last executing test programs: 22.622515738s ago: executing program 1 (id=1207): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x1000, 0x9, 0x7, 0x4f, 0x945d, 0x0, 0x5, {0x0, @in6={{0xa, 0x4e21, 0x6, @empty, 0x8}}, 0x8, 0xffffffff, 0x67, 0x0, 0x10001}}, &(0x7f0000000000)=0xb0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r1, 0x4, 0xfffffffa}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="0bac0f0006ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x80) 22.31794805s ago: executing program 1 (id=1212): r0 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6, 0x1}]}, 0x10) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r1, 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, 0xfffffffffffffffd, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x1) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="1c0000", 0x3, 0x0, 0x0, 0xffffffffffffff4a) close(0x3) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000080)=0x84) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 21.814616295s ago: executing program 2 (id=1218): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58010000100013040000000000000000e0000002000000000000008fd900000020010000000000000000000000000002fffd00004e2400090200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="640101000000000000000000000000000000002232000000fe8000000000000000000000000000bb0000000000000000070000000000000000000000000000000400000000000000ffffffffffffffff04000000000000000600000000000000000000000000000003000000010000000800000000000000cc0000000000000000000000000000000d0000000000000000000000000000000000000002000001080000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000060"], 0x158}}, 0x4804) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x6e, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r2) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, 0x0, 0x4810) sendmsg$unix(r3, &(0x7f0000000b80)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000001c0)="9fd122ec84cbca48fdc31bf04768691bd15d9f46abd252f9340f99225414387a1913b411b63b1150f249b73712c713e563019102553393ffd9444eb62be8d63efbd7d2dd4ca353116e75377e345dae6a2b0c551f6d5fa42954f8d4cfe5d317dd5f99d11bdb24a5d17773590d2506ab74f5e7123330c050f2413fdcf0764b3ee7b3003055f2c7aa3cee04a60cf9c639ffb159972e9c5a1d7fdd97d3", 0x9b}, {&(0x7f0000000280)="1141b51dcbd68f2e4a2cba4725ab2a2fce79b77c5f78b2bd3d86f9303865ae4cae8332fefcbea3d285324ee2d33f1a4cdbcd934d320dd87643400162f3f5397626e28959fc24805ee37f81420349eea75913b636df9fbba410cb", 0x5a}, {&(0x7f0000000300)="0f103645f36fcba90a7560f47a9a9b6f92d5f8682b35b99aef007128d3368ef15520f6b010cccb76979638e3cc32", 0x2e}, {&(0x7f0000000900)="4bac83819c56604999b970149e7ba54ab47aaf2dc06acd7490cae829e70c346c69f4acb047f3c33ebb6304c7aa4797d3fd655c6b0c9d5628c38909fc90c771487a7f48befb576750c3381b6c08d99eb35e7f61f1b6ea7d0fc6cb09de4537cff5d6839938ca1288bd71d4aab1cf795a52cb5fac5efd15bef05239e28db7aedf9c21b9a925b6e3bdc7bd883423ca9df9d75fc45ca3d07c15bae0d47b38136494db42d252892af427db08d17086dba35c1a9f75c2671fcf1733c9c3511c515b1cab754edd83a8488adda24a767f40c4b54c830d5359d0861ea0c04683839b095416fc69b532eac792333053f5506e73", 0xee}, {&(0x7f0000000a00)="f00dc2e2b817e1de9fd0ecaa8df2518a7426e16c469838fce656578faf62f6ae09ad471091aeb45c6296595329df619cc91a305385845d57099b47709ef070899f4c43d6ced0ee812cffb414d131fe546f2bb053834f8450499193858f9cd28d14689deeeffe58159ae7936b459452298c8e7127fcddedda70d67f3f39b2699145166f30323dbd770cc4aa22f84c91e1bdb4cd55ad268bbbc8d079c59a7b12355d83028f4803235ef7422bed3fe12c5d82e7f9efd26b6a807d1851131301a24e98130b15c3e59d", 0xc7}, {&(0x7f0000000340)="a7dee580136debbba0467066ab048be3d11bf87717431bf08cb800b37f8b9d", 0x1f}], 0x6, 0x0, 0x0, 0x20040000}, 0x40000) r4 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000bc0)=@get={0x1, &(0x7f0000000b40)=""/73, 0x8}) (async) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0xffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xff7aed1}}, 0x24) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async) recvmmsg(r5, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) (async) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r6, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xb4, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bd8f05c60ff304e7fee8a3221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xc2) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000c040}, 0x24000010) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) 21.517277119s ago: executing program 2 (id=1223): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x400) bind$netrom(r1, &(0x7f0000000040)={{0x3, @bcast, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@delchain={0x54, 0x65, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0x8, 0xfff2}, {0xfff2, 0x7ffc}}, [@TCA_RATE={0x6, 0x5, {0xb, 0xa}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4b}}, @TCA_CHAIN={0x8, 0xb, 0x484}, @TCA_RATE={0x6, 0x5, {0xf6, 0xfe}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x4}}]}, 0x54}}, 0x8d0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_NAME={0x6, 0x7, '.\x00'}]}}]}, 0x3c}}, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) r9 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0xc8000, &(0x7f0000000200)={0xa, 0xe20, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x10001}, 0x1c) setsockopt$inet6_udp_int(r9, 0x88, 0x1, &(0x7f0000000080), 0x4) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000008800000037000000000000df9500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 21.37764137s ago: executing program 0 (id=1224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, r2, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r4, 0x0, 0x0, 0x80800) shutdown(r4, 0x0) socket(0x8, 0x3, 0x0) socket(0x8, 0x0, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b0000000000011907864010101ac14142100004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09b66b5dcf13c142b71d3609d7c7663fdceaa636cedb0bd54500ee3076"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xea, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002500010325bd7000fcffffff110000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c0d3}, 0x200040c4) 21.267403896s ago: executing program 2 (id=1226): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000090705e602b6e07fb50b971e4670dac998d69458ee2dbb7a014af490cdcc8305a17b5c905bf772e4daf69928b1dfde5a654b0e30ed109c31b19cb1c3cd7e9c7d772f20a6c9cb25fe31b2cf49871b9d588c029728bf023b367bf6105c6b9209862f3955602db60944d631fb439c28828abd48ed039d6ef7cb90c6ccee4a606452cd8d340ec52e4ac02cc5793f46fd675e48f15630587d8cabe36c1a9d10cc77c524682dbc63751492e00698598a985d2295fac31101bfce53788a423d5d004389c5af1e7376c37a400000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0xd, 0x11, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, 0x9, r0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYBLOB='\x00\x00\x00@'], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r3, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000005000f40fe00000e", 0x24) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="dfffffffffffffffb7020000140073f4ffffffffffff6e00000000000055090100000004009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000739a00fe00000000b509000004000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa420000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000ba0000000000b7050000080000004608f0ff76100000bf9800000000000056080000000000008500000007040000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000580)="051a00000e80006558f2878f02000000", 0x10}], 0x2) sendmsg$can_raw(r8, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r9}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x44904}, 0x8005) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003a0007012cbd700000000000017c00000410fc000000018006000600800a00000800027704007280"], 0x2c}, 0x1, 0x0, 0x0, 0x4c094}, 0x8014) 21.199111995s ago: executing program 1 (id=1227): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) unshare(0x22020600) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x5a}, 0x94) 20.921312163s ago: executing program 1 (id=1229): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@allocspi={0x100, 0x16, 0x1, 0x70bd29, 0x25dfdbfd, {{{@in6=@mcast2, @in6=@loopback, 0x4e24, 0xc, 0x4e20, 0xfffd, 0x2, 0x20, 0x20, 0x54, 0x0, 0xee01}, {@in=@loopback, 0x4d3, 0x33}, @in6=@private0, {0x3113, 0x5, 0x300000000000, 0x4, 0x200, 0x10001, 0x3, 0x1000}, {0x800, 0xffffffffffffff00, 0x5, 0x7fffffff}, {0x2, 0x9, 0x1}, 0x70bd2a, 0x3507, 0xa, 0x4, 0xc5, 0x80}, 0x7, 0xf47b}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@allocspi={0x100, 0x16, 0x1, 0x70bd29, 0x25dfdbfd, {{{@in6=@mcast2, @in6=@loopback, 0x4e24, 0xc, 0x4e20, 0xfffd, 0x2, 0x20, 0x20, 0x54, 0x0, 0xee01}, {@in=@loopback, 0x4d3, 0x33}, @in6=@private0, {0x3113, 0x5, 0x300000000000, 0x4, 0x200, 0x10001, 0x3, 0x1000}, {0x800, 0xffffffffffffff00, 0x5, 0x7fffffff}, {0x2, 0x9, 0x1}, 0x70bd2a, 0x3507, 0xa, 0x4, 0xc5, 0x80}, 0x7, 0xf47b}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x9001}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0xb97534d5fe9704cf, 0x70bd29, 0x25dfdbfd, {{0x12}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xffffa7e8, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000040) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000340)={r10}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000340)={r10}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r11, 0x0, 0x9}, 0x18) (async) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r11, 0x0, 0x9}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000040)={r10}) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r12}, 0x8) 20.847287486s ago: executing program 0 (id=1230): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) socket(0xa, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="b2", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18, 0x20040801}}], 0x1, 0x0) accept4$unix(r2, 0x0, 0x0, 0x80800) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e24, @private=0xa010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)='X', 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40), 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe21, 0x7, @private2={0xfc, 0x2, '\x00', 0xf}, 0x7}, 0x1c) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r5, 0x8b2c, &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0)=0x4000, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) close(0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000240)={0x5, 0x9, 0x0, 0x1, 0x3, [0x0, 0x5, 0x2, 0xca]}) 20.639305706s ago: executing program 1 (id=1231): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x40000c80) (async) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r2, 0x1) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r4 = socket(0x2, 0xa, 0x300) (rerun: 32) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) r6 = socket(0x2, 0x2, 0x1) bind$bt_sco(r6, 0x0, 0x0) (async, rerun: 32) r7 = socket(0x2, 0x80805, 0x0) (rerun: 32) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, 0x0, &(0x7f0000000100)) (async) bind(r7, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e22, @private=0xa010101}, 0x3, 0x2, 0x1}}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r9) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000026c0)={0x3c, r10, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) (async) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', @broadcast}) 20.428457962s ago: executing program 0 (id=1232): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}]}}}]}, 0x40}}, 0x20000090) (fail_nth: 4) 20.398722946s ago: executing program 0 (id=1234): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x62040200) socket(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r4, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) 20.242872694s ago: executing program 2 (id=1235): ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'batadv0\x00', {'geneve1\x00'}, 0x400}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @role_discovery={{0x809, 0x2}, {0xc9}}}, 0x6) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r2 = socket(0x1d, 0xa, 0x9) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x268, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9f41}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa845}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4cc9e1a6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff624}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x589a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r2) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000041) close(r0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000580)={'IDLETIMER\x00'}, &(0x7f00000005c0)=0x1e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x88, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6570f6a9fb"}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "2f2f8e53da3816df5f572aeac0"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x9, 0x4, "1a159d74b2"}, @NL80211_KEY_SEQ={0x7, 0x4, "10f83b"}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x204}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x45}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}]]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x1) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x118, r8, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x22010000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24008801) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, r4, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1f, 0x6d, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x70008206}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, r10, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x6}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x5}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80b0) read$nci(r5, &(0x7f0000000f00)=""/204, 0xcc) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}]}, 0x24}}, 0x4000) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFCONF(r12, 0x8912, &(0x7f00000011c0)=@buf={0xba, &(0x7f0000001100)="9eef7f9e67ece71ab48cd6d7cbb1da921ea1f6c150c3d18825584659ddc5dacb6a3d532c4b610ee758b055a1168738679a98f983df4d187b0de5a821adfa77dd0b0cfdc9a3c486c159568cb6ff41eec08679f1c77252cad571b5968e17d461941e80164fd13cc06e968c00c367f53cf081d041c23b43343bd90b184ab92e0a94d2da5b7617acc44af15c19d170506f1260929987d474e8f65ae13f5c850ad4e1c6bb794b18b891ec03885d873dbf480c41579e5195aaaa103b58"}) 19.450083399s ago: executing program 2 (id=1238): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x34, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x80, 0xfffc, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x1000000, 0x20000006}]}}}}}}}, 0x0) 19.174378299s ago: executing program 2 (id=1240): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r3], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@x25, &(0x7f0000000240)=0x80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459", 0x53}], 0x2, 0x0, 0x0, 0x4004014}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000300)=""/99, 0x63}], 0x2}, 0x20) r9 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, &(0x7f0000000340)=0x80, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf25010000000c00060003000000000000000c00040002000000000000000c0002000000000000800000580007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00060000000000000000000c000600010000000400002a902bfe32000c000600000000"], 0xb4}, 0x1, 0x0, 0x0, 0x40000814}, 0x844) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000fddbdf251500000300002b800c0006000100000001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x40080) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="ebb8e3", 0x3}, 0x1, 0x0, 0x0, 0x48001}, 0x4c880) 18.712979074s ago: executing program 1 (id=1241): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x34, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000010000000f00000008"], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x5, 0xb}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x40000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x16, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendto$inet(0xffffffffffffffff, &(0x7f0000000d40)="27d6972964ea3bae0cc7ffb88cfe065c332a5d3869843d41d4f850de81e1edfc5c6927a23b6c96fa078154f0a3c356b829dd76ea376e9733", 0x38, 0x40, &(0x7f0000000d80)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffff11d56fa032ffff0000000000000800450000380068000004679078f0ffffffe000000105019078a9224a26186f64d700660008041d000064010100ac1414bb880505d176000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000bc0)={'gre0\x00', r3, 0x1, 0x20, 0xd, 0x200, {{0x7, 0x4, 0x3, 0x35, 0x1c, 0x67, 0x0, 0x28, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@lsrr={0x83, 0x7, 0xc3, [@empty]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1a, &(0x7f0000000380)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @ldst={0x1, 0x3, 0x2, 0x4, 0x4, 0xfffffffffffffff4, 0x4}, @exit, @ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000200)='syzkaller\x00', 0xffffbe19, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x5, 0x81, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000500)=[{0x1, 0x4, 0x3, 0x5}, {0x3, 0x1, 0xf, 0x2}, {0x4, 0x5, 0xf, 0x4}, {0x1, 0x2, 0x10, 0x6}, {0x0, 0x6, 0x2, 0xa}, {0x0, 0x4, 0x2, 0x9}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map, 0x16, 0x1, 0x7, &(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0], 0x0}, 0x40) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000f400001e97167c9d500a1d000020000000004513f0ffffffffff000023", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x4, 0xbe, &(0x7f0000000880)=""/190, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x1, 0x3ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000009c0)=[0x1, 0x1, 0x1, 0x1], &(0x7f0000000a00)=[{0x4, 0x5, 0xc, 0x9}, {0x2, 0x2, 0x7, 0xc}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB='-\x00'/12, @ANYRES32=r11, @ANYBLOB="c5a5e416e6f80a938995407112533e69509e9d4fb98690394b316eb909dd517bf0b8ae7529898e1c1b4eff30ee539e0fb424e338ca81bdeb21a182266c4138794fbf22597dcd411f2b18bb079b6cf49990b2ee3ae1518b3f0dffec76ca0626de823aad16974a027f9bd6bba16db275b0b3cad8c493fb1f07b590b695aacee9418916c676a77e3986f6afc3eb3f737340aaa5e496dd54f855be128f90", @ANYRES64=r10], 0x20) 18.30243569s ago: executing program 3 (id=1243): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x48337fa3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x59a9e12d}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb6ae12d}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0xac, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_EXPRESSIONS={0x74, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x1e4}, 0x1, 0x0, 0x0, 0x800}, 0xc0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000300000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x1}, 0x20) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00010a030000000000009b2d"], 0x28}}, 0x4040) socket(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r8], 0x18}, 0x40c0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@call={0x85, 0x0, 0x0, 0x6a}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000300000a6c000000060a010400000000000000000a0000080900020073797a3200000000400004801800c1a1f5dff4c9765bacf286ebc6420e01800d00010073796e70726f78790000000004000280180001800d00010073796e70726f787900000000040002800c00018008000100647570000900010073797a3100000000140000001100010000000000000000000e00000a000000"], 0x94}}, 0x24000840) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r10, {0xf, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x27}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}]}, 0x40}}, 0x20040855) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={0xffffffffffffffff, r3, 0x4, r3}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000480)={0x77359400}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00') 17.635109836s ago: executing program 3 (id=1246): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001080)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffda7, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aea", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB="ffffffffff60000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040"], 0x294}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000007000000df7f00006e45000041010000", @ANYRES32, @ANYBLOB="03000000000000000000000000000082f5685000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff00"/28], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x2, {0x0, 0xf0, 0x4}, 0xfe}, 0x40) sendmsg(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4048800) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x0) r9 = socket(0x400000000010, 0x2, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) bind$unix(r11, &(0x7f00000003c0)=@abs={0x1}, 0x2) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010218000000000000000c0000000c00000002000000000000000018b60d000000000000"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x4a, &(0x7f00000003c0)=""/74, 0x40f00, 0x23, '\x00', 0x0, 0x0, r12, 0x8, 0x0, 0xfffffffffffffcb9, 0x10, &(0x7f0000000480)={0x5, 0x4101, 0x18c9d50d, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd3c, 0x25dfdafd, {0x0, 0x0, 0x0, r13, {0xc, 0xc}, {0x300, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e008d2a"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="a244f0cf1388c9ae00000000000000000000000a5c000000060a0b160000000000000000020000083000048010000180eb671cd78c0e77fd14f608643e0a00010072656469720000001c00018011000100666c6f775f6f66666c6f616400000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 17.456001038s ago: executing program 4 (id=1248): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x5}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async, rerun: 32) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) (rerun: 32) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) (async) socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) unshare(0x6020400) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r5, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}}, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) (async) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r8) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="31032abd7000fbdbdf250b00000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) (async) sendmmsg$inet(r6, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001200)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}], 0x20}}, {{&(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000240)="d66251fb79abf4a1b499ecb709a2b5201b23b6161d71dffe17", 0x19}, {&(0x7f0000002340)="bbc8e2ed5b0d82d7a5ee8ffc1936d06120784e10168ed3355b9838a80cecf567275ef9bdf9c505a5359021a5919ef0439579cca1b411c0c6e92207d32e497e697a2dda91f8e9e71d73ff26f4b1a8b3a4103657a6bd77cab66aa130cdb67bdeff2126834ac114967db70a858c15712cccc1841e272524d1262d23c9f1e6df92cf5f184bd54d842530b13605507372397f7f5074cd2a3e23ddf0b91cb48ebd4f60a401d2505f5926eed1080dc4fb83ce9233f350be86831c7834d4606dc11638f25d338062bc3e12b3d81ead1d1a298d37c0de8bbaf1434bb207bc518ed1138efd3c404902baf5ab7f8e906cfda9ddba3909475221c4b80da1d7bb91affa16dd6f119f3c6493805bc4e6614fcc5d140cb64e200195544d81b8bd3277232850b82e0bbe465cc985c2aba38bb4ff58f2e432e4c298b1b0a8749e0dc19a361999f0f1cb35ce8817c165b8da653dffc92a1e8fd89678f295eba05f98c047d79b6bbf7e4d31de89c2f5c2a9a6f731b54c1bbff17cf2cc120f1e0e7cf292ccb648e82aa4798ddbf4fe708786161e47308bf0ec2c613c13fd02b4507d6c99b147c0a15ab7e6a604ebb3503a1e71906d5d22e57afcf6239881f9a5f336b5a78788bef322322df95e6b8756e63e7e44c783227123debc6aeda1f8814a18b8830ab12f63555158eee879887a2b8b805c02e49f01685857aeea21941165e8f48e963b994ddb61114850ce1b1bd9792b0fa8b3582ec1e03670da56f937635a6b99d97e63ce14c56cdf41d4b42fcec866fb7a8d6e81f09d75c9cef702dc4c31c99a5cf7a282dba36debdb6e1402a4ed4901624ecf0550f9938055eaaccdd7832aba63543bf50fda57ba83d3ff18c2454d28bd600d6bcce0f79c41f417962b1e41de9f3da24282e65076afc5d814c3440c13385d55382bbf1e452f9005be3671a91ef1767a0a59675a3ccd0be6e9d1c37d938e63f073466aed3d4cc1637e07a4bfa15d24d900e49b227a6e59959022ab403b349df9ebc0e3b74c208490597c14624836ad62b44182f607403a251eb1fc4fbed37d2468e2d4a2ccbc12b8ab571b459d1091a2ee610d5929fe4a7bbbff36f1015392be67df0f546207d75137930d4e8b7d6aca91201f14b7d297940cea3c7819b7f3a7f106d4a4f7993318ffe1d584b7894ca1fd7f2ddebfcb88edae5cdbc2369806d45cbce5ebbf0da02721a47ca9dab15d65ad756299cfe4e86b0791bee47986c16847ac5efa5950d82181d18078c44be5b1c59ad79f3df80a7ad941cea9f6def830867467a9e827606e4cb2d005a74a51f7462af7f4ecce46516a7611d6e61dbba0989932fed22e63f687486a84c46a2acfaff2939ccbc60fb62527ad9bf056aa3f98f2608eef8d7d77a30c153d0cf17c85248f397192401ef417e09332a979c19d4fe1a3bf090542ef769b1e950105941e7e1fc97aa6b87063f2c9c8abb2fa33761cea5730f2aaf8ef6ef1b5de788a1186e09a0c08b2cd8f2d38761152150f9fdced6fdd890158cb18df25a3bf82cbe657fd435ec38c7121ad438a6232879c284d0955d6dbc9e15f9a5297506959713153b0bdcd2d3b8e28bb009ad08c518e0a8c278dacd37426de1fcf61fd57bef8ea907c0d183d3c2d0507ef49377bf352b967a26210a06d35fbe7c60b0b6905ed807b0b2ae25284573c63133afcd268f61957483fbe7849d77a1428eea0cb3a3a59b0b072f1ed81a52e7cb8cd9692412577969b8fe92fdec0dea5e143698c3b2ef8ecc27e43d73eb465923ae71928766a47b5b1e3ad7ea02246dd2a8889b1241ff3cbf7b63bdf8d14ec2cc03a18b12464f60765e90d07c7671bef6a97896a09d6d3345ab80dd29f4b3f88121932f0121584fc46c4515829375ee8a94cd95a88c371541d7065e4ca3b7ee9cadb74629300ef4f39d2e52b809f29cd045fcfff42193e17ae17afffda135c1a9a898852bcec309933bf122f3512df604e0ee95b09bb589bad46a263a60bbbeb0a0bda160fb2a0dc9651b10fd66f4504e9c4ceee053ff3b7e6d041d06bf622a943a1ce41010cc2dd38f015a25f247f5d078fe3d783c55bc7ccaad98d5c324282a5e6d21a51fca3a15c0e6d4a3e5ac6af4d39455bde27d63d31732e2628e93ab8e7afec5f6a345f7f612a272bff9f23b2450becc073c8628ddfa8d89a4ce674b1533b5f70cfe0c08b6529b40d0ef10b73752bbedd1b4e34a5f9f886d8ced61e4017173379c1b3166b26bb47fc5f1dc3e39527573fe28e9ba88b8035e499482b75c83c7f83d34a60c035c0306fea0d2bf485e8717567271f6e6f024d8be3f0021c97cd0a82fa76905b020648a1a9d203ca0c4f6701dcce72103340c8c5fdc44018d76060ff6ba897460a8acfa3bc72239b10aecb5de2f5099e1ff4153d80f81c898f4cf6558a2e8cfd0cbcab0ab2cb907540940b27b3335f739a051e503088e07ff8d71b34668d518255797d4db43b5212e3a33e90133c8c20ae744ba9784362b6f984b438ad978e79a042139c5b23d100c4f219f24deaaf6aa9437cac833b0236ec42dd54b78d20aacd9d202171c7fb9c9ff4079aaa299071fe571636b33c6dc4400bbeff0293e5cf35e2286599ac7c008480a36fa7baa0d9ea699385b1c5affecaae50cdaa2a434c8b39fed507e02555fe52eea4a3c6165777709fbd84d639eb2e9e9996da5d2e84577c0914f3fedf6cb420381458cdaaeb130fd9e7ede95a15e43e40791660cab8d48499f1fc5bade964b1bae8c2dcfcb5b6706f9adf3a5bed7684105e5dd1454270052095dcaac621e85f4c396fc9453b14bcbc851e0ee62bffc8e6c813e3cc9332ad35546310e92e8de13325f0be28ffc8f7dc245870265c1ebeba4d42b318227260842219be474c7ac772ba78a04e7549e1127f937ecd15a292341afe10c7e75bbfe5dcd1029809c6cf1a601a1254ec54a62b7d54b449a083720f58964ecaec7f6ba254917aecbafd86669c27d9d016426409504ed36563b071e00da3063a010312959224d577f50ab76fc3960cb723f463d34bbc7b9179915ec2be8464527b812b7daeae8f4aae17ec7bb5e50e03287cde55d7eb123ff783e79af9c86f39d0a75a0c3804b1ccef3d3b7e2308b10856380a69323927d17626e4348d33239d3175e6df59a70a2fe1d5e8f978867c3fb445bd900386dfc75eeef3e146afff2448425c5e655821d9f27b66c9c39686f400d3fa733318a328c18feee19ece88043389989a99967b0b360be91b9c434c513717879d051b3647d798711dfde8059d5b31f5ebc54b23f40da9aebae74e5e8362ed7a0f1664b18290e1e10480ed6c95a965d2f4e0b8a6c72d44c2032295226f7961cb151a97f330e53eb1bf1334b65270585600657420d42956c9632ef85271e3447fbe19cd270b6337e70c2650b6b684c115854512b718316d98f86de814d550d3976231ea1b538bbad5ec7e48cadd390aa543ee846712c477275642b46849233a3ae0befeb3b0969e8d09284d4cfe948f37df70125e7dd0c81589d753497b14a215a4632fe0f65d7f6f7ed4d6b40097314fd28402654b7b7f27073a145aea38571b434b4eb236be31bbdfe023613fc9856ceb6f8fc58d8d7249d7a47bcb3dbba3f8337ad3f26982bb1b48786e888ec23c371d7aafe2572f36e4ab8cc62e40b118ee7a09d3314ff3d69076cecb1bf2b51023ce73264ee010721507f43e166b5ea042f64c50df03e5ebff1046d5ad45e1d9e5ee2ed9df3fabadb16b37b4822b9c516bd593e3413577bc8ae4623ec03acda22a5c901b6631d13251472639a5a30b2bed92dafa5c589ba37df18fbcb30154bc75ecf3abd7d550112071145718e1209d14f692c2e9cbc2355835f949ee694c36cfcc059375a8ba4d0e51a035056ff2f863829ceba4d70f2e8bd40d3ba6c4fc401fc352f37a8f0d4afb2563e2d9dc7d758627be96425ccf621921cfaa4d2a9193645447fd1aa273fab0dfe8922cb778d3ee9f2597603bb472a6d60ac718fdb2a28352da8403d33f6ab593cef5ad3dd480cd3ba35976404622182b5b8cea76830e7653d22bad24ca59a0540c54bf1bc5b08356e7174f0f70fe53b3d57c4349f5f73bdb8dc85b160ece069b539227e55c6877ea096521b6d81dcaae543d51de5d913d3021b7d84fdf25767232c1c2232848b241c0429ef612b336d13593cf4e09de1fcd4a80c1899d5ea69f86b12b2c6320d19083e7dbbd1402d134a6caaa8839769d796bb29713228c99862d4cbad2aeccf5e89a2d9fd9e0a15935a156ec8a31077ea8955403d545a726f9bd2210f69893a251ae6e460549e337796e2ec012e722b875ab26a906d4f6b95cd537f37165cc732252fbadb1410103d92d3490c147afb35eb183153004c9fb7e2a53422c9fc846e682bb7b6053afe8896983f5446e2352523d08a4f2bf6e2a523fb57623ce9f51c2a285616c56863980776d9388a0329bf3e5aca4dc81b9d5f82ea0b9feeded2ab5af7f32ddd129167f09dc20e9219485f19aebbd50ecbdc85774827d03f64b0c47045206cb256f9b443e4eb478334b1626670f23ae6928bb2b104cfe2def4bd56c1d2a83a6749c6eec7533f60c06490e00696327876ac56e09e928f546daa44c315dace70ecfad70fcc5ee878875d8288504005e710b31e9806e46f9f7b51e9a58a2f1ad9f79c299b6b6702465b20d8096fc854497176a554bd1860fe1b0fb194a3895f16b3b2d2bb3a5c4a13fa7359879b6c8a468ff4f52a30e33a483b9aa324f4a565b245e909e08bad0183e6cbf8b99d9fc4b89ab4ed44c6c436072baf54b10e880657455d98ffafd8de008b632f399bfbd28d56606652213a4250b5c8fd1c08b46e8594e288fdfbf469d6ca07040043ab252714786bde574b719f569efcf284b112c047305e823e35ff801116d9fdf72b276d025c5c3a899fe697928b7a1fd3db61e93adbddb90a75396f3242a276234794092747b38c27e9c1853757d3318658b19ffa43574c3463b0753d817d56de935fbc6344620a3bd8811afd02819e9c8a3f7712542031f133d9502d6d4ebe5d8637a4afe20621f67e19d8786849e047dd842599ae89ffb157b0f49574d7584fccfa914f7d5b459ff60974f0c9c1d33a655a185095984f4fafabdd58b3852c8a44d2ca1cb85895b2bcac7b0d20f1039072001946ce2c8427b2d564895726af73691863a6a0e356532f0ff45d4295546956d6e6ad769df9356a4656cbb0fed8344a076ec2349a7ba3201733c34e757c2c0b513a520301027686afc8819bc410d31f003ec729e5828d95a82c7a0632f4165d41ecd565f463b162c870aabc4aa87aae293a04c83b50a30615283e14ee0d7e1675711bb8bfb429f9f863ae7fb6fce0423db06bc6c8de945c43efe9ee45fd9c0ef012135d08b5ef1710045fbe74f81f8eb516199e06d136b126b844eab41090f5c0aefe76c0cd7535eeea3d094840867a55fad1e08f188240bc1e9eea47fd231e3de79c168d17a4787e80c283422223405c7adb6f3d9f33bf3f272f32590f5b951eda664653b40cc4f307abe52a60cbf4cb718ffc22d99c98a0e0643aebda38d28fdc26796c1da29d330a77a6da30c0f3ad56db9290dedc6fa271f16ed5f37d9a0c4d57dc152618b4b40dffbc08030bf0b3ebef4f57d7c6ac8ddb67d64cd2a8d976458c5019855b6b96338fa94fdeffe8daa84d3bc8159e03b38e3997c8536cd933be2c9dc637451cdcef2f421531a8a34d89f9879716ffab995f02ab724bbdf30274f0ca59071493ec5506b3dc4d18b37c026e6f978245c5aeb29fc9de58d", 0x1000}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c00"/16, @ANYRES32=r7, @ANYBLOB="0a0101020a010100000000001c000000000000000000000008000000", @ANYRES32=r10, @ANYBLOB="7f000001ac14141c000000001100000000000000000000000100000002000000000000001400000000000000000000000100000004000000000000005c000000000000000000000007000000862400000003020cc56b8fbd0222420dff9d0212aebcdb43a3333dd9e866dd5f513c178e00890bf77f000001ac1414aa07078eac1e00014414e9f00000000e00000009000000090000000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x160}}], 0x2, 0x8008840) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=@tcp, 0x2}, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 17.18480602s ago: executing program 4 (id=1249): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="20040000f403010028bd7000fbdbdf250000000001000000090000000100000045e7e44509000000fcffffff00000000f500000003000000a600000000000100ffffff7f01800000a0000000020000000000000024000000080000000e04000000000000c5010000ff07000001000000060000000100000008000000ff0f000000000100050000000900000000000400050000000000000008000000040000000100000002000000897000000e00000006000000e8fdffff09000000ff0700000000000006000000090000002e000000c84c000007000000240a0000ff0f00000100000054a1da5efaffffffae000000e60d0000920a0000068d005b0700000095000000040000000f0000000300000001800000090000000c0000000500000007000000ea00000000040000020000000000000023000000005956d2d1823a3e63e4000000ff0000000200000000020000030000000000000000010000040000000700000003000000010000002808000007000000fffffffff8ffffff00800000ee1c00003a0a000002000000020000000700000001000080a66a0000000000001105000001800000000200000300000049ea000006000000050000000004000006000000ff0f00000a00000000800000f80400000700000003000000780700000300000003000000ffffffff010000007f00000004000000ffff0080060000000600000081d50000670d000005000000010000000100000003000000010000000700000000080000f7ffffff40000000020000008e0000000000000001000100050000001f0c0000090000000000000005000000ffffffff3c0000000000000002000000020000000800000003000000090000000600000004000000080000000300000004000000f100000002000000020000000100000006000000f8ffffff0100000005000000040000008000000008000000030000000400000014f10000ffffffff040000000000000005000000b4050000f9ffffff09000000018000000d00000003000000610000007f00000003000000070000000700000002000000ff0f00000000000091f70000000800000100000001000000010000000600000005000000ff00000001000000f8ffffffa50000000100000001000000080000008100000006000000720f00000700000004000000020000007f000000040000003cffffff07000000070000000104000003000000060000000000000002000000050000000600000000100000090000000001000001000000010001000900000008000000000000000004000001000000000000800180ffff0b0c00000600000084a80000000000808761f8060b0000000400000004000000020000000200"], 0x420}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a40)={{0x14}, [@NFT_MSG_NEWRULE={0xfffffffffffffeae, 0x6, 0xa, 0x409, 0x0, 0x0, {0x3, 0x0, 0xfffe}, [@NFTA_RULE_USERDATA={0x20, 0x7, 0x1, 0x0, "b5d5fb1294e0d2b83e5220adc7f4bf6d50ee3cb55d374ac6a85f0a7e"}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x0, 0x2, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0xe4}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000a40)=""/4056, &(0x7f00000000c0)=0xfd8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="050000000000000062100000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, 0x0, &(0x7f0000000080)=0xfe66) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r5 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) bind$qrtr(r4, &(0x7f00000002c0)={0x2a, 0x1, 0x2}, 0xc) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r5, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000140)="41000200010001", 0x7) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), 0x0}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17.148434062s ago: executing program 3 (id=1250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x34, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x80, 0xfffc, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x1000000, 0x20000006}]}}}}}}}, 0x0) 17.003391217s ago: executing program 3 (id=1251): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r1, r0, 0x7}, 0x10) close(r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) r3 = socket(0x1d, 0x2, 0x6) setsockopt$packet_int(r3, 0x6a, 0x9, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000080), &(0x7f0000000100)) 16.905597816s ago: executing program 3 (id=1252): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x140}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7ff}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x20000090) 16.891232131s ago: executing program 3 (id=1253): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@call={0x85, 0x0, 0x0, 0xc3}, @exit, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa010100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x0, 0x68}, 0x2c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) (async) r4 = socket$inet6(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x20, r8, 0x5a24ff9d7279afaa, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xb, 0x65}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x10000}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000006c0)=@ipv4_newaddr={0x48, 0x14, 0x2, 0x70bd27, 0x25dfdbfd, {0x2, 0x18, 0x0, 0xcb, r9}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x6e) r10 = socket$netlink(0x10, 0x3, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r11, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r10], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) 16.815373589s ago: executing program 0 (id=1254): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x140}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7ff}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x20000090) (fail_nth: 3) 16.709134494s ago: executing program 0 (id=1255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x11d, 0x0, 0x0, 0x0, 0x7}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x1f, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x26103, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x65a1}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)={0x30, r1, 0x5, 0x70b527, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40048}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000040)={0x1, 0xfffffffe, 0x0, 0x7}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x5, 0x4) 16.251649474s ago: executing program 4 (id=1256): socket$can_bcm(0x1d, 0x2, 0x2) (async) unshare(0x6e020000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESOCT], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), 0x0}, 0x20) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg$qrtr(r5, 0x0, 0x0, 0x2) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) sendmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x8015) (async) r6 = socket$inet(0x2, 0x2, 0x1) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'pimreg\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "bf1b4087edfe5c4e7dbc31ec412ad7e146e549d45ef8ffffffffffffff00", "0b427558163b547e4025a26d22b39efd15a79bf13a99cfb77cc869a43447e49f", "87a906824296668daf4ebd4e96f95ec6d39d32a7238872c45dc65a18f8bf52af", "d8f28fdc3ec20b8facef9aa9d6f53dd7527511d9bb717ba90adf6ac47453a1f1", "53b30ad0a21007c3cb8fe4f81000946b00", "6ef390e675e608f371455a4e", 0x400003, 0x2aca, 0x7e0, 0x87d42, 0x9e}}) (async, rerun: 32) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x50}}, 0x0) (async, rerun: 64) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000000)={'\x00', 0x5}) (rerun: 64) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) (async) sendmmsg$inet(r6, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="08001497733f5d3e", 0xffeb}], 0x1}}], 0x1, 0x8000) 15.962308054s ago: executing program 4 (id=1257): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000000)={'bond_slave_1\x00'}) bind$bt_sco(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES8=r1, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100c800", @ANYRESDEC], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 15.873639274s ago: executing program 4 (id=1258): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 64) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @window={0x3, 0xd, 0x2}, @mss={0x2, 0x3fe}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x8) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 15.872958891s ago: executing program 4 (id=1259): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10, 0x80800) splice(r1, &(0x7f00000000c0)=0x81, r1, &(0x7f0000000100)=0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000240)={0x8, 0x401, 0x1, 0x3, 0x1, 0x0, [{0x8, 0x1, 0x140d, '\x00', 0x1e06}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x850}, 0xc, &(0x7f00000016c0)={&(0x7f0000000300)={0x1398, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8da}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf2e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_NODE={0x10bc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xaf, 0x3, "6f3bb108b1e55ce1706dab3aeb54c602f5e3f5f5c5655eb628797cfa4ead4f09b949ebab6828ebeceb2c834690b87892278e1f1fb65006b6f144481649e6c3443c85398548ece4455ec62e7b1de5cba978e2c5440f0163d7631e6d0bd5f83209c3e3940b97168a411971db1a5a6ae02cfc8920f7e87d38b7403c26cc60e2f2e61d8c402a1d17616467362c0a3da569e10a13fa198c5a06b322b73f957ac23332e364b95b69fc5b8e10b7c4"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xb3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4af0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x124, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80800000}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1684}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x34b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3d}]}]}, 0x1398}, 0x1, 0x0, 0x0, 0x48800}, 0x20008004) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000001740)=0x4, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001780), r4) pipe(&(0x7f00000017c0)={0xffffffffffffffff}) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f0000001800)={0x80}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000018c0)={'vlan0\x00', {0x2, 0x4e23, @multicast1}}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001940), r5) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8001003}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x68, r6, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1c0000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x100010, r7, 0x43345000) sendto$unix(r8, &(0x7f0000001ac0)="979aad0898bc79df469e82c7f9b45e01006710dadfa6c76c2bc9aa980ca905cde622e023376098c7abccf611121b4d3d4914e84f1c21eafcc74cc62db4af055c221de29dd13849553266c13fd34a7d0ce24eabac4548cc854600751023963fb7394959590a310e663377a31cce3028f53211ea8b1ab47d1b2d671dbb33afb6f5186dab301eab9f97ec10e3b63ee7248f4c8c51b2f48a8bd7eb2030ad9ce21180413ea3baa7f7d802d998298caa7ccf0a53cc6037bd8c4a2891ac5a014bbcbad7e7e8c7756357bd9e88819d51e490ab0e", 0xd0, 0x20008005, &(0x7f0000001bc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$IMSETDEVNAME(r5, 0x80184947, &(0x7f0000001c40)={0x6, 'syz1\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r5) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x14, r9, 0x2, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x48090) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001dc0)={0x0, r2}, 0x8) ioctl$EXT4_IOC_MIGRATE(r10, 0x6609) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000001e00)=0x67d) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000001e80)={0x0, @l2={0x1f, 0x4, @none, 0x5, 0x1}, @generic={0xa, "901e8446dcfdcb6d2900ff21c459"}, @vsock={0x28, 0x0, 0x0, @hyper}, 0xfffc, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001e40)='veth0_to_bond\x00', 0x5, 0x5, 0xef62}) ioctl$BTRFS_IOC_BALANCE_CTL(r7, 0x40049421, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001f00)={'veth0_to_bond\x00', 0x8000}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r10, 0xc400941d, &(0x7f0000001f40)={0x0, 0x1, 0x100}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000003740)={0x10, 0x1, {0x80000000, @usage=0x7ff, r11, 0xffffffffffffff2a, 0xa7d5, 0x0, 0x4, 0x8, 0x8, @struct={0x9, 0xfffffe00}, 0x5, 0x1, [0x80000001, 0x3ff, 0x3, 0x0, 0x4, 0x5]}, {0x7970, @usage=0x7, 0x0, 0x9, 0x8e, 0x7, 0x6c, 0x10000, 0x20, @usage=0x14, 0x9, 0x8, [0x1, 0xb2, 0xff, 0x8, 0x3ff, 0x1]}, {0x456, @struct={0x2, 0x100}, 0x0, 0x8, 0x576, 0xee, 0x6, 0x9, 0x40, @usage=0xff, 0x2, 0xffffffff, [0x6, 0x9, 0x4, 0x7, 0x8, 0x100000000]}, {0x100, 0x480000, 0x9e}}) 4.020841554s ago: executing program 32 (id=1240): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r3], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@x25, &(0x7f0000000240)=0x80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459", 0x53}], 0x2, 0x0, 0x0, 0x4004014}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000300)=""/99, 0x63}], 0x2}, 0x20) r9 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, &(0x7f0000000340)=0x80, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf25010000000c00060003000000000000000c00040002000000000000000c0002000000000000800000580007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00060000000000000000000c000600010000000400002a902bfe32000c000600000000"], 0xb4}, 0x1, 0x0, 0x0, 0x40000814}, 0x844) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000fddbdf251500000300002b800c0006000100000001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x40080) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="ebb8e3", 0x3}, 0x1, 0x0, 0x0, 0x48001}, 0x4c880) 2.990665817s ago: executing program 33 (id=1241): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x34, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000010000000f00000008"], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x5, 0xb}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x40000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x16, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendto$inet(0xffffffffffffffff, &(0x7f0000000d40)="27d6972964ea3bae0cc7ffb88cfe065c332a5d3869843d41d4f850de81e1edfc5c6927a23b6c96fa078154f0a3c356b829dd76ea376e9733", 0x38, 0x40, &(0x7f0000000d80)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffff11d56fa032ffff0000000000000800450000380068000004679078f0ffffffe000000105019078a9224a26186f64d700660008041d000064010100ac1414bb880505d176000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000bc0)={'gre0\x00', r3, 0x1, 0x20, 0xd, 0x200, {{0x7, 0x4, 0x3, 0x35, 0x1c, 0x67, 0x0, 0x28, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@lsrr={0x83, 0x7, 0xc3, [@empty]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1a, &(0x7f0000000380)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @ldst={0x1, 0x3, 0x2, 0x4, 0x4, 0xfffffffffffffff4, 0x4}, @exit, @ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000200)='syzkaller\x00', 0xffffbe19, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x5, 0x81, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000500)=[{0x1, 0x4, 0x3, 0x5}, {0x3, 0x1, 0xf, 0x2}, {0x4, 0x5, 0xf, 0x4}, {0x1, 0x2, 0x10, 0x6}, {0x0, 0x6, 0x2, 0xa}, {0x0, 0x4, 0x2, 0x9}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map, 0x16, 0x1, 0x7, &(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0], 0x0}, 0x40) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000f400001e97167c9d500a1d000020000000004513f0ffffffffff000023", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x4, 0xbe, &(0x7f0000000880)=""/190, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x1, 0x3ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000009c0)=[0x1, 0x1, 0x1, 0x1], &(0x7f0000000a00)=[{0x4, 0x5, 0xc, 0x9}, {0x2, 0x2, 0x7, 0xc}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB='-\x00'/12, @ANYRES32=r11, @ANYBLOB="c5a5e416e6f80a938995407112533e69509e9d4fb98690394b316eb909dd517bf0b8ae7529898e1c1b4eff30ee539e0fb424e338ca81bdeb21a182266c4138794fbf22597dcd411f2b18bb079b6cf49990b2ee3ae1518b3f0dffec76ca0626de823aad16974a027f9bd6bba16db275b0b3cad8c493fb1f07b590b695aacee9418916c676a77e3986f6afc3eb3f737340aaa5e496dd54f855be128f90", @ANYRES64=r10], 0x20) 1.015990736s ago: executing program 34 (id=1255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x11d, 0x0, 0x0, 0x0, 0x7}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x1f, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x26103, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x65a1}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)={0x30, r1, 0x5, 0x70b527, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40048}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000040)={0x1, 0xfffffffe, 0x0, 0x7}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x5, 0x4) 985.548474ms ago: executing program 35 (id=1253): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@call={0x85, 0x0, 0x0, 0xc3}, @exit, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa010100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x0, 0x68}, 0x2c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) (async) r4 = socket$inet6(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x20, r8, 0x5a24ff9d7279afaa, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xb, 0x65}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x10000}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000006c0)=@ipv4_newaddr={0x48, 0x14, 0x2, 0x70bd27, 0x25dfdbfd, {0x2, 0x18, 0x0, 0xcb, r9}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x6e) r10 = socket$netlink(0x10, 0x3, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r11, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r10], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) 0s ago: executing program 36 (id=1259): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10, 0x80800) splice(r1, &(0x7f00000000c0)=0x81, r1, &(0x7f0000000100)=0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000240)={0x8, 0x401, 0x1, 0x3, 0x1, 0x0, [{0x8, 0x1, 0x140d, '\x00', 0x1e06}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x850}, 0xc, &(0x7f00000016c0)={&(0x7f0000000300)={0x1398, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8da}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf2e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_NODE={0x10bc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xaf, 0x3, "6f3bb108b1e55ce1706dab3aeb54c602f5e3f5f5c5655eb628797cfa4ead4f09b949ebab6828ebeceb2c834690b87892278e1f1fb65006b6f144481649e6c3443c85398548ece4455ec62e7b1de5cba978e2c5440f0163d7631e6d0bd5f83209c3e3940b97168a411971db1a5a6ae02cfc8920f7e87d38b7403c26cc60e2f2e61d8c402a1d17616467362c0a3da569e10a13fa198c5a06b322b73f957ac23332e364b95b69fc5b8e10b7c4"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "00dd1d0203bda0cf92df113f4dec9ae40a3e7a165925c967def107fe24b71ed3837d63039e170e03bc56484cde6ab12659cc735a4b12859e7ab9e8e4ceaacaca4701d9eda3f24213e614b3756a3965f5ed4a2490c1284d7a9057521f05ccafbaa66edcfc6f7db74ea11c530b68171b152275af212b461b3fbb0d2fcc4e954331d9d38a37fdaca5f89035643f7c3b0474a8bec7db46e49d81797cc3072567fdb5ecfeafb2ba36153d551a367a40fc5f07507ff3d42e48d4ad69543f69b2a24977ad2c98b1170e15b92724f60ddd206c6e67a714dbf4c1f14204a6d6afea52e76530ab367abc8e7a95216160c720e0f9de41797d854348f45ae70207d4dd760a0386c3b7da2ab22a2e195636b62007f0259c509d0823e0bfed0cb069fd566b69c57ffe46011f5c746e70ca44fd31716b98ce2bc003ee74ab51707a69433f9a8c1af905cf498511b125d2b0cc1b1b3cb2e129300726ccb2e72602817f8a239e405a118f7647303cc81a128dc907bfc002127c101defa27d25fada13f64f3369307a7c85959bfbdb7b56d54c51b974e583712dd16b90601ba8e12a114a157a93988bfac003ac243f8f0dbd2b8575ec82486d2298389b0780390b214b0ffbdf9eb38781cc7a42817d528df654ffa7919e8f35a33072286a8fa03d474743ac5de3d75eb3afbe5ec1b8062dc83d2b1e9bce98452c5e2753608738f277e7a56fc984b85dfcae85527d7651b73e7c0d9feb67b7237562dd12450bdf26b7394e1e3459be3162c21cfeea16c6dc7a4cdb8614b8d0d1fcab0884a7893e7e826ae4d05838258e4f0ec13ac621a78fb629d6d23f9b289cd1bd4aa9e1299d85030debc5a5cefdb2bf47330ae36d82790613c0cd76be834a988ca6cf6cf9a4a70b198ceebfdd948690df14bc07b180e1502260d5bae4908947efdfe1ad8179f610be3020643fafcb7206bf0f83a22f8ff5dd87b54edf8886d51e51c5d472b91f64104a8a429c3ceedcfe94a718bfcfdb2774577813fab3d5fd30eea6899cbd0e9b26204e3cd4cf69082d686fd50f883172ac87bfe76257801c7a8b04425f3a7faa8c45518598838543db11e18a76c58e0dae61e66c288b09ddf082b39b5123bb0c7de5bf4134df654f0d13f4205bc4074aae462b3ea0c726d9769e11bfdb58ca8350fbc5d8fc1d007c3326c513211f5fdfe23204b151166707cc940583ba7c8f91bdfeb3484a9eaf608998745c0b58b6db39c40bcd95f399025c4f56eaa35b8f2a70101739df830349df8ec62ce06814715016be5f2a7563b250e30231b303f05cb9669f6f47fe898f173964f35fa64ba7dcd94c5d1620d8fc7a2d8cc26bc932107467aa548e399a154c6581019c8ccbad2e170a4a44afb9fef9ee36243eb9a9ef1dc48ae14475305a92cbea8105f3925aeddf9533c046fd3a74bec88b7df1b342bdc1015280ed51402027af43d16cf8ab2f0131d3cd05a61d7c761862c481e6d91caa40851fb00cd557330431eedf1a100b25775ed1698295c2357e84c1980b4e8e5aa30e16ff7ad597d460c9c6092008af6e96947141495fa386874c4b1496478552fb896aae12168c1f117bd572bb0b9f5ce91b006e13113d9bdd7f3c3210ef2a57f8648bc7555c1e5a3a6cb07fd5db06f625cf09b080ae526435506a5fea7e55216ff785b8c472738ba923d942b91a328ca53b98e3d047d9c01a8e90e4a95992a27f1a5ac8df202f8411f945e4cf45d142de68d7d9d226bc1bd27aa54398e53a1dd6e7decb3f9912b6f6e8a51f0acc4ff37e6e71cebc1f3a73796cfbfb03508b0d43d4e28cb903fa83426bbb0de691c97210e0db06c37091e5fb21fdf0d108f5b944ce10bbe1a4b1248fd7319fa85a3194bd3b39f5ad3dc4febca0eefc7a413159624c2d3a72affe310a8e0cf20bb7d54d420666961bf5619b16c00446b4ac4d00f42f17f68524718411fd11d92144a86bbe2314738b039940bb629f907e38f15f9e1efa65be202532bb3943437dbe355596992cb2a0cbfb2f1a16c47b0326d6cccf21ec0a2db3d51777576fca3fccb15ad2c00decbf9106790e64a068d47618e6d4f0d9474459df4e1d25e746c0e31d9d6f140df4cb3c70856eb454d40f3f56e87bbeecda23b2b48247b3e3b9b5e9fcf97c015d417d8f7c15e8a9eb967cc432ef62c56dfb5dd4589f67d91246a3e02ad76b59f4bb8933318645ad34ed1e5bf974c69e1a751c0fd612e698aec89e0020ff04897dc9badb93e849cd91da8fc61fbb7601b1694f4009af7fc19381576820c68d23932a75e66ec7bc887fbf35c879d6a0c2f3b8d63b1c10dfe72cfcf1e3ae7fd4c135bd13019b8ae6d57ef8b33eeee9f1ded42149e3369d71a942baa18a5e68bd6f887cfb8056a4b67dd14f910b19d964ad98a68737a05bf9e01fe584b2956d604062366ad0395c64c26b0511c41eace33c6e20024cb117f4e4d75b7374d30201d45eed5981f4bdcd5957f735ea3b1602fbdc6251e997aaf21f342aaf16367bb8856f6c897617ead3b212cd380b0a6bf002b922b4f11a2638c1eca4b0ae50d82afaa93e423794722ef7bdbca03582a9f2c622d4dcb8b8427f8a920432f09dd7dd9e78ed9cd92ba88d8bdc46add81df7e7e354bd63cd928ad0eeed9ba7deb99e2ae8cf6e888ab4821b7bbd97d1e375639a70b04c2e706ab03278966650ff3b89b77cc9b72868211831dcd8fe04e69df24ee47d1662c5252b6217752753e4d3ac252ad3825e0de1f23d60a6bdfbd2e4c0b5ebaafa2cf9b26132c36fdc0766595bdfcb43b49ce9d3b61bfd26d391d2b3899d7737e85adb544b59769c8d4aba30ddd0f8affa249b8c6c7a9475569464d37120fb3a1c0e7fb4b0f7119dd5b66b40d2b02ead7c2e4c19b2c0b69b375186e2059ca48f9c1f5e8d8e41427c519aea65dc2bfeee79b4ba6a298bd929c11bc99425c80442ee972285b298153d7da0bed3f2beffbaee104c3e27f6d45ea24488d91995c9799c9f515b735b7045912faad19af84425d24de0e27a34bc846960d9ce1c6498e32d42e1291b5b2dc26077fbbbe1bd8e2c39805ff6b05e6765b5c14a730228d1f2e5c7fe7a07b0e0a476fe24e6a17cccae37f2f6ad6ff8f3f204ed72a049aed69323c267bc61b4d1e1fd251c9871e4481520e19ac16feab183a4a5803dfa1ed3831af0b9f9b29e48fa18b74052874bd2354aeaf6653b20d86e4fcc39a421bba519f8dd5a38fe15bc4e16e0f2cd90e1a878359d65236a2dc8612ee1cf45a57f49d535b4cea81392e09c20eae6f44246ffdaf96c59baf251ad488e16b99748199a1ff0c565d15f0e62349c35eecb96fa27f29c6f8ce0530cf00d7368dbd5d5ed9a620cd8a7f630472bff0eb87a04919e05360212b63b2f256e3e7e9c3915c19cb167d9c368061b3b20613518b0b2f9160ed62665d654571319ea6295faa4ada7e06308f138a1763af06b98a55f2151a0a1be8ebff3a708938c26524f1b1bcd85d189110585807e5de68f99e3a610ca327d441cad77ead7dc7169b3e09b7f32e2949544904c4bf4e78117d4a4e00af476e78bab8212d12b8e7747fefe5433a06cc8e9980f1021c75296ffc1349fe5c94b8f277806be4d765fbc794ae8c5b3827b8ca3a42f4fc6552e9da568953a2b2570c2fe711e8785c410b9b42df29d7091ba7de735d5c1a51468ee3b934846966841c994438c52d14cf383b8c8010860ec913444001b233dd765a9c5c3dfa8ad86049b169158f159b7e7e26250949a80a0362ea15661a0457d71a2bfd968021641c08a2b1b932d9191f465e27cffadd67afd59fc6d48eb89ec6d50978a2069ec62ad62ce73543060984a9992b0217e79b71a193d5ee01a660379d91e56fd20b51412aaa3d6f1e8ffb43ae24fef73b2c3746315ab86fed79346059ed2e1ae9c7c3dc10ecd16a486fca95b4c36d91e18e232c568cd52aafc19820b33ee4523e5f6af6c1a00dc8ebd7f1abb459bec34d4e9939fdfb3eae0c31f014840b99f66813797cb91ac853ff0beb107b2424ae9d23549f8f3dcef2b1839240d0bd16b6e4425bb64f0c8d12c3afcc5ecd73d07ccec68520d5bc1729ec550e709419999bace9942950a6ae1653f8e6b9fc6d8a693244e2dcfd9d0cb600104ec9883024d3688ddc79f11270eb01c92972aba30d692ff4b2fdbdf7bf080658c9ff32902176bca43d0a2eff56bfa283f95dd7bc4ff66f63edafd106ea71b4b60a7c349a74b2b251017bc511c4f151b498c71b757bb9012e251c57a84663ef8033bd59b1768a025abd983393b115d522fa65ff00068db5349241e2416bf4f46fd379ac7e5db38406983d384f78c465205ad0f32863d613fb37b80f52c05610f3bdc004bde7f93449f1b11e4fb6061cb9bfb73b1f39a3ae6b3192b60d63cd18ae4a6321e86e62bf3c6ab31849f5e01fc43c89b540ad0c0a1e491844d88d8e14e024f5cec9972a6b2b6b4e134d4c830eb3bafa3838c815e6e5114ce38ae99312c94bd08452e6de1be49beefcd4bef52e5c615a64cb1f5eba71a98448647fdcf5530fb85654d791d28678cf87023084252b28023acf10320ccb7d505e6f0118f37ffa43fa33ea3a8147c437514a1c79875034789269a3ce6abc546455ea77def5b99bb2f3190c0bda753a2dcf0951794d08af8a1b718161576a0a9337fa784fde63f9cf7f77b21d1c8b6f686ed986befafde47d02d77065ab2f7849d10e3d7a7ac557e872d89835d1753c52624cc1dee61c476bf503a523156b90231bd6afa38f511a1994692a236b6247528f9777ac2ce3440f368f7a5ff0e258c14ffd6495b1a7f4ffc899a2db5b75051ac842917956169be94f7d9cd468f465593941eb48b4fed84f05d22f20296051ca67abeed89f0de9c6f4b901740160842b2ccbd76078c0ad32178b81f3911637e880d587438cb1b1dd3c36d1a66857a74e7bae2c1cd9339bbc2bc45acd2b90e4cdf6fc756501ea29f6a1749d2c8f6414b1c46df01c89d629bcb8c74d1c5c37365586d6c579982f2c376600722c009d72f8258e1167d21707d21a3cf83e15947429829eba1ac3c7c1c17bbf7e11710a2b307f594b4b65056a2917878a22c6bc9b3d5b960f8f3f139c736dee819964069193faa8a0a16f19d9911d7b8db78dd303c3b6dcfc74c679b71919aae6ef680da429a3eb9c6c1bf05cf07d84430e56891f8110b8b1c9b60c88e8182c7fc6d6833d147d88a8b26d13e690973766d12e5ab57398ff58080264b6035e4f85cd8b6b0317d7cb790786e9610baf632bb0a06c239c7512bbe734b54a5282b4979c01ea3e7cb11e53ac23a1b77096c3513cd1c395ca9bb8213ac0943dd3f4e3ea41a23cedd858e08f983e5dcaae498852b9112b53119673531e78eb309e87c815f78df5bb8ec9f6a3badca7e7829c4d9244b2795d0a0a56024682fa1932a13a7ef50992f4c29893a7bd8ace0bbbf565f9ff6935318c7a8bc2d2ab998e0c92cb45e4ef1b20f127d3750548cad68f8c79fa6c1eae3460ad5c21fdba0ea3e512aeece51188664bce2f1ccae8c0492680dbb7f36ac77613032a9a975a007d5fc7fdf9fe2dcec2e09f4e233c9f1df4fbb0b062513c12e59f513f678eceb47fdb944c5a8c3cce7dc15a4892e7591c7e5a7c8862f13fc2cd82af4f7795eadae8979b29b31c92f93d6389d9b86d9f29a502fc258fe30116f4f6cf5287b9b2bf9b06fe23a7ca31372cdf1c7700e63998d343a6140413a1f3f7458437c92e961814bf675b0c541995567fdd6de3dbdf162d481a19cbb70dc5ee4c54413a207c8e7513b97de40aac69c7c8a83662db8"}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xb3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4af0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x124, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80800000}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1684}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x34b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3d}]}]}, 0x1398}, 0x1, 0x0, 0x0, 0x48800}, 0x20008004) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000001740)=0x4, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001780), r4) pipe(&(0x7f00000017c0)={0xffffffffffffffff}) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f0000001800)={0x80}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000018c0)={'vlan0\x00', {0x2, 0x4e23, @multicast1}}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001940), r5) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8001003}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x68, r6, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1c0000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x100010, r7, 0x43345000) sendto$unix(r8, &(0x7f0000001ac0)="979aad0898bc79df469e82c7f9b45e01006710dadfa6c76c2bc9aa980ca905cde622e023376098c7abccf611121b4d3d4914e84f1c21eafcc74cc62db4af055c221de29dd13849553266c13fd34a7d0ce24eabac4548cc854600751023963fb7394959590a310e663377a31cce3028f53211ea8b1ab47d1b2d671dbb33afb6f5186dab301eab9f97ec10e3b63ee7248f4c8c51b2f48a8bd7eb2030ad9ce21180413ea3baa7f7d802d998298caa7ccf0a53cc6037bd8c4a2891ac5a014bbcbad7e7e8c7756357bd9e88819d51e490ab0e", 0xd0, 0x20008005, &(0x7f0000001bc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$IMSETDEVNAME(r5, 0x80184947, &(0x7f0000001c40)={0x6, 'syz1\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r5) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x14, r9, 0x2, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x48090) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001dc0)={0x0, r2}, 0x8) ioctl$EXT4_IOC_MIGRATE(r10, 0x6609) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000001e00)=0x67d) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000001e80)={0x0, @l2={0x1f, 0x4, @none, 0x5, 0x1}, @generic={0xa, "901e8446dcfdcb6d2900ff21c459"}, @vsock={0x28, 0x0, 0x0, @hyper}, 0xfffc, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001e40)='veth0_to_bond\x00', 0x5, 0x5, 0xef62}) ioctl$BTRFS_IOC_BALANCE_CTL(r7, 0x40049421, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001f00)={'veth0_to_bond\x00', 0x8000}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r10, 0xc400941d, &(0x7f0000001f40)={0x0, 0x1, 0x100}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000003740)={0x10, 0x1, {0x80000000, @usage=0x7ff, r11, 0xffffffffffffff2a, 0xa7d5, 0x0, 0x4, 0x8, 0x8, @struct={0x9, 0xfffffe00}, 0x5, 0x1, [0x80000001, 0x3ff, 0x3, 0x0, 0x4, 0x5]}, {0x7970, @usage=0x7, 0x0, 0x9, 0x8e, 0x7, 0x6c, 0x10000, 0x20, @usage=0x14, 0x9, 0x8, [0x1, 0xb2, 0xff, 0x8, 0x3ff, 0x1]}, {0x456, @struct={0x2, 0x100}, 0x0, 0x8, 0x576, 0xee, 0x6, 0x9, 0x40, @usage=0xff, 0x2, 0xffffffff, [0x6, 0x9, 0x4, 0x7, 0x8, 0x100000000]}, {0x100, 0x480000, 0x9e}}) kernel console output (not intermixed with test programs): ffffffffda RBX: 00007f421afe5fa0 RCX: 00007f421ad8f749 [ 127.278922][ T6983] RDX: 100000000000022b RSI: 00002000000009c0 RDI: 0000000000000003 [ 127.278936][ T6983] RBP: 00007f421bb8c090 R08: 0000000000000000 R09: 0000000000000000 [ 127.278949][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.278961][ T6983] R13: 00007f421afe6038 R14: 00007f421afe5fa0 R15: 00007ffeef522d78 [ 127.278999][ T6983] [ 127.704380][ T6974] bond2: option arp_missed_max: invalid value (0) [ 127.721293][ T6974] bond2: option arp_missed_max: allowed values 1 - 255 [ 127.763218][ T6974] bond2 (unregistering): Released all slaves [ 127.847962][ T6987] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 127.856506][ T6987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.385629][ T7050] netlink: 32 bytes leftover after parsing attributes in process `syz.3.270'. [ 129.793180][ T7057] netlink: 'syz.3.271': attribute type 3 has an invalid length. [ 129.818928][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 130.060261][ T7069] FAULT_INJECTION: forcing a failure. [ 130.060261][ T7069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.100014][ T7069] CPU: 0 UID: 0 PID: 7069 Comm: syz.4.276 Not tainted syzkaller #0 PREEMPT(full) [ 130.100041][ T7069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.100052][ T7069] Call Trace: [ 130.100059][ T7069] [ 130.100067][ T7069] dump_stack_lvl+0x189/0x250 [ 130.100099][ T7069] ? __pfx____ratelimit+0x10/0x10 [ 130.100120][ T7069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.100155][ T7069] ? __pfx__printk+0x10/0x10 [ 130.100174][ T7069] ? shmem_alloc_and_add_folio+0xca0/0xf40 [ 130.100205][ T7069] ? filemap_get_entry+0xad/0x2f0 [ 130.100219][ T7069] ? filemap_get_entry+0xad/0x2f0 [ 130.100237][ T7069] should_fail_ex+0x414/0x560 [ 130.100271][ T7069] copy_folio_from_iter_atomic+0x710/0x1910 [ 130.100294][ T7069] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 130.100342][ T7069] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 130.100378][ T7069] ? shmem_write_begin+0x15f/0x2b0 [ 130.100412][ T7069] generic_perform_write+0x5df/0x900 [ 130.100452][ T7069] ? __pfx_generic_perform_write+0x10/0x10 [ 130.100477][ T7069] ? do_raw_spin_unlock+0x122/0x240 [ 130.100507][ T7069] ? mnt_put_write_access_file+0xc0/0x100 [ 130.100535][ T7069] ? file_update_time+0x416/0x490 [ 130.100567][ T7069] shmem_file_write_iter+0xf8/0x120 [ 130.100602][ T7069] do_iter_readv_writev+0x623/0x8c0 [ 130.100642][ T7069] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 130.100672][ T7069] ? rcu_read_lock_any_held+0xb3/0x120 [ 130.100720][ T7069] vfs_writev+0x31a/0x960 [ 130.100749][ T7069] ? __lock_acquire+0xab9/0xd20 [ 130.100772][ T7069] ? __pfx_vfs_writev+0x10/0x10 [ 130.100815][ T7069] ? __fget_files+0x2a/0x420 [ 130.100840][ T7069] ? __fget_files+0x3a0/0x420 [ 130.100859][ T7069] ? __fget_files+0x2a/0x420 [ 130.100890][ T7069] do_writev+0x14d/0x2d0 [ 130.100916][ T7069] ? __pfx_do_writev+0x10/0x10 [ 130.100944][ T7069] ? do_syscall_64+0xbe/0xfa0 [ 130.100974][ T7069] do_syscall_64+0xfa/0xfa0 [ 130.100998][ T7069] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.101023][ T7069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.101045][ T7069] ? clear_bhb_loop+0x60/0xb0 [ 130.101071][ T7069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.101091][ T7069] RIP: 0033:0x7f421ad8f749 [ 130.101112][ T7069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.101138][ T7069] RSP: 002b:00007f421bb8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 130.101160][ T7069] RAX: ffffffffffffffda RBX: 00007f421afe5fa0 RCX: 00007f421ad8f749 [ 130.101176][ T7069] RDX: 100000000000022b RSI: 00002000000009c0 RDI: 0000000000000003 [ 130.101191][ T7069] RBP: 00007f421bb8c090 R08: 0000000000000000 R09: 0000000000000000 [ 130.101203][ T7069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.101216][ T7069] R13: 00007f421afe6038 R14: 00007f421afe5fa0 R15: 00007ffeef522d78 [ 130.101253][ T7069] [ 130.414235][ T7075] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.277'. [ 131.208608][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'. [ 131.229294][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 131.238934][ T7101] netlink: 'syz.0.288': attribute type 12 has an invalid length. [ 131.269879][ T7101] netlink: 'syz.0.288': attribute type 11 has an invalid length. [ 131.273204][ T7104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'. [ 131.594659][ T7113] netlink: 'syz.3.291': attribute type 1 has an invalid length. [ 131.821970][ T7114] bond1: (slave geneve2): making interface the new active one [ 131.870480][ T7114] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 131.903190][ T3518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 131.919491][ T3518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 131.949554][ T3518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 131.990379][ T3518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 132.047579][ T7138] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.081223][ T7138] IPv6: Can't replace route, no match found [ 132.341784][ T7149] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 132.515334][ T7155] netlink: 'syz.2.305': attribute type 4 has an invalid length. [ 132.526409][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 132.562995][ T7155] netlink: 'syz.2.305': attribute type 4 has an invalid length. [ 132.654053][ T7156] hsr_slave_1 (unregistering): left promiscuous mode [ 132.787683][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.795592][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.919939][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.939549][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.081295][ T6731] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.107316][ T6731] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.140284][ T6743] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.156313][ T6743] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.372574][ T7187] sctp: [Deprecated]: syz.0.309 (pid 7187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.372574][ T7187] Use struct sctp_sack_info instead [ 133.664452][ T7192] syzkaller0: entered promiscuous mode [ 133.673650][ T7192] syzkaller0: entered allmulticast mode [ 133.870563][ T1339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.087603][ T7211] netlink: 32 bytes leftover after parsing attributes in process `syz.4.323'. [ 134.187500][ T7211] tipc: Enabling of bearer rejected, failed to enable media [ 134.231345][ T7215] gretap1: entered allmulticast mode [ 134.605599][ T7225] xfrm0: entered promiscuous mode [ 134.632069][ T7225] xfrm0: entered allmulticast mode [ 135.361291][ T7253] syzkaller0: entered promiscuous mode [ 135.367099][ T7253] syzkaller0: entered allmulticast mode [ 135.433246][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 135.541779][ T7264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.335'. [ 135.726677][ T7262] bridge_slave_1: left allmulticast mode [ 135.760168][ T7262] bridge_slave_1: left promiscuous mode [ 135.773715][ T7262] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.790005][ T7262] bridge_slave_0: left allmulticast mode [ 135.807690][ T7262] bridge_slave_0: left promiscuous mode [ 135.821477][ T7262] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.313283][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.343'. [ 136.458002][ T7289] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.482259][ T7295] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 136.517496][ T7295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.551468][ T7295] bond2: (slave lo): Enslaving as an active interface with an up link [ 136.704871][ T7289] bond2 (unregistering): (slave lo): Releasing backup interface [ 136.714885][ T7289] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 136.729382][ T7289] bond2 (unregistering): Released all slaves [ 136.738819][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'. [ 136.754756][ T7303] netlink: 'syz.4.346': attribute type 4 has an invalid length. [ 137.003005][ T7316] netlink: 68 bytes leftover after parsing attributes in process `syz.0.350'. [ 137.270873][ T7324] netlink: 'syz.4.353': attribute type 10 has an invalid length. [ 137.284391][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'. [ 137.306871][ T7324] netlink: 2 bytes leftover after parsing attributes in process `syz.4.353'. [ 137.338027][ T7324] batadv_slave_1: entered promiscuous mode [ 137.346337][ T7324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.355589][ T7324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.369731][ T7324] bridge0: port 3(batadv_slave_1) entered blocking state [ 137.377794][ T7324] bridge0: port 3(batadv_slave_1) entered disabled state [ 137.380900][ T7331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.354'. [ 137.387421][ T7324] batadv_slave_1: entered allmulticast mode [ 137.412189][ T7324] bridge0: port 3(batadv_slave_1) entered blocking state [ 137.419873][ T7324] bridge0: port 3(batadv_slave_1) entered forwarding state [ 137.584624][ T7338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.356'. [ 137.628926][ T7338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.356'. [ 138.153684][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.169379][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.219507][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 138.396558][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'. [ 139.050226][ T7379] netlink: zone id is out of range [ 139.069990][ T7379] netlink: zone id is out of range [ 139.076319][ T7379] netlink: zone id is out of range [ 139.083950][ T7379] netlink: zone id is out of range [ 139.099578][ T7379] netlink: zone id is out of range [ 139.110569][ T7379] netlink: zone id is out of range [ 139.140557][ T7379] netlink: zone id is out of range [ 139.163416][ T7379] netlink: zone id is out of range [ 139.168889][ T7379] netlink: zone id is out of range [ 139.209992][ T7379] netlink: zone id is out of range [ 139.514297][ T7388] bond2: option tlb_dynamic_lb: invalid value (5) [ 139.569691][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.371'. [ 139.585016][ T7388] bond2 (unregistering): Released all slaves [ 139.854447][ T7403] netlink: 'syz.0.375': attribute type 1 has an invalid length. [ 139.856606][ T7405] netlink: 'syz.2.376': attribute type 3 has an invalid length. [ 140.901597][ T7445] netlink: 'syz.1.389': attribute type 4 has an invalid length. [ 141.229640][ T7453] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 141.264360][ T7453] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 141.267732][ T7457] Bluetooth: MGMT ver 1.23 [ 141.397852][ T7463] delete_channel: no stack [ 141.578909][ T7465] __nla_validate_parse: 1 callbacks suppressed [ 141.578929][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 141.601121][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 141.886997][ T7481] netlink: 56 bytes leftover after parsing attributes in process `syz.1.402'. [ 142.076310][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'. [ 142.151699][ T7491] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 142.639344][ T7511] netlink: 80 bytes leftover after parsing attributes in process `syz.0.410'. [ 143.222409][ T7528] xt_ipcomp: unknown flags 1D [ 143.250103][ T7527] netlink: 36 bytes leftover after parsing attributes in process `syz.0.412'. [ 143.457305][ T7533] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 143.466883][ T7533] bridge1: entered allmulticast mode [ 143.710339][ T7540] netlink: 68 bytes leftover after parsing attributes in process `syz.0.415'. [ 144.064929][ T7540] bond2: Unable to set down delay as MII monitoring is disabled [ 144.117346][ T7540] bond2 (unregistering): Released all slaves [ 144.515936][ T7559] net_ratelimit: 36 callbacks suppressed [ 144.515960][ T7559] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 144.988814][ T7566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.421'. [ 145.098032][ T7570] netlink: 'syz.2.422': attribute type 4 has an invalid length. [ 145.472731][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 145.485680][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 145.507496][ T7585] erspan0: entered promiscuous mode [ 145.516292][ T7585] erspan0: left promiscuous mode [ 146.395351][ T7616] netlink: 'syz.1.436': attribute type 2 has an invalid length. [ 146.556150][ T7622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.982041][ T7633] macvtap1: entered promiscuous mode [ 147.001113][ T7633] macvtap1: entered allmulticast mode [ 147.007341][ T7633] dummy0: entered allmulticast mode [ 147.049364][ T7633] dummy0: entered promiscuous mode [ 147.061070][ T7633] team0: Device macvtap1 failed to register rx_handler [ 147.100773][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.170621][ T7633] dummy0: left allmulticast mode [ 147.176031][ T7633] dummy0: left promiscuous mode [ 147.424421][ T7639] __nla_validate_parse: 1 callbacks suppressed [ 147.424442][ T7639] netlink: 14 bytes leftover after parsing attributes in process `syz.4.441'. [ 148.397900][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.448'. [ 148.495422][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.448'. [ 148.756346][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 148.793839][ T7686] sctp: [Deprecated]: syz.1.452 (pid 7686) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.793839][ T7686] Use struct sctp_sack_info instead [ 148.904832][ T7689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.046682][ T7692] netlink: 'syz.0.456': attribute type 3 has an invalid length. [ 149.071901][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 149.214757][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 149.235973][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 149.265637][ T7698] netlink: 'syz.3.458': attribute type 12 has an invalid length. [ 149.274062][ T7698] netlink: 'syz.3.458': attribute type 11 has an invalid length. [ 149.578929][ T7709] syzkaller0: entered promiscuous mode [ 149.593602][ T7709] syzkaller0: entered allmulticast mode [ 149.635552][ T7709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.460'. [ 149.780302][ T7707] tipc: Enabled bearer , priority 0 [ 149.811005][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'. [ 149.858555][ T7707] tipc: Enabling of bearer rejected, failed to enable media [ 149.886241][ T7704] tipc: Resetting bearer [ 151.653214][ T7704] tipc: Disabling bearer [ 151.672291][ T7722] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 151.686118][ T7722] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 151.694529][ T5872] tipc: Node number set to 456826817 [ 152.132373][ T7765] sctp: [Deprecated]: syz.4.472 (pid 7765) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.132373][ T7765] Use struct sctp_sack_info instead [ 152.213775][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.0.477'. [ 152.377218][ T7769] netlink: 'syz.1.479': attribute type 10 has an invalid length. [ 152.446525][ T7773] __nla_validate_parse: 2 callbacks suppressed [ 152.446559][ T7773] netlink: 16 bytes leftover after parsing attributes in process `syz.0.480'. [ 153.057793][ T7803] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.488'. [ 153.091896][ T7805] IPVS: set_ctl: invalid protocol: 8 172.20.20.59:20004 [ 153.102171][ T7806] IPVS: set_ctl: invalid protocol: 8 172.20.20.59:20004 [ 153.379380][ T7818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.492'. [ 153.511426][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 153.949903][ T7836] sctp: [Deprecated]: syz.1.495 (pid 7836) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.949903][ T7836] Use struct sctp_sack_info instead [ 154.110004][ T7838] netlink: 64 bytes leftover after parsing attributes in process `syz.4.496'. [ 154.335786][ T1147] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 154.756020][ T7860] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 154.800732][ T7860] veth9: entered promiscuous mode [ 155.386836][ T7871] syzkaller0: entered promiscuous mode [ 155.401963][ T7871] syzkaller0: entered allmulticast mode [ 155.464619][ T7871] tipc: Enabled bearer , priority 0 [ 155.480405][ T7869] tipc: Resetting bearer [ 155.528544][ T7869] tipc: Disabling bearer [ 155.970298][ T7897] sctp: [Deprecated]: syz.4.511 (pid 7897) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.970298][ T7897] Use struct sctp_sack_info instead [ 156.151033][ T7902] Illegal XDP return value 514 on prog (id 207) dev syzkaller1, expect packet loss! [ 156.334775][ T7908] netlink: 192 bytes leftover after parsing attributes in process `syz.0.514'. [ 156.474101][ T5836] IPVS: starting estimator thread 0... [ 156.483021][ T7912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.569424][ T7915] IPVS: using max 25 ests per chain, 60000 per kthread [ 156.797513][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 156.837266][ T7930] netlink: 36 bytes leftover after parsing attributes in process `syz.3.518'. [ 156.996870][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 157.048252][ T7918] vxcan1: entered allmulticast mode [ 157.206912][ T7943] geneve3: entered promiscuous mode [ 157.294780][ T1147] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.314478][ T1147] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.385092][ T1147] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.398075][ T1147] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.036803][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 158.100644][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 158.218517][ T7973] syzkaller1: entered promiscuous mode [ 158.232813][ T7973] syzkaller1: entered allmulticast mode [ 158.486736][ T7977] netlink: 'syz.1.533': attribute type 8 has an invalid length. [ 158.754818][ T7984] netlink: 'syz.1.534': attribute type 29 has an invalid length. [ 158.792592][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 159.164343][ T7992] netlink: 96 bytes leftover after parsing attributes in process `syz.2.538'. [ 159.449112][ T8004] syzkaller0: entered promiscuous mode [ 159.457883][ T8004] syzkaller0: entered allmulticast mode [ 159.743515][ T8012] netlink: 44 bytes leftover after parsing attributes in process `syz.2.545'. [ 159.937724][ T8018] netlink: 132 bytes leftover after parsing attributes in process `syz.2.548'. [ 160.464820][ T8032] sctp: [Deprecated]: syz.2.550 (pid 8032) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.464820][ T8032] Use struct sctp_sack_info instead [ 160.557753][ T8033] netlink: 208912 bytes leftover after parsing attributes in process `syz.3.551'. [ 160.760013][ T8036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.552'. [ 161.415882][ T8053] bridge2: entered promiscuous mode [ 161.499630][ T8057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.559'. [ 161.811010][ T8074] netlink: 'syz.3.560': attribute type 13 has an invalid length. [ 161.901645][ T8069] bond2: option arp_validate: invalid value (18446744073491447809) [ 161.924799][ T8069] bond2 (unregistering): Released all slaves [ 162.324409][ T6739] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 162.363397][ T6739] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 162.389084][ T6739] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 162.424577][ T6739] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 162.781730][ T8097] can: request_module (can-proto-4) failed. [ 163.156872][ T8120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.574'. [ 163.199884][ T8120] FAULT_INJECTION: forcing a failure. [ 163.199884][ T8120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.247459][ T8120] CPU: 1 UID: 0 PID: 8120 Comm: syz.0.574 Not tainted syzkaller #0 PREEMPT(full) [ 163.247488][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.247501][ T8120] Call Trace: [ 163.247510][ T8120] [ 163.247519][ T8120] dump_stack_lvl+0x189/0x250 [ 163.247556][ T8120] ? __pfx____ratelimit+0x10/0x10 [ 163.247581][ T8120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.247609][ T8120] ? __pfx__printk+0x10/0x10 [ 163.247632][ T8120] ? __might_fault+0xb0/0x130 [ 163.247676][ T8120] should_fail_ex+0x414/0x560 [ 163.247716][ T8120] _copy_from_user+0x2d/0xb0 [ 163.247746][ T8120] kstrtouint_from_user+0xc4/0x170 [ 163.247772][ T8120] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 163.247814][ T8120] proc_fail_nth_write+0x88/0x200 [ 163.247843][ T8120] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 163.247878][ T8120] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 163.247913][ T8120] vfs_write+0x27e/0xb30 [ 163.247955][ T8120] ? __pfx_vfs_write+0x10/0x10 [ 163.247987][ T8120] ? __fget_files+0x2a/0x420 [ 163.248013][ T8120] ? __fget_files+0x3a0/0x420 [ 163.248032][ T8120] ? __fget_files+0x2a/0x420 [ 163.248063][ T8120] ksys_write+0x145/0x250 [ 163.248097][ T8120] ? __pfx_ksys_write+0x10/0x10 [ 163.248132][ T8120] ? do_syscall_64+0xbe/0xfa0 [ 163.248163][ T8120] do_syscall_64+0xfa/0xfa0 [ 163.248187][ T8120] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.248212][ T8120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.248233][ T8120] ? clear_bhb_loop+0x60/0xb0 [ 163.248259][ T8120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.248279][ T8120] RIP: 0033:0x7ffafdd8e1ff [ 163.248297][ T8120] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 163.248315][ T8120] RSP: 002b:00007ffafebab030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 163.248338][ T8120] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffafdd8e1ff [ 163.248352][ T8120] RDX: 0000000000000001 RSI: 00007ffafebab0a0 RDI: 0000000000000004 [ 163.248365][ T8120] RBP: 00007ffafebab090 R08: 0000000000000000 R09: 0000000000000000 [ 163.248378][ T8120] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 163.248390][ T8120] R13: 00007ffafdfe6038 R14: 00007ffafdfe5fa0 R15: 00007ffdfbbbbf88 [ 163.248435][ T8120] [ 163.582023][ T8128] batadv_slave_1: entered promiscuous mode [ 163.604498][ T8127] batadv_slave_1: left promiscuous mode [ 163.629495][ T6006] IPVS: starting estimator thread 0... [ 163.656640][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 163.676191][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 163.694707][ T8135] tipc: Can't bind to reserved service type 1 [ 163.708150][ T8126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.576'. [ 163.721785][ T8131] IPVS: using max 25 ests per chain, 60000 per kthread [ 164.281359][ T8165] netlink: 'syz.2.586': attribute type 1 has an invalid length. [ 164.289677][ T8165] netlink: 224 bytes leftover after parsing attributes in process `syz.2.586'. [ 164.523371][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'. [ 164.729311][ T8181] netlink: 76 bytes leftover after parsing attributes in process `syz.3.591'. [ 164.829470][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'. [ 165.091328][ T8194] netlink: 48 bytes leftover after parsing attributes in process `syz.2.592'. [ 165.093446][ T8206] netlink: 20 bytes leftover after parsing attributes in process `syz.3.597'. [ 165.290944][ T8203] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.433473][ T8203] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.582683][ T8217] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 165.635016][ T8217] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 165.649525][ T8203] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.065399][ T8203] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.399294][ T1147] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.520136][ T1147] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.548047][ T8253] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 166.595934][ T1339] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.654870][ T1339] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.763493][ T8256] batadv_slave_0: entered promiscuous mode [ 166.871240][ T8260] : entered promiscuous mode [ 167.298435][ T8282] nbd0: detected capacity change from 0 to 1249902592 [ 167.361027][ T8284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.420309][ T5834] block nbd0: Receive control failed (result -104) [ 167.516761][ T8291] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 167.636659][ T8301] @ÿ: renamed from hsr0 [ 167.693599][ T8300] netlink: 'syz.3.622': attribute type 13 has an invalid length. [ 167.720401][ T8300] netlink: 'syz.3.622': attribute type 17 has an invalid length. [ 167.730849][ T8305] Cannot find set identified by id 1 to match [ 168.443911][ T8338] __nla_validate_parse: 11 callbacks suppressed [ 168.443935][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'. [ 168.461837][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'. [ 168.597208][ T8344] xt_CT: No such helper "syz0" [ 168.612166][ T8345] xt_CT: No such helper "syz0" [ 169.330678][ T8383] netlink: 'syz.3.647': attribute type 13 has an invalid length. [ 169.348882][ T8383] netlink: 'syz.3.647': attribute type 17 has an invalid length. [ 169.574710][ T8383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.607847][ T8383] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.704611][ T8383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.587345][ T8419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.658'. [ 170.612032][ T8423] netlink: 224 bytes leftover after parsing attributes in process `syz.4.659'. [ 170.659612][ T8423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.659'. [ 170.777717][ T8429] netlink: 'syz.2.658': attribute type 13 has an invalid length. [ 171.072108][ T8437] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 171.141764][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 171.496933][ T8460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.669'. [ 171.646383][ T8467] netlink: 48 bytes leftover after parsing attributes in process `syz.3.671'. [ 171.705642][ T8469] tipc: Enabled bearer , priority 0 [ 171.717133][ T8469] syzkaller0: entered promiscuous mode [ 171.724079][ T8469] syzkaller0: entered allmulticast mode [ 171.917854][ T8469] tipc: Resetting bearer [ 171.939020][ T8468] tipc: Resetting bearer [ 171.956052][ T8468] tipc: Disabling bearer [ 172.330358][ T8511] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20002 [ 172.483116][ T8516] netlink: 296 bytes leftover after parsing attributes in process `syz.3.687'. [ 173.115244][ T8555] netlink: 'syz.2.697': attribute type 12 has an invalid length. [ 173.151261][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.699'. [ 173.167044][ T8562] netlink: 'syz.3.698': attribute type 11 has an invalid length. [ 174.299548][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 177.612856][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 177.626624][ T8571] netlink: 'syz.2.702': attribute type 1 has an invalid length. [ 177.636910][ T8572] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.640515][ T8574] netlink: 'syz.0.700': attribute type 1 has an invalid length. [ 177.656484][ T8574] netlink: 224 bytes leftover after parsing attributes in process `syz.0.700'. [ 177.693442][ T8571] bond2: entered promiscuous mode [ 177.699629][ T8571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.745154][ T8577] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.754003][ T8577] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 177.781021][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 177.810435][ T8577] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 177.843313][ T8582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'. [ 177.845694][ T8577] bond2: (slave gre1): Opening slave failed [ 178.349959][ T8603] bond3: Removing last arp target with arp_interval on [ 178.363179][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 178.451062][ T8611] sctp: [Deprecated]: syz.3.713 (pid 8611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.451062][ T8611] Use struct sctp_sack_info instead [ 178.720364][ T8623] netlink: 'syz.1.717': attribute type 7 has an invalid length. [ 178.818424][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.718'. [ 178.979793][ T8637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.718'. [ 180.158520][ T8660] svc: failed to register nfsdv3 RPC service (errno 111). [ 180.183357][ T8660] svc: failed to register nfsaclv3 RPC service (errno 111). [ 181.050852][ T8679] syzkaller1: entered promiscuous mode [ 181.056383][ T8679] syzkaller1: entered allmulticast mode [ 181.197967][ T8686] sctp: [Deprecated]: syz.4.732 (pid 8686) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.197967][ T8686] Use struct sctp_sack_info instead [ 181.809026][ T8714] netlink: 424 bytes leftover after parsing attributes in process `syz.1.744'. [ 182.074498][ T8730] netlink: 64 bytes leftover after parsing attributes in process `syz.4.748'. [ 182.602351][ T8747] tipc: Enabled bearer , priority 0 [ 182.632832][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'. [ 182.660049][ T8747] tipc: Resetting bearer [ 182.840908][ T8716] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 182.915289][ T8747] tipc: Disabling bearer [ 183.053979][ T8758] sctp: [Deprecated]: syz.2.758 (pid 8758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.053979][ T8758] Use struct sctp_sack_info instead [ 183.151938][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.759'. [ 183.183809][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.759'. [ 183.468049][ T8783] bridge_slave_1: left allmulticast mode [ 183.480548][ T8783] bridge_slave_1: left promiscuous mode [ 183.487056][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.502564][ T8783] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 183.531244][ T8791] netlink: 'syz.2.765': attribute type 1 has an invalid length. [ 183.539679][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 183.553522][ T8791] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 183.563209][ T8785] veth0: entered promiscuous mode [ 183.749703][ T8786] veth0: left promiscuous mode [ 183.782601][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 183.896941][ T8811] batadv0: mtu less than device minimum [ 183.917512][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.770'. [ 184.228707][ T8801] netlink: 'syz.4.770': attribute type 11 has an invalid length. [ 184.411658][ T8827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.646379][ T8834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.844699][ T8856] netlink: 20 bytes leftover after parsing attributes in process `syz.0.783'. [ 185.373074][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 185.487006][ T8879] netlink: 'syz.1.787': attribute type 6 has an invalid length. [ 185.632554][ T8882] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 185.831788][ T8888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.790'. [ 185.858889][ T8890] sctp: [Deprecated]: syz.0.789 (pid 8890) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.858889][ T8890] Use struct sctp_sack_info instead [ 186.421346][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.799'. [ 186.545726][ T8932] sctp: [Deprecated]: syz.1.803 (pid 8932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.545726][ T8932] Use struct sctp_sack_info instead [ 187.020715][ T8950] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 187.042966][ T8951] netlink: 'syz.1.807': attribute type 13 has an invalid length. [ 187.067656][ T8951] netlink: 'syz.1.807': attribute type 17 has an invalid length. [ 187.075653][ T8951] netlink: 'syz.1.807': attribute type 27 has an invalid length. [ 187.243783][ T8967] netlink: 'syz.1.814': attribute type 5 has an invalid length. [ 187.283238][ T8971] sctp: [Deprecated]: syz.2.813 (pid 8971) Use of int in max_burst socket option. [ 187.283238][ T8971] Use struct sctp_assoc_value instead [ 187.750503][ T8986] netlink: 'syz.0.819': attribute type 4 has an invalid length. [ 188.571387][ T9001] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 188.599543][ T9001] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 188.652836][ T9006] __nla_validate_parse: 5 callbacks suppressed [ 188.652859][ T9006] netlink: 1084 bytes leftover after parsing attributes in process `syz.4.824'. [ 188.962544][ T9019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.828'. [ 189.124974][ T9023] netlink: 'syz.0.830': attribute type 4 has an invalid length. [ 189.134961][ T9025] openvswitch: netlink: IP tunnel dst address not specified [ 189.463179][ T9048] Cannot find add_set index 1 as target [ 189.505469][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.837'. [ 189.543708][ T9051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.837'. [ 189.561251][ T9051] bridge3: port 1(veth0_to_bond) entered blocking state [ 189.570246][ T9055] FAULT_INJECTION: forcing a failure. [ 189.570246][ T9055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.583568][ T9051] bridge3: port 1(veth0_to_bond) entered disabled state [ 189.584494][ T9051] veth0_to_bond: entered allmulticast mode [ 189.591465][ T9055] CPU: 1 UID: 0 PID: 9055 Comm: syz.0.840 Not tainted syzkaller #0 PREEMPT(full) [ 189.591495][ T9055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.591510][ T9055] Call Trace: [ 189.591523][ T9055] [ 189.591534][ T9055] dump_stack_lvl+0x189/0x250 [ 189.591588][ T9055] ? __pfx____ratelimit+0x10/0x10 [ 189.591618][ T9055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.591649][ T9055] ? __pfx__printk+0x10/0x10 [ 189.591674][ T9055] ? __might_fault+0xb0/0x130 [ 189.591722][ T9055] should_fail_ex+0x414/0x560 [ 189.591766][ T9055] _copy_from_iter+0x1de/0x1790 [ 189.591793][ T9055] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 189.591828][ T9055] ? kmalloc_reserve+0xbd/0x290 [ 189.591872][ T9055] ? __pfx__copy_from_iter+0x10/0x10 [ 189.591897][ T9055] ? __alloc_skb+0x2f1/0x430 [ 189.591935][ T9055] ? __pfx___alloc_skb+0x10/0x10 [ 189.591964][ T9055] ? netlink_sendmsg+0x642/0xb30 [ 189.591993][ T9055] ? skb_put+0x11b/0x210 [ 189.592026][ T9055] netlink_sendmsg+0x6b2/0xb30 [ 189.592067][ T9055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.592103][ T9055] ? aa_sock_msg_perm+0xf1/0x1d0 [ 189.592142][ T9055] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 189.592166][ T9055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.592198][ T9055] __sock_sendmsg+0x21c/0x270 [ 189.592239][ T9055] ____sys_sendmsg+0x505/0x830 [ 189.592276][ T9055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.592316][ T9055] ? import_iovec+0x74/0xa0 [ 189.592351][ T9055] ___sys_sendmsg+0x21f/0x2a0 [ 189.592390][ T9055] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.592463][ T9055] ? __fget_files+0x2a/0x420 [ 189.592484][ T9055] ? __fget_files+0x3a0/0x420 [ 189.592520][ T9055] __x64_sys_sendmsg+0x19b/0x260 [ 189.592554][ T9055] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.592596][ T9055] ? __pfx_ksys_write+0x10/0x10 [ 189.592637][ T9055] ? do_syscall_64+0xbe/0xfa0 [ 189.592679][ T9055] do_syscall_64+0xfa/0xfa0 [ 189.592707][ T9055] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.592735][ T9055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.592760][ T9055] ? clear_bhb_loop+0x60/0xb0 [ 189.592789][ T9055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.592814][ T9055] RIP: 0033:0x7ffafdd8f749 [ 189.592853][ T9055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.592875][ T9055] RSP: 002b:00007ffafebab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.592915][ T9055] RAX: ffffffffffffffda RBX: 00007ffafdfe5fa0 RCX: 00007ffafdd8f749 [ 189.592933][ T9055] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 189.592950][ T9055] RBP: 00007ffafebab090 R08: 0000000000000000 R09: 0000000000000000 [ 189.592963][ T9055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.592978][ T9055] R13: 00007ffafdfe6038 R14: 00007ffafdfe5fa0 R15: 00007ffdfbbbbf88 [ 189.593017][ T9055] [ 189.889445][ T9051] veth0_to_bond: entered promiscuous mode [ 190.873242][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.853'. [ 190.883172][ T9075] netlink: 40 bytes leftover after parsing attributes in process `syz.1.845'. [ 190.990686][ T9111] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.062345][ T9120] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 191.073370][ T9119] netlink: 'syz.0.856': attribute type 8 has an invalid length. [ 191.102916][ T9120] netlink: 'syz.3.857': attribute type 10 has an invalid length. [ 191.117187][ T9119] sch_fq: defrate 0 ignored. [ 191.201582][ T9120] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 191.335707][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'. [ 191.404729][ T9139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.423097][ T9135] batman_adv: batadv0: Adding interface: ipvlan2 [ 191.432705][ T9135] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.460128][ T9142] IPv6: Can't replace route, no match found [ 191.484207][ T9135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.497582][ T9135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.509935][ T9135] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 191.923903][ T9153] tipc: Enabled bearer , priority 0 [ 191.932726][ T9155] syzkaller0: entered promiscuous mode [ 191.938412][ T9155] syzkaller0: entered allmulticast mode [ 191.947297][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 191.967522][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 192.020944][ T9165] tipc: Resetting bearer [ 192.152266][ T9145] tipc: Resetting bearer [ 192.183652][ T9145] tipc: Disabling bearer [ 192.738869][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 193.377728][ T9211] syzkaller1: entered promiscuous mode [ 193.383914][ T9211] syzkaller1: entered allmulticast mode [ 193.542465][ T9219] netlink: 'syz.3.887': attribute type 11 has an invalid length. [ 193.563113][ T9213] syzkaller0: entered promiscuous mode [ 193.568868][ T9213] syzkaller0: entered allmulticast mode [ 193.744759][ T9226] netlink: 'syz.0.889': attribute type 1 has an invalid length. [ 195.713180][ T9226] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 195.781833][ T9229] vlan2: entered allmulticast mode [ 195.809489][ T9229] veth1: entered allmulticast mode [ 195.834337][ T9272] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.948850][ T9274] netlink: 'syz.0.896': attribute type 9 has an invalid length. [ 196.171658][ T9286] __nla_validate_parse: 1 callbacks suppressed [ 196.171682][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'. [ 196.232172][ T9286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.603039][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 196.678049][ T9287] netlink: 'syz.1.898': attribute type 22 has an invalid length. [ 196.801842][ T5834] Bluetooth: hci4: link tx timeout [ 196.808558][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.831715][ T5841] Bluetooth: hci4: link tx timeout [ 196.837071][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.845948][ T5841] Bluetooth: hci4: link tx timeout [ 196.851441][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.860012][ T5841] Bluetooth: hci4: link tx timeout [ 196.865317][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.891498][ T9303] netlink: 'syz.3.904': attribute type 4 has an invalid length. [ 196.913367][ T5841] Bluetooth: hci4: link tx timeout [ 196.923394][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.931460][ T5841] Bluetooth: hci4: link tx timeout [ 196.936961][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.034558][ T9306] xt_hashlimit: invalid rate [ 197.663887][ T56] block nbd0: Possible stuck request ffff88802534e000: control (read@0,4096B). Runtime 30 seconds [ 197.856705][ T9351] netlink: 388 bytes leftover after parsing attributes in process `syz.0.917'. [ 198.033482][ T9356] syzkaller0: entered promiscuous mode [ 198.039451][ T9356] syzkaller0: entered allmulticast mode [ 198.265191][ T9371] netlink: 'syz.4.924': attribute type 2 has an invalid length. [ 198.278491][ T9371] netlink: 'syz.4.924': attribute type 9 has an invalid length. [ 198.288644][ T9371] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.924'. [ 198.383023][ T9376] IPVS: length: 139 != 8 [ 198.426754][ T9378] netlink: 40 bytes leftover after parsing attributes in process `syz.4.926'. [ 198.779549][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 198.812554][ T9399] netlink: 'syz.0.933': attribute type 10 has an invalid length. [ 198.836854][ T9399] team0: Cannot enslave team device to itself [ 199.310833][ T9425] netlink: 40 bytes leftover after parsing attributes in process `syz.1.939'. [ 199.364710][ T9431] netlink: 'syz.4.941': attribute type 4 has an invalid length. [ 199.575140][ T9432] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 199.611358][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.926455][ T9446] netlink: 'syz.4.945': attribute type 10 has an invalid length. [ 200.476188][ T9479] netlink: 'syz.3.955': attribute type 4 has an invalid length. [ 200.517582][ T9482] netlink: 'syz.4.956': attribute type 12 has an invalid length. [ 200.535710][ T9482] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.956'. [ 200.859801][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 200.981660][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 201.031100][ T9503] : entered promiscuous mode [ 201.041899][ T9503] netlink: 'syz.4.961': attribute type 1 has an invalid length. [ 201.082663][ T9503] bond1: entered promiscuous mode [ 201.101284][ T9503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.166221][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'. [ 201.260225][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.961'. [ 201.351683][ T9513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.377701][ T9513] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 201.398887][ T9513] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 201.451742][ T9513] bond1: (slave gre1): Opening slave failed [ 201.482834][ T9514] wg1: entered promiscuous mode [ 201.488531][ T9514] wg1: entered allmulticast mode [ 202.094559][ T9538] FAULT_INJECTION: forcing a failure. [ 202.094559][ T9538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.132986][ T9537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.970'. [ 202.153816][ T9538] CPU: 1 UID: 0 PID: 9538 Comm: syz.0.969 Not tainted syzkaller #0 PREEMPT(full) [ 202.153848][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.153861][ T9538] Call Trace: [ 202.153869][ T9538] [ 202.153878][ T9538] dump_stack_lvl+0x189/0x250 [ 202.153914][ T9538] ? __pfx____ratelimit+0x10/0x10 [ 202.153939][ T9538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.153968][ T9538] ? __pfx__printk+0x10/0x10 [ 202.153995][ T9538] ? __might_fault+0xb0/0x130 [ 202.154038][ T9538] should_fail_ex+0x414/0x560 [ 202.154077][ T9538] _copy_from_user+0x2d/0xb0 [ 202.154106][ T9538] __sys_bpf+0x1e3/0x860 [ 202.154130][ T9538] ? __pfx___sys_bpf+0x10/0x10 [ 202.154169][ T9538] ? ksys_write+0x22a/0x250 [ 202.154203][ T9538] ? __pfx_ksys_write+0x10/0x10 [ 202.154240][ T9538] __x64_sys_bpf+0x7c/0x90 [ 202.154273][ T9538] do_syscall_64+0xfa/0xfa0 [ 202.154297][ T9538] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.154322][ T9538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.154343][ T9538] ? clear_bhb_loop+0x60/0xb0 [ 202.154369][ T9538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.154389][ T9538] RIP: 0033:0x7ffafdd8f749 [ 202.154408][ T9538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.154425][ T9538] RSP: 002b:00007ffafebab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.154448][ T9538] RAX: ffffffffffffffda RBX: 00007ffafdfe5fa0 RCX: 00007ffafdd8f749 [ 202.154463][ T9538] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 202.154476][ T9538] RBP: 00007ffafebab090 R08: 0000000000000000 R09: 0000000000000000 [ 202.154489][ T9538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.154501][ T9538] R13: 00007ffafdfe6038 R14: 00007ffafdfe5fa0 R15: 00007ffdfbbbbf88 [ 202.154537][ T9538] [ 202.169348][ T9541] netlink: 128 bytes leftover after parsing attributes in process `syz.2.971'. [ 202.311171][ T9546] netlink: 'syz.0.974': attribute type 21 has an invalid length. [ 202.391731][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.419014][ T9551] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 202.429799][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.500047][ T9546] netlink: 128 bytes leftover after parsing attributes in process `syz.0.974'. [ 202.511942][ T9541] syz.2.971 (9541) used greatest stack depth: 16056 bytes left [ 202.555877][ T9546] netlink: 'syz.0.974': attribute type 5 has an invalid length. [ 202.627753][ T9546] netlink: 'syz.0.974': attribute type 6 has an invalid length. [ 202.635768][ T9546] netlink: 3 bytes leftover after parsing attributes in process `syz.0.974'. [ 202.794337][ T9570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.979'. [ 202.825548][ T9580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.982'. [ 202.984587][ T9578] netlink: 'syz.1.980': attribute type 1 has an invalid length. [ 203.045002][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'. [ 203.067746][ T9578] bond1: entered promiscuous mode [ 203.073520][ T9578] bond1: entered allmulticast mode [ 203.080126][ T9578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.108347][ T9598] netlink: 'syz.4.987': attribute type 1 has an invalid length. [ 203.138340][ T9598] netlink: 'syz.4.987': attribute type 3 has an invalid length. [ 203.158344][ T9598] netlink: 224 bytes leftover after parsing attributes in process `syz.4.987'. [ 203.186754][ T9602] netlink: 'syz.4.987': attribute type 10 has an invalid length. [ 203.251919][ T9602] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 203.494603][ T9620] netlink: 'syz.4.992': attribute type 27 has an invalid length. [ 203.527948][ T9622] netlink: 40 bytes leftover after parsing attributes in process `syz.0.995'. [ 204.080053][ T9639] netlink: 'syz.0.999': attribute type 4 has an invalid length. [ 205.262665][ T9685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.840177][ T9718] pimreg: entered allmulticast mode [ 205.858753][ T9718] pimreg: left allmulticast mode [ 205.928018][ T9725] tipc: Enabling of bearer rejected, failed to enable media [ 206.234271][ T9735] validate_nla: 2 callbacks suppressed [ 206.234293][ T9735] netlink: 'syz.4.1027': attribute type 3 has an invalid length. [ 206.280447][ T9735] netlink: 'syz.4.1027': attribute type 1 has an invalid length. [ 206.483750][ T9756] __nla_validate_parse: 3 callbacks suppressed [ 206.483770][ T9756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1034'. [ 206.861903][ T30] audit: type=1800 audit(1764341613.468:4): pid=9778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1042" name="memory.events" dev="tmpfs" ino=1032 res=0 errno=0 [ 206.892133][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 206.911656][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 206.919491][ T9778] netlink: 'syz.3.1042': attribute type 1 has an invalid length. [ 206.953035][ T9782] vlan0: entered promiscuous mode [ 206.958383][ T9782] ip6gretap0: entered promiscuous mode [ 206.973867][ T9778] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1042'. [ 207.264389][ T9797] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1050'. [ 207.289263][ T9797] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1050'. [ 207.326928][ T9801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1050'. [ 207.349707][ T9801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1050'. [ 208.026682][ T9837] bond2: option fail_over_mac: invalid value (127) [ 208.036527][ T9837] bond2 (unregistering): Released all slaves [ 208.071061][ T9838] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1060'. [ 208.109781][ T9842] geneve2: entered promiscuous mode [ 208.139733][ T1147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.153340][ T1147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.182501][ T1147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.202792][ T1147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.340709][ T9853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1065'. [ 208.371685][ T9854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.955258][ T9889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.262539][ T9907] tipc: Invalid UDP bearer configuration [ 209.262599][ T9907] tipc: Enabling of bearer rejected, failed to enable media [ 210.117512][ T9938] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 210.168808][ T9941] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 210.190075][ T9941] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 210.210983][ T9938] tap0: tun_chr_ioctl cmd 1074025677 [ 210.216825][ T9938] tap0: linktype set to 825 [ 210.498392][ T9958] Cannot find add_set index 0 as target [ 210.556581][ T9958] netlink: 'syz.2.1096': attribute type 7 has an invalid length. [ 210.567281][ T9958] netlink: 'syz.2.1096': attribute type 8 has an invalid length. [ 210.596603][ T9958] dummy0: entered promiscuous mode [ 210.613145][ T9958] team0: entered promiscuous mode [ 210.650483][ T9958] team_slave_0: entered promiscuous mode [ 210.656542][ T9958] team_slave_1: entered promiscuous mode [ 210.677004][ T9958] dummy0: left promiscuous mode [ 210.687687][ T9958] team0: left promiscuous mode [ 210.709686][ T9958] team_slave_0: left promiscuous mode [ 210.715396][ T9958] team_slave_1: left promiscuous mode [ 211.001635][ T9979] block nbd1: server does not support multiple connections per device. [ 211.028296][ T9979] block nbd1: shutting down sockets [ 211.085447][ T9990] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ï€ãßf> â$¹4Ø)·”=,Ä ]ô‚3DûLÌ [ 211.680590][T10011] Bluetooth: MGMT ver 1.23 [ 212.138275][T10029] netlink: 'syz.1.1116': attribute type 1 has an invalid length. [ 212.215018][T10034] __nla_validate_parse: 27 callbacks suppressed [ 212.215037][T10034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1116'. [ 212.309383][T10029] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.368886][T10034] bond2: entered promiscuous mode [ 212.379355][T10034] bond2: entered allmulticast mode [ 212.466096][T10041] bridge0: entered promiscuous mode [ 212.514686][T10029] bond2: (slave dummy0): making interface the new active one [ 212.546145][T10029] dummy0: entered promiscuous mode [ 212.556488][T10029] dummy0: entered allmulticast mode [ 212.573243][T10029] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 213.396237][T10034] bond2 (unregistering): (slave dummy0): Releasing active interface [ 213.404698][T10034] dummy0: left promiscuous mode [ 213.410031][T10034] dummy0: left allmulticast mode [ 213.418422][T10034] bond2 (unregistering): Released all slaves [ 213.439290][T10051] netlink: 1076 bytes leftover after parsing attributes in process `syz.3.1122'. [ 213.448957][T10051] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 213.683684][T10061] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.775985][T10061] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.865969][T10073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1129'. [ 213.928397][T10061] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.999653][T10061] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.086751][ T6731] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.131913][ T6731] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.180288][ T6731] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.190897][T10087] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1134'. [ 214.200065][ T6731] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.522899][T10101] netlink: 'syz.0.1140': attribute type 1 has an invalid length. [ 214.550240][T10101] netlink: 'syz.0.1140': attribute type 2 has an invalid length. [ 214.613573][T10106] pimreg: entered allmulticast mode [ 214.640653][T10106] pimreg: left allmulticast mode [ 214.647356][T10101] netlink: 'syz.0.1140': attribute type 13 has an invalid length. [ 214.655420][T10101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1140'. [ 214.694101][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1141'. [ 214.711339][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'. [ 215.935104][T10153] netlink: 'syz.2.1156': attribute type 4 has an invalid length. [ 216.072182][T10159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1158'. [ 216.106003][T10161] vxcan1: left allmulticast mode [ 216.408994][T10180] tc_dump_action: action bad kind [ 216.526945][T10187] netlink: 'syz.4.1163': attribute type 4 has an invalid length. [ 216.544979][T10188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1166'. [ 216.572734][T10188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1166'. [ 216.686151][T10188] ip6t_srh: unknown srh invflags 4000 [ 217.020242][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 217.026331][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 217.032860][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 217.233872][T10215] __nla_validate_parse: 5 callbacks suppressed [ 217.233894][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'. [ 217.275250][ T6739] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.317480][ T6739] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.399651][ T6739] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.458350][ T6739] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.458459][T10223] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1177'. [ 217.668801][T10236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.676178][T10236] IPv6: NLM_F_CREATE should be set when creating new route [ 217.683633][T10236] IPv6: NLM_F_CREATE should be set when creating new route [ 217.887209][T10245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1184'. [ 217.967490][T10252] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1184'. [ 218.120496][T10265] netlink: 'syz.0.1188': attribute type 3 has an invalid length. [ 218.128372][T10265] netlink: 'syz.0.1188': attribute type 1 has an invalid length. [ 218.136622][T10265] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1188'. [ 218.177987][T10268] netlink: 'syz.2.1189': attribute type 1 has an invalid length. [ 218.277774][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 218.331522][T10287] FAULT_INJECTION: forcing a failure. [ 218.331522][T10287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.345173][T10287] CPU: 0 UID: 0 PID: 10287 Comm: syz.4.1192 Not tainted syzkaller #0 PREEMPT(full) [ 218.345203][T10287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.345215][T10287] Call Trace: [ 218.345224][T10287] [ 218.345233][T10287] dump_stack_lvl+0x189/0x250 [ 218.345268][T10287] ? __pfx____ratelimit+0x10/0x10 [ 218.345292][T10287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.345320][T10287] ? __pfx__printk+0x10/0x10 [ 218.345341][T10287] ? __might_fault+0xb0/0x130 [ 218.345385][T10287] should_fail_ex+0x414/0x560 [ 218.345424][T10287] _copy_from_user+0x2d/0xb0 [ 218.345453][T10287] ___sys_sendmsg+0x158/0x2a0 [ 218.345484][T10287] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.345550][T10287] ? __fget_files+0x2a/0x420 [ 218.345569][T10287] ? __fget_files+0x3a0/0x420 [ 218.345611][T10287] __x64_sys_sendmsg+0x19b/0x260 [ 218.345642][T10287] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.345680][T10287] ? __pfx_ksys_write+0x10/0x10 [ 218.345716][T10287] ? do_syscall_64+0xbe/0xfa0 [ 218.345746][T10287] do_syscall_64+0xfa/0xfa0 [ 218.345769][T10287] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.345793][T10287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.345813][T10287] ? clear_bhb_loop+0x60/0xb0 [ 218.345839][T10287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.345858][T10287] RIP: 0033:0x7f421ad8f749 [ 218.345876][T10287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.345893][T10287] RSP: 002b:00007f421bb8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.345915][T10287] RAX: ffffffffffffffda RBX: 00007f421afe5fa0 RCX: 00007f421ad8f749 [ 218.345930][T10287] RDX: 0000000020000090 RSI: 0000200000000080 RDI: 0000000000000003 [ 218.345943][T10287] RBP: 00007f421bb8c090 R08: 0000000000000000 R09: 0000000000000000 [ 218.345955][T10287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.345966][T10287] R13: 00007f421afe6038 R14: 00007f421afe5fa0 R15: 00007ffeef522d78 [ 218.346001][T10287] [ 218.356272][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 218.645380][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 218.732311][T10296] bridge_slave_1: left allmulticast mode [ 218.748910][T10296] bridge_slave_1: left promiscuous mode [ 218.785176][T10296] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.827366][T10296] bridge_slave_0: left allmulticast mode [ 218.839472][T10296] bridge_slave_0: left promiscuous mode [ 218.855859][T10296] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.072974][T10306] macvlan1: entered promiscuous mode [ 219.815393][T10361] pim6reg99999999: entered allmulticast mode [ 220.088207][T10376] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1216'. [ 220.180442][T10379] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1219'. [ 220.220401][T10379] netlink: 'syz.3.1219': attribute type 1 has an invalid length. [ 220.511099][T10398] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 220.613207][T10404] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 220.781899][T10407] netlink: 'syz.2.1226': attribute type 15 has an invalid length. [ 221.349091][T10432] xt_hashlimit: size too large, truncated to 1048576 [ 221.428735][T10432] warn_alloc: 1 callbacks suppressed [ 221.428756][T10432] syz.1.1231: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 221.472471][T10437] FAULT_INJECTION: forcing a failure. [ 221.472471][T10437] name failslab, interval 1, probability 0, space 0, times 0 [ 221.485445][T10432] CPU: 1 UID: 0 PID: 10432 Comm: syz.1.1231 Not tainted syzkaller #0 PREEMPT(full) [ 221.485478][T10432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 221.485492][T10432] Call Trace: [ 221.485502][T10432] [ 221.485513][T10432] dump_stack_lvl+0x189/0x250 [ 221.485555][T10432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.485589][T10432] ? __pfx__printk+0x10/0x10 [ 221.485613][T10432] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 221.485645][T10432] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 221.485681][T10432] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 221.485717][T10432] warn_alloc+0x214/0x310 [ 221.485761][T10432] ? __pfx_warn_alloc+0x10/0x10 [ 221.485807][T10432] ? __get_vm_area_node+0x28f/0x300 [ 221.485842][T10432] ? htable_create+0x101/0x7a0 [ 221.485873][T10432] __vmalloc_node_range_noprof+0x690/0x12d0 [ 221.485937][T10432] ? alloc_pages_mpol+0x3cd/0x4a0 [ 221.485964][T10432] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 221.486005][T10432] ? rcu_is_watching+0x15/0xb0 [ 221.486035][T10432] ? htable_create+0x101/0x7a0 [ 221.486059][T10432] __kvmalloc_node_noprof+0x674/0x910 [ 221.486098][T10432] ? htable_create+0x101/0x7a0 [ 221.486120][T10432] ? hashlimit_pernet+0x23/0x240 [ 221.486144][T10432] ? hashlimit_pernet+0x23/0x240 [ 221.486166][T10432] ? hashlimit_pernet+0x23/0x240 [ 221.486199][T10432] htable_create+0x101/0x7a0 [ 221.486234][T10432] hashlimit_mt_check_common+0x719/0xa10 [ 221.486278][T10432] xt_check_match+0x3d1/0xab0 [ 221.486322][T10432] ? __pfx_xt_check_match+0x10/0x10 [ 221.486374][T10432] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 221.486430][T10432] ? xt_find_match+0x1f7/0x250 [ 221.486474][T10432] translate_table+0x1553/0x2040 [ 221.486533][T10432] ? __pfx_translate_table+0x10/0x10 [ 221.486565][T10432] ? __might_fault+0xb0/0x130 [ 221.486625][T10432] ? _copy_from_user+0x94/0xb0 [ 221.486662][T10432] do_ip6t_set_ctl+0x970/0xce0 [ 221.486697][T10432] ? rcu_is_watching+0x15/0xb0 [ 221.486725][T10432] ? trace_contention_end+0x39/0x120 [ 221.486754][T10432] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 221.486809][T10432] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 221.486850][T10432] ? __lock_acquire+0xab9/0xd20 [ 221.486876][T10432] nf_setsockopt+0x26f/0x290 [ 221.486903][T10432] rawv6_setsockopt+0x23b/0x5b0 [ 221.486936][T10432] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 221.486963][T10432] ? aa_sock_opt_perm+0xff/0x1b0 [ 221.486997][T10432] ? sock_common_setsockopt+0x36/0xc0 [ 221.487018][T10432] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 221.487041][T10432] do_sock_setsockopt+0x17c/0x1b0 [ 221.487072][T10432] __x64_sys_setsockopt+0x13f/0x1b0 [ 221.487104][T10432] do_syscall_64+0xfa/0xfa0 [ 221.487131][T10432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.487151][T10432] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.487173][T10432] ? clear_bhb_loop+0x60/0xb0 [ 221.487199][T10432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.487219][T10432] RIP: 0033:0x7f51c998f749 [ 221.487239][T10432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.487258][T10432] RSP: 002b:00007f51ca7a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 221.487280][T10432] RAX: ffffffffffffffda RBX: 00007f51c9be5fa0 RCX: 00007f51c998f749 [ 221.487295][T10432] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 221.487309][T10432] RBP: 00007f51c9a13f91 R08: 0000000000000588 R09: 0000000000000000 [ 221.487322][T10432] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 221.487335][T10432] R13: 00007f51c9be6038 R14: 00007f51c9be5fa0 R15: 00007ffcf23805b8 [ 221.487370][T10432] [ 221.487384][T10437] CPU: 0 UID: 0 PID: 10437 Comm: syz.0.1232 Not tainted syzkaller #0 PREEMPT(full) [ 221.487411][T10437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 221.487427][T10437] Call Trace: [ 221.487436][T10437] [ 221.487444][T10437] dump_stack_lvl+0x189/0x250 [ 221.487473][T10437] ? __pfx____ratelimit+0x10/0x10 [ 221.487494][T10437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.487520][T10437] ? __pfx__printk+0x10/0x10 [ 221.487542][T10437] ? __pfx___might_resched+0x10/0x10 [ 221.487564][T10437] ? fs_reclaim_acquire+0x7d/0x100 [ 221.487585][T10437] should_fail_ex+0x414/0x560 [ 221.487619][T10437] should_failslab+0xa8/0x100 [ 221.487641][T10437] __kmalloc_cache_noprof+0x6f/0x6f0 [ 221.487682][T10437] ? rtnl_newlink+0xfb/0x1c80 [ 221.487709][T10437] rtnl_newlink+0xfb/0x1c80 [ 221.487742][T10437] ? __pfx_rtnl_newlink+0x10/0x10 [ 221.487772][T10437] ? __lock_acquire+0xab9/0xd20 [ 221.487803][T10437] ? __lock_acquire+0xab9/0xd20 [ 221.487841][T10437] ? is_bpf_text_address+0x26/0x2b0 [ 221.487867][T10437] ? is_bpf_text_address+0x292/0x2b0 [ 221.487887][T10437] ? is_bpf_text_address+0x26/0x2b0 [ 221.487911][T10437] ? kernel_text_address+0xa5/0xe0 [ 221.487941][T10437] ? __kernel_text_address+0xd/0x40 [ 221.487973][T10437] ? unwind_get_return_address+0x4d/0x90 [ 221.487998][T10437] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 221.488053][T10437] ? arch_stack_walk+0xfc/0x150 [ 221.488085][T10437] ? __lock_acquire+0xab9/0xd20 [ 221.488129][T10437] ? __pfx_rtnl_newlink+0x10/0x10 [ 221.488151][T10437] rtnetlink_rcv_msg+0x7cf/0xb70 [ 221.488193][T10437] ? __lock_acquire+0xab9/0xd20 [ 221.488215][T10437] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 221.488236][T10437] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.488275][T10437] netlink_rcv_skb+0x208/0x470 [ 221.488298][T10437] ? __lock_acquire+0xab9/0xd20 [ 221.488318][T10437] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.488343][T10437] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.488380][T10437] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.488417][T10437] netlink_unicast+0x82f/0x9e0 [ 221.488455][T10437] ? __pfx_netlink_unicast+0x10/0x10 [ 221.488481][T10437] ? netlink_sendmsg+0x642/0xb30 [ 221.488505][T10437] ? skb_put+0x11b/0x210 [ 221.488536][T10437] netlink_sendmsg+0x805/0xb30 [ 221.488574][T10437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.488603][T10437] ? aa_sock_msg_perm+0xf1/0x1d0 [ 221.488637][T10437] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.488658][T10437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.488688][T10437] __sock_sendmsg+0x21c/0x270 [ 221.488740][T10437] ____sys_sendmsg+0x505/0x830 [ 221.488774][T10437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.488812][T10437] ? import_iovec+0x74/0xa0 [ 221.488845][T10437] ___sys_sendmsg+0x21f/0x2a0 [ 221.488872][T10432] Mem-Info: [ 221.488878][T10437] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.488946][T10437] ? __fget_files+0x2a/0x420 [ 221.488971][T10437] ? __fget_files+0x3a0/0x420 [ 221.489012][T10437] __x64_sys_sendmsg+0x19b/0x260 [ 221.489053][T10437] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.489102][T10437] ? __pfx_ksys_write+0x10/0x10 [ 221.489154][T10437] ? do_syscall_64+0xbe/0xfa0 [ 221.489217][T10437] do_syscall_64+0xfa/0xfa0 [ 221.489248][T10437] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.489281][T10437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.489309][T10437] ? clear_bhb_loop+0x60/0xb0 [ 221.489341][T10437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.489368][T10437] RIP: 0033:0x7ffafdd8f749 [ 221.489393][T10437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.489416][T10437] RSP: 002b:00007ffafebab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.489443][T10437] RAX: ffffffffffffffda RBX: 00007ffafdfe5fa0 RCX: 00007ffafdd8f749 [ 221.489463][T10437] RDX: 0000000020000090 RSI: 0000200000000080 RDI: 0000000000000003 [ 221.489481][T10437] RBP: 00007ffafebab090 R08: 0000000000000000 R09: 0000000000000000 [ 221.489511][T10437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.489526][T10437] R13: 00007ffafdfe6038 R14: 00007ffafdfe5fa0 R15: 00007ffdfbbbbf88 [ 221.489572][T10437] [ 222.153072][T10455] Can't find ip_set type haih:ip,mark [ 222.302601][T10432] active_anon:7121 inactive_anon:0 isolated_anon:0 [ 222.302601][T10432] active_file:3543 inactive_file:39938 isolated_file:0 [ 222.302601][T10432] unevictable:768 dirty:145 writeback:0 [ 222.302601][T10432] slab_reclaimable:11823 slab_unreclaimable:129392 [ 222.302601][T10432] mapped:30456 shmem:1356 pagetables:1190 [ 222.302601][T10432] sec_pagetables:0 bounce:0 [ 222.302601][T10432] kernel_misc_reclaimable:0 [ 222.302601][T10432] free:1291626 free_pcp:14373 free_cma:0 [ 222.429241][T10432] Node 0 active_anon:29584kB inactive_anon:0kB active_file:14172kB inactive_file:159556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117924kB dirty:576kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12336kB pagetables:4228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 222.546925][T10432] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 222.618008][T10432] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 222.694250][T10432] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 222.702760][T10432] Node 0 DMA32 free:1245620kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30384kB inactive_anon:0kB active_file:14172kB inactive_file:159556kB unevictable:1536kB writepending:576kB zspages:0kB present:3129332kB managed:2565032kB mlocked:0kB bounce:0kB free_pcp:42796kB local_pcp:17156kB free_cma:0kB [ 222.764365][T10432] lowmem_reserve[]: 0 0 0 0 0 [ 222.769411][T10432] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 222.801352][T10432] lowmem_reserve[]: 0 0 0 0 0 [ 222.806160][T10432] Node 1 Normal free:3906824kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12384kB local_pcp:3232kB free_cma:0kB [ 222.840048][T10432] lowmem_reserve[]: 0 0 0 0 0 [ 222.844840][T10432] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 222.863945][T10432] Node 0 DMA32: 249*4kB (UM) [ 222.864113][T10469] netlink: 'syz.2.1240': attribute type 3 has an invalid length. [ 222.876827][T10469] __nla_validate_parse: 2 callbacks suppressed [ 222.876847][T10469] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1240'. [ 222.900557][T10432] 117*8kB (UME) 300*16kB (UME) 1067*32kB (UM) 195*64kB (UM) 41*128kB (UME) 25*256kB (UME) 14*512kB (UM) 12*1024kB (UM) 5*2048kB (UM) 281*4096kB (UM) = 1245676kB [ 222.918415][T10432] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 222.930920][T10432] Node 1 Normal: 182*4kB (UME) 50*8kB (UME) 42*16kB (UME) 132*32kB (UME) 32*64kB (UME) 7*128kB (UME) 6*256kB (UME) 6*512kB (UME) 2*1024kB (ME) 0*2048kB 950*4096kB (M) = 3906824kB [ 222.950816][T10432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.960924][T10432] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.971437][T10432] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.981538][T10432] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.991594][T10432] 44833 total pagecache pages [ 222.996309][T10432] 0 pages in swap cache [ 223.005890][T10432] Free swap = 124996kB [ 223.010288][T10432] Total swap = 124996kB [ 223.014566][T10432] 2097051 pages RAM [ 223.018399][T10432] 0 pages HighMem/MovableOnly [ 223.023284][T10432] 424151 pages reserved [ 223.027971][T10432] 0 pages cma reserved [ 223.209528][T10473] FAULT_INJECTION: forcing a failure. [ 223.209528][T10473] name failslab, interval 1, probability 0, space 0, times 0 [ 223.247850][T10475] syzkaller0: entered promiscuous mode [ 223.253718][T10473] CPU: 1 UID: 0 PID: 10473 Comm: syz.4.1242 Not tainted syzkaller #0 PREEMPT(full) [ 223.253748][T10473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.253761][T10473] Call Trace: [ 223.253770][T10473] [ 223.253779][T10473] dump_stack_lvl+0x189/0x250 [ 223.253814][T10473] ? __pfx____ratelimit+0x10/0x10 [ 223.253840][T10473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.253870][T10473] ? __pfx__printk+0x10/0x10 [ 223.253896][T10473] ? __pfx___might_resched+0x10/0x10 [ 223.253920][T10473] ? fs_reclaim_acquire+0x7d/0x100 [ 223.253946][T10473] should_fail_ex+0x414/0x560 [ 223.253992][T10473] should_failslab+0xa8/0x100 [ 223.254017][T10473] kmem_cache_alloc_node_noprof+0x77/0x710 [ 223.254049][T10473] ? __alloc_skb+0x255/0x430 [ 223.254073][T10473] ? napi_skb_cache_get+0x4a5/0x790 [ 223.254095][T10473] ? napi_skb_cache_get+0x151/0x790 [ 223.254123][T10473] __alloc_skb+0x255/0x430 [ 223.254151][T10473] ? __pfx___alloc_skb+0x10/0x10 [ 223.254177][T10473] ? netlink_autobind+0xdb/0x300 [ 223.254206][T10473] ? netlink_autobind+0x2c2/0x300 [ 223.254240][T10473] netlink_sendmsg+0x5c6/0xb30 [ 223.254278][T10473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.254310][T10473] ? aa_sock_msg_perm+0xf1/0x1d0 [ 223.254346][T10473] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 223.254391][T10473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.254421][T10473] __sock_sendmsg+0x21c/0x270 [ 223.254458][T10473] ____sys_sendmsg+0x505/0x830 [ 223.254492][T10473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.254531][T10473] ? import_iovec+0x74/0xa0 [ 223.254563][T10473] ___sys_sendmsg+0x21f/0x2a0 [ 223.254593][T10473] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.254662][T10473] ? __fget_files+0x2a/0x420 [ 223.254683][T10473] ? __fget_files+0x3a0/0x420 [ 223.254716][T10473] __x64_sys_sendmsg+0x19b/0x260 [ 223.254746][T10473] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.254784][T10473] ? __pfx_ksys_write+0x10/0x10 [ 223.254818][T10473] ? do_syscall_64+0xbe/0xfa0 [ 223.254850][T10473] do_syscall_64+0xfa/0xfa0 [ 223.254896][T10473] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.254921][T10473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.254941][T10473] ? clear_bhb_loop+0x60/0xb0 [ 223.254962][T10473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.254979][T10473] RIP: 0033:0x7f421ad8f749 [ 223.254995][T10473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.255012][T10473] RSP: 002b:00007f421bb8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.255031][T10473] RAX: ffffffffffffffda RBX: 00007f421afe5fa0 RCX: 00007f421ad8f749 [ 223.255044][T10473] RDX: 0000000020000090 RSI: 0000200000000080 RDI: 0000000000000003 [ 223.255056][T10473] RBP: 00007f421bb8c090 R08: 0000000000000000 R09: 0000000000000000 [ 223.255067][T10473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.255077][T10473] R13: 00007f421afe6038 R14: 00007f421afe5fa0 R15: 00007ffeef522d78 [ 223.255107][T10473] [ 223.556793][T10475] syzkaller0: entered allmulticast mode [ 223.679989][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 223.689698][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 223.708220][T10480] FAULT_INJECTION: forcing a failure. [ 223.708220][T10480] name failslab, interval 1, probability 0, space 0, times 0 [ 223.739332][T10480] CPU: 1 UID: 0 PID: 10480 Comm: syz.4.1244 Not tainted syzkaller #0 PREEMPT(full) [ 223.739364][T10480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.739377][T10480] Call Trace: [ 223.739386][T10480] [ 223.739396][T10480] dump_stack_lvl+0x189/0x250 [ 223.739432][T10480] ? __pfx____ratelimit+0x10/0x10 [ 223.739457][T10480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.739487][T10480] ? __pfx__printk+0x10/0x10 [ 223.739506][T10480] ? kmalloc_reserve+0xbd/0x290 [ 223.739537][T10480] ? __lock_acquire+0xab9/0xd20 [ 223.739566][T10480] should_fail_ex+0x414/0x560 [ 223.739605][T10480] should_failslab+0xa8/0x100 [ 223.739628][T10480] kmem_cache_alloc_noprof+0x74/0x6e0 [ 223.739659][T10480] ? skb_clone+0x212/0x3a0 [ 223.739693][T10480] skb_clone+0x212/0x3a0 [ 223.739725][T10480] __netlink_deliver_tap+0x404/0x850 [ 223.739767][T10480] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.739796][T10480] netlink_deliver_tap+0x19c/0x1b0 [ 223.739822][T10480] netlink_unicast+0x7fa/0x9e0 [ 223.739854][T10480] ? __pfx_netlink_unicast+0x10/0x10 [ 223.739880][T10480] ? netlink_sendmsg+0x642/0xb30 [ 223.739904][T10480] ? skb_put+0x11b/0x210 [ 223.739931][T10480] netlink_sendmsg+0x805/0xb30 [ 223.739969][T10480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.740001][T10480] ? aa_sock_msg_perm+0xf1/0x1d0 [ 223.740036][T10480] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 223.740149][T10480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.740193][T10480] __sock_sendmsg+0x21c/0x270 [ 223.740278][T10480] ____sys_sendmsg+0x505/0x830 [ 223.740314][T10480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.740352][T10480] ? import_iovec+0x74/0xa0 [ 223.740384][T10480] ___sys_sendmsg+0x21f/0x2a0 [ 223.740414][T10480] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.740485][T10480] ? __fget_files+0x2a/0x420 [ 223.740507][T10480] ? __fget_files+0x3a0/0x420 [ 223.740541][T10480] __x64_sys_sendmsg+0x19b/0x260 [ 223.740573][T10480] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.740613][T10480] ? __pfx_ksys_write+0x10/0x10 [ 223.740650][T10480] ? do_syscall_64+0xbe/0xfa0 [ 223.740681][T10480] do_syscall_64+0xfa/0xfa0 [ 223.740706][T10480] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.740732][T10480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.740754][T10480] ? clear_bhb_loop+0x60/0xb0 [ 223.740782][T10480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.740803][T10480] RIP: 0033:0x7f421ad8f749 [ 223.740824][T10480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.740843][T10480] RSP: 002b:00007f421bb8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.740867][T10480] RAX: ffffffffffffffda RBX: 00007f421afe5fa0 RCX: 00007f421ad8f749 [ 223.740883][T10480] RDX: 0000000020000090 RSI: 0000200000000080 RDI: 0000000000000003 [ 223.740897][T10480] RBP: 00007f421bb8c090 R08: 0000000000000000 R09: 0000000000000000 [ 223.740911][T10480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.740923][T10480] R13: 00007f421afe6038 R14: 00007f421afe5fa0 R15: 00007ffeef522d78 [ 223.740970][T10480] [ 224.301269][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1245'. [ 224.893883][T10510] Bluetooth: MGMT ver 1.23 [ 225.102663][T10516] IPVS: Scheduler module ip_vs_ not found [ 226.939355][ T5841] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 226.939377][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 227.741045][ T56] block nbd0: Possible stuck request ffff88802534e000: control (read@0,4096B). Runtime 60 seconds [ 238.111265][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.119995][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.128173][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.137642][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.147413][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.317941][T10545] chnl_net:caif_netlink_parms(): no params data found [ 238.405257][T10545] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.412738][T10545] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.420376][T10545] bridge_slave_0: entered allmulticast mode [ 238.427860][T10545] bridge_slave_0: entered promiscuous mode [ 238.437037][T10545] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.444452][T10545] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.451981][T10545] bridge_slave_1: entered allmulticast mode [ 238.459561][T10545] bridge_slave_1: entered promiscuous mode [ 238.494028][T10545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.506481][T10545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.544022][T10545] team0: Port device team_slave_0 added [ 238.552385][T10545] team0: Port device team_slave_1 added [ 238.584707][T10545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.592275][T10545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.618746][T10545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.632123][T10545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.639494][T10545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.666563][T10545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.722190][T10545] hsr_slave_0: entered promiscuous mode [ 238.728863][T10545] hsr_slave_1: entered promiscuous mode [ 238.735339][T10545] debugfs: 'hsr0' already exists in 'hsr' [ 238.741666][T10545] Cannot create hsr debugfs directory [ 239.128051][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.136625][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.145550][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.153868][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.161838][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.352874][T10554] chnl_net:caif_netlink_parms(): no params data found [ 239.437201][T10554] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.444588][T10554] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.452319][T10554] bridge_slave_0: entered allmulticast mode [ 239.460861][T10554] bridge_slave_0: entered promiscuous mode [ 239.471243][T10554] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.478535][T10554] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.485970][T10554] bridge_slave_1: entered allmulticast mode [ 239.493883][T10554] bridge_slave_1: entered promiscuous mode [ 239.530385][T10554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.542735][T10554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.581836][T10554] team0: Port device team_slave_0 added [ 239.591611][T10554] team0: Port device team_slave_1 added [ 239.624431][T10554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.631786][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.658518][T10554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.672023][T10554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.679260][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.706715][T10554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.758081][T10554] hsr_slave_0: entered promiscuous mode [ 239.764901][T10554] hsr_slave_1: entered promiscuous mode [ 239.771953][T10554] debugfs: 'hsr0' already exists in 'hsr' [ 239.777728][T10554] Cannot create hsr debugfs directory [ 240.230082][ T5841] Bluetooth: hci5: command tx timeout [ 241.180759][ T5841] Bluetooth: hci6: command tx timeout [ 241.238303][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 241.248008][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 241.258947][ T5837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 241.262749][ T5834] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 241.268491][ T5837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 241.277644][ T5834] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 241.281957][ T5837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.289744][ T5834] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 241.307697][ T5837] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 241.318305][ T5837] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 241.616623][T10564] chnl_net:caif_netlink_parms(): no params data found [ 241.687303][T10566] chnl_net:caif_netlink_parms(): no params data found [ 241.768545][T10564] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.776000][T10564] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.783567][T10564] bridge_slave_0: entered allmulticast mode [ 241.791208][T10564] bridge_slave_0: entered promiscuous mode [ 241.805048][T10564] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.813351][T10564] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.822134][T10564] bridge_slave_1: entered allmulticast mode [ 241.830910][T10564] bridge_slave_1: entered promiscuous mode [ 241.902261][T10564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.924122][T10564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.988662][T10566] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.996921][T10566] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.004902][T10566] bridge_slave_0: entered allmulticast mode [ 242.013720][T10566] bridge_slave_0: entered promiscuous mode [ 242.040648][T10566] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.047955][T10566] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.056812][T10566] bridge_slave_1: entered allmulticast mode [ 242.065218][T10566] bridge_slave_1: entered promiscuous mode [ 242.075604][T10564] team0: Port device team_slave_0 added [ 242.085848][T10564] team0: Port device team_slave_1 added [ 242.173363][T10566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.185486][T10564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.192658][T10564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.222201][T10564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.237476][T10566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.252363][ T5837] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 242.262501][ T5837] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 242.271961][ T5837] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 242.280765][T10564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.281595][ T5837] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 242.287745][T10564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.297581][ T5837] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 242.324916][ T5841] Bluetooth: hci5: command tx timeout [ 242.331200][T10564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.391085][T10566] team0: Port device team_slave_0 added [ 242.400831][T10566] team0: Port device team_slave_1 added [ 242.442120][T10564] hsr_slave_0: entered promiscuous mode [ 242.448917][T10564] hsr_slave_1: entered promiscuous mode [ 242.455361][T10564] debugfs: 'hsr0' already exists in 'hsr' [ 242.461967][T10564] Cannot create hsr debugfs directory [ 242.482305][T10566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.489405][T10566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.515965][T10566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.530190][T10566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.537203][T10566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.564970][T10566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.726918][T10566] hsr_slave_0: entered promiscuous mode [ 242.733796][T10566] hsr_slave_1: entered promiscuous mode [ 242.740317][T10566] debugfs: 'hsr0' already exists in 'hsr' [ 242.746155][T10566] Cannot create hsr debugfs directory [ 243.124328][T10581] chnl_net:caif_netlink_parms(): no params data found [ 243.217946][T10581] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.225598][T10581] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.233009][T10581] bridge_slave_0: entered allmulticast mode [ 243.241361][T10581] bridge_slave_0: entered promiscuous mode [ 243.251389][T10581] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.258750][T10581] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.265927][ T5841] Bluetooth: hci6: command tx timeout [ 243.266205][T10581] bridge_slave_1: entered allmulticast mode [ 243.278853][T10581] bridge_slave_1: entered promiscuous mode [ 243.314167][T10581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.326832][T10581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.339600][ T5841] Bluetooth: hci8: command tx timeout [ 243.340286][ T5840] Bluetooth: hci7: command tx timeout [ 243.378328][T10581] team0: Port device team_slave_0 added [ 243.388487][T10581] team0: Port device team_slave_1 added [ 243.423442][T10581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.430620][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.457229][T10581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.471013][T10581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.478325][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.505119][T10581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.555713][T10581] hsr_slave_0: entered promiscuous mode [ 243.562469][T10581] hsr_slave_1: entered promiscuous mode [ 243.569401][T10581] debugfs: 'hsr0' already exists in 'hsr' [ 243.575244][T10581] Cannot create hsr debugfs directory [ 244.379511][ T5840] Bluetooth: hci9: command tx timeout [ 244.380091][ T5841] Bluetooth: hci5: command tx timeout [ 245.349357][ T5841] Bluetooth: hci6: command tx timeout [ 245.419501][ T5841] Bluetooth: hci8: command tx timeout [ 245.419523][ T5840] Bluetooth: hci7: command tx timeout [ 246.459494][ T5841] Bluetooth: hci9: command tx timeout [ 246.464970][ T5841] Bluetooth: hci5: command tx timeout [ 247.419383][ T5841] Bluetooth: hci6: command tx timeout [ 247.499599][ T5841] Bluetooth: hci7: command tx timeout [ 247.499608][ T5840] Bluetooth: hci8: command tx timeout [ 248.539392][ T5840] Bluetooth: hci9: command tx timeout [ 249.580341][ T5840] Bluetooth: hci8: command tx timeout [ 249.581126][ T5841] Bluetooth: hci7: command tx timeout [ 250.619620][ T5841] Bluetooth: hci9: command tx timeout [ 257.820017][ T56] block nbd0: Possible stuck request ffff88802534e000: control (read@0,4096B). Runtime 90 seconds [ 287.899841][ T56] block nbd0: Possible stuck request ffff88802534e000: control (read@0,4096B). Runtime 120 seconds [ 298.669382][ T5840] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 298.678431][ T5840] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 298.687001][ T5840] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 298.696744][ T5840] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 298.705353][ T5840] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 298.881721][T10594] chnl_net:caif_netlink_parms(): no params data found [ 298.984014][T10594] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.991471][T10594] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.998787][T10594] bridge_slave_0: entered allmulticast mode [ 299.007326][T10594] bridge_slave_0: entered promiscuous mode [ 299.018089][T10594] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.034720][T10594] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.043954][T10594] bridge_slave_1: entered allmulticast mode [ 299.052820][T10594] bridge_slave_1: entered promiscuous mode [ 299.109816][T10594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.125718][T10594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.176108][T10594] team0: Port device team_slave_0 added [ 299.185700][T10594] team0: Port device team_slave_1 added [ 299.231269][T10594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.238261][T10594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.264977][T10594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.278904][T10594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.286125][T10594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.287273][ T5841] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 299.312416][T10594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.334221][ T5841] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 299.343644][ T5841] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 299.352631][ T5841] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 299.360739][ T5841] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 299.378537][T10594] hsr_slave_0: entered promiscuous mode [ 299.385862][T10594] hsr_slave_1: entered promiscuous mode [ 299.392835][T10594] debugfs: 'hsr0' already exists in 'hsr' [ 299.398582][T10594] Cannot create hsr debugfs directory [ 299.698980][T10603] chnl_net:caif_netlink_parms(): no params data found [ 299.812058][T10603] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.820770][T10603] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.828089][T10603] bridge_slave_0: entered allmulticast mode [ 299.836720][T10603] bridge_slave_0: entered promiscuous mode [ 299.845860][T10603] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.853448][T10603] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.861177][T10603] bridge_slave_1: entered allmulticast mode [ 299.868698][T10603] bridge_slave_1: entered promiscuous mode [ 299.922671][T10603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.941562][T10603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.002532][T10603] team0: Port device team_slave_0 added [ 300.021952][T10603] team0: Port device team_slave_1 added [ 300.075740][T10603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.083685][T10603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.110275][T10603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.123112][T10603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.130684][T10603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.157134][T10603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.209649][T10603] hsr_slave_0: entered promiscuous mode [ 300.216374][T10603] hsr_slave_1: entered promiscuous mode [ 300.223101][T10603] debugfs: 'hsr0' already exists in 'hsr' [ 300.228879][T10603] Cannot create hsr debugfs directory [ 300.789405][ T5840] Bluetooth: hci10: command tx timeout [ 301.397452][ T5841] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 301.408243][ T5841] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 301.418351][ T5841] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 301.427912][ T5834] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 301.428144][ T5841] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 301.437117][ T5834] Bluetooth: hci11: command tx timeout [ 301.445773][ T5841] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 301.451410][ T5834] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 301.472551][ T5841] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 301.481503][ T5841] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 301.491971][ T5841] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 301.791586][T10613] chnl_net:caif_netlink_parms(): no params data found [ 301.865441][T10615] chnl_net:caif_netlink_parms(): no params data found [ 301.946876][T10613] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.954995][T10613] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.962765][T10613] bridge_slave_0: entered allmulticast mode [ 301.971302][T10613] bridge_slave_0: entered promiscuous mode [ 301.998510][T10613] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.006153][T10613] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.014223][T10613] bridge_slave_1: entered allmulticast mode [ 302.022525][T10613] bridge_slave_1: entered promiscuous mode [ 302.111004][T10613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.148999][T10615] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.157342][T10615] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.165057][T10615] bridge_slave_0: entered allmulticast mode [ 302.174070][T10615] bridge_slave_0: entered promiscuous mode [ 302.186431][T10613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.197449][T10615] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.205985][T10615] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.213470][T10615] bridge_slave_1: entered allmulticast mode [ 302.221679][T10615] bridge_slave_1: entered promiscuous mode [ 302.316605][T10613] team0: Port device team_slave_0 added [ 302.327937][T10615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.341575][T10613] team0: Port device team_slave_1 added [ 302.372375][T10615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.422055][T10613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.430307][T10613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.442344][ T5837] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 302.456989][T10613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.467394][ T5837] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 302.484876][ T5837] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 302.497823][ T5837] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 302.507495][T10613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.510782][ T5837] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 302.514879][T10613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.548968][T10613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.562451][T10615] team0: Port device team_slave_0 added [ 302.615205][T10613] hsr_slave_0: entered promiscuous mode [ 302.622981][T10613] hsr_slave_1: entered promiscuous mode [ 302.629612][T10613] debugfs: 'hsr0' already exists in 'hsr' [ 302.635379][T10613] Cannot create hsr debugfs directory [ 302.644159][T10615] team0: Port device team_slave_1 added [ 302.706061][T10615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.713691][T10615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.740624][T10615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.768955][T10615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.776127][T10615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.802967][T10615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.859477][ T5837] Bluetooth: hci10: command tx timeout [ 302.941105][T10615] hsr_slave_0: entered promiscuous mode [ 302.950623][T10615] hsr_slave_1: entered promiscuous mode [ 302.957664][T10615] debugfs: 'hsr0' already exists in 'hsr' [ 302.963868][T10615] Cannot create hsr debugfs directory [ 303.288125][T10630] chnl_net:caif_netlink_parms(): no params data found [ 303.394536][T10630] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.401986][T10630] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.414108][T10630] bridge_slave_0: entered allmulticast mode [ 303.422660][T10630] bridge_slave_0: entered promiscuous mode [ 303.449415][T10630] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.456937][T10630] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.464556][T10630] bridge_slave_1: entered allmulticast mode [ 303.473838][T10630] bridge_slave_1: entered promiscuous mode [ 303.499812][ T5841] Bluetooth: hci11: command tx timeout [ 303.506152][ T5837] Bluetooth: hci12: command tx timeout [ 303.530588][T10630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.544759][T10630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.579488][ T5837] Bluetooth: hci13: command tx timeout [ 303.597869][T10630] team0: Port device team_slave_0 added [ 303.607755][T10630] team0: Port device team_slave_1 added [ 303.651325][T10630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.658401][T10630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.685404][T10630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.700330][T10630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.707350][T10630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.733596][T10630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.795494][T10630] hsr_slave_0: entered promiscuous mode [ 303.802893][T10630] hsr_slave_1: entered promiscuous mode [ 303.809696][T10630] debugfs: 'hsr0' already exists in 'hsr' [ 303.815650][T10630] Cannot create hsr debugfs directory [ 304.539776][ T5837] Bluetooth: hci14: command tx timeout [ 304.939543][ T5837] Bluetooth: hci10: command tx timeout [ 305.579508][ T5837] Bluetooth: hci12: command tx timeout [ 305.580086][ T5841] Bluetooth: hci11: command tx timeout [ 305.659419][ T5841] Bluetooth: hci13: command tx timeout [ 306.619440][ T5841] Bluetooth: hci14: command tx timeout [ 307.019457][ T5841] Bluetooth: hci10: command tx timeout [ 307.659322][ T5841] Bluetooth: hci11: command tx timeout [ 307.669441][ T5841] Bluetooth: hci12: command tx timeout [ 307.739398][ T5841] Bluetooth: hci13: command tx timeout [ 308.699572][ T5841] Bluetooth: hci14: command tx timeout [ 309.749360][ T5841] Bluetooth: hci12: command tx timeout [ 309.819522][ T5841] Bluetooth: hci13: command tx timeout [ 310.779464][ T5841] Bluetooth: hci14: command tx timeout [ 317.979929][ T56] block nbd0: Possible stuck request ffff88802534e000: control (read@0,4096B). Runtime 150 seconds [ 348.064638][ T56] block nbd0: Possible stuck request ffff88802534e000: control (read@0,4096B). Runtime 180 seconds [ 350.139394][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 358.822765][ T5840] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 358.831023][ T5840] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 358.840207][ T5840] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 358.848678][ T5840] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 358.856696][ T5840] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 359.035865][T10643] chnl_net:caif_netlink_parms(): no params data found [ 359.137635][T10643] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.145190][T10643] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.153461][T10643] bridge_slave_0: entered allmulticast mode [ 359.162309][T10643] bridge_slave_0: entered promiscuous mode [ 359.172538][T10643] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.180116][T10643] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.187581][T10643] bridge_slave_1: entered allmulticast mode [ 359.195965][T10643] bridge_slave_1: entered promiscuous mode [ 359.245040][T10643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.265512][T10643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.318557][T10643] team0: Port device team_slave_0 added [ 359.328229][T10643] team0: Port device team_slave_1 added [ 359.375897][T10643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.383098][T10643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.409765][T10643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.423631][T10643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.431119][T10643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.457773][T10643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.470829][ T5837] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 359.480391][ T5837] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 359.490538][ T5837] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 359.498840][ T5837] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 359.507579][ T5837] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 359.536209][T10643] hsr_slave_0: entered promiscuous mode [ 359.543064][T10643] hsr_slave_1: entered promiscuous mode [ 359.549668][T10643] debugfs: 'hsr0' already exists in 'hsr' [ 359.555461][T10643] Cannot create hsr debugfs directory [ 359.861521][T10652] chnl_net:caif_netlink_parms(): no params data found [ 359.972707][T10652] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.980788][T10652] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.988196][T10652] bridge_slave_0: entered allmulticast mode [ 359.996453][T10652] bridge_slave_0: entered promiscuous mode [ 360.005943][T10652] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.013587][T10652] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.021136][T10652] bridge_slave_1: entered allmulticast mode [ 360.029803][T10652] bridge_slave_1: entered promiscuous mode [ 360.083298][T10652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.104650][T10652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.165289][T10652] team0: Port device team_slave_0 added [ 360.174495][T10652] team0: Port device team_slave_1 added [ 360.227755][T10652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.234991][T10652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.261955][T10652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.275043][T10652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.282521][T10652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.310082][T10652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.363421][T10652] hsr_slave_0: entered promiscuous mode [ 360.370603][T10652] hsr_slave_1: entered promiscuous mode [ 360.377102][T10652] debugfs: 'hsr0' already exists in 'hsr' [ 360.383129][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 360.390636][T10652] Cannot create hsr debugfs directory [ 360.939950][ T5841] Bluetooth: hci15: command tx timeout [ 361.579480][ T5841] Bluetooth: hci16: command tx timeout [ 361.932057][ T5840] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 361.941591][ T5840] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 361.950373][ T5840] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 361.961043][ T5834] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 361.961735][ T5840] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 361.977212][ T5840] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 361.977259][ T5834] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 361.994230][ T5834] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 362.002718][ T5834] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 362.011786][ T5834] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 362.391580][T10662] chnl_net:caif_netlink_parms(): no params data found [ 362.445903][ T5837] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 362.465760][ T5837] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 362.474576][ T5837] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 362.483811][ T5837] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 362.492320][ T5837] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 362.546248][T10664] chnl_net:caif_netlink_parms(): no params data found [ 362.619667][T10662] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.626928][T10662] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.635098][T10662] bridge_slave_0: entered allmulticast mode [ 362.642841][T10662] bridge_slave_0: entered promiscuous mode [ 362.656419][T10662] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.663867][T10662] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.671327][T10662] bridge_slave_1: entered allmulticast mode [ 362.678944][T10662] bridge_slave_1: entered promiscuous mode [ 362.776801][T10662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.805772][T10664] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.813199][T10664] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.820548][T10664] bridge_slave_0: entered allmulticast mode [ 362.828035][T10664] bridge_slave_0: entered promiscuous mode [ 362.838865][T10662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.870447][T10664] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.877992][T10664] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.885711][T10664] bridge_slave_1: entered allmulticast mode [ 362.893424][T10664] bridge_slave_1: entered promiscuous mode [ 362.945934][T10662] team0: Port device team_slave_0 added [ 362.973793][T10662] team0: Port device team_slave_1 added [ 362.998907][T10664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.012888][T10664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.023038][ T5837] Bluetooth: hci15: command tx timeout [ 363.083465][T10662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.091024][T10662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.117439][T10662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.133000][T10664] team0: Port device team_slave_0 added [ 363.147015][T10662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.154427][T10662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.181108][T10662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.195238][T10664] team0: Port device team_slave_1 added [ 363.268200][T10664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.275660][T10664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.302176][T10664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.354910][T10664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.362610][T10664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.388772][T10664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.447552][T10662] hsr_slave_0: entered promiscuous mode [ 363.455451][T10662] hsr_slave_1: entered promiscuous mode [ 363.462678][T10662] debugfs: 'hsr0' already exists in 'hsr' [ 363.468534][T10662] Cannot create hsr debugfs directory [ 363.474659][T10672] chnl_net:caif_netlink_parms(): no params data found [ 363.586179][T10664] hsr_slave_0: entered promiscuous mode [ 363.593548][T10664] hsr_slave_1: entered promiscuous mode [ 363.600141][T10664] debugfs: 'hsr0' already exists in 'hsr' [ 363.605912][T10664] Cannot create hsr debugfs directory [ 363.659470][ T5841] Bluetooth: hci16: command tx timeout [ 363.733599][T10672] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.741167][T10672] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.748504][T10672] bridge_slave_0: entered allmulticast mode [ 363.758033][T10672] bridge_slave_0: entered promiscuous mode [ 363.778183][T10672] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.785606][T10672] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.793380][T10672] bridge_slave_1: entered allmulticast mode [ 363.801197][T10672] bridge_slave_1: entered promiscuous mode [ 363.894098][T10672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.921483][T10672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.003952][T10672] team0: Port device team_slave_0 added [ 364.013640][T10672] team0: Port device team_slave_1 added [ 364.059873][ T5844] Bluetooth: hci18: command tx timeout [ 364.066198][ T5841] Bluetooth: hci17: command tx timeout [ 364.076358][T10672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.085853][T10672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.112501][T10672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.140581][T10672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.147563][T10672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.174903][T10672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.237741][T10672] hsr_slave_0: entered promiscuous mode [ 364.244653][T10672] hsr_slave_1: entered promiscuous mode [ 364.251348][T10672] debugfs: 'hsr0' already exists in 'hsr' [ 364.257216][T10672] Cannot create hsr debugfs directory [ 364.539673][ T5841] Bluetooth: hci19: command tx timeout [ 365.099512][ T5841] Bluetooth: hci15: command tx timeout [ 365.503682][ T5841] Bluetooth: hci8: command 0x0406 tx timeout [ 365.503707][ T5844] Bluetooth: hci7: command 0x0406 tx timeout [ 365.503733][ T5846] Bluetooth: hci9: command 0x0406 tx timeout [ 365.509858][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 365.739434][ T5837] Bluetooth: hci16: command tx timeout [ 366.139585][ T5837] Bluetooth: hci17: command tx timeout [ 366.142469][ T5147] Bluetooth: hci18: command tx timeout [ 366.629645][ T5147] Bluetooth: hci19: command tx timeout [ 367.179521][ T5147] Bluetooth: hci15: command tx timeout [ 367.819337][ T5147] Bluetooth: hci16: command tx timeout [ 368.219509][ T5147] Bluetooth: hci18: command tx timeout [ 368.222314][ T5837] Bluetooth: hci17: command tx timeout [ 368.699733][ T5837] Bluetooth: hci19: command tx timeout [ 370.299417][ T5837] Bluetooth: hci17: command tx timeout [ 370.299457][ T5147] Bluetooth: hci18: command tx timeout [ 370.779777][ T5147] Bluetooth: hci19: command tx timeout [ 372.379858][ T31] INFO: task syz.2.1240:10469 blocked for more than 143 seconds. [ 372.387732][ T31] Not tainted syzkaller #0 [ 372.392975][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.401877][ T31] task:syz.2.1240 state:D stack:26024 pid:10469 tgid:10468 ppid:5842 task_flags:0x480140 flags:0x00080003 [ 372.413970][ T31] Call Trace: [ 372.417295][ T31] [ 372.420380][ T31] __schedule+0x1798/0x4cc0 [ 372.424911][ T31] ? __lock_acquire+0xab9/0xd20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 372.429872][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.435303][ T31] ? __pfx___schedule+0x10/0x10 [ 372.441066][ T31] ? schedule+0x91/0x360 [ 372.445380][ T31] schedule+0x165/0x360 [ 372.449682][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 372.455212][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 372.461715][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 372.467836][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 372.473915][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 372.480354][ T31] nbd_set_size+0x47e/0x6a0 [ 372.484912][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 372.490157][ T31] ? nla_memcpy+0x5b/0xc0 [ 372.494548][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 372.499806][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 372.505410][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 372.511537][ T31] ? bpf_lsm_capable+0x9/0x20 [ 372.520456][ T31] ? security_capable+0x7e/0x2e0 [ 372.549163][ T31] ? radix_tree_lookup+0x240/0x290 [ 372.554363][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 372.569722][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 372.575534][ T31] ? rcu_is_watching+0x15/0xb0 [ 372.600346][ T31] ? __nla_parse+0x40/0x60 [ 372.605347][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 372.611751][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 372.617380][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 372.623690][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 372.629192][ T31] genl_rcv_msg+0x60e/0x790 [ 372.633739][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.638796][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 372.644742][ T31] netlink_rcv_skb+0x208/0x470 [ 372.649653][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.654532][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.659668][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.664987][ T31] ? down_read+0x1ad/0x2e0 [ 372.669459][ T31] genl_rcv+0x28/0x40 [ 372.673548][ T31] netlink_unicast+0x82f/0x9e0 [ 372.678330][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 372.683696][ T31] ? netlink_sendmsg+0x642/0xb30 [ 372.688785][ T31] ? skb_put+0x11b/0x210 [ 372.693199][ T31] netlink_sendmsg+0x805/0xb30 [ 372.698005][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.703474][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 372.708469][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.713916][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.719616][ T31] __sock_sendmsg+0x21c/0x270 [ 372.724345][ T31] ____sys_sendmsg+0x505/0x830 [ 372.729262][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.734603][ T31] ? import_iovec+0x74/0xa0 [ 372.739276][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 372.743991][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.749336][ T31] ? __fget_files+0x2a/0x420 [ 372.753961][ T31] ? __fget_files+0x3a0/0x420 [ 372.758674][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 372.763727][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.769361][ T31] ? do_syscall_64+0xbe/0xfa0 [ 372.774060][ T31] do_syscall_64+0xfa/0xfa0 [ 372.778577][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.784837][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 372.791050][ T31] ? clear_bhb_loop+0x60/0xb0 [ 372.795742][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.801683][ T31] RIP: 0033:0x7f322198f749 [ 372.806134][ T31] RSP: 002b:00007f32228e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.814602][ T31] RAX: ffffffffffffffda RBX: 00007f3221be5fa0 RCX: 00007f322198f749 [ 372.822646][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000005 [ 372.830921][ T31] RBP: 00007f3221a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 372.838934][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.847211][ T31] R13: 00007f3221be6038 R14: 00007f3221be5fa0 R15: 00007fff5bfa9f28 [ 372.855623][ T31] [ 372.858812][ T31] INFO: task syz.2.1240:10470 blocked for more than 143 seconds. [ 372.866664][ T31] Not tainted syzkaller #0 [ 372.871652][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.880496][ T31] task:syz.2.1240 state:D stack:25816 pid:10470 tgid:10468 ppid:5842 task_flags:0x400140 flags:0x00080002 [ 372.892645][ T31] Call Trace: [ 372.895953][ T31] [ 372.898892][ T31] __schedule+0x1798/0x4cc0 [ 372.903555][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.908432][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.913538][ T31] ? __pfx___schedule+0x10/0x10 [ 372.918436][ T31] ? schedule+0x91/0x360 [ 372.922810][ T31] schedule+0x165/0x360 [ 372.927045][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.932687][ T31] __mutex_lock+0x7e6/0x1350 [ 372.937431][ T31] ? __mutex_lock+0x5bb/0x1350 [ 372.942556][ T31] ? genl_rcv_msg+0x10d/0x790 [ 372.947261][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.952402][ T31] ? stack_trace_save+0x9c/0xe0 [ 372.957322][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 372.962776][ T31] ? radix_tree_lookup+0x240/0x290 [ 372.967911][ T31] genl_rcv_msg+0x10d/0x790 [ 372.972570][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.977454][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.982690][ T31] netlink_rcv_skb+0x208/0x470 [ 372.987485][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.992460][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.997536][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 373.003054][ T31] ? down_read+0x1ad/0x2e0 [ 373.007548][ T31] genl_rcv+0x28/0x40 [ 373.011638][ T31] netlink_unicast+0x82f/0x9e0 [ 373.016436][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 373.022313][ T31] ? netlink_sendmsg+0x642/0xb30 [ 373.027297][ T31] ? skb_put+0x11b/0x210 [ 373.031631][ T31] netlink_sendmsg+0x805/0xb30 [ 373.036427][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.041824][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 373.046890][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.052259][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.057580][ T31] __sock_sendmsg+0x21c/0x270 [ 373.062379][ T31] __sys_sendto+0x3bd/0x520 [ 373.066997][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 373.072094][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.077150][ T31] ? fd_install+0x97/0x540 [ 373.081668][ T31] ? fd_install+0x30d/0x540 [ 373.086196][ T31] __x64_sys_sendto+0xde/0x100 [ 373.091381][ T31] do_syscall_64+0xfa/0xfa0 [ 373.096316][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.101789][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.107901][ T31] ? clear_bhb_loop+0x60/0xb0 [ 373.113145][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.119209][ T31] RIP: 0033:0x7f32219915dc [ 373.123769][ T31] RSP: 002b:00007f32228bdec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 373.132492][ T31] RAX: ffffffffffffffda RBX: 00007f32228bdfc0 RCX: 00007f32219915dc [ 373.140586][ T31] RDX: 0000000000000024 RSI: 00007f32228be010 RDI: 000000000000000f [ 373.148686][ T31] RBP: 0000000000000000 R08: 00007f32228bdf14 R09: 000000000000000c [ 373.156752][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000f [ 373.165013][ T31] R13: 00007f32228bdf68 R14: 00007f32228be010 R15: 0000000000000000 [ 373.173294][ T31] [ 373.176383][ T31] INFO: task syz.1.1241:10475 blocked for more than 144 seconds. [ 373.185312][ T31] Not tainted syzkaller #0 [ 373.191034][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.199848][ T31] task:syz.1.1241 state:D stack:24936 pid:10475 tgid:10474 ppid:5825 task_flags:0x400140 flags:0x00080002 [ 373.212018][ T31] Call Trace: [ 373.215497][ T31] [ 373.218443][ T31] __schedule+0x1798/0x4cc0 [ 373.223061][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.228025][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.233013][ T31] ? __pfx___schedule+0x10/0x10 [ 373.238048][ T31] ? schedule+0x91/0x360 [ 373.242703][ T31] schedule+0x165/0x360 [ 373.246914][ T31] schedule_preempt_disabled+0x13/0x30 [ 373.252726][ T31] __mutex_lock+0x7e6/0x1350 [ 373.257397][ T31] ? __mutex_lock+0x5bb/0x1350 [ 373.262447][ T31] ? genl_rcv_msg+0x10d/0x790 [ 373.267207][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 373.272551][ T31] ? radix_tree_lookup+0x240/0x290 [ 373.277715][ T31] genl_rcv_msg+0x10d/0x790 [ 373.282580][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 373.287634][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 373.292725][ T31] ? __asan_memcpy+0x40/0x70 [ 373.297334][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 373.302859][ T31] netlink_rcv_skb+0x208/0x470 [ 373.307757][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.312680][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 373.317819][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 373.323357][ T31] ? down_read+0x1ad/0x2e0 [ 373.327798][ T31] genl_rcv+0x28/0x40 [ 373.331837][ T31] netlink_unicast+0x82f/0x9e0 [ 373.336642][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 373.342045][ T31] ? netlink_sendmsg+0x642/0xb30 [ 373.347018][ T31] ? skb_put+0x11b/0x210 [ 373.351349][ T31] netlink_sendmsg+0x805/0xb30 [ 373.356146][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.361727][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 373.366717][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.372114][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.377443][ T31] __sock_sendmsg+0x21c/0x270 [ 373.382264][ T31] __sys_sendto+0x3bd/0x520 [ 373.386781][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 373.392018][ T31] ? count_memcg_event_mm+0x21/0x260 [ 373.397512][ T31] ? exc_page_fault+0x82/0x100 [ 373.402379][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 373.407745][ T31] __x64_sys_sendto+0xde/0x100 [ 373.412617][ T31] do_syscall_64+0xfa/0xfa0 [ 373.417337][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.423037][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.429350][ T31] ? clear_bhb_loop+0x60/0xb0 [ 373.434085][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.440123][ T31] RIP: 0033:0x7f51c99915dc [ 373.444561][ T31] RSP: 002b:00007f51ca7a1ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 373.453050][ T31] RAX: ffffffffffffffda RBX: 00007f51ca7a1fc0 RCX: 00007f51c99915dc [ 373.461403][ T31] RDX: 0000000000000020 RSI: 00007f51ca7a2010 RDI: 0000000000000008 [ 373.469462][ T31] RBP: 0000000000000000 R08: 00007f51ca7a1f14 R09: 000000000000000c [ 373.477545][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 373.485604][ T31] R13: 00007f51ca7a1f68 R14: 00007f51ca7a2010 R15: 0000000000000000 [ 373.493726][ T31] [ 373.496822][ T31] INFO: task syz.3.1253:10519 blocked for more than 144 seconds. [ 373.509273][ T31] Not tainted syzkaller #0 [ 373.514272][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.523223][ T31] task:syz.3.1253 state:D stack:28456 pid:10519 tgid:10515 ppid:5827 task_flags:0x400040 flags:0x00080002 [ 373.535511][ T31] Call Trace: [ 373.538915][ T31] [ 373.541979][ T31] __schedule+0x1798/0x4cc0 [ 373.546532][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.551488][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.556369][ T31] ? __pfx___schedule+0x10/0x10 [ 373.561318][ T31] ? schedule+0x91/0x360 [ 373.565601][ T31] schedule+0x165/0x360 [ 373.569823][ T31] schedule_preempt_disabled+0x13/0x30 [ 373.575296][ T31] __mutex_lock+0x7e6/0x1350 [ 373.580057][ T31] ? __mutex_lock+0x5bb/0x1350 [ 373.584903][ T31] ? genl_rcv_msg+0x10d/0x790 [ 373.589869][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 373.595042][ T31] ? radix_tree_lookup+0x240/0x290 [ 373.600515][ T31] genl_rcv_msg+0x10d/0x790 [ 373.605056][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 373.610384][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 373.615444][ T31] ? __asan_memcpy+0x40/0x70 [ 373.620142][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 373.625543][ T31] netlink_rcv_skb+0x208/0x470 [ 373.630388][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.635338][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 373.641055][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 373.646371][ T31] ? down_read+0x1ad/0x2e0 [ 373.650851][ T31] genl_rcv+0x28/0x40 [ 373.654868][ T31] netlink_unicast+0x82f/0x9e0 [ 373.660874][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 373.666222][ T31] ? netlink_sendmsg+0x642/0xb30 [ 373.671265][ T31] ? skb_put+0x11b/0x210 [ 373.675553][ T31] netlink_sendmsg+0x805/0xb30 [ 373.680471][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.685766][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 373.690844][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.696155][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.701541][ T31] __sock_sendmsg+0x21c/0x270 [ 373.706248][ T31] __sys_sendto+0x3bd/0x520 [ 373.710803][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 373.715873][ T31] ? count_memcg_event_mm+0x21/0x260 [ 373.721340][ T31] ? exc_page_fault+0x82/0x100 [ 373.726226][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 373.731603][ T31] __x64_sys_sendto+0xde/0x100 [ 373.736382][ T31] do_syscall_64+0xfa/0xfa0 [ 373.741235][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.746479][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.752718][ T31] ? clear_bhb_loop+0x60/0xb0 [ 373.757504][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.763505][ T31] RIP: 0033:0x7f0bebb915dc [ 373.767971][ T31] RSP: 002b:00007f0bec960ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 373.776581][ T31] RAX: ffffffffffffffda RBX: 00007f0bec960fc0 RCX: 00007f0bebb915dc [ 373.784749][ T31] RDX: 000000000000001c RSI: 00007f0bec961010 RDI: 0000000000000009 [ 373.792929][ T31] RBP: 0000000000000000 R08: 00007f0bec960f14 R09: 000000000000000c [ 373.801318][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 373.809415][ T31] R13: 00007f0bec960f68 R14: 00007f0bec961010 R15: 0000000000000000 [ 373.817445][ T31] [ 373.820953][ T31] INFO: task syz.0.1255:10526 blocked for more than 144 seconds. [ 373.828697][ T31] Not tainted syzkaller #0 [ 373.833906][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.842768][ T31] task:syz.0.1255 state:D stack:28712 pid:10526 tgid:10525 ppid:5824 task_flags:0x400040 flags:0x00080002 [ 373.854844][ T31] Call Trace: [ 373.858238][ T31] [ 373.861350][ T31] __schedule+0x1798/0x4cc0 [ 373.865888][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.871199][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.876223][ T31] ? __pfx___schedule+0x10/0x10 [ 373.881182][ T31] ? schedule+0x91/0x360 [ 373.885532][ T31] schedule+0x165/0x360 [ 373.889775][ T31] schedule_preempt_disabled+0x13/0x30 [ 373.895285][ T31] __mutex_lock+0x7e6/0x1350 [ 373.900678][ T31] ? __mutex_lock+0x5bb/0x1350 [ 373.905508][ T31] ? genl_rcv_msg+0x10d/0x790 [ 373.910425][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 373.915682][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 373.921189][ T31] ? radix_tree_lookup+0x240/0x290 [ 373.926330][ T31] genl_rcv_msg+0x10d/0x790 [ 373.930935][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.935815][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 373.941014][ T31] netlink_rcv_skb+0x208/0x470 [ 373.945841][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.950818][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 373.955889][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 373.961321][ T31] ? down_read+0x1ad/0x2e0 [ 373.965762][ T31] genl_rcv+0x28/0x40 [ 373.969898][ T31] netlink_unicast+0x82f/0x9e0 [ 373.974700][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 373.980383][ T31] ? netlink_sendmsg+0x642/0xb30 [ 373.985364][ T31] ? skb_put+0x11b/0x210 [ 373.989730][ T31] netlink_sendmsg+0x805/0xb30 [ 373.994551][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.999957][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 374.004959][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 374.010340][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.015653][ T31] __sock_sendmsg+0x21c/0x270 [ 374.020498][ T31] __sys_sendto+0x3bd/0x520 [ 374.025015][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 374.030400][ T31] ? count_memcg_event_mm+0x21/0x260 [ 374.035738][ T31] ? exc_page_fault+0x82/0x100 [ 374.040588][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 374.045977][ T31] __x64_sys_sendto+0xde/0x100 [ 374.050804][ T31] do_syscall_64+0xfa/0xfa0 [ 374.055318][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.060734][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.066812][ T31] ? clear_bhb_loop+0x60/0xb0 [ 374.071602][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.077533][ T31] RIP: 0033:0x7ffafdd915dc [ 374.082169][ T31] RSP: 002b:00007ffafeba9ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 374.090676][ T31] RAX: ffffffffffffffda RBX: 00007ffafeba9fc0 RCX: 00007ffafdd915dc [ 374.098673][ T31] RDX: 0000000000000020 RSI: 00007ffafebaa010 RDI: 0000000000000004 [ 374.106813][ T31] RBP: 0000000000000000 R08: 00007ffafeba9f14 R09: 000000000000000c [ 374.114846][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 374.122882][ T31] R13: 00007ffafeba9f68 R14: 00007ffafebaa010 R15: 0000000000000000 [ 374.131195][ T31] [ 374.134494][ T31] INFO: task syz.4.1259:10542 blocked for more than 145 seconds. [ 374.142576][ T31] Not tainted syzkaller #0 [ 374.147633][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.156595][ T31] task:syz.4.1259 state:D stack:28264 pid:10542 tgid:10541 ppid:5838 task_flags:0x400140 flags:0x00080002 [ 374.168651][ T31] Call Trace: [ 374.172023][ T31] [ 374.174996][ T31] __schedule+0x1798/0x4cc0 [ 374.179643][ T31] ? __lock_acquire+0xab9/0xd20 [ 374.184532][ T31] ? __lock_acquire+0xab9/0xd20 [ 374.189597][ T31] ? __pfx___schedule+0x10/0x10 [ 374.194665][ T31] ? schedule+0x91/0x360 [ 374.198939][ T31] schedule+0x165/0x360 [ 374.203199][ T31] schedule_preempt_disabled+0x13/0x30 [ 374.208936][ T31] __mutex_lock+0x7e6/0x1350 [ 374.213642][ T31] ? __mutex_lock+0x5bb/0x1350 [ 374.218531][ T31] ? genl_rcv_msg+0x10d/0x790 [ 374.223299][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 374.228337][ T31] ? stack_trace_save+0x9c/0xe0 [ 374.233319][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 374.238737][ T31] ? radix_tree_lookup+0x240/0x290 [ 374.244191][ T31] genl_rcv_msg+0x10d/0x790 [ 374.248709][ T31] ? __lock_acquire+0xab9/0xd20 [ 374.253628][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 374.258677][ T31] netlink_rcv_skb+0x208/0x470 [ 374.263520][ T31] ? __lock_acquire+0xab9/0xd20 [ 374.268687][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 374.273783][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 374.279277][ T31] ? down_read+0x1ad/0x2e0 [ 374.283737][ T31] genl_rcv+0x28/0x40 [ 374.287824][ T31] netlink_unicast+0x82f/0x9e0 [ 374.293285][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 374.298770][ T31] ? netlink_sendmsg+0x642/0xb30 [ 374.304233][ T31] ? skb_put+0x11b/0x210 [ 374.308563][ T31] netlink_sendmsg+0x805/0xb30 [ 374.313707][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.319178][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 374.324256][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 374.330126][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.335525][ T31] __sock_sendmsg+0x21c/0x270 [ 374.340303][ T31] __sys_sendto+0x3bd/0x520 [ 374.344928][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 374.350159][ T31] ? count_memcg_event_mm+0x21/0x260 [ 374.355513][ T31] ? exc_page_fault+0x82/0x100 [ 374.360426][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 374.365770][ T31] __x64_sys_sendto+0xde/0x100 [ 374.370730][ T31] do_syscall_64+0xfa/0xfa0 [ 374.375269][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.380802][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.386961][ T31] ? clear_bhb_loop+0x60/0xb0 [ 374.391803][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.397742][ T31] RIP: 0033:0x7f421ad915dc [ 374.402394][ T31] RSP: 002b:00007f421bb8aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 374.411080][ T31] RAX: ffffffffffffffda RBX: 00007f421bb8afc0 RCX: 00007f421ad915dc [ 374.419179][ T31] RDX: 0000000000000028 RSI: 00007f421bb8b010 RDI: 0000000000000007 [ 374.427276][ T31] RBP: 0000000000000000 R08: 00007f421bb8af14 R09: 000000000000000c [ 374.435395][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 374.443741][ T31] R13: 00007f421bb8af68 R14: 00007f421bb8b010 R15: 0000000000000000 [ 374.451825][ T31] [ 374.454937][ T31] [ 374.454937][ T31] Showing all locks held in the system: [ 374.463313][ T31] 1 lock held by khungtaskd/31: [ 374.468189][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 374.478287][ T31] 2 locks held by getty/5588: [ 374.483204][ T31] #0: ffff8880303cc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 374.493310][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 374.503697][ T31] 1 lock held by udevd/5883: [ 374.508331][ T31] #0: ffff8880251d5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 374.517714][ T31] 6 locks held by syz.2.1240/10469: [ 374.523463][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.531755][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.541056][ T31] #2: ffff8880251cca70 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 374.551637][ T31] #3: ffff8880251b41e8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 374.561146][ T31] #4: ffff8880251b3b88 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 374.573452][ T31] #5: ffff8880251b3bc0 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 374.586020][ T31] 2 locks held by syz.2.1240/10470: [ 374.591290][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.599574][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.608655][ T31] 2 locks held by syz.1.1241/10475: [ 374.613961][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.622368][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.631563][ T31] 2 locks held by syz.3.1253/10519: [ 374.636795][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.645135][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.654271][ T31] 2 locks held by syz.0.1255/10526: [ 374.659669][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.667890][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.676951][ T31] 2 locks held by syz.4.1259/10542: [ 374.682375][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.690638][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.699679][ T31] 2 locks held by syz-executor/10545: [ 374.705134][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.713422][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.722517][ T31] 2 locks held by syz-executor/10554: [ 374.727908][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.736207][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.745417][ T31] 2 locks held by syz-executor/10564: [ 374.750875][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.759267][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.768243][ T31] 2 locks held by syz-executor/10566: [ 374.773688][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.782252][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.791484][ T31] 2 locks held by syz-executor/10581: [ 374.796892][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.805246][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.814372][ T31] 2 locks held by syz-executor/10594: [ 374.819816][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.828058][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.837216][ T31] 2 locks held by syz-executor/10603: [ 374.842668][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.851002][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.860180][ T31] 2 locks held by syz-executor/10613: [ 374.865652][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.874096][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.883175][ T31] 2 locks held by syz-executor/10615: [ 374.888565][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.897001][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.906208][ T31] 2 locks held by syz-executor/10630: [ 374.911880][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.920277][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.929418][ T31] 2 locks held by syz-executor/10643: [ 374.934884][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.943590][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.952741][ T31] 2 locks held by syz-executor/10652: [ 374.958194][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.967506][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.976793][ T31] 2 locks held by syz-executor/10662: [ 374.982292][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.990784][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.999831][ T31] 2 locks held by syz-executor/10664: [ 375.005208][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 375.013559][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 375.022956][ T31] 2 locks held by syz-executor/10672: [ 375.028339][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 375.036685][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 375.045891][ T31] [ 375.048228][ T31] ============================================= [ 375.048228][ T31] [ 375.056714][ T31] NMI backtrace for cpu 1 [ 375.056733][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 375.056750][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.056761][ T31] Call Trace: [ 375.056770][ T31] [ 375.056778][ T31] dump_stack_lvl+0x189/0x250 [ 375.056806][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.056827][ T31] ? __pfx__printk+0x10/0x10 [ 375.056853][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 375.056880][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 375.056905][ T31] ? __pfx__printk+0x10/0x10 [ 375.056924][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 375.056951][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 375.056976][ T31] watchdog+0xf60/0xfa0 [ 375.056996][ T31] ? watchdog+0x1e2/0xfa0 [ 375.057020][ T31] kthread+0x711/0x8a0 [ 375.057043][ T31] ? __pfx_watchdog+0x10/0x10 [ 375.057057][ T31] ? __pfx_kthread+0x10/0x10 [ 375.057079][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.057096][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.057113][ T31] ? __pfx_kthread+0x10/0x10 [ 375.057134][ T31] ret_from_fork+0x4bc/0x870 [ 375.057152][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 375.057173][ T31] ? __switch_to_asm+0x39/0x70 [ 375.057185][ T31] ? __switch_to_asm+0x33/0x70 [ 375.057196][ T31] ? __pfx_kthread+0x10/0x10 [ 375.057217][ T31] ret_from_fork_asm+0x1a/0x30 [ 375.057244][ T31] [ 375.057249][ T31] Sending NMI from CPU 1 to CPUs 0: [ 375.204979][ C0] NMI backtrace for cpu 0 [ 375.205007][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 375.205028][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.205040][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 375.205066][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 01 20 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 375.205082][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 375.205098][ C0] RAX: f8d0cb6ff208bc00 RBX: ffffffff81967b47 RCX: f8d0cb6ff208bc00 [ 375.205112][ C0] RDX: 0000000000000001 RSI: ffffffff8d713f90 RDI: ffffffff8bbf08e0 [ 375.205125][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 375.205139][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7d1a70 [ 375.205152][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 375.205164][ C0] FS: 0000000000000000(0000) GS:ffff888126131000(0000) knlGS:0000000000000000 [ 375.205178][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.205190][ C0] CR2: 00007f005f317d60 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 375.205206][ C0] Call Trace: [ 375.205213][ C0] [ 375.205220][ C0] default_idle+0x13/0x20 [ 375.205244][ C0] default_idle_call+0x73/0xb0 [ 375.205269][ C0] do_idle+0x1e7/0x510 [ 375.205296][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 375.205319][ C0] ? __pfx_do_idle+0x10/0x10 [ 375.205343][ C0] ? do_idle+0xc/0x510 [ 375.205363][ C0] cpu_startup_entry+0x44/0x60 [ 375.205382][ C0] rest_init+0x2de/0x300 [ 375.205408][ C0] start_kernel+0x3ae/0x410 [ 375.205434][ C0] x86_64_start_reservations+0x24/0x30 [ 375.205452][ C0] x86_64_start_kernel+0x143/0x1c0 [ 375.205470][ C0] common_startup_64+0x13e/0x147 [ 375.205503][ C0] [ 378.141815][ T56] block nbd0: Possible stuck request ffff88802534e000: control (read@0,4096B). Runtime 210 seconds