last executing test programs: 1.940156821s ago: executing program 1 (id=1131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x4000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x1000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) getsockname(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='GPL\x00'}, 0x94) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtfilter={0xa8, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xfffffffd, 0x8, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @TCA_RATE={0x6, 0x5, {0x4b, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 1.905384954s ago: executing program 2 (id=1132): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'pim6reg0\x00', 0x400}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000440)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000540)={'pim6reg0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2c0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000600)={'syzkaller0\x00'}) 1.688478087s ago: executing program 1 (id=1135): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000000)="95", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x1, 0x3, 0xa8, 0x1, 0x9, 0xd2e, 0x7, {0x0, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0x10}}, 0x5, 0x9, 0x7, 0x37, 0xda8}}, &(0x7f0000000040)=0xb0) recvmmsg(0xffffffffffffffff, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000a80)=""/4089, 0xff9}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000002c80)=""/188, 0xbc}, {&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000002ec0)=""/212, 0xdc}, {&(0x7f0000002fc0)=""/189, 0xbd}, {&(0x7f0000003080)=""/4083, 0xff3}, {&(0x7f00000005c0)=""/46, 0x2e}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3fffffffffffe5f, 0x40, 0x0) 1.628262673s ago: executing program 2 (id=1136): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @local, 0x1}, {0xa, 0x4e22, 0x4, @loopback, 0x800000}, r1, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r1, 0x6}}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x2797, 0x4) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='270', 0x3) syz_open_dev$loop(0x0, 0x6, 0x14f882) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) unshare(0x40000000) 1.549611181s ago: executing program 1 (id=1137): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7) 1.528287873s ago: executing program 3 (id=1139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1f, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.431865123s ago: executing program 1 (id=1140): socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000003c0)={0x43, 0x0, 0x3, 0x3}, 0x10) write(r0, &(0x7f0000000400)="580000001400010300000000000000001e000000ffffffff00"/66, 0x42) 1.256869881s ago: executing program 3 (id=1142): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x71, 0x2c, 0x601, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0x5, 0xffff}, {0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x46c, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x31}, @TCA_FW_INDEV={0x14, 0x3, 'ip6gre0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_POLICE={0x43c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1, 0x6, 0x2, 0x9, 0xfe, 0xffffffff, 0x7, 0x0, 0x7, 0x1ff, 0xea, 0x2, 0x94e6, 0x5, 0x1, 0x6, 0xfffffffa, 0xfffffeff, 0xa, 0x10001, 0x6a79, 0x0, 0x9, 0x4aa7, 0x7, 0xffff7fff, 0x6, 0x1, 0x34b8, 0xff, 0xfffffffc, 0x5, 0x66e, 0x200, 0x4, 0x7, 0x80000201, 0xb4c1, 0x1, 0x2b, 0x3ff, 0x6, 0x5, 0x1000, 0x80, 0x5, 0x40, 0x5, 0xfff, 0x10001, 0x6, 0x6, 0x9, 0x8000, 0x5, 0x2, 0x9, 0x7, 0x100, 0x5, 0x8, 0x800, 0xfff, 0x36, 0x6, 0x40, 0xff, 0x101, 0xc, 0x40, 0x1, 0x6, 0xa, 0x60ba, 0x0, 0xd, 0x7, 0x3, 0x4, 0xa, 0x9, 0x1, 0x0, 0x4, 0xd, 0x2, 0x9, 0x0, 0x92f9, 0x8, 0x7f, 0x6, 0xc3, 0x0, 0x3, 0x2, 0x9, 0xa8f, 0xffff, 0x8, 0x1, 0x101, 0x0, 0x400006, 0x5, 0xd4, 0x14, 0x60000000, 0xc, 0x1, 0x0, 0x0, 0x9, 0xe, 0xbb9, 0x8, 0x5, 0x0, 0x10001, 0x3, 0xfff, 0x8, 0xfffffff8, 0xfffffffd, 0x10001, 0x4f4e, 0x4, 0x44af6f98, 0xffff833a, 0x6d, 0x7f91, 0x8a, 0x7c1, 0x10, 0x3, 0x6, 0xe1, 0x7, 0x3, 0x9, 0xeb10, 0xea70, 0x4932, 0x33df, 0xfc, 0x2, 0x9, 0x400, 0xe68, 0x7, 0x800, 0xcc90, 0x3ff, 0x3, 0x5, 0x4, 0xffff, 0x1000, 0x5, 0x8, 0x9, 0x2, 0x9, 0x4, 0x2, 0x5, 0x4, 0x7fff, 0x4, 0x641a, 0x2, 0x3, 0x6, 0x100, 0xa, 0x2, 0x9, 0xab3e, 0x3, 0x1, 0x7, 0xc, 0x7, 0x7f, 0x40000, 0x8, 0xe, 0x6, 0x4000000, 0xffff, 0x2, 0x200, 0xa, 0xfffffff6, 0x0, 0x100, 0x9, 0x2, 0x23, 0x5, 0x1, 0x3791, 0x8, 0x5, 0x3, 0x1, 0xd309, 0x6, 0x1001, 0x6, 0x1, 0x7, 0x7fffffff, 0x4, 0x5, 0xfffffffa, 0x800, 0x0, 0x611e, 0x8, 0xfffffff1, 0x2, 0xffff, 0xfffffffb, 0x1, 0x1000, 0x4, 0xd, 0xb, 0xffffffff, 0x4, 0x3, 0x6, 0x4, 0x1, 0x9, 0x0, 0x10000, 0x4, 0x4, 0xd, 0x8, 0x6, 0xf, 0x5, 0x5, 0x6, 0xffffffff, 0x7f, 0x9, 0x4, 0x10000, 0x6, 0xfffffff9, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x19}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x70}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xa}}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x0) 1.17304201s ago: executing program 1 (id=1143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x4000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x1000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) getsockname(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='GPL\x00'}, 0x94) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtfilter={0xa8, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xfffffffd, 0x8, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @TCA_RATE={0x6, 0x5, {0x4b, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 976.09566ms ago: executing program 3 (id=1145): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000000)="95", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x1, 0x3, 0xa8, 0x1, 0x9, 0xd2e, 0x7, {0x0, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0x10}}, 0x5, 0x9, 0x7, 0x37, 0xda8}}, &(0x7f0000000040)=0xb0) recvmmsg(0xffffffffffffffff, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000a80)=""/4089, 0xff9}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000002c80)=""/188, 0xbc}, {&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000002ec0)=""/212, 0xdc}, {&(0x7f0000002fc0)=""/189, 0xbd}, {&(0x7f0000003080)=""/4083, 0xff3}, {&(0x7f00000005c0)=""/46, 0x2e}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3fffffffffffe5f, 0x40, 0x0) 865.835441ms ago: executing program 3 (id=1146): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 864.133001ms ago: executing program 1 (id=1147): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x3, @mcast1, 0x3cbf}, 0x1c) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) write$cgroup_pid(r1, &(0x7f0000000500), 0x12) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 800.210748ms ago: executing program 0 (id=1148): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7) 690.774949ms ago: executing program 3 (id=1149): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c, 0x80800) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "023312bac7415b25", "bf14156978d20bfd7a9fc54bcbf234bb", "3a358409", "2c586dfecb786a5c"}, 0x28) socket(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000240), 0x4a) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000280)=0x9, 0x4) sendmmsg$inet(r1, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffda1, 0x0}, 0xfff5}], 0x40001b6, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r5, 0x5) write$tun(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005000b0008"], 0x4a) 688.768019ms ago: executing program 2 (id=1150): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x48, r1, 0x1, 0x70bd25, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) 670.532471ms ago: executing program 0 (id=1151): socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000003c0)={0x43, 0x0, 0x3, 0x3}, 0x10) write(r0, &(0x7f0000000400)="580000001400010300000000000000001e000000ffffffff00"/66, 0x42) 530.653646ms ago: executing program 0 (id=1152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3848, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_EXPRESSIONS={0x37f8, 0x12, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x104, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xf0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb2, 0x1, "7be170b28cd9d2c24cd3d6e1915cfba107c16df29e42d97261f5e709b024e9a1bbe9f4b7e2d2cb43dc71ef73a6a9f5114d36f90666e50ac9ba99d072f0d8151efef1f00aa1491292c52efe008b9ca0ba434cdd9992ad6db5b6df12e3255ce7495cb3e31232c47719181a05a1fe4cb6f8132bc6fe6f4c5b0ac9cded36a883a3c4614496983042b11d386f7cd8e3cd7d342fff0842d8b22e4fcfceb41f868f57e418de1ec4a9640831a9ad3d73960b"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x3654, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x3644, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x2084, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xf84, 0x1, "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"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x6e, 0x1, "378db90ef5a196964413e3712403136bc09e55882907e0c5b600e2dc9b22e034718ea4606b07dc03e426eb38ad00af319dc02ce47a3204af70042cb9b713ed89bd6ed588a493dcff903f274591bb1b4b665d39db3486180aa7947375cedee9610e7b237c2e9e25f2893f"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x53, 0x1, "d76c2db49a83eebcd091bc97b38896e1fac61ac1a566f00b746dbb2867fe44a731697c353ffd9cb78a31a6c681fd6232e37856c719a11b502d46d3a6ec46537a56cd255454eb5ba8e3e3977962dfc0"}]}, @NFTA_BITWISE_MASK={0x58, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_BITWISE_DATA={0x11b4, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xffc, 0x1, "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"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x21, 0x1, "e2502471115ce8c1fa5674f6c261da0308b6b00a1ddb24d1b10c9e7479"}, @NFTA_DATA_VALUE={0x88, 0x1, "6592735ee72c97a9608c5add011d5dd4aca188782f704e3ffd8ecb467920836cfbaf403baac068ec38586d9546a87fa256b80f4f04c192218e6f657d36b2a010de801b848fc8374f7db57471a04f922516748a0a05813bf93681f0514db2510988bf11b22db5a0d383d0e433257232a78579c0756e403e8e430e23f0252ae4730c025320"}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DATA={0x1e0, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb2, 0x1, "6d3691b172a2735a99678bc8f6241a5428881bbbda4c3902f8a8ca8ea14ea8416cff9ffdd85acb11a389c869bcc4abdb8beee2eba27e939b3f70a8abd5331a714a9ccdd06d7c6cc94db2e6c56da3800953cd6d6b70f5ba06e210ef85fe6c6deef881a2c4a120d19ef15ff67a7142a1a7b7a42c02587a00ee2990e73889ee566054f7939dee78baccf1b552ce0373cd86673e3b114340c542de22dfbde5f5ecdd78e900f5a76a5877bf4739103d3e"}, @NFTA_DATA_VALUE={0xfd, 0x1, "ee735ea3169a454318290fba929e8573d3784fcd21f345f2d3c64ea461ceb78b089d633100dbfb4e6aca1a339b07f6e875c2fb2c53e5f8a646bf7e8765a7c7493520d1c549d019b45b1e71d4b3af2131466b57afa467d91a570452244ebcc9b7c7e62d7d5f1aa384ff78146ca2dad925439a5eec2fad499d117232db67df324683511a407fe4c857adcae89c00b5d256f7a5d2b3492a2f2929d4079ce8204fc37828788b9a7eb39b0be969e4f9d10289386589c94d1284591df90c027c0b842f8e4e71c8c1c42f4749b8ed657cc3fd70cb6adc5c2fd5391bcc3918d4212a8ecd4d0ddfc7991c5e70c4e9287eed57e9f78ddc7d97cf01040005"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BITWISE_MASK={0xd4, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x49, 0x1, "aabf253d926c148dddd67167817118a026a7c53b79011c095d8a595f1552892eec0cf59478545fae9fee5f051bcdd7800f4ee6aa6271effafc49b9d72c7980e2cb1444f37c"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_BITWISE_XOR={0xe4, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdd, 0x1, "bedffae0c70d95d5d7fc953e526428e8d25ed82e2f5c825901d1319c319aa79368e22c95aa4622d491e06d463ad077345e962fbbb5b299d9a1a25833638daea59adff91ae0dcb7f491952e27b5a645c0134f46fd00a9e355829283c0b27224c24571aa2d1bedb57d28ec4d4fe5fbbe771030722c17a3fc7975db7aa23d552e56180b87af4bbae7cfa1b98587b2ab47aa36a0b8578d11b17a04a922ba41132a7fdbe69cf2d00055fa038dedfb9f7989768bf557f81c18b09ac4cba148a9e0908b5d89754de899ffbea4faaf5fbf82fb49b7e48943b60ab39533"}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3870}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 528.338306ms ago: executing program 2 (id=1153): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x71, 0x2c, 0x601, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0x5, 0xffff}, {0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x46c, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x31}, @TCA_FW_INDEV={0x14, 0x3, 'ip6gre0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_POLICE={0x43c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1, 0x6, 0x2, 0x9, 0xfe, 0xffffffff, 0x7, 0x0, 0x7, 0x1ff, 0xea, 0x2, 0x94e6, 0x5, 0x1, 0x6, 0xfffffffa, 0xfffffeff, 0xa, 0x10001, 0x6a79, 0x0, 0x9, 0x4aa7, 0x7, 0xffff7fff, 0x6, 0x1, 0x34b8, 0xff, 0xfffffffc, 0x5, 0x66e, 0x200, 0x4, 0x7, 0x80000201, 0xb4c1, 0x1, 0x2b, 0x3ff, 0x6, 0x5, 0x1000, 0x80, 0x5, 0x40, 0x5, 0xfff, 0x10001, 0x6, 0x6, 0x9, 0x8000, 0x5, 0x2, 0x9, 0x7, 0x100, 0x5, 0x8, 0x800, 0xfff, 0x36, 0x6, 0x40, 0xff, 0x101, 0xc, 0x40, 0x1, 0x6, 0xa, 0x60ba, 0x0, 0xd, 0x7, 0x3, 0x4, 0xa, 0x9, 0x1, 0x0, 0x4, 0xd, 0x2, 0x9, 0x0, 0x92f9, 0x8, 0x7f, 0x6, 0xc3, 0x0, 0x3, 0x2, 0x9, 0xa8f, 0xffff, 0x8, 0x1, 0x101, 0x0, 0x400006, 0x5, 0xd4, 0x14, 0x60000000, 0xc, 0x1, 0x0, 0x0, 0x9, 0xe, 0xbb9, 0x8, 0x5, 0x0, 0x10001, 0x3, 0xfff, 0x8, 0xfffffff8, 0xfffffffd, 0x10001, 0x4f4e, 0x4, 0x44af6f98, 0xffff833a, 0x6d, 0x7f91, 0x8a, 0x7c1, 0x10, 0x3, 0x6, 0xe1, 0x7, 0x3, 0x9, 0xeb10, 0xea70, 0x4932, 0x33df, 0xfc, 0x2, 0x9, 0x400, 0xe68, 0x7, 0x800, 0xcc90, 0x3ff, 0x3, 0x5, 0x4, 0xffff, 0x1000, 0x5, 0x8, 0x9, 0x2, 0x9, 0x4, 0x2, 0x5, 0x4, 0x7fff, 0x4, 0x641a, 0x2, 0x3, 0x6, 0x100, 0xa, 0x2, 0x9, 0xab3e, 0x3, 0x1, 0x7, 0xc, 0x7, 0x7f, 0x40000, 0x8, 0xe, 0x6, 0x4000000, 0xffff, 0x2, 0x200, 0xa, 0xfffffff6, 0x0, 0x100, 0x9, 0x2, 0x23, 0x5, 0x1, 0x3791, 0x8, 0x5, 0x3, 0x1, 0xd309, 0x6, 0x1001, 0x6, 0x1, 0x7, 0x7fffffff, 0x4, 0x5, 0xfffffffa, 0x800, 0x0, 0x611e, 0x8, 0xfffffff1, 0x2, 0xffff, 0xfffffffb, 0x1, 0x1000, 0x4, 0xd, 0xb, 0xffffffff, 0x4, 0x3, 0x6, 0x4, 0x1, 0x9, 0x0, 0x10000, 0x4, 0x4, 0xd, 0x8, 0x6, 0xf, 0x5, 0x5, 0x6, 0xffffffff, 0x7f, 0x9, 0x4, 0x10000, 0x6, 0xfffffff9, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x19}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x70}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xa}}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x0) 361.976872ms ago: executing program 0 (id=1154): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000000)="95", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x1, 0x3, 0xa8, 0x1, 0x9, 0xd2e, 0x7, {0x0, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0x10}}, 0x5, 0x9, 0x7, 0x37, 0xda8}}, &(0x7f0000000040)=0xb0) recvmmsg(0xffffffffffffffff, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000a80)=""/4089, 0xff9}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000002c80)=""/188, 0xbc}, {&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000002ec0)=""/212, 0xdc}, {&(0x7f0000002fc0)=""/189, 0xbd}, {&(0x7f0000003080)=""/4083, 0xff3}, {&(0x7f00000005c0)=""/46, 0x2e}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3fffffffffffe5f, 0x40, 0x0) 274.662902ms ago: executing program 0 (id=1155): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="540100001000010000000000000000007f0000010000000000000000000000007f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd320000007f0000010000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000020100000000000002000000230000000000000048000200656362286369706865725f6e756c6c29"], 0x154}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000840)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x7}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, 0x0, 0x0) 273.224272ms ago: executing program 2 (id=1156): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000380)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000440)={'pim6reg0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000540)={'pim6reg0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2c0800, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000600)={'syzkaller0\x00'}) 108.996009ms ago: executing program 0 (id=1157): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0) 86.803331ms ago: executing program 3 (id=1158): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x3}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 2 (id=1159): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0), 0x12) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='THAWED\x00', 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. syzkaller login: [ 83.014677][ T5773] cgroup: Unknown subsys name 'net' [ 83.152307][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.946608][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.331308][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.341150][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.383566][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.392208][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.401538][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.404443][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.417289][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.426254][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.434241][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.442373][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.449927][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.457575][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.465872][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.474945][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.482548][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.482983][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.491638][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.507206][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.508850][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.523882][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.532274][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.539847][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.548218][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.557049][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.719595][ T5792] (null): rxe_set_mtu: Set mtu to 1024 [ 87.727370][ T5797] (null): rxe_set_mtu: Set mtu to 1024 [ 87.734756][ T5786] (null): rxe_set_mtu: Set mtu to 1024 [ 87.741563][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.750313][ T5792] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 87.754911][ T5797] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 87.765557][ T5785] (null): rxe_set_mtu: Set mtu to 1024 [ 87.771361][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 87.782217][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.839721][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.245275][ T5786] infiniband rxe0: set active [ 88.251483][ T5786] infiniband rxe0: added rxe_eth0 [ 88.295360][ T2141] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.379287][ T5786] RDS/IB: rxe0: added [ 88.397540][ T5786] smc: adding ib device rxe0 with port count 1 [ 88.412326][ T5786] smc: ib device rxe0 port 1 has pnetid [ 88.460836][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.506143][ T2141] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.610470][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 88.759964][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.768570][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 88.800448][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 88.858310][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.868911][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.877770][ T5797] bridge_slave_0: entered allmulticast mode [ 88.888038][ T5797] bridge_slave_0: entered promiscuous mode [ 88.959626][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.970459][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.977869][ T5797] bridge_slave_1: entered allmulticast mode [ 88.988877][ T5797] bridge_slave_1: entered promiscuous mode [ 89.048411][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.057714][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.142513][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.195328][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.202759][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.210505][ T5792] bridge_slave_0: entered allmulticast mode [ 89.218641][ T5792] bridge_slave_0: entered promiscuous mode [ 89.226897][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.235644][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.243171][ T5785] bridge_slave_0: entered allmulticast mode [ 89.251230][ T5785] bridge_slave_0: entered promiscuous mode [ 89.260691][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.268205][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.275881][ T5785] bridge_slave_1: entered allmulticast mode [ 89.283761][ T5785] bridge_slave_1: entered promiscuous mode [ 89.305506][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.312706][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.323581][ T5792] bridge_slave_1: entered allmulticast mode [ 89.343400][ T5792] bridge_slave_1: entered promiscuous mode [ 89.380170][ T5797] team0: Port device team_slave_0 added [ 89.404303][ T5797] team0: Port device team_slave_1 added [ 89.511217][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.529050][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.554164][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.561238][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.587794][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.596269][ T52] Bluetooth: hci1: command tx timeout [ 89.602109][ T5798] Bluetooth: hci2: command tx timeout [ 89.609595][ T5798] Bluetooth: hci3: command tx timeout [ 89.612763][ T52] Bluetooth: hci0: command tx timeout [ 89.627295][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.648429][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.700984][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.744371][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.751416][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.796914][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.866343][ T5785] team0: Port device team_slave_0 added [ 89.881550][ T5792] team0: Port device team_slave_0 added [ 89.892563][ T5785] team0: Port device team_slave_1 added [ 89.923425][ T5792] team0: Port device team_slave_1 added [ 90.002897][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.010283][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.036656][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.060111][ T5797] hsr_slave_0: entered promiscuous mode [ 90.068661][ T5797] hsr_slave_1: entered promiscuous mode [ 90.094915][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.101948][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.131910][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.148224][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.155952][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.182829][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.198815][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.206454][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.236220][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.366666][ T5785] hsr_slave_0: entered promiscuous mode [ 90.373776][ T5785] hsr_slave_1: entered promiscuous mode [ 90.382184][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.390295][ T5785] Cannot create hsr debugfs directory [ 90.449141][ T5792] hsr_slave_0: entered promiscuous mode [ 90.455699][ T5792] hsr_slave_1: entered promiscuous mode [ 90.461988][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.469941][ T5792] Cannot create hsr debugfs directory [ 90.626892][ T5447] infiniband rxe0: set active [ 90.703378][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.904478][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.950309][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.962073][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.980796][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.058890][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.084742][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 91.102252][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.119929][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.165139][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.242790][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.253622][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.260878][ T5786] bridge_slave_0: entered allmulticast mode [ 91.268555][ T5786] bridge_slave_0: entered promiscuous mode [ 91.301346][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.311294][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.319315][ T5786] bridge_slave_1: entered allmulticast mode [ 91.327345][ T5786] bridge_slave_1: entered promiscuous mode [ 91.349065][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.361050][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.391221][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.407925][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.424936][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.437047][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.485077][ T5786] team0: Port device team_slave_0 added [ 91.505399][ T5786] team0: Port device team_slave_1 added [ 91.570103][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.578158][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.604945][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.620820][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.631066][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.659534][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.673415][ T5790] Bluetooth: hci0: command tx timeout [ 91.674347][ T5798] Bluetooth: hci1: command tx timeout [ 91.678861][ T5790] Bluetooth: hci2: command tx timeout [ 91.688637][ T52] Bluetooth: hci3: command tx timeout [ 91.765678][ T5786] hsr_slave_0: entered promiscuous mode [ 91.772411][ T5786] hsr_slave_1: entered promiscuous mode [ 91.779390][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.787062][ T5786] Cannot create hsr debugfs directory [ 91.875870][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.992887][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.010190][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.017627][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.039896][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.098406][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.128458][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.135700][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.145616][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.152812][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.231559][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.238859][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.280008][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.298997][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.315212][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.330306][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.340438][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.381445][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.414534][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.421759][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.447141][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.454423][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.771668][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.847971][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.895886][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.903088][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.956103][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.963379][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.067903][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.098100][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.142045][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.231009][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.279614][ T5792] veth0_vlan: entered promiscuous mode [ 93.329983][ T5797] veth0_vlan: entered promiscuous mode [ 93.339222][ T5792] veth1_vlan: entered promiscuous mode [ 93.402240][ T5797] veth1_vlan: entered promiscuous mode [ 93.431821][ T5792] veth0_macvtap: entered promiscuous mode [ 93.461188][ T5792] veth1_macvtap: entered promiscuous mode [ 93.500197][ T5785] veth0_vlan: entered promiscuous mode [ 93.518301][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.536187][ T5785] veth1_vlan: entered promiscuous mode [ 93.553022][ T5797] veth0_macvtap: entered promiscuous mode [ 93.570629][ T5797] veth1_macvtap: entered promiscuous mode [ 93.587420][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.615301][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.625550][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.636777][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.645810][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.678305][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.690192][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.704315][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.752686][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.764271][ T52] Bluetooth: hci2: command tx timeout [ 93.769747][ T52] Bluetooth: hci3: command tx timeout [ 93.769824][ T5790] Bluetooth: hci1: command tx timeout [ 93.777363][ T52] Bluetooth: hci0: command tx timeout [ 93.782607][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.800691][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.817304][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.842189][ T5797] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.869522][ T5797] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.879071][ T5797] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.891217][ T5797] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.939803][ T5785] veth0_macvtap: entered promiscuous mode [ 93.991319][ T5785] veth1_macvtap: entered promiscuous mode [ 94.005297][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.021955][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.092161][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.108535][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.118613][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.129309][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.141069][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.170610][ T5786] veth0_vlan: entered promiscuous mode [ 94.195664][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.207173][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.218136][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.229187][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.241914][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.251508][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.274546][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.310040][ T5786] veth1_vlan: entered promiscuous mode [ 94.320113][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.332250][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.363456][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.372284][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.388125][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.397534][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.437678][ T5792] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.475474][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.496354][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.545540][ T5786] veth0_macvtap: entered promiscuous mode [ 94.588311][ T5786] veth1_macvtap: entered promiscuous mode [ 94.683198][ T5889] syz.3.4[5889]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.711954][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.724876][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.749488][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.759476][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.769958][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.780868][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.791217][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.806347][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.818659][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.865352][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.893975][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.910426][ T5889] loop3: detected capacity change from 0 to 8192 [ 94.917697][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.951299][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.978701][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.990660][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.026362][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.108630][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.153311][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.173335][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.182143][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.217434][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.248665][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.351641][ T5893] loop3: detected capacity change from 0 to 512 [ 95.394968][ T5893] ======================================================= [ 95.394968][ T5893] WARNING: The mand mount option has been deprecated and [ 95.394968][ T5893] and is ignored by this kernel. Remove the mand [ 95.394968][ T5893] option from the mount to silence this warning. [ 95.394968][ T5893] ======================================================= [ 95.501866][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.543634][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.602357][ T5893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.644704][ T5893] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.724864][ T5893] EXT4-fs error (device loop3): ext4_generic_delete_entry:2731: inode #12: block 32: comm syz.3.5: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 95.738252][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.753942][ T5891] sctp: [Deprecated]: syz.1.2 (pid 5891) Use of int in max_burst socket option. [ 95.753942][ T5891] Use struct sctp_assoc_value instead [ 95.774815][ T5893] EXT4-fs error (device loop3) in ext4_delete_entry:2802: Corrupt filesystem [ 95.815050][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.829839][ T5899] FAULT_INJECTION: forcing a failure. [ 95.829839][ T5899] name failslab, interval 1, probability 0, space 0, times 1 [ 95.843647][ T52] Bluetooth: hci1: command tx timeout [ 95.847937][ T5793] Bluetooth: hci3: command tx timeout [ 95.849187][ T5790] Bluetooth: hci2: command tx timeout [ 95.857000][ T5793] Bluetooth: hci0: command tx timeout [ 95.915083][ T5899] CPU: 1 PID: 5899 Comm: syz.0.1 Not tainted syzkaller #0 [ 95.922309][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.932412][ T5899] Call Trace: [ 95.935754][ T5899] [ 95.938720][ T5899] dump_stack_lvl+0x18c/0x250 [ 95.943452][ T5899] ? asm_sysvec_call_function_single+0x1a/0x20 [ 95.949680][ T5899] ? show_regs_print_info+0x20/0x20 [ 95.954936][ T5899] ? asm_sysvec_call_function_single+0x1a/0x20 [ 95.961152][ T5899] should_fail_ex+0x394/0x4c0 [ 95.965869][ T5899] should_failslab+0x9/0x20 [ 95.970402][ T5899] slab_pre_alloc_hook+0x59/0x300 [ 95.975474][ T5899] ? cache_create_net+0x92/0x260 [ 95.980450][ T5899] ? cache_create_net+0x92/0x260 [ 95.985421][ T5899] __kmem_cache_alloc_node+0x53/0x260 [ 95.990820][ T5899] ? rcu_is_watching+0x15/0xb0 [ 95.995627][ T5899] ? cache_create_net+0x92/0x260 [ 96.000619][ T5899] __kmalloc+0xa7/0x240 [ 96.004824][ T5899] cache_create_net+0x92/0x260 [ 96.009634][ T5899] nfsd_export_init+0x59/0x1f0 [ 96.014454][ T5899] nfsd_net_init+0x2d/0x1e0 [ 96.019037][ T5899] ops_init+0x391/0x640 [ 96.023277][ T5899] setup_net+0x3b6/0xa20 [ 96.027587][ T5899] ? copy_net_ns+0x530/0x530 [ 96.032231][ T5899] ? copy_net_ns+0x347/0x530 [ 96.036885][ T5899] ? down_read_killable+0x1d0/0x340 [ 96.042134][ T5899] copy_net_ns+0x361/0x530 [ 96.046607][ T5899] create_new_namespaces+0x3ce/0x700 [ 96.051946][ T5899] unshare_nsproxy_namespaces+0x11a/0x160 [ 96.057725][ T5899] ksys_unshare+0x4fa/0x8f0 [ 96.062274][ T5899] ? sighand_ctor+0x50/0x50 [ 96.066845][ T5899] ? lock_chain_count+0x20/0x20 [ 96.071844][ T5899] ? syscall_enter_from_user_mode+0x25/0x80 [ 96.077796][ T5899] __x64_sys_unshare+0x38/0x40 [ 96.082627][ T5899] do_syscall_64+0x55/0xb0 [ 96.087084][ T5899] ? clear_bhb_loop+0x40/0x90 [ 96.091793][ T5899] ? clear_bhb_loop+0x40/0x90 [ 96.096519][ T5899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.102480][ T5899] RIP: 0033:0x7fa408f9f559 [ 96.106943][ T5899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.126682][ T5899] RSP: 002b:00007fa409e01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 96.135143][ T5899] RAX: ffffffffffffffda RBX: 00007fa409225fa0 RCX: 00007fa408f9f559 [ 96.143166][ T5899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 96.151181][ T5899] RBP: 00007fa409036b20 R08: 0000000000000000 R09: 0000000000000000 [ 96.159186][ T5899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.167191][ T5899] R13: 00007fa409226038 R14: 00007fa409225fa0 R15: 00007ffd33abbc48 [ 96.175222][ T5899] [ 96.219248][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.419679][ T5904] loop2: detected capacity change from 0 to 512 [ 96.461431][ T5904] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.3: iget: bad i_size value: 38620345925642 [ 96.526421][ T5904] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.3: couldn't read orphan inode 15 (err -117) [ 96.563219][ T5904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.592420][ T5909] loop1: detected capacity change from 0 to 128 [ 96.612897][ T5909] ext4: Unknown parameter 'audit' [ 96.649672][ T5909] EXT4-fs warning (device sda1): ext4_group_extend:1876: need to use ext2online to resize further [ 96.768191][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.864664][ T5915] autofs4:pid:5915:autofs_fill_super: called with bogus options [ 96.918258][ T5914] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET) [ 97.214156][ T23] cfg80211: failed to load regulatory.db [ 97.263584][ T5929] syzkaller0: entered promiscuous mode [ 97.269140][ T5929] syzkaller0: entered allmulticast mode [ 97.297621][ T5929] tipc: Started in network mode [ 97.302806][ T5929] tipc: Node identity b673393cde17, cluster identity 4711 [ 97.334356][ T5929] tipc: Enabled bearer , priority 0 [ 97.355228][ T5931] loop0: detected capacity change from 0 to 256 [ 97.394525][ T5929] tipc: Resetting bearer [ 97.409936][ T5931] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.474654][ T5928] tipc: Resetting bearer [ 97.582650][ T5928] tipc: Disabling bearer [ 98.422905][ T5962] loop0: detected capacity change from 0 to 256 [ 98.882426][ T5978] loop0: detected capacity change from 0 to 2048 [ 98.932137][ T5978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.121448][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.512466][ T6003] syzkaller0: entered promiscuous mode [ 99.518852][ T6003] syzkaller0: entered allmulticast mode [ 99.533500][ T6007] tipc: Enabled bearer , priority 0 [ 99.566382][ T6002] tipc: Resetting bearer [ 101.558007][ T6002] tipc: Disabling bearer [ 101.574716][ T9] tipc: Node number set to 1751398716 [ 101.721033][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.255509][ T6057] IPv6: Can't replace route, no match found [ 102.531163][ T6065] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.543064][ T6068] netlink: 44 bytes leftover after parsing attributes in process `syz.3.57'. [ 102.597671][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 103.333022][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 103.938321][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 104.113905][ T6117] netlink: 44 bytes leftover after parsing attributes in process `syz.1.67'. [ 104.153493][ T5793] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 104.153644][ T52] Bluetooth: hci4: command 0x1003 tx timeout [ 104.406320][ T6123] ip_tables: iptables: counters copy to user failed while replacing table [ 104.975632][ T6149] netlink: 44 bytes leftover after parsing attributes in process `syz.3.78'. [ 105.126761][ T6152] loop3: detected capacity change from 0 to 4096 [ 105.137697][ T6152] ext2: Unknown parameter 'dont_appraise' [ 105.250856][ T6158] Bluetooth: MGMT ver 1.22 [ 105.406432][ T6163] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.784609][ T6172] netlink: 44 bytes leftover after parsing attributes in process `syz.1.88'. [ 106.040515][ T6176] loop1: detected capacity change from 0 to 4096 [ 106.090668][ T6176] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 106.562346][ T6182] loop3: detected capacity change from 0 to 4096 [ 106.570845][ T6182] ext2: Unknown parameter 'dont_appraise' [ 106.917348][ T6193] netlink: 44 bytes leftover after parsing attributes in process `syz.3.97'. [ 107.287732][ T6201] loop1: detected capacity change from 0 to 4096 [ 107.296168][ T6201] ext2: Unknown parameter 'dont_appraise' [ 107.913859][ T6143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.123442][ T6217] netlink: 44 bytes leftover after parsing attributes in process `syz.1.107'. [ 108.167083][ T6214] loop2: detected capacity change from 0 to 4096 [ 108.193852][ T6214] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 108.265937][ T5787] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 108.463989][ T6224] loop0: detected capacity change from 0 to 4096 [ 108.478655][ T6224] ext2: Unknown parameter 'dont_appraise' [ 108.839694][ T6240] netlink: 44 bytes leftover after parsing attributes in process `syz.0.117'. [ 109.187317][ T9] IPVS: starting estimator thread 0... [ 109.225819][ T5793] Bluetooth: hci2: unexpected cc 0x2060 length: 3 < 7 [ 109.297217][ T6258] IPVS: using max 19 ests per chain, 45600 per kthread [ 109.338116][ T6260] sctp: [Deprecated]: syz.3.125 (pid 6260) Use of int in max_burst socket option. [ 109.338116][ T6260] Use struct sctp_assoc_value instead [ 109.425719][ T6268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.128'. [ 109.522008][ T6270] loop1: detected capacity change from 0 to 4096 [ 109.542322][ T6270] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 109.754103][ T6277] syz_tun: entered allmulticast mode [ 109.785164][ T6277] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.812569][ T6277] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 109.940050][ T6276] syz_tun: left allmulticast mode [ 110.304625][ T6294] loop2: detected capacity change from 0 to 256 [ 110.599305][ T6305] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 110.612573][ T6303] netlink: 'syz.2.142': attribute type 4 has an invalid length. [ 110.631486][ T6303] netlink: 224 bytes leftover after parsing attributes in process `syz.2.142'. [ 111.011547][ T6323] loop3: detected capacity change from 0 to 512 [ 111.079879][ T6321] loop2: detected capacity change from 0 to 4096 [ 111.115975][ T6321] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 111.135212][ T9] IPVS: starting estimator thread 0... [ 111.147945][ T6323] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.150: iget: bad i_size value: 38620345925642 [ 111.177595][ T6323] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.150: couldn't read orphan inode 15 (err -117) [ 111.208187][ T6323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.234183][ T6330] IPVS: using max 16 ests per chain, 38400 per kthread [ 111.453824][ T6331] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 111.570445][ T60] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 19 with error 28 [ 111.585573][ T60] EXT4-fs (loop3): This should not happen!! Data will be lost [ 111.585573][ T60] [ 111.601562][ T60] EXT4-fs (loop3): Total free blocks count 0 [ 111.608632][ T60] EXT4-fs (loop3): Free/Dirty block details [ 111.620957][ T60] EXT4-fs (loop3): free_blocks=0 [ 111.626406][ T60] EXT4-fs (loop3): dirty_blocks=19 [ 111.631588][ T60] EXT4-fs (loop3): Block reservation details [ 111.638271][ T60] EXT4-fs (loop3): i_reserved_data_blocks=19 [ 111.658253][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.828269][ T6340] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 111.862485][ T6340] syzkaller0: entered promiscuous mode [ 111.879774][ T6340] syzkaller0: entered allmulticast mode [ 111.889360][ T6343] tipc: Started in network mode [ 111.897682][ T6343] tipc: Node identity , cluster identity 4711 [ 111.906005][ T6343] tipc: Failed to obtain node identity [ 111.911657][ T6343] tipc: Enabling of bearer rejected, failed to enable media [ 112.285506][ T6352] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 113.069685][ T6367] loop1: detected capacity change from 0 to 512 [ 113.107605][ T6367] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.160: iget: bad i_size value: 38620345925642 [ 113.123971][ T6367] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.160: couldn't read orphan inode 15 (err -117) [ 113.159101][ T6367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.412335][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.609820][ T6374] loop1: detected capacity change from 0 to 4096 [ 113.628037][ T6374] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 114.483052][ T6381] block nbd3: not configured, cannot reconfigure [ 114.684644][ T6389] loop0: detected capacity change from 0 to 512 [ 114.753468][ T6389] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.169: iget: bad i_size value: 38620345925642 [ 114.830634][ T6389] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.169: couldn't read orphan inode 15 (err -117) [ 114.868741][ T6398] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 114.889881][ T6389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.149755][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.271340][ T6410] Cannot find add_set index 0 as target [ 115.351839][ T6408] loop2: detected capacity change from 0 to 4096 [ 115.400466][ T6408] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 115.905873][ T6431] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 116.583038][ T6468] loop1: detected capacity change from 0 to 256 [ 116.594389][ T6465] loop0: detected capacity change from 0 to 4096 [ 116.611966][ T6465] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 116.859918][ T6473] ip_tables: iptables: counters copy to user failed while replacing table [ 116.880413][ T6474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.927599][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'. [ 117.135520][ T6480] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 118.362764][ T6519] loop2: detected capacity change from 0 to 4096 [ 118.403070][ T6519] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 119.789800][ T6585] loop2: detected capacity change from 0 to 256 [ 119.988245][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 120.055183][ T6577] sctp: [Deprecated]: syz.0.235 (pid 6577) Use of int in max_burst socket option. [ 120.055183][ T6577] Use struct sctp_assoc_value instead [ 120.071900][ T6590] netlink: 128 bytes leftover after parsing attributes in process `syz.2.238'. [ 120.651313][ T6610] loop1: detected capacity change from 0 to 256 [ 121.244977][ T6616] sctp: [Deprecated]: syz.0.249 (pid 6616) Use of int in max_burst socket option. [ 121.244977][ T6616] Use struct sctp_assoc_value instead [ 121.607277][ T6643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.619445][ T6646] syzkaller0: entered promiscuous mode [ 121.625371][ T6646] syzkaller0: entered allmulticast mode [ 121.636282][ T6646] tipc: Started in network mode [ 121.641508][ T6646] tipc: Node identity 724315ee2e1e, cluster identity 4711 [ 121.649836][ T6646] tipc: Enabled bearer , priority 0 [ 121.668843][ T6646] tipc: Resetting bearer [ 121.687684][ T6645] tipc: Resetting bearer [ 121.723606][ T6645] tipc: Disabling bearer [ 121.737862][ T6649] loop3: detected capacity change from 0 to 256 [ 122.551291][ T6665] sctp: [Deprecated]: syz.0.266 (pid 6665) Use of int in max_burst socket option. [ 122.551291][ T6665] Use struct sctp_assoc_value instead [ 122.607620][ T6677] syzkaller0: entered promiscuous mode [ 122.616171][ T6677] syzkaller0: entered allmulticast mode [ 122.642293][ T6677] tipc: Started in network mode [ 122.658595][ T6677] tipc: Node identity 86dd7550b057, cluster identity 4711 [ 122.679158][ T6677] tipc: Enabled bearer , priority 0 [ 122.711905][ T6676] tipc: Resetting bearer [ 122.798392][ T6676] tipc: Disabling bearer [ 123.515021][ T6717] syzkaller0: entered promiscuous mode [ 123.520614][ T6717] syzkaller0: entered allmulticast mode [ 123.574209][ T6717] tipc: Enabled bearer , priority 0 [ 123.613721][ T6714] tipc: Resetting bearer [ 123.690074][ T6714] tipc: Disabling bearer [ 123.770483][ T6723] sctp: [Deprecated]: syz.3.284 (pid 6723) Use of int in max_burst socket option. [ 123.770483][ T6723] Use struct sctp_assoc_value instead [ 124.821117][ T6770] Zero length message leads to an empty skb [ 125.119553][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 125.242017][ T6783] sctp: [Deprecated]: syz.2.315 (pid 6783) Use of int in max_burst socket option. [ 125.242017][ T6783] Use struct sctp_assoc_value instead [ 125.598866][ T6804] syz_tun: entered allmulticast mode [ 125.609161][ T6799] syz_tun: left allmulticast mode [ 125.861225][ T5793] Bluetooth: hci2: unexpected cc 0x2060 length: 3 < 7 [ 125.874189][ T6821] ieee802154 phy0 wpan0: encryption failed: -126 [ 126.011541][ T6819] sctp: [Deprecated]: syz.3.329 (pid 6819) Use of int in max_burst socket option. [ 126.011541][ T6819] Use struct sctp_assoc_value instead [ 126.453887][ T6842] syz_tun: entered allmulticast mode [ 126.471855][ T6840] syz_tun: left allmulticast mode [ 126.897062][ T5793] Bluetooth: hci2: unexpected cc 0x2060 length: 3 < 7 [ 126.934005][ T6857] syzkaller0: entered promiscuous mode [ 126.953407][ T6857] syzkaller0: entered allmulticast mode [ 127.029656][ T6860] sctp: [Deprecated]: syz.3.344 (pid 6860) Use of int in max_burst socket option. [ 127.029656][ T6860] Use struct sctp_assoc_value instead [ 127.316854][ T6870] loop1: detected capacity change from 0 to 4096 [ 127.338808][ T6870] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 129.107817][ T6888] bridge0: port 3(gretap0) entered blocking state [ 129.124841][ T6888] bridge0: port 3(gretap0) entered disabled state [ 129.135886][ T6888] gretap0: entered allmulticast mode [ 129.143076][ T6888] gretap0: entered promiscuous mode [ 129.153339][ T6888] bridge0: port 3(gretap0) entered blocking state [ 129.160314][ T6888] bridge0: port 3(gretap0) entered forwarding state [ 129.173151][ T5793] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 129.251412][ T6890] sctp: [Deprecated]: syz.0.354 (pid 6890) Use of int in max_burst socket option. [ 129.251412][ T6890] Use struct sctp_assoc_value instead [ 129.368519][ T6897] Bluetooth: hci0: unsupported parameter 5135 [ 129.375085][ T6897] Bluetooth: hci0: invalid length 0, exp 2 for type 29 [ 129.391110][ T6895] loop1: detected capacity change from 0 to 4096 [ 129.424588][ T6895] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 129.531282][ T6844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.832761][ T6906] syzkaller0: entered promiscuous mode [ 129.848044][ T6906] syzkaller0: entered allmulticast mode [ 130.558272][ T6928] loop0: detected capacity change from 0 to 4096 [ 130.580471][ T6928] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 132.344193][ T6954] loop3: detected capacity change from 0 to 4096 [ 132.360406][ T6954] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 132.732387][ T6967] syzkaller0: entered promiscuous mode [ 132.738310][ T6967] syzkaller0: entered allmulticast mode [ 132.950774][ T6972] syzkaller0: entered promiscuous mode [ 132.963542][ T6972] syzkaller0: entered allmulticast mode [ 133.040234][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.046808][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.246869][ T6982] loop1: detected capacity change from 0 to 4096 [ 133.279964][ T6982] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 134.611391][ T7002] sctp: [Deprecated]: syz.0.394 (pid 7002) Use of int in max_burst socket option. [ 134.611391][ T7002] Use struct sctp_assoc_value instead [ 135.465251][ T7020] loop0: detected capacity change from 0 to 4096 [ 135.489635][ T7020] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 136.011364][ T7038] sctp: [Deprecated]: syz.3.403 (pid 7038) Use of int in max_burst socket option. [ 136.011364][ T7038] Use struct sctp_assoc_value instead [ 136.286372][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'. [ 136.847536][ T7071] netlink: 44 bytes leftover after parsing attributes in process `syz.3.414'. [ 136.909245][ T7071] netlink: 32 bytes leftover after parsing attributes in process `syz.3.414'. [ 137.025364][ T7071] syz.3.414 (7071) used greatest stack depth: 20824 bytes left [ 137.087886][ T7065] sctp: [Deprecated]: syz.0.412 (pid 7065) Use of int in max_burst socket option. [ 137.087886][ T7065] Use struct sctp_assoc_value instead [ 137.128511][ T7074] loop3: detected capacity change from 0 to 4096 [ 137.140227][ T7074] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 137.371262][ T7077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.246623][ T5793] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 138.333131][ T7104] sctp: [Deprecated]: syz.0.426 (pid 7104) Use of int in max_burst socket option. [ 138.333131][ T7104] Use struct sctp_assoc_value instead [ 138.557300][ T7112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.642464][ T7115] loop0: detected capacity change from 0 to 4096 [ 138.659505][ T7115] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 139.333617][ T5793] Bluetooth: hci3: unexpected cc 0x2060 length: 3 < 7 [ 139.431121][ T7129] sctp: [Deprecated]: syz.1.435 (pid 7129) Use of int in max_burst socket option. [ 139.431121][ T7129] Use struct sctp_assoc_value instead [ 140.226883][ T7170] loop2: detected capacity change from 0 to 4096 [ 140.242669][ T7170] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 140.329904][ T5793] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 140.495912][ T7174] sctp: [Deprecated]: syz.0.450 (pid 7174) Use of int in max_burst socket option. [ 140.495912][ T7174] Use struct sctp_assoc_value instead [ 141.269068][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 141.710391][ T7223] loop0: detected capacity change from 0 to 4096 [ 141.731676][ T7223] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 141.810666][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 141.935756][ T7227] sctp: [Deprecated]: syz.2.469 (pid 7227) Use of int in max_burst socket option. [ 141.935756][ T7227] Use struct sctp_assoc_value instead [ 142.231353][ T5793] Bluetooth: hci3: unexpected cc 0x2060 length: 3 < 7 [ 142.657739][ T5793] Bluetooth: hci3: unexpected cc 0x2060 length: 3 < 7 [ 142.790264][ T7256] sctp: [Deprecated]: syz.1.481 (pid 7256) Use of int in max_burst socket option. [ 142.790264][ T7256] Use struct sctp_assoc_value instead [ 142.904592][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 143.134759][ T7271] loop1: detected capacity change from 0 to 4096 [ 143.173620][ T7271] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 143.615717][ T5793] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 143.717124][ T7289] sctp: [Deprecated]: syz.0.495 (pid 7289) Use of int in max_burst socket option. [ 143.717124][ T7289] Use struct sctp_assoc_value instead [ 143.741389][ T7292] FAULT_INJECTION: forcing a failure. [ 143.741389][ T7292] name failslab, interval 1, probability 0, space 0, times 0 [ 143.761058][ T7292] CPU: 1 PID: 7292 Comm: syz.2.496 Not tainted syzkaller #0 [ 143.768449][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 143.778610][ T7292] Call Trace: [ 143.781944][ T7292] [ 143.784926][ T7292] dump_stack_lvl+0x18c/0x250 [ 143.789721][ T7292] ? show_regs_print_info+0x20/0x20 [ 143.795001][ T7292] ? load_image+0x420/0x420 [ 143.799577][ T7292] ? __might_sleep+0xe0/0xe0 [ 143.804241][ T7292] ? __lock_acquire+0x7eb0/0x7eb0 [ 143.809344][ T7292] should_fail_ex+0x394/0x4c0 [ 143.814105][ T7292] should_failslab+0x9/0x20 [ 143.818674][ T7292] slab_pre_alloc_hook+0x59/0x300 [ 143.823764][ T7292] kmem_cache_alloc+0x5a/0x2d0 [ 143.828589][ T7292] ? __proc_create+0x373/0x8b0 [ 143.833421][ T7292] __proc_create+0x373/0x8b0 [ 143.838079][ T7292] ? proc_symlink+0x260/0x260 [ 143.842875][ T7292] ? _raw_write_unlock+0x28/0x40 [ 143.847885][ T7292] ? proc_register+0x5d5/0x7f0 [ 143.852706][ T7292] proc_create_data+0xa6/0x190 [ 143.857531][ T7292] cache_register_net+0x307/0x4b0 [ 143.862613][ T7292] nfsd_idmap_init+0x15b/0x1f0 [ 143.867431][ T7292] ? nfsd_net_init+0x38/0x1e0 [ 143.872156][ T7292] nfsd_net_init+0x4b/0x1e0 [ 143.876703][ T7292] ops_init+0x391/0x640 [ 143.880897][ T7292] setup_net+0x3b6/0xa20 [ 143.885190][ T7292] ? copy_net_ns+0x530/0x530 [ 143.889819][ T7292] ? copy_net_ns+0x347/0x530 [ 143.894449][ T7292] ? down_read_killable+0x1d0/0x340 [ 143.899698][ T7292] copy_net_ns+0x361/0x530 [ 143.904172][ T7292] create_new_namespaces+0x3ce/0x700 [ 143.909510][ T7292] unshare_nsproxy_namespaces+0x11a/0x160 [ 143.915280][ T7292] ksys_unshare+0x4fa/0x8f0 [ 143.919830][ T7292] ? sighand_ctor+0x50/0x50 [ 143.924381][ T7292] ? lock_chain_count+0x20/0x20 [ 143.929275][ T7292] ? syscall_enter_from_user_mode+0x25/0x80 [ 143.935205][ T7292] __x64_sys_unshare+0x38/0x40 [ 143.940013][ T7292] do_syscall_64+0x55/0xb0 [ 143.944462][ T7292] ? clear_bhb_loop+0x40/0x90 [ 143.949230][ T7292] ? clear_bhb_loop+0x40/0x90 [ 143.953982][ T7292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.959936][ T7292] RIP: 0033:0x7fef6f79f559 [ 143.964387][ T7292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.984132][ T7292] RSP: 002b:00007fef705d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 143.992615][ T7292] RAX: ffffffffffffffda RBX: 00007fef6fa25fa0 RCX: 00007fef6f79f559 [ 144.000635][ T7292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 144.008672][ T7292] RBP: 00007fef6f836b20 R08: 0000000000000000 R09: 0000000000000000 [ 144.016699][ T7292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.024751][ T7292] R13: 00007fef6fa26038 R14: 00007fef6fa25fa0 R15: 00007ffdcb9666c8 [ 144.032798][ T7292] [ 144.642109][ T5793] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 144.812174][ T7324] loop3: detected capacity change from 0 to 4096 [ 144.837218][ T7324] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 145.615094][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 146.101229][ T7378] loop3: detected capacity change from 0 to 4096 [ 146.112078][ T7378] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 146.382060][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 146.799586][ T7399] FAULT_INJECTION: forcing a failure. [ 146.799586][ T7399] name failslab, interval 1, probability 0, space 0, times 0 [ 146.814324][ T7399] CPU: 1 PID: 7399 Comm: syz.1.535 Not tainted syzkaller #0 [ 146.821694][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 146.831832][ T7399] Call Trace: [ 146.835199][ T7399] [ 146.838178][ T7399] dump_stack_lvl+0x18c/0x250 [ 146.842918][ T7399] ? show_regs_print_info+0x20/0x20 [ 146.848181][ T7399] ? load_image+0x420/0x420 [ 146.852755][ T7399] ? __might_sleep+0xe0/0xe0 [ 146.857394][ T7399] ? __lock_acquire+0x7eb0/0x7eb0 [ 146.862466][ T7399] should_fail_ex+0x394/0x4c0 [ 146.867209][ T7399] should_failslab+0x9/0x20 [ 146.871773][ T7399] slab_pre_alloc_hook+0x59/0x300 [ 146.876863][ T7399] ? ops_init+0x8b/0x640 [ 146.881162][ T7399] ? ops_init+0x8b/0x640 [ 146.885469][ T7399] __kmem_cache_alloc_node+0x53/0x260 [ 146.891358][ T7399] ? ops_init+0x8b/0x640 [ 146.895663][ T7399] __kmalloc+0xa7/0x240 [ 146.899883][ T7399] ? nat_init_net+0x15a/0x190 [ 146.904624][ T7399] ops_init+0x8b/0x640 [ 146.908764][ T7399] setup_net+0x3b6/0xa20 [ 146.913079][ T7399] ? copy_net_ns+0x530/0x530 [ 146.917748][ T7399] ? copy_net_ns+0x347/0x530 [ 146.922414][ T7399] ? down_read_killable+0x1d0/0x340 [ 146.927678][ T7399] copy_net_ns+0x361/0x530 [ 146.932164][ T7399] create_new_namespaces+0x3ce/0x700 [ 146.937514][ T7399] unshare_nsproxy_namespaces+0x11a/0x160 [ 146.943290][ T7399] ksys_unshare+0x4fa/0x8f0 [ 146.947838][ T7399] ? sighand_ctor+0x50/0x50 [ 146.952377][ T7399] ? lock_chain_count+0x20/0x20 [ 146.957287][ T7399] ? syscall_enter_from_user_mode+0x25/0x80 [ 146.963210][ T7399] __x64_sys_unshare+0x38/0x40 [ 146.968011][ T7399] do_syscall_64+0x55/0xb0 [ 146.972461][ T7399] ? clear_bhb_loop+0x40/0x90 [ 146.977180][ T7399] ? clear_bhb_loop+0x40/0x90 [ 146.981911][ T7399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.987859][ T7399] RIP: 0033:0x7f72b239f559 [ 146.992310][ T7399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.011978][ T7399] RSP: 002b:00007f72b31ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 147.020427][ T7399] RAX: ffffffffffffffda RBX: 00007f72b2625fa0 RCX: 00007f72b239f559 [ 147.028427][ T7399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 147.036424][ T7399] RBP: 00007f72b2436b20 R08: 0000000000000000 R09: 0000000000000000 [ 147.044431][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.052433][ T7399] R13: 00007f72b2626038 R14: 00007f72b2625fa0 R15: 00007ffc96d5baa8 [ 147.060452][ T7399] [ 147.240883][ T5793] Bluetooth: hci2: unexpected cc 0x2060 length: 3 < 7 [ 147.664095][ T7422] loop3: detected capacity change from 0 to 4096 [ 147.710086][ T7422] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 148.229061][ T5793] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 149.112076][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 149.402335][ T7464] loop2: detected capacity change from 0 to 4096 [ 149.421035][ T7464] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 149.806256][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'. [ 149.815334][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'. [ 149.996235][ T7474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.247389][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 150.341413][ T7484] sctp: [Deprecated]: syz.2.571 (pid 7484) Use of int in max_burst socket option. [ 150.341413][ T7484] Use struct sctp_assoc_value instead [ 150.885424][ T7504] loop1: detected capacity change from 0 to 4096 [ 150.900514][ T7504] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 151.127584][ T5793] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 151.220007][ T7507] sctp: [Deprecated]: syz.0.580 (pid 7507) Use of int in max_burst socket option. [ 151.220007][ T7507] Use struct sctp_assoc_value instead [ 151.352428][ T7511] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 151.428527][ T7513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.791521][ T5793] Bluetooth: hci3: unexpected cc 0x2060 length: 3 < 7 [ 151.889122][ T7526] sctp: [Deprecated]: syz.1.589 (pid 7526) Use of int in max_burst socket option. [ 151.889122][ T7526] Use struct sctp_assoc_value instead [ 152.089666][ T7538] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 152.163717][ T7540] syzkaller0: entered promiscuous mode [ 152.169293][ T7540] syzkaller0: entered allmulticast mode [ 152.301912][ T7546] FAULT_INJECTION: forcing a failure. [ 152.301912][ T7546] name failslab, interval 1, probability 0, space 0, times 0 [ 152.317853][ T7546] CPU: 1 PID: 7546 Comm: syz.3.596 Not tainted syzkaller #0 [ 152.325231][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 152.335337][ T7546] Call Trace: [ 152.338647][ T7546] [ 152.341638][ T7546] dump_stack_lvl+0x18c/0x250 [ 152.346365][ T7546] ? show_regs_print_info+0x20/0x20 [ 152.351598][ T7546] ? load_image+0x420/0x420 [ 152.356140][ T7546] ? __might_sleep+0xe0/0xe0 [ 152.360769][ T7546] ? __lock_acquire+0x7eb0/0x7eb0 [ 152.365835][ T7546] should_fail_ex+0x394/0x4c0 [ 152.370557][ T7546] should_failslab+0x9/0x20 [ 152.375115][ T7546] slab_pre_alloc_hook+0x59/0x300 [ 152.380182][ T7546] kmem_cache_alloc_lru+0x4d/0x2c0 [ 152.385320][ T7546] ? sock_alloc_inode+0x28/0xc0 [ 152.390249][ T7546] sock_alloc_inode+0x28/0xc0 [ 152.394964][ T7546] ? sockfs_init_fs_context+0xb0/0xb0 [ 152.400366][ T7546] new_inode_pseudo+0x63/0x1d0 [ 152.405173][ T7546] sock_create_lite+0x8b/0x500 [ 152.409985][ T7546] __netlink_kernel_create+0xfb/0x7b0 [ 152.415403][ T7546] ? rcu_read_lock_any_held+0xb4/0x140 [ 152.420925][ T7546] ? rcu_read_lock_bh_held+0x100/0x100 [ 152.426558][ T7546] ? netlink_set_err+0x3b0/0x3b0 [ 152.431547][ T7546] ? crypto_netlink_init+0xa8/0x150 [ 152.436813][ T7546] crypto_netlink_init+0xbd/0x150 [ 152.441875][ T7546] ? crypto_alg_match+0x2d0/0x2d0 [ 152.446929][ T7546] ? crypto_netlink_exit+0x60/0x60 [ 152.452077][ T7546] ? nf_register_net_hook+0xc8/0x190 [ 152.457403][ T7546] ? nf_register_net_hooks+0x8f/0x1b0 [ 152.462810][ T7546] ops_init+0x391/0x640 [ 152.467026][ T7546] setup_net+0x3b6/0xa20 [ 152.471310][ T7546] ? copy_net_ns+0x530/0x530 [ 152.475944][ T7546] ? copy_net_ns+0x347/0x530 [ 152.480590][ T7546] ? down_read_killable+0x1d0/0x340 [ 152.485822][ T7546] copy_net_ns+0x361/0x530 [ 152.490286][ T7546] create_new_namespaces+0x3ce/0x700 [ 152.495622][ T7546] unshare_nsproxy_namespaces+0x11a/0x160 [ 152.501381][ T7546] ksys_unshare+0x4fa/0x8f0 [ 152.505931][ T7546] ? sighand_ctor+0x50/0x50 [ 152.510471][ T7546] ? lock_chain_count+0x20/0x20 [ 152.515360][ T7546] ? syscall_enter_from_user_mode+0x25/0x80 [ 152.521294][ T7546] __x64_sys_unshare+0x38/0x40 [ 152.526104][ T7546] do_syscall_64+0x55/0xb0 [ 152.530556][ T7546] ? clear_bhb_loop+0x40/0x90 [ 152.535275][ T7546] ? clear_bhb_loop+0x40/0x90 [ 152.539994][ T7546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.545922][ T7546] RIP: 0033:0x7fc05d39f559 [ 152.550372][ T7546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.570015][ T7546] RSP: 002b:00007fc05e235028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 152.578469][ T7546] RAX: ffffffffffffffda RBX: 00007fc05d625fa0 RCX: 00007fc05d39f559 [ 152.586492][ T7546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 152.594495][ T7546] RBP: 00007fc05d436b20 R08: 0000000000000000 R09: 0000000000000000 [ 152.602498][ T7546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.610506][ T7546] R13: 00007fc05d626038 R14: 00007fc05d625fa0 R15: 00007ffd9b0c28a8 [ 152.618534][ T7546] [ 152.790507][ T7548] loop1: detected capacity change from 0 to 4096 [ 152.842848][ T7548] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 152.937619][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 152.962886][ T7558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.058003][ T7555] sctp: [Deprecated]: syz.2.600 (pid 7555) Use of int in max_burst socket option. [ 153.058003][ T7555] Use struct sctp_assoc_value instead [ 153.408523][ T7568] syzkaller0: entered promiscuous mode [ 153.414311][ T7568] syzkaller0: entered allmulticast mode [ 154.190238][ T7590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.228209][ T7599] loop1: detected capacity change from 0 to 4096 [ 154.255325][ T7599] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 154.311742][ T5793] Bluetooth: hci2: unexpected cc 0x2060 length: 3 < 7 [ 154.412072][ T7602] sctp: [Deprecated]: syz.3.615 (pid 7602) Use of int in max_burst socket option. [ 154.412072][ T7602] Use struct sctp_assoc_value instead [ 155.109102][ T5793] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 155.214191][ T7632] sctp: [Deprecated]: syz.0.624 (pid 7632) Use of int in max_burst socket option. [ 155.214191][ T7632] Use struct sctp_assoc_value instead [ 155.383105][ T7644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.533034][ T7652] ip_tables: iptables: counters copy to user failed while replacing table [ 155.963543][ T5793] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 156.077113][ T7671] ip_tables: iptables: counters copy to user failed while replacing table [ 156.147445][ T7665] sctp: [Deprecated]: syz.0.639 (pid 7665) Use of int in max_burst socket option. [ 156.147445][ T7665] Use struct sctp_assoc_value instead [ 156.602912][ T7699] ip_tables: iptables: counters copy to user failed while replacing table [ 156.715815][ T5793] Bluetooth: hci2: unexpected cc 0x2060 length: 3 < 7 [ 156.826768][ T7708] sctp: [Deprecated]: syz.3.655 (pid 7708) Use of int in max_burst socket option. [ 156.826768][ T7708] Use struct sctp_assoc_value instead [ 157.072966][ T7718] netlink: 44 bytes leftover after parsing attributes in process `syz.1.659'. [ 157.092092][ T7716] syzkaller0: entered promiscuous mode [ 157.101078][ T7716] syzkaller0: entered allmulticast mode [ 157.287557][ T7726] ip_tables: iptables: counters copy to user failed while replacing table [ 157.472529][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 157.540806][ T7742] netlink: 44 bytes leftover after parsing attributes in process `syz.0.669'. [ 157.585306][ T7737] sctp: [Deprecated]: syz.2.667 (pid 7737) Use of int in max_burst socket option. [ 157.585306][ T7737] Use struct sctp_assoc_value instead [ 157.719304][ T7748] netlink: 69 bytes leftover after parsing attributes in process `syz.0.671'. [ 157.863981][ T7752] ip_tables: iptables: counters copy to user failed while replacing table [ 158.563999][ T7778] ip_tables: iptables: counters copy to user failed while replacing table [ 158.948225][ T7798] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 160.491704][ T7815] ip_tables: iptables: counters copy to user failed while replacing table [ 162.807306][ T7852] ip_tables: iptables: counters copy to user failed while replacing table [ 163.152121][ T7870] syz_tun: entered allmulticast mode [ 163.159516][ T7870] siw: device registration error -23 [ 163.296605][ T7872] loop1: detected capacity change from 0 to 4096 [ 163.311722][ T7872] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 163.367706][ T7875] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.588936][ T5793] Bluetooth: hci2: unexpected cc 0x2060 length: 3 < 7 [ 163.757930][ T7890] netlink: 'syz.3.720': attribute type 11 has an invalid length. [ 163.834058][ T7892] syz_tun: entered allmulticast mode [ 163.951644][ T7896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.439102][ T5793] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 164.682889][ T7918] loop2: detected capacity change from 0 to 4096 [ 164.710214][ T7918] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 164.989385][ T7926] FAULT_INJECTION: forcing a failure. [ 164.989385][ T7926] name failslab, interval 1, probability 0, space 0, times 0 [ 165.027134][ T7926] CPU: 0 PID: 7926 Comm: syz.3.736 Not tainted syzkaller #0 [ 165.034533][ T7926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 165.044647][ T7926] Call Trace: [ 165.047971][ T7926] [ 165.050944][ T7926] dump_stack_lvl+0x18c/0x250 [ 165.055697][ T7926] ? show_regs_print_info+0x20/0x20 [ 165.060963][ T7926] ? load_image+0x420/0x420 [ 165.065538][ T7926] ? __might_sleep+0xe0/0xe0 [ 165.070193][ T7926] ? __lock_acquire+0x7eb0/0x7eb0 [ 165.075287][ T7926] should_fail_ex+0x394/0x4c0 [ 165.080056][ T7926] should_failslab+0x9/0x20 [ 165.084619][ T7926] slab_pre_alloc_hook+0x59/0x300 [ 165.089708][ T7926] ? sk_prot_alloc+0xe7/0x210 [ 165.094449][ T7926] ? sk_prot_alloc+0xe7/0x210 [ 165.099201][ T7926] __kmem_cache_alloc_node+0x53/0x260 [ 165.104650][ T7926] ? sk_prot_alloc+0xe7/0x210 [ 165.109393][ T7926] __kmalloc+0xa7/0x240 [ 165.113617][ T7926] ? bpf_lsm_inode_alloc_security+0x9/0x10 [ 165.119487][ T7926] sk_prot_alloc+0xe7/0x210 [ 165.124052][ T7926] ? sk_alloc+0x24/0x350 [ 165.128372][ T7926] sk_alloc+0x3a/0x350 [ 165.132510][ T7926] __netlink_create+0x6c/0x290 [ 165.137343][ T7926] __netlink_kernel_create+0x148/0x7b0 [ 165.142876][ T7926] ? rcu_read_lock_any_held+0xb4/0x140 [ 165.148412][ T7926] ? rcu_read_lock_bh_held+0x100/0x100 [ 165.153928][ T7926] ? netlink_set_err+0x3b0/0x3b0 [ 165.158984][ T7926] ? crypto_netlink_init+0xa8/0x150 [ 165.164248][ T7926] crypto_netlink_init+0xbd/0x150 [ 165.169328][ T7926] ? crypto_alg_match+0x2d0/0x2d0 [ 165.174412][ T7926] ? crypto_netlink_exit+0x60/0x60 [ 165.179630][ T7926] ? nf_register_net_hook+0xc8/0x190 [ 165.185029][ T7926] ? nf_register_net_hooks+0x8f/0x1b0 [ 165.190475][ T7926] ops_init+0x391/0x640 [ 165.194701][ T7926] setup_net+0x3b6/0xa20 [ 165.199041][ T7926] ? copy_net_ns+0x530/0x530 [ 165.203713][ T7926] ? copy_net_ns+0x347/0x530 [ 165.208407][ T7926] ? down_read_killable+0x1d0/0x340 [ 165.213672][ T7926] copy_net_ns+0x361/0x530 [ 165.218190][ T7926] create_new_namespaces+0x3ce/0x700 [ 165.223583][ T7926] unshare_nsproxy_namespaces+0x11a/0x160 [ 165.229405][ T7926] ksys_unshare+0x4fa/0x8f0 [ 165.233984][ T7926] ? sighand_ctor+0x50/0x50 [ 165.238729][ T7926] ? lock_chain_count+0x20/0x20 [ 165.243685][ T7926] ? syscall_enter_from_user_mode+0x25/0x80 [ 165.249658][ T7926] __x64_sys_unshare+0x38/0x40 [ 165.254490][ T7926] do_syscall_64+0x55/0xb0 [ 165.258978][ T7926] ? clear_bhb_loop+0x40/0x90 [ 165.263732][ T7926] ? clear_bhb_loop+0x40/0x90 [ 165.268483][ T7926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.274449][ T7926] RIP: 0033:0x7fc05d39f559 [ 165.278924][ T7926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.298610][ T7926] RSP: 002b:00007fc05e235028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 165.307092][ T7926] RAX: ffffffffffffffda RBX: 00007fc05d625fa0 RCX: 00007fc05d39f559 [ 165.315128][ T7926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 165.323163][ T7926] RBP: 00007fc05d436b20 R08: 0000000000000000 R09: 0000000000000000 [ 165.331199][ T7926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.339230][ T7926] R13: 00007fc05d626038 R14: 00007fc05d625fa0 R15: 00007ffd9b0c28a8 [ 165.347284][ T7926] [ 165.600063][ T7936] siw: device registration error -23 [ 165.675348][ T5793] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 166.217935][ T7954] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.333958][ T7957] loop3: detected capacity change from 0 to 4096 [ 166.350706][ T7957] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 166.521032][ T5793] Bluetooth: hci3: unexpected cc 0x2060 length: 3 < 7 [ 166.646258][ T7961] sctp: [Deprecated]: syz.1.750 (pid 7961) Use of int in max_burst socket option. [ 166.646258][ T7961] Use struct sctp_assoc_value instead [ 167.804126][ T5793] Bluetooth: hci2: unexpected cc 0x2060 length: 3 < 7 [ 168.098976][ T7991] loop0: detected capacity change from 0 to 4096 [ 168.099840][ T7993] siw: device registration error -23 [ 168.124361][ T7991] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 168.564029][ T8001] netlink: 'syz.1.764': attribute type 4 has an invalid length. [ 168.927352][ T8011] xt_TPROXY: Can be used only with -p tcp or -p udp [ 168.942909][ T8011] ip_tunnel: non-ECT from 0.0.8.0 with TOS=0x2 [ 169.543648][ T8037] syz_tun: entered allmulticast mode [ 169.555010][ T8037] siw: device registration error -23 [ 169.566020][ T8034] syz_tun: left allmulticast mode [ 170.580131][ T8077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.384617][ T5793] Bluetooth: hci3: unexpected cc 0x2060 length: 3 < 7 [ 171.420151][ T8105] sctp: [Deprecated]: syz.1.811 (pid 8105) Use of int in max_burst socket option. [ 171.420151][ T8105] Use struct sctp_assoc_value instead [ 171.711555][ T8114] syzkaller0: entered promiscuous mode [ 171.728049][ T8114] syzkaller0: entered allmulticast mode [ 171.879537][ T8129] netlink: 69 bytes leftover after parsing attributes in process `syz.2.818'. [ 173.904194][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 174.007680][ T8150] syzkaller0: entered promiscuous mode [ 174.021279][ T8150] syzkaller0: entered allmulticast mode [ 174.060672][ T8154] netlink: 69 bytes leftover after parsing attributes in process `syz.0.828'. [ 174.649108][ T5793] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 174.716389][ T8178] syzkaller0: entered promiscuous mode [ 174.721967][ T8178] syzkaller0: entered allmulticast mode [ 174.803695][ T8181] netlink: 69 bytes leftover after parsing attributes in process `syz.2.840'. [ 174.962352][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 175.069933][ T8186] sctp: [Deprecated]: syz.2.843 (pid 8186) Use of int in max_burst socket option. [ 175.069933][ T8186] Use struct sctp_assoc_value instead [ 175.276518][ T8196] warning: `syz.0.848' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 175.485853][ T5793] Bluetooth: hci3: unexpected cc 0x2060 length: 3 < 7 [ 175.596974][ T8204] syzkaller0: entered promiscuous mode [ 175.602693][ T8204] syzkaller0: entered allmulticast mode [ 175.745700][ T8206] netlink: 69 bytes leftover after parsing attributes in process `syz.1.851'. [ 176.004472][ T8214] netlink: 56 bytes leftover after parsing attributes in process `syz.1.855'. [ 176.025592][ T8214] netlink: 664 bytes leftover after parsing attributes in process `syz.1.855'. [ 176.041688][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 176.067411][ T8216] sctp: [Deprecated]: syz.2.856 (pid 8216) Use of int in max_burst socket option. [ 176.067411][ T8216] Use struct sctp_assoc_value instead [ 176.272780][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 176.502882][ T8231] syzkaller0: entered promiscuous mode [ 176.511992][ T8231] syzkaller0: entered allmulticast mode [ 176.724654][ T5793] Bluetooth: hci3: unexpected cc 0x2060 length: 3 < 7 [ 176.748612][ T8241] sctp: [Deprecated]: syz.1.867 (pid 8241) Use of int in max_burst socket option. [ 176.748612][ T8241] Use struct sctp_assoc_value instead [ 176.947367][ T5793] Bluetooth: hci3: unexpected cc 0x2060 length: 3 < 7 [ 177.035806][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 177.236667][ T8258] syzkaller0: entered promiscuous mode [ 177.242235][ T8258] syzkaller0: entered allmulticast mode [ 177.564350][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 177.612160][ T8275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.893032][ T8285] syzkaller0: entered promiscuous mode [ 177.898832][ T8285] syzkaller0: entered allmulticast mode [ 177.912980][ T8287] ip_tables: iptables: counters copy to user failed while replacing table [ 178.163649][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 178.490583][ T8308] siw: device registration error -23 [ 178.501838][ T8310] syzkaller0: entered promiscuous mode [ 178.507758][ T8310] syzkaller0: entered allmulticast mode [ 178.749096][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 178.763112][ T8319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.040982][ T8331] netlink: 'syz.2.906': attribute type 4 has an invalid length. [ 179.087528][ T8333] syz_tun: entered allmulticast mode [ 179.097223][ T8333] siw: device registration error -23 [ 179.103676][ T8332] syz_tun: left allmulticast mode [ 179.391285][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 179.682173][ T8356] syz_tun: entered allmulticast mode [ 179.705703][ T8356] siw: device registration error -23 [ 179.712002][ T8355] syz_tun: left allmulticast mode [ 179.851018][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 180.029483][ T8371] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 180.237848][ T8380] syz_tun: entered allmulticast mode [ 180.246494][ T8380] siw: device registration error -23 [ 180.252863][ T8379] syz_tun: left allmulticast mode [ 180.360062][ T5793] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 180.389470][ T8385] sctp: [Deprecated]: syz.0.930 (pid 8385) Use of int in max_burst socket option. [ 180.389470][ T8385] Use struct sctp_assoc_value instead [ 180.436791][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 180.876094][ T8406] siw: device registration error -23 [ 181.180978][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.942'. [ 181.418827][ T8429] syz_tun: entered allmulticast mode [ 181.456086][ T8429] siw: device registration error -23 [ 181.474697][ T8427] syz_tun: left allmulticast mode [ 181.801712][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 181.817302][ T8448] netlink: 100 bytes leftover after parsing attributes in process `syz.3.953'. [ 181.887092][ T8450] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 181.921011][ T8450] syzkaller0: entered promiscuous mode [ 181.934710][ T8450] syzkaller0: entered allmulticast mode [ 183.812818][ T8466] netlink: 69 bytes leftover after parsing attributes in process `syz.0.959'. [ 183.981521][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 184.091501][ T8476] netlink: 100 bytes leftover after parsing attributes in process `syz.1.964'. [ 184.422293][ T8492] netlink: 'syz.3.971': attribute type 4 has an invalid length. [ 184.548516][ T8498] netlink: 69 bytes leftover after parsing attributes in process `syz.1.973'. [ 184.701301][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'. [ 184.712219][ T8506] netlink: 100 bytes leftover after parsing attributes in process `syz.3.976'. [ 185.263437][ T5793] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 185.444645][ T8530] sctp: [Deprecated]: syz.0.985 (pid 8530) Use of int in max_burst socket option. [ 185.444645][ T8530] Use struct sctp_assoc_value instead [ 185.664137][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'. [ 185.679779][ T8535] netlink: 100 bytes leftover after parsing attributes in process `syz.1.986'. [ 186.479888][ T8565] tipc: Enabling of bearer rejected, failed to enable media [ 186.561193][ T5793] Bluetooth: hci3: unexpected cc 0x2060 length: 3 < 7 [ 186.638445][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'. [ 186.663695][ T8571] netlink: 100 bytes leftover after parsing attributes in process `syz.3.995'. [ 186.847076][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 186.941564][ T8586] sctp: [Deprecated]: syz.2.999 (pid 8586) Use of int in max_burst socket option. [ 186.941564][ T8586] Use struct sctp_assoc_value instead [ 187.465289][ T5793] Bluetooth: hci3: unexpected cc 0x2060 length: 3 < 7 [ 188.119830][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 188.289814][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 188.312091][ T8626] syzkaller0: entered promiscuous mode [ 188.322117][ T8626] syzkaller0: entered allmulticast mode [ 188.379985][ T8629] sctp: [Deprecated]: syz.2.1018 (pid 8629) Use of int in max_burst socket option. [ 188.379985][ T8629] Use struct sctp_assoc_value instead [ 189.187494][ T5793] Bluetooth: hci2: unexpected cc 0x2060 length: 3 < 7 [ 189.451372][ T8661] syzkaller0: entered promiscuous mode [ 189.457404][ T8661] syzkaller0: entered allmulticast mode [ 189.585583][ T8665] rxe_eth0 speed is unknown, defaulting to 1000 [ 189.687175][ T5793] Bluetooth: hci2: unexpected cc 0x2060 length: 3 < 7 [ 189.719956][ T8668] sctp: [Deprecated]: syz.3.1031 (pid 8668) Use of int in max_burst socket option. [ 189.719956][ T8668] Use struct sctp_assoc_value instead [ 190.074221][ T8680] netlink: 'syz.1.1035': attribute type 4 has an invalid length. [ 190.134643][ T8682] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 190.178306][ T8684] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 190.206538][ T8684] syzkaller0: entered promiscuous mode [ 190.212248][ T8684] syzkaller0: entered allmulticast mode [ 192.151079][ T5793] Bluetooth: hci2: unexpected cc 0x2060 length: 3 < 7 [ 192.182042][ T8711] sctp: [Deprecated]: syz.3.1042 (pid 8711) Use of int in max_burst socket option. [ 192.182042][ T8711] Use struct sctp_assoc_value instead [ 192.392723][ T8718] netlink: 'syz.2.1045': attribute type 4 has an invalid length. [ 192.668697][ T8728] __nla_validate_parse: 2 callbacks suppressed [ 192.668718][ T8728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1048'. [ 192.981713][ T5793] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 193.012132][ T8741] sctp: [Deprecated]: syz.0.1054 (pid 8741) Use of int in max_burst socket option. [ 193.012132][ T8741] Use struct sctp_assoc_value instead [ 193.048344][ T8742] netlink: 'syz.1.1055': attribute type 4 has an invalid length. [ 193.317760][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1060'. [ 193.516923][ T8763] netlink: 69 bytes leftover after parsing attributes in process `syz.0.1062'. [ 193.628084][ T8770] netlink: 'syz.2.1066': attribute type 4 has an invalid length. [ 193.720115][ T5793] Bluetooth: hci1: unexpected cc 0x2060 length: 3 < 7 [ 193.742940][ T8772] sctp: [Deprecated]: syz.0.1067 (pid 8772) Use of int in max_burst socket option. [ 193.742940][ T8772] Use struct sctp_assoc_value instead [ 194.247663][ T8796] netlink: 69 bytes leftover after parsing attributes in process `syz.2.1075'. [ 194.329218][ T8798] netlink: 'syz.3.1076': attribute type 4 has an invalid length. [ 194.467359][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 194.480566][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.493745][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.507282][ T8806] sctp: [Deprecated]: syz.2.1080 (pid 8806) Use of int in max_burst socket option. [ 194.507282][ T8806] Use struct sctp_assoc_value instead [ 195.082404][ T8832] netlink: 69 bytes leftover after parsing attributes in process `syz.2.1088'. [ 195.225696][ T8836] ip_tables: iptables: counters copy to user failed while replacing table [ 195.246492][ T5793] Bluetooth: hci2: unexpected cc 0x2060 length: 3 < 7 [ 195.261417][ T8838] sctp: [Deprecated]: syz.3.1092 (pid 8838) Use of int in max_burst socket option. [ 195.261417][ T8838] Use struct sctp_assoc_value instead [ 195.777789][ T5793] Bluetooth: hci2: unexpected cc 0x2060 length: 3 < 7 [ 195.848922][ T8862] ip_tables: iptables: counters copy to user failed while replacing table [ 195.905407][ T8865] sctp: [Deprecated]: syz.3.1103 (pid 8865) Use of int in max_burst socket option. [ 195.905407][ T8865] Use struct sctp_assoc_value instead [ 197.119296][ T8899] rxe_eth0 speed is unknown, defaulting to 1000 [ 197.193889][ T5793] Bluetooth: hci0: unexpected cc 0x2060 length: 3 < 7 [ 197.309801][ T8907] sctp: [Deprecated]: syz.2.1121 (pid 8907) Use of int in max_burst socket option. [ 197.309801][ T8907] Use struct sctp_assoc_value instead [ 198.671809][ T8940] rxe_eth0 speed is unknown, defaulting to 1000 [ 198.855103][ T8949] netlink: 69 bytes leftover after parsing attributes in process `syz.3.1142'. [ 199.561795][ T8974] netlink: 69 bytes leftover after parsing attributes in process `syz.2.1153'. [ 199.804567][ T8982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1155'. [ 200.051759][ T8990] netlink: 'syz.3.1158': attribute type 3 has an invalid length. [ 200.059849][ T8990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1158'. [ 200.076293][ T8990] ------------[ cut here ]------------ [ 200.081838][ T8990] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:871 (size 16) [ 200.103380][ T8990] WARNING: CPU: 1 PID: 8990 at net/sched/cls_u32.c:871 u32_change+0x1ead/0x29a0 [ 200.112591][ T8990] Modules linked in: [ 200.117070][ T8990] CPU: 1 PID: 8990 Comm: syz.3.1158 Not tainted syzkaller #0 [ 200.124600][ T8990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 200.135099][ T8990] RIP: 0010:u32_change+0x1ead/0x29a0 [ 200.140477][ T8990] Code: 18 eb 33 e8 95 95 ca f8 c6 05 87 06 bb 06 01 b9 10 00 00 00 48 c7 c7 00 03 e9 8b 4c 89 fe 48 c7 c2 80 03 e9 8b e8 93 43 94 f8 <0f> 0b e9 8d ee ff ff e8 67 95 ca f8 48 b8 00 00 00 00 00 fc ff df [ 200.161599][ T8990] RSP: 0018:ffffc9000b7b6d40 EFLAGS: 00010246 [ 200.167934][ T8990] RAX: f7a0773f06b42d00 RBX: 0000000000000010 RCX: 0000000000080000 [ 200.176354][ T8990] RDX: ffffc9000d3e3000 RSI: 0000000000008020 RDI: 0000000000008021 [ 200.184489][ T8990] RBP: ffffc9000b7b6f18 R08: ffffc9000b7b6a47 R09: 1ffff920016f6d48 [ 200.192510][ T8990] R10: dffffc0000000000 R11: fffff520016f6d49 R12: 1ffff920016f6dbc [ 200.200846][ T8990] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000020 [ 200.208957][ T8990] FS: 00007fc05e2356c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 200.218334][ T8990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.225093][ T8990] CR2: 00007fef6fa27dac CR3: 00000000587f4000 CR4: 00000000003506e0 [ 200.233139][ T8990] Call Trace: [ 200.236973][ T8990] [ 200.240745][ T8990] ? u32_get+0x370/0x370 [ 200.245301][ T8990] ? u32_get+0x370/0x370 [ 200.249624][ T8990] tc_new_tfilter+0x13a7/0x1980 [ 200.254875][ T8990] ? tcf_proto_signal_destroying+0x240/0x240 [ 200.260965][ T8990] ? rcu_read_unlock+0x8c/0xa0 [ 200.265856][ T8990] ? tcf_proto_signal_destroying+0x240/0x240 [ 200.271901][ T8990] ? tcf_proto_signal_destroying+0x240/0x240 [ 200.278308][ T8990] rtnetlink_rcv_msg+0x892/0xf90 [ 200.283390][ T8990] ? rtnetlink_rcv_msg+0x220/0xf90 [ 200.288565][ T8990] ? rtnetlink_bind+0x80/0x80 [ 200.293662][ T8990] ? kasan_quarantine_put+0xd8/0x220 [ 200.299027][ T8990] ? lockdep_hardirqs_on+0x98/0x150 [ 200.304407][ T8990] ? slab_free_freelist_hook+0x154/0x240 [ 200.310112][ T8990] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 200.316497][ T8990] ? lock_chain_count+0x20/0x20 [ 200.321434][ T8990] ? __local_bh_enable_ip+0x13a/0x1c0 [ 200.326953][ T8990] ? lockdep_hardirqs_on+0x98/0x150 [ 200.332222][ T8990] ? __local_bh_enable_ip+0x13a/0x1c0 [ 200.337979][ T8990] ? _local_bh_enable+0xa0/0xa0 [ 200.343715][ T8990] ? __dev_queue_xmit+0x1481/0x3a30 [ 200.348998][ T8990] ? __dev_queue_xmit+0x6d1/0x3a30 [ 200.354663][ T8990] ? ref_tracker_free+0x686/0x830 [ 200.359771][ T8990] netlink_rcv_skb+0x235/0x4c0 [ 200.364695][ T8990] ? rtnetlink_bind+0x80/0x80 [ 200.369450][ T8990] ? netlink_ack+0x1160/0x1160 [ 200.374637][ T8990] ? __lock_acquire+0x7eb0/0x7eb0 [ 200.379750][ T8990] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.385099][ T8990] netlink_unicast+0x7b1/0x930 [ 200.389973][ T8990] netlink_sendmsg+0x8d0/0xbf0 [ 200.395189][ T8990] ? netlink_getsockopt+0x590/0x590 [ 200.400500][ T8990] ? apparmor_socket_sendmsg+0x8e/0x330 [ 200.406213][ T8990] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 200.411577][ T8990] ? security_socket_sendmsg+0x80/0xa0 [ 200.417461][ T8990] ? netlink_getsockopt+0x590/0x590 [ 200.422740][ T8990] ____sys_sendmsg+0x61b/0x980 [ 200.427627][ T8990] ? __asan_memset+0x22/0x40 [ 200.432293][ T8990] ? __sys_sendmsg_sock+0x30/0x30 [ 200.437711][ T8990] ? __import_iovec+0x5f2/0x850 [ 200.443475][ T8990] ? import_iovec+0x73/0xa0 [ 200.448076][ T8990] ___sys_sendmsg+0x2a6/0x360 [ 200.452873][ T8990] ? __sys_sendmsg+0x2b0/0x2b0 [ 200.458287][ T8990] __sys_sendmmsg+0x2ca/0x510 [ 200.463048][ T8990] ? __ia32_sys_sendmsg+0x90/0x90 [ 200.468225][ T8990] ? __ia32_sys_get_robust_list+0x110/0x110 [ 200.474693][ T8990] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 200.480747][ T8990] ? lock_chain_count+0x20/0x20 [ 200.485737][ T8990] __x64_sys_sendmmsg+0xa0/0xb0 [ 200.490662][ T8990] do_syscall_64+0x55/0xb0 [ 200.495498][ T8990] ? clear_bhb_loop+0x40/0x90 [ 200.500247][ T8990] ? clear_bhb_loop+0x40/0x90 [ 200.505060][ T8990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.511046][ T8990] RIP: 0033:0x7fc05d39f559 [ 200.515826][ T8990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.535862][ T8990] RSP: 002b:00007fc05e235028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 200.544467][ T8990] RAX: ffffffffffffffda RBX: 00007fc05d625fa0 RCX: 00007fc05d39f559 [ 200.552505][ T8990] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 200.561658][ T8990] RBP: 00007fc05d436b20 R08: 0000000000000000 R09: 0000000000000000 [ 200.569922][ T8990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.578320][ T8990] R13: 00007fc05d626038 R14: 00007fc05d625fa0 R15: 00007ffd9b0c28a8 [ 200.586438][ T8990] [ 200.589513][ T8990] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 200.596819][ T8990] CPU: 1 PID: 8990 Comm: syz.3.1158 Not tainted syzkaller #0 [ 200.604225][ T8990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 200.614296][ T8990] Call Trace: [ 200.617590][ T8990] [ 200.620537][ T8990] dump_stack_lvl+0x18c/0x250 [ 200.625240][ T8990] ? show_regs_print_info+0x20/0x20 [ 200.630480][ T8990] ? load_image+0x420/0x420 [ 200.635055][ T8990] panic+0x2ca/0x720 [ 200.638972][ T8990] ? bpf_jit_dump+0xd0/0xd0 [ 200.643573][ T8990] __warn+0x2e0/0x470 [ 200.647602][ T8990] ? u32_change+0x1ead/0x29a0 [ 200.652342][ T8990] ? u32_change+0x1ead/0x29a0 [ 200.657084][ T8990] report_bug+0x2be/0x4f0 [ 200.661457][ T8990] ? u32_change+0x1ead/0x29a0 [ 200.666178][ T8990] ? u32_change+0x1ead/0x29a0 [ 200.670889][ T8990] ? u32_change+0x1eaf/0x29a0 [ 200.675606][ T8990] handle_bug+0xcf/0x120 [ 200.679888][ T8990] exc_invalid_op+0x1a/0x50 [ 200.684423][ T8990] asm_exc_invalid_op+0x1a/0x20 [ 200.689306][ T8990] RIP: 0010:u32_change+0x1ead/0x29a0 [ 200.694634][ T8990] Code: 18 eb 33 e8 95 95 ca f8 c6 05 87 06 bb 06 01 b9 10 00 00 00 48 c7 c7 00 03 e9 8b 4c 89 fe 48 c7 c2 80 03 e9 8b e8 93 43 94 f8 <0f> 0b e9 8d ee ff ff e8 67 95 ca f8 48 b8 00 00 00 00 00 fc ff df [ 200.714278][ T8990] RSP: 0018:ffffc9000b7b6d40 EFLAGS: 00010246 [ 200.720378][ T8990] RAX: f7a0773f06b42d00 RBX: 0000000000000010 RCX: 0000000000080000 [ 200.728374][ T8990] RDX: ffffc9000d3e3000 RSI: 0000000000008020 RDI: 0000000000008021 [ 200.736371][ T8990] RBP: ffffc9000b7b6f18 R08: ffffc9000b7b6a47 R09: 1ffff920016f6d48 [ 200.744375][ T8990] R10: dffffc0000000000 R11: fffff520016f6d49 R12: 1ffff920016f6dbc [ 200.752378][ T8990] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000020 [ 200.760418][ T8990] ? u32_get+0x370/0x370 [ 200.764724][ T8990] ? u32_get+0x370/0x370 [ 200.769005][ T8990] tc_new_tfilter+0x13a7/0x1980 [ 200.773904][ T8990] ? tcf_proto_signal_destroying+0x240/0x240 [ 200.779924][ T8990] ? rcu_read_unlock+0x8c/0xa0 [ 200.784748][ T8990] ? tcf_proto_signal_destroying+0x240/0x240 [ 200.790761][ T8990] ? tcf_proto_signal_destroying+0x240/0x240 [ 200.796775][ T8990] rtnetlink_rcv_msg+0x892/0xf90 [ 200.801750][ T8990] ? rtnetlink_rcv_msg+0x220/0xf90 [ 200.806896][ T8990] ? rtnetlink_bind+0x80/0x80 [ 200.811605][ T8990] ? kasan_quarantine_put+0xd8/0x220 [ 200.816926][ T8990] ? lockdep_hardirqs_on+0x98/0x150 [ 200.822174][ T8990] ? slab_free_freelist_hook+0x154/0x240 [ 200.827847][ T8990] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 200.833862][ T8990] ? lock_chain_count+0x20/0x20 [ 200.838755][ T8990] ? __local_bh_enable_ip+0x13a/0x1c0 [ 200.844157][ T8990] ? lockdep_hardirqs_on+0x98/0x150 [ 200.849395][ T8990] ? __local_bh_enable_ip+0x13a/0x1c0 [ 200.854823][ T8990] ? _local_bh_enable+0xa0/0xa0 [ 200.859709][ T8990] ? __dev_queue_xmit+0x1481/0x3a30 [ 200.864969][ T8990] ? __dev_queue_xmit+0x6d1/0x3a30 [ 200.870121][ T8990] ? ref_tracker_free+0x686/0x830 [ 200.875194][ T8990] netlink_rcv_skb+0x235/0x4c0 [ 200.880023][ T8990] ? rtnetlink_bind+0x80/0x80 [ 200.884730][ T8990] ? netlink_ack+0x1160/0x1160 [ 200.889539][ T8990] ? __lock_acquire+0x7eb0/0x7eb0 [ 200.894605][ T8990] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.899838][ T8990] netlink_unicast+0x7b1/0x930 [ 200.904667][ T8990] netlink_sendmsg+0x8d0/0xbf0 [ 200.909466][ T8990] ? netlink_getsockopt+0x590/0x590 [ 200.914696][ T8990] ? apparmor_socket_sendmsg+0x8e/0x330 [ 200.920286][ T8990] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 200.925605][ T8990] ? security_socket_sendmsg+0x80/0xa0 [ 200.931094][ T8990] ? netlink_getsockopt+0x590/0x590 [ 200.936330][ T8990] ____sys_sendmsg+0x61b/0x980 [ 200.941137][ T8990] ? __asan_memset+0x22/0x40 [ 200.945767][ T8990] ? __sys_sendmsg_sock+0x30/0x30 [ 200.950817][ T8990] ? __import_iovec+0x5f2/0x850 [ 200.955709][ T8990] ? import_iovec+0x73/0xa0 [ 200.960244][ T8990] ___sys_sendmsg+0x2a6/0x360 [ 200.964954][ T8990] ? __sys_sendmsg+0x2b0/0x2b0 [ 200.969791][ T8990] __sys_sendmmsg+0x2ca/0x510 [ 200.974501][ T8990] ? __ia32_sys_sendmsg+0x90/0x90 [ 200.979564][ T8990] ? __ia32_sys_get_robust_list+0x110/0x110 [ 200.985502][ T8990] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 200.991516][ T8990] ? lock_chain_count+0x20/0x20 [ 200.996414][ T8990] __x64_sys_sendmmsg+0xa0/0xb0 [ 201.001300][ T8990] do_syscall_64+0x55/0xb0 [ 201.005769][ T8990] ? clear_bhb_loop+0x40/0x90 [ 201.010503][ T8990] ? clear_bhb_loop+0x40/0x90 [ 201.015213][ T8990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.021143][ T8990] RIP: 0033:0x7fc05d39f559 [ 201.025597][ T8990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.045245][ T8990] RSP: 002b:00007fc05e235028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 201.053696][ T8990] RAX: ffffffffffffffda RBX: 00007fc05d625fa0 RCX: 00007fc05d39f559 [ 201.061699][ T8990] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 201.069703][ T8990] RBP: 00007fc05d436b20 R08: 0000000000000000 R09: 0000000000000000 [ 201.077724][ T8990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.085724][ T8990] R13: 00007fc05d626038 R14: 00007fc05d625fa0 R15: 00007ffd9b0c28a8 [ 201.093761][ T8990] [ 201.097406][ T8990] Kernel Offset: disabled [ 201.101762][ T8990] Rebooting in 86400 seconds..