last executing test programs: 24.395552902s ago: executing program 4 (id=645): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x5, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) accept(r2, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff1704fbb97708c9ece2b45adbde0800450000300000000000019078ac6ca601ac1414aa05009078e00000e0450000000000000000110000ac1414aa00000000"], 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x64, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffb, @empty, 0x3}, 0x1c) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000009c00)={r10, @in6={{0xa, 0x4e21, 0x6, @private2, 0x3}}}, &(0x7f0000009cc0)=0x84) 23.719983372s ago: executing program 3 (id=649): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="f00000001300010029bd7000fedbdf2500000000", @ANYRES32=r5, @ANYBLOB="200002000200000048001a802b0002801400010007"], 0xf0}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x1}, 0x0, 0x0, 0xa, 0x9, 0x80, 0x9, 0x4, 0x41}}], 0xa0}, 0x0) accept4(r0, &(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80, 0x80000) 23.517784457s ago: executing program 3 (id=651): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000002070250000000000202020631af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x7, 0x7, 0x101, 0x3, {{0xf, 0x4, 0x1, 0x3c, 0x3c, 0x65, 0x0, 0xd, 0x2f, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x11, 0xffffffffffffffff, [{0x6, 0x7, "80d20e4c13"}, {0x6, 0x4, "e03f"}]}, @timestamp={0x44, 0x14, 0xc, 0x0, 0xf, [0x1, 0x1, 0x3, 0x2]}, @end]}}}}}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd27, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xf}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffd3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000104"], 0x50}}, 0x4000084) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002800a"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r2, &(0x7f00000002c0)="eab5de4d"}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000340)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000380)='syzkaller\x00', 0x3, 0xb, &(0x7f00000003c0)=""/11, 0x41000, 0x20, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x3, 0x2, 0x1, 0xc}], 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000300), &(0x7f0000000540)=r3}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000000640)={0xa, 0x4e20, 0x81, @mcast1, 0x64}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) 23.399420355s ago: executing program 4 (id=652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x118, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0xc, 0xa3, 0x0, 0x0, @u64=0x5}]}]}, 0x118}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000010000304000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000420000001800128008000100677470000c000280080002"], 0x38}, 0x1, 0xba01}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r3, 0x34, 0x0, @void}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) 23.290417976s ago: executing program 4 (id=654): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002180)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0x10}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x4, 0x4, 0x14, 0x15, 0x4, 0x6}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) 23.115292226s ago: executing program 4 (id=655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400058008000640000000440900010073797a30"], 0x10c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0x5, 0x3, 0x8, 0x80, 0x3}], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket(0x10, 0x80003, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095080000000000002f7e71b5618f1ee16af22a7508b5d9eaa029e273bfc7f2b2bab0ad8f84c88946ee24c18a521dcf22eeed227f18732444499c827bb71f9a8029951edeb471e9008e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x2, @loopback, 0xb6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="fe649067e516f1e4bad1180eb5eff121691a6b1bb8be8039edde173982f474d645f34b917533c6ff75a3f8b2254b87787dad2f4209a136fac9564e44591b3ea3267e2df3f111805ae3db7463ab668c02fbb79d1350355900279ef79a2abe7cdbbbf99fc52cf263d7ea9c2a15b7bee17e35a448c7345a2b9cb7475010c7aa5de6eb90e62ed0e487b8", 0x88}, {&(0x7f00000001c0)="5354f2ad6b2940d3b0cc2d5e6238056fdf1cc7ee6664573a9ccc1cf98d879c8412a97db5f769ebc2e6508cc2c40755648e58d24e18ef276c4ea40cf470953e97fac28957d0c1edddc0f7541453e939f480d03c6f30407febcb8b4730e487baec7f5bffa893278cb4ae6c083960c60dee53a133ce1dd3c994f68b65c90d2c7cdd7194354ebfb554ebda9341f02cf9b52b08784c0b3850087b7db0dfdecb1d8dfd0bf0d4f7536b2e67bdec11fc7c42d26f29f2fef8f88bafcf0b6f321b2abf00e57f4d0b9edba6274c7596f59be6", 0xcd}], 0x2, &(0x7f0000000300)=[@init={0x18, 0x84, 0x0, {0x7, 0x0, 0x2, 0x100}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x6}}], 0x30, 0x4040054}, {&(0x7f0000000340)=@in6={0xa, 0x4e24, 0x1000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x400}, 0x1c, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0xfffffffe}}, @init={0x18, 0x84, 0x0, {0x7fff, 0xfa2, 0x8, 0x6}}, @authinfo={0x18, 0x84, 0x6, {0x1}}], 0x48, 0x10}, {&(0x7f0000000440)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000480)="f4b4b46e21cc7151fcee84fddc413f468e5158101e467a6af7cc5d5cd38a327a3a367608b6a614b04f9139e432b5532d29", 0x31}, {&(0x7f00000004c0)="5c0df6af1b18130055a12bf0edccdc3a098cb5b0b8015c93a2515a943fd1", 0x1e}], 0x2, &(0x7f0000000640)=[@prinfo={0x18, 0x84, 0x5, {0x20}}, @init={0x18, 0x84, 0x0, {0x3, 0xff, 0x2a, 0x3}}, @init={0x18, 0x84, 0x0, {0x81, 0x8, 0x6, 0x800}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x6d3, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x7, 0x2, 0x4, 0x7, 0x6, 0x2, 0xfffffff7}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x0, 0x1afc, 0x6}}, @init={0x18, 0x84, 0x0, {0x0, 0x8d, 0xc, 0x3}}], 0xe0, 0x14}, {&(0x7f0000000740)=@in6={0xa, 0x4e22, 0x9, @mcast2, 0x3}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000780)="2d991033b43688143e5250e20bd92ca906a84d99da45f8a8659dde401184f55551f55a07021d51844a8ec224fffad0c200cb3179a4de592e7dfd80fbe49a321ac8b9c5f3d115c8f11126ea806592eb27f02b138083250a2dce", 0x59}, {&(0x7f0000000800)="b5d3b9ee34bf696a27cea5333e03b63bd51158e3cf3e7e6cb6445229d128dc5c169c3deb038a554696a891f1c732fba6344af143116b3ae142e32bc76f6179843814336220bff2d8b59bfb92987d720de0f80c1fe3c57794657bf293c87f576441a434c13e05b05bd5607257927d4cde75d71c547b202648ed634f77a800ed586740c3ff075f73d14d6c54ba0fce6745", 0x90}, {&(0x7f00000008c0)="ace481bf8be6da140b80c8625d5759e44bbaf12ee7f88b185941bf6f47519e92269f3174e841fab346ead74be6667feca171936cdb9b7054d4fabce941dd737af322eaa0b27afcdce06210a7cf4964d2ba77a380ad3a0b24dd9e755962fc6173f74917e6d5ca2655ca0b83f86dc0734db6298ac6fcd21004c34c18c6956a1621cb0ad1037c81d30cb5ff65475cdacb142457648e2d55f1cf56733bfdbdddb5bcb83118a43767fd72e7996652fc8568b2e4c9fc49a94a336c0b383f4e4633671c04e2e2dd344c7294b840a6ba2f5ac2ab", 0xd0}, {&(0x7f00000009c0)="ad0bd74a290457775798853362bec35b83b1fa8a39f07a3d20c84a4dc83a5319cf67d60bfd3709f42eaf9502799ba7312ede1667677304934aadf7faa878b0fe4682eea6933072a11b7b4e73f16c08bfa96dad5902fa0d887fe98880f929da83749f408de3ba1ccdd4367a0f7e", 0x6d}, {&(0x7f0000000a40)="7cadf80792572f81df0e6fba1726258bd5deb69b9d645609ae87fabc5ca43d1da2b1dde1bc636673c01175e3baa1915a4b9a0c533a941c5c650346ec1c545e7623a142cab96a602b58d7195f6c72c064d90699d2575643c2", 0x58}, {&(0x7f0000000ac0)="aa8e14ef88de320baf1f4c54f436e2580fcf8571f70b754d2fee830d83e7b88e708fa30fdc7ccdcf54613bd368cf041aed5551c44c4d0502f1a6d2bcf7e19040b3a57b63a6d964502973fb2c33d46d35c21e664818a1", 0x56}, {&(0x7f0000000c00)="95c09a246c6842cb82338e8ee7cb52bf11969fb426496c364b94538e5d6117530375b3ba66ea91d3aa296505b87036183e308dbdc1ad563343cc07199c58ccd69ba2f9fa0605f1a82bdc26b82dd6d94eddd318ae5399fd3a1a3bb86022c7c8cfd80fa6a5380354bb5c54d7fcdff1d42e551f7fe7372af1b122f27b4f7eed500817cc721568757369bdc521", 0x8b}], 0x7, &(0x7f0000000d40)=[@authinfo={0x18, 0x84, 0x6, {0x2}}], 0x18, 0x10}, {&(0x7f0000000d80)=@in={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}], 0x5, 0x40000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000200), 0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) unshare(0x2a020400) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000840)={r9, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 22.503704711s ago: executing program 3 (id=661): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="f00000001300010029bd7000fedbdf2500000000", @ANYRES32=r5, @ANYBLOB="200002000200000048001a802b0002801400010007"], 0xf0}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x1}, 0x0, 0x0, 0xa, 0x9, 0x80, 0x9, 0x4, 0x41}}], 0xa0}, 0x0) accept4(r0, &(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80, 0x80000) 22.366301266s ago: executing program 3 (id=664): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f00000000c0)=0x4) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) ioctl$sock_netdev_private(r2, 0x89f4, &(0x7f0000000200)="2e66d820ba481d361b5be7207b2a97f298dc4820a32dab4e4972339225478099e022b1625128204ca93da37653ddcb6a0d03db7f5662198f6426b9818b79811527a12ff1c3d0c797b1744e7ad0c74037da0178c69d908fced606efbee6b0d21d3b62870932d4ce9ef4fef831af410a81f96983aab026a8300296c8ea34659cf44ccbe64bfa8826ce46964d787f1259365f4dbe0cd61c9ad6086938e318cfb2fe18a58c6c61f8b62b3a116e727be7e8b93b575d91f0962d8c72805eb44ed6cebfa74d0ea7ff82cb1d00cc11fbc89d7932f44aaf") r6 = accept4(r5, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r6) sendmsg$alg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r7 = socket$inet6(0xa, 0x3, 0x6) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x34, r8, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x80000}, 0x20000000) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4004, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xd, 0x5, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default]}) 21.846253349s ago: executing program 4 (id=668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000240)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a168d0bf46d323456511000000caaf6c26c274214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160000000000403622a590ef62f6b0f8eca0faed00000000", 0x78, 0x4000000, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x44, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x7, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffff7f}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r10 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r10, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r10, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="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", 0x2d6}, {&(0x7f0000002b40)="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", 0x2af}], 0x2}, 0x8400) sendmsg$inet(r10, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000800)="7e24225d7d1bf3f2c2e3350446b32bcc9a579c864b87c0b26e9513f1a964562cd0fb40e07a028a9e4a8509c6183dc2c51a7f307806ce093fad8f167b3f1656081a0f4b15e021952a5e40d65779b924ed3fd175df8673c7544e9e3b11bc621acae054258215e76d7f16569f3436c00fcc7c6c154f87afc22e0ad2a3737a8f6e1cdf815f357d0b10e57e633006dd00e8cc5c66ddb415a93124d45ef1e687b1e29d9fb742d4f8b91f69854f7ba2eaec1b2782a4807fba2fc86bb82f320faa5da21794d4e6b2795f823dd429c33bb5", 0xcd}], 0x1}, 0x0) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 20.691674578s ago: executing program 1 (id=672): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x6) (async) listen(r0, 0x6) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @local, 0x8, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='l', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x84, 0x1}], 0x10}}], 0x2, 0x40000050) pselect6(0x40, &(0x7f0000000040)={0x4, 0x671, 0x7ff, 0x0, 0x0, 0xcd9, 0x4, 0x100000001}, &(0x7f00000001c0)={0x8000000000000000, 0x8000000000000001, 0x4614, 0x101, 0xfdd, 0x3, 0xfffffffffffffff9, 0x80}, &(0x7f0000000200)={0x2, 0x6, 0x88b, 0x3, 0x8, 0x7f, 0xfffffffffffffff8, 0x81}, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x10000]}, 0x8}) 20.609510194s ago: executing program 1 (id=673): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = socket(0x2000000015, 0x80005, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b2ddffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bb0b1250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a00000005000000020000004700000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000b72900000000000000000000345143c5eaf87466d1fe8c5640a1e7700000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r1}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r2}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="7a0a00ff0000000071104300000000009500000000000000f90af7d58d3eace862b249ae5cff39460024696dda220fdce2e2ec869d7169e83de9d5f58b40293ae4ef89582d60aeabf0ec70f01609e663a8a3c7bd68"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x214}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x3, 0x88c, 0x4, 0x2, 0x0, 0x0, 0x3}, 0x9c) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r5, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x8}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$inet6_sctp(0xa, 0x1, 0x84) 20.344801358s ago: executing program 1 (id=674): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x10c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x1009e, 0x311a0}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xc7909}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x6}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip_vti0\x00'}, {0x14, 0x35, 'veth1_to_bond\x00'}, {0x14, 0x35, 'dvmrp1\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xba29}, @IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3a}}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}, @IFLA_MAP={0x24, 0xe, {0x0, 0x1, 0x1ff, 0x9, 0x5}}]}, 0x10c}}, 0x800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="f00000001300010029bd7000fedbdf2500000000", @ANYRES32=r6, @ANYBLOB="200002000200000048001a802b0002801400010007"], 0xf0}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) splice(r2, 0x0, r4, 0x0, 0x10d00, 0xf) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x1}, 0x0, 0x0, 0xa, 0x9, 0x80, 0x9, 0x4, 0x41}}], 0xa0}, 0x0) accept4(r0, &(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80, 0x80000) 18.964972403s ago: executing program 1 (id=678): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}, 0x0, 0x3, [{{0x2, 0x4e24, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @rand_addr=0x64010101}}]}, 0x210) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) close(0x3) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000060c0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000a00)="ea135a0d1d84dd4213fc782067e5751014c34cb1bac081c5435287fade7b8adbf7a5e4cdae54eab5b38f993de436a3405968e3923dc31291770e2e43e7a3f830166eb4083b6894ffa05be671b7748148d42de4a14cf28b2b1988774ede4dfe4cf52436afd9f17604ad51da70d8e7b78c773fc5c8ecccc18e9dc7e2132b5f41d74c2f0c50f1349c5ac42f181cedae04d75c3f58a0f5147dbcf31305c55aa7471bbaccc5ef299adf1c93ba51230c74ab7a8bff7ef41707444d30517b74bdce229d33fcb6c73a333ea94e211d8517aaa6af0270b54791f0f4d78a8ade6c94034ff673abbbb51e2b6b04e974bfc9901a82530c3c5b00bd694f377a15049ab70a4016beb7bd51d042b2feda260366872a00cfb3864da3efbb3a35206cf797663dea936dac5fdc38439c80137de53903a51ae4c6eab5653642c013583a7f9a61ede4f0031b6068b8ca54e669c4ca17147b5cb1afc708b904ef2734613f6e7100e5b34e98c6010272a97155db3679a69ebf463fa0751c6a4d0abe17f6fa0d66b3505f9c58d9bcefc0859bcca5e38aed83a92b31e09965f8e90cbe6735137e8a8e16a69e29c4e1ccd87c04bb337110267c9cd1f5c26dfb58aa2c52def870a66e6fcce05dc67d0894e1618e5c2555ee82b2e9154bf77135b6023d2c460cbc36e4ab22c4d42abe9f5027e8e660b61760b4c027cd2f7cb2e41ecc0092618f19522ecd4fcccf3f1b6d1e7614a13f11cc17339430b5ff7b63362d7bdf95607d82e7a5285cab31fab39b97d493b6c3bb77aad630f946a0ea5816c897906914a41b855f80cccd5c34f57fb4938ca018a489c29c9a88fc2edec027fabff2a3a856e4f9f7b6f24446c50ad5253de2323a30da5fd55775f5c711e578bcc3f36eb5a862305721289a3de58543cbbf38bf71a78f38f29c5790b8053c6cfab2d31613dad32772907bda41a094a2a0617e0b5ec31c8436fe105f7acb0d652ebf63a81d44aac0ef747be8c61af81dd54a2030ff2fd3e17f562759579d8b46f460a3f02b2408691ae1f4c0617a04c227ea9e98f17524d82493b0fa2113835e9465a4a4d973bbddbb5b074287fc41a20eb8ab1c251ce13c5ea279c958cebd108425bb61d1908c41d501b7cde8fc322b7160b988e4819b07ff50ce0baea2affa2d87c86a414e99e43eda7ff0ba4ba60d35f30295528964e41579031fda998ff53d1ee3c41a2da92479a6da9fbae69c12f83d71f07ece5a4a8122b6c2f7cd12adc5e1781752a72871c5134109637371c1b1ff607482338e9c34fc3b0d60289aea7a0d804c18ac272a99df804793d365a524c406b980d7a5ea3ceeed2d8909a84da79088b26c9d318e851bb25ff741cd10d8d730b98353be515eaebaba893c36636bdf083727fa3c3994cfb5c3b2315a7a0679fc70950faef5ecc40c25a0fbe0fcab33a905ce04f4af673b394e23e5f54f3711695fd74b84e25a572cfd04f5f79a4c3a0b891596c34fac2b83d78fd5d751f2e6b41786277f0ff3be1603c55a31e82dae8dff94a1b87fb32214a2366c420021166e292158ae4da565a7af6d6c2fc4da358564256bdb92b26445d25ff506ae6c51bf22d5e745dcb8a95cda1b1d1cc98dd7d3d16d01b60072ddcee8bcab69a98158973bd2ca52ffa2bf59e2f3bb8a3a59416875189eb8ed1d00ca984156a84f7e07ad98f0a16ec3c422dbaf2654fb60641668af0f64d19da12f3233f294dece8b89c2c2e346fc07e6fb117a71ddb989d3cc46e662e68415728648f89f0e800222a49f7adeb6322fd5ec5f6dc9ef9d542dd9900f4a69372086679e4ec6359d805d293e07c8ea892aae789ab31a304b240e9ab987a4820b7356d540f217fd12cce46c6b0bb8e97742a6d384db741b1bcbb295d6e03c8e9099f1e77f787dc91c58d3cc467e75b97adc12631c35b6b9cbd665c6ba489cdd3669a8aca82facaf0e3e7d8552ab8006a83a352b2e9ea11c068bd428b391b262281ade707744d64d498e2a465fb8520808b55041e97d8b6ca596314ac3d88a6baf90d921b0132e9ac9c02d5cd6bbfe7d83ce672020a432d14ce56d61ccc8c699c5e8699fc19695c266f39dd507e77d6aaf52bf58f12a010441a3af03a0156a0bb7c21a280474eee39f6b883440c919f082b912ae93a9203af9fa0fa2f0b72705e1cc0f5634f2412e94c118349310e6f054730e739428576e834511e5dcaba5f9790e4660d792f4e74123fc3f543ddb62d369221190ca2f4e607eaceda49205f5230c115b97370cce962245ae056befea847c5efe0d20745ec6c88c7cd115836968e1184bb2401bac0902e8cf26929321bf90c1d4aaad24a4495b78880f684243565465b803be74786ef871883f3ab832721cd9f5733d9f0836773db745f4590a88bcd864e41feacd6cc7aca073e43138b854f680d11e7f5d5fa3f5b3c0fb27d90f3533acf37f9a3880b9372d83a2af0b767e91c579ddb3b28cf3ca70a674e8336a212f8e40aed56aaec3fb473f72e0bc0b5982730af730781df8acf1a95967d2dea0b9dd47d5ffc98a7701bd3be15996c9a5eeeb065b463c8ff8d881e3a274b78ef5a241a786bc353c0eced3a8bff1a1005f0958da4970ae7014f04226b624607845f06a0930d8af5083224c6883493825f9f971c86026a922c3fcd5bd50d5270b0ae3fc4cd35612df24f2ca849aff0c941659b3ffcc7066d0189da257ca149f94166602c7c1aa37702ec8e494c852b985fc28ea9478d99044218d47697cc949cc6303596ef106bb6109438436bbadd3e79b20f59a9bd9b5a4d28d67e810c168a261019eaf7dcd8e9cdc29485f4002cf144561614b949ba0c454e1eabf3604d82655ef090a4f2afd40b63a2a29f97df1e9ba63180bcb1b7a01e00ebe20c9de8f4de47b32863892f9384b5483aca8d6eaa046c0d98179a64caef7d9cd85027b1e7e3244b0819b1ead302ccedf68600d230a4d4d946ba88bfdd9ec126fe813cba9631b870dcdc82c0f19f849300b3fa7a7198af484142a6ad2a9602612038f892a0434502d63098fba6b3bf78fe6a441299a1a7e7824a442d957f00ace752994791bdb773146f3b3b18acc57f1df322de809b627f6ccf60f0bb51d1b6c7699be75c69757c022a0476fb28acf93b358664dc52a621179e24fcd84ed851599ba2516b500e7d235b547e2b88ca2b3f97b3181f96436ab4cd32116e9146539b1a184582379fe641fbf0d0a9935dd2125786977f4ff4a6246a95861757e6e801e820406adc21f4738f5988742ae8081a3520297e343644d500696f19c2efe157fd382e61fd4f3b4581cb22705e6255d6f350ef19d10f8be8d354eaaa1fb9d75545194774539dc8e42401339c1d43351e2c9cfd603e58e9205fd414a08c6e9f38973128647d3673b5913f4f449ab1d61f35c2652cff21f5689aa461fb344bddb325b5ccf1e3c5b25fee0da7f", 0x981}], 0x1, 0x0, 0x0, 0x20045000}], 0x1, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000001380), &(0x7f0000000000)=""/1, 0x2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xb90, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) (async, rerun: 64) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000000000)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x4000000}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000001c0)='macvlan1\x00') (async) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x20, r3}, 0x18) sendfile(r7, r3, &(0x7f0000000240)=0x6, 0x55ee) 18.791440277s ago: executing program 0 (id=679): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000240)='b', &(0x7f0000000000)=""/1, 0x2}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000004594b3e5a3fb2ba570000000000000002240000000c0a01120000000000000000010000030400038009df7a559d2754dc00010073797a3000000000140000001100010000000000000000000a00000a"], 0x60}, 0x1, 0x0, 0x0, 0x8804}, 0x20000000) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@gettaction={0x24, 0x32, 0xe72c5f922f23cad9, 0x70bd28, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c844}, 0x4000000) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r7 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x9, 0xffff5551, 0x2, 0x7, 0x24000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r11 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) (async, rerun: 32) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000004c0)={0x0, 0xfffffffffffffe58, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) (async, rerun: 32) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) 18.791070836s ago: executing program 1 (id=680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000070a05000000000000000000010000050900010073797a30"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4804) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd31, 0x25dfdc03, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x0, 0xb}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x240410c0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @loopback}, &(0x7f0000000180)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@remote, 0x0}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x8000, 0x1, 0x8, 0x8, {{0x14, 0x4, 0x0, 0x9, 0x50, 0x66, 0x0, 0xb, 0x4, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0x88, 0x1, 0x4, [{@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x7}, {@remote, 0x101}, {@broadcast, 0x10}, {@private=0xa010100, 0xb7}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x8000, 0x80, 0x9, 0x5, {{0xb, 0x4, 0x1, 0x2, 0x2c, 0x67, 0x0, 0x2, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102, {[@rr={0x7, 0xb, 0xee, [@remote, @rand_addr=0x64010100]}, @generic={0x82, 0xa, "f6649959c71994d7"}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=@RTM_DELMDB={0xf8, 0x55, 0x300, 0x70bd28, 0x25dfdbfc, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x3, 0x2, {@in6_addr=@private0, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x1, 0x1, {@in6_addr=@empty, 0x8add}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x1, {@in6_addr=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x3, {@ip4=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x1, 0x3, {@ip4=@remote, 0xc5b3}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x0, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x43fd82351569df73}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x2, 0x3, {@ip4=@empty, 0x8edd}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004054}, 0x240488c0) 18.782696096s ago: executing program 3 (id=681): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x82, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x10, 'fsm\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @common=@frag={{0x30}, {[0x6, 0x3], 0x3, 0x2, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0xc0000000, 'pptp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0xff, 0xffffff00, 0xff000000, 0xff], [0xff, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000240)=r2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000b000000850000007500000095000000000018c8"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xf, 0xb}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xdd86, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba", 0x28}], 0x1}, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x6f89c659e9b3087f) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400010076657468305f746f5f6873720000000008000240000000005c000000160a0101000b000000000000010000000900020073797a30400000000900010073797a300000000030000380"], 0xfc}, 0x1, 0x0, 0x0, 0x804}, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x80) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000280)={@empty, @remote, 0x1, "ee5466e39983536edc8c3e16e0abaadbd16c6cb54bb0ababec0fe72299651884", 0x8, 0x6, 0x3445b24d, 0x7}, 0x3c) 18.611165481s ago: executing program 0 (id=682): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000240)={0x0, 0x1, 0x0, 0xa5f}, &(0x7f0000000080)=0x18) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x44) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/219, 0xdb}], 0x1, &(0x7f0000000480)=""/19, 0x13}, 0x40000010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd700000000000040000004803118031f9e0562f82"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 18.247492623s ago: executing program 0 (id=683): socket(0x18, 0x4, 0x242) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="ac000000000000000000000000000000850000006d000000850000007d0000009500000000000000b3c18ae03f75d805164dde77efd76d91de4d0279a74489d2409d3a5be9ee5a6599426ecfa53c0be1d135573c1ac06d4291ed1c080d4f"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173}, 0x80) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x8, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00020000000000000034000202020202020000080026009015000000000000000000"], 0xffffffffffffffee}}, 0x0) pipe(&(0x7f0000000780)={0xffffffffffffffff}) sendmsg$SMC_PNETID_GET(r4, 0x0, 0x4001) syz_80211_inject_frame(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000000000640001000006020202020202010016451613132bef088f0c512d8875eefd276b895d325e6c0c0c86eea8ad272c539e25ab8689bd6fe0c1a566ecf1b5be8098e0875e9b422deb6746b00f7078a8d789169851fe3655996c49ce5b1b252660dfcbcb8e30084c5eeee6764e2f2f9615b4eb31fe7b1f03feee7e5a7085287e4d626c90efd04c9564fc6ec0c398b41b15ad7bc3555f977e8f1ab556a95d8eaba20005d106742c49c6eaf7bfaaf63b239d71bcef702a6cf27f919a9292f05efb3b2728a901221bb7142082b55effeda9a9e010674c"], 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="b0000000080211000001080211000000080341a57f85e85fd211a2d04dba502e02110000001000000002000000c78f9ad32b2b2482ef5198978163385199d9e51ce0e58756bd732bb5e9ab5d5058f663b97bc528581356677fc13b80caaea7228f88c307925cc480587cf7755e1cefffd4db352c5ce594028fb85ea160d2ab68372d05b8fff522f7d439fda30b648629da610940c0b10185cfc85e6dca7b37663197b703806c6eeff33126cd47c58e8a"], 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=@mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xff}, @device_b, @device_a, @random="a5138a8457f1", {0x5}, @value=@ver_80211n={0x0, 0x10, 0x3, 0x2, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x29, @val={0x8c, 0x10, {0x3b5, "883b7950d747", @short="abbd538c14b92054"}}}, 0x30) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r6, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) 17.722256559s ago: executing program 3 (id=685): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16], 0x48) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x600, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095c8535ea01a5ea269d46cba5f27ca0413275758161e8141a4c0d35e2c84b1a106c61ae2e16dfda5a58eb6305693a7b1771c02de2decad3fa1ff"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004a0000000160a010100000000000000000a0000000900020073797a30000000000900010073795731000000000900020073797a31000000000900020073797a3100000000240003800800024000000003080001400000000008000240000000000800024000007fff0900010073797a310000000008000740000000020c00054000000000000000040900020073797a32000000000900020073797a32000000002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) setsockopt$inet6_int(r5, 0x29, 0xb, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket(0x80000000000000a, 0x2, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000080)=""/21, 0x15}, {&(0x7f0000000680)=""/190, 0xbe}], 0x2}, 0x3) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2d, &(0x7f0000000200)={0x7f, {{0xa, 0x1, 0x0, @mcast2, 0x1000}}, {{0xa, 0x0, 0x0, @empty, 0x2}}}, 0x108) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000000c0)=@req={0x7, 0xaa7c, 0x2, 0x60000}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r7], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b01010000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) socket$kcm(0x2a, 0x2, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xe}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 17.371693702s ago: executing program 1 (id=689): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x4, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00'}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpeername$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044841}, 0x4000000) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x77, "15eecbe210528ba78d95dc74f5fbec545dc5a0999a445843d61534aff73661692f856572768dae923eb85a9c86465995a74f6720a636949dfeb2279fd4f8e86642e5db37b1b1b183bb36c8db2796217854c9a69e70cce0db6d0114d6bd6e891e1b4fcfd2c5a086cbf15b7f65055d298e20a62470fb770e"}, &(0x7f0000000180)=0x7f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000001080), 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x913e0000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0xa2ec9000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x1000003, 0x10, r2, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r10, 0x1000) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) 17.29786944s ago: executing program 0 (id=690): r0 = socket$inet6(0x10, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendto$inet6(r0, &(0x7f0000000000)="1c0000002800050f0c1000000049b23e9b200a000835b3c000000001", 0x1c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000005, 0x6e073, 0xffffffffffffffff, 0x2000) 17.295806204s ago: executing program 4 (id=691): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x13, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0xc, 0x4, 0x3, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb47}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}}], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xffffffff, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xe, 0x10000, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000001c0)=[{0x2, 0x3, 0x10, 0x5}, {0x3, 0x3, 0x2, 0x3}, {0x4, 0x5, 0x1, 0x1}, {0x2, 0x5, 0x10, 0x5}, {0x5, 0x2, 0x10, 0xa}, {0x5, 0x1, 0x10, 0x5}, {0x4, 0x1, 0x4, 0x4}], 0x10, 0x3}, 0x94) sendfile(r0, r1, 0x0, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pread64(r0, &(0x7f0000000340)=""/148, 0x94, 0x9) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x130, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x11c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @mcast2, 0x43a6}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @private2, 0x101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @mcast1, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcda}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x20, 0x10, 0x9, 0x7, {{0x7, 0x4, 0x3, 0x6, 0x1c, 0x68, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@ra={0x94, 0x4}, @noop]}}}}}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x5, 0xfffffffe, @vifc_lcl_ifindex=r5, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r6, 0x400, 0x2, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24004041) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r8, &(0x7f0000000cc0)={&(0x7f0000000880)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/147, 0x93}], 0x1, &(0x7f0000000c40)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {&(0x7f00000009c0)=""/61, 0x3d}, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/51, 0x33}, {&(0x7f0000000a40)=""/134, 0x86}, {&(0x7f0000000b00)=""/241, 0xf1}], 0x3, 0x12, 0x400}}], 0x48, 0x20000884}, 0x880) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d80)=@o_path={&(0x7f0000000d00)='./file0\x00', r1, 0x4000, r9}, 0x18) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000dc0)={0x0, 0xfff}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e00)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x400, '\x00', 0x0, r7, 0x5, 0x2, 0x2}, 0x50) ioctl$FITHAW(r7, 0xc0045878) readv(r7, &(0x7f00000020c0)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/30, 0x1e}, {&(0x7f0000001ec0)=""/123, 0x7b}, {&(0x7f0000001f40)=""/159, 0x9f}, {&(0x7f0000002000)=""/129, 0x81}], 0x5) pwrite64(r2, &(0x7f0000002140)="d5c9f6b8f60e3fc0a15fa0600cf520dc147eeb1b9fcad6bfade1730cef90d9b69604da1b813b7bc5f7faca49f8f66714abb74f7425183f9b28d5b0f6e45cbb19c41a8682a45ebc741c5fb5e383d27e265482dc", 0x53, 0x1d8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000021c0)={'wlan0\x00'}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002200)={r7, r8}, 0xc) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f0000002240)={@bcast, @bcast, 0x3, [@bcast, @bcast, @default, @default, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$BTRFS_IOC_SCRUB(r10, 0xc400941b, &(0x7f00000022c0)={0x0, 0x7, 0xe9b6}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000026c0)={r11, "71836c83ed630083e6f9bca5ded8f4da"}) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r12, 0x89f0, &(0x7f0000003740)={'ip6tnl0\x00', &(0x7f00000036c0)={'syztnl1\x00', r5, 0x4, 0xec, 0x48, 0x8, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0xf, 0x2}}) sendmsg$inet(r0, &(0x7f0000003a00)={&(0x7f0000003780)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000003980)=[{&(0x7f00000037c0)="c934102045da88202093f9628a8bec09558710acf516629ef4fdf3399559b9a8b1ea737531bcff", 0x27}, {&(0x7f0000003800)="b14194a61f5d7f960f5e712f9b32e2b3e44428b56dc5862b72f3094436ac532ae7a8b19d4870319c724780570a8b01a9679565eeed1af8b68fb63c2de23ef78ca6a343", 0x43}, {&(0x7f0000003880)="8c5bc1c343749a1d1d53cd6f7f6b0680b8039aaa00b89a8296753a77a1a3359aaeaacb5ca17e2adef54cedb3a1774bd91cc708d5b6fb1390a209a22a2d9d0655f9eba7b9", 0x44}, {&(0x7f0000003900)="caf47a68d56ef6da9e0d8252c0de5e23d37b1ae1659908438bcfc82b1122ec46c0e03cb7a5232e9883f504913f4579a7bcdd28dd088f5031997fd4e14b103a9e43a2833527db410b748c7445e3a20b681829d4461fb34c3b5dc2f109c1172a374339e5ae80e52feaa9", 0x69}], 0x4, &(0x7f00000039c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}, 0x20004004) 16.964615187s ago: executing program 0 (id=694): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB="0000000000000000fb"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x2}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x2}, 0x28) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) (async) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/42, 0x2a}, 0x6}], 0x1, 0x2b, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000080)=0xfffffffc, 0x4) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) (async) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0xb, &(0x7f0000005000)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0xb, &(0x7f0000005000)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.082592589s ago: executing program 0 (id=696): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x100000001, 0x4) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000280)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1867143b35130c0600000000000000bd7000fbdbdf250800150000000000"], 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x800) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) socket$inet(0xa, 0x801, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x40000000, @loopback, 0x3}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) 15.90763729s ago: executing program 2 (id=697): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x4) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0x5, 0x7, 0xa, 0x5}, {0x113a, 0x2, 0x7, 0x6}, {0x200, 0x8, 0x7a, 0x1}, {0xfffa, 0x1, 0xfb, 0x3}, {0x9, 0x3, 0x3, 0x8}, {0x3, 0x1, 0xfc, 0x81}]}, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800005717ca324d11a9050e000410001003000001000000"], 0x18}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x53, 0x2, 0x2, 0xc, 0x7, 0x794c}, 0x20) syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6ef5c98000282901fec0ffff000000000000ffffe0000001fe8000000000000000000000000000aa"], 0x0) 15.795331333s ago: executing program 2 (id=698): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) sendmsg$inet(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800100028bd7000ffdbdf250a142004fc00c8030011000008001900", @ANYRES32=r3, @ANYBLOB="2313a328c4de2c744a7c278fde4748cfa28620a6aab9ff8ef0a09a653cd21b855aefdb37b2da5c1aca1629903386b47da6412b3ff6a2bd0a45970a085d9fc36b84f225c1c33fdd242e28983ce184001d903c64d6908086bbb499787ecfa9c5768823327909eb0c72fcdacba45dd3dfb056ff9551efb4514fea9bdd30c8fbcd070769188d61e8b89fe73d5b747c53dbb68e69a8c6dfd9b8c17db5e4ac46c7a9021fa709a60f89e4ba9ae92f19437ad82234c59f805daa05ff68bd0706b3903ce00406c7dbe13848"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_route(r2, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000340)=""/135, 0x87}, {&(0x7f0000000000)=""/1, 0x1}], 0x3}, 0x120c2) 15.733911413s ago: executing program 2 (id=699): r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x50, r1, 0xd0256000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000080)="7c773d39aeef00") ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r5, 0x400448e7, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0xefff, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8, {0x6}}}, 0x24}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f00000008c0)='cgroup.procs\x00', 0x2, 0x0) r12 = openat$cgroup_procs(r10, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000000c0), 0x12) pread64(r12, &(0x7f0000001840)=""/4096, 0x1000, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @mcast1, 0x1, 0x8, 0x0, 0x66}}) readv(r11, &(0x7f0000001800)=[{&(0x7f0000000680)=""/42, 0x2a}, {0x0}, {&(0x7f00000016c0)=""/4, 0x4}, {&(0x7f0000001700)=""/238, 0xee}], 0x4) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x8, @none, 0x2, 0x2}, 0xe) 15.594774946s ago: executing program 2 (id=700): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000057cfb0180000000000090002000000000000"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@deltaction={0x20c, 0x31, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x2c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x4}]}, 0x20c}, 0x1, 0x0, 0x0, 0x11}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x20) close(0x3) socket(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000080000800b000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = socket$inet6(0xa, 0x80002, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x8}, 0x1c) recvmmsg(r8, &(0x7f00000015c0)=[{{&(0x7f00000002c0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000440)=""/92, 0x5c}, {&(0x7f00000004c0)=""/91, 0x5b}, {&(0x7f0000003840)=""/242, 0xf2}], 0x3, &(0x7f0000000900)=""/186, 0xba}, 0x8}, {{&(0x7f00000009c0)=@can, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/62, 0x40}, {&(0x7f0000000a40)=""/240, 0xf0}, {&(0x7f0000000340)=""/7, 0x7}, {&(0x7f0000000b40)=""/49, 0x31}, {&(0x7f0000000c00)=""/156, 0x9c}], 0x6, &(0x7f0000002840)=""/4096, 0x1000}, 0x4ed}, {{&(0x7f0000000d40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000b80)=""/9, 0x9}, {&(0x7f0000000dc0)=""/160, 0xa0}, {&(0x7f0000000e80)=""/225, 0xa8}, {&(0x7f0000000800)=""/251, 0xfb}, {&(0x7f0000001080)=""/138, 0x8a}], 0x5, &(0x7f00000011c0)=""/171, 0xab}, 0x6}, {{&(0x7f0000001300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001280)=""/8, 0x8}, {&(0x7f0000001380)=""/181, 0xb5}, {&(0x7f0000001440)=""/215, 0xd7}], 0x3, &(0x7f0000001580)=""/26, 0x1a}, 0x2d20}], 0x4, 0x2100, &(0x7f00000016c0)) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, 0x0, 0x0) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmmsg$inet6(r11, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r10, &(0x7f0000000200)={0xa0000004}) socket(0x10, 0x3, 0x0) 15.424114906s ago: executing program 2 (id=701): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000004000000000000000300000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x10, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 15.325394147s ago: executing program 2 (id=702): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}, 0xa}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000140)={0xcb15, {{0x2, 0x4, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gre0\x00'}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{&(0x7f0000000140)=@x25, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000380)=""/136, 0x88}, {&(0x7f00000001c0)=""/80, 0x50}, {&(0x7f0000000440)=""/29, 0x1d}, {&(0x7f0000000900)=""/216, 0xd8}, {&(0x7f0000000a00)=""/147, 0x93}, {&(0x7f0000000480)=""/22, 0x16}, {&(0x7f0000000ac0)=""/67, 0x43}, {&(0x7f0000000c00)=""/144, 0x90}], 0x8, &(0x7f0000000d80)=""/99, 0x63}, 0x3}], 0x1, 0x40000140, &(0x7f0000000e00)={0x77359400}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff9e584eb1aa3d10e3dff9f8e583de3a48e95f3b1ef28da212fb3a0d2e2bba5a83d454726fe5a16e3c020146d24c8d98140213c50401c64c9d2e58c8e5858e", 0x6e}], 0x1}, 0x48000) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r3, 0x4) recvmsg$kcm(r4, &(0x7f00000012c0)={&(0x7f0000000e40)=@hci, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000ec0)=""/70, 0x46}, {&(0x7f0000000f40)=""/186, 0xba}, {&(0x7f0000001000)=""/13, 0x3a}, {&(0x7f0000001040)=""/144, 0x90}, {&(0x7f0000001100)=""/27, 0x1b}, {&(0x7f0000001140)=""/73, 0x49}], 0x6, &(0x7f0000001240)=""/94, 0x5e}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff004) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x4, 0x18}, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000020000000500"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000004c0)='%pB \x00'}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3161fd51, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ldst={0x1, 0x3, 0x2, 0xc, 0xe, 0xc, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xb, 0x7fffffff, 0xff}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r6, r7, r8, r9, r10, 0xffffffffffffffff], &(0x7f0000000600)=[{0x0, 0x1, 0x1, 0x3}, {0x2, 0x1, 0xe}, {0x3, 0x4, 0xb, 0x1}, {0x0, 0x5, 0x6, 0x2}, {0x4, 0x4, 0x4, 0xb}], 0x10, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 2.511761675s ago: executing program 32 (id=685): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16], 0x48) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x600, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095c8535ea01a5ea269d46cba5f27ca0413275758161e8141a4c0d35e2c84b1a106c61ae2e16dfda5a58eb6305693a7b1771c02de2decad3fa1ff"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) setsockopt$inet6_int(r5, 0x29, 0xb, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket(0x80000000000000a, 0x2, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000080)=""/21, 0x15}, {&(0x7f0000000680)=""/190, 0xbe}], 0x2}, 0x3) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2d, &(0x7f0000000200)={0x7f, {{0xa, 0x1, 0x0, @mcast2, 0x1000}}, {{0xa, 0x0, 0x0, @empty, 0x2}}}, 0x108) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000000c0)=@req={0x7, 0xaa7c, 0x2, 0x60000}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r7], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b01010000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) socket$kcm(0x2a, 0x2, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xe}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 1.990419825s ago: executing program 33 (id=689): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x4, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00'}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpeername$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044841}, 0x4000000) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x77, "15eecbe210528ba78d95dc74f5fbec545dc5a0999a445843d61534aff73661692f856572768dae923eb85a9c86465995a74f6720a636949dfeb2279fd4f8e86642e5db37b1b1b183bb36c8db2796217854c9a69e70cce0db6d0114d6bd6e891e1b4fcfd2c5a086cbf15b7f65055d298e20a62470fb770e"}, &(0x7f0000000180)=0x7f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000001080), 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x913e0000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0xa2ec9000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x1000003, 0x10, r2, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r10, 0x1000) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) 1.930628346s ago: executing program 34 (id=691): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x13, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0xc, 0x4, 0x3, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb47}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}}], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xffffffff, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xe, 0x10000, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000001c0)=[{0x2, 0x3, 0x10, 0x5}, {0x3, 0x3, 0x2, 0x3}, {0x4, 0x5, 0x1, 0x1}, {0x2, 0x5, 0x10, 0x5}, {0x5, 0x2, 0x10, 0xa}, {0x5, 0x1, 0x10, 0x5}, {0x4, 0x1, 0x4, 0x4}], 0x10, 0x3}, 0x94) sendfile(r0, r1, 0x0, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pread64(r0, &(0x7f0000000340)=""/148, 0x94, 0x9) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x130, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x11c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @mcast2, 0x43a6}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @private2, 0x101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @mcast1, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcda}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x20, 0x10, 0x9, 0x7, {{0x7, 0x4, 0x3, 0x6, 0x1c, 0x68, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@ra={0x94, 0x4}, @noop]}}}}}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x5, 0xfffffffe, @vifc_lcl_ifindex=r5, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r6, 0x400, 0x2, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24004041) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r8, &(0x7f0000000cc0)={&(0x7f0000000880)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/147, 0x93}], 0x1, &(0x7f0000000c40)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {&(0x7f00000009c0)=""/61, 0x3d}, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/51, 0x33}, {&(0x7f0000000a40)=""/134, 0x86}, {&(0x7f0000000b00)=""/241, 0xf1}], 0x3, 0x12, 0x400}}], 0x48, 0x20000884}, 0x880) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d80)=@o_path={&(0x7f0000000d00)='./file0\x00', r1, 0x4000, r9}, 0x18) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000dc0)={0x0, 0xfff}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e00)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x400, '\x00', 0x0, r7, 0x5, 0x2, 0x2}, 0x50) ioctl$FITHAW(r7, 0xc0045878) readv(r7, &(0x7f00000020c0)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/30, 0x1e}, {&(0x7f0000001ec0)=""/123, 0x7b}, {&(0x7f0000001f40)=""/159, 0x9f}, {&(0x7f0000002000)=""/129, 0x81}], 0x5) pwrite64(r2, &(0x7f0000002140)="d5c9f6b8f60e3fc0a15fa0600cf520dc147eeb1b9fcad6bfade1730cef90d9b69604da1b813b7bc5f7faca49f8f66714abb74f7425183f9b28d5b0f6e45cbb19c41a8682a45ebc741c5fb5e383d27e265482dc", 0x53, 0x1d8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000021c0)={'wlan0\x00'}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002200)={r7, r8}, 0xc) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f0000002240)={@bcast, @bcast, 0x3, [@bcast, @bcast, @default, @default, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$BTRFS_IOC_SCRUB(r10, 0xc400941b, &(0x7f00000022c0)={0x0, 0x7, 0xe9b6}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000026c0)={r11, "71836c83ed630083e6f9bca5ded8f4da"}) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r12, 0x89f0, &(0x7f0000003740)={'ip6tnl0\x00', &(0x7f00000036c0)={'syztnl1\x00', r5, 0x4, 0xec, 0x48, 0x8, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0xf, 0x2}}) sendmsg$inet(r0, &(0x7f0000003a00)={&(0x7f0000003780)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000003980)=[{&(0x7f00000037c0)="c934102045da88202093f9628a8bec09558710acf516629ef4fdf3399559b9a8b1ea737531bcff", 0x27}, {&(0x7f0000003800)="b14194a61f5d7f960f5e712f9b32e2b3e44428b56dc5862b72f3094436ac532ae7a8b19d4870319c724780570a8b01a9679565eeed1af8b68fb63c2de23ef78ca6a343", 0x43}, {&(0x7f0000003880)="8c5bc1c343749a1d1d53cd6f7f6b0680b8039aaa00b89a8296753a77a1a3359aaeaacb5ca17e2adef54cedb3a1774bd91cc708d5b6fb1390a209a22a2d9d0655f9eba7b9", 0x44}, {&(0x7f0000003900)="caf47a68d56ef6da9e0d8252c0de5e23d37b1ae1659908438bcfc82b1122ec46c0e03cb7a5232e9883f504913f4579a7bcdd28dd088f5031997fd4e14b103a9e43a2833527db410b748c7445e3a20b681829d4461fb34c3b5dc2f109c1172a374339e5ae80e52feaa9", 0x69}], 0x4, &(0x7f00000039c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}, 0x20004004) 495.021267ms ago: executing program 35 (id=696): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x100000001, 0x4) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000280)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1867143b35130c0600000000000000bd7000fbdbdf250800150000000000"], 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x800) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081140000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071106b00000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) socket$inet(0xa, 0x801, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x40000000, @loopback, 0x3}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) 0s ago: executing program 36 (id=702): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}, 0xa}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000140)={0xcb15, {{0x2, 0x4, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gre0\x00'}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{&(0x7f0000000140)=@x25, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000380)=""/136, 0x88}, {&(0x7f00000001c0)=""/80, 0x50}, {&(0x7f0000000440)=""/29, 0x1d}, {&(0x7f0000000900)=""/216, 0xd8}, {&(0x7f0000000a00)=""/147, 0x93}, {&(0x7f0000000480)=""/22, 0x16}, {&(0x7f0000000ac0)=""/67, 0x43}, {&(0x7f0000000c00)=""/144, 0x90}], 0x8, &(0x7f0000000d80)=""/99, 0x63}, 0x3}], 0x1, 0x40000140, &(0x7f0000000e00)={0x77359400}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff9e584eb1aa3d10e3dff9f8e583de3a48e95f3b1ef28da212fb3a0d2e2bba5a83d454726fe5a16e3c020146d24c8d98140213c50401c64c9d2e58c8e5858e", 0x6e}], 0x1}, 0x48000) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r3, 0x4) recvmsg$kcm(r4, &(0x7f00000012c0)={&(0x7f0000000e40)=@hci, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000ec0)=""/70, 0x46}, {&(0x7f0000000f40)=""/186, 0xba}, {&(0x7f0000001000)=""/13, 0x3a}, {&(0x7f0000001040)=""/144, 0x90}, {&(0x7f0000001100)=""/27, 0x1b}, {&(0x7f0000001140)=""/73, 0x49}], 0x6, &(0x7f0000001240)=""/94, 0x5e}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff004) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x4, 0x18}, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000020000000500"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000004c0)='%pB \x00'}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3161fd51, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ldst={0x1, 0x3, 0x2, 0xc, 0xe, 0xc, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xb, 0x7fffffff, 0xff}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r6, r7, r8, r9, r10, 0xffffffffffffffff], &(0x7f0000000600)=[{0x0, 0x1, 0x1, 0x3}, {0x2, 0x1, 0xe}, {0x3, 0x4, 0xb, 0x1}, {0x0, 0x5, 0x6, 0x2}, {0x4, 0x4, 0x4, 0xb}], 0x10, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) kernel console output (not intermixed with test programs): INJECTION: forcing a failure. [ 123.920281][ T6797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.934086][ T6797] CPU: 1 UID: 0 PID: 6797 Comm: syz.4.176 Not tainted syzkaller #0 PREEMPT(full) [ 123.934114][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.934132][ T6797] Call Trace: [ 123.934139][ T6797] [ 123.934147][ T6797] dump_stack_lvl+0x189/0x250 [ 123.934176][ T6797] ? __pfx____ratelimit+0x10/0x10 [ 123.934201][ T6797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.934225][ T6797] ? __pfx__printk+0x10/0x10 [ 123.934244][ T6797] ? __might_fault+0xb0/0x130 [ 123.934280][ T6797] should_fail_ex+0x414/0x560 [ 123.934316][ T6797] _copy_from_user+0x2d/0xb0 [ 123.934344][ T6797] ___sys_recvmsg+0x12e/0x510 [ 123.934374][ T6797] ? __pfx____sys_recvmsg+0x10/0x10 [ 123.934430][ T6797] ? __might_fault+0xb0/0x130 [ 123.934465][ T6797] do_recvmmsg+0x307/0x770 [ 123.934499][ T6797] ? __pfx_do_recvmmsg+0x10/0x10 [ 123.934536][ T6797] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 123.934587][ T6797] __x64_sys_recvmmsg+0x190/0x240 [ 123.934615][ T6797] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 123.934644][ T6797] ? do_syscall_64+0xbe/0xfa0 [ 123.934677][ T6797] do_syscall_64+0xfa/0xfa0 [ 123.934705][ T6797] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.934733][ T6797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.934753][ T6797] ? clear_bhb_loop+0x60/0xb0 [ 123.934779][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.934800][ T6797] RIP: 0033:0x7f73eb18f6c9 [ 123.934820][ T6797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.934837][ T6797] RSP: 002b:00007f73ec0c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 123.934860][ T6797] RAX: ffffffffffffffda RBX: 00007f73eb3e5fa0 RCX: 00007f73eb18f6c9 [ 123.934874][ T6797] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 123.934888][ T6797] RBP: 00007f73ec0c1090 R08: 0000000000000000 R09: 0000000000000000 [ 123.934900][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.934912][ T6797] R13: 00007f73eb3e6038 R14: 00007f73eb3e5fa0 R15: 00007ffc49dfbcb8 [ 123.934947][ T6797] [ 124.441915][ T6810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.178'. [ 125.116750][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 125.201855][ T6835] netlink: 44 bytes leftover after parsing attributes in process `syz.0.187'. [ 125.240387][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 125.465432][ T6841] tipc: Started in network mode [ 125.479938][ T6843] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 125.482146][ T6841] tipc: Node identity 8ee2e2d710f6, cluster identity 4711 [ 125.506739][ T6841] tipc: Enabled bearer , priority 0 [ 125.570254][ T6841] syzkaller0: entered promiscuous mode [ 125.584125][ T6841] syzkaller0: entered allmulticast mode [ 125.810325][ T6850] tipc: Resetting bearer [ 125.880999][ T6861] netlink: 'syz.0.193': attribute type 13 has an invalid length. [ 125.912653][ T6861] netlink: 'syz.0.193': attribute type 17 has an invalid length. [ 125.931411][ T6860] netlink: 'syz.3.194': attribute type 1 has an invalid length. [ 125.960965][ T6860] nbd: error processing sock list [ 126.055876][ T6840] tipc: Resetting bearer [ 126.110051][ T6840] tipc: Disabling bearer [ 126.211207][ T6873] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 126.236022][ T6873] IPv6: Can't replace route, no match found [ 126.283576][ T6861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.296942][ T6861] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.310059][ T6861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.521046][ T6881] bridge1: entered promiscuous mode [ 126.580149][ T6885] FAULT_INJECTION: forcing a failure. [ 126.580149][ T6885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.609102][ T6885] CPU: 0 UID: 0 PID: 6885 Comm: syz.2.201 Not tainted syzkaller #0 PREEMPT(full) [ 126.609129][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 126.609142][ T6885] Call Trace: [ 126.609150][ T6885] [ 126.609160][ T6885] dump_stack_lvl+0x189/0x250 [ 126.609193][ T6885] ? __pfx____ratelimit+0x10/0x10 [ 126.609221][ T6885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.609250][ T6885] ? __pfx__printk+0x10/0x10 [ 126.609273][ T6885] ? __might_fault+0xb0/0x130 [ 126.609316][ T6885] should_fail_ex+0x414/0x560 [ 126.609352][ T6885] _copy_from_user+0x2d/0xb0 [ 126.609379][ T6885] ___sys_recvmsg+0x12e/0x510 [ 126.609409][ T6885] ? __pfx____sys_recvmsg+0x10/0x10 [ 126.609463][ T6885] ? __might_fault+0xb0/0x130 [ 126.609496][ T6885] do_recvmmsg+0x307/0x770 [ 126.609528][ T6885] ? __pfx_do_recvmmsg+0x10/0x10 [ 126.609564][ T6885] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 126.609623][ T6885] __x64_sys_recvmmsg+0x190/0x240 [ 126.609652][ T6885] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 126.609679][ T6885] ? do_syscall_64+0xbe/0xfa0 [ 126.609711][ T6885] do_syscall_64+0xfa/0xfa0 [ 126.609739][ T6885] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.609767][ T6885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.609788][ T6885] ? clear_bhb_loop+0x60/0xb0 [ 126.609814][ T6885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.609834][ T6885] RIP: 0033:0x7f145598f6c9 [ 126.609854][ T6885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.609872][ T6885] RSP: 002b:00007f145675f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 126.609895][ T6885] RAX: ffffffffffffffda RBX: 00007f1455be5fa0 RCX: 00007f145598f6c9 [ 126.609910][ T6885] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 126.609924][ T6885] RBP: 00007f145675f090 R08: 0000000000000000 R09: 0000000000000000 [ 126.609937][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.609949][ T6885] R13: 00007f1455be6038 R14: 00007f1455be5fa0 R15: 00007fffe72ac578 [ 126.609984][ T6885] [ 127.474756][ T6886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.200'. [ 127.506985][ T6886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.200'. [ 127.635162][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.211'. [ 127.677678][ T6919] netlink: 36 bytes leftover after parsing attributes in process `syz.2.211'. [ 127.772242][ T6923] netlink: 32 bytes leftover after parsing attributes in process `syz.3.212'. [ 127.805792][ T6926] FAULT_INJECTION: forcing a failure. [ 127.805792][ T6926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.819150][ T6926] CPU: 0 UID: 0 PID: 6926 Comm: syz.4.213 Not tainted syzkaller #0 PREEMPT(full) [ 127.819176][ T6926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.819188][ T6926] Call Trace: [ 127.819196][ T6926] [ 127.819205][ T6926] dump_stack_lvl+0x189/0x250 [ 127.819240][ T6926] ? __pfx____ratelimit+0x10/0x10 [ 127.819266][ T6926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.819295][ T6926] ? __pfx__printk+0x10/0x10 [ 127.819318][ T6926] ? __might_fault+0xb0/0x130 [ 127.819360][ T6926] should_fail_ex+0x414/0x560 [ 127.819396][ T6926] _copy_from_user+0x2d/0xb0 [ 127.819422][ T6926] ___sys_recvmsg+0x12e/0x510 [ 127.819452][ T6926] ? __pfx____sys_recvmsg+0x10/0x10 [ 127.819514][ T6926] ? __might_fault+0xb0/0x130 [ 127.819545][ T6926] do_recvmmsg+0x307/0x770 [ 127.819576][ T6926] ? __pfx_do_recvmmsg+0x10/0x10 [ 127.819612][ T6926] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 127.819663][ T6926] __x64_sys_recvmmsg+0x190/0x240 [ 127.819692][ T6926] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 127.819722][ T6926] ? do_syscall_64+0xbe/0xfa0 [ 127.819756][ T6926] do_syscall_64+0xfa/0xfa0 [ 127.819785][ T6926] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.819814][ T6926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.819835][ T6926] ? clear_bhb_loop+0x60/0xb0 [ 127.819862][ T6926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.819883][ T6926] RIP: 0033:0x7f73eb18f6c9 [ 127.819901][ T6926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.819918][ T6926] RSP: 002b:00007f73ec0c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 127.819940][ T6926] RAX: ffffffffffffffda RBX: 00007f73eb3e5fa0 RCX: 00007f73eb18f6c9 [ 127.819956][ T6926] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 127.819969][ T6926] RBP: 00007f73ec0c1090 R08: 0000000000000000 R09: 0000000000000000 [ 127.819981][ T6926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.819992][ T6926] R13: 00007f73eb3e6038 R14: 00007f73eb3e5fa0 R15: 00007ffc49dfbcb8 [ 127.820026][ T6926] [ 128.669721][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 128.689975][ T6942] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 128.831026][ T6928] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.927940][ T6928] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.978546][ T6951] syz.1.223 (6951) used greatest stack depth: 17832 bytes left [ 129.019363][ T6956] FAULT_INJECTION: forcing a failure. [ 129.019363][ T6956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.042638][ T6956] CPU: 1 UID: 0 PID: 6956 Comm: syz.0.224 Not tainted syzkaller #0 PREEMPT(full) [ 129.042667][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.042680][ T6956] Call Trace: [ 129.042688][ T6956] [ 129.042698][ T6956] dump_stack_lvl+0x189/0x250 [ 129.042731][ T6956] ? __pfx____ratelimit+0x10/0x10 [ 129.042759][ T6956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.042788][ T6956] ? __pfx__printk+0x10/0x10 [ 129.042810][ T6956] ? __might_fault+0xb0/0x130 [ 129.042853][ T6956] should_fail_ex+0x414/0x560 [ 129.042891][ T6956] _copy_from_user+0x2d/0xb0 [ 129.042919][ T6956] ___sys_recvmsg+0x12e/0x510 [ 129.042950][ T6956] ? __pfx____sys_recvmsg+0x10/0x10 [ 129.043008][ T6956] ? __might_fault+0xb0/0x130 [ 129.043042][ T6956] do_recvmmsg+0x307/0x770 [ 129.043074][ T6956] ? __pfx_do_recvmmsg+0x10/0x10 [ 129.043112][ T6956] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 129.043162][ T6956] __x64_sys_recvmmsg+0x190/0x240 [ 129.043190][ T6956] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 129.043219][ T6956] ? do_syscall_64+0xbe/0xfa0 [ 129.043253][ T6956] do_syscall_64+0xfa/0xfa0 [ 129.043280][ T6956] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.043309][ T6956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.043330][ T6956] ? clear_bhb_loop+0x60/0xb0 [ 129.043356][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.043377][ T6956] RIP: 0033:0x7f313358f6c9 [ 129.043396][ T6956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.043414][ T6956] RSP: 002b:00007f313442a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 129.043437][ T6956] RAX: ffffffffffffffda RBX: 00007f31337e5fa0 RCX: 00007f313358f6c9 [ 129.043452][ T6956] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 129.043465][ T6956] RBP: 00007f313442a090 R08: 0000000000000000 R09: 0000000000000000 [ 129.043478][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.043490][ T6956] R13: 00007f31337e6038 R14: 00007f31337e5fa0 R15: 00007fff4ad9e528 [ 129.043524][ T6956] [ 129.338505][ T6928] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.539446][ T6928] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.998296][ T6979] tipc: Enabled bearer , priority 0 [ 130.012462][ T6973] syzkaller0: entered promiscuous mode [ 130.018811][ T6973] syzkaller0: entered allmulticast mode [ 130.119113][ T61] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.128321][ T6973] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 130.193091][ T6973] tipc: Resetting bearer [ 130.201053][ T6971] tipc: Resetting bearer [ 130.217935][ T6971] tipc: Disabling bearer [ 130.238132][ T61] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.290581][ T2129] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.372107][ T2129] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.483542][ T6996] macvtap1: entered promiscuous mode [ 130.530282][ T6996] veth1_to_hsr: entered promiscuous mode [ 130.544912][ T6996] macvtap1: entered allmulticast mode [ 130.568489][ T6996] veth1_to_hsr: entered allmulticast mode [ 130.629633][ T7000] syzkaller0: entered promiscuous mode [ 130.635536][ T7000] syzkaller0: entered allmulticast mode [ 130.741519][ T7006] FAULT_INJECTION: forcing a failure. [ 130.741519][ T7006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.763373][ T7006] CPU: 0 UID: 0 PID: 7006 Comm: syz.4.237 Not tainted syzkaller #0 PREEMPT(full) [ 130.763401][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 130.763414][ T7006] Call Trace: [ 130.763422][ T7006] [ 130.763431][ T7006] dump_stack_lvl+0x189/0x250 [ 130.763466][ T7006] ? __pfx____ratelimit+0x10/0x10 [ 130.763494][ T7006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.763524][ T7006] ? __pfx__printk+0x10/0x10 [ 130.763546][ T7006] ? __might_fault+0xb0/0x130 [ 130.763588][ T7006] should_fail_ex+0x414/0x560 [ 130.763626][ T7006] _copy_from_user+0x2d/0xb0 [ 130.763655][ T7006] ___sys_recvmsg+0x12e/0x510 [ 130.763686][ T7006] ? __pfx____sys_recvmsg+0x10/0x10 [ 130.763744][ T7006] ? __might_fault+0xb0/0x130 [ 130.763777][ T7006] do_recvmmsg+0x307/0x770 [ 130.763810][ T7006] ? __pfx_do_recvmmsg+0x10/0x10 [ 130.763845][ T7006] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 130.763897][ T7006] __x64_sys_recvmmsg+0x190/0x240 [ 130.763924][ T7006] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 130.763954][ T7006] ? do_syscall_64+0xbe/0xfa0 [ 130.763999][ T7006] do_syscall_64+0xfa/0xfa0 [ 130.764024][ T7006] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.764067][ T7006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.764088][ T7006] ? clear_bhb_loop+0x60/0xb0 [ 130.764113][ T7006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.764133][ T7006] RIP: 0033:0x7f73eb18f6c9 [ 130.764151][ T7006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.764168][ T7006] RSP: 002b:00007f73ec0c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 130.764191][ T7006] RAX: ffffffffffffffda RBX: 00007f73eb3e5fa0 RCX: 00007f73eb18f6c9 [ 130.764213][ T7006] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 130.764226][ T7006] RBP: 00007f73ec0c1090 R08: 0000000000000000 R09: 0000000000000000 [ 130.764238][ T7006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.764250][ T7006] R13: 00007f73eb3e6038 R14: 00007f73eb3e5fa0 R15: 00007ffc49dfbcb8 [ 130.764282][ T7006] [ 131.038507][ T7012] __nla_validate_parse: 3 callbacks suppressed [ 131.038528][ T7012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.239'. [ 131.342473][ T7025] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 131.547166][ T7037] netlink: 64 bytes leftover after parsing attributes in process `syz.3.245'. [ 131.556426][ T7037] nbd: socks must be embedded in a SOCK_ITEM attr [ 131.899484][ T7051] FAULT_INJECTION: forcing a failure. [ 131.899484][ T7051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.920915][ T7051] CPU: 1 UID: 0 PID: 7051 Comm: syz.3.250 Not tainted syzkaller #0 PREEMPT(full) [ 131.920943][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 131.920955][ T7051] Call Trace: [ 131.920963][ T7051] [ 131.920971][ T7051] dump_stack_lvl+0x189/0x250 [ 131.921005][ T7051] ? __pfx____ratelimit+0x10/0x10 [ 131.921034][ T7051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.921063][ T7051] ? __pfx__printk+0x10/0x10 [ 131.921084][ T7051] ? __might_fault+0xb0/0x130 [ 131.921138][ T7051] should_fail_ex+0x414/0x560 [ 131.921174][ T7051] _copy_from_user+0x2d/0xb0 [ 131.921200][ T7051] ___sys_recvmsg+0x12e/0x510 [ 131.921227][ T7051] ? __pfx____sys_recvmsg+0x10/0x10 [ 131.921284][ T7051] ? __might_fault+0xb0/0x130 [ 131.921317][ T7051] do_recvmmsg+0x307/0x770 [ 131.921351][ T7051] ? __pfx_do_recvmmsg+0x10/0x10 [ 131.921388][ T7051] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.921437][ T7051] __x64_sys_recvmmsg+0x190/0x240 [ 131.921465][ T7051] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 131.921494][ T7051] ? do_syscall_64+0xbe/0xfa0 [ 131.921527][ T7051] do_syscall_64+0xfa/0xfa0 [ 131.921554][ T7051] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.921582][ T7051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.921603][ T7051] ? clear_bhb_loop+0x60/0xb0 [ 131.921629][ T7051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.921649][ T7051] RIP: 0033:0x7f5d0278f6c9 [ 131.921668][ T7051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.921685][ T7051] RSP: 002b:00007f5d035a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 131.921708][ T7051] RAX: ffffffffffffffda RBX: 00007f5d029e5fa0 RCX: 00007f5d0278f6c9 [ 131.921723][ T7051] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 131.921736][ T7051] RBP: 00007f5d035a1090 R08: 0000000000000000 R09: 0000000000000000 [ 131.921749][ T7051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.921761][ T7051] R13: 00007f5d029e6038 R14: 00007f5d029e5fa0 R15: 00007ffe547b14b8 [ 131.921796][ T7051] [ 132.623007][ T7075] veth0_to_bridge: entered promiscuous mode [ 132.644437][ T7074] veth0_to_bridge: left promiscuous mode [ 132.667255][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'. [ 132.788219][ T7081] bridge_slave_0: invalid flags given to default FDB implementation [ 132.947263][ T7088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.261'. [ 133.266950][ T7097] syz_tun: entered allmulticast mode [ 133.293076][ T7096] syz_tun: left allmulticast mode [ 133.431773][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 133.450399][ T7103] ±ÿ: renamed from team_slave_1 (while UP) [ 133.462308][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 133.466598][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.266'. [ 133.472187][ T7103] netlink: 'syz.1.267': attribute type 5 has an invalid length. [ 133.490936][ T7103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.267'. [ 133.517807][ T7103] geneve2: entered promiscuous mode [ 133.524351][ T7103] geneve2: entered allmulticast mode [ 133.545265][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 133.585349][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 133.609063][ T61] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 133.630541][ T61] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 133.642071][ T7105] netlink: 'syz.3.268': attribute type 3 has an invalid length. [ 134.161724][ T7128] netlink: 68 bytes leftover after parsing attributes in process `syz.0.276'. [ 134.231573][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'. [ 134.363100][ T7140] netlink: 'syz.4.278': attribute type 2 has an invalid length. [ 134.399719][ T7143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.475785][ T7148] netlink: 'syz.0.280': attribute type 39 has an invalid length. [ 134.755752][ T7159] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 134.809927][ T7159] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 134.856705][ T7159] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 134.885955][ T7159] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 134.909853][ T7159] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 134.937886][ T7159] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 134.947191][ T7159] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 134.957448][ T7159] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 134.969797][ T7159] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 135.777274][ T7190] tipc: Enabled bearer , priority 0 [ 135.785929][ T7190] syzkaller0: entered promiscuous mode [ 135.791451][ T7190] syzkaller0: entered allmulticast mode [ 135.824325][ T7190] tipc: Resetting bearer [ 135.838192][ T7189] tipc: Resetting bearer [ 135.947532][ T7189] tipc: Disabling bearer [ 135.947889][ T7200] FAULT_INJECTION: forcing a failure. [ 135.947889][ T7200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.992651][ T7200] CPU: 1 UID: 0 PID: 7200 Comm: syz.3.299 Not tainted syzkaller #0 PREEMPT(full) [ 135.992679][ T7200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 135.992707][ T7200] Call Trace: [ 135.992716][ T7200] [ 135.992725][ T7200] dump_stack_lvl+0x189/0x250 [ 135.992760][ T7200] ? __pfx____ratelimit+0x10/0x10 [ 135.992787][ T7200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.992816][ T7200] ? __pfx__printk+0x10/0x10 [ 135.992838][ T7200] ? __might_fault+0xb0/0x130 [ 135.992881][ T7200] should_fail_ex+0x414/0x560 [ 135.992918][ T7200] _copy_from_user+0x2d/0xb0 [ 135.992946][ T7200] ___sys_recvmsg+0x12e/0x510 [ 135.992977][ T7200] ? __pfx____sys_recvmsg+0x10/0x10 [ 135.993031][ T7200] ? __might_fault+0xb0/0x130 [ 135.993065][ T7200] do_recvmmsg+0x307/0x770 [ 135.993097][ T7200] ? __pfx_do_recvmmsg+0x10/0x10 [ 135.993134][ T7200] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 135.993186][ T7200] __x64_sys_recvmmsg+0x190/0x240 [ 135.993213][ T7200] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 135.993242][ T7200] ? do_syscall_64+0xbe/0xfa0 [ 135.993275][ T7200] do_syscall_64+0xfa/0xfa0 [ 135.993302][ T7200] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.993329][ T7200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.993350][ T7200] ? clear_bhb_loop+0x60/0xb0 [ 135.993376][ T7200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.993397][ T7200] RIP: 0033:0x7f5d0278f6c9 [ 135.993415][ T7200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.993433][ T7200] RSP: 002b:00007f5d035a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 135.993455][ T7200] RAX: ffffffffffffffda RBX: 00007f5d029e5fa0 RCX: 00007f5d0278f6c9 [ 135.993470][ T7200] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 135.993483][ T7200] RBP: 00007f5d035a1090 R08: 0000000000000000 R09: 0000000000000000 [ 135.993496][ T7200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.993507][ T7200] R13: 00007f5d029e6038 R14: 00007f5d029e5fa0 R15: 00007ffe547b14b8 [ 135.993542][ T7200] [ 136.304941][ T7207] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 136.329645][ T7204] __nla_validate_parse: 4 callbacks suppressed [ 136.329676][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 136.593046][ T7217] ieee802154 phy0 wpan0: encryption failed: -90 [ 136.595771][ T7215] bond2: Removing last ns target with arp_interval on [ 136.922332][ T7223] netlink: 'syz.1.304': attribute type 10 has an invalid length. [ 136.965535][ T7241] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.310'. [ 137.262222][ T7251] FAULT_INJECTION: forcing a failure. [ 137.262222][ T7251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.303538][ T7251] CPU: 0 UID: 0 PID: 7251 Comm: syz.0.313 Not tainted syzkaller #0 PREEMPT(full) [ 137.303567][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.303579][ T7251] Call Trace: [ 137.303587][ T7251] [ 137.303596][ T7251] dump_stack_lvl+0x189/0x250 [ 137.303650][ T7251] ? __pfx____ratelimit+0x10/0x10 [ 137.303679][ T7251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.303709][ T7251] ? __pfx__printk+0x10/0x10 [ 137.303731][ T7251] ? __might_fault+0xb0/0x130 [ 137.303774][ T7251] should_fail_ex+0x414/0x560 [ 137.303812][ T7251] _copy_from_user+0x2d/0xb0 [ 137.303840][ T7251] ___sys_recvmsg+0x12e/0x510 [ 137.303878][ T7251] ? __pfx____sys_recvmsg+0x10/0x10 [ 137.303937][ T7251] ? __might_fault+0xb0/0x130 [ 137.303971][ T7251] do_recvmmsg+0x307/0x770 [ 137.304005][ T7251] ? __pfx_do_recvmmsg+0x10/0x10 [ 137.304043][ T7251] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.304099][ T7251] __x64_sys_recvmmsg+0x190/0x240 [ 137.304128][ T7251] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 137.304158][ T7251] ? do_syscall_64+0xbe/0xfa0 [ 137.304198][ T7251] do_syscall_64+0xfa/0xfa0 [ 137.304226][ T7251] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.304254][ T7251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.304276][ T7251] ? clear_bhb_loop+0x60/0xb0 [ 137.304302][ T7251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.304323][ T7251] RIP: 0033:0x7f313358f6c9 [ 137.304342][ T7251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.304360][ T7251] RSP: 002b:00007f313442a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 137.304383][ T7251] RAX: ffffffffffffffda RBX: 00007f31337e5fa0 RCX: 00007f313358f6c9 [ 137.304398][ T7251] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 137.304411][ T7251] RBP: 00007f313442a090 R08: 0000000000000000 R09: 0000000000000000 [ 137.304424][ T7251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.304435][ T7251] R13: 00007f31337e6038 R14: 00007f31337e5fa0 R15: 00007fff4ad9e528 [ 137.304470][ T7251] [ 137.670175][ T7259] netlink: 'syz.1.315': attribute type 1 has an invalid length. [ 137.818747][ T7259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.864810][ T7262] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.872201][ T7262] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 137.910347][ T7262] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 138.208634][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.215194][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.865931][ T7259] veth7: entered promiscuous mode [ 138.875990][ T7259] bond2: (slave veth7): Enslaving as an active interface with a down link [ 139.220119][ T7301] FAULT_INJECTION: forcing a failure. [ 139.220119][ T7301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.235910][ T7301] CPU: 0 UID: 0 PID: 7301 Comm: syz.4.326 Not tainted syzkaller #0 PREEMPT(full) [ 139.235938][ T7301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 139.235951][ T7301] Call Trace: [ 139.235959][ T7301] [ 139.235968][ T7301] dump_stack_lvl+0x189/0x250 [ 139.236003][ T7301] ? __pfx____ratelimit+0x10/0x10 [ 139.236031][ T7301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.236059][ T7301] ? __pfx__printk+0x10/0x10 [ 139.236081][ T7301] ? __might_fault+0xb0/0x130 [ 139.236123][ T7301] should_fail_ex+0x414/0x560 [ 139.236159][ T7301] _copy_from_user+0x2d/0xb0 [ 139.236187][ T7301] ___sys_recvmsg+0x12e/0x510 [ 139.236218][ T7301] ? __pfx____sys_recvmsg+0x10/0x10 [ 139.236277][ T7301] ? __might_fault+0xb0/0x130 [ 139.236311][ T7301] do_recvmmsg+0x307/0x770 [ 139.236345][ T7301] ? __pfx_do_recvmmsg+0x10/0x10 [ 139.236383][ T7301] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 139.236445][ T7301] __x64_sys_recvmmsg+0x190/0x240 [ 139.236473][ T7301] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 139.236503][ T7301] ? do_syscall_64+0xbe/0xfa0 [ 139.236536][ T7301] do_syscall_64+0xfa/0xfa0 [ 139.236563][ T7301] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.236591][ T7301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.236612][ T7301] ? clear_bhb_loop+0x60/0xb0 [ 139.236638][ T7301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.236658][ T7301] RIP: 0033:0x7f73eb18f6c9 [ 139.236677][ T7301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.236695][ T7301] RSP: 002b:00007f73ec0c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 139.236718][ T7301] RAX: ffffffffffffffda RBX: 00007f73eb3e5fa0 RCX: 00007f73eb18f6c9 [ 139.236733][ T7301] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 139.236746][ T7301] RBP: 00007f73ec0c1090 R08: 0000000000000000 R09: 0000000000000000 [ 139.236759][ T7301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.236771][ T7301] R13: 00007f73eb3e6038 R14: 00007f73eb3e5fa0 R15: 00007ffc49dfbcb8 [ 139.236807][ T7301] [ 139.464335][ T7303] netlink: 'syz.0.327': attribute type 9 has an invalid length. [ 139.950028][ T7324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.972306][ T7321] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.987416][ T7325] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.043811][ T7327] netlink: 48 bytes leftover after parsing attributes in process `syz.4.335'. [ 140.183670][ T7330] netlink: 46 bytes leftover after parsing attributes in process `syz.2.336'. [ 140.311617][ T7334] FAULT_INJECTION: forcing a failure. [ 140.311617][ T7334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.344643][ T7334] CPU: 1 UID: 0 PID: 7334 Comm: syz.3.338 Not tainted syzkaller #0 PREEMPT(full) [ 140.344680][ T7334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 140.344693][ T7334] Call Trace: [ 140.344701][ T7334] [ 140.344710][ T7334] dump_stack_lvl+0x189/0x250 [ 140.344744][ T7334] ? __pfx____ratelimit+0x10/0x10 [ 140.344772][ T7334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.344800][ T7334] ? __pfx__printk+0x10/0x10 [ 140.344822][ T7334] ? __might_fault+0xb0/0x130 [ 140.344863][ T7334] should_fail_ex+0x414/0x560 [ 140.344900][ T7334] _copy_from_user+0x2d/0xb0 [ 140.344929][ T7334] ___sys_recvmsg+0x12e/0x510 [ 140.344959][ T7334] ? __pfx____sys_recvmsg+0x10/0x10 [ 140.345016][ T7334] ? __might_fault+0xb0/0x130 [ 140.345050][ T7334] do_recvmmsg+0x307/0x770 [ 140.345084][ T7334] ? __pfx_do_recvmmsg+0x10/0x10 [ 140.345121][ T7334] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 140.345172][ T7334] __x64_sys_recvmmsg+0x190/0x240 [ 140.345200][ T7334] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 140.345229][ T7334] ? do_syscall_64+0xbe/0xfa0 [ 140.345260][ T7334] do_syscall_64+0xfa/0xfa0 [ 140.345285][ T7334] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.345320][ T7334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.345341][ T7334] ? clear_bhb_loop+0x60/0xb0 [ 140.345366][ T7334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.345386][ T7334] RIP: 0033:0x7f5d0278f6c9 [ 140.345404][ T7334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.345421][ T7334] RSP: 002b:00007f5d035a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 140.345443][ T7334] RAX: ffffffffffffffda RBX: 00007f5d029e5fa0 RCX: 00007f5d0278f6c9 [ 140.345457][ T7334] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 140.345469][ T7334] RBP: 00007f5d035a1090 R08: 0000000000000000 R09: 0000000000000000 [ 140.345481][ T7334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.345492][ T7334] R13: 00007f5d029e6038 R14: 00007f5d029e5fa0 R15: 00007ffe547b14b8 [ 140.345526][ T7334] [ 140.816256][ T7344] netlink: 112 bytes leftover after parsing attributes in process `syz.2.339'. [ 140.843793][ T7345] syzkaller0: entered promiscuous mode [ 140.854341][ T7345] syzkaller0: entered allmulticast mode [ 140.868394][ T7336] netlink: 132 bytes leftover after parsing attributes in process `syz.2.339'. [ 141.325478][ T7371] netlink: 100 bytes leftover after parsing attributes in process `syz.1.348'. [ 141.381783][ T7371] veth9: entered promiscuous mode [ 141.458075][ T7375] FAULT_INJECTION: forcing a failure. [ 141.458075][ T7375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.496220][ T7375] CPU: 1 UID: 0 PID: 7375 Comm: syz.4.351 Not tainted syzkaller #0 PREEMPT(full) [ 141.496248][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 141.496261][ T7375] Call Trace: [ 141.496269][ T7375] [ 141.496277][ T7375] dump_stack_lvl+0x189/0x250 [ 141.496310][ T7375] ? __pfx____ratelimit+0x10/0x10 [ 141.496337][ T7375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.496365][ T7375] ? __pfx__printk+0x10/0x10 [ 141.496387][ T7375] ? __might_fault+0xb0/0x130 [ 141.496428][ T7375] should_fail_ex+0x414/0x560 [ 141.496465][ T7375] _copy_from_user+0x2d/0xb0 [ 141.496499][ T7375] ___sys_recvmsg+0x12e/0x510 [ 141.496529][ T7375] ? __pfx____sys_recvmsg+0x10/0x10 [ 141.496586][ T7375] ? __might_fault+0xb0/0x130 [ 141.496619][ T7375] do_recvmmsg+0x307/0x770 [ 141.496652][ T7375] ? __pfx_do_recvmmsg+0x10/0x10 [ 141.496689][ T7375] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 141.496738][ T7375] __x64_sys_recvmmsg+0x190/0x240 [ 141.496766][ T7375] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 141.496794][ T7375] ? do_syscall_64+0xbe/0xfa0 [ 141.496826][ T7375] do_syscall_64+0xfa/0xfa0 [ 141.496853][ T7375] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.496880][ T7375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.496901][ T7375] ? clear_bhb_loop+0x60/0xb0 [ 141.496926][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.496945][ T7375] RIP: 0033:0x7f73eb18f6c9 [ 141.496964][ T7375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.496981][ T7375] RSP: 002b:00007f73ec0c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 141.497003][ T7375] RAX: ffffffffffffffda RBX: 00007f73eb3e5fa0 RCX: 00007f73eb18f6c9 [ 141.497019][ T7375] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 141.497031][ T7375] RBP: 00007f73ec0c1090 R08: 0000000000000000 R09: 0000000000000000 [ 141.497044][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.497056][ T7375] R13: 00007f73eb3e6038 R14: 00007f73eb3e5fa0 R15: 00007ffc49dfbcb8 [ 141.497090][ T7375] [ 142.152680][ T57] block nbd0: Possible stuck request ffff888024af5080: control (read@0,1024B). Runtime 30 seconds [ 142.164404][ T57] block nbd0: Possible stuck request ffff888024af5240: control (read@1024,1024B). Runtime 30 seconds [ 142.176166][ T57] block nbd0: Possible stuck request ffff888024af5400: control (read@2048,1024B). Runtime 30 seconds [ 142.190212][ T57] block nbd0: Possible stuck request ffff888024af55c0: control (read@3072,1024B). Runtime 30 seconds [ 142.363366][ T7385] netlink: 60 bytes leftover after parsing attributes in process `syz.2.354'. [ 142.876354][ T7414] netlink: 27 bytes leftover after parsing attributes in process `syz.3.361'. [ 143.082048][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'. [ 143.185749][ T7428] netlink: 'syz.2.366': attribute type 39 has an invalid length. [ 143.310026][ T7434] netlink: 228 bytes leftover after parsing attributes in process `syz.4.367'. [ 143.331134][ T7434] IPv6: Can't replace route, no match found [ 143.399446][ T7436] syzkaller1: entered promiscuous mode [ 143.432439][ T7436] syzkaller1: entered allmulticast mode [ 143.750626][ T5840] Bluetooth: hci4: link tx timeout [ 143.757275][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.302762][ T5840] Bluetooth: hci4: link tx timeout [ 144.307971][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.323935][ T5840] Bluetooth: hci4: link tx timeout [ 144.329125][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.352317][ T7482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.378'. [ 144.502202][ T7480] netlink: 240 bytes leftover after parsing attributes in process `syz.1.373'. [ 144.563023][ T5840] Bluetooth: hci4: link tx timeout [ 144.568389][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.583661][ T7493] tc_dump_action: action bad kind [ 144.706000][ T7494] netlink: 'syz.3.382': attribute type 10 has an invalid length. [ 144.838374][ T7494] bond0: (slave wlan1): Opening slave failed [ 144.882276][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 145.223718][ T5840] Bluetooth: hci4: link tx timeout [ 145.229036][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 145.361822][ T7526] netlink: 92 bytes leftover after parsing attributes in process `syz.1.387'. [ 145.627252][ T7534] netlink: 176 bytes leftover after parsing attributes in process `syz.4.388'. [ 145.771684][ T7541] netlink: 'syz.1.389': attribute type 13 has an invalid length. [ 145.803622][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 145.856418][ T7541] netlink: 'syz.1.389': attribute type 17 has an invalid length. [ 146.036108][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 146.233471][ T7541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.253490][ T7545] hsr0: mtu greater than device maximum [ 146.683637][ T7569] netlink: 'syz.0.397': attribute type 7 has an invalid length. [ 147.537001][ T7613] __nla_validate_parse: 4 callbacks suppressed [ 147.537023][ T7613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.408'. [ 147.776255][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'. [ 147.849248][ T7626] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 147.870223][ T7626] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 148.833478][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 148.859195][ T7651] netlink: 19 bytes leftover after parsing attributes in process `syz.3.419'. [ 149.412350][ T5839] Bluetooth: hci0: command tx timeout [ 149.583523][ T7672] FAULT_INJECTION: forcing a failure. [ 149.583523][ T7672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.657579][ T7672] CPU: 1 UID: 0 PID: 7672 Comm: syz.3.422 Not tainted syzkaller #0 PREEMPT(full) [ 149.657609][ T7672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 149.657622][ T7672] Call Trace: [ 149.657630][ T7672] [ 149.657640][ T7672] dump_stack_lvl+0x189/0x250 [ 149.657675][ T7672] ? __pfx____ratelimit+0x10/0x10 [ 149.657703][ T7672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.657742][ T7672] ? __pfx__printk+0x10/0x10 [ 149.657765][ T7672] ? __might_fault+0xb0/0x130 [ 149.657808][ T7672] should_fail_ex+0x414/0x560 [ 149.657866][ T7672] _copy_from_user+0x2d/0xb0 [ 149.657894][ T7672] ___sys_recvmsg+0x12e/0x510 [ 149.657926][ T7672] ? __pfx____sys_recvmsg+0x10/0x10 [ 149.657985][ T7672] ? __might_fault+0xb0/0x130 [ 149.658019][ T7672] do_recvmmsg+0x307/0x770 [ 149.658053][ T7672] ? __pfx_do_recvmmsg+0x10/0x10 [ 149.658091][ T7672] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 149.658142][ T7672] __x64_sys_recvmmsg+0x190/0x240 [ 149.658171][ T7672] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 149.658200][ T7672] ? do_syscall_64+0xbe/0xfa0 [ 149.658233][ T7672] do_syscall_64+0xfa/0xfa0 [ 149.658261][ T7672] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.658289][ T7672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.658310][ T7672] ? clear_bhb_loop+0x60/0xb0 [ 149.658335][ T7672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.658356][ T7672] RIP: 0033:0x7f5d0278f6c9 [ 149.658374][ T7672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.658392][ T7672] RSP: 002b:00007f5d035a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 149.658415][ T7672] RAX: ffffffffffffffda RBX: 00007f5d029e5fa0 RCX: 00007f5d0278f6c9 [ 149.658431][ T7672] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 149.658444][ T7672] RBP: 00007f5d035a1090 R08: 0000000000000000 R09: 0000000000000000 [ 149.658456][ T7672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.658468][ T7672] R13: 00007f5d029e6038 R14: 00007f5d029e5fa0 R15: 00007ffe547b14b8 [ 149.658504][ T7672] [ 150.201299][ T7684] netlink: 'syz.0.425': attribute type 39 has an invalid length. [ 150.268342][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'. [ 150.291207][ T7686] netlink: 52 bytes leftover after parsing attributes in process `syz.3.427'. [ 150.655591][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 150.668558][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 150.994844][ T7711] syz_tun: entered promiscuous mode [ 150.994881][ T7713] FAULT_INJECTION: forcing a failure. [ 150.994881][ T7713] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 151.047993][ T7713] CPU: 0 UID: 0 PID: 7713 Comm: syz.2.436 Not tainted syzkaller #0 PREEMPT(full) [ 151.048022][ T7713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.048034][ T7713] Call Trace: [ 151.048042][ T7713] [ 151.048050][ T7713] dump_stack_lvl+0x189/0x250 [ 151.048084][ T7713] ? __pfx____ratelimit+0x10/0x10 [ 151.048111][ T7713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.048139][ T7713] ? __pfx__printk+0x10/0x10 [ 151.048163][ T7713] ? fs_reclaim_acquire+0x7d/0x100 [ 151.048204][ T7713] should_fail_ex+0x414/0x560 [ 151.048241][ T7713] prepare_alloc_pages+0x213/0x610 [ 151.048268][ T7713] __alloc_frozen_pages_noprof+0x123/0x370 [ 151.048303][ T7713] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 151.048335][ T7713] ? policy_nodemask+0x27c/0x720 [ 151.048361][ T7713] alloc_pages_mpol+0x232/0x4a0 [ 151.048388][ T7713] vma_alloc_folio_noprof+0xe4/0x200 [ 151.048413][ T7713] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 151.048448][ T7713] folio_prealloc+0x30/0x180 [ 151.048481][ T7713] do_wp_page+0x1231/0x5800 [ 151.048533][ T7713] ? __pfx_do_wp_page+0x10/0x10 [ 151.048559][ T7713] ? do_raw_spin_lock+0x121/0x290 [ 151.048592][ T7713] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 151.048634][ T7713] __handle_mm_fault+0x1033/0x5400 [ 151.048681][ T7713] ? __pfx___handle_mm_fault+0x10/0x10 [ 151.048733][ T7713] ? find_vma+0xe7/0x160 [ 151.048760][ T7713] ? __pfx_find_vma+0x10/0x10 [ 151.048789][ T7713] handle_mm_fault+0x40a/0x8e0 [ 151.048828][ T7713] do_user_addr_fault+0x764/0x1380 [ 151.048865][ T7713] exc_page_fault+0x82/0x100 [ 151.048895][ T7713] asm_exc_page_fault+0x26/0x30 [ 151.048914][ T7713] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 151.048942][ T7713] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 07 68 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 151.048958][ T7713] RSP: 0018:ffffc90003e0f8b8 EFLAGS: 00050246 [ 151.048976][ T7713] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000007030 [ 151.048989][ T7713] RDX: ffff88802fb4dac0 RSI: 0000000000000000 RDI: 00000000ffffffff [ 151.049003][ T7713] RBP: ffffc90003e0fa30 R08: ffffffff8f7cd777 R09: 1ffffffff1ef9aee [ 151.049018][ T7713] R10: dffffc0000000000 R11: fffffbfff1ef9aef R12: 0000000000000000 [ 151.049032][ T7713] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000200000007000 [ 151.049065][ T7713] ____sys_recvmsg+0x2ab/0x460 [ 151.049098][ T7713] ? __pfx_____sys_recvmsg+0x10/0x10 [ 151.049139][ T7713] ? import_iovec+0x74/0xa0 [ 151.049169][ T7713] ___sys_recvmsg+0x1b5/0x510 [ 151.049198][ T7713] ? __pfx____sys_recvmsg+0x10/0x10 [ 151.049256][ T7713] ? __might_fault+0xb0/0x130 [ 151.049296][ T7713] do_recvmmsg+0x307/0x770 [ 151.049331][ T7713] ? __pfx_do_recvmmsg+0x10/0x10 [ 151.049369][ T7713] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.049419][ T7713] __x64_sys_recvmmsg+0x190/0x240 [ 151.049446][ T7713] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 151.049475][ T7713] ? do_syscall_64+0xbe/0xfa0 [ 151.049506][ T7713] do_syscall_64+0xfa/0xfa0 [ 151.049532][ T7713] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.049561][ T7713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.049581][ T7713] ? clear_bhb_loop+0x60/0xb0 [ 151.049607][ T7713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.049626][ T7713] RIP: 0033:0x7f145598f6c9 [ 151.049644][ T7713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.049661][ T7713] RSP: 002b:00007f145675f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 151.049681][ T7713] RAX: ffffffffffffffda RBX: 00007f1455be5fa0 RCX: 00007f145598f6c9 [ 151.049697][ T7713] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 151.049709][ T7713] RBP: 00007f145675f090 R08: 0000000000000000 R09: 0000000000000000 [ 151.049722][ T7713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.049734][ T7713] R13: 00007f1455be6038 R14: 00007f1455be5fa0 R15: 00007fffe72ac578 [ 151.049769][ T7713] [ 152.056802][ T7753] gretap0: entered promiscuous mode [ 152.063131][ T7753] vlan3: entered promiscuous mode [ 152.096857][ T7759] netlink: 'syz.0.448': attribute type 39 has an invalid length. [ 152.400456][ T7770] FAULT_INJECTION: forcing a failure. [ 152.400456][ T7770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.414298][ T7770] CPU: 0 UID: 0 PID: 7770 Comm: syz.1.451 Not tainted syzkaller #0 PREEMPT(full) [ 152.414326][ T7770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.414338][ T7770] Call Trace: [ 152.414347][ T7770] [ 152.414355][ T7770] dump_stack_lvl+0x189/0x250 [ 152.414390][ T7770] ? __pfx____ratelimit+0x10/0x10 [ 152.414418][ T7770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.414448][ T7770] ? __pfx__printk+0x10/0x10 [ 152.414470][ T7770] ? __might_fault+0xb0/0x130 [ 152.414512][ T7770] should_fail_ex+0x414/0x560 [ 152.414548][ T7770] _copy_from_user+0x2d/0xb0 [ 152.414582][ T7770] ___sys_recvmsg+0x12e/0x510 [ 152.414613][ T7770] ? __pfx____sys_recvmsg+0x10/0x10 [ 152.414670][ T7770] ? __might_fault+0xb0/0x130 [ 152.414703][ T7770] do_recvmmsg+0x307/0x770 [ 152.414738][ T7770] ? __pfx_do_recvmmsg+0x10/0x10 [ 152.414774][ T7770] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 152.414824][ T7770] __x64_sys_recvmmsg+0x190/0x240 [ 152.414854][ T7770] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 152.414883][ T7770] ? do_syscall_64+0xbe/0xfa0 [ 152.414914][ T7770] do_syscall_64+0xfa/0xfa0 [ 152.414937][ T7770] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.414960][ T7770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.414978][ T7770] ? clear_bhb_loop+0x60/0xb0 [ 152.415002][ T7770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.415019][ T7770] RIP: 0033:0x7f255ab8f6c9 [ 152.415036][ T7770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.415050][ T7770] RSP: 002b:00007f255ba25038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 152.415068][ T7770] RAX: ffffffffffffffda RBX: 00007f255ade5fa0 RCX: 00007f255ab8f6c9 [ 152.415081][ T7770] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 152.415091][ T7770] RBP: 00007f255ba25090 R08: 0000000000000000 R09: 0000000000000000 [ 152.415101][ T7770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.415110][ T7770] R13: 00007f255ade6038 R14: 00007f255ade5fa0 R15: 00007ffe58dffb78 [ 152.415147][ T7770] [ 152.698610][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 152.756208][ T7772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.452'. [ 152.871079][ T7775] bond2: peer notification delay (8) is not a multiple of miimon (11), value rounded to 0 ms [ 152.911283][ T7775] bond2: option lp_interval: invalid value (18446744073709551601) [ 152.941511][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 152.954777][ T7775] bond2: option lp_interval: allowed values 1 - 2147483647 [ 152.981621][ T7775] bond2 (unregistering): Released all slaves [ 153.026079][ T7787] netlink: 44 bytes leftover after parsing attributes in process `syz.0.458'. [ 153.270437][ T7798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.462'. [ 153.315631][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.463'. [ 153.385294][ T7803] FAULT_INJECTION: forcing a failure. [ 153.385294][ T7803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.407642][ T7800] netlink: 'syz.0.463': attribute type 5 has an invalid length. [ 153.438710][ T7803] CPU: 1 UID: 0 PID: 7803 Comm: syz.1.464 Not tainted syzkaller #0 PREEMPT(full) [ 153.438738][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.438750][ T7803] Call Trace: [ 153.438758][ T7803] [ 153.438767][ T7803] dump_stack_lvl+0x189/0x250 [ 153.438802][ T7803] ? __pfx____ratelimit+0x10/0x10 [ 153.438829][ T7803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.438858][ T7803] ? __pfx__printk+0x10/0x10 [ 153.438880][ T7803] ? __might_fault+0xb0/0x130 [ 153.438922][ T7803] should_fail_ex+0x414/0x560 [ 153.438960][ T7803] _copy_from_user+0x2d/0xb0 [ 153.438987][ T7803] ___sys_recvmsg+0x12e/0x510 [ 153.439017][ T7803] ? __pfx____sys_recvmsg+0x10/0x10 [ 153.439083][ T7803] ? __might_fault+0xb0/0x130 [ 153.439118][ T7803] do_recvmmsg+0x307/0x770 [ 153.439151][ T7803] ? __pfx_do_recvmmsg+0x10/0x10 [ 153.439188][ T7803] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 153.439238][ T7803] __x64_sys_recvmmsg+0x190/0x240 [ 153.439266][ T7803] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 153.439295][ T7803] ? do_syscall_64+0xbe/0xfa0 [ 153.439327][ T7803] do_syscall_64+0xfa/0xfa0 [ 153.439354][ T7803] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.439381][ T7803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.439402][ T7803] ? clear_bhb_loop+0x60/0xb0 [ 153.439426][ T7803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.439446][ T7803] RIP: 0033:0x7f255ab8f6c9 [ 153.439465][ T7803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.439482][ T7803] RSP: 002b:00007f255ba25038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 153.439505][ T7803] RAX: ffffffffffffffda RBX: 00007f255ade5fa0 RCX: 00007f255ab8f6c9 [ 153.439520][ T7803] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 153.439533][ T7803] RBP: 00007f255ba25090 R08: 0000000000000000 R09: 0000000000000000 [ 153.439545][ T7803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 153.439557][ T7803] R13: 00007f255ade6038 R14: 00007f255ade5fa0 R15: 00007ffe58dffb78 [ 153.439590][ T7803] [ 153.441428][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'. [ 153.724730][ T7812] netlink: 56 bytes leftover after parsing attributes in process `syz.3.465'. [ 153.765747][ T7807] netlink: 'syz.4.467': attribute type 33 has an invalid length. [ 153.811581][ T7807] netlink: 152 bytes leftover after parsing attributes in process `syz.4.467'. [ 153.842163][ T7815] netlink: 'syz.1.468': attribute type 39 has an invalid length. [ 153.870808][ T7807] `: renamed from team0 (while UP) [ 154.090106][ T7827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.470'. [ 154.249421][ T7829] netlink: 'syz.3.472': attribute type 29 has an invalid length. [ 156.219506][ T7877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.525376][ T7914] syzkaller1: entered promiscuous mode [ 156.531191][ T7914] syzkaller1: entered allmulticast mode [ 157.340076][ T7941] netlink: 'syz.1.501': attribute type 64 has an invalid length. [ 157.588145][ T7949] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20001 [ 157.897227][ T7963] FAULT_INJECTION: forcing a failure. [ 157.897227][ T7963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.939339][ T7963] CPU: 0 UID: 0 PID: 7963 Comm: syz.3.509 Not tainted syzkaller #0 PREEMPT(full) [ 157.939369][ T7963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 157.939381][ T7963] Call Trace: [ 157.939389][ T7963] [ 157.939397][ T7963] dump_stack_lvl+0x189/0x250 [ 157.939433][ T7963] ? __pfx____ratelimit+0x10/0x10 [ 157.939461][ T7963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.939490][ T7963] ? __pfx__printk+0x10/0x10 [ 157.939512][ T7963] ? __might_fault+0xb0/0x130 [ 157.939555][ T7963] should_fail_ex+0x414/0x560 [ 157.939593][ T7963] _copy_from_user+0x2d/0xb0 [ 157.939622][ T7963] ___sys_recvmsg+0x12e/0x510 [ 157.939654][ T7963] ? __pfx____sys_recvmsg+0x10/0x10 [ 157.939721][ T7963] ? __might_fault+0xb0/0x130 [ 157.939755][ T7963] do_recvmmsg+0x307/0x770 [ 157.939790][ T7963] ? __pfx_do_recvmmsg+0x10/0x10 [ 157.939828][ T7963] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.939879][ T7963] __x64_sys_recvmmsg+0x190/0x240 [ 157.939906][ T7963] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 157.939935][ T7963] ? do_syscall_64+0xbe/0xfa0 [ 157.939969][ T7963] do_syscall_64+0xfa/0xfa0 [ 157.939995][ T7963] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.940024][ T7963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.940044][ T7963] ? clear_bhb_loop+0x60/0xb0 [ 157.940071][ T7963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.940092][ T7963] RIP: 0033:0x7f5d0278f6c9 [ 157.940111][ T7963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.940129][ T7963] RSP: 002b:00007f5d035a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 157.940151][ T7963] RAX: ffffffffffffffda RBX: 00007f5d029e5fa0 RCX: 00007f5d0278f6c9 [ 157.940166][ T7963] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 157.940180][ T7963] RBP: 00007f5d035a1090 R08: 0000000000000000 R09: 0000000000000000 [ 157.940193][ T7963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.940205][ T7963] R13: 00007f5d029e6038 R14: 00007f5d029e5fa0 R15: 00007ffe547b14b8 [ 157.940240][ T7963] [ 158.248897][ T7969] netlink: 'syz.1.510': attribute type 39 has an invalid length. [ 158.348302][ T7974] FAULT_INJECTION: forcing a failure. [ 158.348302][ T7974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.395430][ T7975] netlink: 'syz.3.511': attribute type 1 has an invalid length. [ 158.422707][ T7974] CPU: 0 UID: 0 PID: 7974 Comm: syz.4.513 Not tainted syzkaller #0 PREEMPT(full) [ 158.422737][ T7974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.422750][ T7974] Call Trace: [ 158.422758][ T7974] [ 158.422767][ T7974] dump_stack_lvl+0x189/0x250 [ 158.422803][ T7974] ? __pfx____ratelimit+0x10/0x10 [ 158.422840][ T7974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.422869][ T7974] ? __pfx__printk+0x10/0x10 [ 158.422891][ T7974] ? __might_fault+0xb0/0x130 [ 158.422933][ T7974] should_fail_ex+0x414/0x560 [ 158.422971][ T7974] _copy_from_user+0x2d/0xb0 [ 158.422999][ T7974] do_sock_getsockopt+0x17d/0x450 [ 158.423026][ T7974] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 158.423047][ T7974] ? do_syscall_64+0xa0/0xfa0 [ 158.423075][ T7974] ? __fget_files+0x2a/0x420 [ 158.423094][ T7974] ? __fget_files+0x3a0/0x420 [ 158.423112][ T7974] ? __fget_files+0x2a/0x420 [ 158.423140][ T7974] __x64_sys_getsockopt+0x1a5/0x250 [ 158.423162][ T7974] ? do_syscall_64+0xa0/0xfa0 [ 158.423192][ T7974] ? do_syscall_64+0xa0/0xfa0 [ 158.423225][ T7974] do_syscall_64+0xfa/0xfa0 [ 158.423252][ T7974] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.423280][ T7974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.423301][ T7974] ? clear_bhb_loop+0x60/0xb0 [ 158.423327][ T7974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.423347][ T7974] RIP: 0033:0x7f73eb18f6c9 [ 158.423366][ T7974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.423383][ T7974] RSP: 002b:00007f73ec0a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 158.423405][ T7974] RAX: ffffffffffffffda RBX: 00007f73eb3e6090 RCX: 00007f73eb18f6c9 [ 158.423420][ T7974] RDX: 0000000000000006 RSI: 0000000000000084 RDI: 0000000000000003 [ 158.423431][ T7974] RBP: 00007f73ec0a0090 R08: 0000200000009cc0 R09: 0000000000000000 [ 158.423443][ T7974] R10: 0000200000009c00 R11: 0000000000000246 R12: 0000000000000001 [ 158.423456][ T7974] R13: 00007f73eb3e6128 R14: 00007f73eb3e6090 R15: 00007ffc49dfbcb8 [ 158.423491][ T7974] [ 158.700798][ T7986] __nla_validate_parse: 10 callbacks suppressed [ 158.700817][ T7986] netlink: 32 bytes leftover after parsing attributes in process `syz.3.511'. [ 158.718215][ T7975] bond3: entered promiscuous mode [ 158.724072][ T7975] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.833527][ T7975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.840877][ T7975] IPv6: NLM_F_CREATE should be set when creating new route [ 158.848195][ T7975] IPv6: NLM_F_CREATE should be set when creating new route [ 158.886234][ T7975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.362111][ T8013] ipvlan2: entered promiscuous mode [ 159.370514][ T8013] bridge0: port 3(ipvlan2) entered blocking state [ 159.380714][ T8013] bridge0: port 3(ipvlan2) entered disabled state [ 159.387495][ T8013] ipvlan2: entered allmulticast mode [ 159.393392][ T8013] bridge0: entered allmulticast mode [ 159.401446][ T8013] ipvlan2: left allmulticast mode [ 159.407812][ T8013] bridge0: left allmulticast mode [ 159.430738][ T8023] FAULT_INJECTION: forcing a failure. [ 159.430738][ T8023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.444276][ T8023] CPU: 1 UID: 0 PID: 8023 Comm: syz.1.522 Not tainted syzkaller #0 PREEMPT(full) [ 159.444305][ T8023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.444318][ T8023] Call Trace: [ 159.444327][ T8023] [ 159.444335][ T8023] dump_stack_lvl+0x189/0x250 [ 159.444371][ T8023] ? __pfx____ratelimit+0x10/0x10 [ 159.444399][ T8023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.444428][ T8023] ? __pfx__printk+0x10/0x10 [ 159.444450][ T8023] ? __might_fault+0xb0/0x130 [ 159.444491][ T8023] should_fail_ex+0x414/0x560 [ 159.444527][ T8023] _copy_from_user+0x2d/0xb0 [ 159.444555][ T8023] ___sys_recvmsg+0x12e/0x510 [ 159.444586][ T8023] ? __pfx____sys_recvmsg+0x10/0x10 [ 159.444644][ T8023] ? __might_fault+0xb0/0x130 [ 159.444677][ T8023] do_recvmmsg+0x307/0x770 [ 159.444710][ T8023] ? __pfx_do_recvmmsg+0x10/0x10 [ 159.444747][ T8023] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 159.444806][ T8023] __x64_sys_recvmmsg+0x190/0x240 [ 159.444834][ T8023] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 159.444863][ T8023] ? do_syscall_64+0xbe/0xfa0 [ 159.444896][ T8023] do_syscall_64+0xfa/0xfa0 [ 159.444924][ T8023] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.444952][ T8023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.444973][ T8023] ? clear_bhb_loop+0x60/0xb0 [ 159.444998][ T8023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.445018][ T8023] RIP: 0033:0x7f255ab8f6c9 [ 159.445038][ T8023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.445055][ T8023] RSP: 002b:00007f255ba25038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 159.445078][ T8023] RAX: ffffffffffffffda RBX: 00007f255ade5fa0 RCX: 00007f255ab8f6c9 [ 159.445093][ T8023] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 159.445106][ T8023] RBP: 00007f255ba25090 R08: 0000000000000000 R09: 0000000000000000 [ 159.445119][ T8023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.445131][ T8023] R13: 00007f255ade6038 R14: 00007f255ade5fa0 R15: 00007ffe58dffb78 [ 159.445165][ T8023] [ 159.889024][ T8042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.526'. [ 159.970369][ T8046] FAULT_INJECTION: forcing a failure. [ 159.970369][ T8046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.984750][ T8027] team0 (unregistering): Port device team_slave_0 removed [ 160.002734][ T8046] CPU: 1 UID: 0 PID: 8046 Comm: syz.3.529 Not tainted syzkaller #0 PREEMPT(full) [ 160.002763][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.002776][ T8046] Call Trace: [ 160.002785][ T8046] [ 160.002794][ T8046] dump_stack_lvl+0x189/0x250 [ 160.002830][ T8046] ? __pfx____ratelimit+0x10/0x10 [ 160.002857][ T8046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.002885][ T8046] ? __pfx__printk+0x10/0x10 [ 160.002908][ T8046] ? __might_fault+0xb0/0x130 [ 160.002951][ T8046] should_fail_ex+0x414/0x560 [ 160.002989][ T8046] _copy_from_user+0x2d/0xb0 [ 160.003018][ T8046] sctp_getsockopt_primary_addr+0xcf/0x5a0 [ 160.003052][ T8046] ? __pfx_sctp_getsockopt_primary_addr+0x10/0x10 [ 160.003105][ T8046] ? __local_bh_enable_ip+0x12d/0x1c0 [ 160.003131][ T8046] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 160.003163][ T8046] sctp_getsockopt+0x916/0xb60 [ 160.003182][ T8046] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 160.003216][ T8046] do_sock_getsockopt+0x372/0x450 [ 160.003242][ T8046] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 160.003263][ T8046] ? do_syscall_64+0xa0/0xfa0 [ 160.003291][ T8046] ? __fget_files+0x2a/0x420 [ 160.003310][ T8046] ? __fget_files+0x3a0/0x420 [ 160.003329][ T8046] ? __fget_files+0x2a/0x420 [ 160.003356][ T8046] __x64_sys_getsockopt+0x1a5/0x250 [ 160.003377][ T8046] ? do_syscall_64+0xa0/0xfa0 [ 160.003417][ T8046] ? do_syscall_64+0xa0/0xfa0 [ 160.003449][ T8046] do_syscall_64+0xfa/0xfa0 [ 160.003476][ T8046] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.003505][ T8046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.003525][ T8046] ? clear_bhb_loop+0x60/0xb0 [ 160.003550][ T8046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.003569][ T8046] RIP: 0033:0x7f5d0278f6c9 [ 160.003588][ T8046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.003604][ T8046] RSP: 002b:00007f5d03580038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 160.003625][ T8046] RAX: ffffffffffffffda RBX: 00007f5d029e6090 RCX: 00007f5d0278f6c9 [ 160.003640][ T8046] RDX: 0000000000000006 RSI: 0000000000000084 RDI: 0000000000000003 [ 160.003652][ T8046] RBP: 00007f5d03580090 R08: 0000200000009cc0 R09: 0000000000000000 [ 160.003666][ T8046] R10: 0000200000009c00 R11: 0000000000000246 R12: 0000000000000001 [ 160.003678][ T8046] R13: 00007f5d029e6128 R14: 00007f5d029e6090 R15: 00007ffe547b14b8 [ 160.003713][ T8046] [ 160.004691][ T8027] team0 (unregistering): Port device team_slave_1 removed [ 160.101820][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 160.366316][ T8052] tipc: Cannot configure node identity twice [ 160.411937][ T7988] IPVS: starting estimator thread 0... [ 160.428241][ T8057] tc_dump_action: action bad kind [ 160.512737][ T8059] IPVS: using max 26 ests per chain, 62400 per kthread [ 160.796627][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.540'. [ 160.799845][ T8072] xt_TCPMSS: Only works on TCP SYN packets [ 160.816514][ T8076] openvswitch: netlink: Flow key attr not present in new flow. [ 161.083790][ T8083] pim6reg1: entered promiscuous mode [ 161.137138][ T8083] pim6reg1: entered allmulticast mode [ 161.650833][ T8102] netlink: 36 bytes leftover after parsing attributes in process `syz.4.547'. [ 161.707829][ T8106] netlink: 'syz.4.547': attribute type 3 has an invalid length. [ 161.718772][ T8106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.547'. [ 162.871463][ T8120] FAULT_INJECTION: forcing a failure. [ 162.871463][ T8120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.890386][ T8120] CPU: 0 UID: 0 PID: 8120 Comm: syz.2.551 Not tainted syzkaller #0 PREEMPT(full) [ 162.890417][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.890430][ T8120] Call Trace: [ 162.890438][ T8120] [ 162.890447][ T8120] dump_stack_lvl+0x189/0x250 [ 162.890489][ T8120] ? __pfx____ratelimit+0x10/0x10 [ 162.890518][ T8120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.890548][ T8120] ? __pfx__printk+0x10/0x10 [ 162.890584][ T8120] should_fail_ex+0x414/0x560 [ 162.890622][ T8120] _copy_to_user+0x31/0xb0 [ 162.890653][ T8120] simple_read_from_buffer+0xe1/0x170 [ 162.890691][ T8120] proc_fail_nth_read+0x1b3/0x220 [ 162.890722][ T8120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.890753][ T8120] ? rw_verify_area+0x2a6/0x4d0 [ 162.890781][ T8120] ? __lock_acquire+0xab9/0xd20 [ 162.890800][ T8120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.890830][ T8120] vfs_read+0x200/0xa30 [ 162.890858][ T8120] ? fdget_pos+0x247/0x320 [ 162.890883][ T8120] ? __pfx___mutex_lock+0x10/0x10 [ 162.890914][ T8120] ? __pfx_vfs_read+0x10/0x10 [ 162.890945][ T8120] ? __fget_files+0x2a/0x420 [ 162.890970][ T8120] ? __fget_files+0x3a0/0x420 [ 162.890988][ T8120] ? __fget_files+0x2a/0x420 [ 162.891019][ T8120] ksys_read+0x145/0x250 [ 162.891052][ T8120] ? __pfx_ksys_read+0x10/0x10 [ 162.891086][ T8120] ? do_syscall_64+0xbe/0xfa0 [ 162.891120][ T8120] do_syscall_64+0xfa/0xfa0 [ 162.891147][ T8120] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.891175][ T8120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.891196][ T8120] ? clear_bhb_loop+0x60/0xb0 [ 162.891222][ T8120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.891243][ T8120] RIP: 0033:0x7f145598e0dc [ 162.891263][ T8120] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 162.891280][ T8120] RSP: 002b:00007f145673e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.891302][ T8120] RAX: ffffffffffffffda RBX: 00007f1455be6090 RCX: 00007f145598e0dc [ 162.891318][ T8120] RDX: 000000000000000f RSI: 00007f145673e0a0 RDI: 0000000000000005 [ 162.891330][ T8120] RBP: 00007f145673e090 R08: 0000000000000000 R09: 0000000000000000 [ 162.891343][ T8120] R10: 0000200000009c00 R11: 0000000000000246 R12: 0000000000000001 [ 162.891356][ T8120] R13: 00007f1455be6128 R14: 00007f1455be6090 R15: 00007fffe72ac578 [ 162.891392][ T8120] [ 163.245463][ T8126] syzkaller0: entered promiscuous mode [ 163.251000][ T8126] syzkaller0: entered allmulticast mode [ 163.361530][ T8135] netlink: 'syz.0.553': attribute type 39 has an invalid length. [ 163.753185][ T8159] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 163.866117][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 164.033724][ T8164] netlink: 36 bytes leftover after parsing attributes in process `syz.2.567'. [ 164.086636][ T8166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.568'. [ 164.091393][ T8168] netlink: 'syz.1.569': attribute type 1 has an invalid length. [ 164.139268][ T8168] bond3: entered promiscuous mode [ 164.144948][ T8168] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.193174][ T8168] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.200239][ T8168] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 164.211086][ T8168] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 164.225517][ T8168] bond3: (slave gre1): making interface the new active one [ 164.234300][ T8168] gre1: entered promiscuous mode [ 164.242160][ T8168] bond3: (slave gre1): Enslaving as an active interface with an up link [ 164.269521][ T8175] macvlan2: entered promiscuous mode [ 164.276132][ T8175] macvlan2: entered allmulticast mode [ 164.284951][ T8175] bond3: (slave macvlan2): Opening slave failed [ 164.652404][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.577'. [ 164.666615][ T8198] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:21 [ 164.819001][ T8198] bridge0: port 3(erspan0) entered blocking state [ 164.826063][ T8198] bridge0: port 3(erspan0) entered disabled state [ 164.835395][ T8198] erspan0: entered allmulticast mode [ 164.872306][ T8198] erspan0: entered promiscuous mode [ 164.883470][ T8198] bridge0: port 3(erspan0) entered blocking state [ 164.890375][ T8198] bridge0: port 3(erspan0) entered forwarding state [ 164.905171][ T8205] netlink: 'syz.1.580': attribute type 39 has an invalid length. [ 165.032254][ T8210] FAULT_INJECTION: forcing a failure. [ 165.032254][ T8210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.066599][ T8210] CPU: 0 UID: 0 PID: 8210 Comm: syz.4.582 Not tainted syzkaller #0 PREEMPT(full) [ 165.066629][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 165.066641][ T8210] Call Trace: [ 165.066650][ T8210] [ 165.066659][ T8210] dump_stack_lvl+0x189/0x250 [ 165.066694][ T8210] ? __pfx____ratelimit+0x10/0x10 [ 165.066722][ T8210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.066751][ T8210] ? __pfx__printk+0x10/0x10 [ 165.066774][ T8210] ? __might_fault+0xb0/0x130 [ 165.066818][ T8210] should_fail_ex+0x414/0x560 [ 165.066855][ T8210] _copy_from_user+0x2d/0xb0 [ 165.066884][ T8210] ___sys_recvmsg+0x12e/0x510 [ 165.066916][ T8210] ? __pfx____sys_recvmsg+0x10/0x10 [ 165.066976][ T8210] ? __might_fault+0xb0/0x130 [ 165.067019][ T8210] do_recvmmsg+0x307/0x770 [ 165.067054][ T8210] ? __pfx_do_recvmmsg+0x10/0x10 [ 165.067092][ T8210] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 165.067149][ T8210] __x64_sys_recvmmsg+0x190/0x240 [ 165.067178][ T8210] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 165.067208][ T8210] ? do_syscall_64+0xbe/0xfa0 [ 165.067253][ T8210] do_syscall_64+0xfa/0xfa0 [ 165.067280][ T8210] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.067308][ T8210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.067328][ T8210] ? clear_bhb_loop+0x60/0xb0 [ 165.067355][ T8210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.067374][ T8210] RIP: 0033:0x7f73eb18f6c9 [ 165.067393][ T8210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.067411][ T8210] RSP: 002b:00007f73ec0c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 165.067433][ T8210] RAX: ffffffffffffffda RBX: 00007f73eb3e5fa0 RCX: 00007f73eb18f6c9 [ 165.067448][ T8210] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 165.067462][ T8210] RBP: 00007f73ec0c1090 R08: 0000000000000000 R09: 0000000000000000 [ 165.067474][ T8210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.067486][ T8210] R13: 00007f73eb3e6038 R14: 00007f73eb3e5fa0 R15: 00007ffc49dfbcb8 [ 165.067522][ T8210] [ 165.371094][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.584'. [ 165.386626][ T8216] bond4: option resend_igmp: invalid value (2878) [ 165.403308][ T8216] bond4: option resend_igmp: allowed values 0 - 255 [ 165.465398][ T8216] bond4 (unregistering): Released all slaves [ 165.484911][ T8228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.069264][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'. [ 166.085663][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'. [ 166.166036][ T8241] ªªªªªª: renamed from wg2 (while UP) [ 166.258572][ T8264] x_tables: duplicate underflow at hook 1 [ 166.268572][ T8264] x_tables: duplicate underflow at hook 3 [ 166.278783][ T8264] x_tables: duplicate underflow at hook 3 [ 166.424289][ T8275] set match dimension is over the limit! [ 166.486493][ T8275] pim6reg1: entered promiscuous mode [ 166.492023][ T8275] pim6reg1: entered allmulticast mode [ 166.655768][ T8281] macsec1: entered promiscuous mode [ 166.739109][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 166.763021][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.601'. [ 167.982164][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'. [ 168.011385][ T8349] netlink: 'syz.0.617': attribute type 1 has an invalid length. [ 168.149030][ T8342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.275675][ T8342] netlink: 'syz.1.614': attribute type 3 has an invalid length. [ 168.331938][ T8359] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.433573][ T8359] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.500888][ T8363] FAULT_INJECTION: forcing a failure. [ 168.500888][ T8363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.555455][ T8359] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.575084][ T8363] CPU: 1 UID: 0 PID: 8363 Comm: syz.3.621 Not tainted syzkaller #0 PREEMPT(full) [ 168.575114][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 168.575127][ T8363] Call Trace: [ 168.575135][ T8363] [ 168.575145][ T8363] dump_stack_lvl+0x189/0x250 [ 168.575179][ T8363] ? __pfx____ratelimit+0x10/0x10 [ 168.575207][ T8363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.575237][ T8363] ? __pfx__printk+0x10/0x10 [ 168.575259][ T8363] ? __might_fault+0xb0/0x130 [ 168.575301][ T8363] should_fail_ex+0x414/0x560 [ 168.575340][ T8363] _copy_from_user+0x2d/0xb0 [ 168.575368][ T8363] ___sys_recvmsg+0x12e/0x510 [ 168.575400][ T8363] ? __pfx____sys_recvmsg+0x10/0x10 [ 168.575456][ T8363] ? __might_fault+0xb0/0x130 [ 168.575491][ T8363] do_recvmmsg+0x307/0x770 [ 168.575524][ T8363] ? __pfx_do_recvmmsg+0x10/0x10 [ 168.575566][ T8363] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.575617][ T8363] __x64_sys_recvmmsg+0x190/0x240 [ 168.575644][ T8363] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 168.575674][ T8363] ? do_syscall_64+0xbe/0xfa0 [ 168.575707][ T8363] do_syscall_64+0xfa/0xfa0 [ 168.575734][ T8363] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.575763][ T8363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.575784][ T8363] ? clear_bhb_loop+0x60/0xb0 [ 168.575809][ T8363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.575830][ T8363] RIP: 0033:0x7f5d0278f6c9 [ 168.575849][ T8363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.575866][ T8363] RSP: 002b:00007f5d035a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 168.575889][ T8363] RAX: ffffffffffffffda RBX: 00007f5d029e5fa0 RCX: 00007f5d0278f6c9 [ 168.575904][ T8363] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 168.575926][ T8363] RBP: 00007f5d035a1090 R08: 0000000000000000 R09: 0000000000000000 [ 168.575938][ T8363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.575950][ T8363] R13: 00007f5d029e6038 R14: 00007f5d029e5fa0 R15: 00007ffe547b14b8 [ 168.575985][ T8363] [ 168.880662][ T8368] tipc: Started in network mode [ 168.897180][ T8368] tipc: Node identity , cluster identity 4711 [ 168.947896][ T8368] tipc: Failed to obtain node identity [ 168.983470][ T8368] tipc: Enabling of bearer rejected, failed to enable media [ 169.105154][ T8359] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.135242][ T8369] syzkaller0: entered promiscuous mode [ 169.141256][ T8369] syzkaller0: entered allmulticast mode [ 169.168766][ T8375] netlink: 'syz.1.625': attribute type 1 has an invalid length. [ 169.306473][ T2129] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.355530][ T61] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.419620][ T61] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.450503][ T8379] __nla_validate_parse: 1 callbacks suppressed [ 169.450533][ T8379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.626'. [ 169.453510][ T8378] netlink: 'syz.2.627': attribute type 39 has an invalid length. [ 169.496299][ T61] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.629472][ T8386] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 170.154012][ T8409] : renamed from bond_slave_0 (while UP) [ 172.026986][ T8439] IPVS: ip_vs_add_dest(): server weight less than zero [ 172.698916][ T8477] netlink: 136 bytes leftover after parsing attributes in process `syz.3.649'. [ 172.708271][ T8477] netlink: 19 bytes leftover after parsing attributes in process `syz.3.649'. [ 172.768526][ T57] block nbd0: Possible stuck request ffff888024af5080: control (read@0,1024B). Runtime 60 seconds [ 172.779636][ T57] block nbd0: Possible stuck request ffff888024af5240: control (read@1024,1024B). Runtime 60 seconds [ 172.796742][ T57] block nbd0: Possible stuck request ffff888024af5400: control (read@2048,1024B). Runtime 60 seconds [ 172.809043][ T57] block nbd0: Possible stuck request ffff888024af55c0: control (read@3072,1024B). Runtime 60 seconds [ 172.869265][ T8480] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.650'. [ 172.898397][ T8485] netlink: 232 bytes leftover after parsing attributes in process `syz.4.652'. [ 172.900006][ T8480] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 172.917805][ T8483] netlink: 'syz.3.651': attribute type 2 has an invalid length. [ 172.957096][ T8483] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.651'. [ 173.374740][ T8498] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.610047][ T8498] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.720366][ T8515] netlink: 'syz.2.660': attribute type 39 has an invalid length. [ 173.776466][ T8498] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.890583][ T8520] netlink: 136 bytes leftover after parsing attributes in process `syz.3.661'. [ 173.899988][ T8520] netlink: 19 bytes leftover after parsing attributes in process `syz.3.661'. [ 173.924983][ T8498] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.125310][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.184305][ T61] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.194666][ T61] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.342639][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.744650][ T8536] syzkaller0: entered promiscuous mode [ 174.750283][ T8536] syzkaller0: entered allmulticast mode [ 174.929468][ T8544] trusted_key: syz.3.664 sent an empty control message without MSG_MORE. [ 175.073259][ T8548] netlink: 'syz.2.669': attribute type 39 has an invalid length. [ 176.035275][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 177.277378][ T8563] netlink: 19 bytes leftover after parsing attributes in process `syz.1.674'. [ 177.588091][ T8586] tc_dump_action: action bad kind [ 177.711076][ T8592] syzkaller0: entered promiscuous mode [ 177.735514][ T8592] syzkaller0: entered allmulticast mode [ 177.802565][ T8592] netlink: 44 bytes leftover after parsing attributes in process `syz.3.681'. [ 178.381856][ T8597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.689234][ T8608] netlink: 'syz.3.685': attribute type 3 has an invalid length. [ 178.707573][ T8608] netlink: 64 bytes leftover after parsing attributes in process `syz.3.685'. [ 178.784161][ T8613] bond4: Removing last arp target with arp_interval on [ 178.968763][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 178.998188][ T8619] netlink: 19 bytes leftover after parsing attributes in process `syz.2.688'. [ 179.131977][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 179.551255][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'. [ 180.673722][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'. [ 180.888670][ T8704] syzkaller0: entered allmulticast mode [ 181.023902][ T8706] netlink: 'syz.2.702': attribute type 39 has an invalid length. [ 194.020357][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.028722][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.036759][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.046840][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.055389][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.215588][ T8711] chnl_net:caif_netlink_parms(): no params data found [ 194.300308][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.307675][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.315150][ T8711] bridge_slave_0: entered allmulticast mode [ 194.331323][ T8711] bridge_slave_0: entered promiscuous mode [ 194.341949][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.349410][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.358194][ T8711] bridge_slave_1: entered allmulticast mode [ 194.368213][ T8711] bridge_slave_1: entered promiscuous mode [ 194.466608][ T8711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.494028][ T8711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.608616][ T8711] team0: Port device team_slave_0 added [ 194.626052][ T8711] team0: Port device team_slave_1 added [ 194.706436][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.722580][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.774726][ T8711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.789201][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.798391][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.806615][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.816129][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.825459][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 194.829605][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.833213][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 194.840049][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.874987][ T8711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.875290][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 194.894648][ T5840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 194.906569][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 194.915375][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 194.948657][ T8711] hsr_slave_0: entered promiscuous mode [ 194.955619][ T8711] hsr_slave_1: entered promiscuous mode [ 194.961890][ T8711] debugfs: 'hsr0' already exists in 'hsr' [ 194.967856][ T8711] Cannot create hsr debugfs directory [ 195.406280][ T8723] chnl_net:caif_netlink_parms(): no params data found [ 195.472241][ T8721] chnl_net:caif_netlink_parms(): no params data found [ 195.560993][ T8723] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.570558][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.578149][ T8723] bridge_slave_0: entered allmulticast mode [ 195.586347][ T8723] bridge_slave_0: entered promiscuous mode [ 195.606649][ T8723] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.614057][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.621276][ T8723] bridge_slave_1: entered allmulticast mode [ 195.628919][ T8723] bridge_slave_1: entered promiscuous mode [ 195.696131][ T8723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.705581][ T8721] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.713101][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.720534][ T8721] bridge_slave_0: entered allmulticast mode [ 195.728351][ T8721] bridge_slave_0: entered promiscuous mode [ 195.739029][ T8723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.748411][ T8721] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.755838][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.763498][ T8721] bridge_slave_1: entered allmulticast mode [ 195.770959][ T8721] bridge_slave_1: entered promiscuous mode [ 195.847399][ T8723] team0: Port device team_slave_0 added [ 195.877830][ T8723] team0: Port device team_slave_1 added [ 195.893829][ T8721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.908558][ T8721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.005769][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.014282][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.041740][ T8723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.056938][ T8721] team0: Port device team_slave_0 added [ 196.065553][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.073750][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.100057][ T8723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.114841][ T8721] team0: Port device team_slave_1 added [ 196.123361][ T5840] Bluetooth: hci5: command tx timeout [ 196.151211][ T5845] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 196.161058][ T5845] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 196.169712][ T5845] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 196.179191][ T5845] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 196.188029][ T5845] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 196.223978][ T8721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.230976][ T8721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.257497][ T8721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.275828][ T8723] hsr_slave_0: entered promiscuous mode [ 196.283379][ T8723] hsr_slave_1: entered promiscuous mode [ 196.289754][ T8723] debugfs: 'hsr0' already exists in 'hsr' [ 196.295708][ T8723] Cannot create hsr debugfs directory [ 196.305119][ T8721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.312112][ T8721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.357303][ T8721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.517480][ T8721] hsr_slave_0: entered promiscuous mode [ 196.524867][ T8721] hsr_slave_1: entered promiscuous mode [ 196.531427][ T8721] debugfs: 'hsr0' already exists in 'hsr' [ 196.537281][ T8721] Cannot create hsr debugfs directory [ 196.648309][ T5840] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 196.658728][ T5840] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 196.667486][ T5840] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 196.675950][ T5840] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 196.684240][ T5840] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 196.922976][ T5845] Bluetooth: hci6: command tx timeout [ 197.003057][ T5845] Bluetooth: hci7: command tx timeout [ 197.045043][ T8738] chnl_net:caif_netlink_parms(): no params data found [ 197.191409][ T8738] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.198828][ T8738] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.206413][ T8738] bridge_slave_0: entered allmulticast mode [ 197.213939][ T8738] bridge_slave_0: entered promiscuous mode [ 197.224168][ T8738] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.231410][ T8738] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.239122][ T8738] bridge_slave_1: entered allmulticast mode [ 197.246677][ T8738] bridge_slave_1: entered promiscuous mode [ 197.328192][ T8738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.342396][ T8738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.390423][ T8738] team0: Port device team_slave_0 added [ 197.400203][ T8741] chnl_net:caif_netlink_parms(): no params data found [ 197.414445][ T8738] team0: Port device team_slave_1 added [ 197.478825][ T8738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.486239][ T8738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.512599][ T8738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.531086][ T8738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.538295][ T8738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.564849][ T8738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.637486][ T8741] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.645948][ T8741] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.654018][ T8741] bridge_slave_0: entered allmulticast mode [ 197.661367][ T8741] bridge_slave_0: entered promiscuous mode [ 197.682044][ T8741] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.689373][ T8741] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.696825][ T8741] bridge_slave_1: entered allmulticast mode [ 197.704224][ T8741] bridge_slave_1: entered promiscuous mode [ 197.717696][ T8738] hsr_slave_0: entered promiscuous mode [ 197.724439][ T8738] hsr_slave_1: entered promiscuous mode [ 197.730699][ T8738] debugfs: 'hsr0' already exists in 'hsr' [ 197.738157][ T8738] Cannot create hsr debugfs directory [ 197.789593][ T8741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.808423][ T8741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.866884][ T8741] team0: Port device team_slave_0 added [ 197.880990][ T8741] team0: Port device team_slave_1 added [ 197.933259][ T8741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.940315][ T8741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.967242][ T8741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.986809][ T8741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.994240][ T8741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.020350][ T8741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.113619][ T8741] hsr_slave_0: entered promiscuous mode [ 198.120146][ T8741] hsr_slave_1: entered promiscuous mode [ 198.127737][ T8741] debugfs: 'hsr0' already exists in 'hsr' [ 198.134095][ T8741] Cannot create hsr debugfs directory [ 198.202868][ T5845] Bluetooth: hci5: command tx timeout [ 198.292755][ T5845] Bluetooth: hci8: command tx timeout [ 198.762754][ T5845] Bluetooth: hci9: command tx timeout [ 199.002828][ T5845] Bluetooth: hci6: command tx timeout [ 199.082770][ T5845] Bluetooth: hci7: command tx timeout [ 199.647782][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.654325][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.283261][ T5845] Bluetooth: hci5: command tx timeout [ 200.362724][ T5845] Bluetooth: hci8: command tx timeout [ 200.842822][ T5845] Bluetooth: hci9: command tx timeout [ 201.092882][ T5845] Bluetooth: hci6: command tx timeout [ 201.162748][ T5845] Bluetooth: hci7: command tx timeout [ 202.362842][ T5845] Bluetooth: hci5: command tx timeout [ 202.442704][ T5845] Bluetooth: hci8: command tx timeout [ 202.848941][ T57] block nbd0: Possible stuck request ffff888024af5080: control (read@0,1024B). Runtime 90 seconds [ 202.859858][ T57] block nbd0: Possible stuck request ffff888024af5240: control (read@1024,1024B). Runtime 90 seconds [ 202.870830][ T57] block nbd0: Possible stuck request ffff888024af5400: control (read@2048,1024B). Runtime 90 seconds [ 202.881901][ T57] block nbd0: Possible stuck request ffff888024af55c0: control (read@3072,1024B). Runtime 90 seconds [ 202.922886][ T5845] Bluetooth: hci9: command tx timeout [ 203.162802][ T5845] Bluetooth: hci6: command tx timeout [ 203.242714][ T5845] Bluetooth: hci7: command tx timeout [ 204.522685][ T5845] Bluetooth: hci8: command tx timeout [ 205.002818][ T5845] Bluetooth: hci9: command tx timeout [ 205.930283][ T5845] Bluetooth: hci4: link tx timeout [ 205.935648][ T5845] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 207.963646][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 211.965150][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 211.973680][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 211.975352][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 211.980539][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 232.929723][ T57] block nbd0: Possible stuck request ffff888024af5080: control (read@0,1024B). Runtime 120 seconds [ 232.940570][ T57] block nbd0: Possible stuck request ffff888024af5240: control (read@1024,1024B). Runtime 120 seconds [ 232.951676][ T57] block nbd0: Possible stuck request ffff888024af5400: control (read@2048,1024B). Runtime 120 seconds [ 232.962769][ T57] block nbd0: Possible stuck request ffff888024af55c0: control (read@3072,1024B). Runtime 120 seconds [ 254.072814][ T5845] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 254.081054][ T5845] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 254.089249][ T5845] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 254.098803][ T5845] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 254.106868][ T5845] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 254.277700][ T8838] chnl_net:caif_netlink_parms(): no params data found [ 254.365763][ T8838] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.373696][ T8838] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.381231][ T8838] bridge_slave_0: entered allmulticast mode [ 254.389702][ T8838] bridge_slave_0: entered promiscuous mode [ 254.399881][ T8838] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.407328][ T8838] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.415343][ T8838] bridge_slave_1: entered allmulticast mode [ 254.423498][ T8838] bridge_slave_1: entered promiscuous mode [ 254.473977][ T8838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.487133][ T8838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.536699][ T8838] team0: Port device team_slave_0 added [ 254.546328][ T8838] team0: Port device team_slave_1 added [ 254.591192][ T8838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.598373][ T8838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.624723][ T8838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.637872][ T8838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.644954][ T8838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.670948][ T8838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.709820][ T5147] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 254.719561][ T5147] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 254.728346][ T5147] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 254.737055][ T5147] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 254.745020][ T5147] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 254.755447][ T8838] hsr_slave_0: entered promiscuous mode [ 254.764757][ T8838] hsr_slave_1: entered promiscuous mode [ 254.771748][ T8838] debugfs: 'hsr0' already exists in 'hsr' [ 254.777620][ T8838] Cannot create hsr debugfs directory [ 255.095208][ T8847] chnl_net:caif_netlink_parms(): no params data found [ 255.199194][ T8847] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.206788][ T8847] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.214447][ T8847] bridge_slave_0: entered allmulticast mode [ 255.223027][ T8847] bridge_slave_0: entered promiscuous mode [ 255.231686][ T8847] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.239318][ T8847] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.247336][ T8847] bridge_slave_1: entered allmulticast mode [ 255.255986][ T8847] bridge_slave_1: entered promiscuous mode [ 255.313736][ T8847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.337095][ T8847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.424275][ T8847] team0: Port device team_slave_0 added [ 255.437167][ T8847] team0: Port device team_slave_1 added [ 255.486828][ T8847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.494086][ T8847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.520801][ T8847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.535804][ T8847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.543164][ T8847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.569502][ T8847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.640560][ T8847] hsr_slave_0: entered promiscuous mode [ 255.648157][ T8847] hsr_slave_1: entered promiscuous mode [ 255.655032][ T8847] debugfs: 'hsr0' already exists in 'hsr' [ 255.660805][ T8847] Cannot create hsr debugfs directory [ 255.701857][ T5147] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 255.711693][ T5147] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 255.720913][ T5147] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 255.731553][ T5147] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 255.740145][ T5147] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 256.123086][ T5147] Bluetooth: hci10: command tx timeout [ 256.219109][ T8856] chnl_net:caif_netlink_parms(): no params data found [ 256.245956][ T5845] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 256.255451][ T5845] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 256.263522][ T5845] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 256.272669][ T5845] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 256.280648][ T5845] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 256.400002][ T8856] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.407395][ T8856] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.414722][ T8856] bridge_slave_0: entered allmulticast mode [ 256.422024][ T8856] bridge_slave_0: entered promiscuous mode [ 256.437521][ T8856] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.444810][ T8856] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.452063][ T8856] bridge_slave_1: entered allmulticast mode [ 256.459558][ T8856] bridge_slave_1: entered promiscuous mode [ 256.511632][ T8856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.530436][ T8856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.576202][ T8856] team0: Port device team_slave_0 added [ 256.584830][ T8856] team0: Port device team_slave_1 added [ 256.634575][ T8856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.641917][ T8856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.669015][ T8856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.688763][ T8856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.695824][ T8856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.722108][ T8856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.834823][ T8856] hsr_slave_0: entered promiscuous mode [ 256.841475][ T8856] hsr_slave_1: entered promiscuous mode [ 256.851221][ T5147] Bluetooth: hci11: command tx timeout [ 256.859372][ T8856] debugfs: 'hsr0' already exists in 'hsr' [ 256.865397][ T8856] Cannot create hsr debugfs directory [ 256.871405][ T8862] chnl_net:caif_netlink_parms(): no params data found [ 257.112007][ T8862] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.120073][ T8862] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.130442][ T8862] bridge_slave_0: entered allmulticast mode [ 257.138759][ T8862] bridge_slave_0: entered promiscuous mode [ 257.168772][ T8862] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.177250][ T8862] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.185019][ T8862] bridge_slave_1: entered allmulticast mode [ 257.194234][ T8862] bridge_slave_1: entered promiscuous mode [ 257.194875][ T5845] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 257.217242][ T5845] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 257.226105][ T5845] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 257.238086][ T5845] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 257.248845][ T5845] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 257.283335][ T8862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.304272][ T8862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.347736][ T8862] team0: Port device team_slave_0 added [ 257.390977][ T8862] team0: Port device team_slave_1 added [ 257.466553][ T8862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.474116][ T8862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.500125][ T8862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.517232][ T8862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.524310][ T8862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.550378][ T8862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.641237][ T8862] hsr_slave_0: entered promiscuous mode [ 257.649066][ T8862] hsr_slave_1: entered promiscuous mode [ 257.655976][ T8862] debugfs: 'hsr0' already exists in 'hsr' [ 257.661832][ T8862] Cannot create hsr debugfs directory [ 257.803102][ T5147] Bluetooth: hci12: command tx timeout [ 257.925074][ T8874] chnl_net:caif_netlink_parms(): no params data found [ 258.046697][ T8874] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.054187][ T8874] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.061537][ T8874] bridge_slave_0: entered allmulticast mode [ 258.069087][ T8874] bridge_slave_0: entered promiscuous mode [ 258.087649][ T8874] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.095056][ T8874] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.102375][ T8874] bridge_slave_1: entered allmulticast mode [ 258.110427][ T8874] bridge_slave_1: entered promiscuous mode [ 258.158238][ T8874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.170787][ T8874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.203087][ T5147] Bluetooth: hci10: command tx timeout [ 258.213652][ T8874] team0: Port device team_slave_0 added [ 258.228026][ T8874] team0: Port device team_slave_1 added [ 258.260858][ T8874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.269851][ T8874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.296684][ T8874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.311803][ T8874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.318976][ T8874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.345282][ T8874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.363426][ T5147] Bluetooth: hci13: command tx timeout [ 258.434371][ T8874] hsr_slave_0: entered promiscuous mode [ 258.440995][ T8874] hsr_slave_1: entered promiscuous mode [ 258.448058][ T8874] debugfs: 'hsr0' already exists in 'hsr' [ 258.454091][ T8874] Cannot create hsr debugfs directory [ 258.923211][ T5147] Bluetooth: hci11: command tx timeout [ 259.323462][ T5147] Bluetooth: hci14: command tx timeout [ 259.882763][ T5147] Bluetooth: hci12: command tx timeout [ 260.282892][ T5147] Bluetooth: hci10: command tx timeout [ 260.442897][ T5147] Bluetooth: hci13: command tx timeout [ 261.003096][ T5147] Bluetooth: hci11: command tx timeout [ 261.091046][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.097580][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.402758][ T5147] Bluetooth: hci14: command tx timeout [ 261.962786][ T5147] Bluetooth: hci12: command tx timeout [ 262.363190][ T5147] Bluetooth: hci10: command tx timeout [ 262.524837][ T5147] Bluetooth: hci13: command tx timeout [ 263.005211][ T57] block nbd0: Possible stuck request ffff888024af5080: control (read@0,1024B). Runtime 150 seconds [ 263.016209][ T57] block nbd0: Possible stuck request ffff888024af5240: control (read@1024,1024B). Runtime 150 seconds [ 263.027330][ T57] block nbd0: Possible stuck request ffff888024af5400: control (read@2048,1024B). Runtime 150 seconds [ 263.038448][ T57] block nbd0: Possible stuck request ffff888024af55c0: control (read@3072,1024B). Runtime 150 seconds [ 263.083100][ T5147] Bluetooth: hci11: command tx timeout [ 263.482745][ T5147] Bluetooth: hci14: command tx timeout [ 264.042847][ T5147] Bluetooth: hci12: command tx timeout [ 264.602805][ T5147] Bluetooth: hci13: command tx timeout [ 265.562893][ T5147] Bluetooth: hci14: command tx timeout [ 293.084076][ T57] block nbd0: Possible stuck request ffff888024af5080: control (read@0,1024B). Runtime 180 seconds [ 293.095105][ T57] block nbd0: Possible stuck request ffff888024af5240: control (read@1024,1024B). Runtime 180 seconds [ 293.106206][ T57] block nbd0: Possible stuck request ffff888024af5400: control (read@2048,1024B). Runtime 180 seconds [ 293.117258][ T57] block nbd0: Possible stuck request ffff888024af55c0: control (read@3072,1024B). Runtime 180 seconds [ 314.152176][ T5845] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 314.161254][ T5845] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 314.170208][ T5845] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 314.178942][ T5845] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 314.187507][ T5845] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 314.352082][ T8883] chnl_net:caif_netlink_parms(): no params data found [ 314.448007][ T8883] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.455859][ T8883] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.463412][ T8883] bridge_slave_0: entered allmulticast mode [ 314.470906][ T8883] bridge_slave_0: entered promiscuous mode [ 314.479245][ T8883] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.487817][ T8883] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.495353][ T8883] bridge_slave_1: entered allmulticast mode [ 314.503069][ T8883] bridge_slave_1: entered promiscuous mode [ 314.541934][ T8883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.556704][ T8883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.595629][ T8883] team0: Port device team_slave_0 added [ 314.605423][ T8883] team0: Port device team_slave_1 added [ 314.637040][ T8883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.644327][ T8883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.670657][ T8883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.684868][ T8883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.691877][ T8883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.718890][ T8883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.768899][ T8883] hsr_slave_0: entered promiscuous mode [ 314.775802][ T8883] hsr_slave_1: entered promiscuous mode [ 314.782128][ T8883] debugfs: 'hsr0' already exists in 'hsr' [ 314.787970][ T8883] Cannot create hsr debugfs directory [ 315.176647][ T5840] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 315.188295][ T5840] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 315.197069][ T5840] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 315.205591][ T5840] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 315.213716][ T5840] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 315.409120][ T8893] chnl_net:caif_netlink_parms(): no params data found [ 315.499444][ T8893] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.507223][ T8893] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.514891][ T8893] bridge_slave_0: entered allmulticast mode [ 315.522397][ T8893] bridge_slave_0: entered promiscuous mode [ 315.531492][ T8893] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.539094][ T8893] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.546488][ T8893] bridge_slave_1: entered allmulticast mode [ 315.554160][ T8893] bridge_slave_1: entered promiscuous mode [ 315.593896][ T8893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.607048][ T8893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.644643][ T8893] team0: Port device team_slave_0 added [ 315.653199][ T8893] team0: Port device team_slave_1 added [ 315.685788][ T8893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.692847][ T8893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.720030][ T8893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.735361][ T8893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.742376][ T8893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.768524][ T8893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.817473][ T8893] hsr_slave_0: entered promiscuous mode [ 315.824700][ T8893] hsr_slave_1: entered promiscuous mode [ 315.831044][ T8893] debugfs: 'hsr0' already exists in 'hsr' [ 315.836889][ T8893] Cannot create hsr debugfs directory [ 316.209717][ T5147] Bluetooth: hci15: command tx timeout [ 316.355157][ T5840] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 316.364393][ T5840] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 316.373489][ T5840] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 316.382265][ T5840] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 316.390675][ T5840] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 316.439028][ T5147] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 316.451457][ T5147] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 316.460108][ T5147] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 316.469001][ T5147] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 316.477134][ T5147] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 316.660336][ T8903] chnl_net:caif_netlink_parms(): no params data found [ 316.778794][ T8903] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.786176][ T8903] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.793581][ T8903] bridge_slave_0: entered allmulticast mode [ 316.801083][ T8903] bridge_slave_0: entered promiscuous mode [ 316.842235][ T8903] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.849880][ T8903] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.857337][ T8903] bridge_slave_1: entered allmulticast mode [ 316.865478][ T8903] bridge_slave_1: entered promiscuous mode [ 316.940860][ T8903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.955174][ T8903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.995125][ T8905] chnl_net:caif_netlink_parms(): no params data found [ 317.054773][ T8903] team0: Port device team_slave_0 added [ 317.064744][ T8903] team0: Port device team_slave_1 added [ 317.149905][ T8903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.157765][ T8903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.183907][ T8903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.206079][ T8903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.213564][ T8903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.240082][ T8903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.251093][ T5147] Bluetooth: hci16: command tx timeout [ 317.305821][ T5840] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 317.316158][ T5840] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 317.318694][ T8905] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.331737][ T5840] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 317.331790][ T8905] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.340636][ T5840] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 317.346761][ T8905] bridge_slave_0: entered allmulticast mode [ 317.355927][ T5840] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 317.363096][ T8905] bridge_slave_0: entered promiscuous mode [ 317.394711][ T8905] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.401966][ T8905] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.417877][ T8905] bridge_slave_1: entered allmulticast mode [ 317.426170][ T8905] bridge_slave_1: entered promiscuous mode [ 317.485472][ T8905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.501406][ T8903] hsr_slave_0: entered promiscuous mode [ 317.508253][ T8903] hsr_slave_1: entered promiscuous mode [ 317.515593][ T8903] debugfs: 'hsr0' already exists in 'hsr' [ 317.521517][ T8903] Cannot create hsr debugfs directory [ 317.546373][ T8905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.621275][ T8905] team0: Port device team_slave_0 added [ 317.630409][ T8905] team0: Port device team_slave_1 added [ 317.704437][ T8905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.711460][ T8905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.737956][ T8905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.760870][ T8905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.768028][ T8905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.794392][ T8905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.899316][ T8905] hsr_slave_0: entered promiscuous mode [ 317.906589][ T8905] hsr_slave_1: entered promiscuous mode [ 317.913653][ T8905] debugfs: 'hsr0' already exists in 'hsr' [ 317.919425][ T8905] Cannot create hsr debugfs directory [ 318.179386][ T8921] chnl_net:caif_netlink_parms(): no params data found [ 318.283253][ T53] Bluetooth: hci15: command tx timeout [ 318.301507][ T8921] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.309220][ T8921] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.316806][ T8921] bridge_slave_0: entered allmulticast mode [ 318.324450][ T8921] bridge_slave_0: entered promiscuous mode [ 318.333258][ T8921] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.341844][ T8921] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.349478][ T8921] bridge_slave_1: entered allmulticast mode [ 318.357448][ T8921] bridge_slave_1: entered promiscuous mode [ 318.417635][ T8921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.430515][ T8921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.442925][ T53] Bluetooth: hci17: command tx timeout [ 318.491074][ T8921] team0: Port device team_slave_0 added [ 318.500080][ T8921] team0: Port device team_slave_1 added [ 318.522789][ T53] Bluetooth: hci18: command tx timeout [ 318.545690][ T8921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.553230][ T8921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.579357][ T8921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.592218][ T8921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.599472][ T8921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.626494][ T8921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.688053][ T8921] hsr_slave_0: entered promiscuous mode [ 318.695190][ T8921] hsr_slave_1: entered promiscuous mode [ 318.701482][ T8921] debugfs: 'hsr0' already exists in 'hsr' [ 318.707599][ T8921] Cannot create hsr debugfs directory [ 319.323216][ T53] Bluetooth: hci16: command tx timeout [ 319.402792][ T53] Bluetooth: hci19: command tx timeout [ 319.488768][ T53] Bluetooth: hci7: command 0x0406 tx timeout [ 319.489052][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 319.496347][ T53] Bluetooth: hci8: command 0x0406 tx timeout [ 319.503104][ T5843] Bluetooth: hci9: command 0x0406 tx timeout [ 319.507437][ T53] Bluetooth: hci6: command 0x0406 tx timeout [ 320.362864][ T5840] Bluetooth: hci15: command tx timeout [ 320.532709][ T5840] Bluetooth: hci17: command tx timeout [ 320.603693][ T5840] Bluetooth: hci18: command tx timeout [ 321.402969][ T5840] Bluetooth: hci16: command tx timeout [ 321.482753][ T5840] Bluetooth: hci19: command tx timeout [ 322.443004][ T5840] Bluetooth: hci15: command tx timeout [ 322.526431][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.532939][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.602930][ T5840] Bluetooth: hci17: command tx timeout [ 322.682708][ T5840] Bluetooth: hci18: command tx timeout [ 323.172793][ T57] block nbd0: Possible stuck request ffff888024af5080: control (read@0,1024B). Runtime 210 seconds [ 323.183753][ T57] block nbd0: Possible stuck request ffff888024af5240: control (read@1024,1024B). Runtime 210 seconds [ 323.194751][ T57] block nbd0: Possible stuck request ffff888024af5400: control (read@2048,1024B). Runtime 210 seconds [ 323.205767][ T57] block nbd0: Possible stuck request ffff888024af55c0: control (read@3072,1024B). Runtime 210 seconds [ 323.482851][ T5840] Bluetooth: hci16: command tx timeout [ 323.562638][ T5840] Bluetooth: hci19: command tx timeout [ 324.682669][ T5840] Bluetooth: hci17: command tx timeout [ 324.762772][ T5840] Bluetooth: hci18: command tx timeout [ 325.642749][ T5840] Bluetooth: hci19: command tx timeout [ 328.293104][ T31] INFO: task syz.3.685:8608 blocked for more than 143 seconds. [ 328.300744][ T31] Not tainted syzkaller #0 [ 328.306157][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.315055][ T31] task:syz.3.685 state:D stack:26024 pid:8608 tgid:8606 ppid:5824 task_flags:0x480140 flags:0x00080002 [ 328.327134][ T31] Call Trace: [ 328.330453][ T31] [ 328.333562][ T31] __schedule+0x1798/0x4cc0 [ 328.338230][ T31] ? __lock_acquire+0xab9/0xd20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 328.343330][ T31] ? __lock_acquire+0xab9/0xd20 [ 328.348242][ T31] ? __pfx___schedule+0x10/0x10 [ 328.353272][ T31] ? schedule+0x91/0x360 [ 328.357572][ T31] schedule+0x165/0x360 [ 328.361783][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 328.367637][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 328.373900][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 328.380019][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 328.386450][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 328.392895][ T31] nbd_set_size+0x47e/0x6a0 [ 328.397459][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 328.402674][ T31] ? nla_memcpy+0x5b/0xc0 [ 328.407066][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 328.412051][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 328.417659][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 328.423787][ T31] ? bpf_lsm_capable+0x9/0x20 [ 328.428600][ T31] ? security_capable+0x7e/0x2e0 [ 328.442539][ T31] ? radix_tree_lookup+0x240/0x290 [ 328.447801][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 328.463482][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 328.469636][ T31] ? rcu_is_watching+0x15/0xb0 [ 328.502532][ T31] ? __nla_parse+0x40/0x60 [ 328.507039][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 328.520530][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 328.527128][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 328.533325][ T31] ? stack_trace_save+0x9c/0xe0 [ 328.538202][ T31] genl_rcv_msg+0x60e/0x790 [ 328.542805][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.547842][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 328.553762][ T31] netlink_rcv_skb+0x208/0x470 [ 328.558563][ T31] ? __lock_acquire+0xab9/0xd20 [ 328.563553][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.568676][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 328.574103][ T31] ? down_read+0x1ad/0x2e0 [ 328.578543][ T31] genl_rcv+0x28/0x40 [ 328.582631][ T31] netlink_unicast+0x82f/0x9e0 [ 328.587462][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 328.592852][ T31] ? netlink_sendmsg+0x642/0xb30 [ 328.597827][ T31] ? skb_put+0x11b/0x210 [ 328.602204][ T31] netlink_sendmsg+0x805/0xb30 [ 328.607626][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.613046][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 328.618038][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 328.623399][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.628762][ T31] __sock_sendmsg+0x21c/0x270 [ 328.633592][ T31] ____sys_sendmsg+0x505/0x830 [ 328.638380][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.643764][ T31] ? import_iovec+0x74/0xa0 [ 328.648306][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 328.653084][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.658345][ T31] ? __fget_files+0x2a/0x420 [ 328.663220][ T31] ? __fget_files+0x3a0/0x420 [ 328.667955][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 328.672972][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.678483][ T31] ? do_syscall_64+0xbe/0xfa0 [ 328.683667][ T31] do_syscall_64+0xfa/0xfa0 [ 328.688265][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.693584][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.699710][ T31] ? clear_bhb_loop+0x60/0xb0 [ 328.704525][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.710448][ T31] RIP: 0033:0x7f5d0278f6c9 [ 328.714951][ T31] RSP: 002b:00007f5d035a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.723429][ T31] RAX: ffffffffffffffda RBX: 00007f5d029e5fa0 RCX: 00007f5d0278f6c9 [ 328.731424][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000005 [ 328.739467][ T31] RBP: 00007f5d02811f91 R08: 0000000000000000 R09: 0000000000000000 [ 328.747698][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.755768][ T31] R13: 00007f5d029e6038 R14: 00007f5d029e5fa0 R15: 00007ffe547b14b8 [ 328.763903][ T31] [ 328.766957][ T31] INFO: task syz.1.689:8627 blocked for more than 143 seconds. [ 328.774687][ T31] Not tainted syzkaller #0 [ 328.779640][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.788403][ T31] task:syz.1.689 state:D stack:28264 pid:8627 tgid:8620 ppid:5825 task_flags:0x400140 flags:0x00080002 [ 328.800400][ T31] Call Trace: [ 328.804007][ T31] [ 328.806979][ T31] __schedule+0x1798/0x4cc0 [ 328.811512][ T31] ? __lock_acquire+0xab9/0xd20 [ 328.816432][ T31] ? __lock_acquire+0xab9/0xd20 [ 328.821300][ T31] ? __pfx___schedule+0x10/0x10 [ 328.826256][ T31] ? schedule+0x91/0x360 [ 328.830521][ T31] schedule+0x165/0x360 [ 328.834732][ T31] schedule_preempt_disabled+0x13/0x30 [ 328.840206][ T31] __mutex_lock+0x7e6/0x1350 [ 328.844918][ T31] ? __mutex_lock+0x5bb/0x1350 [ 328.849707][ T31] ? genl_rcv_msg+0x10d/0x790 [ 328.854614][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 328.859675][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 328.865136][ T31] ? radix_tree_lookup+0x240/0x290 [ 328.870285][ T31] genl_rcv_msg+0x10d/0x790 [ 328.874833][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.879872][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 328.885310][ T31] ? __asan_memcpy+0x40/0x70 [ 328.889948][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 328.895391][ T31] netlink_rcv_skb+0x208/0x470 [ 328.900178][ T31] ? __lock_acquire+0xab9/0xd20 [ 328.905102][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.910165][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 328.915574][ T31] ? down_read+0x1ad/0x2e0 [ 328.920034][ T31] genl_rcv+0x28/0x40 [ 328.924357][ T31] netlink_unicast+0x82f/0x9e0 [ 328.929181][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 328.934556][ T31] ? netlink_sendmsg+0x642/0xb30 [ 328.939526][ T31] ? skb_put+0x11b/0x210 [ 328.943861][ T31] netlink_sendmsg+0x805/0xb30 [ 328.948649][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.953980][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 328.958932][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 328.964360][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.969659][ T31] __sock_sendmsg+0x21c/0x270 [ 328.974430][ T31] __sys_sendto+0x3bd/0x520 [ 328.979103][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 328.984169][ T31] ? count_memcg_event_mm+0x21/0x260 [ 328.989483][ T31] ? exc_page_fault+0x82/0x100 [ 328.994429][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 328.999749][ T31] __x64_sys_sendto+0xde/0x100 [ 329.004781][ T31] do_syscall_64+0xfa/0xfa0 [ 329.009378][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.014640][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.020736][ T31] ? clear_bhb_loop+0x60/0xb0 [ 329.025490][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.031399][ T31] RIP: 0033:0x7f255ab9155c [ 329.035875][ T31] RSP: 002b:00007f255ba02ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 329.044439][ T31] RAX: ffffffffffffffda RBX: 00007f255ba02fc0 RCX: 00007f255ab9155c [ 329.052486][ T31] RDX: 0000000000000020 RSI: 00007f255ba03010 RDI: 000000000000000a [ 329.060507][ T31] RBP: 0000000000000000 R08: 00007f255ba02f14 R09: 000000000000000c [ 329.068553][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 329.076637][ T31] R13: 00007f255ba02f68 R14: 00007f255ba03010 R15: 0000000000000000 [ 329.084706][ T31] [ 329.087763][ T31] INFO: task syz.4.691:8628 blocked for more than 144 seconds. [ 329.095467][ T31] Not tainted syzkaller #0 [ 329.100429][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.109264][ T31] task:syz.4.691 state:D stack:26472 pid:8628 tgid:8626 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 329.121273][ T31] Call Trace: [ 329.124679][ T31] [ 329.127648][ T31] __schedule+0x1798/0x4cc0 [ 329.132172][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.137061][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.141918][ T31] ? __pfx___schedule+0x10/0x10 [ 329.146839][ T31] ? schedule+0x91/0x360 [ 329.151097][ T31] schedule+0x165/0x360 [ 329.155298][ T31] schedule_preempt_disabled+0x13/0x30 [ 329.160859][ T31] __mutex_lock+0x7e6/0x1350 [ 329.166025][ T31] ? __mutex_lock+0x5bb/0x1350 [ 329.170844][ T31] ? genl_rcv_msg+0x10d/0x790 [ 329.175738][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 329.180963][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 329.186487][ T31] ? radix_tree_lookup+0x240/0x290 [ 329.191615][ T31] genl_rcv_msg+0x10d/0x790 [ 329.196171][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.201208][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 329.206537][ T31] ? __asan_memcpy+0x40/0x70 [ 329.211148][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 329.216657][ T31] netlink_rcv_skb+0x208/0x470 [ 329.221469][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.226487][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.231536][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.236942][ T31] ? down_read+0x1ad/0x2e0 [ 329.241395][ T31] genl_rcv+0x28/0x40 [ 329.245508][ T31] netlink_unicast+0x82f/0x9e0 [ 329.250333][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 329.255705][ T31] ? netlink_sendmsg+0x642/0xb30 [ 329.260671][ T31] ? skb_put+0x11b/0x210 [ 329.264983][ T31] netlink_sendmsg+0x805/0xb30 [ 329.269766][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.275090][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 329.280046][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.285377][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.290763][ T31] __sock_sendmsg+0x21c/0x270 [ 329.295642][ T31] __sys_sendto+0x3bd/0x520 [ 329.300164][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 329.305227][ T31] ? count_memcg_event_mm+0x21/0x260 [ 329.310545][ T31] ? exc_page_fault+0x82/0x100 [ 329.315358][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 329.320667][ T31] __x64_sys_sendto+0xde/0x100 [ 329.325723][ T31] do_syscall_64+0xfa/0xfa0 [ 329.330272][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.335523][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.341685][ T31] ? clear_bhb_loop+0x60/0xb0 [ 329.346454][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.352356][ T31] RIP: 0033:0x7f73eb19155c [ 329.356812][ T31] RSP: 002b:00007f73ec0bfec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 329.365312][ T31] RAX: ffffffffffffffda RBX: 00007f73ec0bffc0 RCX: 00007f73eb19155c [ 329.373644][ T31] RDX: 0000000000000020 RSI: 00007f73ec0c0010 RDI: 0000000000000005 [ 329.381647][ T31] RBP: 0000000000000000 R08: 00007f73ec0bff14 R09: 000000000000000c [ 329.389701][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 329.397873][ T31] R13: 00007f73ec0bff68 R14: 00007f73ec0c0010 R15: 0000000000000000 [ 329.406076][ T31] [ 329.409137][ T31] INFO: task syz.4.691:8632 blocked for more than 144 seconds. [ 329.417136][ T31] Not tainted syzkaller #0 [ 329.422113][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.430957][ T31] task:syz.4.691 state:D stack:28328 pid:8632 tgid:8626 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 329.443171][ T31] Call Trace: [ 329.446485][ T31] [ 329.449435][ T31] __schedule+0x1798/0x4cc0 [ 329.454086][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.458979][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.463895][ T31] ? __pfx___schedule+0x10/0x10 [ 329.468779][ T31] ? schedule+0x91/0x360 [ 329.473747][ T31] schedule+0x165/0x360 [ 329.477939][ T31] schedule_preempt_disabled+0x13/0x30 [ 329.483945][ T31] __mutex_lock+0x7e6/0x1350 [ 329.488595][ T31] ? __mutex_lock+0x5bb/0x1350 [ 329.493494][ T31] ? genl_rcv_msg+0x10d/0x790 [ 329.498235][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 329.503392][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 329.508806][ T31] ? radix_tree_lookup+0x240/0x290 [ 329.514084][ T31] genl_rcv_msg+0x10d/0x790 [ 329.518639][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.523742][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 329.528775][ T31] ? __asan_memcpy+0x40/0x70 [ 329.533538][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 329.538926][ T31] netlink_rcv_skb+0x208/0x470 [ 329.543745][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.548605][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.553766][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.559069][ T31] ? down_read+0x1ad/0x2e0 [ 329.564198][ T31] genl_rcv+0x28/0x40 [ 329.568337][ T31] netlink_unicast+0x82f/0x9e0 [ 329.573266][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 329.578604][ T31] ? netlink_sendmsg+0x642/0xb30 [ 329.583713][ T31] ? skb_put+0x11b/0x210 [ 329.587966][ T31] netlink_sendmsg+0x805/0xb30 [ 329.593089][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.598423][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 329.603444][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.608735][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.614070][ T31] __sock_sendmsg+0x21c/0x270 [ 329.618767][ T31] __sys_sendto+0x3bd/0x520 [ 329.623450][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 329.628517][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.633446][ T31] ? fd_install+0x97/0x540 [ 329.637876][ T31] ? fd_install+0x30d/0x540 [ 329.642909][ T31] __x64_sys_sendto+0xde/0x100 [ 329.647721][ T31] do_syscall_64+0xfa/0xfa0 [ 329.652272][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.657705][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.663824][ T31] ? clear_bhb_loop+0x60/0xb0 [ 329.668512][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.674744][ T31] RIP: 0033:0x7f73eb19155c [ 329.679211][ T31] RSP: 002b:00007f73ec09eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 329.687815][ T31] RAX: ffffffffffffffda RBX: 00007f73ec09efc0 RCX: 00007f73eb19155c [ 329.695910][ T31] RDX: 0000000000000020 RSI: 00007f73ec09f010 RDI: 0000000000000007 [ 329.704156][ T31] RBP: 0000000000000000 R08: 00007f73ec09ef14 R09: 000000000000000c [ 329.712153][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 329.720375][ T31] R13: 00007f73ec09ef68 R14: 00007f73ec09f010 R15: 0000000000000000 [ 329.731625][ T31] [ 329.734988][ T31] INFO: task syz.0.696:8681 blocked for more than 144 seconds. [ 329.742764][ T31] Not tainted syzkaller #0 [ 329.747812][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.756638][ T31] task:syz.0.696 state:D stack:28040 pid:8681 tgid:8679 ppid:5826 task_flags:0x400140 flags:0x00080002 [ 329.768708][ T31] Call Trace: [ 329.772018][ T31] [ 329.775107][ T31] __schedule+0x1798/0x4cc0 [ 329.779658][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.784586][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.789455][ T31] ? __pfx___schedule+0x10/0x10 [ 329.794432][ T31] ? schedule+0x91/0x360 [ 329.798739][ T31] schedule+0x165/0x360 [ 329.803200][ T31] schedule_preempt_disabled+0x13/0x30 [ 329.808727][ T31] __mutex_lock+0x7e6/0x1350 [ 329.813615][ T31] ? __mutex_lock+0x5bb/0x1350 [ 329.818424][ T31] ? genl_rcv_msg+0x10d/0x790 [ 329.823280][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 329.828377][ T31] ? stack_trace_save+0x9c/0xe0 [ 329.833377][ T31] ? radix_tree_lookup+0x240/0x290 [ 329.838619][ T31] genl_rcv_msg+0x10d/0x790 [ 329.843202][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.848064][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.853165][ T31] netlink_rcv_skb+0x208/0x470 [ 329.857972][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.862917][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.867954][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.873316][ T31] ? down_read+0x1ad/0x2e0 [ 329.877750][ T31] genl_rcv+0x28/0x40 [ 329.881742][ T31] netlink_unicast+0x82f/0x9e0 [ 329.886667][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 329.891972][ T31] ? netlink_sendmsg+0x642/0xb30 [ 329.896997][ T31] ? skb_put+0x11b/0x210 [ 329.901518][ T31] netlink_sendmsg+0x805/0xb30 [ 329.906685][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.912105][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 329.917134][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.922776][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.928104][ T31] __sock_sendmsg+0x21c/0x270 [ 329.932874][ T31] ____sys_sendmsg+0x505/0x830 [ 329.937651][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.943041][ T31] ? import_iovec+0x74/0xa0 [ 329.947583][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 329.952275][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.957585][ T31] ? __fget_files+0x2a/0x420 [ 329.962238][ T31] ? __fget_files+0x3a0/0x420 [ 329.967211][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 329.972260][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.977973][ T31] ? do_syscall_64+0xbe/0xfa0 [ 329.982790][ T31] do_syscall_64+0xfa/0xfa0 [ 329.987336][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.993478][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 329.999659][ T31] ? clear_bhb_loop+0x60/0xb0 [ 330.004451][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.010396][ T31] RIP: 0033:0x7f313358f6c9 [ 330.014902][ T31] RSP: 002b:00007f313442a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.023395][ T31] RAX: ffffffffffffffda RBX: 00007f31337e5fa0 RCX: 00007f313358f6c9 [ 330.031488][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 330.039820][ T31] RBP: 00007f3133611f91 R08: 0000000000000000 R09: 0000000000000000 [ 330.048228][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.056310][ T31] R13: 00007f31337e6038 R14: 00007f31337e5fa0 R15: 00007fff4ad9e528 [ 330.064376][ T31] [ 330.067427][ T31] INFO: task syz.2.702:8706 blocked for more than 145 seconds. [ 330.075045][ T31] Not tainted syzkaller #0 [ 330.080088][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.088909][ T31] task:syz.2.702 state:D stack:25336 pid:8706 tgid:8705 ppid:5837 task_flags:0x400140 flags:0x00080002 [ 330.100934][ T31] Call Trace: [ 330.104275][ T31] [ 330.107220][ T31] __schedule+0x1798/0x4cc0 [ 330.111741][ T31] ? __lock_acquire+0xab9/0xd20 [ 330.116668][ T31] ? __lock_acquire+0xab9/0xd20 [ 330.121528][ T31] ? __pfx___schedule+0x10/0x10 [ 330.126535][ T31] ? schedule+0x91/0x360 [ 330.130796][ T31] schedule+0x165/0x360 [ 330.135110][ T31] schedule_preempt_disabled+0x13/0x30 [ 330.140715][ T31] __mutex_lock+0x7e6/0x1350 [ 330.145435][ T31] ? __mutex_lock+0x5bb/0x1350 [ 330.150223][ T31] ? genl_rcv_msg+0x10d/0x790 [ 330.155002][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 330.160072][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 330.165546][ T31] ? radix_tree_lookup+0x240/0x290 [ 330.170701][ T31] genl_rcv_msg+0x10d/0x790 [ 330.175268][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.180309][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 330.185417][ T31] ? __asan_memcpy+0x40/0x70 [ 330.190168][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 330.195687][ T31] netlink_rcv_skb+0x208/0x470 [ 330.200519][ T31] ? __lock_acquire+0xab9/0xd20 [ 330.207590][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.212749][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.218066][ T31] ? down_read+0x1ad/0x2e0 [ 330.222639][ T31] genl_rcv+0x28/0x40 [ 330.226655][ T31] netlink_unicast+0x82f/0x9e0 [ 330.231435][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 330.236774][ T31] ? netlink_sendmsg+0x642/0xb30 [ 330.241809][ T31] ? skb_put+0x11b/0x210 [ 330.246096][ T31] netlink_sendmsg+0x805/0xb30 [ 330.250876][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.256280][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 330.261239][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.266574][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.271874][ T31] __sock_sendmsg+0x21c/0x270 [ 330.276667][ T31] __sys_sendto+0x3bd/0x520 [ 330.281209][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 330.286392][ T31] ? count_memcg_event_mm+0x21/0x260 [ 330.291749][ T31] ? exc_page_fault+0x82/0x100 [ 330.296769][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 330.302098][ T31] __x64_sys_sendto+0xde/0x100 [ 330.307094][ T31] do_syscall_64+0xfa/0xfa0 [ 330.311650][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.316937][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.323094][ T31] ? clear_bhb_loop+0x60/0xb0 [ 330.327877][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.333966][ T31] RIP: 0033:0x7f145599155c [ 330.338498][ T31] RSP: 002b:00007f145675dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 330.347061][ T31] RAX: ffffffffffffffda RBX: 00007f145675dfc0 RCX: 00007f145599155c [ 330.355094][ T31] RDX: 0000000000000020 RSI: 00007f145675e010 RDI: 000000000000000b [ 330.363229][ T31] RBP: 0000000000000000 R08: 00007f145675df14 R09: 000000000000000c [ 330.371325][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 330.379385][ T31] R13: 00007f145675df68 R14: 00007f145675e010 R15: 0000000000000000 [ 330.387470][ T31] [ 330.390580][ T31] [ 330.390580][ T31] Showing all locks held in the system: [ 330.398683][ T31] 1 lock held by khungtaskd/31: [ 330.403688][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 330.413856][ T31] 3 locks held by kworker/u8:4/61: [ 330.419034][ T31] #0: ffff8880b893a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 330.429076][ T31] #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 330.438047][ T31] #2: ffff8880b8925958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 330.447307][ T31] 3 locks held by kworker/u8:6/2129: [ 330.452790][ T31] #0: ffff8880b893a018 (&rq->__lock){-.-.}-{2:2}, at: process_scheduled_works+0x9b4/0x17b0 [ 330.463086][ T31] #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 330.473072][ T31] #2: ffff888033d55250 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb80 [ 330.484104][ T31] 2 locks held by getty/5586: [ 330.488785][ T31] #0: ffff88814e0b10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 330.498650][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 330.508874][ T31] 1 lock held by udevd/5888: [ 330.513556][ T31] #0: ffff888143bb0358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 330.523173][ T31] 6 locks held by syz.3.685/8608: [ 330.528242][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.536649][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 330.545697][ T31] #2: ffff888024946a70 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 330.556275][ T31] #3: ffff888024932e48 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 330.565777][ T31] #4: ffff8880249327e8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 330.578037][ T31] #5: ffff888024932820 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 330.590541][ T31] 2 locks held by syz.1.689/8627: [ 330.595654][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.604088][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 330.613171][ T31] 2 locks held by syz.4.691/8628: [ 330.618199][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.626450][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 330.635684][ T31] 2 locks held by syz.4.691/8632: [ 330.640786][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.649218][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 330.658483][ T31] 2 locks held by syz.0.696/8681: [ 330.663641][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.671973][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 330.681113][ T31] 2 locks held by syz.2.702/8706: [ 330.686236][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.694952][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 330.704249][ T31] 2 locks held by syz-executor/8711: [ 330.709573][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.717940][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 330.727007][ T31] 2 locks held by syz-executor/8721: [ 330.732382][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.740650][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 330.749770][ T31] 2 locks held by syz-executor/8723: [ 330.755169][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.763745][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 330.776220][ T31] 2 locks held by syz-executor/8738: [ 330.781563][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.789912][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 330.798969][ T31] 2 locks held by syz-executor/8741: [ 330.804373][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.812844][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 330.821952][ T31] 2 locks held by syz-executor/8838: [ 330.827425][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.835768][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 330.845097][ T31] 2 locks held by syz-executor/8847: [ 330.850428][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.858785][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 330.867820][ T31] 2 locks held by syz-executor/8856: [ 330.873139][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.881347][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 330.890475][ T31] 2 locks held by syz-executor/8862: [ 330.895904][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.904196][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 330.913240][ T31] 2 locks held by syz-executor/8874: [ 330.918556][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.926966][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 330.936090][ T31] 2 locks held by syz-executor/8883: [ 330.941382][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.949636][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 330.958652][ T31] 2 locks held by syz-executor/8893: [ 330.964085][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.972339][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 330.981451][ T31] 2 locks held by syz-executor/8903: [ 330.986894][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.995181][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 331.005011][ T31] 2 locks held by syz-executor/8905: [ 331.010363][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 331.018884][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 331.028011][ T31] 2 locks held by syz-executor/8921: [ 331.033363][ T31] #0: ffffffff8f3314b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 331.041745][ T31] #1: ffffffff8f3312c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 331.051107][ T31] [ 331.053673][ T31] ============================================= [ 331.053673][ T31] [ 331.062106][ T31] NMI backtrace for cpu 1 [ 331.062124][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 331.062141][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 331.062150][ T31] Call Trace: [ 331.062157][ T31] [ 331.062165][ T31] dump_stack_lvl+0x189/0x250 [ 331.062192][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.062214][ T31] ? __pfx__printk+0x10/0x10 [ 331.062239][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 331.062263][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 331.062282][ T31] ? __pfx__printk+0x10/0x10 [ 331.062300][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 331.062326][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 331.062345][ T31] watchdog+0xf60/0xfa0 [ 331.062364][ T31] ? watchdog+0x1e2/0xfa0 [ 331.062383][ T31] kthread+0x711/0x8a0 [ 331.062414][ T31] ? __pfx_watchdog+0x10/0x10 [ 331.062432][ T31] ? __pfx_kthread+0x10/0x10 [ 331.062461][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.062486][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.062512][ T31] ? __pfx_kthread+0x10/0x10 [ 331.062540][ T31] ret_from_fork+0x4bc/0x870 [ 331.062563][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 331.062583][ T31] ? __switch_to_asm+0x39/0x70 [ 331.062595][ T31] ? __switch_to_asm+0x33/0x70 [ 331.062607][ T31] ? __pfx_kthread+0x10/0x10 [ 331.062628][ T31] ret_from_fork_asm+0x1a/0x30 [ 331.062654][ T31] [ 331.204030][ T31] Sending NMI from CPU 1 to CPUs 0: [ 331.209528][ C0] NMI backtrace for cpu 0 [ 331.209546][ C0] CPU: 0 UID: 0 PID: 61 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 331.209566][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 331.209578][ C0] Workqueue: events_unbound toggle_allocation_gate [ 331.209601][ C0] RIP: 0010:load_new_mm_cr3+0x14e/0x1e0 [ 331.209629][ C0] Code: 0f b7 c3 3d ff 07 00 00 73 4c f7 c3 00 08 00 00 75 50 ff c3 0f b7 c3 48 09 c1 48 b8 00 00 00 00 00 00 00 80 48 09 c8 0f 22 d8 <5b> 41 5c 41 5e 41 5f e9 c6 dd d3 09 cc 90 0f 0b 90 eb af 90 0f 0b [ 331.209646][ C0] RSP: 0018:ffffc9000212f4d8 EFLAGS: 00000046 [ 331.209661][ C0] RAX: 000000001a060000 RBX: 0000000000000000 RCX: ffff88801afcbc80 [ 331.209674][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.209684][ C0] RBP: ffffc9000212f5d0 R08: ffff88801a05875f R09: 1ffff1100340b0eb [ 331.209697][ C0] R10: dffffc0000000000 R11: ffffed100340b0ec R12: ffff88801a0580b8 [ 331.209711][ C0] R13: ffff88801a058000 R14: ffff88801a060000 R15: 0000000000010000 [ 331.209724][ C0] FS: 0000000000000000(0000) GS:ffff88812613d000(0000) knlGS:0000000000000000 [ 331.209738][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.209750][ C0] CR2: 000055a8209b6f40 CR3: 000000001a060000 CR4: 00000000003526f0 [ 331.209766][ C0] Call Trace: [ 331.209773][ C0] [ 331.209782][ C0] switch_mm_irqs_off+0x539/0x7b0 [ 331.209812][ C0] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 331.209836][ C0] ? do_raw_spin_lock+0x121/0x290 [ 331.209860][ C0] ? __pte_offset_map_lock+0x13e/0x210 [ 331.209885][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 331.209911][ C0] use_temporary_mm+0x12f/0x220 [ 331.209937][ C0] ? __pfx_use_temporary_mm+0x10/0x10 [ 331.209965][ C0] ? __page_table_check_ptes_set+0x277/0x2f0 [ 331.209995][ C0] __text_poke+0x60f/0xa10 [ 331.210022][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 331.210046][ C0] ? kmem_cache_alloc_lru_noprof+0x8c/0x6d0 [ 331.210071][ C0] ? __pfx___text_poke+0x10/0x10 [ 331.210093][ C0] ? rcu_is_watching+0x15/0xb0 [ 331.210113][ C0] ? trace_contention_end+0x39/0x120 [ 331.210143][ C0] smp_text_poke_batch_finish+0xd0f/0x1130 [ 331.210174][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 331.210202][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 331.210236][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 331.210264][ C0] static_key_disable_cpuslocked+0xc5/0x1b0 [ 331.210292][ C0] static_key_disable+0x1a/0x20 [ 331.210316][ C0] toggle_allocation_gate+0x1a1/0x240 [ 331.210333][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 331.210349][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 331.210373][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 331.210391][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 331.210410][ C0] process_scheduled_works+0xae1/0x17b0 [ 331.210444][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 331.210472][ C0] worker_thread+0x8a0/0xda0 [ 331.210504][ C0] kthread+0x711/0x8a0 [ 331.210536][ C0] ? __pfx_worker_thread+0x10/0x10 [ 331.210554][ C0] ? __pfx_kthread+0x10/0x10 [ 331.210579][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.210600][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.210623][ C0] ? __pfx_kthread+0x10/0x10 [ 331.210646][ C0] ret_from_fork+0x4bc/0x870 [ 331.210665][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 331.210686][ C0] ? __switch_to_asm+0x39/0x70 [ 331.210701][ C0] ? __switch_to_asm+0x33/0x70 [ 331.210715][ C0] ? __pfx_kthread+0x10/0x10 [ 331.210739][ C0] ret_from_fork_asm+0x1a/0x30 [ 331.210762][ C0]