] ? kasan_quarantine_put+0xbb/0x1f0 [ 332.081501][T15443] ? lockdep_hardirqs_on+0x7a/0x110 [ 332.081528][T15443] ? kmem_cache_free+0x187/0x630 [ 332.081549][T15443] ? nlmon_xmit+0xb0/0x100 [ 332.081585][T15443] ? __lock_acquire+0x6b5/0x2cf0 [ 332.081617][T15443] ? __local_bh_enable_ip+0xd0/0x130 [ 332.081642][T15443] ? lockdep_hardirqs_on+0x7a/0x110 [ 332.081663][T15443] ? __dev_queue_xmit+0x28b/0x3870 [ 332.081688][T15443] ? __local_bh_enable_ip+0xd0/0x130 [ 332.081710][T15443] ? __dev_queue_xmit+0x28b/0x3870 [ 332.081762][T15443] ? __pfx_rtnl_newlink+0x10/0x10 [ 332.081781][T15443] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 332.081806][T15443] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 332.081826][T15443] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.081845][T15443] ? ref_tracker_free+0x693/0x840 [ 332.081871][T15443] ? __copy_skb_header+0xa3/0x4a0 [ 332.081897][T15443] ? __pfx_ref_tracker_free+0x10/0x10 [ 332.081935][T15443] netlink_rcv_skb+0x232/0x4b0 [ 332.081958][T15443] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.081980][T15443] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.082013][T15443] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.082041][T15443] netlink_unicast+0x80f/0x9b0 [ 332.082079][T15443] ? __pfx_netlink_unicast+0x10/0x10 [ 332.082109][T15443] ? netlink_sendmsg+0x650/0xb40 [ 332.082128][T15443] ? skb_put+0x11b/0x210 [ 332.082153][T15443] netlink_sendmsg+0x813/0xb40 [ 332.082184][T15443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.082214][T15443] ? aa_sock_msg_perm+0xf1/0x1b0 [ 332.082244][T15443] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 332.082270][T15443] ____sys_sendmsg+0x972/0x9f0 [ 332.082304][T15443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.082338][T15443] ? import_iovec+0x73/0xa0 [ 332.082363][T15443] ___sys_sendmsg+0x2a5/0x360 [ 332.082393][T15443] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.082455][T15443] ? __fget_files+0x2a/0x420 [ 332.082482][T15443] ? __fget_files+0x3a0/0x420 [ 332.082521][T15443] __x64_sys_sendmsg+0x1bd/0x2a0 [ 332.082548][T15443] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.082582][T15443] ? __pfx_ksys_write+0x10/0x10 [ 332.082617][T15443] do_syscall_64+0x14d/0xf80 [ 332.082639][T15443] ? trace_irq_disable+0x3b/0x150 [ 332.082666][T15443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.082686][T15443] ? clear_bhb_loop+0x40/0x90 [ 332.082710][T15443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.082729][T15443] RIP: 0033:0x7f855259c799 [ 332.082748][T15443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.082764][T15443] RSP: 002b:00007f855345f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.082785][T15443] RAX: ffffffffffffffda RBX: 00007f8552815fa0 RCX: 00007f855259c799 [ 332.082800][T15443] RDX: 00000000040008c0 RSI: 0000200000000280 RDI: 0000000000000003 [ 332.082813][T15443] RBP: 00007f855345f090 R08: 0000000000000000 R09: 0000000000000000 [ 332.082825][T15443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 332.082837][T15443] R13: 00007f8552816038 R14: 00007f8552815fa0 R15: 00007ffd4c617468 [ 332.082869][T15443] [ 332.615092][T15315] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.668012][T15452] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2923'. [ 332.903980][T15315] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.058068][T15459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2925'. [ 333.097676][T15315] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.503591][T15474] netlink: 'syz.4.2930': attribute type 13 has an invalid length. [ 333.511532][T15474] netlink: 'syz.4.2930': attribute type 17 has an invalid length. [ 333.520662][ T5820] Bluetooth: hci5: command tx timeout [ 333.802376][T15472] tipc: Resetting bearer [ 333.841985][ T10] lo speed is unknown, defaulting to 1000 [ 333.851290][ T10] syz2: Port: 1 Link DOWN [ 333.983319][T15474] 8021q: adding VLAN 0 to HW filter on device .` [ 333.997072][T15474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.014334][ T10] lo speed is unknown, defaulting to 1000 [ 334.039531][ T10] syz2: Port: 1 Link ACTIVE [ 334.061995][T15315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 334.081060][T15315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 334.102862][T15315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 334.137868][T15315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 334.382748][T15315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.432846][T15315] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.464533][ T7858] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.471741][ T7858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.515216][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.522465][ T5931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.638005][T15467] lo speed is unknown, defaulting to 1000 [ 334.643393][T15315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.670439][T15490] FAULT_INJECTION: forcing a failure. [ 334.670439][T15490] name failslab, interval 1, probability 0, space 0, times 0 [ 334.718522][T15490] CPU: 0 UID: 0 PID: 15490 Comm: syz.0.2934 Not tainted syzkaller #0 PREEMPT(full) [ 334.718550][T15490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 334.718562][T15490] Call Trace: [ 334.718570][T15490] [ 334.718579][T15490] dump_stack_lvl+0xe8/0x150 [ 334.718610][T15490] should_fail_ex+0x412/0x560 [ 334.718642][T15490] should_failslab+0xa8/0x100 [ 334.718668][T15490] __kmalloc_cache_noprof+0x88/0x660 [ 334.718691][T15490] ? sctp_add_bind_addr+0x8c/0x370 [ 334.718722][T15490] sctp_add_bind_addr+0x8c/0x370 [ 334.718749][T15490] sctp_copy_local_addr_list+0x314/0x4f0 [ 334.718779][T15490] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 334.718805][T15490] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 334.718836][T15490] ? sctp_v4_is_any+0x35/0x60 [ 334.718861][T15490] ? sctp_copy_one_addr+0x93/0x360 [ 334.718890][T15490] sctp_bind_addr_copy+0xb3/0x3c0 [ 334.718922][T15490] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 334.718949][T15490] sctp_connect_new_asoc+0x2ff/0x6b0 [ 334.718973][T15490] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 334.719001][T15490] ? __local_bh_enable_ip+0xd0/0x130 [ 334.719024][T15490] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 334.719047][T15490] ? security_sctp_bind_connect+0x7e/0x2c0 [ 334.719075][T15490] sctp_sendmsg+0x1528/0x2c10 [ 334.719121][T15490] ? __pfx_sctp_sendmsg+0x10/0x10 [ 334.719162][T15490] ? aa_sk_perm+0x6d5/0x900 [ 334.719197][T15490] ? __pfx_aa_sk_perm+0x10/0x10 [ 334.719226][T15490] ? sock_rps_record_flow+0x19/0x350 [ 334.719253][T15490] ? inet_sendmsg+0x2f4/0x370 [ 334.719278][T15490] ____sys_sendmsg+0x80a/0x9f0 [ 334.719312][T15490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.719344][T15490] ? import_iovec+0x73/0xa0 [ 334.719369][T15490] ___sys_sendmsg+0x2a5/0x360 [ 334.719396][T15490] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.719420][T15490] ? kstrtouint+0x6e/0xe0 [ 334.719462][T15490] ? __fget_files+0x2a/0x420 [ 334.719482][T15490] ? __fget_files+0x3a0/0x420 [ 334.719513][T15490] __sys_sendmmsg+0x27c/0x4e0 [ 334.719544][T15490] ? __pfx___sys_sendmmsg+0x10/0x10 [ 334.719563][T15490] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 334.719615][T15490] ? rcu_is_watching+0x15/0xb0 [ 334.719648][T15490] __x64_sys_sendmmsg+0xa0/0xc0 [ 334.719674][T15490] do_syscall_64+0x14d/0xf80 [ 334.719695][T15490] ? trace_irq_disable+0x3b/0x150 [ 334.719721][T15490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.719748][T15490] ? clear_bhb_loop+0x40/0x90 [ 334.719771][T15490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.719791][T15490] RIP: 0033:0x7f7aeb39c799 [ 334.719809][T15490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.719827][T15490] RSP: 002b:00007f7aec333028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 334.719848][T15490] RAX: ffffffffffffffda RBX: 00007f7aeb615fa0 RCX: 00007f7aeb39c799 [ 334.719863][T15490] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: 0000000000000007 [ 334.719875][T15490] RBP: 00007f7aec333090 R08: 0000000000000000 R09: 0000000000000000 [ 334.719887][T15490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 334.719900][T15490] R13: 00007f7aeb616038 R14: 00007f7aeb615fa0 R15: 00007fffbce05b78 [ 334.719932][T15490] [ 335.048776][T15490] sctp: [Deprecated]: syz.0.2934 (pid 15490) Use of int in max_burst socket option deprecated. [ 335.048776][T15490] Use struct sctp_assoc_value instead [ 335.194532][ T7861] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 335.275005][T15504] FAULT_INJECTION: forcing a failure. [ 335.275005][T15504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.340338][T15504] CPU: 1 UID: 0 PID: 15504 Comm: syz.4.2937 Not tainted syzkaller #0 PREEMPT(full) [ 335.340365][T15504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 335.340377][T15504] Call Trace: [ 335.340385][T15504] [ 335.340394][T15504] dump_stack_lvl+0xe8/0x150 [ 335.340427][T15504] should_fail_ex+0x412/0x560 [ 335.340459][T15504] _copy_from_iter+0x1d3/0x1670 [ 335.340493][T15504] ? rcu_is_watching+0x15/0xb0 [ 335.340525][T15504] ? __pfx__copy_from_iter+0x10/0x10 [ 335.340561][T15504] ? __alloc_skb+0x4e5/0x7d0 [ 335.340580][T15504] ? skb_put+0x11b/0x210 [ 335.340605][T15504] pfkey_sendmsg+0x265/0x1120 [ 335.340629][T15504] ? __lock_acquire+0x6b5/0x2cf0 [ 335.340666][T15504] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 335.340693][T15504] ? aa_sk_perm+0x6d5/0x900 [ 335.340726][T15504] ? __pfx_aa_sk_perm+0x10/0x10 [ 335.340750][T15504] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 335.340786][T15504] ? aa_sock_msg_perm+0xf1/0x1b0 [ 335.340814][T15504] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 335.340839][T15504] ____sys_sendmsg+0x972/0x9f0 [ 335.340861][T15504] ? __lock_acquire+0x6b5/0x2cf0 [ 335.340901][T15504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.340933][T15504] ? import_iovec+0x73/0xa0 [ 335.340957][T15504] ___sys_sendmsg+0x2a5/0x360 [ 335.340986][T15504] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.341054][T15504] __sys_sendmmsg+0x27c/0x4e0 [ 335.341083][T15504] ? __pfx___sys_sendmmsg+0x10/0x10 [ 335.341104][T15504] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 335.341150][T15504] ? ksys_write+0x242/0x270 [ 335.341175][T15504] ? __pfx_ksys_write+0x10/0x10 [ 335.341201][T15504] __x64_sys_sendmmsg+0xa0/0xc0 [ 335.341230][T15504] do_syscall_64+0x14d/0xf80 [ 335.341252][T15504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.341271][T15504] ? clear_bhb_loop+0x40/0x90 [ 335.341295][T15504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.341318][T15504] RIP: 0033:0x7fbfdf39c799 [ 335.341336][T15504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.341353][T15504] RSP: 002b:00007fbfe01bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 335.341373][T15504] RAX: ffffffffffffffda RBX: 00007fbfdf615fa0 RCX: 00007fbfdf39c799 [ 335.341387][T15504] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000003 [ 335.341400][T15504] RBP: 00007fbfe01bd090 R08: 0000000000000000 R09: 0000000000000000 [ 335.341412][T15504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 335.341423][T15504] R13: 00007fbfdf616038 R14: 00007fbfdf615fa0 R15: 00007ffede354768 [ 335.341454][T15504] [ 335.598280][ T5820] Bluetooth: hci5: command tx timeout [ 336.004822][T15315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.185348][T15315] veth0_vlan: entered promiscuous mode [ 336.235267][T15315] veth1_vlan: entered promiscuous mode [ 336.461481][T15315] veth0_macvtap: entered promiscuous mode [ 336.474262][T15531] __nla_validate_parse: 1 callbacks suppressed [ 336.474281][T15531] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2942'. [ 336.501040][T15315] veth1_macvtap: entered promiscuous mode [ 336.525413][T15533] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2943'. [ 336.553979][T15315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.596418][T15315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.649187][ T7861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.688420][ T7861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.724030][ T7861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.743503][ T7861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.942856][ T7858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.954665][T15518] lo speed is unknown, defaulting to 1000 [ 336.961812][ T7858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.061218][ T7858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.112726][ T7858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.502050][T15559] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2954'. [ 337.512580][T15559] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2954'. [ 338.206058][T15597] syzkaller1: entered promiscuous mode [ 338.231904][T15597] syzkaller1: entered allmulticast mode [ 339.410441][T15623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2968'. [ 339.518595][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 339.579146][T15622] FAULT_INJECTION: forcing a failure. [ 339.579146][T15622] name failslab, interval 1, probability 0, space 0, times 0 [ 339.604984][T15622] CPU: 0 UID: 0 PID: 15622 Comm: syz.2.2969 Not tainted syzkaller #0 PREEMPT(full) [ 339.605011][T15622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.605024][T15622] Call Trace: [ 339.605032][T15622] [ 339.605040][T15622] dump_stack_lvl+0xe8/0x150 [ 339.605070][T15622] should_fail_ex+0x412/0x560 [ 339.605102][T15622] should_failslab+0xa8/0x100 [ 339.605127][T15622] ? skb_clone+0x212/0x3a0 [ 339.605151][T15622] kmem_cache_alloc_noprof+0x87/0x650 [ 339.605172][T15622] ? __netlink_lookup+0xc6/0x8b0 [ 339.605201][T15622] skb_clone+0x212/0x3a0 [ 339.605228][T15622] __netlink_deliver_tap+0x404/0x850 [ 339.605258][T15622] ? netlink_deliver_tap+0x2e/0x1b0 [ 339.605301][T15622] netlink_deliver_tap+0x19c/0x1b0 [ 339.605322][T15622] netlink_unicast+0x7e3/0x9b0 [ 339.605356][T15622] ? __pfx_netlink_unicast+0x10/0x10 [ 339.605386][T15622] ? netlink_sendmsg+0x650/0xb40 [ 339.605405][T15622] ? skb_put+0x11b/0x210 [ 339.605430][T15622] netlink_sendmsg+0x813/0xb40 [ 339.605459][T15622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.605484][T15622] ? aa_sock_msg_perm+0xf1/0x1b0 [ 339.605513][T15622] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.605545][T15622] ____sys_sendmsg+0x972/0x9f0 [ 339.605578][T15622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.605611][T15622] ? import_iovec+0x73/0xa0 [ 339.605634][T15622] ___sys_sendmsg+0x2a5/0x360 [ 339.605665][T15622] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.605724][T15622] ? __fget_files+0x2a/0x420 [ 339.605752][T15622] ? __fget_files+0x3a0/0x420 [ 339.605789][T15622] __x64_sys_sendmsg+0x1bd/0x2a0 [ 339.605817][T15622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.605851][T15622] ? __pfx_ksys_write+0x10/0x10 [ 339.605884][T15622] do_syscall_64+0x14d/0xf80 [ 339.605906][T15622] ? trace_irq_disable+0x3b/0x150 [ 339.605932][T15622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.605954][T15622] ? clear_bhb_loop+0x40/0x90 [ 339.605978][T15622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.605997][T15622] RIP: 0033:0x7efd2679c799 [ 339.606016][T15622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.606033][T15622] RSP: 002b:00007efd2757b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.606054][T15622] RAX: ffffffffffffffda RBX: 00007efd26a15fa0 RCX: 00007efd2679c799 [ 339.606069][T15622] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000003 [ 339.606081][T15622] RBP: 00007efd2757b090 R08: 0000000000000000 R09: 0000000000000000 [ 339.606094][T15622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.606106][T15622] R13: 00007efd26a16038 R14: 00007efd26a15fa0 R15: 00007ffee9882028 [ 339.606138][T15622] [ 340.266548][T15623] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 340.520317][T15636] netlink: 364 bytes leftover after parsing attributes in process `syz.0.2972'. [ 340.615570][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.630289][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.638592][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.646656][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.656592][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.768705][T15641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2973'. [ 340.856338][T15641] ip6t_rpfilter: unknown options [ 342.550847][T15701] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 342.601284][T15638] lo speed is unknown, defaulting to 1000 [ 342.718699][ T5820] Bluetooth: hci4: command tx timeout [ 343.103000][T15713] netlink: 'syz.0.2982': attribute type 30 has an invalid length. [ 343.174081][T15718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2984'. [ 343.235559][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2982'. [ 343.450283][T15713] bond10: option arp_missed_max: invalid value (0) [ 343.491659][T15724] SET target dimension over the limit! [ 343.503885][T15713] bond10: option arp_missed_max: allowed values 1 - 255 [ 343.534576][T15713] bond10 (unregistering): Released all slaves [ 343.667720][T15638] chnl_net:caif_netlink_parms(): no params data found [ 344.057557][T15638] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.083201][T15638] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.099046][T15638] bridge_slave_0: entered allmulticast mode [ 344.117577][T15638] bridge_slave_0: entered promiscuous mode [ 344.133186][T15704] lo speed is unknown, defaulting to 1000 [ 344.170566][T15638] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.185511][T15638] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.200901][T15638] bridge_slave_1: entered allmulticast mode [ 344.217924][T15638] bridge_slave_1: entered promiscuous mode [ 344.331802][T15638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.461542][T15638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.600064][T15638] team0: Port device team_slave_0 added [ 344.619164][T15638] team0: Port device team_slave_1 added [ 344.768357][T15638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.775346][T15638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.801589][ T5820] Bluetooth: hci4: command tx timeout [ 344.838752][T15638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.891250][T15638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.898502][T15638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.957332][T15638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.268094][T15638] hsr_slave_0: entered promiscuous mode [ 345.292895][T15608] Set syz1 is full, maxelem 65536 reached [ 345.298036][T15638] hsr_slave_1: entered promiscuous mode [ 345.315838][T15638] debugfs: 'hsr0' already exists in 'hsr' [ 345.337054][T15638] Cannot create hsr debugfs directory [ 345.650059][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2990'. [ 345.674323][T15752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2992'. [ 345.686213][T15750] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2991'. [ 345.717326][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2992'. [ 345.759186][T15752] netlink: 'syz.0.2992': attribute type 12 has an invalid length. [ 345.768313][T15752] netlink: 'syz.0.2992': attribute type 11 has an invalid length. [ 346.163735][T15638] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.596847][T15638] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.737254][T15774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2999'. [ 346.740155][T15638] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.761380][T15774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.794477][T15776] sctp: [Deprecated]: syz.1.2998 (pid 15776) Use of int in maxseg socket option. [ 346.794477][T15776] Use struct sctp_assoc_value instead [ 346.884375][ T5820] Bluetooth: hci4: command tx timeout [ 346.894535][T15638] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.142921][T15786] FAULT_INJECTION: forcing a failure. [ 347.142921][T15786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.156210][T15786] CPU: 0 UID: 0 PID: 15786 Comm: syz.4.3003 Not tainted syzkaller #0 PREEMPT(full) [ 347.156236][T15786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 347.156249][T15786] Call Trace: [ 347.156257][T15786] [ 347.156265][T15786] dump_stack_lvl+0xe8/0x150 [ 347.156299][T15786] should_fail_ex+0x412/0x560 [ 347.156331][T15786] _copy_from_user+0x2d/0xb0 [ 347.156354][T15786] __sys_sendto+0x2b0/0x710 [ 347.156379][T15786] ? __pfx___sys_sendto+0x10/0x10 [ 347.156398][T15786] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 347.156431][T15786] ? __fget_files+0x3a0/0x420 [ 347.156468][T15786] ? ksys_write+0x242/0x270 [ 347.156491][T15786] ? __pfx_ksys_write+0x10/0x10 [ 347.156517][T15786] __x64_sys_sendto+0xde/0x100 [ 347.156541][T15786] do_syscall_64+0x14d/0xf80 [ 347.156562][T15786] ? trace_irq_disable+0x3b/0x150 [ 347.156589][T15786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.156609][T15786] ? clear_bhb_loop+0x40/0x90 [ 347.156632][T15786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.156651][T15786] RIP: 0033:0x7fbfdf39c799 [ 347.156670][T15786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.156685][T15786] RSP: 002b:00007fbfe01bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 347.156705][T15786] RAX: ffffffffffffffda RBX: 00007fbfdf615fa0 RCX: 00007fbfdf39c799 [ 347.156719][T15786] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000003 [ 347.156731][T15786] RBP: 00007fbfe01bd090 R08: 0000200000000140 R09: 0000000000000014 [ 347.156743][T15786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.156755][T15786] R13: 00007fbfdf616038 R14: 00007fbfdf615fa0 R15: 00007ffede354768 [ 347.156784][T15786] [ 348.478601][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 348.958717][ T5820] Bluetooth: hci4: command tx timeout [ 354.245414][ T5157] block nbd1: Possible stuck request ffff888026d58000: control (read@0,1024B). Runtime 150 seconds [ 354.256236][ T5157] block nbd1: Possible stuck request ffff888026d58200: control (read@1024,1024B). Runtime 150 seconds [ 354.267304][ T5157] block nbd1: Possible stuck request ffff888026d58400: control (read@2048,1024B). Runtime 150 seconds [ 354.278491][ T5157] block nbd1: Possible stuck request ffff888026d58600: control (read@3072,1024B). Runtime 150 seconds [ 362.201773][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.211355][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.219884][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.221695][ T5143] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.227982][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.236516][ T5143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.242450][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.251315][ T5143] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.299564][ T5143] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.307338][ T5143] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.409146][ T5825] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.420814][ T5825] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.429263][ T5825] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.437475][ T5825] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.445420][ T5825] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 362.930563][T15803] lo speed is unknown, defaulting to 1000 [ 363.360685][ T5825] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 363.370562][ T5825] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 363.380353][ T5825] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 363.400359][ T5825] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 363.408447][ T5825] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 363.545405][T15803] chnl_net:caif_netlink_parms(): no params data found [ 363.609731][T15805] lo speed is unknown, defaulting to 1000 [ 363.994578][T15803] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.008482][T15803] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.015852][T15803] bridge_slave_0: entered allmulticast mode [ 364.050232][T15803] bridge_slave_0: entered promiscuous mode [ 364.079995][T15803] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.087157][T15803] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.103783][T15803] bridge_slave_1: entered allmulticast mode [ 364.150175][T15803] bridge_slave_1: entered promiscuous mode [ 364.279543][T15803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.309277][T15808] lo speed is unknown, defaulting to 1000 [ 364.320208][ T5143] Bluetooth: hci1: command tx timeout [ 364.334401][T15803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.398372][ T5143] Bluetooth: hci6: command tx timeout [ 364.479782][ T5143] Bluetooth: hci7: command tx timeout [ 364.489041][T15803] team0: Port device team_slave_0 added [ 364.512144][T15805] chnl_net:caif_netlink_parms(): no params data found [ 364.538870][T15803] team0: Port device team_slave_1 added [ 364.704884][T15803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.712149][T15803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.738723][T15803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.756211][T15803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.763535][T15803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.790494][T15803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.801874][T15815] lo speed is unknown, defaulting to 1000 [ 364.906478][T15803] hsr_slave_0: entered promiscuous mode [ 364.914913][T15803] hsr_slave_1: entered promiscuous mode [ 364.921893][T15803] debugfs: 'hsr0' already exists in 'hsr' [ 364.927640][T15803] Cannot create hsr debugfs directory [ 364.976828][T15805] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.984184][T15805] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.992380][T15805] bridge_slave_0: entered allmulticast mode [ 365.000551][T15805] bridge_slave_0: entered promiscuous mode [ 365.041958][T15805] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.050055][T15805] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.057306][T15805] bridge_slave_1: entered allmulticast mode [ 365.067747][T15805] bridge_slave_1: entered promiscuous mode [ 365.196316][T15805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.259723][T15805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.375653][T15805] team0: Port device team_slave_0 added [ 365.406618][T15805] team0: Port device team_slave_1 added [ 365.438346][ T5143] Bluetooth: hci8: command tx timeout [ 365.500459][T15808] chnl_net:caif_netlink_parms(): no params data found [ 365.558370][T15805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.565426][T15805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.594653][T15805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.630571][T15805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.637667][T15805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.665877][T15805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.687308][T15815] chnl_net:caif_netlink_parms(): no params data found [ 365.768379][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 365.897488][T15805] hsr_slave_0: entered promiscuous mode [ 365.905069][T15805] hsr_slave_1: entered promiscuous mode [ 365.911778][T15805] debugfs: 'hsr0' already exists in 'hsr' [ 365.917539][T15805] Cannot create hsr debugfs directory [ 365.976792][T15808] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.985785][T15808] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.993481][T15808] bridge_slave_0: entered allmulticast mode [ 366.002128][T15808] bridge_slave_0: entered promiscuous mode [ 366.055358][T15808] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.063204][T15808] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.071148][T15808] bridge_slave_1: entered allmulticast mode [ 366.081738][T15808] bridge_slave_1: entered promiscuous mode [ 366.202852][T15808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.212265][T15815] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.221010][T15815] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.228966][T15815] bridge_slave_0: entered allmulticast mode [ 366.236843][T15815] bridge_slave_0: entered promiscuous mode [ 366.260214][T15808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.269682][T15815] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.278977][T15815] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.286505][T15815] bridge_slave_1: entered allmulticast mode [ 366.294797][T15815] bridge_slave_1: entered promiscuous mode [ 366.394367][T15815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.408844][ T5143] Bluetooth: hci1: command tx timeout [ 366.433911][T15808] team0: Port device team_slave_0 added [ 366.442610][T15815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.468148][T15808] team0: Port device team_slave_1 added [ 366.478817][ T5143] Bluetooth: hci6: command tx timeout [ 366.559594][ T5143] Bluetooth: hci7: command tx timeout [ 366.573603][T15808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.582401][T15808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.609632][T15808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.622987][T15808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.630485][T15808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.657622][T15808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.672672][T15815] team0: Port device team_slave_0 added [ 366.701890][T15815] team0: Port device team_slave_1 added [ 366.795518][T15808] hsr_slave_0: entered promiscuous mode [ 366.804728][T15808] hsr_slave_1: entered promiscuous mode [ 366.811642][T15808] debugfs: 'hsr0' already exists in 'hsr' [ 366.817391][T15808] Cannot create hsr debugfs directory [ 366.845751][T15815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.853454][T15815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.882168][T15815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.924056][T15815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.931202][T15815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.957961][T15815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.074879][T15815] hsr_slave_0: entered promiscuous mode [ 367.082272][T15815] hsr_slave_1: entered promiscuous mode [ 367.088740][T15815] debugfs: 'hsr0' already exists in 'hsr' [ 367.094489][T15815] Cannot create hsr debugfs directory [ 367.518370][ T5143] Bluetooth: hci8: command tx timeout [ 368.479575][ T5143] Bluetooth: hci1: command tx timeout [ 368.569295][ T5143] Bluetooth: hci6: command tx timeout [ 368.638556][ T5143] Bluetooth: hci7: command tx timeout [ 369.598412][ T5143] Bluetooth: hci8: command tx timeout [ 370.558461][ T5143] Bluetooth: hci1: command tx timeout [ 370.638345][ T5143] Bluetooth: hci6: command tx timeout [ 370.718358][ T5143] Bluetooth: hci7: command tx timeout [ 371.678463][ T5143] Bluetooth: hci8: command tx timeout [ 378.562716][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.326939][ T5157] block nbd1: Possible stuck request ffff888026d58000: control (read@0,1024B). Runtime 180 seconds [ 384.346838][ T5157] block nbd1: Possible stuck request ffff888026d58200: control (read@1024,1024B). Runtime 180 seconds [ 384.357978][ T5157] block nbd1: Possible stuck request ffff888026d58400: control (read@2048,1024B). Runtime 180 seconds [ 384.369040][ T5157] block nbd1: Possible stuck request ffff888026d58600: control (read@3072,1024B). Runtime 180 seconds [ 400.680964][ T5825] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 400.690850][ T5825] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 400.701905][ T5825] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 400.709994][ T5825] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 400.721577][ T5825] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 400.958556][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 401.142825][T15842] lo speed is unknown, defaulting to 1000 [ 401.315318][T15842] chnl_net:caif_netlink_parms(): no params data found [ 401.432823][T15842] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.441615][T15842] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.454285][T15842] bridge_slave_0: entered allmulticast mode [ 401.462523][T15842] bridge_slave_0: entered promiscuous mode [ 401.471632][T15842] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.479126][T15842] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.487358][T15842] bridge_slave_1: entered allmulticast mode [ 401.495688][T15842] bridge_slave_1: entered promiscuous mode [ 401.536377][T15842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.551501][T15842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.593117][T15842] team0: Port device team_slave_0 added [ 401.603862][T15842] team0: Port device team_slave_1 added [ 401.640981][T15842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.647966][T15842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.677064][T15842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.692962][T15842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.700536][T15842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.727461][T15842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.788035][T15842] hsr_slave_0: entered promiscuous mode [ 401.795852][T15842] hsr_slave_1: entered promiscuous mode [ 401.803070][T15842] debugfs: 'hsr0' already exists in 'hsr' [ 401.809567][T15842] Cannot create hsr debugfs directory [ 402.800480][ T5143] Bluetooth: hci9: command tx timeout [ 404.878783][ T5143] Bluetooth: hci9: command tx timeout [ 406.959015][ T5143] Bluetooth: hci9: command tx timeout [ 409.039512][ T5143] Bluetooth: hci9: command tx timeout [ 414.428608][ T5157] block nbd1: Possible stuck request ffff888026d58000: control (read@0,1024B). Runtime 210 seconds [ 414.439856][ T5157] block nbd1: Possible stuck request ffff888026d58200: control (read@1024,1024B). Runtime 210 seconds [ 414.451339][ T5157] block nbd1: Possible stuck request ffff888026d58400: control (read@2048,1024B). Runtime 210 seconds [ 414.462787][ T5157] block nbd1: Possible stuck request ffff888026d58600: control (read@3072,1024B). Runtime 210 seconds [ 422.242628][ T5825] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 422.258658][ T5825] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 422.267627][ T5825] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 422.277403][ T5825] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 422.285436][ T5825] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 422.346515][ T5825] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 422.356498][ T5825] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 422.368664][ T5825] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 422.377300][ T5825] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 422.385503][ T5825] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 422.895437][T15853] lo speed is unknown, defaulting to 1000 [ 423.152663][T15853] chnl_net:caif_netlink_parms(): no params data found [ 423.301470][T15855] lo speed is unknown, defaulting to 1000 [ 423.427116][ T5825] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 423.436843][ T5825] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 423.451677][ T5834] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 423.460214][ T5834] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 423.468792][ T5834] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 423.500446][ T5834] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 423.510906][T15853] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.518044][T15853] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.525772][ T5834] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 423.526197][T15853] bridge_slave_0: entered allmulticast mode [ 423.541000][ T5834] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 423.550380][T15853] bridge_slave_0: entered promiscuous mode [ 423.557258][ T5834] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 423.565069][ T5834] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 423.606731][T15853] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.619292][T15853] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.626592][T15853] bridge_slave_1: entered allmulticast mode [ 423.635089][T15853] bridge_slave_1: entered promiscuous mode [ 423.700912][T15853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.765276][T15853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.892070][T15853] team0: Port device team_slave_0 added [ 423.911557][T15853] team0: Port device team_slave_1 added [ 423.977739][T15855] chnl_net:caif_netlink_parms(): no params data found [ 424.067453][T15853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.075047][T15853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.105270][T15853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.150304][T15853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.157274][T15853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.218525][T15853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.318721][ T5834] Bluetooth: hci10: command tx timeout [ 424.417002][T15865] lo speed is unknown, defaulting to 1000 [ 424.445562][T15853] hsr_slave_0: entered promiscuous mode [ 424.459850][T15853] hsr_slave_1: entered promiscuous mode [ 424.469689][T15853] debugfs: 'hsr0' already exists in 'hsr' [ 424.475447][T15853] Cannot create hsr debugfs directory [ 424.482511][ T5834] Bluetooth: hci11: command tx timeout [ 424.530004][T15855] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.537289][T15855] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.545095][T15855] bridge_slave_0: entered allmulticast mode [ 424.553954][T15855] bridge_slave_0: entered promiscuous mode [ 424.596217][T15855] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.608942][T15855] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.616243][T15855] bridge_slave_1: entered allmulticast mode [ 424.641066][T15855] bridge_slave_1: entered promiscuous mode [ 424.841091][T15855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.879119][T15855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.006620][T15855] team0: Port device team_slave_0 added [ 425.032515][T15867] lo speed is unknown, defaulting to 1000 [ 425.042672][T15855] team0: Port device team_slave_1 added [ 425.176769][T15855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.183885][T15855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.214709][T15855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.251176][T15855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.258157][T15855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.287941][T15855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.383609][T15865] chnl_net:caif_netlink_parms(): no params data found [ 425.489605][T15855] hsr_slave_0: entered promiscuous mode [ 425.496288][T15855] hsr_slave_1: entered promiscuous mode [ 425.503202][T15855] debugfs: 'hsr0' already exists in 'hsr' [ 425.509213][T15855] Cannot create hsr debugfs directory [ 425.518750][ T5834] Bluetooth: hci12: command tx timeout [ 425.600204][ T5834] Bluetooth: hci13: command tx timeout [ 425.797218][T15865] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.805154][T15865] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.812881][T15865] bridge_slave_0: entered allmulticast mode [ 425.821051][T15865] bridge_slave_0: entered promiscuous mode [ 425.829701][T15865] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.836833][T15865] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.845015][T15865] bridge_slave_1: entered allmulticast mode [ 425.853906][T15865] bridge_slave_1: entered promiscuous mode [ 425.989336][T15865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.006363][T15865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.045234][T15867] chnl_net:caif_netlink_parms(): no params data found [ 426.144741][T15865] team0: Port device team_slave_0 added [ 426.175165][T15865] team0: Port device team_slave_1 added [ 426.307600][T15865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.316234][T15865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.342930][T15865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.356395][T15865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.363769][T15865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.391634][T15865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.402685][ T5834] Bluetooth: hci10: command tx timeout [ 426.447192][T15867] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.455278][T15867] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.464592][T15867] bridge_slave_0: entered allmulticast mode [ 426.472884][T15867] bridge_slave_0: entered promiscuous mode [ 426.530709][T15867] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.537943][T15867] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.552684][T15867] bridge_slave_1: entered allmulticast mode [ 426.561506][T15867] bridge_slave_1: entered promiscuous mode [ 426.568875][ T5834] Bluetooth: hci11: command tx timeout [ 426.597087][T15865] hsr_slave_0: entered promiscuous mode [ 426.604193][T15865] hsr_slave_1: entered promiscuous mode [ 426.611110][T15865] debugfs: 'hsr0' already exists in 'hsr' [ 426.616863][T15865] Cannot create hsr debugfs directory [ 426.661884][T15867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.710553][T15867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.839827][T15867] team0: Port device team_slave_0 added [ 426.865514][T15867] team0: Port device team_slave_1 added [ 426.950213][T15867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.957197][T15867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.984493][T15867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.023034][T15867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.030543][T15867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.057055][T15867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.164744][T15867] hsr_slave_0: entered promiscuous mode [ 427.172718][T15867] hsr_slave_1: entered promiscuous mode [ 427.181045][T15867] debugfs: 'hsr0' already exists in 'hsr' [ 427.186824][T15867] Cannot create hsr debugfs directory [ 427.598643][ T5834] Bluetooth: hci12: command tx timeout [ 427.693301][ T5834] Bluetooth: hci13: command tx timeout [ 428.478489][ T5834] Bluetooth: hci10: command tx timeout [ 428.648320][ T5834] Bluetooth: hci11: command tx timeout [ 429.678392][ T5834] Bluetooth: hci12: command tx timeout [ 429.771858][ T5834] Bluetooth: hci13: command tx timeout [ 430.558490][ T5834] Bluetooth: hci10: command tx timeout [ 430.718540][ T5834] Bluetooth: hci11: command tx timeout [ 431.768393][ T5834] Bluetooth: hci12: command tx timeout [ 431.838588][ T5834] Bluetooth: hci13: command tx timeout [ 440.001271][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.481487][ T5157] block nbd1: Possible stuck request ffff888026d58000: control (read@0,1024B). Runtime 240 seconds [ 444.492441][ T5157] block nbd1: Possible stuck request ffff888026d58200: control (read@1024,1024B). Runtime 240 seconds [ 444.503712][ T5157] block nbd1: Possible stuck request ffff888026d58400: control (read@2048,1024B). Runtime 240 seconds [ 444.514970][ T5157] block nbd1: Possible stuck request ffff888026d58600: control (read@3072,1024B). Runtime 240 seconds [ 461.282522][ T5820] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 461.291967][ T5820] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 461.304703][ T5820] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 461.316063][ T5820] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 461.325755][ T5820] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 461.743227][T15892] lo speed is unknown, defaulting to 1000 [ 461.916600][T15892] chnl_net:caif_netlink_parms(): no params data found [ 462.044801][T15892] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.052126][T15892] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.059821][T15892] bridge_slave_0: entered allmulticast mode [ 462.067637][T15892] bridge_slave_0: entered promiscuous mode [ 462.077047][T15892] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.084955][T15892] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.092571][T15892] bridge_slave_1: entered allmulticast mode [ 462.101063][T15892] bridge_slave_1: entered promiscuous mode [ 462.138791][T15892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.152181][T15892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.193098][T15892] team0: Port device team_slave_0 added [ 462.202259][T15892] team0: Port device team_slave_1 added [ 462.235965][T15892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.243010][T15892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.269556][T15892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.282488][T15892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.290016][T15892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.316741][T15892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.379236][T15892] hsr_slave_0: entered promiscuous mode [ 462.386568][T15892] hsr_slave_1: entered promiscuous mode [ 462.393909][T15892] debugfs: 'hsr0' already exists in 'hsr' [ 462.400219][T15892] Cannot create hsr debugfs directory [ 463.360189][ T5834] Bluetooth: hci14: command tx timeout [ 465.438460][ T5834] Bluetooth: hci14: command tx timeout [ 467.519807][ T5143] Bluetooth: hci14: command tx timeout [ 467.678429][ T5143] Bluetooth: hci4: command 0x0406 tx timeout [ 469.598519][ T5820] Bluetooth: hci14: command tx timeout [ 470.718400][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 474.578366][ T5157] block nbd1: Possible stuck request ffff888026d58000: control (read@0,1024B). Runtime 270 seconds [ 474.589589][ T5157] block nbd1: Possible stuck request ffff888026d58200: control (read@1024,1024B). Runtime 270 seconds [ 474.602192][ T5157] block nbd1: Possible stuck request ffff888026d58400: control (read@2048,1024B). Runtime 270 seconds [ 474.613493][ T5157] block nbd1: Possible stuck request ffff888026d58600: control (read@3072,1024B). Runtime 270 seconds [ 482.368830][ T5143] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 482.382400][ T5143] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 482.393774][ T5143] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 482.404013][ T5143] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 482.413900][ T5143] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 482.429147][ T5834] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 482.441161][ T5820] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 482.449605][ T5820] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 482.461347][ T5820] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 482.469545][ T5820] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 483.116725][T15904] lo speed is unknown, defaulting to 1000 [ 483.453721][ T5820] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 483.463624][T15905] lo speed is unknown, defaulting to 1000 [ 483.463743][ T5820] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 483.478673][ T5820] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 483.491707][ T5820] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 483.499728][ T5820] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 483.536099][T15904] chnl_net:caif_netlink_parms(): no params data found [ 483.950178][T15904] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.957344][T15904] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.985766][ T5820] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 483.996961][T15904] bridge_slave_0: entered allmulticast mode [ 484.003772][ T5820] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 484.017965][ T5820] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 484.026409][ T5820] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 484.034299][ T5820] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 484.044419][T15904] bridge_slave_0: entered promiscuous mode [ 484.086432][T15904] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.108804][T15904] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.116159][T15904] bridge_slave_1: entered allmulticast mode [ 484.130278][T15904] bridge_slave_1: entered promiscuous mode [ 484.161522][T15905] chnl_net:caif_netlink_parms(): no params data found [ 484.299850][T15904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.312800][T15904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.470977][T15904] team0: Port device team_slave_0 added [ 484.480958][ T5820] Bluetooth: hci15: command tx timeout [ 484.509914][T15904] team0: Port device team_slave_1 added [ 484.560679][ T5820] Bluetooth: hci16: command tx timeout [ 484.696282][T15904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.729312][T15904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.778540][T15904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.796032][T15905] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.807321][T15905] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.815782][T15905] bridge_slave_0: entered allmulticast mode [ 484.824335][T15905] bridge_slave_0: entered promiscuous mode [ 484.832380][T15912] lo speed is unknown, defaulting to 1000 [ 484.859640][T15904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.866606][T15904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.937997][T15904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.973361][T15905] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.998383][T15905] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.005752][T15905] bridge_slave_1: entered allmulticast mode [ 485.020939][T15905] bridge_slave_1: entered promiscuous mode [ 485.134143][T15905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.175904][T15905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.188368][T15921] lo speed is unknown, defaulting to 1000 [ 485.220698][T15904] hsr_slave_0: entered promiscuous mode [ 485.227504][T15904] hsr_slave_1: entered promiscuous mode [ 485.234143][T15904] debugfs: 'hsr0' already exists in 'hsr' [ 485.240340][T15904] Cannot create hsr debugfs directory [ 485.284581][T15905] team0: Port device team_slave_0 added [ 485.304542][T15905] team0: Port device team_slave_1 added [ 485.372359][T15905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.379999][T15905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.406392][T15905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.447657][T15905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.456193][T15905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.483072][T15905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.599683][ T5820] Bluetooth: hci17: command tx timeout [ 485.695620][T15905] hsr_slave_0: entered promiscuous mode [ 485.703129][T15905] hsr_slave_1: entered promiscuous mode [ 485.710219][T15905] debugfs: 'hsr0' already exists in 'hsr' [ 485.715964][T15905] Cannot create hsr debugfs directory [ 485.861468][T15912] chnl_net:caif_netlink_parms(): no params data found [ 486.077147][T15921] chnl_net:caif_netlink_parms(): no params data found [ 486.088072][ T5820] Bluetooth: hci18: command tx timeout [ 486.294865][T15912] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.302946][T15912] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.314126][T15912] bridge_slave_0: entered allmulticast mode [ 486.324560][T15912] bridge_slave_0: entered promiscuous mode [ 486.355123][T15912] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.362542][T15912] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.373446][T15912] bridge_slave_1: entered allmulticast mode [ 486.381929][T15912] bridge_slave_1: entered promiscuous mode [ 486.477304][T15912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.496556][T15912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.507429][T15921] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.515142][T15921] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.539290][T15921] bridge_slave_0: entered allmulticast mode [ 486.547323][T15921] bridge_slave_0: entered promiscuous mode [ 486.558410][ T5823] Bluetooth: hci15: command tx timeout [ 486.564126][T15921] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.571609][T15921] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.580621][T15921] bridge_slave_1: entered allmulticast mode [ 486.588764][T15921] bridge_slave_1: entered promiscuous mode [ 486.638406][ T5823] Bluetooth: hci16: command tx timeout [ 486.702578][T15912] team0: Port device team_slave_0 added [ 486.724254][T15921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.750274][T15912] team0: Port device team_slave_1 added [ 486.759495][T15921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.845836][T15912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.854839][T15912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.886250][T15912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.900878][T15912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.907838][T15912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.934157][T15912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.950026][T15921] team0: Port device team_slave_0 added [ 486.999578][T15921] team0: Port device team_slave_1 added [ 487.051250][T15912] hsr_slave_0: entered promiscuous mode [ 487.058664][T15912] hsr_slave_1: entered promiscuous mode [ 487.065185][T15912] debugfs: 'hsr0' already exists in 'hsr' [ 487.071325][T15912] Cannot create hsr debugfs directory [ 487.145445][T15921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.153425][T15921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.179833][T15921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.192992][T15921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.201858][T15921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.229098][T15921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.409548][T15921] hsr_slave_0: entered promiscuous mode [ 487.416439][T15921] hsr_slave_1: entered promiscuous mode [ 487.424354][T15921] debugfs: 'hsr0' already exists in 'hsr' [ 487.430219][T15921] Cannot create hsr debugfs directory [ 487.678485][ T5823] Bluetooth: hci17: command tx timeout [ 488.162643][ T5823] Bluetooth: hci6: command 0x0406 tx timeout [ 488.169940][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 488.176980][ T5831] Bluetooth: hci7: command 0x0406 tx timeout [ 488.183085][ T5831] Bluetooth: hci8: command 0x0406 tx timeout [ 488.189270][ T5823] Bluetooth: hci18: command tx timeout [ 488.638732][ T5825] Bluetooth: hci15: command tx timeout [ 488.718366][ T5825] Bluetooth: hci16: command tx timeout [ 489.758691][ T5825] Bluetooth: hci17: command tx timeout [ 490.238413][ T5825] Bluetooth: hci18: command tx timeout [ 490.718430][ T5825] Bluetooth: hci15: command tx timeout [ 490.798847][ T5825] Bluetooth: hci16: command tx timeout [ 491.838525][ T5825] Bluetooth: hci17: command tx timeout [ 492.318497][ T5825] Bluetooth: hci18: command tx timeout [ 494.398663][ T31] INFO: task syz-executor:15638 blocked for more than 143 seconds. [ 494.406610][ T31] Not tainted syzkaller #0 [ 494.413484][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.422508][ T31] task:syz-executor state:D stack:23152 pid:15638 tgid:15638 ppid:1 task_flags:0x400140 flags:0x00080002 [ 494.434822][ T31] Call Trace: [ 494.439776][ T31] [ 494.442783][ T31] __schedule+0x15dd/0x52d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 494.447551][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 494.454280][ T31] ? __pfx___schedule+0x10/0x10 [ 494.459465][ T31] ? schedule+0x90/0x360 [ 494.464210][ T31] schedule+0x164/0x360 [ 494.470100][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.475590][ T31] __mutex_lock+0x7fe/0x1300 [ 494.482435][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 494.487711][ T31] ? __mutex_lock+0x5ac/0x1300 [ 494.492966][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 494.497813][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.503773][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 494.509091][ T31] ? radix_tree_lookup+0x240/0x290 [ 494.514335][ T31] genl_rcv_msg+0x10b/0x7a0 [ 494.519353][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.524418][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 494.529836][ T31] netlink_rcv_skb+0x232/0x4b0 [ 494.534632][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.540129][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.545484][ T31] ? down_read+0x272/0x2e0 [ 494.562178][ T31] ? genl_rcv+0xd/0x40 [ 494.566349][ T31] genl_rcv+0x28/0x40 [ 494.578594][ T31] netlink_unicast+0x80f/0x9b0 [ 494.583593][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 494.598483][ T31] ? netlink_sendmsg+0x650/0xb40 [ 494.603493][ T31] ? skb_put+0x11b/0x210 [ 494.625697][ T31] netlink_sendmsg+0x813/0xb40 [ 494.648793][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.654145][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 494.678275][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.683658][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.705694][ T31] __sys_sendto+0x672/0x710 [ 494.711309][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 494.716406][ T31] ? fd_install+0x94/0x3d0 [ 494.721478][ T31] ? fd_install+0x306/0x3d0 [ 494.726028][ T31] __x64_sys_sendto+0xde/0x100 [ 494.731912][ T31] do_syscall_64+0x14d/0xf80 [ 494.736628][ T31] ? trace_irq_disable+0x3b/0x150 [ 494.741759][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.747884][ T31] ? clear_bhb_loop+0x40/0x90 [ 494.752886][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.758882][ T31] RIP: 0033:0x7f0228d5cfce [ 494.763377][ T31] RSP: 002b:00007fff22e58748 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 494.772701][ T31] RAX: ffffffffffffffda RBX: 0000555564b99500 RCX: 00007f0228d5cfce [ 494.783048][ T31] RDX: 0000000000000020 RSI: 00007f0229b44670 RDI: 0000000000000005 [ 494.791331][ T31] RBP: 0000000000000001 R08: 00007fff22e587c4 R09: 000000000000000c [ 494.799436][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 494.807434][ T31] R13: 00007fff22e58818 R14: 00007f0229b44670 R15: 0000000000000000 [ 494.817808][ T31] [ 494.821294][ T31] INFO: task syz.2.2997:15779 blocked for more than 143 seconds. [ 494.830707][ T31] Not tainted syzkaller #0 [ 494.835664][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.858379][ T31] task:syz.2.2997 state:D stack:27880 pid:15779 tgid:15770 ppid:15315 task_flags:0x400040 flags:0x00080002 [ 494.880820][ T31] Call Trace: [ 494.884161][ T31] [ 494.887137][ T31] __schedule+0x15dd/0x52d0 [ 494.892051][ T31] ? __pfx___schedule+0x10/0x10 [ 494.896942][ T31] ? schedule+0x90/0x360 [ 494.901325][ T31] schedule+0x164/0x360 [ 494.905515][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.911112][ T31] __mutex_lock+0x7fe/0x1300 [ 494.915739][ T31] ? __mutex_lock+0x5ac/0x1300 [ 494.920641][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 494.925346][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.930553][ T31] ? __dev_queue_xmit+0x28b/0x3870 [ 494.935791][ T31] ? radix_tree_lookup+0x240/0x290 [ 494.941050][ T31] genl_rcv_msg+0x10b/0x7a0 [ 494.945579][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.950693][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 494.955667][ T31] netlink_rcv_skb+0x232/0x4b0 [ 494.960774][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.965935][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.971674][ T31] ? down_read+0x272/0x2e0 [ 494.976687][ T31] ? genl_rcv+0xd/0x40 [ 494.981286][ T31] genl_rcv+0x28/0x40 [ 494.985384][ T31] netlink_unicast+0x80f/0x9b0 [ 494.990638][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 494.995962][ T31] ? netlink_sendmsg+0x650/0xb40 [ 495.001349][ T31] ? skb_put+0x11b/0x210 [ 495.005626][ T31] netlink_sendmsg+0x813/0xb40 [ 495.010865][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.016280][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 495.022060][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.027382][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.033182][ T31] __sys_sendto+0x672/0x710 [ 495.037723][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 495.043386][ T31] ? fd_install+0x94/0x3d0 [ 495.047842][ T31] ? fd_install+0x306/0x3d0 [ 495.052966][ T31] __x64_sys_sendto+0xde/0x100 [ 495.057980][ T31] do_syscall_64+0x14d/0xf80 [ 495.063160][ T31] ? trace_irq_disable+0x3b/0x150 [ 495.068576][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.074670][ T31] ? clear_bhb_loop+0x40/0x90 [ 495.080514][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.086452][ T31] RIP: 0033:0x7efd2675cfce [ 495.091321][ T31] RSP: 002b:00007efd249d3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 495.100315][ T31] RAX: ffffffffffffffda RBX: 00007efd249d56c0 RCX: 00007efd2675cfce [ 495.109505][ T31] RDX: 0000000000000020 RSI: 00007efd249d4000 RDI: 0000000000000008 [ 495.117766][ T31] RBP: 0000000000000000 R08: 00007efd249d3f04 R09: 000000000000000c [ 495.126363][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 495.134738][ T31] R13: 00007efd249d3f58 R14: 00007efd249d4000 R15: 0000000000000000 [ 495.143190][ T31] [ 495.146455][ T31] INFO: task syz.1.2998:15776 blocked for more than 144 seconds. [ 495.154686][ T31] Not tainted syzkaller #0 [ 495.159967][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.168989][ T31] task:syz.1.2998 state:D stack:26240 pid:15776 tgid:15772 ppid:5817 task_flags:0x480140 flags:0x00080002 [ 495.182329][ T31] Call Trace: [ 495.185639][ T31] [ 495.189020][ T31] __schedule+0x15dd/0x52d0 [ 495.193562][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 495.199801][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 495.204860][ T31] ? __pfx___schedule+0x10/0x10 [ 495.211893][ T31] ? schedule+0x90/0x360 [ 495.216168][ T31] schedule+0x164/0x360 [ 495.221343][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 495.226971][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 495.234276][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 495.240747][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 495.246940][ T31] nbd_set_size+0x454/0x680 [ 495.251977][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 495.257050][ T31] ? nla_memcpy+0x5b/0xc0 [ 495.262068][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 495.267418][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 495.273885][ T31] ? rcu_is_watching+0x15/0xb0 [ 495.281114][ T31] ? trace_kmalloc+0x2a/0x110 [ 495.285867][ T31] ? __nla_parse+0x40/0x60 [ 495.290745][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 495.297107][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 495.304103][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 495.310862][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 495.316984][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 495.322583][ T31] genl_rcv_msg+0x61c/0x7a0 [ 495.327131][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.333112][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 495.340120][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 495.345106][ T31] netlink_rcv_skb+0x232/0x4b0 [ 495.350420][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.355480][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 495.361583][ T31] ? down_read+0x272/0x2e0 [ 495.366032][ T31] ? genl_rcv+0xd/0x40 [ 495.373600][ T31] genl_rcv+0x28/0x40 [ 495.377616][ T31] netlink_unicast+0x80f/0x9b0 [ 495.383788][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 495.389422][ T31] ? netlink_sendmsg+0x650/0xb40 [ 495.394380][ T31] ? skb_put+0x11b/0x210 [ 495.399039][ T31] netlink_sendmsg+0x813/0xb40 [ 495.403836][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.409594][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 495.414566][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.420702][ T31] ____sys_sendmsg+0x972/0x9f0 [ 495.425522][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.431350][ T31] ? import_iovec+0x73/0xa0 [ 495.435914][ T31] ___sys_sendmsg+0x2a5/0x360 [ 495.441657][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.446895][ T31] ? futex_wake+0x4ac/0x580 [ 495.453117][ T31] ? __fget_files+0x2a/0x420 [ 495.457747][ T31] ? __fget_files+0x3a0/0x420 [ 495.463157][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 495.468138][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.474221][ T31] ? rcu_is_watching+0x15/0xb0 [ 495.479427][ T31] do_syscall_64+0x14d/0xf80 [ 495.484048][ T31] ? trace_irq_disable+0x3b/0x150 [ 495.490520][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.496626][ T31] ? clear_bhb_loop+0x40/0x90 [ 495.502650][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.509007][ T31] RIP: 0033:0x7f855259c799 [ 495.513462][ T31] RSP: 002b:00007f855345f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.522772][ T31] RAX: ffffffffffffffda RBX: 00007f8552815fa0 RCX: 00007f855259c799 [ 495.534108][ T31] RDX: 0000000000048040 RSI: 0000200000000600 RDI: 0000000000000004 [ 495.542621][ T31] RBP: 00007f8552632c99 R08: 0000000000000000 R09: 0000000000000000 [ 495.551405][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.560632][ T31] R13: 00007f8552816038 R14: 00007f8552815fa0 R15: 00007ffd4c617468 [ 495.569004][ T31] [ 495.572111][ T31] INFO: task syz.0.2999:15774 blocked for more than 144 seconds. [ 495.580378][ T31] Not tainted syzkaller #0 [ 495.585326][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.603016][ T31] task:syz.0.2999 state:D stack:25864 pid:15774 tgid:15773 ppid:5828 task_flags:0x400140 flags:0x00080002 [ 495.615372][ T31] Call Trace: [ 495.619243][ T31] [ 495.622270][ T31] __schedule+0x15dd/0x52d0 [ 495.626883][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 495.632431][ T31] ? __pfx___schedule+0x10/0x10 [ 495.637330][ T31] ? schedule+0x90/0x360 [ 495.642552][ T31] schedule+0x164/0x360 [ 495.646748][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.652957][ T31] __mutex_lock+0x7fe/0x1300 [ 495.657587][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 495.663781][ T31] ? __mutex_lock+0x5ac/0x1300 [ 495.669851][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 495.674575][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.682233][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 495.687232][ T31] ? radix_tree_lookup+0x240/0x290 [ 495.695233][ T31] genl_rcv_msg+0x10b/0x7a0 [ 495.700262][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.705326][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 495.710892][ T31] netlink_rcv_skb+0x232/0x4b0 [ 495.715696][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.721626][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 495.726961][ T31] ? down_read+0x272/0x2e0 [ 495.731843][ T31] ? genl_rcv+0xd/0x40 [ 495.735944][ T31] genl_rcv+0x28/0x40 [ 495.740456][ T31] netlink_unicast+0x80f/0x9b0 [ 495.745268][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 495.751399][ T31] ? netlink_sendmsg+0x650/0xb40 [ 495.756374][ T31] ? skb_put+0x11b/0x210 [ 495.762244][ T31] netlink_sendmsg+0x813/0xb40 [ 495.767045][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.773314][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 495.779505][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.784820][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.790607][ T31] __sys_sendto+0x672/0x710 [ 495.796282][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 495.801795][ T31] ? exc_page_fault+0x6a/0xc0 [ 495.806501][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 495.812438][ T31] __x64_sys_sendto+0xde/0x100 [ 495.817256][ T31] do_syscall_64+0x14d/0xf80 [ 495.822494][ T31] ? trace_irq_disable+0x3b/0x150 [ 495.827548][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.834174][ T31] ? clear_bhb_loop+0x40/0x90 [ 495.841565][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.847492][ T31] RIP: 0033:0x7f7aeb35cfce [ 495.852460][ T31] RSP: 002b:00007f7aec331e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 495.861858][ T31] RAX: ffffffffffffffda RBX: 00007f7aec3336c0 RCX: 00007f7aeb35cfce [ 495.870253][ T31] RDX: 0000000000000020 RSI: 00007f7aec332000 RDI: 000000000000000f [ 495.879182][ T31] RBP: 0000000000000000 R08: 00007f7aec331f04 R09: 000000000000000c [ 495.887191][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 495.897477][ T31] R13: 00007f7aec331f58 R14: 00007f7aec332000 R15: 0000000000000000 [ 495.905967][ T31] [ 495.909333][ T31] INFO: task syz.4.3005:15797 blocked for more than 144 seconds. [ 495.917111][ T31] Not tainted syzkaller #0 [ 495.922477][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.933260][ T31] task:syz.4.3005 state:D stack:27880 pid:15797 tgid:15796 ppid:5824 task_flags:0x400140 flags:0x00080002 [ 495.945659][ T31] Call Trace: [ 495.949408][ T31] [ 495.952377][ T31] __schedule+0x15dd/0x52d0 [ 495.956930][ T31] ? __pfx___schedule+0x10/0x10 [ 495.962370][ T31] ? schedule+0x90/0x360 [ 495.966651][ T31] schedule+0x164/0x360 [ 495.971720][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.977217][ T31] __mutex_lock+0x7fe/0x1300 [ 495.982514][ T31] ? __mutex_lock+0x5ac/0x1300 [ 495.987316][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 495.993007][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.004102][ T31] ? __dev_queue_xmit+0x28b/0x3870 [ 496.010364][ T31] ? radix_tree_lookup+0x240/0x290 [ 496.015520][ T31] genl_rcv_msg+0x10b/0x7a0 [ 496.020631][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.025695][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 496.031190][ T31] netlink_rcv_skb+0x232/0x4b0 [ 496.035990][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.041660][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 496.046996][ T31] ? down_read+0x272/0x2e0 [ 496.051869][ T31] ? genl_rcv+0xd/0x40 [ 496.055973][ T31] genl_rcv+0x28/0x40 [ 496.060539][ T31] netlink_unicast+0x80f/0x9b0 [ 496.065344][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 496.071131][ T31] ? netlink_sendmsg+0x650/0xb40 [ 496.076095][ T31] ? skb_put+0x11b/0x210 [ 496.081816][ T31] netlink_sendmsg+0x813/0xb40 [ 496.086621][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.094267][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 496.101056][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 496.106382][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.113100][ T31] __sys_sendto+0x672/0x710 [ 496.117641][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 496.123188][ T31] ? fd_install+0x94/0x3d0 [ 496.127641][ T31] ? fd_install+0x306/0x3d0 [ 496.132755][ T31] __x64_sys_sendto+0xde/0x100 [ 496.137665][ T31] do_syscall_64+0x14d/0xf80 [ 496.142798][ T31] ? trace_irq_disable+0x3b/0x150 [ 496.147854][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.154758][ T31] ? clear_bhb_loop+0x40/0x90 [ 496.159771][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.165694][ T31] RIP: 0033:0x7fbfdf35cfce [ 496.170694][ T31] RSP: 002b:00007fbfe01bbe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 496.180090][ T31] RAX: ffffffffffffffda RBX: 00007fbfe01bd6c0 RCX: 00007fbfdf35cfce [ 496.188091][ T31] RDX: 0000000000000020 RSI: 00007fbfe01bc000 RDI: 000000000000000e [ 496.196261][ T31] RBP: 0000000000000000 R08: 00007fbfe01bbf04 R09: 000000000000000c [ 496.205265][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 496.213969][ T31] R13: 00007fbfe01bbf58 R14: 00007fbfe01bc000 R15: 0000000000000000 [ 496.223138][ T31] [ 496.226344][ T31] [ 496.226344][ T31] Showing all locks held in the system: [ 496.234315][ T31] 2 locks held by ksoftirqd/1/23: [ 496.241918][ T31] 1 lock held by khungtaskd/31: [ 496.247009][ T31] #0: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 496.259189][ T31] no locks held by udevd/5192. [ 496.263986][ T31] 2 locks held by getty/5578: [ 496.268805][ T31] #0: ffff8880324d00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 496.278894][ T31] #1: ffffc9000322b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 496.289156][ T31] 1 lock held by udevd/7849: [ 496.293893][ T31] #0: ffff888026c4c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 496.303526][ T31] 2 locks held by syz-executor/15638: [ 496.310020][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.325755][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.334941][ T31] 2 locks held by syz.2.2997/15779: [ 496.342163][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.350540][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.359782][ T31] 6 locks held by syz.1.2998/15776: [ 496.364986][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.373435][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.382764][ T31] #2: ffff888026ca1a78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 496.393697][ T31] #3: ffff888026c73ff0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 496.403801][ T31] #4: ffff888026c73990 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 496.416678][ T31] #5: ffff888026c739c8 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 496.429298][ T31] 2 locks held by syz.0.2999/15774: [ 496.434508][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.442972][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.453055][ T31] 2 locks held by syz.4.3005/15797: [ 496.458574][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.466826][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.476013][ T31] 2 locks held by syz-executor/15803: [ 496.481797][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.490829][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.500072][ T31] 2 locks held by syz-executor/15805: [ 496.505468][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.514520][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.523911][ T31] 2 locks held by syz-executor/15808: [ 496.529408][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.537638][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.546890][ T31] 2 locks held by syz-executor/15815: [ 496.552460][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.562477][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.573292][ T31] 2 locks held by syz-executor/15842: [ 496.578904][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.587127][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.596356][ T31] 2 locks held by syz-executor/15853: [ 496.601899][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.610279][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.620365][ T31] 2 locks held by syz-executor/15855: [ 496.625938][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.634423][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.648156][ T31] 2 locks held by syz-executor/15865: [ 496.653994][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.664112][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.673408][ T31] 2 locks held by syz-executor/15867: [ 496.679877][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.688122][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.697686][ T31] 2 locks held by syz-executor/15892: [ 496.703404][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.711850][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.723728][ T31] 2 locks held by syz-executor/15904: [ 496.729277][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.737500][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.746834][ T31] 2 locks held by syz-executor/15905: [ 496.752379][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.761040][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.770277][ T31] 2 locks held by syz-executor/15912: [ 496.775665][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.784270][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.794517][ T31] 2 locks held by syz-executor/15921: [ 496.803281][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.811716][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 496.821833][ T31] [ 496.824180][ T31] ============================================= [ 496.824180][ T31] [ 496.832865][ T31] NMI backtrace for cpu 0 [ 496.832891][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 496.832911][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.832923][ T31] Call Trace: [ 496.832931][ T31] [ 496.832939][ T31] dump_stack_lvl+0xe8/0x150 [ 496.832997][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 496.833026][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 496.833053][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 496.833084][ T31] sys_info+0x135/0x170 [ 496.833106][ T31] watchdog+0xfd9/0x1030 [ 496.833145][ T31] ? watchdog+0x21a/0x1030 [ 496.833179][ T31] kthread+0x388/0x470 [ 496.833203][ T31] ? __pfx_watchdog+0x10/0x10 [ 496.833228][ T31] ? __pfx_kthread+0x10/0x10 [ 496.833248][ T31] ret_from_fork+0x51e/0xb90 [ 496.833280][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 496.833304][ T31] ? __switch_to+0xc7d/0x1450 [ 496.833338][ T31] ? __pfx_kthread+0x10/0x10 [ 496.833359][ T31] ret_from_fork_asm+0x1a/0x30 [ 496.833400][ T31] [ 496.833408][ T31] Sending NMI from CPU 0 to CPUs 1: [ 496.945998][ C1] NMI backtrace for cpu 1 [ 496.946016][ C1] CPU: 1 UID: 0 PID: 7858 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 496.946037][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.946049][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 496.946127][ C1] RIP: 0010:nsim_dev_trap_report_work+0xb5c/0xb80 [ 496.946155][ C1] Code: fb 4c 8b 35 8e e3 fc 06 4c 8b 7c 24 08 49 83 c7 10 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 c7 e7 0e fb 49 8b 17 08 00 00 00 4c 89 f6 48 89 d9 48 81 c4 b8 00 00 00 5b 41 5c 41 [ 496.946171][ C1] RSP: 0018:ffffc900039379f0 EFLAGS: 00000246 [ 496.946185][ C1] RAX: 1ffff110057e2e6e RBX: 000000000000000a RCX: ffffffff8bb0fa9d [ 496.946197][ C1] RDX: ffff88805da34c00 RSI: 0000000000000008 RDI: ffffc90003937960 [ 496.946210][ C1] RBP: ffff88808e85e200 R08: ffffc90003937967 R09: 1ffff92000726f2c [ 496.946223][ C1] R10: dffffc0000000000 R11: fffff52000726f2d R12: dffffc0000000000 [ 496.946235][ C1] R13: ffff888033638718 R14: ffff88813fe4c000 R15: ffff88802bf17370 [ 496.946249][ C1] FS: 0000000000000000(0000) GS:ffff888125561000(0000) knlGS:0000000000000000 [ 496.946263][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.946275][ C1] CR2: 0000564a28365f40 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 496.946291][ C1] Call Trace: [ 496.946300][ C1] [ 496.946307][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 496.946390][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 496.946422][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 496.946444][ C1] process_scheduled_works+0xb6e/0x18c0 [ 496.946480][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 496.946505][ C1] ? assign_work+0x3d5/0x5e0 [ 496.946528][ C1] worker_thread+0xa53/0xfc0 [ 496.946564][ C1] kthread+0x388/0x470 [ 496.946580][ C1] ? __pfx_worker_thread+0x10/0x10 [ 496.946601][ C1] ? __pfx_kthread+0x10/0x10 [ 496.946618][ C1] ret_from_fork+0x51e/0xb90 [ 496.946641][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 496.946662][ C1] ? __switch_to+0xc7d/0x1450 [ 496.946683][ C1] ? __pfx_kthread+0x10/0x10 [ 496.946700][ C1] ret_from_fork_asm+0x1a/0x30 [ 496.946732][ C1] [ 497.161740][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 497.168615][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 497.177734][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 497.187799][ T31] Call Trace: [ 497.191087][ T31] [ 497.194025][ T31] vpanic+0x56c/0xa60 [ 497.198114][ T31] ? __pfx___schedule+0x10/0x10 [ 497.202984][ T31] ? __pfx_vpanic+0x10/0x10 [ 497.207506][ T31] ? __pfx_console_unlock+0x10/0x10 [ 497.212734][ T31] panic+0xc5/0xd0 [ 497.216474][ T31] ? __pfx_panic+0x10/0x10 [ 497.220916][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 497.226292][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 497.232454][ T31] watchdog+0x1023/0x1030 [ 497.236790][ T31] ? watchdog+0x21a/0x1030 [ 497.241209][ T31] kthread+0x388/0x470 [ 497.245269][ T31] ? __pfx_watchdog+0x10/0x10 [ 497.249941][ T31] ? __pfx_kthread+0x10/0x10 [ 497.254523][ T31] ret_from_fork+0x51e/0xb90 [ 497.259145][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 497.264251][ T31] ? __switch_to+0xc7d/0x1450 [ 497.269019][ T31] ? __pfx_kthread+0x10/0x10 [ 497.273605][ T31] ret_from_fork_asm+0x1a/0x30 [ 497.278381][ T31] [ 497.281552][ T31] Kernel Offset: disabled [ 497.285868][ T31] Rebooting in 86400 seconds..