last executing test programs: 1m7.819876246s ago: executing program 3 (id=251): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x3}, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair(0x9, 0x2, 0x93, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200900}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000540)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000005c0)={0x3, 0x9, 0x17, &(0x7f0000000580)=""/23}) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000640)=0x8) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) sendmmsg(r5, &(0x7f0000001e40)=[{{&(0x7f0000000680)=@ethernet={0x1, @random="9970d9936467"}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000700)="f54eef4ea0f8606bff321564242e43be187b103433f8e420146307d24043cbf7f3f88e562a7ab6eaf3fec8c81a6a34c8f3acafec0eaf0c143a050c2a7d958a183b51d791720533454a325020078f1a03d90eb405681008d7c73fe896de207f63b4892d980496", 0x66}, {&(0x7f0000000780)="1f2972013c038b", 0x7}, {&(0x7f00000007c0)="1081fb79c273d4188c1d2f1557ae884f10ccddfe68bb6082114153d380ab9d17f85fd4363ea4f4c4f878f0b487167402f7adf7270fbdc1230326a780b9873b5bfaf782c557f40e44c428c4bd98e64cb5959e863fdc0c13908f2ce9c4094d", 0x5e}, {&(0x7f0000000840)}, {&(0x7f0000000940)="93ccde14985ffb05294a82daf4854f065e41a2ba4ee3", 0x16}, {&(0x7f0000000980)="c09aa2a9db932a2f250b14b3bd52123a9959c9c528b6ee6b6127e87cf44203587c676dcdbd7fdc9db8b3cf380f7f337e6a473bb8ec2a226845aa35847f37d7177cdf2c8395130a4bfc6cac4b524db55ad1899e5c51ce066e142ee0db6d3c67488e0c577aa92b9a78195417983d74ed9d00e8182ea2363863", 0x78}, {&(0x7f0000000a00)="b4915c04972c1ce1abbfe5125ada0411f8b6e6970c411436eee07000341517fd005cb9cadcccf102d3a4aab4100cd84664ad754cb7eae6a340a24ce29b4f12bdf5d29e15dff3ecd184554ca895e447737d5aebaf0e6bb1ef26cef574fd2202838d956346771f29e458633c930999a1b984f002203149f43db2048a0cac71ed5e774ce8299e2de0dd24fca578785f7ea645331428d1f9bc13641cb0acb64c54216c6245a1220777583181893900adb4fb692891", 0xb3}, {&(0x7f0000000ac0)="519dac72b244d415a968574e84822b2b626f4a75ad4d268fed2aef0cba92d10efea48377a457ce74c02944329f034bf857c97a69655f969afef3ea28b04d3bfae7d1d204a5b77ece873119818f6ac6f13bc6b3cf2e7305a2f9402a18b46998ecd3c823886caa36984e6636eab2c1eb0a90d2c026d970143f347c13b9382bad9f1563161b9163d836a5af2e2093b51b0f847c87af9efb35a46f28154ed20f01b23569e8faa66712c235b3011f719729d480fdfbbe1f5caf13", 0xb8}, {&(0x7f0000000b80)="692390401988ce5cf70f253d0b4036b4c073b90ef06a82268dcd99da9e6fcb05ffd5b29bb9c7422c03c96f55b714e5e444557129b40b4f03cdf05519b0c1ae33db48f3c6d41a8f63756a1b4b9f2ecbeed553733d31938fe9cf884511b32a41c75353adccad0656f5997b0b8ec8493c0eb8cd33536cb0a78017a2d47cd98873e79744da9ca5c21df13157d1c0be827ae72d2c08caa268b58f51e14270319ebf4199b50ed40e2df3b3ddf196b8afd77ebf62efcbe57718565e3692b7a6a34599b984a00d9275a8ec238f2d4884422010e94f2080bab9f68f0d42b5097d2d4e3deca20d30b50327b31ebee802151a58", 0xee}, {&(0x7f0000000c80)="53693c1d94e028cd0c004216d32e6ae7b77ed83d0a6ede6bbf5471c710bdc5a833005d311b5c7207ac1f311551a4e32a0d2aa4f594aa25726f68e8ec5b649da314b4a6878b4c9878ab5e539c2a913fd0f464dcdaa4311df842ee781c334f439722c013efb873f3a00974b5ec59b2bbf0", 0x70}], 0xa, &(0x7f0000000dc0)=[{0x90, 0x84, 0x454, "f2dbad8b2a529a12f46b0c6e8e6f23e09e2d0f7f15c431c35920d1fbf5d52d3967e113fdf49e7b6b577e74b9eca2798628c11b4015274195b6581999f60dc51be139367d7868612b1725a6dac68a7af5c1d9e41c9cce038e602b66cd8acb5887eb06ea3e235589eec3e283350a38999c5b7ba28ac893b2f934d8045e"}, {0x98, 0x117, 0x4, "4c31eea40e5a823c6ddbeb560fe6b76994774399907c0a181da9a388690fca95b8dcd393a6432377fdd3e19f72943177036b8456d7c580c477e0283a29711c5ac36ea50c581570b36fb31667dbf073463fe0be2189502cb1b1671d385dd89fef3d54f201358522b8672762d99bbd156a02c5467ff5230d732faa057526b595d4610d"}], 0x128}}, {{&(0x7f0000000f00)=@l2={0x1f, 0x4, @none, 0x81, 0x1}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000f80)="3fa7c1f6ecc45954aa29e4af87a769825a61496173e88f408d7311e46cbae06ee2e87f57ad482d8a8b9db371d70b3ab4d9b42110322390c8083055ad5aae8165fd1c3765a266fde4571a1a75f46a6577c39f02758ae0e250e57db974e3ea9e7c8c1ae52c38c1626e6645eefc4c1de7de2a358fb92a3c183055335ac3006115b3b62d73977e8e9a9501a1732d0de9b1a515b222d1a7962c61dc90da43c684bf647ccfe206d9ef33fcbc19", 0xaa}, {&(0x7f0000001040)="f4b7ba146930405b42ccb60bae91c6b911f34bcaec688593f4f7301d1622f65cd19a063881594ffa09d1da0843c9f6a32f8b67bab618099f37ef8930d97a5e03d6113124c72971e4f7697d7b25a3fff93d32c3c7f2df33eff46f9600727d4ba3505ffb98b87ba9f6c89b3e9dc1e53ea57b24e812c5534e951a6ae00e23d8d8c64ffd520b5ff6da58ad9f50ce77caf8dc36a9afe15b7714378ebda6abc005d8233b519f96be8d63823df97f5bb02b4d83ff6dd1651d57c41760c84edee48c099178431794daed12a57e0b35487d5d7883b469f68e", 0xd4}, {&(0x7f0000001140)="265754abbc4886e2e44bbdefc710f3fa30255e95546d61e5ed100ed42e2ea5ca87f63c5f", 0x24}, {0x0}, {&(0x7f0000001240)="de61b632d806e604a4d3da324b9e6c787360c26e42231b9c311bbea61f88982c5d698a06c13a35f92e87a95816f70848e168f5546a77f0de883f780a49d7c75db1b0104ab90f881a6c73f5d4c1f7cfe71f34cce47580539e665fa221fad67eb7dd878e8902f924e9ff9e67246f4997d7232ba801c72d689df8ca9a9c41714d1ee3d4743025aed6f555fc006f64fba83acb888245b05d007ca0a9ec8908336c909f0e172b13cc40a49a73a2074b96d2b628ca2ad79274e8adc5de26f1bbbd16cedbcd96548492b7faa18667b369a11b", 0xcf}, {0x0}, {&(0x7f0000001440)}], 0x7, &(0x7f0000001540)=[{0xf8, 0x10d, 0x7, "aab688be8801fc250ec30cb017cd866ba3b913e95a841722d30781fa898f7b1e5e47dd0c8cae2f33f8be87408a44f2c13450da4d412fe54cb3dd8575e159737d26ac178136c9862795b6367e80cb653a2881b5ee348882ccbcbded9d78cd42fba9eda60bcaee2457ed6842c8a816a0b79babd9d6df642c4f03e70371a7b3990f4b8a675d30e5a0e6ce749868dfc584110e3d02bcb25f0ba23f28899b0370b7aef7ef683bc18a7fc47ad2e7537b9e99c4451ff9e8cf5cb5754a192051d4224627fb9494dbf60f3864dc6ed15220da536f0c946a715dd40d60201f3c88d9457abb5d0b"}, {0xf0, 0x101, 0x2, "4677a3fdf27758e11fc0487a7f7adc39119303b3989ccfdd8faa13c9d7d74bc67369f9aab0400a0c5040fb9dac7577755132b67742f0357868d8baf831d67af87018ebe50925e11f1ddaeeab68a4672f96d956ffe161bd88838dd664bea477b303fca657dba17828adb078da939a564aa07cdb59019cfd3b15d089f1519dbbf8c0de89b8c115100a2846b75fd9d89eb3e00de576c3e69256ab5129e32436516160c1f73390493e492a291479ed699dcffe3b8d4e94246ba43ad947ed5d9102eb658cb8e2e5c1963bc3e75c285f22f266c6d5d1ba975ac4281cefd8f220a5c9"}, {0x48, 0xff, 0x2, "f2fb75cf79803980270f37416293a04016fb2cdd5767089c3f224daa3e766391cb1071c0c12d35346dd94c90ad956cfa76620566"}, {0x68, 0x117, 0x6, "19e4fcef08245b641b6bd05314b441073fa6f0ab7d5ecce69b0e09ea850bcffc4a12d77861c3fde5c680571f287c21a7c8f72b7c7eee878686bfc95acbded2de500d6360002aa9d6879e9f4a6d1827e87f"}, {0x10, 0x119, 0x7f}, {0x30, 0x29, 0xbb, "b041264682fd15149ba0ce9e2b6f478eee307a25243474ca085d7422"}], 0x2d8}}, {{&(0x7f0000001980)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default]}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001a00)="29cf05c2e85b93726a8bfbbc05f1fac222e320f592e69a01561929c1301489d41990de0bc6562b5bdd6357dc8eca764ed26224b022e452", 0x37}, {&(0x7f0000001a80)="ca3c8008e4ea4f46e3e38bcdd6f1628a8121950ca542b253502ac9dda80d451b1ac4ecbb1716342e1ef9d6d85abf35dd8642823d5c6d853a73ad0ed1a916c9dcf702153fe8e3b425dc053c820db2387d1f59fc21fc122a838ef387b083f5cf8cd82645566313a7c939abcb2c562b5fe8987c4f4e219165793b574d9e777ca4ee88cc4e6d9394ee0ebf5d40497294504a6419fc27f82ce64dbd65f4c605d71c7080c9fbc168ec06dea1e644a34366c2858f830d0834dc773cecf197904e9e7afa05bd1d274aa2304f724ee394eede30179a50d061eb8d8dddf72134b4ba358dc088cf323d165edb731697d1", 0xeb}, {&(0x7f0000001b80)="57e4e5a7fb4b7607b64f13c6ce044fad38a18a2ae9ca384419867a214d298280f3f37227c130677c401f828b96da3c849fb1f8cefec7c92b7d59ab7d83f8da0d59606adf8aac8db67ee2174ff685a44981a0961e638db6", 0x57}, {&(0x7f0000001c00)}], 0x4}}], 0x3, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe7, 0xe7, 0x4, [@enum64={0x8, 0x9, 0x0, 0x13, 0x1, 0x1, [{0x3, 0x2, 0x2}, {0xb, 0x5, 0x9}, {0xd, 0x4, 0x1}, {0x4, 0x81, 0x7}, {0x1, 0xe, 0x7}, {0x7, 0xce26, 0x8}, {0xc, 0xc, 0x628}, {0xb, 0x9}, {0xd, 0x7, 0x60000000}]}, @func={0xc, 0x0, 0x0, 0xc, 0x5}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x5}, @float={0x10, 0x0, 0x0, 0x10, 0x2}, @datasec={0x5, 0x5, 0x0, 0xf, 0x3, [{0x5, 0x7, 0x6}, {0x2, 0x7, 0xfff}, {0x3, 0x0, 0xe}, {0x2, 0x8, 0x1}, {0x2, 0x6, 0x6}], "f2b204"}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000002040)=""/36, 0x104, 0x24, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000020c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7, '\x00', r1, r6, 0x5, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_generic(r4, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, 0x20, 0x400, 0x70bd25, 0x25dfdbfb, {0x1f}, [@typed={0x8, 0x114, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x8090) accept4(r5, &(0x7f0000002240)=@nfc_llcp, &(0x7f00000022c0)=0x80, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002340)={0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x10}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x28, 0x1409, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x80c0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002840)={0x6, 'tunl0\x00', {}, 0xa}) connect$bt_l2cap(r5, &(0x7f00000028c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x1}, 0xe) 54.971294195s ago: executing program 3 (id=251): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x3}, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair(0x9, 0x2, 0x93, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200900}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000540)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000005c0)={0x3, 0x9, 0x17, &(0x7f0000000580)=""/23}) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000640)=0x8) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) sendmmsg(r5, &(0x7f0000001e40)=[{{&(0x7f0000000680)=@ethernet={0x1, @random="9970d9936467"}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000700)="f54eef4ea0f8606bff321564242e43be187b103433f8e420146307d24043cbf7f3f88e562a7ab6eaf3fec8c81a6a34c8f3acafec0eaf0c143a050c2a7d958a183b51d791720533454a325020078f1a03d90eb405681008d7c73fe896de207f63b4892d980496", 0x66}, {&(0x7f0000000780)="1f2972013c038b", 0x7}, {&(0x7f00000007c0)="1081fb79c273d4188c1d2f1557ae884f10ccddfe68bb6082114153d380ab9d17f85fd4363ea4f4c4f878f0b487167402f7adf7270fbdc1230326a780b9873b5bfaf782c557f40e44c428c4bd98e64cb5959e863fdc0c13908f2ce9c4094d", 0x5e}, {&(0x7f0000000840)}, {&(0x7f0000000940)="93ccde14985ffb05294a82daf4854f065e41a2ba4ee3", 0x16}, {&(0x7f0000000980)="c09aa2a9db932a2f250b14b3bd52123a9959c9c528b6ee6b6127e87cf44203587c676dcdbd7fdc9db8b3cf380f7f337e6a473bb8ec2a226845aa35847f37d7177cdf2c8395130a4bfc6cac4b524db55ad1899e5c51ce066e142ee0db6d3c67488e0c577aa92b9a78195417983d74ed9d00e8182ea2363863", 0x78}, {&(0x7f0000000a00)="b4915c04972c1ce1abbfe5125ada0411f8b6e6970c411436eee07000341517fd005cb9cadcccf102d3a4aab4100cd84664ad754cb7eae6a340a24ce29b4f12bdf5d29e15dff3ecd184554ca895e447737d5aebaf0e6bb1ef26cef574fd2202838d956346771f29e458633c930999a1b984f002203149f43db2048a0cac71ed5e774ce8299e2de0dd24fca578785f7ea645331428d1f9bc13641cb0acb64c54216c6245a1220777583181893900adb4fb692891", 0xb3}, {&(0x7f0000000ac0)="519dac72b244d415a968574e84822b2b626f4a75ad4d268fed2aef0cba92d10efea48377a457ce74c02944329f034bf857c97a69655f969afef3ea28b04d3bfae7d1d204a5b77ece873119818f6ac6f13bc6b3cf2e7305a2f9402a18b46998ecd3c823886caa36984e6636eab2c1eb0a90d2c026d970143f347c13b9382bad9f1563161b9163d836a5af2e2093b51b0f847c87af9efb35a46f28154ed20f01b23569e8faa66712c235b3011f719729d480fdfbbe1f5caf13", 0xb8}, {&(0x7f0000000b80)="692390401988ce5cf70f253d0b4036b4c073b90ef06a82268dcd99da9e6fcb05ffd5b29bb9c7422c03c96f55b714e5e444557129b40b4f03cdf05519b0c1ae33db48f3c6d41a8f63756a1b4b9f2ecbeed553733d31938fe9cf884511b32a41c75353adccad0656f5997b0b8ec8493c0eb8cd33536cb0a78017a2d47cd98873e79744da9ca5c21df13157d1c0be827ae72d2c08caa268b58f51e14270319ebf4199b50ed40e2df3b3ddf196b8afd77ebf62efcbe57718565e3692b7a6a34599b984a00d9275a8ec238f2d4884422010e94f2080bab9f68f0d42b5097d2d4e3deca20d30b50327b31ebee802151a58", 0xee}, {&(0x7f0000000c80)="53693c1d94e028cd0c004216d32e6ae7b77ed83d0a6ede6bbf5471c710bdc5a833005d311b5c7207ac1f311551a4e32a0d2aa4f594aa25726f68e8ec5b649da314b4a6878b4c9878ab5e539c2a913fd0f464dcdaa4311df842ee781c334f439722c013efb873f3a00974b5ec59b2bbf0", 0x70}], 0xa, &(0x7f0000000dc0)=[{0x90, 0x84, 0x454, "f2dbad8b2a529a12f46b0c6e8e6f23e09e2d0f7f15c431c35920d1fbf5d52d3967e113fdf49e7b6b577e74b9eca2798628c11b4015274195b6581999f60dc51be139367d7868612b1725a6dac68a7af5c1d9e41c9cce038e602b66cd8acb5887eb06ea3e235589eec3e283350a38999c5b7ba28ac893b2f934d8045e"}, {0x98, 0x117, 0x4, "4c31eea40e5a823c6ddbeb560fe6b76994774399907c0a181da9a388690fca95b8dcd393a6432377fdd3e19f72943177036b8456d7c580c477e0283a29711c5ac36ea50c581570b36fb31667dbf073463fe0be2189502cb1b1671d385dd89fef3d54f201358522b8672762d99bbd156a02c5467ff5230d732faa057526b595d4610d"}], 0x128}}, {{&(0x7f0000000f00)=@l2={0x1f, 0x4, @none, 0x81, 0x1}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000f80)="3fa7c1f6ecc45954aa29e4af87a769825a61496173e88f408d7311e46cbae06ee2e87f57ad482d8a8b9db371d70b3ab4d9b42110322390c8083055ad5aae8165fd1c3765a266fde4571a1a75f46a6577c39f02758ae0e250e57db974e3ea9e7c8c1ae52c38c1626e6645eefc4c1de7de2a358fb92a3c183055335ac3006115b3b62d73977e8e9a9501a1732d0de9b1a515b222d1a7962c61dc90da43c684bf647ccfe206d9ef33fcbc19", 0xaa}, {&(0x7f0000001040)="f4b7ba146930405b42ccb60bae91c6b911f34bcaec688593f4f7301d1622f65cd19a063881594ffa09d1da0843c9f6a32f8b67bab618099f37ef8930d97a5e03d6113124c72971e4f7697d7b25a3fff93d32c3c7f2df33eff46f9600727d4ba3505ffb98b87ba9f6c89b3e9dc1e53ea57b24e812c5534e951a6ae00e23d8d8c64ffd520b5ff6da58ad9f50ce77caf8dc36a9afe15b7714378ebda6abc005d8233b519f96be8d63823df97f5bb02b4d83ff6dd1651d57c41760c84edee48c099178431794daed12a57e0b35487d5d7883b469f68e", 0xd4}, {&(0x7f0000001140)="265754abbc4886e2e44bbdefc710f3fa30255e95546d61e5ed100ed42e2ea5ca87f63c5f", 0x24}, {0x0}, {&(0x7f0000001240)="de61b632d806e604a4d3da324b9e6c787360c26e42231b9c311bbea61f88982c5d698a06c13a35f92e87a95816f70848e168f5546a77f0de883f780a49d7c75db1b0104ab90f881a6c73f5d4c1f7cfe71f34cce47580539e665fa221fad67eb7dd878e8902f924e9ff9e67246f4997d7232ba801c72d689df8ca9a9c41714d1ee3d4743025aed6f555fc006f64fba83acb888245b05d007ca0a9ec8908336c909f0e172b13cc40a49a73a2074b96d2b628ca2ad79274e8adc5de26f1bbbd16cedbcd96548492b7faa18667b369a11b", 0xcf}, {0x0}, {&(0x7f0000001440)}], 0x7, &(0x7f0000001540)=[{0xf8, 0x10d, 0x7, "aab688be8801fc250ec30cb017cd866ba3b913e95a841722d30781fa898f7b1e5e47dd0c8cae2f33f8be87408a44f2c13450da4d412fe54cb3dd8575e159737d26ac178136c9862795b6367e80cb653a2881b5ee348882ccbcbded9d78cd42fba9eda60bcaee2457ed6842c8a816a0b79babd9d6df642c4f03e70371a7b3990f4b8a675d30e5a0e6ce749868dfc584110e3d02bcb25f0ba23f28899b0370b7aef7ef683bc18a7fc47ad2e7537b9e99c4451ff9e8cf5cb5754a192051d4224627fb9494dbf60f3864dc6ed15220da536f0c946a715dd40d60201f3c88d9457abb5d0b"}, {0xf0, 0x101, 0x2, "4677a3fdf27758e11fc0487a7f7adc39119303b3989ccfdd8faa13c9d7d74bc67369f9aab0400a0c5040fb9dac7577755132b67742f0357868d8baf831d67af87018ebe50925e11f1ddaeeab68a4672f96d956ffe161bd88838dd664bea477b303fca657dba17828adb078da939a564aa07cdb59019cfd3b15d089f1519dbbf8c0de89b8c115100a2846b75fd9d89eb3e00de576c3e69256ab5129e32436516160c1f73390493e492a291479ed699dcffe3b8d4e94246ba43ad947ed5d9102eb658cb8e2e5c1963bc3e75c285f22f266c6d5d1ba975ac4281cefd8f220a5c9"}, {0x48, 0xff, 0x2, "f2fb75cf79803980270f37416293a04016fb2cdd5767089c3f224daa3e766391cb1071c0c12d35346dd94c90ad956cfa76620566"}, {0x68, 0x117, 0x6, "19e4fcef08245b641b6bd05314b441073fa6f0ab7d5ecce69b0e09ea850bcffc4a12d77861c3fde5c680571f287c21a7c8f72b7c7eee878686bfc95acbded2de500d6360002aa9d6879e9f4a6d1827e87f"}, {0x10, 0x119, 0x7f}, {0x30, 0x29, 0xbb, "b041264682fd15149ba0ce9e2b6f478eee307a25243474ca085d7422"}], 0x2d8}}, {{&(0x7f0000001980)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default]}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001a00)="29cf05c2e85b93726a8bfbbc05f1fac222e320f592e69a01561929c1301489d41990de0bc6562b5bdd6357dc8eca764ed26224b022e452", 0x37}, {&(0x7f0000001a80)="ca3c8008e4ea4f46e3e38bcdd6f1628a8121950ca542b253502ac9dda80d451b1ac4ecbb1716342e1ef9d6d85abf35dd8642823d5c6d853a73ad0ed1a916c9dcf702153fe8e3b425dc053c820db2387d1f59fc21fc122a838ef387b083f5cf8cd82645566313a7c939abcb2c562b5fe8987c4f4e219165793b574d9e777ca4ee88cc4e6d9394ee0ebf5d40497294504a6419fc27f82ce64dbd65f4c605d71c7080c9fbc168ec06dea1e644a34366c2858f830d0834dc773cecf197904e9e7afa05bd1d274aa2304f724ee394eede30179a50d061eb8d8dddf72134b4ba358dc088cf323d165edb731697d1", 0xeb}, {&(0x7f0000001b80)="57e4e5a7fb4b7607b64f13c6ce044fad38a18a2ae9ca384419867a214d298280f3f37227c130677c401f828b96da3c849fb1f8cefec7c92b7d59ab7d83f8da0d59606adf8aac8db67ee2174ff685a44981a0961e638db6", 0x57}, {&(0x7f0000001c00)}], 0x4}}], 0x3, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe7, 0xe7, 0x4, [@enum64={0x8, 0x9, 0x0, 0x13, 0x1, 0x1, [{0x3, 0x2, 0x2}, {0xb, 0x5, 0x9}, {0xd, 0x4, 0x1}, {0x4, 0x81, 0x7}, {0x1, 0xe, 0x7}, {0x7, 0xce26, 0x8}, {0xc, 0xc, 0x628}, {0xb, 0x9}, {0xd, 0x7, 0x60000000}]}, @func={0xc, 0x0, 0x0, 0xc, 0x5}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x5}, @float={0x10, 0x0, 0x0, 0x10, 0x2}, @datasec={0x5, 0x5, 0x0, 0xf, 0x3, [{0x5, 0x7, 0x6}, {0x2, 0x7, 0xfff}, {0x3, 0x0, 0xe}, {0x2, 0x8, 0x1}, {0x2, 0x6, 0x6}], "f2b204"}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000002040)=""/36, 0x104, 0x24, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000020c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7, '\x00', r1, r6, 0x5, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_generic(r4, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, 0x20, 0x400, 0x70bd25, 0x25dfdbfb, {0x1f}, [@typed={0x8, 0x114, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x8090) accept4(r5, &(0x7f0000002240)=@nfc_llcp, &(0x7f00000022c0)=0x80, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002340)={0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x10}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x28, 0x1409, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x80c0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002840)={0x6, 'tunl0\x00', {}, 0xa}) connect$bt_l2cap(r5, &(0x7f00000028c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x1}, 0xe) 40.90084518s ago: executing program 3 (id=251): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x3}, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair(0x9, 0x2, 0x93, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200900}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000540)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000005c0)={0x3, 0x9, 0x17, &(0x7f0000000580)=""/23}) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000640)=0x8) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) sendmmsg(r5, &(0x7f0000001e40)=[{{&(0x7f0000000680)=@ethernet={0x1, @random="9970d9936467"}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000700)="f54eef4ea0f8606bff321564242e43be187b103433f8e420146307d24043cbf7f3f88e562a7ab6eaf3fec8c81a6a34c8f3acafec0eaf0c143a050c2a7d958a183b51d791720533454a325020078f1a03d90eb405681008d7c73fe896de207f63b4892d980496", 0x66}, {&(0x7f0000000780)="1f2972013c038b", 0x7}, {&(0x7f00000007c0)="1081fb79c273d4188c1d2f1557ae884f10ccddfe68bb6082114153d380ab9d17f85fd4363ea4f4c4f878f0b487167402f7adf7270fbdc1230326a780b9873b5bfaf782c557f40e44c428c4bd98e64cb5959e863fdc0c13908f2ce9c4094d", 0x5e}, {&(0x7f0000000840)}, {&(0x7f0000000940)="93ccde14985ffb05294a82daf4854f065e41a2ba4ee3", 0x16}, {&(0x7f0000000980)="c09aa2a9db932a2f250b14b3bd52123a9959c9c528b6ee6b6127e87cf44203587c676dcdbd7fdc9db8b3cf380f7f337e6a473bb8ec2a226845aa35847f37d7177cdf2c8395130a4bfc6cac4b524db55ad1899e5c51ce066e142ee0db6d3c67488e0c577aa92b9a78195417983d74ed9d00e8182ea2363863", 0x78}, {&(0x7f0000000a00)="b4915c04972c1ce1abbfe5125ada0411f8b6e6970c411436eee07000341517fd005cb9cadcccf102d3a4aab4100cd84664ad754cb7eae6a340a24ce29b4f12bdf5d29e15dff3ecd184554ca895e447737d5aebaf0e6bb1ef26cef574fd2202838d956346771f29e458633c930999a1b984f002203149f43db2048a0cac71ed5e774ce8299e2de0dd24fca578785f7ea645331428d1f9bc13641cb0acb64c54216c6245a1220777583181893900adb4fb692891", 0xb3}, {&(0x7f0000000ac0)="519dac72b244d415a968574e84822b2b626f4a75ad4d268fed2aef0cba92d10efea48377a457ce74c02944329f034bf857c97a69655f969afef3ea28b04d3bfae7d1d204a5b77ece873119818f6ac6f13bc6b3cf2e7305a2f9402a18b46998ecd3c823886caa36984e6636eab2c1eb0a90d2c026d970143f347c13b9382bad9f1563161b9163d836a5af2e2093b51b0f847c87af9efb35a46f28154ed20f01b23569e8faa66712c235b3011f719729d480fdfbbe1f5caf13", 0xb8}, {&(0x7f0000000b80)="692390401988ce5cf70f253d0b4036b4c073b90ef06a82268dcd99da9e6fcb05ffd5b29bb9c7422c03c96f55b714e5e444557129b40b4f03cdf05519b0c1ae33db48f3c6d41a8f63756a1b4b9f2ecbeed553733d31938fe9cf884511b32a41c75353adccad0656f5997b0b8ec8493c0eb8cd33536cb0a78017a2d47cd98873e79744da9ca5c21df13157d1c0be827ae72d2c08caa268b58f51e14270319ebf4199b50ed40e2df3b3ddf196b8afd77ebf62efcbe57718565e3692b7a6a34599b984a00d9275a8ec238f2d4884422010e94f2080bab9f68f0d42b5097d2d4e3deca20d30b50327b31ebee802151a58", 0xee}, {&(0x7f0000000c80)="53693c1d94e028cd0c004216d32e6ae7b77ed83d0a6ede6bbf5471c710bdc5a833005d311b5c7207ac1f311551a4e32a0d2aa4f594aa25726f68e8ec5b649da314b4a6878b4c9878ab5e539c2a913fd0f464dcdaa4311df842ee781c334f439722c013efb873f3a00974b5ec59b2bbf0", 0x70}], 0xa, &(0x7f0000000dc0)=[{0x90, 0x84, 0x454, "f2dbad8b2a529a12f46b0c6e8e6f23e09e2d0f7f15c431c35920d1fbf5d52d3967e113fdf49e7b6b577e74b9eca2798628c11b4015274195b6581999f60dc51be139367d7868612b1725a6dac68a7af5c1d9e41c9cce038e602b66cd8acb5887eb06ea3e235589eec3e283350a38999c5b7ba28ac893b2f934d8045e"}, {0x98, 0x117, 0x4, "4c31eea40e5a823c6ddbeb560fe6b76994774399907c0a181da9a388690fca95b8dcd393a6432377fdd3e19f72943177036b8456d7c580c477e0283a29711c5ac36ea50c581570b36fb31667dbf073463fe0be2189502cb1b1671d385dd89fef3d54f201358522b8672762d99bbd156a02c5467ff5230d732faa057526b595d4610d"}], 0x128}}, {{&(0x7f0000000f00)=@l2={0x1f, 0x4, @none, 0x81, 0x1}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000f80)="3fa7c1f6ecc45954aa29e4af87a769825a61496173e88f408d7311e46cbae06ee2e87f57ad482d8a8b9db371d70b3ab4d9b42110322390c8083055ad5aae8165fd1c3765a266fde4571a1a75f46a6577c39f02758ae0e250e57db974e3ea9e7c8c1ae52c38c1626e6645eefc4c1de7de2a358fb92a3c183055335ac3006115b3b62d73977e8e9a9501a1732d0de9b1a515b222d1a7962c61dc90da43c684bf647ccfe206d9ef33fcbc19", 0xaa}, {&(0x7f0000001040)="f4b7ba146930405b42ccb60bae91c6b911f34bcaec688593f4f7301d1622f65cd19a063881594ffa09d1da0843c9f6a32f8b67bab618099f37ef8930d97a5e03d6113124c72971e4f7697d7b25a3fff93d32c3c7f2df33eff46f9600727d4ba3505ffb98b87ba9f6c89b3e9dc1e53ea57b24e812c5534e951a6ae00e23d8d8c64ffd520b5ff6da58ad9f50ce77caf8dc36a9afe15b7714378ebda6abc005d8233b519f96be8d63823df97f5bb02b4d83ff6dd1651d57c41760c84edee48c099178431794daed12a57e0b35487d5d7883b469f68e", 0xd4}, {&(0x7f0000001140)="265754abbc4886e2e44bbdefc710f3fa30255e95546d61e5ed100ed42e2ea5ca87f63c5f", 0x24}, {0x0}, {&(0x7f0000001240)="de61b632d806e604a4d3da324b9e6c787360c26e42231b9c311bbea61f88982c5d698a06c13a35f92e87a95816f70848e168f5546a77f0de883f780a49d7c75db1b0104ab90f881a6c73f5d4c1f7cfe71f34cce47580539e665fa221fad67eb7dd878e8902f924e9ff9e67246f4997d7232ba801c72d689df8ca9a9c41714d1ee3d4743025aed6f555fc006f64fba83acb888245b05d007ca0a9ec8908336c909f0e172b13cc40a49a73a2074b96d2b628ca2ad79274e8adc5de26f1bbbd16cedbcd96548492b7faa18667b369a11b", 0xcf}, {0x0}, {&(0x7f0000001440)}], 0x7, &(0x7f0000001540)=[{0xf8, 0x10d, 0x7, "aab688be8801fc250ec30cb017cd866ba3b913e95a841722d30781fa898f7b1e5e47dd0c8cae2f33f8be87408a44f2c13450da4d412fe54cb3dd8575e159737d26ac178136c9862795b6367e80cb653a2881b5ee348882ccbcbded9d78cd42fba9eda60bcaee2457ed6842c8a816a0b79babd9d6df642c4f03e70371a7b3990f4b8a675d30e5a0e6ce749868dfc584110e3d02bcb25f0ba23f28899b0370b7aef7ef683bc18a7fc47ad2e7537b9e99c4451ff9e8cf5cb5754a192051d4224627fb9494dbf60f3864dc6ed15220da536f0c946a715dd40d60201f3c88d9457abb5d0b"}, {0xf0, 0x101, 0x2, "4677a3fdf27758e11fc0487a7f7adc39119303b3989ccfdd8faa13c9d7d74bc67369f9aab0400a0c5040fb9dac7577755132b67742f0357868d8baf831d67af87018ebe50925e11f1ddaeeab68a4672f96d956ffe161bd88838dd664bea477b303fca657dba17828adb078da939a564aa07cdb59019cfd3b15d089f1519dbbf8c0de89b8c115100a2846b75fd9d89eb3e00de576c3e69256ab5129e32436516160c1f73390493e492a291479ed699dcffe3b8d4e94246ba43ad947ed5d9102eb658cb8e2e5c1963bc3e75c285f22f266c6d5d1ba975ac4281cefd8f220a5c9"}, {0x48, 0xff, 0x2, "f2fb75cf79803980270f37416293a04016fb2cdd5767089c3f224daa3e766391cb1071c0c12d35346dd94c90ad956cfa76620566"}, {0x68, 0x117, 0x6, "19e4fcef08245b641b6bd05314b441073fa6f0ab7d5ecce69b0e09ea850bcffc4a12d77861c3fde5c680571f287c21a7c8f72b7c7eee878686bfc95acbded2de500d6360002aa9d6879e9f4a6d1827e87f"}, {0x10, 0x119, 0x7f}, {0x30, 0x29, 0xbb, "b041264682fd15149ba0ce9e2b6f478eee307a25243474ca085d7422"}], 0x2d8}}, {{&(0x7f0000001980)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default]}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001a00)="29cf05c2e85b93726a8bfbbc05f1fac222e320f592e69a01561929c1301489d41990de0bc6562b5bdd6357dc8eca764ed26224b022e452", 0x37}, {&(0x7f0000001a80)="ca3c8008e4ea4f46e3e38bcdd6f1628a8121950ca542b253502ac9dda80d451b1ac4ecbb1716342e1ef9d6d85abf35dd8642823d5c6d853a73ad0ed1a916c9dcf702153fe8e3b425dc053c820db2387d1f59fc21fc122a838ef387b083f5cf8cd82645566313a7c939abcb2c562b5fe8987c4f4e219165793b574d9e777ca4ee88cc4e6d9394ee0ebf5d40497294504a6419fc27f82ce64dbd65f4c605d71c7080c9fbc168ec06dea1e644a34366c2858f830d0834dc773cecf197904e9e7afa05bd1d274aa2304f724ee394eede30179a50d061eb8d8dddf72134b4ba358dc088cf323d165edb731697d1", 0xeb}, {&(0x7f0000001b80)="57e4e5a7fb4b7607b64f13c6ce044fad38a18a2ae9ca384419867a214d298280f3f37227c130677c401f828b96da3c849fb1f8cefec7c92b7d59ab7d83f8da0d59606adf8aac8db67ee2174ff685a44981a0961e638db6", 0x57}, {&(0x7f0000001c00)}], 0x4}}], 0x3, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe7, 0xe7, 0x4, [@enum64={0x8, 0x9, 0x0, 0x13, 0x1, 0x1, [{0x3, 0x2, 0x2}, {0xb, 0x5, 0x9}, {0xd, 0x4, 0x1}, {0x4, 0x81, 0x7}, {0x1, 0xe, 0x7}, {0x7, 0xce26, 0x8}, {0xc, 0xc, 0x628}, {0xb, 0x9}, {0xd, 0x7, 0x60000000}]}, @func={0xc, 0x0, 0x0, 0xc, 0x5}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x5}, @float={0x10, 0x0, 0x0, 0x10, 0x2}, @datasec={0x5, 0x5, 0x0, 0xf, 0x3, [{0x5, 0x7, 0x6}, {0x2, 0x7, 0xfff}, {0x3, 0x0, 0xe}, {0x2, 0x8, 0x1}, {0x2, 0x6, 0x6}], "f2b204"}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000002040)=""/36, 0x104, 0x24, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000020c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7, '\x00', r1, r6, 0x5, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_generic(r4, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, 0x20, 0x400, 0x70bd25, 0x25dfdbfb, {0x1f}, [@typed={0x8, 0x114, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x8090) accept4(r5, &(0x7f0000002240)=@nfc_llcp, &(0x7f00000022c0)=0x80, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002340)={0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x10}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x28, 0x1409, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x80c0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002840)={0x6, 'tunl0\x00', {}, 0xa}) connect$bt_l2cap(r5, &(0x7f00000028c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x1}, 0xe) 27.215994325s ago: executing program 3 (id=251): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x3}, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair(0x9, 0x2, 0x93, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200900}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000540)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000005c0)={0x3, 0x9, 0x17, &(0x7f0000000580)=""/23}) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000640)=0x8) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) sendmmsg(r5, &(0x7f0000001e40)=[{{&(0x7f0000000680)=@ethernet={0x1, @random="9970d9936467"}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000700)="f54eef4ea0f8606bff321564242e43be187b103433f8e420146307d24043cbf7f3f88e562a7ab6eaf3fec8c81a6a34c8f3acafec0eaf0c143a050c2a7d958a183b51d791720533454a325020078f1a03d90eb405681008d7c73fe896de207f63b4892d980496", 0x66}, {&(0x7f0000000780)="1f2972013c038b", 0x7}, {&(0x7f00000007c0)="1081fb79c273d4188c1d2f1557ae884f10ccddfe68bb6082114153d380ab9d17f85fd4363ea4f4c4f878f0b487167402f7adf7270fbdc1230326a780b9873b5bfaf782c557f40e44c428c4bd98e64cb5959e863fdc0c13908f2ce9c4094d", 0x5e}, {&(0x7f0000000840)}, {&(0x7f0000000940)="93ccde14985ffb05294a82daf4854f065e41a2ba4ee3", 0x16}, {&(0x7f0000000980)="c09aa2a9db932a2f250b14b3bd52123a9959c9c528b6ee6b6127e87cf44203587c676dcdbd7fdc9db8b3cf380f7f337e6a473bb8ec2a226845aa35847f37d7177cdf2c8395130a4bfc6cac4b524db55ad1899e5c51ce066e142ee0db6d3c67488e0c577aa92b9a78195417983d74ed9d00e8182ea2363863", 0x78}, {&(0x7f0000000a00)="b4915c04972c1ce1abbfe5125ada0411f8b6e6970c411436eee07000341517fd005cb9cadcccf102d3a4aab4100cd84664ad754cb7eae6a340a24ce29b4f12bdf5d29e15dff3ecd184554ca895e447737d5aebaf0e6bb1ef26cef574fd2202838d956346771f29e458633c930999a1b984f002203149f43db2048a0cac71ed5e774ce8299e2de0dd24fca578785f7ea645331428d1f9bc13641cb0acb64c54216c6245a1220777583181893900adb4fb692891", 0xb3}, {&(0x7f0000000ac0)="519dac72b244d415a968574e84822b2b626f4a75ad4d268fed2aef0cba92d10efea48377a457ce74c02944329f034bf857c97a69655f969afef3ea28b04d3bfae7d1d204a5b77ece873119818f6ac6f13bc6b3cf2e7305a2f9402a18b46998ecd3c823886caa36984e6636eab2c1eb0a90d2c026d970143f347c13b9382bad9f1563161b9163d836a5af2e2093b51b0f847c87af9efb35a46f28154ed20f01b23569e8faa66712c235b3011f719729d480fdfbbe1f5caf13", 0xb8}, {&(0x7f0000000b80)="692390401988ce5cf70f253d0b4036b4c073b90ef06a82268dcd99da9e6fcb05ffd5b29bb9c7422c03c96f55b714e5e444557129b40b4f03cdf05519b0c1ae33db48f3c6d41a8f63756a1b4b9f2ecbeed553733d31938fe9cf884511b32a41c75353adccad0656f5997b0b8ec8493c0eb8cd33536cb0a78017a2d47cd98873e79744da9ca5c21df13157d1c0be827ae72d2c08caa268b58f51e14270319ebf4199b50ed40e2df3b3ddf196b8afd77ebf62efcbe57718565e3692b7a6a34599b984a00d9275a8ec238f2d4884422010e94f2080bab9f68f0d42b5097d2d4e3deca20d30b50327b31ebee802151a58", 0xee}, {&(0x7f0000000c80)="53693c1d94e028cd0c004216d32e6ae7b77ed83d0a6ede6bbf5471c710bdc5a833005d311b5c7207ac1f311551a4e32a0d2aa4f594aa25726f68e8ec5b649da314b4a6878b4c9878ab5e539c2a913fd0f464dcdaa4311df842ee781c334f439722c013efb873f3a00974b5ec59b2bbf0", 0x70}], 0xa, &(0x7f0000000dc0)=[{0x90, 0x84, 0x454, "f2dbad8b2a529a12f46b0c6e8e6f23e09e2d0f7f15c431c35920d1fbf5d52d3967e113fdf49e7b6b577e74b9eca2798628c11b4015274195b6581999f60dc51be139367d7868612b1725a6dac68a7af5c1d9e41c9cce038e602b66cd8acb5887eb06ea3e235589eec3e283350a38999c5b7ba28ac893b2f934d8045e"}, {0x98, 0x117, 0x4, "4c31eea40e5a823c6ddbeb560fe6b76994774399907c0a181da9a388690fca95b8dcd393a6432377fdd3e19f72943177036b8456d7c580c477e0283a29711c5ac36ea50c581570b36fb31667dbf073463fe0be2189502cb1b1671d385dd89fef3d54f201358522b8672762d99bbd156a02c5467ff5230d732faa057526b595d4610d"}], 0x128}}, {{&(0x7f0000000f00)=@l2={0x1f, 0x4, @none, 0x81, 0x1}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000f80)="3fa7c1f6ecc45954aa29e4af87a769825a61496173e88f408d7311e46cbae06ee2e87f57ad482d8a8b9db371d70b3ab4d9b42110322390c8083055ad5aae8165fd1c3765a266fde4571a1a75f46a6577c39f02758ae0e250e57db974e3ea9e7c8c1ae52c38c1626e6645eefc4c1de7de2a358fb92a3c183055335ac3006115b3b62d73977e8e9a9501a1732d0de9b1a515b222d1a7962c61dc90da43c684bf647ccfe206d9ef33fcbc19", 0xaa}, {&(0x7f0000001040)="f4b7ba146930405b42ccb60bae91c6b911f34bcaec688593f4f7301d1622f65cd19a063881594ffa09d1da0843c9f6a32f8b67bab618099f37ef8930d97a5e03d6113124c72971e4f7697d7b25a3fff93d32c3c7f2df33eff46f9600727d4ba3505ffb98b87ba9f6c89b3e9dc1e53ea57b24e812c5534e951a6ae00e23d8d8c64ffd520b5ff6da58ad9f50ce77caf8dc36a9afe15b7714378ebda6abc005d8233b519f96be8d63823df97f5bb02b4d83ff6dd1651d57c41760c84edee48c099178431794daed12a57e0b35487d5d7883b469f68e", 0xd4}, {&(0x7f0000001140)="265754abbc4886e2e44bbdefc710f3fa30255e95546d61e5ed100ed42e2ea5ca87f63c5f", 0x24}, {0x0}, {&(0x7f0000001240)="de61b632d806e604a4d3da324b9e6c787360c26e42231b9c311bbea61f88982c5d698a06c13a35f92e87a95816f70848e168f5546a77f0de883f780a49d7c75db1b0104ab90f881a6c73f5d4c1f7cfe71f34cce47580539e665fa221fad67eb7dd878e8902f924e9ff9e67246f4997d7232ba801c72d689df8ca9a9c41714d1ee3d4743025aed6f555fc006f64fba83acb888245b05d007ca0a9ec8908336c909f0e172b13cc40a49a73a2074b96d2b628ca2ad79274e8adc5de26f1bbbd16cedbcd96548492b7faa18667b369a11b", 0xcf}, {0x0}, {&(0x7f0000001440)}], 0x7, &(0x7f0000001540)=[{0xf8, 0x10d, 0x7, "aab688be8801fc250ec30cb017cd866ba3b913e95a841722d30781fa898f7b1e5e47dd0c8cae2f33f8be87408a44f2c13450da4d412fe54cb3dd8575e159737d26ac178136c9862795b6367e80cb653a2881b5ee348882ccbcbded9d78cd42fba9eda60bcaee2457ed6842c8a816a0b79babd9d6df642c4f03e70371a7b3990f4b8a675d30e5a0e6ce749868dfc584110e3d02bcb25f0ba23f28899b0370b7aef7ef683bc18a7fc47ad2e7537b9e99c4451ff9e8cf5cb5754a192051d4224627fb9494dbf60f3864dc6ed15220da536f0c946a715dd40d60201f3c88d9457abb5d0b"}, {0xf0, 0x101, 0x2, "4677a3fdf27758e11fc0487a7f7adc39119303b3989ccfdd8faa13c9d7d74bc67369f9aab0400a0c5040fb9dac7577755132b67742f0357868d8baf831d67af87018ebe50925e11f1ddaeeab68a4672f96d956ffe161bd88838dd664bea477b303fca657dba17828adb078da939a564aa07cdb59019cfd3b15d089f1519dbbf8c0de89b8c115100a2846b75fd9d89eb3e00de576c3e69256ab5129e32436516160c1f73390493e492a291479ed699dcffe3b8d4e94246ba43ad947ed5d9102eb658cb8e2e5c1963bc3e75c285f22f266c6d5d1ba975ac4281cefd8f220a5c9"}, {0x48, 0xff, 0x2, "f2fb75cf79803980270f37416293a04016fb2cdd5767089c3f224daa3e766391cb1071c0c12d35346dd94c90ad956cfa76620566"}, {0x68, 0x117, 0x6, "19e4fcef08245b641b6bd05314b441073fa6f0ab7d5ecce69b0e09ea850bcffc4a12d77861c3fde5c680571f287c21a7c8f72b7c7eee878686bfc95acbded2de500d6360002aa9d6879e9f4a6d1827e87f"}, {0x10, 0x119, 0x7f}, {0x30, 0x29, 0xbb, "b041264682fd15149ba0ce9e2b6f478eee307a25243474ca085d7422"}], 0x2d8}}, {{&(0x7f0000001980)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default]}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001a00)="29cf05c2e85b93726a8bfbbc05f1fac222e320f592e69a01561929c1301489d41990de0bc6562b5bdd6357dc8eca764ed26224b022e452", 0x37}, {&(0x7f0000001a80)="ca3c8008e4ea4f46e3e38bcdd6f1628a8121950ca542b253502ac9dda80d451b1ac4ecbb1716342e1ef9d6d85abf35dd8642823d5c6d853a73ad0ed1a916c9dcf702153fe8e3b425dc053c820db2387d1f59fc21fc122a838ef387b083f5cf8cd82645566313a7c939abcb2c562b5fe8987c4f4e219165793b574d9e777ca4ee88cc4e6d9394ee0ebf5d40497294504a6419fc27f82ce64dbd65f4c605d71c7080c9fbc168ec06dea1e644a34366c2858f830d0834dc773cecf197904e9e7afa05bd1d274aa2304f724ee394eede30179a50d061eb8d8dddf72134b4ba358dc088cf323d165edb731697d1", 0xeb}, {&(0x7f0000001b80)="57e4e5a7fb4b7607b64f13c6ce044fad38a18a2ae9ca384419867a214d298280f3f37227c130677c401f828b96da3c849fb1f8cefec7c92b7d59ab7d83f8da0d59606adf8aac8db67ee2174ff685a44981a0961e638db6", 0x57}, {&(0x7f0000001c00)}], 0x4}}], 0x3, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe7, 0xe7, 0x4, [@enum64={0x8, 0x9, 0x0, 0x13, 0x1, 0x1, [{0x3, 0x2, 0x2}, {0xb, 0x5, 0x9}, {0xd, 0x4, 0x1}, {0x4, 0x81, 0x7}, {0x1, 0xe, 0x7}, {0x7, 0xce26, 0x8}, {0xc, 0xc, 0x628}, {0xb, 0x9}, {0xd, 0x7, 0x60000000}]}, @func={0xc, 0x0, 0x0, 0xc, 0x5}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x5}, @float={0x10, 0x0, 0x0, 0x10, 0x2}, @datasec={0x5, 0x5, 0x0, 0xf, 0x3, [{0x5, 0x7, 0x6}, {0x2, 0x7, 0xfff}, {0x3, 0x0, 0xe}, {0x2, 0x8, 0x1}, {0x2, 0x6, 0x6}], "f2b204"}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000002040)=""/36, 0x104, 0x24, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000020c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7, '\x00', r1, r6, 0x5, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_generic(r4, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, 0x20, 0x400, 0x70bd25, 0x25dfdbfb, {0x1f}, [@typed={0x8, 0x114, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x8090) accept4(r5, &(0x7f0000002240)=@nfc_llcp, &(0x7f00000022c0)=0x80, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002340)={0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x10}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x28, 0x1409, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x80c0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002840)={0x6, 'tunl0\x00', {}, 0xa}) connect$bt_l2cap(r5, &(0x7f00000028c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x1}, 0xe) 14.243415311s ago: executing program 3 (id=251): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x3}, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair(0x9, 0x2, 0x93, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200900}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000540)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000005c0)={0x3, 0x9, 0x17, &(0x7f0000000580)=""/23}) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000640)=0x8) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) sendmmsg(r5, &(0x7f0000001e40)=[{{&(0x7f0000000680)=@ethernet={0x1, @random="9970d9936467"}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000700)="f54eef4ea0f8606bff321564242e43be187b103433f8e420146307d24043cbf7f3f88e562a7ab6eaf3fec8c81a6a34c8f3acafec0eaf0c143a050c2a7d958a183b51d791720533454a325020078f1a03d90eb405681008d7c73fe896de207f63b4892d980496", 0x66}, {&(0x7f0000000780)="1f2972013c038b", 0x7}, {&(0x7f00000007c0)="1081fb79c273d4188c1d2f1557ae884f10ccddfe68bb6082114153d380ab9d17f85fd4363ea4f4c4f878f0b487167402f7adf7270fbdc1230326a780b9873b5bfaf782c557f40e44c428c4bd98e64cb5959e863fdc0c13908f2ce9c4094d", 0x5e}, {&(0x7f0000000840)}, {&(0x7f0000000940)="93ccde14985ffb05294a82daf4854f065e41a2ba4ee3", 0x16}, {&(0x7f0000000980)="c09aa2a9db932a2f250b14b3bd52123a9959c9c528b6ee6b6127e87cf44203587c676dcdbd7fdc9db8b3cf380f7f337e6a473bb8ec2a226845aa35847f37d7177cdf2c8395130a4bfc6cac4b524db55ad1899e5c51ce066e142ee0db6d3c67488e0c577aa92b9a78195417983d74ed9d00e8182ea2363863", 0x78}, {&(0x7f0000000a00)="b4915c04972c1ce1abbfe5125ada0411f8b6e6970c411436eee07000341517fd005cb9cadcccf102d3a4aab4100cd84664ad754cb7eae6a340a24ce29b4f12bdf5d29e15dff3ecd184554ca895e447737d5aebaf0e6bb1ef26cef574fd2202838d956346771f29e458633c930999a1b984f002203149f43db2048a0cac71ed5e774ce8299e2de0dd24fca578785f7ea645331428d1f9bc13641cb0acb64c54216c6245a1220777583181893900adb4fb692891", 0xb3}, {&(0x7f0000000ac0)="519dac72b244d415a968574e84822b2b626f4a75ad4d268fed2aef0cba92d10efea48377a457ce74c02944329f034bf857c97a69655f969afef3ea28b04d3bfae7d1d204a5b77ece873119818f6ac6f13bc6b3cf2e7305a2f9402a18b46998ecd3c823886caa36984e6636eab2c1eb0a90d2c026d970143f347c13b9382bad9f1563161b9163d836a5af2e2093b51b0f847c87af9efb35a46f28154ed20f01b23569e8faa66712c235b3011f719729d480fdfbbe1f5caf13", 0xb8}, {&(0x7f0000000b80)="692390401988ce5cf70f253d0b4036b4c073b90ef06a82268dcd99da9e6fcb05ffd5b29bb9c7422c03c96f55b714e5e444557129b40b4f03cdf05519b0c1ae33db48f3c6d41a8f63756a1b4b9f2ecbeed553733d31938fe9cf884511b32a41c75353adccad0656f5997b0b8ec8493c0eb8cd33536cb0a78017a2d47cd98873e79744da9ca5c21df13157d1c0be827ae72d2c08caa268b58f51e14270319ebf4199b50ed40e2df3b3ddf196b8afd77ebf62efcbe57718565e3692b7a6a34599b984a00d9275a8ec238f2d4884422010e94f2080bab9f68f0d42b5097d2d4e3deca20d30b50327b31ebee802151a58", 0xee}, {&(0x7f0000000c80)="53693c1d94e028cd0c004216d32e6ae7b77ed83d0a6ede6bbf5471c710bdc5a833005d311b5c7207ac1f311551a4e32a0d2aa4f594aa25726f68e8ec5b649da314b4a6878b4c9878ab5e539c2a913fd0f464dcdaa4311df842ee781c334f439722c013efb873f3a00974b5ec59b2bbf0", 0x70}], 0xa, &(0x7f0000000dc0)=[{0x90, 0x84, 0x454, "f2dbad8b2a529a12f46b0c6e8e6f23e09e2d0f7f15c431c35920d1fbf5d52d3967e113fdf49e7b6b577e74b9eca2798628c11b4015274195b6581999f60dc51be139367d7868612b1725a6dac68a7af5c1d9e41c9cce038e602b66cd8acb5887eb06ea3e235589eec3e283350a38999c5b7ba28ac893b2f934d8045e"}, {0x98, 0x117, 0x4, "4c31eea40e5a823c6ddbeb560fe6b76994774399907c0a181da9a388690fca95b8dcd393a6432377fdd3e19f72943177036b8456d7c580c477e0283a29711c5ac36ea50c581570b36fb31667dbf073463fe0be2189502cb1b1671d385dd89fef3d54f201358522b8672762d99bbd156a02c5467ff5230d732faa057526b595d4610d"}], 0x128}}, {{&(0x7f0000000f00)=@l2={0x1f, 0x4, @none, 0x81, 0x1}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000f80)="3fa7c1f6ecc45954aa29e4af87a769825a61496173e88f408d7311e46cbae06ee2e87f57ad482d8a8b9db371d70b3ab4d9b42110322390c8083055ad5aae8165fd1c3765a266fde4571a1a75f46a6577c39f02758ae0e250e57db974e3ea9e7c8c1ae52c38c1626e6645eefc4c1de7de2a358fb92a3c183055335ac3006115b3b62d73977e8e9a9501a1732d0de9b1a515b222d1a7962c61dc90da43c684bf647ccfe206d9ef33fcbc19", 0xaa}, {&(0x7f0000001040)="f4b7ba146930405b42ccb60bae91c6b911f34bcaec688593f4f7301d1622f65cd19a063881594ffa09d1da0843c9f6a32f8b67bab618099f37ef8930d97a5e03d6113124c72971e4f7697d7b25a3fff93d32c3c7f2df33eff46f9600727d4ba3505ffb98b87ba9f6c89b3e9dc1e53ea57b24e812c5534e951a6ae00e23d8d8c64ffd520b5ff6da58ad9f50ce77caf8dc36a9afe15b7714378ebda6abc005d8233b519f96be8d63823df97f5bb02b4d83ff6dd1651d57c41760c84edee48c099178431794daed12a57e0b35487d5d7883b469f68e", 0xd4}, {&(0x7f0000001140)="265754abbc4886e2e44bbdefc710f3fa30255e95546d61e5ed100ed42e2ea5ca87f63c5f", 0x24}, {0x0}, {&(0x7f0000001240)="de61b632d806e604a4d3da324b9e6c787360c26e42231b9c311bbea61f88982c5d698a06c13a35f92e87a95816f70848e168f5546a77f0de883f780a49d7c75db1b0104ab90f881a6c73f5d4c1f7cfe71f34cce47580539e665fa221fad67eb7dd878e8902f924e9ff9e67246f4997d7232ba801c72d689df8ca9a9c41714d1ee3d4743025aed6f555fc006f64fba83acb888245b05d007ca0a9ec8908336c909f0e172b13cc40a49a73a2074b96d2b628ca2ad79274e8adc5de26f1bbbd16cedbcd96548492b7faa18667b369a11b", 0xcf}, {0x0}, {&(0x7f0000001440)}], 0x7, &(0x7f0000001540)=[{0xf8, 0x10d, 0x7, "aab688be8801fc250ec30cb017cd866ba3b913e95a841722d30781fa898f7b1e5e47dd0c8cae2f33f8be87408a44f2c13450da4d412fe54cb3dd8575e159737d26ac178136c9862795b6367e80cb653a2881b5ee348882ccbcbded9d78cd42fba9eda60bcaee2457ed6842c8a816a0b79babd9d6df642c4f03e70371a7b3990f4b8a675d30e5a0e6ce749868dfc584110e3d02bcb25f0ba23f28899b0370b7aef7ef683bc18a7fc47ad2e7537b9e99c4451ff9e8cf5cb5754a192051d4224627fb9494dbf60f3864dc6ed15220da536f0c946a715dd40d60201f3c88d9457abb5d0b"}, {0xf0, 0x101, 0x2, "4677a3fdf27758e11fc0487a7f7adc39119303b3989ccfdd8faa13c9d7d74bc67369f9aab0400a0c5040fb9dac7577755132b67742f0357868d8baf831d67af87018ebe50925e11f1ddaeeab68a4672f96d956ffe161bd88838dd664bea477b303fca657dba17828adb078da939a564aa07cdb59019cfd3b15d089f1519dbbf8c0de89b8c115100a2846b75fd9d89eb3e00de576c3e69256ab5129e32436516160c1f73390493e492a291479ed699dcffe3b8d4e94246ba43ad947ed5d9102eb658cb8e2e5c1963bc3e75c285f22f266c6d5d1ba975ac4281cefd8f220a5c9"}, {0x48, 0xff, 0x2, "f2fb75cf79803980270f37416293a04016fb2cdd5767089c3f224daa3e766391cb1071c0c12d35346dd94c90ad956cfa76620566"}, {0x68, 0x117, 0x6, "19e4fcef08245b641b6bd05314b441073fa6f0ab7d5ecce69b0e09ea850bcffc4a12d77861c3fde5c680571f287c21a7c8f72b7c7eee878686bfc95acbded2de500d6360002aa9d6879e9f4a6d1827e87f"}, {0x10, 0x119, 0x7f}, {0x30, 0x29, 0xbb, "b041264682fd15149ba0ce9e2b6f478eee307a25243474ca085d7422"}], 0x2d8}}, {{&(0x7f0000001980)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default]}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001a00)="29cf05c2e85b93726a8bfbbc05f1fac222e320f592e69a01561929c1301489d41990de0bc6562b5bdd6357dc8eca764ed26224b022e452", 0x37}, {&(0x7f0000001a80)="ca3c8008e4ea4f46e3e38bcdd6f1628a8121950ca542b253502ac9dda80d451b1ac4ecbb1716342e1ef9d6d85abf35dd8642823d5c6d853a73ad0ed1a916c9dcf702153fe8e3b425dc053c820db2387d1f59fc21fc122a838ef387b083f5cf8cd82645566313a7c939abcb2c562b5fe8987c4f4e219165793b574d9e777ca4ee88cc4e6d9394ee0ebf5d40497294504a6419fc27f82ce64dbd65f4c605d71c7080c9fbc168ec06dea1e644a34366c2858f830d0834dc773cecf197904e9e7afa05bd1d274aa2304f724ee394eede30179a50d061eb8d8dddf72134b4ba358dc088cf323d165edb731697d1", 0xeb}, {&(0x7f0000001b80)="57e4e5a7fb4b7607b64f13c6ce044fad38a18a2ae9ca384419867a214d298280f3f37227c130677c401f828b96da3c849fb1f8cefec7c92b7d59ab7d83f8da0d59606adf8aac8db67ee2174ff685a44981a0961e638db6", 0x57}, {&(0x7f0000001c00)}], 0x4}}], 0x3, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe7, 0xe7, 0x4, [@enum64={0x8, 0x9, 0x0, 0x13, 0x1, 0x1, [{0x3, 0x2, 0x2}, {0xb, 0x5, 0x9}, {0xd, 0x4, 0x1}, {0x4, 0x81, 0x7}, {0x1, 0xe, 0x7}, {0x7, 0xce26, 0x8}, {0xc, 0xc, 0x628}, {0xb, 0x9}, {0xd, 0x7, 0x60000000}]}, @func={0xc, 0x0, 0x0, 0xc, 0x5}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x5}, @float={0x10, 0x0, 0x0, 0x10, 0x2}, @datasec={0x5, 0x5, 0x0, 0xf, 0x3, [{0x5, 0x7, 0x6}, {0x2, 0x7, 0xfff}, {0x3, 0x0, 0xe}, {0x2, 0x8, 0x1}, {0x2, 0x6, 0x6}], "f2b204"}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000002040)=""/36, 0x104, 0x24, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000020c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7, '\x00', r1, r6, 0x5, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_generic(r4, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, 0x20, 0x400, 0x70bd25, 0x25dfdbfb, {0x1f}, [@typed={0x8, 0x114, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x8090) accept4(r5, &(0x7f0000002240)=@nfc_llcp, &(0x7f00000022c0)=0x80, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002340)={0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x10}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x28, 0x1409, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x80c0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002840)={0x6, 'tunl0\x00', {}, 0xa}) connect$bt_l2cap(r5, &(0x7f00000028c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x1}, 0xe) 4.021684896s ago: executing program 1 (id=1108): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000000206010400000000000000000500000b0d000300686173683a6d61630000000005000500070000000500010007000000100007800c000280080001400a010102050005000a0000003c00078008001740000007ff050003001000000008001240000003ff080013400003fffc05000300080000000500070033000000080009400000000d"], 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x2, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x468, 0x310, 0x25, 0x148, 0x310, 0x60, 0x408, 0x2a8, 0x2a8, 0x310, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x310, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@connlabel={{0x28}, {0x3, 0x3}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4c8) 3.937635167s ago: executing program 0 (id=1110): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local}], 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 3.888947203s ago: executing program 1 (id=1111): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0xfffffff8}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000840)=""/235, 0xeb}, {&(0x7f00000006c0)=""/231, 0xe7}, {&(0x7f0000000440)=""/71, 0x47}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000004300)=""/49, 0x31}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x10000}], 0x4, 0x0, 0x0) 3.857752074s ago: executing program 0 (id=1112): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=0x0], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00fca93c470000000000000000000000000000003e0e0000000000000000"], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000080000000600000010000000", @ANYRES32, @ANYBLOB="00002342aa89aa33941314000300000067641200000066", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000100000000000000058000"/24], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xbc, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, 0x10, 0x0, 0xe7, 0x2}}) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005e52d4696e89376f672beb4b940a70024001400028005001700000000000500180001ffff00"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.520654378s ago: executing program 4 (id=1113): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x1, 0x0, 0x0, 0x4, 0x0, 0x4}]}, {0x0, [0x5f, 0x5f]}}, 0x0, 0x28, 0x0, 0x1, 0x9, 0x0, @void, @value=0xffff0f00}, 0x28) 3.520327264s ago: executing program 4 (id=1114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}], {0x14}}, 0x5c}, 0x1, 0x2000000}, 0x4008800) 3.479182973s ago: executing program 4 (id=1115): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0x86, 0xf3, &(0x7f00000002c0)="b6982d1bd75fd1ccb36fd7d722ee299a8d10449d73c76fee553c03b729212ffc2a717fa29d6b3f59148e73890b29abd16b6da8ca80ea1c26ca2fd25535c5e3465d6ffdd3bc111c0e01dd55fc88db721b1f93bedf2f6022806c0f4aa5cc1f73a0271ec1030999a23b33c3f718ec78483f4048b07095ca1aff49dc7a9d5b565bd9f2f5df786284", &(0x7f0000000540)=""/243, 0x2, 0x0, 0x77, 0x52, &(0x7f0000000040)="b0bf9198cfbda58f851313d73114a8bcdaee6c98a84d9c4e3fdc182017013b260c9fe86da12d09368ded9d2223231a7de34959dffecc20e1cde55a86127b2a9637df81e91ffbea1097b8aa244b25a84bb63f78b2d2a632e0808536a79c072e41cf91e99822de5927090e1b558a1268232ee16d91856c9a", &(0x7f00000001c0)="f86a77c7804b37db741c287e413d4af42b9ca6ac2a7f63f312d9fe3437ca05b806f2182a7668160829665e17bb4355efaedaba56c76e4b1ca13f63ce44ff74499b9558d80b1e2967d1ab9a119c4ae8a8a3d5", 0x0, 0x0, 0x7}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0xc050) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x6095}, 0x8091) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000004c0)=""/18, 0x12}], 0x1}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}, 0xfffffffe}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x1}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x182804, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000100)="89e7ee", 0x3}, {&(0x7f0000000440)="9c74dfbf77572856c888a886", 0xc}, {&(0x7f00000001c0)="00894f", 0x3}], 0x3) sendmsg$tipc(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x804) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 3.342201352s ago: executing program 2 (id=1116): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x400000}, 0xc) (async) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x400000}, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x0, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40a40, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, 0x0) (async) ioctl$PPPIOCATTCHAN(r5, 0x40047438, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xd8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000180001002bbd7000fddbdf2502148004fe03fe0300260000080005006401010008000b00ad"], 0x2c}, 0x1, 0x0, 0x0, 0x24040090}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="516980000000", @ANYRES16=r7, @ANYBLOB="010000000000fddbdf254f00000008000300", @ANYRES32=r9, @ANYBLOB="64007a8014000200fb7bb56ca6873e8ddcd83c70265fdc8c2aff0100167fcd4e10418603abbb38c4b283b5951c000200175b5b95ffe211a05cc2f9ff3e5783e614412f3af21cbb0b0c00030021d52b866cf5c6db"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.196730187s ago: executing program 2 (id=1117): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0xb, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af83f00000000bfa100000000000007010000e8e09e9ab702000008000000b70300000000000085000000c800000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x79, &(0x7f00000000c0)=""/121, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)={0x0, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x2, 0x4, 0xa2, 0x1, [0x8, 0x10]}}]}, 0x48) 3.194465472s ago: executing program 2 (id=1118): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x100) accept4(r0, 0x0, 0x0, 0xe00000000000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = accept(r2, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x40895, 0x0, 0x0) 2.989349962s ago: executing program 3 (id=251): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x3}, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair(0x9, 0x2, 0x93, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200900}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000540)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000005c0)={0x3, 0x9, 0x17, &(0x7f0000000580)=""/23}) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000640)=0x8) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) sendmmsg(r5, &(0x7f0000001e40)=[{{&(0x7f0000000680)=@ethernet={0x1, @random="9970d9936467"}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000700)="f54eef4ea0f8606bff321564242e43be187b103433f8e420146307d24043cbf7f3f88e562a7ab6eaf3fec8c81a6a34c8f3acafec0eaf0c143a050c2a7d958a183b51d791720533454a325020078f1a03d90eb405681008d7c73fe896de207f63b4892d980496", 0x66}, {&(0x7f0000000780)="1f2972013c038b", 0x7}, {&(0x7f00000007c0)="1081fb79c273d4188c1d2f1557ae884f10ccddfe68bb6082114153d380ab9d17f85fd4363ea4f4c4f878f0b487167402f7adf7270fbdc1230326a780b9873b5bfaf782c557f40e44c428c4bd98e64cb5959e863fdc0c13908f2ce9c4094d", 0x5e}, {&(0x7f0000000840)}, {&(0x7f0000000940)="93ccde14985ffb05294a82daf4854f065e41a2ba4ee3", 0x16}, {&(0x7f0000000980)="c09aa2a9db932a2f250b14b3bd52123a9959c9c528b6ee6b6127e87cf44203587c676dcdbd7fdc9db8b3cf380f7f337e6a473bb8ec2a226845aa35847f37d7177cdf2c8395130a4bfc6cac4b524db55ad1899e5c51ce066e142ee0db6d3c67488e0c577aa92b9a78195417983d74ed9d00e8182ea2363863", 0x78}, {&(0x7f0000000a00)="b4915c04972c1ce1abbfe5125ada0411f8b6e6970c411436eee07000341517fd005cb9cadcccf102d3a4aab4100cd84664ad754cb7eae6a340a24ce29b4f12bdf5d29e15dff3ecd184554ca895e447737d5aebaf0e6bb1ef26cef574fd2202838d956346771f29e458633c930999a1b984f002203149f43db2048a0cac71ed5e774ce8299e2de0dd24fca578785f7ea645331428d1f9bc13641cb0acb64c54216c6245a1220777583181893900adb4fb692891", 0xb3}, {&(0x7f0000000ac0)="519dac72b244d415a968574e84822b2b626f4a75ad4d268fed2aef0cba92d10efea48377a457ce74c02944329f034bf857c97a69655f969afef3ea28b04d3bfae7d1d204a5b77ece873119818f6ac6f13bc6b3cf2e7305a2f9402a18b46998ecd3c823886caa36984e6636eab2c1eb0a90d2c026d970143f347c13b9382bad9f1563161b9163d836a5af2e2093b51b0f847c87af9efb35a46f28154ed20f01b23569e8faa66712c235b3011f719729d480fdfbbe1f5caf13", 0xb8}, {&(0x7f0000000b80)="692390401988ce5cf70f253d0b4036b4c073b90ef06a82268dcd99da9e6fcb05ffd5b29bb9c7422c03c96f55b714e5e444557129b40b4f03cdf05519b0c1ae33db48f3c6d41a8f63756a1b4b9f2ecbeed553733d31938fe9cf884511b32a41c75353adccad0656f5997b0b8ec8493c0eb8cd33536cb0a78017a2d47cd98873e79744da9ca5c21df13157d1c0be827ae72d2c08caa268b58f51e14270319ebf4199b50ed40e2df3b3ddf196b8afd77ebf62efcbe57718565e3692b7a6a34599b984a00d9275a8ec238f2d4884422010e94f2080bab9f68f0d42b5097d2d4e3deca20d30b50327b31ebee802151a58", 0xee}, {&(0x7f0000000c80)="53693c1d94e028cd0c004216d32e6ae7b77ed83d0a6ede6bbf5471c710bdc5a833005d311b5c7207ac1f311551a4e32a0d2aa4f594aa25726f68e8ec5b649da314b4a6878b4c9878ab5e539c2a913fd0f464dcdaa4311df842ee781c334f439722c013efb873f3a00974b5ec59b2bbf0", 0x70}], 0xa, &(0x7f0000000dc0)=[{0x90, 0x84, 0x454, "f2dbad8b2a529a12f46b0c6e8e6f23e09e2d0f7f15c431c35920d1fbf5d52d3967e113fdf49e7b6b577e74b9eca2798628c11b4015274195b6581999f60dc51be139367d7868612b1725a6dac68a7af5c1d9e41c9cce038e602b66cd8acb5887eb06ea3e235589eec3e283350a38999c5b7ba28ac893b2f934d8045e"}, {0x98, 0x117, 0x4, "4c31eea40e5a823c6ddbeb560fe6b76994774399907c0a181da9a388690fca95b8dcd393a6432377fdd3e19f72943177036b8456d7c580c477e0283a29711c5ac36ea50c581570b36fb31667dbf073463fe0be2189502cb1b1671d385dd89fef3d54f201358522b8672762d99bbd156a02c5467ff5230d732faa057526b595d4610d"}], 0x128}}, {{&(0x7f0000000f00)=@l2={0x1f, 0x4, @none, 0x81, 0x1}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000f80)="3fa7c1f6ecc45954aa29e4af87a769825a61496173e88f408d7311e46cbae06ee2e87f57ad482d8a8b9db371d70b3ab4d9b42110322390c8083055ad5aae8165fd1c3765a266fde4571a1a75f46a6577c39f02758ae0e250e57db974e3ea9e7c8c1ae52c38c1626e6645eefc4c1de7de2a358fb92a3c183055335ac3006115b3b62d73977e8e9a9501a1732d0de9b1a515b222d1a7962c61dc90da43c684bf647ccfe206d9ef33fcbc19", 0xaa}, {&(0x7f0000001040)="f4b7ba146930405b42ccb60bae91c6b911f34bcaec688593f4f7301d1622f65cd19a063881594ffa09d1da0843c9f6a32f8b67bab618099f37ef8930d97a5e03d6113124c72971e4f7697d7b25a3fff93d32c3c7f2df33eff46f9600727d4ba3505ffb98b87ba9f6c89b3e9dc1e53ea57b24e812c5534e951a6ae00e23d8d8c64ffd520b5ff6da58ad9f50ce77caf8dc36a9afe15b7714378ebda6abc005d8233b519f96be8d63823df97f5bb02b4d83ff6dd1651d57c41760c84edee48c099178431794daed12a57e0b35487d5d7883b469f68e", 0xd4}, {&(0x7f0000001140)="265754abbc4886e2e44bbdefc710f3fa30255e95546d61e5ed100ed42e2ea5ca87f63c5f", 0x24}, {0x0}, {&(0x7f0000001240)="de61b632d806e604a4d3da324b9e6c787360c26e42231b9c311bbea61f88982c5d698a06c13a35f92e87a95816f70848e168f5546a77f0de883f780a49d7c75db1b0104ab90f881a6c73f5d4c1f7cfe71f34cce47580539e665fa221fad67eb7dd878e8902f924e9ff9e67246f4997d7232ba801c72d689df8ca9a9c41714d1ee3d4743025aed6f555fc006f64fba83acb888245b05d007ca0a9ec8908336c909f0e172b13cc40a49a73a2074b96d2b628ca2ad79274e8adc5de26f1bbbd16cedbcd96548492b7faa18667b369a11b", 0xcf}, {0x0}, {&(0x7f0000001440)}], 0x7, &(0x7f0000001540)=[{0xf8, 0x10d, 0x7, "aab688be8801fc250ec30cb017cd866ba3b913e95a841722d30781fa898f7b1e5e47dd0c8cae2f33f8be87408a44f2c13450da4d412fe54cb3dd8575e159737d26ac178136c9862795b6367e80cb653a2881b5ee348882ccbcbded9d78cd42fba9eda60bcaee2457ed6842c8a816a0b79babd9d6df642c4f03e70371a7b3990f4b8a675d30e5a0e6ce749868dfc584110e3d02bcb25f0ba23f28899b0370b7aef7ef683bc18a7fc47ad2e7537b9e99c4451ff9e8cf5cb5754a192051d4224627fb9494dbf60f3864dc6ed15220da536f0c946a715dd40d60201f3c88d9457abb5d0b"}, {0xf0, 0x101, 0x2, "4677a3fdf27758e11fc0487a7f7adc39119303b3989ccfdd8faa13c9d7d74bc67369f9aab0400a0c5040fb9dac7577755132b67742f0357868d8baf831d67af87018ebe50925e11f1ddaeeab68a4672f96d956ffe161bd88838dd664bea477b303fca657dba17828adb078da939a564aa07cdb59019cfd3b15d089f1519dbbf8c0de89b8c115100a2846b75fd9d89eb3e00de576c3e69256ab5129e32436516160c1f73390493e492a291479ed699dcffe3b8d4e94246ba43ad947ed5d9102eb658cb8e2e5c1963bc3e75c285f22f266c6d5d1ba975ac4281cefd8f220a5c9"}, {0x48, 0xff, 0x2, "f2fb75cf79803980270f37416293a04016fb2cdd5767089c3f224daa3e766391cb1071c0c12d35346dd94c90ad956cfa76620566"}, {0x68, 0x117, 0x6, "19e4fcef08245b641b6bd05314b441073fa6f0ab7d5ecce69b0e09ea850bcffc4a12d77861c3fde5c680571f287c21a7c8f72b7c7eee878686bfc95acbded2de500d6360002aa9d6879e9f4a6d1827e87f"}, {0x10, 0x119, 0x7f}, {0x30, 0x29, 0xbb, "b041264682fd15149ba0ce9e2b6f478eee307a25243474ca085d7422"}], 0x2d8}}, {{&(0x7f0000001980)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default]}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001a00)="29cf05c2e85b93726a8bfbbc05f1fac222e320f592e69a01561929c1301489d41990de0bc6562b5bdd6357dc8eca764ed26224b022e452", 0x37}, {&(0x7f0000001a80)="ca3c8008e4ea4f46e3e38bcdd6f1628a8121950ca542b253502ac9dda80d451b1ac4ecbb1716342e1ef9d6d85abf35dd8642823d5c6d853a73ad0ed1a916c9dcf702153fe8e3b425dc053c820db2387d1f59fc21fc122a838ef387b083f5cf8cd82645566313a7c939abcb2c562b5fe8987c4f4e219165793b574d9e777ca4ee88cc4e6d9394ee0ebf5d40497294504a6419fc27f82ce64dbd65f4c605d71c7080c9fbc168ec06dea1e644a34366c2858f830d0834dc773cecf197904e9e7afa05bd1d274aa2304f724ee394eede30179a50d061eb8d8dddf72134b4ba358dc088cf323d165edb731697d1", 0xeb}, {&(0x7f0000001b80)="57e4e5a7fb4b7607b64f13c6ce044fad38a18a2ae9ca384419867a214d298280f3f37227c130677c401f828b96da3c849fb1f8cefec7c92b7d59ab7d83f8da0d59606adf8aac8db67ee2174ff685a44981a0961e638db6", 0x57}, {&(0x7f0000001c00)}], 0x4}}], 0x3, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe7, 0xe7, 0x4, [@enum64={0x8, 0x9, 0x0, 0x13, 0x1, 0x1, [{0x3, 0x2, 0x2}, {0xb, 0x5, 0x9}, {0xd, 0x4, 0x1}, {0x4, 0x81, 0x7}, {0x1, 0xe, 0x7}, {0x7, 0xce26, 0x8}, {0xc, 0xc, 0x628}, {0xb, 0x9}, {0xd, 0x7, 0x60000000}]}, @func={0xc, 0x0, 0x0, 0xc, 0x5}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x5}, @float={0x10, 0x0, 0x0, 0x10, 0x2}, @datasec={0x5, 0x5, 0x0, 0xf, 0x3, [{0x5, 0x7, 0x6}, {0x2, 0x7, 0xfff}, {0x3, 0x0, 0xe}, {0x2, 0x8, 0x1}, {0x2, 0x6, 0x6}], "f2b204"}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000002040)=""/36, 0x104, 0x24, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000020c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7, '\x00', r1, r6, 0x5, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_generic(r4, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, 0x20, 0x400, 0x70bd25, 0x25dfdbfb, {0x1f}, [@typed={0x8, 0x114, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x8090) accept4(r5, &(0x7f0000002240)=@nfc_llcp, &(0x7f00000022c0)=0x80, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002340)={0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x10}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x28, 0x1409, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x80c0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002840)={0x6, 'tunl0\x00', {}, 0xa}) connect$bt_l2cap(r5, &(0x7f00000028c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x1}, 0xe) 2.984007815s ago: executing program 1 (id=1119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x1e0, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x6, 0x27}}}}, [@NL80211_ATTR_FRAME_MATCH={0x4a, 0x5b, "9910b24d3dfa2b8d4419a087b3592660bd4e04365065515772aa29ee75a77877b2421c789db900dbc04dc89f34ce8693a4d9a36e8c6652359657831ec435752180bbbc61a95e"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x101, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd0b4}, @NL80211_ATTR_FRAME_MATCH={0x4d, 0x5b, "66bcf8bd6a96ca494296ee28d63ae4e7934a6d0e426554b27082d48ab3bef06dbfaff9ca2dafba083b629d8254eca9acd3cc842cb46446556ee3c6a655cec56a0f7b47b8444441d669"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x10}]}, 0x1e0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.777530485s ago: executing program 0 (id=1120): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.776580258s ago: executing program 1 (id=1121): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000000206010400000000000000000500000b0d000300686173683a6d61630000000005000500070000000500010007000000100007800c000280080001400a010102050005000a0000003c00078008001740000007ff050003001000000008001240000003ff080013400003fffc05000300080000000500070033000000080009400000000d"], 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x2, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x468, 0x310, 0x25, 0x148, 0x310, 0x60, 0x408, 0x2a8, 0x2a8, 0x310, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x310, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@connlabel={{0x28}, {0x3, 0x3}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4c8) 1.764803346s ago: executing program 2 (id=1122): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local}], 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 1.763532702s ago: executing program 4 (id=1123): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd70000000000002000000140001"], 0x28}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 1.584564785s ago: executing program 0 (id=1124): pipe(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, 0x0, 0x4008010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010024bd7000fcdbdf252100000008000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r7, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x20000840) (fail_nth: 4) 716.01802ms ago: executing program 2 (id=1125): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum]}}, 0x0, 0x32, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x81) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in6=@remote, 0x0, 0x52, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x2000000, 0x2}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8) 683.020767ms ago: executing program 1 (id=1126): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0xd, r2, 0x1, 0xf7, 0x6, @link_local}, 0x14) socket$key(0xf, 0x3, 0x2) bind$packet(r0, &(0x7f0000000040)={0x11, 0x16, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x14) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x39}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r5, &(0x7f00000017c0), &(0x7f0000001480)=""/93}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r7}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800010000000002000000000a00000002000000000000001400050000000000000000000000000000000001"], 0x30}}, 0x0) sendmmsg$inet(r4, &(0x7f0000002500)=[{{&(0x7f0000002340)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f00000024c0)=[@ip_tos_int={{0x10}}], 0x10}}], 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0xfffffffd, 0x7fff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c091}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 655.701943ms ago: executing program 4 (id=1127): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="2896f027", @ANYRES16=0x0, @ANYBLOB="1105000000000000000009000000140003800600070000010000080003"], 0x28}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@timestamp_addr={0x44, 0xc, 0xb, 0x1, 0x0, [{@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendto$inet(r2, &(0x7f00000002c0)="a1c3bbb4294b2079c647dbe26914878f6ed960b3362a6b9f7f3ea51d0b7f517705835951d0ceff08322a57605255eeb2e9f6cc1bc3b08c5bc1fef02a4aff0f8d81cf585bca6238ce5d5456226a2b5d1577fa4fd918ffda36c5f6f594c64897ec39169e99b44d71c89e6a3281f6ba4957f28f011fbda0a97de698ed6880b46326497ba68d331a85b13d23cae519ce5dd24e6087d9e81a719874b7f34a0bf8b71b6dbf2f7b8c9fef09dc", 0xa9, 0x20000000, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast2}, &(0x7f0000000240)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', r5, 0x2f, 0x1, 0x8, 0x1, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x8, 0x9, 0x61f}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$ax25(r0, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}, 0x48) 584.175356ms ago: executing program 0 (id=1128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x24008000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x10000}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfffffffd}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004091}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x2e, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x97, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xc4, r3, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6b}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10020080}, 0x20000800) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000007c0), r7) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xfc, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa30}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf66}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x61a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40040c0}, 0xd4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xdc, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc05}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4ca8e11e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x810}, 0x14) socket$inet(0x2, 0x3, 0x724) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d00)={'ip_vti0\x00', &(0x7f0000000bc0)={'syztnl2\x00', r4, 0x80, 0x80, 0x77, 0x7fffffff, {{0x40, 0x4, 0x3, 0x4, 0x100, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @empty, {[@cipso={0x86, 0xf, 0x3, [{0x0, 0x9, "4ed8180e27e263"}]}, @generic={0x82, 0x8, "45e68530fc77"}, @timestamp_prespec={0x44, 0x2c, 0x89, 0x3, 0x4, [{@multicast2, 0xd}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x1}, {@local, 0x9}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x8}]}, @ssrr={0x89, 0xf, 0xcc, [@private=0xa010101, @local, @multicast1]}, @timestamp_prespec={0x44, 0x3c, 0x16, 0x3, 0x9, [{@local}, {@remote, 0x401}, {@loopback, 0x80000000}, {@private=0xa010100, 0x7}, {@multicast1, 0xc00000}, {@empty, 0x9}, {@remote, 0x9}]}, @timestamp_addr={0x44, 0x54, 0xc3, 0x1, 0x0, [{@local, 0x8}, {@empty, 0x53}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@private=0xa010102, 0x3}, {@rand_addr=0x64010101, 0xff}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xfe3}, {@private=0xa010100, 0x1ff}, {@local, 0x2}, {@multicast1, 0x2490a35e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @lsrr={0x83, 0x7, 0x9b, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}) sendmsg$nl_route_sched(r9, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=@gettfilter={0x2c, 0x2e, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xa, 0xfff2}, {0x9, 0xb}, {0x10, 0xb}}, [{0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000e00), r11) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000e80)=@generic={&(0x7f0000000e40)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000fc0)={@cgroup, 0x22, 0x0, 0x4, &(0x7f0000000ec0)=[0x0], 0x1, 0x0, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001040)='./cgroup/syz1\x00', 0x200002, 0x0) pipe(&(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001000)={@cgroup=r14, r12, 0x16, 0xc, 0x0, @void, @value=r15, @void, @void, r13}, 0x20) socket$inet(0x2, 0x2, 0x9) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000010c0), r16) socket$inet6_mptcp(0xa, 0x1, 0x106) 432.265808ms ago: executing program 4 (id=1129): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0xfffffff8}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000840)=""/235, 0xeb}, {&(0x7f00000006c0)=""/231, 0xe7}, {&(0x7f0000000440)=""/71, 0x47}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000004300)=""/49, 0x31}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x10000}], 0x4, 0x0, 0x0) 110.210434ms ago: executing program 0 (id=1130): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="780000000007010200000000000000000a0000040900010073797a3100000600240007800800014080001fb00800022300006c2a0800024000008d5b0800033400078008000140000000de080002400000009a21f9cda2430928040800014000000008080002400000000508000140fffffffe0e5ba95f2ac701ed37fd508232050000000000"], 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x200448dd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000940)=0x707987cd) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000005c40)=""/4100, 0x1004}, {&(0x7f0000000540)=""/205, 0xcd}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000000480)=""/124, 0x7c}, {&(0x7f0000003c40)=""/4085, 0xff5}, {&(0x7f00000018c0)=""/144, 0x90}], 0x6}, 0x7ffffffe}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) 711.337µs ago: executing program 2 (id=1131): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r0, 0x9, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c0d1}, 0x4014) (fail_nth: 8) 0s ago: executing program 1 (id=1132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2, 0x0, 0x5}, 0x18) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0xfffffffe, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) (async) sendmsg$nl_generic(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x27, 0x800, 0x70bd27, 0x25dfdbfc, {0x12}, [@typed={0x8, 0x17, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x14a, 0x0, 0x0, @u32=0x1}, @nested={0x8, 0xd8, 0x0, 0x1, [@typed={0x4, 0x11e}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2006c055}, 0x20000801) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'syzkaller1\x00', &(0x7f0000000500)=@ethtool_drvinfo={0x3, "d12af006cd174426478ccc39485890d81905f660a043e81e31537849327f27e5", "b2d406f5df4de1dd520cb4c46995e6db4515579fbc9d055c2d1f121aef5616a1", "662a2ab2f58f8657115cc356227f0e2dbc1a961b61e7f5c33066357173b41d1e", "386caf5b8c02a4b9fb6c7f3c20ef13f3dfc2599a5d5aba480d1f5f280ddc1953", "154af4dc4b644090e11f16be8459885d586cb3428a76cedd4784ea48f2a34cf0", "9fe9ad5e70ec5e256a3695bf", 0xe, 0x6, 0x7, 0xb6, 0x90000}}) (rerun: 64) kernel console output (not intermixed with test programs): ] FAULT_INJECTION: forcing a failure. [ 191.316591][ T8468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.330854][ T8468] CPU: 1 UID: 0 PID: 8468 Comm: syz.0.619 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 191.330885][ T8468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.330897][ T8468] Call Trace: [ 191.330904][ T8468] [ 191.330913][ T8468] dump_stack_lvl+0x189/0x250 [ 191.330956][ T8468] ? __pfx____ratelimit+0x10/0x10 [ 191.330980][ T8468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.331010][ T8468] ? __pfx__printk+0x10/0x10 [ 191.331044][ T8468] should_fail_ex+0x414/0x560 [ 191.331075][ T8468] _copy_to_user+0x31/0xb0 [ 191.331097][ T8468] sctp_getsockopt_local_addrs+0xd03/0xef0 [ 191.331131][ T8468] ? __lock_acquire+0xab9/0xd20 [ 191.331164][ T8468] ? __pfx_sctp_getsockopt_local_addrs+0x10/0x10 [ 191.331191][ T8468] ? __local_bh_enable_ip+0x12d/0x1c0 [ 191.331216][ T8468] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.331237][ T8468] ? __local_bh_enable_ip+0x12d/0x1c0 [ 191.331277][ T8468] sctp_getsockopt+0x695/0xb60 [ 191.331299][ T8468] do_sock_getsockopt+0x35d/0x650 [ 191.331332][ T8468] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 191.331362][ T8468] ? do_syscall_64+0xa0/0x3b0 [ 191.331385][ T8468] ? __fget_files+0x3a0/0x420 [ 191.331412][ T8468] ? __fget_files+0x2a/0x420 [ 191.331448][ T8468] __x64_sys_getsockopt+0x1a5/0x250 [ 191.331465][ T8468] ? do_syscall_64+0xa0/0x3b0 [ 191.331490][ T8468] ? do_syscall_64+0xa0/0x3b0 [ 191.331517][ T8468] do_syscall_64+0xfa/0x3b0 [ 191.331540][ T8468] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.331561][ T8468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.331580][ T8468] ? clear_bhb_loop+0x60/0xb0 [ 191.331603][ T8468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.331622][ T8468] RIP: 0033:0x7efc9dd8e969 [ 191.331639][ T8468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.331654][ T8468] RSP: 002b:00007efc9eb15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 191.331672][ T8468] RAX: ffffffffffffffda RBX: 00007efc9dfb5fa0 RCX: 00007efc9dd8e969 [ 191.331685][ T8468] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003 [ 191.331695][ T8468] RBP: 00007efc9eb15090 R08: 00002000000002c0 R09: 0000000000000000 [ 191.331706][ T8468] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 191.331716][ T8468] R13: 0000000000000000 R14: 00007efc9dfb5fa0 R15: 00007ffcce5b6008 [ 191.331743][ T8468] [ 191.713012][ T8470] netlink: 'syz.0.620': attribute type 11 has an invalid length. [ 191.720822][ T8470] netlink: 224 bytes leftover after parsing attributes in process `syz.0.620'. [ 191.764988][ T8471] netlink: 'syz.0.620': attribute type 1 has an invalid length. [ 191.972905][ T12] team0 (unregistering): Port device team_slave_1 removed [ 192.010368][ T12] team0 (unregistering): Port device team_slave_0 removed [ 192.371362][ T8459] netlink: 452 bytes leftover after parsing attributes in process `syz.1.617'. [ 192.718387][ T8411] chnl_net:caif_netlink_parms(): no params data found [ 192.876179][ T8495] FAULT_INJECTION: forcing a failure. [ 192.876179][ T8495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.889600][ T8495] CPU: 0 UID: 0 PID: 8495 Comm: syz.0.629 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 192.889629][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.889643][ T8495] Call Trace: [ 192.889651][ T8495] [ 192.889659][ T8495] dump_stack_lvl+0x189/0x250 [ 192.889698][ T8495] ? __pfx____ratelimit+0x10/0x10 [ 192.889724][ T8495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.889756][ T8495] ? __pfx__printk+0x10/0x10 [ 192.889779][ T8495] ? __might_fault+0xb0/0x130 [ 192.889821][ T8495] should_fail_ex+0x414/0x560 [ 192.889853][ T8495] _copy_from_iter+0x1db/0x16f0 [ 192.889895][ T8495] ? policy_nodemask+0x27c/0x720 [ 192.889925][ T8495] ? __pfx__copy_from_iter+0x10/0x10 [ 192.889962][ T8495] ? set_page_refcounted+0xa0/0x1e0 [ 192.889993][ T8495] ? page_copy_sane+0x4e/0x280 [ 192.890034][ T8495] copy_page_from_iter+0xdd/0x170 [ 192.890070][ T8495] tun_get_user+0x1c4d/0x3ce0 [ 192.890104][ T8495] ? tun_get_user+0x693/0x3ce0 [ 192.890150][ T8495] ? aa_file_perm+0x11f/0xed0 [ 192.890177][ T8495] ? __pfx_tun_get_user+0x10/0x10 [ 192.890205][ T8495] ? aa_file_perm+0x11f/0xed0 [ 192.890230][ T8495] ? aa_file_perm+0x3e7/0xed0 [ 192.890271][ T8495] ? ref_tracker_alloc+0x318/0x460 [ 192.890297][ T8495] ? __lock_acquire+0xab9/0xd20 [ 192.890325][ T8495] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 192.890359][ T8495] ? tun_get+0x1c/0x2f0 [ 192.890395][ T8495] ? tun_get+0x1c/0x2f0 [ 192.890425][ T8495] ? tun_get+0x1c/0x2f0 [ 192.890459][ T8495] tun_chr_write_iter+0x113/0x200 [ 192.890493][ T8495] vfs_write+0x54b/0xa90 [ 192.890525][ T8495] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 192.890555][ T8495] ? __pfx_vfs_write+0x10/0x10 [ 192.890593][ T8495] ? __fget_files+0x2a/0x420 [ 192.890633][ T8495] ksys_write+0x145/0x250 [ 192.890662][ T8495] ? __pfx_ksys_write+0x10/0x10 [ 192.890683][ T8495] ? rcu_is_watching+0x15/0xb0 [ 192.890712][ T8495] ? do_syscall_64+0xbe/0x3b0 [ 192.890738][ T8495] do_syscall_64+0xfa/0x3b0 [ 192.890758][ T8495] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.890779][ T8495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.890796][ T8495] ? clear_bhb_loop+0x60/0xb0 [ 192.890816][ T8495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.890833][ T8495] RIP: 0033:0x7efc9dd8d41f [ 192.890849][ T8495] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 192.890868][ T8495] RSP: 002b:00007efc9eb15000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 192.890889][ T8495] RAX: ffffffffffffffda RBX: 00007efc9dfb5fa0 RCX: 00007efc9dd8d41f [ 192.890904][ T8495] RDX: 0000000000000062 RSI: 0000200000000180 RDI: 00000000000000c8 [ 192.890917][ T8495] RBP: 00007efc9eb15090 R08: 0000000000000000 R09: 0000000000000000 [ 192.890930][ T8495] R10: 0000000000000062 R11: 0000000000000293 R12: 0000000000000001 [ 192.890942][ T8495] R13: 0000000000000000 R14: 00007efc9dfb5fa0 R15: 00007ffcce5b6008 [ 192.890975][ T8495] [ 193.185774][ T5845] Bluetooth: hci2: command tx timeout [ 193.371293][ T8411] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.378512][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.386119][ T8411] bridge_slave_0: entered allmulticast mode [ 193.394938][ T8411] bridge_slave_0: entered promiscuous mode [ 193.405176][ T8411] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.412741][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.420038][ T8411] bridge_slave_1: entered allmulticast mode [ 193.428054][ T8411] bridge_slave_1: entered promiscuous mode [ 193.517793][ T8411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.533515][ T8411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.718029][ T8411] team0: Port device team_slave_0 added [ 193.762195][ T8513] netlink: 'syz.2.634': attribute type 11 has an invalid length. [ 193.780351][ T8513] netlink: 224 bytes leftover after parsing attributes in process `syz.2.634'. [ 193.815853][ T8516] netlink: 'syz.2.634': attribute type 1 has an invalid length. [ 193.860555][ T8411] team0: Port device team_slave_1 added [ 194.109281][ T8525] FAULT_INJECTION: forcing a failure. [ 194.109281][ T8525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.136118][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.150405][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.151138][ T8525] CPU: 1 UID: 0 PID: 8525 Comm: syz.4.638 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 194.151165][ T8525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.151179][ T8525] Call Trace: [ 194.151188][ T8525] [ 194.151197][ T8525] dump_stack_lvl+0x189/0x250 [ 194.151237][ T8525] ? __pfx____ratelimit+0x10/0x10 [ 194.151263][ T8525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.151296][ T8525] ? __pfx__printk+0x10/0x10 [ 194.151333][ T8525] should_fail_ex+0x414/0x560 [ 194.151367][ T8525] _copy_to_user+0x31/0xb0 [ 194.151390][ T8525] bpf_test_finish+0x56f/0x700 [ 194.151432][ T8525] ? __pfx_bpf_test_finish+0x10/0x10 [ 194.151477][ T8525] bpf_prog_test_run_skb+0xed5/0x1560 [ 194.151528][ T8525] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 194.151559][ T8525] bpf_prog_test_run+0x2c4/0x340 [ 194.151592][ T8525] __sys_bpf+0x4a4/0x860 [ 194.151621][ T8525] ? __pfx___sys_bpf+0x10/0x10 [ 194.151660][ T8525] ? ksys_write+0x22a/0x250 [ 194.151691][ T8525] ? __pfx_ksys_write+0x10/0x10 [ 194.151714][ T8525] ? rcu_is_watching+0x15/0xb0 [ 194.151752][ T8525] __x64_sys_bpf+0x7c/0x90 [ 194.151776][ T8525] do_syscall_64+0xfa/0x3b0 [ 194.151803][ T8525] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.151827][ T8525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.151847][ T8525] ? clear_bhb_loop+0x60/0xb0 [ 194.151873][ T8525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.151893][ T8525] RIP: 0033:0x7fc61df8e969 [ 194.151911][ T8525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.151930][ T8525] RSP: 002b:00007fc61ed75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.151953][ T8525] RAX: ffffffffffffffda RBX: 00007fc61e1b5fa0 RCX: 00007fc61df8e969 [ 194.151970][ T8525] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 194.151989][ T8525] RBP: 00007fc61ed75090 R08: 0000000000000000 R09: 0000000000000000 [ 194.152003][ T8525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.152015][ T8525] R13: 0000000000000000 R14: 00007fc61e1b5fa0 R15: 00007ffc8380cf58 [ 194.152048][ T8525] [ 194.387410][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.401857][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.403132][ T8532] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20004 [ 194.504897][ T8411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.580768][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.614623][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.650475][ T8411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.695264][ T8545] FAULT_INJECTION: forcing a failure. [ 194.695264][ T8545] name failslab, interval 1, probability 0, space 0, times 0 [ 194.728645][ T8545] CPU: 1 UID: 0 PID: 8545 Comm: syz.4.646 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 194.728677][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.728692][ T8545] Call Trace: [ 194.728700][ T8545] [ 194.728711][ T8545] dump_stack_lvl+0x189/0x250 [ 194.728750][ T8545] ? __pfx____ratelimit+0x10/0x10 [ 194.728778][ T8545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.728816][ T8545] ? __pfx__printk+0x10/0x10 [ 194.728857][ T8545] should_fail_ex+0x414/0x560 [ 194.728892][ T8545] should_failslab+0xa8/0x100 [ 194.728926][ T8545] kmem_cache_alloc_noprof+0x73/0x3c0 [ 194.728964][ T8545] ? skb_clone+0x212/0x3a0 [ 194.728994][ T8545] skb_clone+0x212/0x3a0 [ 194.729022][ T8545] __netlink_deliver_tap+0x404/0x850 [ 194.729071][ T8545] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.729106][ T8545] netlink_deliver_tap+0x19c/0x1b0 [ 194.729141][ T8545] netlink_sendskb+0x68/0x140 [ 194.729174][ T8545] netlink_rcv_skb+0x28c/0x470 [ 194.729207][ T8545] ? __pfx_genl_rcv_msg+0x10/0x10 [ 194.729236][ T8545] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 194.729290][ T8545] ? down_read+0x1ad/0x2e0 [ 194.729322][ T8545] genl_rcv+0x28/0x40 [ 194.729345][ T8545] netlink_unicast+0x758/0x8d0 [ 194.729388][ T8545] netlink_sendmsg+0x805/0xb30 [ 194.729421][ T8545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.729445][ T8545] ? aa_sock_msg_perm+0x94/0x160 [ 194.729487][ T8545] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.729511][ T8545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.729530][ T8545] __sock_sendmsg+0x219/0x270 [ 194.729558][ T8545] ____sys_sendmsg+0x505/0x830 [ 194.729585][ T8545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.729614][ T8545] ? import_iovec+0x74/0xa0 [ 194.729638][ T8545] ___sys_sendmsg+0x21f/0x2a0 [ 194.729660][ T8545] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.729719][ T8545] ? __fget_files+0x2a/0x420 [ 194.729748][ T8545] ? __fget_files+0x3a0/0x420 [ 194.729790][ T8545] __x64_sys_sendmsg+0x19b/0x260 [ 194.729811][ T8545] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.729841][ T8545] ? __pfx_ksys_write+0x10/0x10 [ 194.729864][ T8545] ? rcu_is_watching+0x15/0xb0 [ 194.729897][ T8545] ? do_syscall_64+0xbe/0x3b0 [ 194.729926][ T8545] do_syscall_64+0xfa/0x3b0 [ 194.729957][ T8545] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.729980][ T8545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.729999][ T8545] ? clear_bhb_loop+0x60/0xb0 [ 194.730023][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.730042][ T8545] RIP: 0033:0x7fc61df8e969 [ 194.730059][ T8545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.730077][ T8545] RSP: 002b:00007fc61ed75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.730098][ T8545] RAX: ffffffffffffffda RBX: 00007fc61e1b5fa0 RCX: 00007fc61df8e969 [ 194.730112][ T8545] RDX: 0000000000008810 RSI: 0000200000000300 RDI: 0000000000000003 [ 194.730125][ T8545] RBP: 00007fc61ed75090 R08: 0000000000000000 R09: 0000000000000000 [ 194.730137][ T8545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.730149][ T8545] R13: 0000000000000000 R14: 00007fc61e1b5fa0 R15: 00007ffc8380cf58 [ 194.730180][ T8545] [ 195.231212][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 195.234188][ T8411] hsr_slave_0: entered promiscuous mode [ 195.240121][ T5845] Bluetooth: hci2: command tx timeout [ 195.246848][ T8411] hsr_slave_1: entered promiscuous mode [ 195.258239][ T8411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.266537][ T8411] Cannot create hsr debugfs directory [ 195.433875][ T8564] netlink: 'syz.4.653': attribute type 11 has an invalid length. [ 195.470547][ T8564] netlink: 224 bytes leftover after parsing attributes in process `syz.4.653'. [ 195.497198][ T8567] netlink: 'syz.4.653': attribute type 1 has an invalid length. [ 195.516253][ T8567] netlink: 'syz.4.653': attribute type 1 has an invalid length. [ 195.694163][ T8573] FAULT_INJECTION: forcing a failure. [ 195.694163][ T8573] name failslab, interval 1, probability 0, space 0, times 0 [ 195.737951][ T8573] CPU: 0 UID: 0 PID: 8573 Comm: syz.1.656 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 195.737977][ T8573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.737989][ T8573] Call Trace: [ 195.737995][ T8573] [ 195.738004][ T8573] dump_stack_lvl+0x189/0x250 [ 195.738038][ T8573] ? __pfx____ratelimit+0x10/0x10 [ 195.738061][ T8573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.738088][ T8573] ? __pfx__printk+0x10/0x10 [ 195.738110][ T8573] ? __pfx___might_resched+0x10/0x10 [ 195.738138][ T8573] ? fs_reclaim_acquire+0x7d/0x100 [ 195.738165][ T8573] should_fail_ex+0x414/0x560 [ 195.738196][ T8573] should_failslab+0xa8/0x100 [ 195.738228][ T8573] __kmalloc_noprof+0xcb/0x4f0 [ 195.738273][ T8573] ? tomoyo_encode+0x28b/0x550 [ 195.738308][ T8573] tomoyo_encode+0x28b/0x550 [ 195.738344][ T8573] tomoyo_realpath_from_path+0x58d/0x5d0 [ 195.738376][ T8573] ? tomoyo_domain+0xd9/0x130 [ 195.738414][ T8573] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 195.738440][ T8573] tomoyo_path_number_perm+0x1e8/0x5a0 [ 195.738468][ T8573] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 195.738513][ T8573] ? __lock_acquire+0xab9/0xd20 [ 195.738564][ T8573] ? __fget_files+0x2a/0x420 [ 195.738600][ T8573] ? __fget_files+0x2a/0x420 [ 195.738630][ T8573] ? __fget_files+0x3a0/0x420 [ 195.738656][ T8573] ? __fget_files+0x2a/0x420 [ 195.738692][ T8573] security_file_ioctl+0xcb/0x2d0 [ 195.738717][ T8573] __se_sys_ioctl+0x47/0x170 [ 195.738747][ T8573] do_syscall_64+0xfa/0x3b0 [ 195.738773][ T8573] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.738798][ T8573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.738818][ T8573] ? clear_bhb_loop+0x60/0xb0 [ 195.738844][ T8573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.738873][ T8573] RIP: 0033:0x7fb9aff8e969 [ 195.738891][ T8573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.738910][ T8573] RSP: 002b:00007fb9b0eb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.738933][ T8573] RAX: ffffffffffffffda RBX: 00007fb9b01b5fa0 RCX: 00007fb9aff8e969 [ 195.738949][ T8573] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000007 [ 195.738963][ T8573] RBP: 00007fb9b0eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 195.738976][ T8573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.738989][ T8573] R13: 0000000000000000 R14: 00007fb9b01b5fa0 R15: 00007ffcb6b52298 [ 195.739023][ T8573] [ 195.739046][ T8573] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.036551][ T8580] Bluetooth: MGMT ver 1.23 [ 196.074795][ T8576] Cannot find add_set index 0 as target [ 196.206267][ T8588] tipc: Started in network mode [ 196.212588][ T8588] tipc: Node identity ac14142a, cluster identity 4711 [ 196.220295][ T8588] tipc: New replicast peer: 255.255.255.255 [ 196.229342][ T8588] tipc: Enabled bearer , priority 10 [ 196.243053][ T8590] xt_ecn: cannot match TCP bits for non-tcp packets [ 196.356433][ T8594] netlink: 22 bytes leftover after parsing attributes in process `syz.2.661'. [ 196.627583][ T8411] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 196.664451][ T8411] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 196.667139][ T8609] netlink: 'syz.1.669': attribute type 11 has an invalid length. [ 196.681706][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.668'. [ 196.692821][ T8613] FAULT_INJECTION: forcing a failure. [ 196.692821][ T8613] name failslab, interval 1, probability 0, space 0, times 0 [ 196.714369][ T8609] netlink: 224 bytes leftover after parsing attributes in process `syz.1.669'. [ 196.725906][ T8613] CPU: 0 UID: 0 PID: 8613 Comm: syz.2.670 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 196.725935][ T8613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.725948][ T8613] Call Trace: [ 196.725957][ T8613] [ 196.725966][ T8613] dump_stack_lvl+0x189/0x250 [ 196.726002][ T8613] ? __pfx____ratelimit+0x10/0x10 [ 196.726027][ T8613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.726059][ T8613] ? __pfx__printk+0x10/0x10 [ 196.726084][ T8613] ? __pfx___might_resched+0x10/0x10 [ 196.726115][ T8613] ? fs_reclaim_acquire+0x7d/0x100 [ 196.726142][ T8613] should_fail_ex+0x414/0x560 [ 196.726174][ T8613] ? nf_hook_entries_grow+0x27c/0x710 [ 196.726203][ T8613] should_failslab+0xa8/0x100 [ 196.726235][ T8613] __kvmalloc_node_noprof+0x168/0x600 [ 196.726268][ T8613] ? nf_hook_entries_grow+0x27c/0x710 [ 196.726296][ T8613] ? __pfx___mutex_lock+0x10/0x10 [ 196.726327][ T8613] nf_hook_entries_grow+0x27c/0x710 [ 196.726375][ T8613] __nf_register_net_hook+0x2c9/0x930 [ 196.726419][ T8613] nf_register_net_hook+0xb2/0x190 [ 196.726453][ T8613] nf_register_net_hooks+0x44/0x1b0 [ 196.726488][ T8613] nf_defrag_ipv4_enable+0x87/0x120 [ 196.726518][ T8613] nf_ct_netns_do_get+0x18c/0x5a0 [ 196.726553][ T8613] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 196.726589][ T8613] ? nft_validate_register_store+0x188/0x1d0 [ 196.726625][ T8613] ? nft_parse_register_store+0x239/0x2c0 [ 196.726661][ T8613] nft_ct_get_init+0x5a4/0x8c0 [ 196.726689][ T8613] nf_tables_newrule+0x178c/0x2890 [ 196.726731][ T8613] ? __pfx_nf_tables_newrule+0x10/0x10 [ 196.726756][ T8613] ? nfnl_pernet+0x23/0x240 [ 196.726792][ T8613] ? __nla_parse+0x40/0x60 [ 196.726834][ T8613] nfnetlink_rcv+0x1132/0x2520 [ 196.726898][ T8613] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 196.726944][ T8613] ? ref_tracker_free+0x63a/0x7d0 [ 196.727009][ T8613] ? __netlink_deliver_tap+0x807/0x850 [ 196.727063][ T8613] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.727091][ T8613] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.727127][ T8613] netlink_unicast+0x758/0x8d0 [ 196.727167][ T8613] netlink_sendmsg+0x805/0xb30 [ 196.727195][ T8613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.727214][ T8613] ? aa_sock_msg_perm+0x94/0x160 [ 196.727237][ T8613] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.727258][ T8613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.727277][ T8613] __sock_sendmsg+0x219/0x270 [ 196.727323][ T8613] ____sys_sendmsg+0x505/0x830 [ 196.727351][ T8613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.727383][ T8613] ? import_iovec+0x74/0xa0 [ 196.727410][ T8613] ___sys_sendmsg+0x21f/0x2a0 [ 196.727434][ T8613] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.727499][ T8613] ? __fget_files+0x2a/0x420 [ 196.727529][ T8613] ? __fget_files+0x3a0/0x420 [ 196.727571][ T8613] __x64_sys_sendmsg+0x19b/0x260 [ 196.727595][ T8613] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.727626][ T8613] ? __pfx_ksys_write+0x10/0x10 [ 196.727650][ T8613] ? rcu_is_watching+0x15/0xb0 [ 196.727686][ T8613] ? do_syscall_64+0xbe/0x3b0 [ 196.727718][ T8613] do_syscall_64+0xfa/0x3b0 [ 196.727743][ T8613] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.727766][ T8613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.727786][ T8613] ? clear_bhb_loop+0x60/0xb0 [ 196.727812][ T8613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.727840][ T8613] RIP: 0033:0x7fc6d038e969 [ 196.727858][ T8613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.727876][ T8613] RSP: 002b:00007fc6ce1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.727898][ T8613] RAX: ffffffffffffffda RBX: 00007fc6d05b5fa0 RCX: 00007fc6d038e969 [ 196.727914][ T8613] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 196.727927][ T8613] RBP: 00007fc6ce1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 196.727939][ T8613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.727951][ T8613] R13: 0000000000000000 R14: 00007fc6d05b5fa0 R15: 00007ffc281f4dc8 [ 196.727987][ T8613] [ 196.730054][ T8411] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 196.775219][ T8614] netlink: 'syz.1.669': attribute type 1 has an invalid length. [ 197.150017][ T8411] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 197.179062][ T8618] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 197.311821][ T5845] Bluetooth: hci2: command tx timeout [ 197.351301][ T5939] tipc: Node number set to 2886997034 [ 197.381895][ T8411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.407734][ T8411] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.584693][ T8633] netlink: 11 bytes leftover after parsing attributes in process `syz.0.676'. [ 197.654145][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.661412][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.702912][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.710155][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.827903][ T8639] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 198.056650][ T8411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.240285][ T8411] veth0_vlan: entered promiscuous mode [ 198.302770][ T8411] veth1_vlan: entered promiscuous mode [ 198.416402][ T8411] veth0_macvtap: entered promiscuous mode [ 198.429375][ T8411] veth1_macvtap: entered promiscuous mode [ 198.454318][ T8411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.467502][ T8411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.489146][ T8411] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.498334][ T8411] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.508824][ T8411] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.519079][ T8411] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.757196][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.783750][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.999505][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.035264][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.364471][ T8694] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 199.458730][ T8689] IPVS: Scheduler module ip_vs_sip not found [ 199.593079][ T8704] netlink: 48 bytes leftover after parsing attributes in process `syz.0.702'. [ 199.604509][ T8704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.612084][ T8704] IPv6: NLM_F_CREATE should be set when creating new route [ 199.622064][ T8704] netlink: 36 bytes leftover after parsing attributes in process `syz.0.702'. [ 199.944983][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.111510][ T5845] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 200.417351][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.783023][ T8719] FAULT_INJECTION: forcing a failure. [ 200.783023][ T8719] name failslab, interval 1, probability 0, space 0, times 0 [ 200.784214][ T8718] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 200.841111][ T8719] CPU: 0 UID: 0 PID: 8719 Comm: syz.0.705 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 200.841144][ T8719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.841156][ T8719] Call Trace: [ 200.841163][ T8719] [ 200.841171][ T8719] dump_stack_lvl+0x189/0x250 [ 200.841208][ T8719] ? __pfx____ratelimit+0x10/0x10 [ 200.841232][ T8719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.841262][ T8719] ? __pfx__printk+0x10/0x10 [ 200.841289][ T8719] ? __pfx___might_resched+0x10/0x10 [ 200.841316][ T8719] ? fs_reclaim_acquire+0x7d/0x100 [ 200.841355][ T8719] should_fail_ex+0x414/0x560 [ 200.841386][ T8719] should_failslab+0xa8/0x100 [ 200.841416][ T8719] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 200.841445][ T8719] ? __alloc_skb+0x112/0x2d0 [ 200.841478][ T8719] __alloc_skb+0x112/0x2d0 [ 200.841510][ T8719] netlink_ack+0x146/0xa50 [ 200.841538][ T8719] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.841563][ T8719] ? ref_tracker_free+0x63a/0x7d0 [ 200.841588][ T8719] ? __copy_skb_header+0xa7/0x550 [ 200.841610][ T8719] ? __pfx_ref_tracker_free+0x10/0x10 [ 200.841636][ T8719] ? __skb_clone+0x63/0x7a0 [ 200.841663][ T8719] netlink_rcv_skb+0x28c/0x470 [ 200.841693][ T8719] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.841722][ T8719] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.841764][ T8719] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.841793][ T8719] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.841829][ T8719] netlink_unicast+0x758/0x8d0 [ 200.841867][ T8719] netlink_sendmsg+0x805/0xb30 [ 200.841894][ T8719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.841916][ T8719] ? aa_sock_msg_perm+0x94/0x160 [ 200.841942][ T8719] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.841965][ T8719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.841983][ T8719] __sock_sendmsg+0x219/0x270 [ 200.842012][ T8719] ____sys_sendmsg+0x505/0x830 [ 200.842036][ T8719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.842065][ T8719] ? import_iovec+0x74/0xa0 [ 200.842089][ T8719] ___sys_sendmsg+0x21f/0x2a0 [ 200.842110][ T8719] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.842166][ T8719] ? __fget_files+0x2a/0x420 [ 200.842194][ T8719] ? __fget_files+0x3a0/0x420 [ 200.842233][ T8719] __x64_sys_sendmsg+0x19b/0x260 [ 200.842256][ T8719] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.842285][ T8719] ? __pfx_ksys_write+0x10/0x10 [ 200.842315][ T8719] ? do_syscall_64+0xbe/0x3b0 [ 200.842349][ T8719] do_syscall_64+0xfa/0x3b0 [ 200.842372][ T8719] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.842394][ T8719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.842413][ T8719] ? clear_bhb_loop+0x60/0xb0 [ 200.842434][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.842452][ T8719] RIP: 0033:0x7efc9dd8e969 [ 200.842468][ T8719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.842484][ T8719] RSP: 002b:00007efc9eb15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.842504][ T8719] RAX: ffffffffffffffda RBX: 00007efc9dfb5fa0 RCX: 00007efc9dd8e969 [ 200.842517][ T8719] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 200.842528][ T8719] RBP: 00007efc9eb15090 R08: 0000000000000000 R09: 0000000000000000 [ 200.842539][ T8719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.842550][ T8719] R13: 0000000000000000 R14: 00007efc9dfb5fa0 R15: 00007ffcce5b6008 [ 200.842579][ T8719] [ 201.303735][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.364549][ T8722] netlink: 22 bytes leftover after parsing attributes in process `syz.4.708'. [ 201.512652][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.578383][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 201.594883][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 201.604378][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 201.614348][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 201.622793][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.716418][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 201.759649][ T64] bridge_slave_1: left allmulticast mode [ 201.765643][ T64] bridge_slave_1: left promiscuous mode [ 201.771760][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.792033][ T64] bridge_slave_0: left allmulticast mode [ 201.797769][ T64] bridge_slave_0: left promiscuous mode [ 201.803769][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.137805][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.716'. [ 202.334633][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.355555][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.367695][ T64] bond0 (unregistering): Released all slaves [ 202.399326][ T8757] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 3, id = 0 [ 202.590184][ T8765] FAULT_INJECTION: forcing a failure. [ 202.590184][ T8765] name failslab, interval 1, probability 0, space 0, times 0 [ 202.609285][ T8765] CPU: 1 UID: 0 PID: 8765 Comm: syz.2.722 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 202.609317][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.609330][ T8765] Call Trace: [ 202.609338][ T8765] [ 202.609347][ T8765] dump_stack_lvl+0x189/0x250 [ 202.609387][ T8765] ? __pfx____ratelimit+0x10/0x10 [ 202.609413][ T8765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.609466][ T8765] ? __pfx__printk+0x10/0x10 [ 202.609484][ T8765] ? mptcp_diag_dump+0x1067/0x1310 [ 202.609526][ T8765] should_fail_ex+0x414/0x560 [ 202.609558][ T8765] should_failslab+0xa8/0x100 [ 202.609591][ T8765] kmem_cache_alloc_noprof+0x73/0x3c0 [ 202.609619][ T8765] ? skb_clone+0x212/0x3a0 [ 202.609645][ T8765] skb_clone+0x212/0x3a0 [ 202.609670][ T8765] __netlink_deliver_tap+0x404/0x850 [ 202.609717][ T8765] ? netlink_deliver_tap+0x2e/0x1b0 [ 202.609750][ T8765] netlink_deliver_tap+0x19c/0x1b0 [ 202.609784][ T8765] netlink_dump+0x8e4/0xe20 [ 202.609828][ T8765] ? __pfx_netlink_dump+0x10/0x10 [ 202.609874][ T8765] ? __inet_diag_dump_start+0x89a/0xa10 [ 202.609903][ T8765] ? netlink_lookup+0x30/0x200 [ 202.609939][ T8765] __netlink_dump_start+0x5cb/0x7e0 [ 202.609979][ T8765] inet_diag_rcv_msg_compat+0x1ea/0x3b0 [ 202.610012][ T8765] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 202.610051][ T8765] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 202.610077][ T8765] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 202.610102][ T8765] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 202.610136][ T8765] ? sock_diag_rcv_msg+0x188/0x600 [ 202.610167][ T8765] sock_diag_rcv_msg+0x4c9/0x600 [ 202.610200][ T8765] netlink_rcv_skb+0x205/0x470 [ 202.610231][ T8765] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 202.610261][ T8765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 202.610312][ T8765] ? netlink_deliver_tap+0x2e/0x1b0 [ 202.610342][ T8765] ? netlink_deliver_tap+0x2e/0x1b0 [ 202.610380][ T8765] netlink_unicast+0x758/0x8d0 [ 202.610421][ T8765] netlink_sendmsg+0x805/0xb30 [ 202.610458][ T8765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.610481][ T8765] ? aa_sock_msg_perm+0x94/0x160 [ 202.610508][ T8765] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 202.610531][ T8765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.610549][ T8765] __sock_sendmsg+0x219/0x270 [ 202.610575][ T8765] ____sys_sendmsg+0x505/0x830 [ 202.610600][ T8765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.610631][ T8765] ? import_iovec+0x74/0xa0 [ 202.610655][ T8765] ___sys_sendmsg+0x21f/0x2a0 [ 202.610679][ T8765] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.610739][ T8765] ? __fget_files+0x2a/0x420 [ 202.610770][ T8765] ? __fget_files+0x3a0/0x420 [ 202.610812][ T8765] __x64_sys_sendmsg+0x19b/0x260 [ 202.610837][ T8765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.610868][ T8765] ? __pfx_ksys_write+0x10/0x10 [ 202.610891][ T8765] ? rcu_is_watching+0x15/0xb0 [ 202.610927][ T8765] ? do_syscall_64+0xbe/0x3b0 [ 202.610957][ T8765] do_syscall_64+0xfa/0x3b0 [ 202.610982][ T8765] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.611006][ T8765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.611025][ T8765] ? clear_bhb_loop+0x60/0xb0 [ 202.611051][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.611071][ T8765] RIP: 0033:0x7fc6d038e969 [ 202.611090][ T8765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.611109][ T8765] RSP: 002b:00007fc6ce1d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.611132][ T8765] RAX: ffffffffffffffda RBX: 00007fc6d05b6080 RCX: 00007fc6d038e969 [ 202.611147][ T8765] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 202.611161][ T8765] RBP: 00007fc6ce1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 202.611174][ T8765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.611186][ T8765] R13: 0000000000000000 R14: 00007fc6d05b6080 R15: 00007ffc281f4dc8 [ 202.611221][ T8765] [ 203.134442][ T8738] chnl_net:caif_netlink_parms(): no params data found [ 203.190824][ T8775] netlink: 22 bytes leftover after parsing attributes in process `syz.4.723'. [ 203.345574][ T8776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.724'. [ 203.416754][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 203.467245][ T8774] x_tables: duplicate underflow at hook 1 [ 203.504784][ T8738] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.527436][ T8738] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.536318][ T8738] bridge_slave_0: entered allmulticast mode [ 203.555384][ T8738] bridge_slave_0: entered promiscuous mode [ 203.568033][ T8738] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.591595][ T8738] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.612263][ T8738] bridge_slave_1: entered allmulticast mode [ 203.629767][ T8738] bridge_slave_1: entered promiscuous mode [ 203.709744][ T64] hsr_slave_0: left promiscuous mode [ 203.712661][ T5845] Bluetooth: hci2: command tx timeout [ 203.765757][ T64] hsr_slave_1: left promiscuous mode [ 203.782244][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.789707][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.846288][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.861260][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.899432][ T64] veth1_macvtap: left promiscuous mode [ 203.907573][ T64] veth0_macvtap: left promiscuous mode [ 203.913866][ T64] veth1_vlan: left promiscuous mode [ 203.919278][ T64] veth0_vlan: left promiscuous mode [ 204.391137][ T64] team0 (unregistering): Port device team_slave_1 removed [ 204.433039][ T64] team0 (unregistering): Port device team_slave_0 removed [ 204.811679][ T8798] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 204.966648][ T8738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.013273][ T8738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.060609][ T8820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.736'. [ 205.186483][ T8738] team0: Port device team_slave_0 added [ 205.217156][ T8738] team0: Port device team_slave_1 added [ 205.287606][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 205.309787][ T8826] netlink: 22 bytes leftover after parsing attributes in process `syz.2.738'. [ 205.396069][ T8738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.415455][ T8738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.464587][ T8836] netlink: 104 bytes leftover after parsing attributes in process `syz.0.742'. [ 205.488984][ T8738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.542203][ T8738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.549211][ T8738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.608291][ T8738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.704502][ T8738] hsr_slave_0: entered promiscuous mode [ 205.720276][ T8738] hsr_slave_1: entered promiscuous mode [ 205.738998][ T8738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.753984][ T8738] Cannot create hsr debugfs directory [ 205.762735][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'. [ 205.791218][ T5845] Bluetooth: hci2: command tx timeout [ 206.276860][ T8866] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.753'. [ 206.286295][ T8866] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 206.335557][ T8872] x_tables: duplicate underflow at hook 1 [ 206.455112][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.755'. [ 207.619235][ T8911] netlink: 'syz.0.764': attribute type 1 has an invalid length. [ 207.652485][ T8917] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.673482][ T8911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.871249][ T5845] Bluetooth: hci2: command tx timeout [ 208.636801][ T8946] __nla_validate_parse: 1 callbacks suppressed [ 208.636825][ T8946] netlink: 22 bytes leftover after parsing attributes in process `syz.4.770'. [ 208.912728][ T8738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 208.955733][ T8738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.998182][ T8738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 209.043960][ T8738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 209.416089][ T8970] syz.1.777 (8970) used greatest stack depth: 17992 bytes left [ 209.649722][ T8738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.781199][ T8984] netlink: 68 bytes leftover after parsing attributes in process `syz.2.781'. [ 209.925872][ T8738] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.955530][ T5845] Bluetooth: hci2: command tx timeout [ 210.031407][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.038618][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.083727][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.090985][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.179674][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.783'. [ 210.231139][ T8990] tipc: Started in network mode [ 210.236043][ T8990] tipc: Node identity 000000000063d6f27a775af94e000001, cluster identity 229 [ 210.252042][ T8990] tipc: Enabling of bearer rejected, failed to enable media [ 210.518747][ T8998] nft_compat: unsupported protocol 0 [ 210.545132][ T8998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.552475][ T8998] IPv6: NLM_F_CREATE should be set when creating new route [ 210.559900][ T8998] IPv6: NLM_F_CREATE should be set when creating new route [ 210.634756][ T9005] FAULT_INJECTION: forcing a failure. [ 210.634756][ T9005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.669399][ T9005] CPU: 0 UID: 0 PID: 9005 Comm: syz.1.788 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 210.669444][ T9005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.669458][ T9005] Call Trace: [ 210.669466][ T9005] [ 210.669476][ T9005] dump_stack_lvl+0x189/0x250 [ 210.669515][ T9005] ? __pfx____ratelimit+0x10/0x10 [ 210.669542][ T9005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.669575][ T9005] ? __pfx__printk+0x10/0x10 [ 210.669598][ T9005] ? __might_fault+0xb0/0x130 [ 210.669642][ T9005] should_fail_ex+0x414/0x560 [ 210.669676][ T9005] _copy_from_user+0x2d/0xb0 [ 210.669699][ T9005] kstrtouint_from_user+0xc4/0x170 [ 210.669731][ T9005] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 210.669781][ T9005] proc_fail_nth_write+0x88/0x240 [ 210.669803][ T9005] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 210.669831][ T9005] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 210.669855][ T9005] vfs_write+0x27e/0xa90 [ 210.669893][ T9005] ? __pfx_vfs_write+0x10/0x10 [ 210.669922][ T9005] ? __fget_files+0x2a/0x420 [ 210.669960][ T9005] ? __fget_files+0x3a0/0x420 [ 210.670019][ T9005] ? __fget_files+0x2a/0x420 [ 210.670062][ T9005] ksys_write+0x145/0x250 [ 210.670094][ T9005] ? __pfx_ksys_write+0x10/0x10 [ 210.670120][ T9005] ? rcu_is_watching+0x15/0xb0 [ 210.670157][ T9005] ? do_syscall_64+0xbe/0x3b0 [ 210.670189][ T9005] do_syscall_64+0xfa/0x3b0 [ 210.670216][ T9005] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.670241][ T9005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.670263][ T9005] ? clear_bhb_loop+0x60/0xb0 [ 210.670290][ T9005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.670312][ T9005] RIP: 0033:0x7fb9aff8d41f [ 210.670331][ T9005] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 210.670351][ T9005] RSP: 002b:00007fb9b0eb5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 210.670373][ T9005] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb9aff8d41f [ 210.670389][ T9005] RDX: 0000000000000001 RSI: 00007fb9b0eb50a0 RDI: 0000000000000004 [ 210.670403][ T9005] RBP: 00007fb9b0eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 210.670415][ T9005] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 210.670428][ T9005] R13: 0000000000000000 R14: 00007fb9b01b5fa0 R15: 00007ffcb6b52298 [ 210.670464][ T9005] [ 211.006637][ T9010] netlink: 22 bytes leftover after parsing attributes in process `syz.2.789'. [ 211.087949][ T9013] FAULT_INJECTION: forcing a failure. [ 211.087949][ T9013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.159609][ T9013] CPU: 1 UID: 0 PID: 9013 Comm: syz.0.790 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 211.159640][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.159653][ T9013] Call Trace: [ 211.159662][ T9013] [ 211.159671][ T9013] dump_stack_lvl+0x189/0x250 [ 211.159714][ T9013] ? __pfx____ratelimit+0x10/0x10 [ 211.159740][ T9013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.159771][ T9013] ? __pfx__printk+0x10/0x10 [ 211.159807][ T9013] should_fail_ex+0x414/0x560 [ 211.159839][ T9013] _copy_to_user+0x31/0xb0 [ 211.159862][ T9013] bpf_test_finish+0x1ab/0x700 [ 211.159904][ T9013] ? __pfx_bpf_test_finish+0x10/0x10 [ 211.159942][ T9013] ? bpf_test_init+0x133/0x170 [ 211.159983][ T9013] bpf_prog_test_run_xdp+0x79a/0x1000 [ 211.160034][ T9013] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 211.160071][ T9013] ? __fget_files+0x2a/0x420 [ 211.160108][ T9013] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 211.160141][ T9013] bpf_prog_test_run+0x2c4/0x340 [ 211.160173][ T9013] __sys_bpf+0x4a4/0x860 [ 211.160201][ T9013] ? __pfx___sys_bpf+0x10/0x10 [ 211.160240][ T9013] ? ksys_write+0x22a/0x250 [ 211.160270][ T9013] ? __pfx_ksys_write+0x10/0x10 [ 211.160293][ T9013] ? rcu_is_watching+0x15/0xb0 [ 211.160332][ T9013] __x64_sys_bpf+0x7c/0x90 [ 211.160356][ T9013] do_syscall_64+0xfa/0x3b0 [ 211.160380][ T9013] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.160404][ T9013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.160425][ T9013] ? clear_bhb_loop+0x60/0xb0 [ 211.160450][ T9013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.160469][ T9013] RIP: 0033:0x7efc9dd8e969 [ 211.160488][ T9013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.160506][ T9013] RSP: 002b:00007efc9eb15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.160528][ T9013] RAX: ffffffffffffffda RBX: 00007efc9dfb5fa0 RCX: 00007efc9dd8e969 [ 211.160543][ T9013] RDX: 0000000000000023 RSI: 0000200000000280 RDI: 000000000000000a [ 211.160556][ T9013] RBP: 00007efc9eb15090 R08: 0000000000000000 R09: 0000000000000000 [ 211.160569][ T9013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.160581][ T9013] R13: 0000000000000000 R14: 00007efc9dfb5fa0 R15: 00007ffcce5b6008 [ 211.160613][ T9013] [ 211.181244][ T8738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.430848][ T9017] netlink: 'syz.1.792': attribute type 3 has an invalid length. [ 211.482432][ T9020] FAULT_INJECTION: forcing a failure. [ 211.482432][ T9020] name failslab, interval 1, probability 0, space 0, times 0 [ 211.521905][ T9020] CPU: 0 UID: 0 PID: 9020 Comm: syz.2.793 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 211.521936][ T9020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.521949][ T9020] Call Trace: [ 211.521957][ T9020] [ 211.521966][ T9020] dump_stack_lvl+0x189/0x250 [ 211.522004][ T9020] ? __pfx____ratelimit+0x10/0x10 [ 211.522030][ T9020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.522061][ T9020] ? __pfx__printk+0x10/0x10 [ 211.522090][ T9020] ? __pfx___might_resched+0x10/0x10 [ 211.522119][ T9020] ? fs_reclaim_acquire+0x7d/0x100 [ 211.522146][ T9020] should_fail_ex+0x414/0x560 [ 211.522177][ T9020] should_failslab+0xa8/0x100 [ 211.522210][ T9020] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 211.522240][ T9020] ? __alloc_skb+0x112/0x2d0 [ 211.522272][ T9020] __alloc_skb+0x112/0x2d0 [ 211.522305][ T9020] netlink_ack+0x146/0xa50 [ 211.522333][ T9020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.522354][ T9020] ? ref_tracker_free+0x63a/0x7d0 [ 211.522382][ T9020] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 211.522405][ T9020] ? __pfx_nl80211_post_doit+0x10/0x10 [ 211.522428][ T9020] ? __pfx_ref_tracker_free+0x10/0x10 [ 211.522469][ T9020] netlink_rcv_skb+0x28c/0x470 [ 211.522502][ T9020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.522528][ T9020] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.522578][ T9020] ? down_read+0x1ad/0x2e0 [ 211.522610][ T9020] genl_rcv+0x28/0x40 [ 211.522631][ T9020] netlink_unicast+0x758/0x8d0 [ 211.522673][ T9020] netlink_sendmsg+0x805/0xb30 [ 211.522703][ T9020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.522727][ T9020] ? aa_sock_msg_perm+0x94/0x160 [ 211.522754][ T9020] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.522790][ T9020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.522810][ T9020] __sock_sendmsg+0x219/0x270 [ 211.522840][ T9020] ____sys_sendmsg+0x505/0x830 [ 211.522867][ T9020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.522903][ T9020] ? import_iovec+0x74/0xa0 [ 211.522927][ T9020] ___sys_sendmsg+0x21f/0x2a0 [ 211.522951][ T9020] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.523014][ T9020] ? __fget_files+0x2a/0x420 [ 211.523044][ T9020] ? __fget_files+0x3a0/0x420 [ 211.523086][ T9020] __x64_sys_sendmsg+0x19b/0x260 [ 211.523110][ T9020] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.523143][ T9020] ? __pfx_ksys_write+0x10/0x10 [ 211.523167][ T9020] ? rcu_is_watching+0x15/0xb0 [ 211.523203][ T9020] ? do_syscall_64+0xbe/0x3b0 [ 211.523247][ T9020] do_syscall_64+0xfa/0x3b0 [ 211.523269][ T9020] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.523292][ T9020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.523311][ T9020] ? clear_bhb_loop+0x60/0xb0 [ 211.523334][ T9020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.523353][ T9020] RIP: 0033:0x7fc6d038e969 [ 211.523370][ T9020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.523388][ T9020] RSP: 002b:00007fc6ce1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.523409][ T9020] RAX: ffffffffffffffda RBX: 00007fc6d05b5fa0 RCX: 00007fc6d038e969 [ 211.523423][ T9020] RDX: 0000000000004014 RSI: 0000200000000040 RDI: 0000000000000003 [ 211.523436][ T9020] RBP: 00007fc6ce1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 211.523448][ T9020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.523460][ T9020] R13: 0000000000000000 R14: 00007fc6d05b5fa0 R15: 00007ffc281f4dc8 [ 211.523491][ T9020] [ 211.933647][ T8738] veth0_vlan: entered promiscuous mode [ 212.013694][ T8738] veth1_vlan: entered promiscuous mode [ 212.447942][ T8738] veth0_macvtap: entered promiscuous mode [ 212.477965][ T8738] veth1_macvtap: entered promiscuous mode [ 212.544896][ T8738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.559025][ T9056] netlink: zone id is out of range [ 212.601197][ T8738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.624282][ T8738] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.638875][ T8738] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.660389][ T8738] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.696516][ T8738] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.810557][ T9056] netlink: set zone limit has 4 unknown bytes [ 212.818743][ T9062] netlink: 22 bytes leftover after parsing attributes in process `syz.0.803'. [ 213.117766][ T6642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.141282][ T6642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.206325][ T9081] netlink: 'syz.4.807': attribute type 4 has an invalid length. [ 213.217574][ T6642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.237592][ T6642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.274176][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.807'. [ 213.283992][ T9085] FAULT_INJECTION: forcing a failure. [ 213.283992][ T9085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.317708][ T9081] netlink: 'syz.4.807': attribute type 4 has an invalid length. [ 213.344809][ T9085] CPU: 0 UID: 0 PID: 9085 Comm: syz.1.809 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 213.344841][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.344854][ T9085] Call Trace: [ 213.344862][ T9085] [ 213.344871][ T9085] dump_stack_lvl+0x189/0x250 [ 213.344908][ T9085] ? __pfx____ratelimit+0x10/0x10 [ 213.344933][ T9085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.344965][ T9085] ? __pfx__printk+0x10/0x10 [ 213.344988][ T9085] ? __might_fault+0xb0/0x130 [ 213.345031][ T9085] should_fail_ex+0x414/0x560 [ 213.345064][ T9085] _copy_from_user+0x2d/0xb0 [ 213.345086][ T9085] kstrtouint_from_user+0xc4/0x170 [ 213.345119][ T9085] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 213.345168][ T9085] proc_fail_nth_write+0x88/0x240 [ 213.345189][ T9085] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 213.345217][ T9085] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 213.345239][ T9085] vfs_write+0x27e/0xa90 [ 213.345276][ T9085] ? __pfx_vfs_write+0x10/0x10 [ 213.345305][ T9085] ? __fget_files+0x2a/0x420 [ 213.345340][ T9085] ? __fget_files+0x3a0/0x420 [ 213.345369][ T9085] ? __fget_files+0x2a/0x420 [ 213.345410][ T9085] ksys_write+0x145/0x250 [ 213.345440][ T9085] ? __pfx_ksys_write+0x10/0x10 [ 213.345464][ T9085] ? rcu_is_watching+0x15/0xb0 [ 213.345499][ T9085] ? do_syscall_64+0xbe/0x3b0 [ 213.345530][ T9085] do_syscall_64+0xfa/0x3b0 [ 213.345554][ T9085] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.345588][ T9085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.345609][ T9085] ? clear_bhb_loop+0x60/0xb0 [ 213.345634][ T9085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.345654][ T9085] RIP: 0033:0x7fb9aff8d41f [ 213.345671][ T9085] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 213.345690][ T9085] RSP: 002b:00007fb9b0eb5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 213.345711][ T9085] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb9aff8d41f [ 213.345725][ T9085] RDX: 0000000000000001 RSI: 00007fb9b0eb50a0 RDI: 0000000000000005 [ 213.345737][ T9085] RBP: 00007fb9b0eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 213.345750][ T9085] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 213.345762][ T9085] R13: 0000000000000000 R14: 00007fb9b01b5fa0 R15: 00007ffcb6b52298 [ 213.345796][ T9085] [ 213.736908][ T9094] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 213.894746][ T9100] netlink: 'syz.1.814': attribute type 9 has an invalid length. [ 213.927381][ T9100] netlink: 36 bytes leftover after parsing attributes in process `syz.1.814'. [ 213.962600][ T9102] netlink: 'syz.2.815': attribute type 4 has an invalid length. [ 214.120109][ T6632] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.277190][ T6632] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.374426][ T6632] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.575858][ T6632] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.694861][ T6632] bridge_slave_1: left allmulticast mode [ 214.700532][ T6632] bridge_slave_1: left promiscuous mode [ 214.706563][ T6632] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.716696][ T6632] bridge_slave_0: left allmulticast mode [ 214.722720][ T6632] bridge_slave_0: left promiscuous mode [ 214.728471][ T6632] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.557440][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.570345][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.579353][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.587598][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.595551][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.981787][ T6632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.994839][ T6632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.005848][ T6632] bond0 (unregistering): Released all slaves [ 216.028859][ T9137] netlink: 'syz.1.822': attribute type 1 has an invalid length. [ 216.148141][ T9133] netlink: 'syz.1.822': attribute type 11 has an invalid length. [ 216.161346][ T9133] netlink: 224 bytes leftover after parsing attributes in process `syz.1.822'. [ 216.217411][ T9140] FAULT_INJECTION: forcing a failure. [ 216.217411][ T9140] name failslab, interval 1, probability 0, space 0, times 0 [ 216.230577][ T9140] CPU: 0 UID: 0 PID: 9140 Comm: syz.2.823 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 216.230606][ T9140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.230619][ T9140] Call Trace: [ 216.230628][ T9140] [ 216.230637][ T9140] dump_stack_lvl+0x189/0x250 [ 216.230676][ T9140] ? __pfx____ratelimit+0x10/0x10 [ 216.230704][ T9140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.230737][ T9140] ? __pfx__printk+0x10/0x10 [ 216.230764][ T9140] ? __pfx___might_resched+0x10/0x10 [ 216.230794][ T9140] ? fs_reclaim_acquire+0x7d/0x100 [ 216.230822][ T9140] should_fail_ex+0x414/0x560 [ 216.230859][ T9140] should_failslab+0xa8/0x100 [ 216.230893][ T9140] __kmalloc_noprof+0xcb/0x4f0 [ 216.230921][ T9140] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 216.230950][ T9140] ? sock_kmalloc+0xd6/0x160 [ 216.230978][ T9140] sock_kmalloc+0xd6/0x160 [ 216.231003][ T9140] hash_recvmsg+0x1d4/0x840 [ 216.231038][ T9140] ? __pfx_hash_recvmsg+0x10/0x10 [ 216.231067][ T9140] sock_recvmsg_nosec+0x186/0x1c0 [ 216.231099][ T9140] ____sys_recvmsg+0x3aa/0x460 [ 216.231131][ T9140] ? __pfx_____sys_recvmsg+0x10/0x10 [ 216.231172][ T9140] ? import_iovec+0x74/0xa0 [ 216.231197][ T9140] ___sys_recvmsg+0x1b5/0x510 [ 216.231227][ T9140] ? __pfx____sys_recvmsg+0x10/0x10 [ 216.231287][ T9140] ? __might_fault+0xb0/0x130 [ 216.231322][ T9140] do_recvmmsg+0x307/0x770 [ 216.231355][ T9140] ? __pfx_do_recvmmsg+0x10/0x10 [ 216.231392][ T9140] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 216.231451][ T9140] __x64_sys_recvmmsg+0x190/0x240 [ 216.231478][ T9140] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 216.231499][ T9140] ? rcu_is_watching+0x15/0xb0 [ 216.231535][ T9140] ? do_syscall_64+0xbe/0x3b0 [ 216.231566][ T9140] do_syscall_64+0xfa/0x3b0 [ 216.231591][ T9140] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.231616][ T9140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.231637][ T9140] ? clear_bhb_loop+0x60/0xb0 [ 216.231663][ T9140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.231684][ T9140] RIP: 0033:0x7fc6d038e969 [ 216.231703][ T9140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.231722][ T9140] RSP: 002b:00007fc6ce1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 216.231744][ T9140] RAX: ffffffffffffffda RBX: 00007fc6d05b5fa0 RCX: 00007fc6d038e969 [ 216.231759][ T9140] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 216.231772][ T9140] RBP: 00007fc6ce1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 216.231784][ T9140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.231796][ T9140] R13: 0000000000000000 R14: 00007fc6d05b5fa0 R15: 00007ffc281f4dc8 [ 216.231829][ T9140] [ 216.632414][ T9143] bridge0: entered promiscuous mode [ 216.645685][ T9143] macvtap1: entered allmulticast mode [ 216.651295][ T9143] bridge0: entered allmulticast mode [ 216.660154][ T9143] bridge0: port 3(macvtap1) entered blocking state [ 216.671944][ T9143] bridge0: port 3(macvtap1) entered disabled state [ 216.685683][ T9143] bridge0: left allmulticast mode [ 216.690931][ T9143] bridge0: left promiscuous mode [ 216.831422][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 216.838353][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 216.843970][ T9159] netlink: 48 bytes leftover after parsing attributes in process `syz.4.825'. [ 217.208617][ T6632] hsr_slave_0: left promiscuous mode [ 217.225432][ T6632] hsr_slave_1: left promiscuous mode [ 217.238231][ T6632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.265145][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.287718][ T6632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.324252][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.369219][ T6632] veth1_macvtap: left promiscuous mode [ 217.377612][ T6632] veth0_macvtap: left promiscuous mode [ 217.390918][ T6632] veth1_vlan: left promiscuous mode [ 217.406926][ T6632] veth0_vlan: left promiscuous mode [ 217.721152][ T5844] Bluetooth: hci2: command tx timeout [ 218.144251][ T6632] team0 (unregistering): Port device team_slave_1 removed [ 218.186721][ T6632] team0 (unregistering): Port device team_slave_0 removed [ 218.529844][ T9165] FAULT_INJECTION: forcing a failure. [ 218.529844][ T9165] name failslab, interval 1, probability 0, space 0, times 0 [ 218.549026][ T9165] CPU: 0 UID: 0 PID: 9165 Comm: syz.0.828 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 218.549049][ T9165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.549059][ T9165] Call Trace: [ 218.549065][ T9165] [ 218.549072][ T9165] dump_stack_lvl+0x189/0x250 [ 218.549100][ T9165] ? __pfx____ratelimit+0x10/0x10 [ 218.549120][ T9165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.549143][ T9165] ? __pfx__printk+0x10/0x10 [ 218.549165][ T9165] ? __pfx___might_resched+0x10/0x10 [ 218.549187][ T9165] ? fs_reclaim_acquire+0x7d/0x100 [ 218.549207][ T9165] should_fail_ex+0x414/0x560 [ 218.549231][ T9165] should_failslab+0xa8/0x100 [ 218.549255][ T9165] __kmalloc_noprof+0xcb/0x4f0 [ 218.549276][ T9165] ? ethnl_default_notify+0x184/0x990 [ 218.549295][ T9165] ethnl_default_notify+0x184/0x990 [ 218.549310][ T9165] ? __pfx___ethnl_set_coalesce+0x10/0x10 [ 218.549332][ T9165] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.549352][ T9165] ? __pfx_ethnl_default_notify+0x10/0x10 [ 218.549381][ T9165] ? mutex_is_locked+0x17/0x50 [ 218.549403][ T9165] ? rtnl_is_locked+0x15/0x20 [ 218.549421][ T9165] ethnl_default_set_doit+0x64e/0xa20 [ 218.549457][ T9165] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 218.549475][ T9165] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 218.549508][ T9165] genl_family_rcv_msg_doit+0x212/0x300 [ 218.549528][ T9165] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 218.549553][ T9165] ? bpf_lsm_capable+0x9/0x20 [ 218.549571][ T9165] ? security_capable+0x7e/0x2e0 [ 218.549596][ T9165] genl_rcv_msg+0x60e/0x790 [ 218.549617][ T9165] ? __pfx_genl_rcv_msg+0x10/0x10 [ 218.549630][ T9165] ? ref_tracker_free+0x63a/0x7d0 [ 218.549646][ T9165] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 218.549660][ T9165] ? __pfx_ref_tracker_free+0x10/0x10 [ 218.549685][ T9165] netlink_rcv_skb+0x205/0x470 [ 218.549705][ T9165] ? __pfx_genl_rcv_msg+0x10/0x10 [ 218.549721][ T9165] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 218.549753][ T9165] ? down_read+0x1ad/0x2e0 [ 218.549772][ T9165] genl_rcv+0x28/0x40 [ 218.549785][ T9165] netlink_unicast+0x758/0x8d0 [ 218.549811][ T9165] netlink_sendmsg+0x805/0xb30 [ 218.549829][ T9165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.549844][ T9165] ? aa_sock_msg_perm+0x94/0x160 [ 218.549861][ T9165] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 218.549877][ T9165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.549889][ T9165] __sock_sendmsg+0x219/0x270 [ 218.549908][ T9165] ____sys_sendmsg+0x505/0x830 [ 218.549925][ T9165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.549945][ T9165] ? import_iovec+0x74/0xa0 [ 218.549967][ T9165] ___sys_sendmsg+0x21f/0x2a0 [ 218.549989][ T9165] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.550038][ T9165] ? __fget_files+0x2a/0x420 [ 218.550057][ T9165] ? __fget_files+0x3a0/0x420 [ 218.550084][ T9165] __x64_sys_sendmsg+0x19b/0x260 [ 218.550099][ T9165] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.550118][ T9165] ? __pfx_ksys_write+0x10/0x10 [ 218.550133][ T9165] ? rcu_is_watching+0x15/0xb0 [ 218.550155][ T9165] ? do_syscall_64+0xbe/0x3b0 [ 218.550174][ T9165] do_syscall_64+0xfa/0x3b0 [ 218.550189][ T9165] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.550204][ T9165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.550216][ T9165] ? clear_bhb_loop+0x60/0xb0 [ 218.550232][ T9165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.550245][ T9165] RIP: 0033:0x7efc9dd8e969 [ 218.550257][ T9165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.550268][ T9165] RSP: 002b:00007efc9eb15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.550282][ T9165] RAX: ffffffffffffffda RBX: 00007efc9dfb5fa0 RCX: 00007efc9dd8e969 [ 218.550291][ T9165] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 218.550299][ T9165] RBP: 00007efc9eb15090 R08: 0000000000000000 R09: 0000000000000000 [ 218.550307][ T9165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.550314][ T9165] R13: 0000000000000000 R14: 00007efc9dfb5fa0 R15: 00007ffcce5b6008 [ 218.550334][ T9165] [ 219.246466][ T9124] chnl_net:caif_netlink_parms(): no params data found [ 219.493161][ T9202] sctp: [Deprecated]: syz.4.837 (pid 9202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.493161][ T9202] Use struct sctp_sack_info instead [ 219.593821][ T9124] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.613241][ T9124] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.628618][ T9124] bridge_slave_0: entered allmulticast mode [ 219.638086][ T9124] bridge_slave_0: entered promiscuous mode [ 219.694026][ T9124] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.704387][ T9124] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.716254][ T9124] bridge_slave_1: entered allmulticast mode [ 219.728112][ T9124] bridge_slave_1: entered promiscuous mode [ 219.791047][ T5844] Bluetooth: hci2: command tx timeout [ 219.897834][ T9124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.925657][ T9124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.038576][ T9223] FAULT_INJECTION: forcing a failure. [ 220.038576][ T9223] name failslab, interval 1, probability 0, space 0, times 0 [ 220.055965][ T9223] CPU: 0 UID: 0 PID: 9223 Comm: syz.0.843 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 220.055992][ T9223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.056004][ T9223] Call Trace: [ 220.056011][ T9223] [ 220.056019][ T9223] dump_stack_lvl+0x189/0x250 [ 220.056053][ T9223] ? __pfx____ratelimit+0x10/0x10 [ 220.056076][ T9223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.056105][ T9223] ? __pfx__printk+0x10/0x10 [ 220.056131][ T9223] ? __pfx___might_resched+0x10/0x10 [ 220.056173][ T9223] should_fail_ex+0x414/0x560 [ 220.056203][ T9223] should_failslab+0xa8/0x100 [ 220.056234][ T9223] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 220.056261][ T9223] ? __alloc_skb+0x112/0x2d0 [ 220.056294][ T9223] __alloc_skb+0x112/0x2d0 [ 220.056329][ T9223] netlink_sendmsg+0x5c6/0xb30 [ 220.056359][ T9223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.056382][ T9223] ? aa_sock_msg_perm+0x94/0x160 [ 220.056410][ T9223] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.056432][ T9223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.056450][ T9223] __sock_sendmsg+0x219/0x270 [ 220.056477][ T9223] ____sys_sendmsg+0x505/0x830 [ 220.056504][ T9223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.056534][ T9223] ? import_iovec+0x74/0xa0 [ 220.056558][ T9223] ___sys_sendmsg+0x21f/0x2a0 [ 220.056581][ T9223] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.056640][ T9223] ? __fget_files+0x2a/0x420 [ 220.056669][ T9223] ? __fget_files+0x3a0/0x420 [ 220.056711][ T9223] __x64_sys_sendmsg+0x19b/0x260 [ 220.056729][ T9223] ? schedule+0x165/0x360 [ 220.056754][ T9223] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.056791][ T9223] ? do_syscall_64+0xbe/0x3b0 [ 220.056814][ T9223] do_syscall_64+0xfa/0x3b0 [ 220.056833][ T9223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.056847][ T9223] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 220.056862][ T9223] ? clear_bhb_loop+0x60/0xb0 [ 220.056880][ T9223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.056894][ T9223] RIP: 0033:0x7efc9dd8e969 [ 220.056907][ T9223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.056920][ T9223] RSP: 002b:00007efc9eb15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.056936][ T9223] RAX: ffffffffffffffda RBX: 00007efc9dfb5fa0 RCX: 00007efc9dd8e969 [ 220.056947][ T9223] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000b [ 220.056956][ T9223] RBP: 00007efc9eb15090 R08: 0000000000000000 R09: 0000000000000000 [ 220.056965][ T9223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.056973][ T9223] R13: 0000000000000000 R14: 00007efc9dfb5fa0 R15: 00007ffcce5b6008 [ 220.056996][ T9223] [ 220.060332][ T9124] team0: Port device team_slave_0 added [ 220.354768][ T9124] team0: Port device team_slave_1 added [ 220.420799][ T9228] FAULT_INJECTION: forcing a failure. [ 220.420799][ T9228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.449146][ T9228] CPU: 0 UID: 0 PID: 9228 Comm: syz.0.845 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 220.449177][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.449192][ T9228] Call Trace: [ 220.449200][ T9228] [ 220.449210][ T9228] dump_stack_lvl+0x189/0x250 [ 220.449256][ T9228] ? __pfx____ratelimit+0x10/0x10 [ 220.449275][ T9228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.449298][ T9228] ? __pfx__printk+0x10/0x10 [ 220.449324][ T9228] should_fail_ex+0x414/0x560 [ 220.449347][ T9228] _copy_from_user+0x2d/0xb0 [ 220.449363][ T9228] bpf_test_init+0xf8/0x170 [ 220.449389][ T9228] bpf_prog_test_run_xdp+0x37c/0x1000 [ 220.449424][ T9228] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 220.449462][ T9228] ? __fget_files+0x2a/0x420 [ 220.449490][ T9228] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 220.449513][ T9228] bpf_prog_test_run+0x2c4/0x340 [ 220.449536][ T9228] __sys_bpf+0x4a4/0x860 [ 220.449556][ T9228] ? __pfx___sys_bpf+0x10/0x10 [ 220.449584][ T9228] ? ksys_write+0x22a/0x250 [ 220.449605][ T9228] ? __pfx_ksys_write+0x10/0x10 [ 220.449622][ T9228] ? rcu_is_watching+0x15/0xb0 [ 220.449648][ T9228] __x64_sys_bpf+0x7c/0x90 [ 220.449665][ T9228] do_syscall_64+0xfa/0x3b0 [ 220.449683][ T9228] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.449700][ T9228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.449715][ T9228] ? clear_bhb_loop+0x60/0xb0 [ 220.449732][ T9228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.449746][ T9228] RIP: 0033:0x7efc9dd8e969 [ 220.449759][ T9228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.449771][ T9228] RSP: 002b:00007efc9eb15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 220.449787][ T9228] RAX: ffffffffffffffda RBX: 00007efc9dfb5fa0 RCX: 00007efc9dd8e969 [ 220.449798][ T9228] RDX: 000000000000004c RSI: 0000200000000200 RDI: 000000000000000a [ 220.449807][ T9228] RBP: 00007efc9eb15090 R08: 0000000000000000 R09: 0000000000000000 [ 220.449816][ T9228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.449825][ T9228] R13: 0000000000000000 R14: 00007efc9dfb5fa0 R15: 00007ffcce5b6008 [ 220.449847][ T9228] [ 220.712865][ T9225] block nbd0: server does not support multiple connections per device. [ 220.722953][ T9225] block nbd0: shutting down sockets [ 220.734864][ T9124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.741940][ T9124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.768344][ T9124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.814538][ T9124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.850470][ T9124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.870777][ T9236] netlink: 'syz.0.847': attribute type 11 has an invalid length. [ 220.884969][ T9236] netlink: 224 bytes leftover after parsing attributes in process `syz.0.847'. [ 220.896989][ T9124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.922500][ T9239] netlink: 'syz.0.847': attribute type 1 has an invalid length. [ 220.954106][ T9238] netlink: 'syz.1.848': attribute type 11 has an invalid length. [ 220.955101][ T9239] netlink: 'syz.0.847': attribute type 1 has an invalid length. [ 220.974347][ T9238] netlink: 224 bytes leftover after parsing attributes in process `syz.1.848'. [ 221.004202][ T9240] netlink: 'syz.1.848': attribute type 1 has an invalid length. [ 221.155456][ T9124] hsr_slave_0: entered promiscuous mode [ 221.172190][ T9124] hsr_slave_1: entered promiscuous mode [ 221.193224][ T9124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.205493][ T9124] Cannot create hsr debugfs directory [ 221.415389][ T9251] syz_tun: entered allmulticast mode [ 221.857372][ T9248] syz_tun: left allmulticast mode [ 221.871161][ T5844] Bluetooth: hci2: command tx timeout [ 222.127979][ T9264] netlink: 'syz.0.854': attribute type 11 has an invalid length. [ 222.135847][ T9264] netlink: 224 bytes leftover after parsing attributes in process `syz.0.854'. [ 222.205587][ T9267] netlink: 'syz.0.854': attribute type 1 has an invalid length. [ 222.228548][ T9267] netlink: 'syz.0.854': attribute type 1 has an invalid length. [ 222.276346][ T9270] netlink: 788 bytes leftover after parsing attributes in process `syz.2.856'. [ 222.350699][ T9124] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 222.377899][ T9124] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 222.400050][ T9124] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 222.405445][ T9272] netlink: 88 bytes leftover after parsing attributes in process `syz.1.857'. [ 222.426969][ T9124] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 222.888430][ T9280] netlink: 'syz.1.861': attribute type 11 has an invalid length. [ 222.926052][ T9280] netlink: 224 bytes leftover after parsing attributes in process `syz.1.861'. [ 222.967651][ T9285] netlink: 'syz.1.861': attribute type 1 has an invalid length. [ 223.119355][ T9124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.259528][ T9124] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.320575][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.327777][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.380413][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.387658][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.961715][ T5844] Bluetooth: hci2: command tx timeout [ 224.409671][ T9124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.748937][ T9124] veth0_vlan: entered promiscuous mode [ 224.828165][ T9124] veth1_vlan: entered promiscuous mode [ 224.904535][ T9124] veth0_macvtap: entered promiscuous mode [ 224.928015][ T9315] FAULT_INJECTION: forcing a failure. [ 224.928015][ T9315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.938922][ T9124] veth1_macvtap: entered promiscuous mode [ 224.959474][ T9315] CPU: 0 UID: 0 PID: 9315 Comm: syz.0.873 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 224.959504][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.959518][ T9315] Call Trace: [ 224.959526][ T9315] [ 224.959536][ T9315] dump_stack_lvl+0x189/0x250 [ 224.959575][ T9315] ? __pfx____ratelimit+0x10/0x10 [ 224.959601][ T9315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.959634][ T9315] ? __pfx__printk+0x10/0x10 [ 224.959671][ T9315] should_fail_ex+0x414/0x560 [ 224.959704][ T9315] _copy_to_user+0x31/0xb0 [ 224.959728][ T9315] simple_read_from_buffer+0xe1/0x170 [ 224.959765][ T9315] proc_fail_nth_read+0x1df/0x250 [ 224.959790][ T9315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.959814][ T9315] ? rw_verify_area+0x258/0x650 [ 224.959840][ T9315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.959863][ T9315] vfs_read+0x200/0x980 [ 224.959908][ T9315] ? __pfx_vfs_read+0x10/0x10 [ 224.959932][ T9315] ? _raw_spin_unlock_irq+0x2e/0x50 [ 224.959983][ T9315] ksys_read+0x145/0x250 [ 224.960013][ T9315] ? __pfx_ksys_read+0x10/0x10 [ 224.960037][ T9315] ? __task_pid_nr_ns+0x28/0x470 [ 224.960067][ T9315] ? do_syscall_64+0xbe/0x3b0 [ 224.960099][ T9315] do_syscall_64+0xfa/0x3b0 [ 224.960136][ T9315] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.960161][ T9315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.960182][ T9315] ? clear_bhb_loop+0x60/0xb0 [ 224.960206][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.960226][ T9315] RIP: 0033:0x7efc9dd8d37c [ 224.960244][ T9315] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 224.960273][ T9315] RSP: 002b:00007efc9eb15030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 224.960294][ T9315] RAX: ffffffffffffffda RBX: 00007efc9dfb5fa0 RCX: 00007efc9dd8d37c [ 224.960308][ T9315] RDX: 000000000000000f RSI: 00007efc9eb150a0 RDI: 0000000000000006 [ 224.960320][ T9315] RBP: 00007efc9eb15090 R08: 0000000000000000 R09: 0000000000000000 [ 224.960332][ T9315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.960343][ T9315] R13: 0000000000000000 R14: 00007efc9dfb5fa0 R15: 00007ffcce5b6008 [ 224.960374][ T9315] [ 225.276190][ T9321] macsec1: entered promiscuous mode [ 225.282128][ T9321] macsec1: entered allmulticast mode [ 225.287459][ T9321] dummy0: entered allmulticast mode [ 225.323800][ T9321] dummy0: left allmulticast mode [ 225.362860][ T9124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.378279][ T9323] vlan3: entered promiscuous mode [ 225.383449][ T9323] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 225.391775][ T9323] vlan3: entered allmulticast mode [ 225.397543][ T9323] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 225.419337][ T9124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.450407][ T9124] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.488016][ T9124] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.509219][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e914800: rx timeout, send abort [ 225.510768][ T9330] netlink: 'syz.0.878': attribute type 11 has an invalid length. [ 225.530844][ T9124] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.539960][ T9124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.569971][ T9330] netlink: 224 bytes leftover after parsing attributes in process `syz.0.878'. [ 225.575323][ T9332] netlink: 'syz.0.878': attribute type 1 has an invalid length. [ 225.607125][ T9332] netlink: 'syz.0.878': attribute type 1 has an invalid length. [ 225.735624][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.764230][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.792865][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 225.879950][ T6650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.908942][ T6650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.017492][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e914800: abort rx timeout. Force session deactivation [ 226.249742][ T9354] netlink: 'syz.4.888': attribute type 1 has an invalid length. [ 226.259135][ T9354] netlink: 144 bytes leftover after parsing attributes in process `syz.4.888'. [ 226.269395][ T9354] netlink: 'syz.4.888': attribute type 1 has an invalid length. [ 226.279709][ T9354] netlink: 76 bytes leftover after parsing attributes in process `syz.4.888'. [ 226.374337][ T9357] netlink: 228 bytes leftover after parsing attributes in process `syz.0.889'. [ 226.545012][ T9367] netlink: 22 bytes leftover after parsing attributes in process `syz.4.891'. [ 226.827281][ T9374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 227.545723][ T9403] netlink: 48 bytes leftover after parsing attributes in process `syz.1.906'. [ 227.560492][ T9403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.567806][ T9403] IPv6: NLM_F_CREATE should be set when creating new route [ 227.680817][ T6650] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.408989][ T6650] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.495925][ T6650] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.553733][ T6650] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.753459][ T9419] sctp: [Deprecated]: syz.1.909 (pid 9419) Use of int in max_burst socket option. [ 228.753459][ T9419] Use struct sctp_assoc_value instead [ 228.758371][ T6650] bridge_slave_1: left allmulticast mode [ 228.804008][ T9419] netlink: 'syz.1.909': attribute type 11 has an invalid length. [ 228.820650][ T6650] bridge_slave_1: left promiscuous mode [ 228.833351][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.905126][ T6650] bridge_slave_0: left allmulticast mode [ 228.924157][ T6650] bridge_slave_0: left promiscuous mode [ 228.938731][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.032230][ T9426] netlink: 56 bytes leftover after parsing attributes in process `syz.2.913'. [ 229.064209][ T9426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.913'. [ 229.301429][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 229.310806][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 229.319831][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.340203][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 229.352515][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.576199][ T6650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.587895][ T6650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.598568][ T6650] bond0 (unregistering): Released all slaves [ 229.804605][ T9442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.919'. [ 230.010414][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'. [ 230.107023][ T9452] bridge_slave_1: left allmulticast mode [ 230.176730][ T9452] bridge_slave_1: left promiscuous mode [ 230.191440][ T9452] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.239996][ T9452] bridge_slave_0: left allmulticast mode [ 230.246197][ T9452] bridge_slave_0: left promiscuous mode [ 230.258186][ T9452] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.437989][ T6650] hsr_slave_0: left promiscuous mode [ 230.451240][ T6650] hsr_slave_1: left promiscuous mode [ 230.458244][ T6650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.466306][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.484799][ T6650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.504669][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.751455][ T9477] FAULT_INJECTION: forcing a failure. [ 230.751455][ T9477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.771123][ T9477] CPU: 0 UID: 0 PID: 9477 Comm: syz.0.930 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 230.771152][ T9477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 230.771164][ T9477] Call Trace: [ 230.771172][ T9477] [ 230.771182][ T9477] dump_stack_lvl+0x189/0x250 [ 230.771219][ T9477] ? __pfx____ratelimit+0x10/0x10 [ 230.771244][ T9477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.771276][ T9477] ? __pfx__printk+0x10/0x10 [ 230.771312][ T9477] should_fail_ex+0x414/0x560 [ 230.771344][ T9477] _copy_to_user+0x31/0xb0 [ 230.771367][ T9477] bpf_test_finish+0x24e/0x700 [ 230.771409][ T9477] ? __pfx_bpf_test_finish+0x10/0x10 [ 230.771445][ T9477] ? slab_build_skb+0x273/0x3e0 [ 230.771481][ T9477] bpf_prog_test_run_skb+0xed5/0x1560 [ 230.771530][ T9477] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 230.771570][ T9477] bpf_prog_test_run+0x2c4/0x340 [ 230.771601][ T9477] __sys_bpf+0x4a4/0x860 [ 230.771629][ T9477] ? __pfx___sys_bpf+0x10/0x10 [ 230.771668][ T9477] ? ksys_write+0x22a/0x250 [ 230.771698][ T9477] ? __pfx_ksys_write+0x10/0x10 [ 230.771732][ T9477] ? rcu_is_watching+0x15/0xb0 [ 230.771785][ T9477] __x64_sys_bpf+0x7c/0x90 [ 230.771808][ T9477] do_syscall_64+0xfa/0x3b0 [ 230.771833][ T9477] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.771857][ T9477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.771877][ T9477] ? clear_bhb_loop+0x60/0xb0 [ 230.771902][ T9477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.771921][ T9477] RIP: 0033:0x7efc9dd8e969 [ 230.771939][ T9477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.771956][ T9477] RSP: 002b:00007efc9eb15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.771978][ T9477] RAX: ffffffffffffffda RBX: 00007efc9dfb5fa0 RCX: 00007efc9dd8e969 [ 230.771993][ T9477] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 230.772005][ T9477] RBP: 00007efc9eb15090 R08: 0000000000000000 R09: 0000000000000000 [ 230.772017][ T9477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.772029][ T9477] R13: 0000000000000000 R14: 00007efc9dfb5fa0 R15: 00007ffcce5b6008 [ 230.772062][ T9477] [ 231.113385][ T9480] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 231.126734][ T9483] xt_hashlimit: size too large, truncated to 1048576 [ 231.468470][ T6650] veth1_macvtap: left promiscuous mode [ 231.483920][ T6650] veth0_macvtap: left promiscuous mode [ 231.491440][ T5844] Bluetooth: hci2: command 0x0405 tx timeout [ 231.494211][ T6650] veth1_vlan: left promiscuous mode [ 231.514253][ T6650] veth0_vlan: left promiscuous mode [ 232.137832][ T6650] team0 (unregistering): Port device team_slave_1 removed [ 232.173688][ T6650] team0 (unregistering): Port device team_slave_0 removed [ 233.555292][ T5844] Bluetooth: hci2: command 0x0405 tx timeout [ 233.610140][ T9506] netlink: 'syz.0.938': attribute type 10 has an invalid length. [ 233.653736][ T9506] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.667725][ T9506] bond0: (slave team0): Enslaving as an active interface with an up link [ 233.879392][ T9435] chnl_net:caif_netlink_parms(): no params data found [ 234.119815][ T9435] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.127790][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.135594][ T9435] bridge_slave_0: entered allmulticast mode [ 234.144584][ T9435] bridge_slave_0: entered promiscuous mode [ 234.153230][ T9435] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.160496][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.167840][ T9435] bridge_slave_1: entered allmulticast mode [ 234.175733][ T9435] bridge_slave_1: entered promiscuous mode [ 234.232315][ T9435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.260429][ T9435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.370826][ T9435] team0: Port device team_slave_0 added [ 234.394061][ T9435] team0: Port device team_slave_1 added [ 234.425947][ T9530] macsec1: entered promiscuous mode [ 234.435198][ T9530] macsec1: entered allmulticast mode [ 234.440626][ T9530] dummy0: entered allmulticast mode [ 234.467035][ T9530] dummy0: left allmulticast mode [ 234.497667][ T9532] netlink: 9 bytes leftover after parsing attributes in process `syz.2.945'. [ 234.530349][ T9532] gretap0: entered promiscuous mode [ 234.592978][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.599981][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.627292][ T9435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.640581][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.651612][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.679737][ T9435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.828433][ T9540] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 234.915586][ T9435] hsr_slave_0: entered promiscuous mode [ 234.928058][ T9435] hsr_slave_1: entered promiscuous mode [ 234.934932][ T9435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.961119][ T9435] Cannot create hsr debugfs directory [ 235.010710][ T9546] FAULT_INJECTION: forcing a failure. [ 235.010710][ T9546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.024289][ T9546] CPU: 0 UID: 0 PID: 9546 Comm: syz.1.949 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 235.024318][ T9546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.024332][ T9546] Call Trace: [ 235.024340][ T9546] [ 235.024349][ T9546] dump_stack_lvl+0x189/0x250 [ 235.024388][ T9546] ? __pfx____ratelimit+0x10/0x10 [ 235.024414][ T9546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.024446][ T9546] ? __pfx__printk+0x10/0x10 [ 235.024470][ T9546] ? __might_fault+0xb0/0x130 [ 235.024513][ T9546] should_fail_ex+0x414/0x560 [ 235.024553][ T9546] _copy_from_iter+0x1db/0x16f0 [ 235.024589][ T9546] ? rcu_is_watching+0x15/0xb0 [ 235.024621][ T9546] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 235.024653][ T9546] ? __pfx__copy_from_iter+0x10/0x10 [ 235.024686][ T9546] ? __build_skb_around+0x257/0x3e0 [ 235.024722][ T9546] ? netlink_sendmsg+0x642/0xb30 [ 235.024739][ T9546] ? skb_put+0x11b/0x210 [ 235.024775][ T9546] netlink_sendmsg+0x6b2/0xb30 [ 235.024805][ T9546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.024827][ T9546] ? aa_sock_msg_perm+0x94/0x160 [ 235.024856][ T9546] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 235.024881][ T9546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.024901][ T9546] __sock_sendmsg+0x219/0x270 [ 235.024930][ T9546] ____sys_sendmsg+0x505/0x830 [ 235.024957][ T9546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.024989][ T9546] ? import_iovec+0x74/0xa0 [ 235.025013][ T9546] ___sys_sendmsg+0x21f/0x2a0 [ 235.025036][ T9546] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.025103][ T9546] ? __fget_files+0x2a/0x420 [ 235.025134][ T9546] ? __fget_files+0x3a0/0x420 [ 235.025176][ T9546] __x64_sys_sendmsg+0x19b/0x260 [ 235.025201][ T9546] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.025233][ T9546] ? __pfx_ksys_write+0x10/0x10 [ 235.025257][ T9546] ? rcu_is_watching+0x15/0xb0 [ 235.025291][ T9546] ? do_syscall_64+0xbe/0x3b0 [ 235.025322][ T9546] do_syscall_64+0xfa/0x3b0 [ 235.025347][ T9546] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.025371][ T9546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.025392][ T9546] ? clear_bhb_loop+0x60/0xb0 [ 235.025417][ T9546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.025437][ T9546] RIP: 0033:0x7fb9aff8e969 [ 235.025455][ T9546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.025474][ T9546] RSP: 002b:00007fb9b0eb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.025496][ T9546] RAX: ffffffffffffffda RBX: 00007fb9b01b5fa0 RCX: 00007fb9aff8e969 [ 235.025511][ T9546] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 235.025531][ T9546] RBP: 00007fb9b0eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 235.025544][ T9546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.025557][ T9546] R13: 0000000000000000 R14: 00007fb9b01b5fa0 R15: 00007ffcb6b52298 [ 235.025590][ T9546] [ 235.631176][ T5845] Bluetooth: hci2: command 0x0405 tx timeout [ 235.748921][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.955'. [ 236.054024][ T9571] openvswitch: netlink: Flow actions attr not present in new flow. [ 236.170327][ T9435] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 236.197918][ T9435] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 236.219920][ T9435] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 236.246038][ T9435] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 236.366290][ T9576] xt_hashlimit: size too large, truncated to 1048576 [ 236.462902][ T9435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.494167][ T9435] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.522730][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.529983][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.587459][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.594679][ T6642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.668799][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.962'. [ 237.090067][ T9595] netlink: 144 bytes leftover after parsing attributes in process `syz.2.964'. [ 237.122882][ T9592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.964'. [ 237.152814][ T9592] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.166791][ T9435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.250323][ T9599] netlink: 'syz.0.967': attribute type 1 has an invalid length. [ 237.427661][ T9435] veth0_vlan: entered promiscuous mode [ 237.453595][ T9435] veth1_vlan: entered promiscuous mode [ 237.506264][ T9599] bond2: (slave gretap1): making interface the new active one [ 237.520006][ T9599] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 237.589920][ T9435] veth0_macvtap: entered promiscuous mode [ 237.604457][ T9435] veth1_macvtap: entered promiscuous mode [ 237.662704][ T9435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.694936][ T9435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.713893][ T5845] Bluetooth: hci2: command 0x0405 tx timeout [ 237.783842][ T9435] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.836112][ T9435] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.854724][ T9435] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.872620][ T9435] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.249191][ T6638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.280783][ T6638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.497900][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.553510][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.713873][ T9640] FAULT_INJECTION: forcing a failure. [ 238.713873][ T9640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.746706][ T9640] CPU: 0 UID: 0 PID: 9640 Comm: syz.4.979 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 238.746736][ T9640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.746749][ T9640] Call Trace: [ 238.746756][ T9640] [ 238.746765][ T9640] dump_stack_lvl+0x189/0x250 [ 238.746801][ T9640] ? __pfx____ratelimit+0x10/0x10 [ 238.746825][ T9640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.746856][ T9640] ? __pfx__printk+0x10/0x10 [ 238.746891][ T9640] should_fail_ex+0x414/0x560 [ 238.746921][ T9640] _copy_to_user+0x31/0xb0 [ 238.746941][ T9640] simple_read_from_buffer+0xe1/0x170 [ 238.746975][ T9640] proc_fail_nth_read+0x1df/0x250 [ 238.746999][ T9640] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.747023][ T9640] ? rw_verify_area+0x258/0x650 [ 238.747049][ T9640] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.747068][ T9640] vfs_read+0x200/0x980 [ 238.747123][ T9640] ? __pfx___mutex_lock+0x10/0x10 [ 238.747148][ T9640] ? __pfx_vfs_read+0x10/0x10 [ 238.747173][ T9640] ? __fget_files+0x2a/0x420 [ 238.747206][ T9640] ? __fget_files+0x3a0/0x420 [ 238.747232][ T9640] ? __fget_files+0x2a/0x420 [ 238.747280][ T9640] ksys_read+0x145/0x250 [ 238.747305][ T9640] ? __pfx_ksys_read+0x10/0x10 [ 238.747324][ T9640] ? rcu_is_watching+0x15/0xb0 [ 238.747354][ T9640] ? do_syscall_64+0xbe/0x3b0 [ 238.747379][ T9640] do_syscall_64+0xfa/0x3b0 [ 238.747399][ T9640] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.747419][ T9640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.747437][ T9640] ? clear_bhb_loop+0x60/0xb0 [ 238.747459][ T9640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.747475][ T9640] RIP: 0033:0x7fc61df8d37c [ 238.747492][ T9640] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 238.747508][ T9640] RSP: 002b:00007fc61ed75030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 238.747528][ T9640] RAX: ffffffffffffffda RBX: 00007fc61e1b5fa0 RCX: 00007fc61df8d37c [ 238.747542][ T9640] RDX: 000000000000000f RSI: 00007fc61ed750a0 RDI: 0000000000000005 [ 238.747554][ T9640] RBP: 00007fc61ed75090 R08: 0000000000000000 R09: 0000000000000000 [ 238.747565][ T9640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.747575][ T9640] R13: 0000000000000000 R14: 00007fc61e1b5fa0 R15: 00007ffc8380cf58 [ 238.747602][ T9640] [ 239.166615][ T9650] netlink: 9 bytes leftover after parsing attributes in process `syz.0.984'. [ 239.188342][ T9650] netlink: 5 bytes leftover after parsing attributes in process `syz.0.984'. [ 239.235854][ T9650] 0ªX¹¦D: renamed from gretap0 [ 239.249897][ T9653] block nbd0: Unsupported socket: shutdown callout must be supported. [ 239.265640][ T9650] 0ªX¹¦D: left promiscuous mode [ 239.270631][ T9650] 0ªX¹¦D: entered allmulticast mode [ 239.279689][ T9650] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 239.385400][ T9658] netlink: 22 bytes leftover after parsing attributes in process `syz.4.986'. [ 239.705997][ T9670] FAULT_INJECTION: forcing a failure. [ 239.705997][ T9670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.750161][ T9670] CPU: 0 UID: 0 PID: 9670 Comm: syz.2.991 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 239.750192][ T9670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.750205][ T9670] Call Trace: [ 239.750212][ T9670] [ 239.750221][ T9670] dump_stack_lvl+0x189/0x250 [ 239.750258][ T9670] ? __pfx____ratelimit+0x10/0x10 [ 239.750283][ T9670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.750315][ T9670] ? __pfx__printk+0x10/0x10 [ 239.750337][ T9670] ? __might_fault+0xb0/0x130 [ 239.750379][ T9670] should_fail_ex+0x414/0x560 [ 239.750410][ T9670] _copy_from_user+0x2d/0xb0 [ 239.750432][ T9670] __sys_connect+0x123/0x440 [ 239.750459][ T9670] ? __fget_files+0x3a0/0x420 [ 239.750492][ T9670] ? __pfx___sys_connect+0x10/0x10 [ 239.750537][ T9670] ? __pfx_ksys_write+0x10/0x10 [ 239.750561][ T9670] ? rcu_is_watching+0x15/0xb0 [ 239.750596][ T9670] __x64_sys_connect+0x7a/0x90 [ 239.750628][ T9670] do_syscall_64+0xfa/0x3b0 [ 239.750654][ T9670] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.750678][ T9670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.750699][ T9670] ? clear_bhb_loop+0x60/0xb0 [ 239.750724][ T9670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.750745][ T9670] RIP: 0033:0x7fc6d038e969 [ 239.750764][ T9670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.750783][ T9670] RSP: 002b:00007fc6ce1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 239.750806][ T9670] RAX: ffffffffffffffda RBX: 00007fc6d05b5fa0 RCX: 00007fc6d038e969 [ 239.750820][ T9670] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000003 [ 239.750833][ T9670] RBP: 00007fc6ce1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 239.750849][ T9670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.750861][ T9670] R13: 0000000000000000 R14: 00007fc6d05b5fa0 R15: 00007ffc281f4dc8 [ 239.750893][ T9670] [ 240.067193][ T9677] x_tables: duplicate underflow at hook 1 [ 240.378798][ T9694] syzkaller1: entered promiscuous mode [ 240.385393][ T9694] syzkaller1: entered allmulticast mode [ 240.454040][ T9696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.998'. [ 240.663434][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.717772][ T9704] vlan4: entered promiscuous mode [ 240.729139][ T9704] hsr0: entered promiscuous mode [ 240.735647][ T9704] vlan4: entered allmulticast mode [ 240.741790][ T9704] hsr0: entered allmulticast mode [ 240.746990][ T9704] hsr_slave_0: entered allmulticast mode [ 240.757112][ T9704] hsr_slave_1: entered allmulticast mode [ 240.974836][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.033953][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.106927][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.217903][ T64] bridge_slave_1: left allmulticast mode [ 241.223832][ T64] bridge_slave_1: left promiscuous mode [ 241.229568][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.239036][ T64] bridge_slave_0: left allmulticast mode [ 241.244910][ T64] bridge_slave_0: left promiscuous mode [ 241.250619][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.544759][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.556357][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.567448][ T64] bond0 (unregistering): Released all slaves [ 242.134853][ T64] hsr_slave_0: left promiscuous mode [ 242.163155][ T64] hsr_slave_1: left promiscuous mode [ 242.179659][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.196088][ T9726] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1010'. [ 242.197830][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.219658][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.235923][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.278480][ T64] veth1_macvtap: left promiscuous mode [ 242.288670][ T64] veth0_macvtap: left promiscuous mode [ 242.295060][ T64] veth1_vlan: left promiscuous mode [ 242.300560][ T64] veth0_vlan: left promiscuous mode [ 242.309041][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 242.331485][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 242.340106][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 242.348376][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 242.356177][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 242.882952][ T64] team0 (unregistering): Port device team_slave_1 removed [ 242.936160][ T64] team0 (unregistering): Port device team_slave_0 removed [ 243.485377][ T9750] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 243.634194][ T9759] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1018'. [ 243.885460][ T9738] chnl_net:caif_netlink_parms(): no params data found [ 244.047947][ T9769] macvtap1: entered promiscuous mode [ 244.073563][ T9769] vlan0: entered promiscuous mode [ 244.079877][ T9769] macvtap1: entered allmulticast mode [ 244.095517][ T9769] vlan0: entered allmulticast mode [ 244.114882][ T9769] veth0_vlan: entered allmulticast mode [ 244.152063][ T9769] vlan0: left allmulticast mode [ 244.157002][ T9769] veth0_vlan: left allmulticast mode [ 244.185421][ T9769] vlan0: left promiscuous mode [ 244.254941][ T9768] macvtap1: entered promiscuous mode [ 244.260355][ T9768] vlan0: entered promiscuous mode [ 244.270256][ T9768] macvtap1: entered allmulticast mode [ 244.276052][ T9768] vlan0: entered allmulticast mode [ 244.286496][ T9768] veth0_vlan: entered allmulticast mode [ 244.300584][ T9768] vlan0: left allmulticast mode [ 244.305646][ T9768] veth0_vlan: left allmulticast mode [ 244.315933][ T9768] vlan0: left promiscuous mode [ 244.358670][ T9784] FAULT_INJECTION: forcing a failure. [ 244.358670][ T9784] name failslab, interval 1, probability 0, space 0, times 0 [ 244.375924][ T9784] CPU: 0 UID: 0 PID: 9784 Comm: syz.1.1026 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 244.375954][ T9784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.375967][ T9784] Call Trace: [ 244.375974][ T9784] [ 244.375991][ T9784] dump_stack_lvl+0x189/0x250 [ 244.376029][ T9784] ? __pfx____ratelimit+0x10/0x10 [ 244.376055][ T9784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.376089][ T9784] ? __pfx__printk+0x10/0x10 [ 244.376118][ T9784] ? __pfx___might_resched+0x10/0x10 [ 244.376140][ T9784] ? fs_reclaim_acquire+0x7d/0x100 [ 244.376160][ T9784] should_fail_ex+0x414/0x560 [ 244.376184][ T9784] should_failslab+0xa8/0x100 [ 244.376213][ T9784] __kmalloc_cache_noprof+0x70/0x3d0 [ 244.376235][ T9784] ? nfnetlink_rcv+0xeff/0x2520 [ 244.376257][ T9784] nfnetlink_rcv+0xeff/0x2520 [ 244.376301][ T9784] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 244.376330][ T9784] ? __lock_acquire+0xab9/0xd20 [ 244.376386][ T9784] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.376409][ T9784] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.376437][ T9784] netlink_unicast+0x758/0x8d0 [ 244.376467][ T9784] netlink_sendmsg+0x805/0xb30 [ 244.376488][ T9784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.376505][ T9784] ? aa_sock_msg_perm+0x94/0x160 [ 244.376526][ T9784] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 244.376544][ T9784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.376559][ T9784] __sock_sendmsg+0x219/0x270 [ 244.376581][ T9784] ____sys_sendmsg+0x505/0x830 [ 244.376600][ T9784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.376623][ T9784] ? import_iovec+0x74/0xa0 [ 244.376640][ T9784] ___sys_sendmsg+0x21f/0x2a0 [ 244.376657][ T9784] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.376701][ T9784] ? __fget_files+0x2a/0x420 [ 244.376724][ T9784] ? __fget_files+0x3a0/0x420 [ 244.376757][ T9784] __x64_sys_sendmsg+0x19b/0x260 [ 244.376774][ T9784] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.376797][ T9784] ? __pfx_ksys_write+0x10/0x10 [ 244.376816][ T9784] ? rcu_is_watching+0x15/0xb0 [ 244.376841][ T9784] ? do_syscall_64+0xbe/0x3b0 [ 244.376863][ T9784] do_syscall_64+0xfa/0x3b0 [ 244.376881][ T9784] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.376898][ T9784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.376913][ T9784] ? clear_bhb_loop+0x60/0xb0 [ 244.376932][ T9784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.376954][ T9784] RIP: 0033:0x7fb9aff8e969 [ 244.376973][ T9784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.376998][ T9784] RSP: 002b:00007fb9b0eb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.377021][ T9784] RAX: ffffffffffffffda RBX: 00007fb9b01b5fa0 RCX: 00007fb9aff8e969 [ 244.377038][ T9784] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 244.377048][ T9784] RBP: 00007fb9b0eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 244.377057][ T9784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.377065][ T9784] R13: 0000000000000000 R14: 00007fb9b01b5fa0 R15: 00007ffcb6b52298 [ 244.377089][ T9784] [ 244.441308][ T5845] Bluetooth: hci2: command tx timeout [ 244.712078][ T9779] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1025'. [ 244.916223][ T9738] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.923746][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.931281][ T9738] bridge_slave_0: entered allmulticast mode [ 244.939824][ T9738] bridge_slave_0: entered promiscuous mode [ 244.962369][ T9738] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.969765][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.977656][ T9738] bridge_slave_1: entered allmulticast mode [ 244.986257][ T9738] bridge_slave_1: entered promiscuous mode [ 245.022574][ T9797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.149001][ T9738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.213729][ T9738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.267329][ T9813] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1033'. [ 245.310501][ T9738] team0: Port device team_slave_0 added [ 245.413196][ T9738] team0: Port device team_slave_1 added [ 245.436622][ T9819] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1036'. [ 245.522353][ T9738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.542494][ T9738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.576125][ T9738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.589759][ T9738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.629015][ T9738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.665117][ T9738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.701200][ T9821] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1037'. [ 245.966524][ T9831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1041'. [ 246.097726][ T9738] hsr_slave_0: entered promiscuous mode [ 246.114481][ T9738] hsr_slave_1: entered promiscuous mode [ 246.130416][ T9738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.140233][ T9738] Cannot create hsr debugfs directory [ 246.378304][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1052'. [ 246.550593][ T9867] FAULT_INJECTION: forcing a failure. [ 246.550593][ T9867] name failslab, interval 1, probability 0, space 0, times 0 [ 246.563789][ T9867] CPU: 1 UID: 0 PID: 9867 Comm: syz.1.1055 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 246.563817][ T9867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.563830][ T9867] Call Trace: [ 246.563837][ T9867] [ 246.563846][ T9867] dump_stack_lvl+0x189/0x250 [ 246.563892][ T9867] ? __pfx____ratelimit+0x10/0x10 [ 246.563918][ T9867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.563950][ T9867] ? __pfx__printk+0x10/0x10 [ 246.563979][ T9867] ? __pfx___might_resched+0x10/0x10 [ 246.564009][ T9867] ? fs_reclaim_acquire+0x7d/0x100 [ 246.564036][ T9867] should_fail_ex+0x414/0x560 [ 246.564068][ T9867] should_failslab+0xa8/0x100 [ 246.564101][ T9867] __kmalloc_cache_noprof+0x70/0x3d0 [ 246.564129][ T9867] ? __xdp_reg_mem_model+0x1d8/0x5a0 [ 246.564154][ T9867] __xdp_reg_mem_model+0x1d8/0x5a0 [ 246.564181][ T9867] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 246.564204][ T9867] ? page_pool_create_percpu+0x800/0xbe0 [ 246.564234][ T9867] xdp_reg_mem_model+0x22/0x40 [ 246.564254][ T9867] bpf_test_run_xdp_live+0x215/0x1b10 [ 246.564291][ T9867] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 246.564326][ T9867] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 246.564376][ T9867] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 246.564407][ T9867] ? bpf_dispatcher_xdp+0x800/0x1000 [ 246.564426][ T9867] ? bpf_dispatcher_xdp+0x800/0x1000 [ 246.564493][ T9867] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 246.564520][ T9867] ? _copy_from_user+0x94/0xb0 [ 246.564541][ T9867] ? bpf_test_init+0x133/0x170 [ 246.564585][ T9867] ? xdp_convert_md_to_buff+0x5b/0x330 [ 246.564633][ T9867] bpf_prog_test_run_xdp+0x713/0x1000 [ 246.564696][ T9867] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 246.564733][ T9867] ? __fget_files+0x2a/0x420 [ 246.564768][ T9867] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 246.564801][ T9867] bpf_prog_test_run+0x2c4/0x340 [ 246.564833][ T9867] __sys_bpf+0x4a4/0x860 [ 246.564878][ T9867] ? __pfx___sys_bpf+0x10/0x10 [ 246.564916][ T9867] ? ksys_write+0x22a/0x250 [ 246.564944][ T9867] ? __pfx_ksys_write+0x10/0x10 [ 246.564966][ T9867] ? rcu_is_watching+0x15/0xb0 [ 246.565002][ T9867] __x64_sys_bpf+0x7c/0x90 [ 246.565024][ T9867] do_syscall_64+0xfa/0x3b0 [ 246.565047][ T9867] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.565069][ T9867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.565088][ T9867] ? clear_bhb_loop+0x60/0xb0 [ 246.565112][ T9867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.565130][ T9867] RIP: 0033:0x7fb9aff8e969 [ 246.565147][ T9867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.565164][ T9867] RSP: 002b:00007fb9b0eb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.565184][ T9867] RAX: ffffffffffffffda RBX: 00007fb9b01b5fa0 RCX: 00007fb9aff8e969 [ 246.565199][ T9867] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 246.565211][ T9867] RBP: 00007fb9b0eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 246.565223][ T9867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.565234][ T9867] R13: 0000000000000000 R14: 00007fb9b01b5fa0 R15: 00007ffcb6b52298 [ 246.565264][ T9867] [ 246.890351][ T5845] Bluetooth: hci2: command tx timeout [ 247.043773][ T9871] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 247.086276][ T9871] Cannot find set identified by id 3 to match [ 247.170971][ T9875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1058'. [ 247.230525][ T9738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 247.254813][ T9738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 247.279377][ T9738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 247.318879][ T9738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 247.331300][ T9882] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1059'. [ 247.340285][ T9882] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1059'. [ 247.380253][ T9882] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1059'. [ 247.399646][ T9887] sit0: entered promiscuous mode [ 247.606457][ T9738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.630170][ T9738] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.673002][ T6638] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.680244][ T6638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.713403][ T6638] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.720655][ T6638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.149289][ T9738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.227134][ T9738] veth0_vlan: entered promiscuous mode [ 248.244865][ T9738] veth1_vlan: entered promiscuous mode [ 248.289567][ T9738] veth0_macvtap: entered promiscuous mode [ 248.303990][ T9738] veth1_macvtap: entered promiscuous mode [ 248.333055][ T9738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.351726][ T9738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.370495][ T9738] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.394178][ T9738] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.403259][ T9738] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.416875][ T9738] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.564102][ T6638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.578319][ T6638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.660139][ T6650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.703335][ T6650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.765925][ T9926] FAULT_INJECTION: forcing a failure. [ 248.765925][ T9926] name failslab, interval 1, probability 0, space 0, times 0 [ 248.816849][ T9926] CPU: 0 UID: 0 PID: 9926 Comm: syz.1.1074 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 248.816878][ T9926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.816891][ T9926] Call Trace: [ 248.816898][ T9926] [ 248.816907][ T9926] dump_stack_lvl+0x189/0x250 [ 248.816943][ T9926] ? __pfx____ratelimit+0x10/0x10 [ 248.816967][ T9926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.816997][ T9926] ? __pfx__printk+0x10/0x10 [ 248.817023][ T9926] ? __pfx___might_resched+0x10/0x10 [ 248.817056][ T9926] should_fail_ex+0x414/0x560 [ 248.817086][ T9926] should_failslab+0xa8/0x100 [ 248.817116][ T9926] __kmalloc_noprof+0xcb/0x4f0 [ 248.817143][ T9926] ? sock_kmalloc+0xd6/0x160 [ 248.817169][ T9926] sock_kmalloc+0xd6/0x160 [ 248.817193][ T9926] hash_accept_parent+0x82/0x2f0 [ 248.817219][ T9926] ? __pfx_hash_accept_parent+0x10/0x10 [ 248.817244][ T9926] af_alg_accept+0x174/0x520 [ 248.817272][ T9926] hash_accept+0x169/0x280 [ 248.817301][ T9926] do_accept+0x48c/0x680 [ 248.817335][ T9926] ? __pfx_do_accept+0x10/0x10 [ 248.817386][ T9926] __sys_accept4+0x11c/0x1c0 [ 248.817416][ T9926] ? __pfx___sys_accept4+0x10/0x10 [ 248.817444][ T9926] ? __pfx_ksys_write+0x10/0x10 [ 248.817467][ T9926] ? rcu_is_watching+0x15/0xb0 [ 248.817502][ T9926] __x64_sys_accept4+0x9a/0xb0 [ 248.817531][ T9926] do_syscall_64+0xfa/0x3b0 [ 248.817561][ T9926] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.817583][ T9926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.817602][ T9926] ? clear_bhb_loop+0x60/0xb0 [ 248.817626][ T9926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.817645][ T9926] RIP: 0033:0x7fb9aff8e969 [ 248.817662][ T9926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.817679][ T9926] RSP: 002b:00007fb9b0eb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 248.817700][ T9926] RAX: ffffffffffffffda RBX: 00007fb9b01b5fa0 RCX: 00007fb9aff8e969 [ 248.817714][ T9926] RDX: 0000000000000000 RSI: 0000200000000fc0 RDI: 0000000000000004 [ 248.817726][ T9926] RBP: 00007fb9b0eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 248.817738][ T9926] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 248.817749][ T9926] R13: 0000000000000000 R14: 00007fb9b01b5fa0 R15: 00007ffcb6b52298 [ 248.817780][ T9926] [ 249.079818][ T5844] Bluetooth: hci2: command tx timeout [ 249.328638][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1081'. [ 249.328667][ T9938] netlink: 'syz.4.1077': attribute type 6 has an invalid length. [ 249.337881][ T9943] tipc: Enabling of bearer rejected, failed to enable media [ 249.356677][ T9940] sctp: [Deprecated]: syz.2.1080 (pid 9940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.356677][ T9940] Use struct sctp_sack_info instead [ 250.064068][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1094'. [ 250.085718][ T9980] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1094'. [ 250.096485][ T9980] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 250.205869][ T9984] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.213218][ T9984] IPv6: NLM_F_CREATE should be set when creating new route [ 250.220520][ T9984] IPv6: NLM_F_CREATE should be set when creating new route [ 250.227816][ T9984] IPv6: NLM_F_CREATE should be set when creating new route [ 250.252890][ T9987] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 250.264905][ T9989] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.289786][ T9984] sit0: left promiscuous mode [ 250.549325][T10002] xt_ipcomp: unknown flags F7 [ 250.657680][T10010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.694112][T10011] netlink: 'syz.0.1104': attribute type 2 has an invalid length. [ 250.849696][T10015] __nla_validate_parse: 1 callbacks suppressed [ 250.849714][T10015] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1108'. [ 251.036170][T10024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1112'. [ 251.151244][ T5844] Bluetooth: hci2: command 0x0419 tx timeout [ 251.869921][ T1097] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.953870][ T1097] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.046533][ T1097] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.137287][ T1097] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.272440][ T1097] bridge_slave_1: left allmulticast mode [ 252.278161][ T1097] bridge_slave_1: left promiscuous mode [ 252.284487][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.294490][ T1097] bridge_slave_0: left allmulticast mode [ 252.300145][ T1097] bridge_slave_0: left promiscuous mode [ 252.306398][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.614187][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.625578][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.637800][ T1097] bond0 (unregistering): Released all slaves [ 252.856567][ T1097] hsr_slave_0: left promiscuous mode [ 252.864636][ T1097] hsr_slave_1: left promiscuous mode [ 252.870571][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.878445][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.886527][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.894901][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.915772][ T1097] veth1_macvtap: left promiscuous mode [ 252.921558][ T1097] veth0_macvtap: left promiscuous mode [ 252.927148][ T1097] veth1_vlan: left promiscuous mode [ 252.932590][ T1097] veth0_vlan: left promiscuous mode [ 253.459632][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.478747][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.495116][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.514897][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.529896][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.609399][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 253.650209][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 254.023054][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1123'. [ 254.032497][T10054] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1121'. [ 254.215161][T10072] netlink: 'syz.4.1127': attribute type 1 has an invalid length. [ 254.239761][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1127'. [ 254.335352][T10077] IPv6: NLM_F_CREATE should be specified when creating new route [ 254.588899][T10064] chnl_net:caif_netlink_parms(): no params data found [ 254.856101][T10064] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.863466][T10064] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.870780][T10064] bridge_slave_0: entered allmulticast mode [ 254.878764][T10102] FAULT_INJECTION: forcing a failure. [ 254.878764][T10102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.878816][T10064] bridge_slave_0: entered promiscuous mode [ 254.879994][T10102] [ 254.880005][T10102] ====================================================== [ 254.880014][T10102] WARNING: possible circular locking dependency detected [ 254.880029][T10102] 6.15.0-syzkaller-07774-g90b83efa6701 #0 Not tainted [ 254.880042][T10102] ------------------------------------------------------ [ 254.880051][T10102] syz.2.1131/10102 is trying to acquire lock: [ 254.880062][T10102] ffffffff8e130e00 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x444/0x7a0 [ 254.880128][T10102] [ 254.880128][T10102] but task is already holding lock: [ 254.880135][T10102] ffff8880b863b9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 254.880188][T10102] [ 254.880188][T10102] which lock already depends on the new lock. [ 254.880188][T10102] [ 254.880198][T10102] [ 254.880198][T10102] the existing dependency chain (in reverse order) is: [ 254.880206][T10102] [ 254.880206][T10102] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 254.880236][T10102] lock_acquire+0x120/0x360 [ 254.880262][T10102] _raw_spin_lock_nested+0x32/0x50 [ 254.880287][T10102] raw_spin_rq_lock_nested+0x2a/0x140 [ 254.880316][T10102] task_rq_lock+0xbc/0x470 [ 254.880344][T10102] cgroup_move_task+0x9a/0x590 [ 254.880377][T10102] css_set_move_task+0x658/0x9e0 [ 254.880404][T10102] cgroup_post_fork+0x1ef/0x790 [ 254.880422][T10102] copy_process+0x3862/0x3c00 [ 254.880453][T10102] kernel_clone+0x21e/0x870 [ 254.880490][T10102] user_mode_thread+0xdd/0x140 [ 254.880509][T10102] rest_init+0x23/0x300 [ 254.880540][T10102] start_kernel+0x478/0x500 [ 254.880567][T10102] x86_64_start_reservations+0x24/0x30 [ 254.880601][T10102] x86_64_start_kernel+0x143/0x1c0 [ 254.880634][T10102] common_startup_64+0x13e/0x147 [ 254.880656][T10102] [ 254.880656][T10102] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 254.880686][T10102] lock_acquire+0x120/0x360 [ 254.880724][T10102] _raw_spin_lock_irqsave+0xa7/0xf0 [ 254.880744][T10102] try_to_wake_up+0x6e/0x1290 [ 254.880765][T10102] __wake_up_common_lock+0x137/0x1f0 [ 254.880787][T10102] tty_port_default_wakeup+0xa2/0xf0 [ 254.880810][T10102] serial8250_tx_chars+0x72e/0x970 [ 254.880843][T10102] serial8250_handle_irq+0x633/0xbb0 [ 254.880863][T10102] serial8250_default_handle_irq+0xbf/0x1b0 [ 254.880890][T10102] serial8250_interrupt+0xa5/0x1d0 [ 254.880918][T10102] __handle_irq_event_percpu+0x28c/0x980 [ 254.880938][T10102] handle_irq_event+0x8b/0x1e0 [ 254.880957][T10102] handle_edge_irq+0x267/0x9c0 [ 254.880988][T10102] __common_interrupt+0x140/0x250 [ 254.881012][T10102] common_interrupt+0xb6/0xe0 [ 254.881042][T10102] asm_common_interrupt+0x26/0x40 [ 254.881062][T10102] pv_native_safe_halt+0x13/0x20 [ 254.881084][T10102] default_idle+0x13/0x20 [ 254.881111][T10102] default_idle_call+0x74/0xb0 [ 254.881138][T10102] do_idle+0x1e8/0x510 [ 254.881166][T10102] cpu_startup_entry+0x44/0x60 [ 254.881195][T10102] rest_init+0x2de/0x300 [ 254.881224][T10102] start_kernel+0x478/0x500 [ 254.881247][T10102] x86_64_start_reservations+0x24/0x30 [ 254.881279][T10102] x86_64_start_kernel+0x143/0x1c0 [ 254.881310][T10102] common_startup_64+0x13e/0x147 [ 254.881330][T10102] [ 254.881330][T10102] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 254.881360][T10102] lock_acquire+0x120/0x360 [ 254.881384][T10102] _raw_spin_lock_irqsave+0xa7/0xf0 [ 254.881411][T10102] __wake_up_common_lock+0x2f/0x1f0 [ 254.881433][T10102] tty_port_default_wakeup+0xa2/0xf0 [ 254.881455][T10102] serial8250_tx_chars+0x72e/0x970 [ 254.881486][T10102] serial8250_handle_irq+0x633/0xbb0 [ 254.881505][T10102] serial8250_default_handle_irq+0xbf/0x1b0 [ 254.881528][T10102] serial8250_interrupt+0xa5/0x1d0 [ 254.881556][T10102] __handle_irq_event_percpu+0x28c/0x980 [ 254.881576][T10102] handle_irq_event+0x8b/0x1e0 [ 254.881595][T10102] handle_edge_irq+0x267/0x9c0 [ 254.881625][T10102] __common_interrupt+0x140/0x250 [ 254.881649][T10102] common_interrupt+0xb6/0xe0 [ 254.881678][T10102] asm_common_interrupt+0x26/0x40 [ 254.881698][T10102] pv_native_safe_halt+0x13/0x20 [ 254.881721][T10102] default_idle+0x13/0x20 [ 254.881749][T10102] default_idle_call+0x74/0xb0 [ 254.881777][T10102] do_idle+0x1e8/0x510 [ 254.881805][T10102] cpu_startup_entry+0x44/0x60 [ 254.881834][T10102] rest_init+0x2de/0x300 [ 254.881863][T10102] start_kernel+0x478/0x500 [ 254.881887][T10102] x86_64_start_reservations+0x24/0x30 [ 254.881919][T10102] x86_64_start_kernel+0x143/0x1c0 [ 254.881950][T10102] common_startup_64+0x13e/0x147 [ 254.881970][T10102] [ 254.881970][T10102] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 254.881999][T10102] lock_acquire+0x120/0x360 [ 254.882023][T10102] _raw_spin_lock_irqsave+0xa7/0xf0 [ 254.882044][T10102] serial8250_console_write+0x17e/0x1ba0 [ 254.882065][T10102] console_flush_all+0x728/0xc40 [ 254.882085][T10102] console_unlock+0xc4/0x270 [ 254.882133][T10102] vprintk_emit+0x5b7/0x7a0 [ 254.882164][T10102] _printk+0xcf/0x120 [ 254.882183][T10102] register_console+0xa8b/0xf90 [ 254.882202][T10102] univ8250_console_init+0x52/0x90 [ 254.882232][T10102] console_init+0x1a1/0x670 [ 254.882261][T10102] start_kernel+0x2cc/0x500 [ 254.882284][T10102] x86_64_start_reservations+0x24/0x30 [ 254.882316][T10102] x86_64_start_kernel+0x143/0x1c0 [ 254.882348][T10102] common_startup_64+0x13e/0x147 [ 254.882368][T10102] [ 254.882368][T10102] -> #0 (console_owner){-.-.}-{0:0}: [ 254.882403][T10102] validate_chain+0xb9b/0x2140 [ 254.882433][T10102] __lock_acquire+0xab9/0xd20 [ 254.882457][T10102] lock_acquire+0x120/0x360 [ 254.882481][T10102] vprintk_emit+0x460/0x7a0 [ 254.882510][T10102] _printk+0xcf/0x120 [ 254.882529][T10102] should_fail_ex+0x3f5/0x560 [ 254.882553][T10102] strncpy_from_user+0x36/0x290 [ 254.882575][T10102] strncpy_from_user_nofault+0x72/0x140 [ 254.882602][T10102] bpf_probe_read_user_str+0x2a/0x70 [ 254.882629][T10102] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 254.882647][T10102] bpf_trace_run4+0x28e/0x4a0 [ 254.882666][T10102] __bpf_trace_sched_switch+0x17a/0x1e0 [ 254.882687][T10102] __traceiter_sched_switch+0x9d/0xd0 [ 254.882709][T10102] __schedule+0x2328/0x4d00 [ 254.882728][T10102] schedule+0x165/0x360 [ 254.882748][T10102] schedule_preempt_disabled+0x13/0x30 [ 254.882771][T10102] __mutex_lock+0x5ca/0xe80 [ 254.882795][T10102] nl80211_pre_doit+0x5f/0x930 [ 254.882817][T10102] genl_family_rcv_msg_doit+0x1be/0x300 [ 254.882843][T10102] genl_rcv_msg+0x60e/0x790 [ 254.882865][T10102] netlink_rcv_skb+0x205/0x470 [ 254.882895][T10102] genl_rcv+0x28/0x40 [ 254.882915][T10102] netlink_unicast+0x758/0x8d0 [ 254.882942][T10102] netlink_sendmsg+0x805/0xb30 [ 254.882959][T10102] __sock_sendmsg+0x219/0x270 [ 254.882984][T10102] ____sys_sendmsg+0x505/0x830 [ 254.883001][T10102] ___sys_sendmsg+0x21f/0x2a0 [ 254.883020][T10102] __x64_sys_sendmsg+0x19b/0x260 [ 254.883039][T10102] do_syscall_64+0xfa/0x3b0 [ 254.883065][T10102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.883085][T10102] [ 254.883085][T10102] other info that might help us debug this: [ 254.883085][T10102] [ 254.883093][T10102] Chain exists of: [ 254.883093][T10102] console_owner --> &p->pi_lock --> &rq->__lock [ 254.883093][T10102] [ 254.883130][T10102] Possible unsafe locking scenario: [ 254.883130][T10102] [ 254.883137][T10102] CPU0 CPU1 [ 254.883144][T10102] ---- ---- [ 254.883151][T10102] lock(&rq->__lock); [ 254.883167][T10102] lock(&p->pi_lock); [ 254.883183][T10102] lock(&rq->__lock); [ 254.883199][T10102] lock(console_owner); [ 254.883213][T10102] [ 254.883213][T10102] *** DEADLOCK *** [ 254.883213][T10102] [ 254.883220][T10102] 4 locks held by syz.2.1131/10102: [ 254.883233][T10102] #0: ffffffff8f570970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 254.883286][T10102] #1: ffffffff8f50a808 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 254.883338][T10102] #2: ffff8880b863b9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 254.883404][T10102] #3: ffffffff8e13ccc0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 254.883455][T10102] [ 254.883455][T10102] stack backtrace: [ 254.883466][T10102] CPU: 0 UID: 0 PID: 10102 Comm: syz.2.1131 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 254.883493][T10102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.883507][T10102] Call Trace: [ 254.883515][T10102] [ 254.883524][T10102] dump_stack_lvl+0x189/0x250 [ 254.883560][T10102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.883594][T10102] ? __pfx__printk+0x10/0x10 [ 254.883618][T10102] ? print_lock_name+0xde/0x100 [ 254.883643][T10102] print_circular_bug+0x2ee/0x310 [ 254.883678][T10102] check_noncircular+0x134/0x160 [ 254.883715][T10102] validate_chain+0xb9b/0x2140 [ 254.883761][T10102] __lock_acquire+0xab9/0xd20 [ 254.883791][T10102] ? vprintk_emit+0x444/0x7a0 [ 254.883831][T10102] lock_acquire+0x120/0x360 [ 254.883856][T10102] ? vprintk_emit+0x444/0x7a0 [ 254.883890][T10102] ? do_raw_spin_unlock+0x122/0x240 [ 254.883909][T10102] ? vprintk_emit+0x444/0x7a0 [ 254.883940][T10102] vprintk_emit+0x460/0x7a0 [ 254.883969][T10102] ? vprintk_emit+0x444/0x7a0 [ 254.883999][T10102] ? __pfx_vprintk_emit+0x10/0x10 [ 254.884029][T10102] ? __lock_acquire+0xab9/0xd20 [ 254.884076][T10102] ? bpf_trace_run2+0x186/0x4b0 [ 254.884102][T10102] _printk+0xcf/0x120 [ 254.884122][T10102] ? __pfx____ratelimit+0x10/0x10 [ 254.884150][T10102] ? __pfx__printk+0x10/0x10 [ 254.884170][T10102] ? bpf_trace_run2+0x322/0x4b0 [ 254.884192][T10102] ? bpf_trace_run2+0x186/0x4b0 [ 254.884220][T10102] should_fail_ex+0x3f5/0x560 [ 254.884248][T10102] strncpy_from_user+0x36/0x290 [ 254.884276][T10102] strncpy_from_user_nofault+0x72/0x140 [ 254.884305][T10102] bpf_probe_read_user_str+0x2a/0x70 [ 254.884336][T10102] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 254.884354][T10102] bpf_trace_run4+0x28e/0x4a0 [ 254.884376][T10102] ? bpf_trace_run4+0x19c/0x4a0 [ 254.884405][T10102] ? __pfx_bpf_trace_run4+0x10/0x10 [ 254.884425][T10102] ? kvm_sched_clock_read+0x11/0x20 [ 254.884449][T10102] ? sched_clock_cpu+0x74/0x430 [ 254.884481][T10102] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 254.884507][T10102] __bpf_trace_sched_switch+0x17a/0x1e0 [ 254.884534][T10102] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 254.884556][T10102] ? psi_group_change+0xbc7/0x1210 [ 254.884589][T10102] ? rcu_read_lock_sched_held+0x89/0x100 [ 254.884621][T10102] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 254.884656][T10102] ? psi_task_switch+0x314/0x6d0 [ 254.884692][T10102] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 254.884715][T10102] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 254.884738][T10102] __traceiter_sched_switch+0x9d/0xd0 [ 254.884764][T10102] __schedule+0x2328/0x4d00 [ 254.884789][T10102] ? bpf_trace_run2+0x322/0x4b0 [ 254.884809][T10102] ? bpf_trace_run2+0x186/0x4b0 [ 254.884837][T10102] ? schedule+0x165/0x360 [ 254.884858][T10102] ? __bpf_trace_contention_begin+0xcd/0x130 [ 254.884894][T10102] ? __pfx___schedule+0x10/0x10 [ 254.884915][T10102] ? __bpf_trace_contention_begin+0xdc/0x130 [ 254.884961][T10102] schedule+0x165/0x360 [ 254.884984][T10102] schedule_preempt_disabled+0x13/0x30 [ 254.885007][T10102] __mutex_lock+0x5ca/0xe80 [ 254.885035][T10102] ? __mutex_lock+0x51b/0xe80 [ 254.885065][T10102] ? nl80211_pre_doit+0x5f/0x930 [ 254.885089][T10102] ? __pfx___mutex_lock+0x10/0x10 [ 254.885124][T10102] ? __nla_parse+0x40/0x60 [ 254.885154][T10102] nl80211_pre_doit+0x5f/0x930 [ 254.885176][T10102] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 254.885209][T10102] genl_family_rcv_msg_doit+0x1be/0x300 [ 254.885239][T10102] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 254.885273][T10102] ? bpf_lsm_capable+0x9/0x20 [ 254.885305][T10102] ? security_capable+0x7e/0x2e0 [ 254.885335][T10102] genl_rcv_msg+0x60e/0x790 [ 254.885364][T10102] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.885394][T10102] ? ref_tracker_free+0x63a/0x7d0 [ 254.885422][T10102] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 254.885445][T10102] ? __pfx_nl80211_del_key+0x10/0x10 [ 254.885469][T10102] ? __pfx_nl80211_post_doit+0x10/0x10 [ 254.885495][T10102] ? __pfx_ref_tracker_free+0x10/0x10 [ 254.885529][T10102] netlink_rcv_skb+0x205/0x470 [ 254.885563][T10102] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.885588][T10102] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 254.885630][T10102] ? down_read+0x1ad/0x2e0 [ 254.885671][T10102] genl_rcv+0x28/0x40 [ 254.885692][T10102] netlink_unicast+0x758/0x8d0 [ 254.885726][T10102] netlink_sendmsg+0x805/0xb30 [ 254.885748][T10102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.885769][T10102] ? aa_sock_msg_perm+0x94/0x160 [ 254.885795][T10102] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 254.885818][T10102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.885837][T10102] __sock_sendmsg+0x219/0x270 [ 254.885864][T10102] ____sys_sendmsg+0x505/0x830 [ 254.885887][T10102] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.885911][T10102] ? import_iovec+0x74/0xa0 [ 254.885934][T10102] ___sys_sendmsg+0x21f/0x2a0 [ 254.885973][T10102] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.886014][T10102] ? __fget_files+0x2a/0x420 [ 254.886046][T10102] ? __fget_files+0x3a0/0x420 [ 254.886083][T10102] __x64_sys_sendmsg+0x19b/0x260 [ 254.886106][T10102] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.886133][T10102] ? __pfx_ksys_write+0x10/0x10 [ 254.886159][T10102] ? rcu_is_watching+0x15/0xb0 [ 254.886193][T10102] ? do_syscall_64+0xbe/0x3b0 [ 254.886222][T10102] do_syscall_64+0xfa/0x3b0 [ 254.886248][T10102] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.886273][T10102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.886295][T10102] ? clear_bhb_loop+0x60/0xb0 [ 254.886320][T10102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.886340][T10102] RIP: 0033:0x7fc6d038e969 [ 254.886360][T10102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.886378][T10102] RSP: 002b:00007fc6ce1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.886406][T10102] RAX: ffffffffffffffda RBX: 00007fc6d05b5fa0 RCX: 00007fc6d038e969 [ 254.886423][T10102] RDX: 0000000000004014 RSI: 0000200000000040 RDI: 0000000000000003 [ 254.886439][T10102] RBP: 00007fc6ce1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 254.886452][T10102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.886466][T10102] R13: 0000000000000000 R14: 00007fc6d05b5fa0 R15: 00007ffc281f4dc8 [ 254.886492][T10102] [ 256.313118][T10102] CPU: 0 UID: 0 PID: 10102 Comm: syz.2.1131 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 256.313138][T10102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.313147][T10102] Call Trace: [ 256.313154][T10102] [ 256.313161][T10102] dump_stack_lvl+0x189/0x250 [ 256.313187][T10102] ? __pfx____ratelimit+0x10/0x10 [ 256.313204][T10102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.313225][T10102] ? __pfx__printk+0x10/0x10 [ 256.313238][T10102] ? bpf_trace_run2+0x322/0x4b0 [ 256.313252][T10102] ? bpf_trace_run2+0x186/0x4b0 [ 256.313268][T10102] should_fail_ex+0x414/0x560 [ 256.313288][T10102] strncpy_from_user+0x36/0x290 [ 256.313305][T10102] strncpy_from_user_nofault+0x72/0x140 [ 256.313324][T10102] bpf_probe_read_user_str+0x2a/0x70 [ 256.313344][T10102] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 256.313356][T10102] bpf_trace_run4+0x28e/0x4a0 [ 256.313370][T10102] ? bpf_trace_run4+0x19c/0x4a0 [ 256.313383][T10102] ? __pfx_bpf_trace_run4+0x10/0x10 [ 256.313396][T10102] ? kvm_sched_clock_read+0x11/0x20 [ 256.313411][T10102] ? sched_clock_cpu+0x74/0x430 [ 256.313431][T10102] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 256.313448][T10102] __bpf_trace_sched_switch+0x17a/0x1e0 [ 256.313463][T10102] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 256.313476][T10102] ? psi_group_change+0xbc7/0x1210 [ 256.313496][T10102] ? rcu_read_lock_sched_held+0x89/0x100 [ 256.313516][T10102] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 256.313537][T10102] ? psi_task_switch+0x314/0x6d0 [ 256.313558][T10102] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 256.313572][T10102] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 256.313586][T10102] __traceiter_sched_switch+0x9d/0xd0 [ 256.313603][T10102] __schedule+0x2328/0x4d00 [ 256.313619][T10102] ? bpf_trace_run2+0x322/0x4b0 [ 256.313631][T10102] ? bpf_trace_run2+0x186/0x4b0 [ 256.313647][T10102] ? schedule+0x165/0x360 [ 256.313660][T10102] ? __bpf_trace_contention_begin+0xcd/0x130 [ 256.313682][T10102] ? __pfx___schedule+0x10/0x10 [ 256.313694][T10102] ? __bpf_trace_contention_begin+0xdc/0x130 [ 256.313741][T10102] schedule+0x165/0x360 [ 256.313756][T10102] schedule_preempt_disabled+0x13/0x30 [ 256.313771][T10102] __mutex_lock+0x5ca/0xe80 [ 256.313789][T10102] ? __mutex_lock+0x51b/0xe80 [ 256.313807][T10102] ? nl80211_pre_doit+0x5f/0x930 [ 256.313824][T10102] ? __pfx___mutex_lock+0x10/0x10 [ 256.313858][T10102] ? __nla_parse+0x40/0x60 [ 256.313878][T10102] nl80211_pre_doit+0x5f/0x930 [ 256.313892][T10102] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 256.313911][T10102] genl_family_rcv_msg_doit+0x1be/0x300 [ 256.313930][T10102] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 256.313950][T10102] ? bpf_lsm_capable+0x9/0x20 [ 256.313970][T10102] ? security_capable+0x7e/0x2e0 [ 256.313989][T10102] genl_rcv_msg+0x60e/0x790 [ 256.314006][T10102] ? __pfx_genl_rcv_msg+0x10/0x10 [ 256.314020][T10102] ? ref_tracker_free+0x63a/0x7d0 [ 256.314036][T10102] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 256.314050][T10102] ? __pfx_nl80211_del_key+0x10/0x10 [ 256.314065][T10102] ? __pfx_nl80211_post_doit+0x10/0x10 [ 256.314084][T10102] ? __pfx_ref_tracker_free+0x10/0x10 [ 256.314106][T10102] netlink_rcv_skb+0x205/0x470 [ 256.314126][T10102] ? __pfx_genl_rcv_msg+0x10/0x10 [ 256.314142][T10102] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 256.314168][T10102] ? down_read+0x1ad/0x2e0 [ 256.314186][T10102] genl_rcv+0x28/0x40 [ 256.314199][T10102] netlink_unicast+0x758/0x8d0 [ 256.314221][T10102] netlink_sendmsg+0x805/0xb30 [ 256.314237][T10102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.314250][T10102] ? aa_sock_msg_perm+0x94/0x160 [ 256.314267][T10102] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 256.314283][T10102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.314294][T10102] __sock_sendmsg+0x219/0x270 [ 256.314312][T10102] ____sys_sendmsg+0x505/0x830 [ 256.314327][T10102] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.314343][T10102] ? import_iovec+0x74/0xa0 [ 256.314357][T10102] ___sys_sendmsg+0x21f/0x2a0 [ 256.314370][T10102] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.314395][T10102] ? __fget_files+0x2a/0x420 [ 256.314415][T10102] ? __fget_files+0x3a0/0x420 [ 256.314439][T10102] __x64_sys_sendmsg+0x19b/0x260 [ 256.314453][T10102] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.314469][T10102] ? __pfx_ksys_write+0x10/0x10 [ 256.314486][T10102] ? rcu_is_watching+0x15/0xb0 [ 256.314507][T10102] ? do_syscall_64+0xbe/0x3b0 [ 256.314525][T10102] do_syscall_64+0xfa/0x3b0 [ 256.314541][T10102] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.314557][T10102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.314569][T10102] ? clear_bhb_loop+0x60/0xb0 [ 256.314584][T10102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.314597][T10102] RIP: 0033:0x7fc6d038e969 [ 256.314610][T10102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.314621][T10102] RSP: 002b:00007fc6ce1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.314636][T10102] RAX: ffffffffffffffda RBX: 00007fc6d05b5fa0 RCX: 00007fc6d038e969 [ 256.314646][T10102] RDX: 0000000000004014 RSI: 0000200000000040 RDI: 0000000000000003 [ 256.314655][T10102] RBP: 00007fc6ce1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 256.314663][T10102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.314671][T10102] R13: 0000000000000000 R14: 00007fc6d05b5fa0 R15: 00007ffc281f4dc8 [ 256.314686][T10102] [ 256.328093][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.466608][ T5844] Bluetooth: hci2: command tx timeout [ 256.488700][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.859957][T10064] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.867275][T10064] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.875137][T10064] bridge_slave_1: entered allmulticast mode [ 256.883044][T10064] bridge_slave_1: entered promiscuous mode [ 256.912200][T10064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.923763][T10064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.952466][T10064] team0: Port device team_slave_0 added [ 256.960195][T10064] team0: Port device team_slave_1 added [ 256.981735][T10064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.988839][T10064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.014922][T10064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.026865][T10064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.034511][T10064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.060536][T10064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.093506][T10064] hsr_slave_0: entered promiscuous mode [ 257.099682][T10064] hsr_slave_1: entered promiscuous mode [ 257.105803][T10064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.113400][T10064] Cannot create hsr debugfs directory [ 257.355468][T10064] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 257.364466][T10064] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 257.380501][T10064] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 257.389399][T10064] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 257.437647][T10064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.457874][T10064] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.468374][ T6657] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.475478][ T6657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.488733][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.495843][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.623004][T10064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.658156][T10064] veth0_vlan: entered promiscuous mode [ 257.667967][T10064] veth1_vlan: entered promiscuous mode [ 257.690513][T10064] veth0_macvtap: entered promiscuous mode [ 257.698907][T10064] veth1_macvtap: entered promiscuous mode [ 257.714621][T10064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.726560][T10064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.736761][T10064] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.745989][T10064] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.756187][T10064] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.764930][T10064] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.792152][T10064] ieee80211 phy80: Selected rate control algorithm 'minstrel_ht' [ 257.821384][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.823037][T10064] ieee80211 phy81: Selected rate control algorithm 'minstrel_ht' [ 257.829277][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.861349][ T6638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.869975][ T6638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.840015][ T6657] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.504629][ T6657] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.566393][ T6657] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.614842][ T6657] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.692150][ T6657] bridge_slave_1: left allmulticast mode [ 261.697828][ T6657] bridge_slave_1: left promiscuous mode [ 261.703590][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.713332][ T6657] bridge_slave_0: left allmulticast mode [ 261.719097][ T6657] bridge_slave_0: left promiscuous mode [ 261.725854][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.835558][ T6657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.845670][ T6657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.856368][ T6657] bond0 (unregistering): Released all slaves [ 262.019684][ T6657] hsr_slave_0: left promiscuous mode [ 262.025522][ T6657] hsr_slave_1: left promiscuous mode [ 262.031972][ T6657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.039402][ T6657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.047178][ T6657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.055894][ T6657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.066295][ T6657] veth1_macvtap: left promiscuous mode [ 262.071981][ T6657] veth0_macvtap: left promiscuous mode [ 262.077563][ T6657] veth1_vlan: left promiscuous mode [ 262.082889][ T6657] veth0_vlan: left promiscuous mode [ 262.199660][ T6657] team0 (unregistering): Port device team_slave_1 removed [ 262.216033][ T6657] team0 (unregistering): Port device team_slave_0 removed