last executing test programs: 21.514603879s ago: executing program 4 (id=1404): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8051}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, 0x0, &(0x7f0000000300)) getpeername$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x20) 21.362514885s ago: executing program 4 (id=1406): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newtaction={0x68, 0x30, 0x58f, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x8001, 0x8, 0x3, 0x80000001}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000009c0)={0x4c, 0x12, 0x1, 0x70bd2d, 0x25dfdbfd, {0x2, 0x10, 0x1, 0xfa, {0x4e22, 0x4e24, [0xc2c, 0x9, 0x3, 0x7], [0x6, 0x7fffffff, 0x1, 0x3], 0x0, [0x6, 0x5]}, 0x6, 0x4}}, 0x4c}}, 0x40002) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x450, 0x7e}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000050}, 0x4048841) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x2, 0x2, {0x0, 0x0, 0x4, 0x0, 0x4300, 0x1000000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x5}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x1000000, 0x0, 0x20000044}, 0x24028044) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r6, 0x400454cd, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0xe0, 0x83, &(0x7f0000000180)="9d6c047fde00caa7eda0746a7bb304e73b0d4921fd96e165a8e9b08aaa6366f74477d43a560d5552fc9b1f83a58e91e1b23bedf565cf77e05d74c3bb0e4041a0b969626bce8e982bf017e0110e1d6d70a2faeac298f77a71288c3974b54df1cd30b4d82d374593c4544611f2d9f361516e879f498cfede8059bcf1206c59ff55cc9d3ae83a3b033f6d60f2abfd71a83faedb7dc96615b83c8e7ff7249e1ca1a2578ce7ddef3d3516f9fc9c8adc8c67abee5e711a2be01ee3bde3e01ec48328df3ef9b6eab13c4fed97b183e0e3855342a7015b396a1824212b1ff302507c78dc", &(0x7f0000000280)=""/131, 0x6, 0x0, 0x69, 0xc4, &(0x7f0000000340)="3ad91a3f8822552e649d24ea81c7f340b6d42fabcf5e6f379c7c8463abfff5a41e0f2bbdd8484878185d1ee8a2ac19f9507c9d35a90a1a6120b7c7ebfdca36d7a304d13c915de19d1850464d142761a26893e887c2027736fff0941ace4451d71e2afe8395d233a660", &(0x7f0000000480)="a8f08d59ebc3bbd19aeb62d4ffc1ee35956a7b9b0f46d219c82cc0f0fdb6037653b8a35ffbd0a54fb277ab29ca7a05245708de658e8cef553fb506acef79acf4c14070c7d5ceb2895ba35847221059431959e7f3b1c88d99bba48fddaaed6d838f1f3a95c53bbe0694eb67bace143e1d778639b845494784b088b6f235464203c299a052266758a7eee270445938afbf98a730f12b8a48c9115d59c7ffdc899694906f729f3f1f254e5fb1dbf0ed1d085793f328a9b28519196b750441bf7fcc637d41b6", 0x5}, 0x50) 20.025480247s ago: executing program 4 (id=1420): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async, rerun: 64) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x9, 0x0, 0x0, {0xfffffffffffff001, 0x8, 0x1}}, {0x8f7, 0x2, 0x0, {0x8, 0x7ff, 0x1}}, {0x4, 0x2, 0x0, {0xf, 0xff, 0x2}}], 0x3, 0x20, 0x1, 0x80}) (rerun: 64) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28a01d80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8e6, 0x1f}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000300)={0x51c, r3, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x144, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x8, 0x8, 0x200, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6, 0x1b, 0x4, 0x18, 0x6a, 0x2, 0xc, 0xc, 0x24, 0x1, 0x30, 0x5, 0x30, 0x48, 0x30, 0x1b, 0x3, 0x2, 0x9, 0x6, 0x18, 0x30, 0x56, 0x18, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x80, 0xa, 0x9, 0x16e9, 0x73b1, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x485, 0x80, 0xf8, 0x7, 0x9, 0x0, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff19, 0x1, 0x3, 0x2, 0x2ac7, 0xb6d, 0x36]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x16, 0x1b, 0x12, 0x24, 0x0, 0x30, 0x24, 0x12, 0x6f]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x36, 0x3, 0x60, 0x3, 0xc, 0x5, 0x24, 0x1, 0x1b, 0x5, 0x3, 0x18, 0x2, 0x1, 0x2, 0x12, 0x1, 0xc, 0x19, 0x4, 0x1b, 0x60, 0x30, 0x1a, 0x5, 0x9, 0x0, 0x36, 0x1]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x18, 0x48, 0x3, 0x48]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x60, 0x24, 0x48, 0x24, 0xb, 0x3, 0x9, 0x48, 0x9, 0x16, 0x12, 0x1, 0x3, 0x36, 0x24, 0x6c, 0x36, 0x0, 0x36, 0x6, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x8}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0x4, 0x3, 0x24, 0x12, 0x16, 0xb, 0x30, 0x4, 0x12, 0x4, 0x1b, 0x24, 0x6, 0x18, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x1, 0x2, 0xfff3, 0x9, 0x81, 0x6, 0x40]}}]}]}, @NL80211_ATTR_TX_RATES={0xf8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x7, 0x6}, {0x6, 0xa}, {0x1, 0x8}, {0x3, 0x4}, {}, {0x0, 0x6}, {0x0, 0x3}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0x5, 0x7}, {0x5, 0x9}, {0x2, 0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x4, 0x5, 0x1a83, 0x3, 0x843a, 0x101]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x5, 0xc, 0x16, 0x6, 0x6c, 0x1b, 0x4, 0x6c, 0x6c, 0xb, 0x5, 0x24, 0x12, 0x36, 0x1, 0x30, 0x3, 0x1, 0x24, 0x6, 0x4, 0x5, 0x9, 0x4, 0x24, 0xc, 0x36, 0x16, 0x0, 0x6, 0x12, 0xb]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x9, 0x9972, 0x3, 0x0, 0x4, 0x800, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x12, 0x65, 0x12, 0x48, 0x3, 0x6c, 0x18, 0x30, 0x4, 0x9, 0x6c, 0x24, 0x60, 0x36, 0x12, 0x6, 0x4d, 0xc, 0x36, 0x1b, 0x12, 0x1b, 0x4, 0x1, 0x2, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x5c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0xa}, {0x0, 0x8}, {0x4, 0x3}, {0x2, 0x9}, {0x0, 0x4}, {0x6, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x7, 0x6}, {0x0, 0x8}, {0x5, 0x3}, {0x5, 0x8}, {0x2, 0x5}, {0x2, 0x2}, {0x2, 0x4}, {0x0, 0x3}, {0x5, 0x7}, {0x3, 0x6}, {0x2, 0x4}, {0x6}, {0x7, 0x5}, {0x6, 0xa}, {0x1, 0x7}, {0x5, 0x2}, {}, {0x4, 0x1}, {0x6, 0x5}, {0x7, 0x4}, {0x4, 0xa}, {0x1, 0x6}, {0x1}, {0x0, 0xa}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0x3, 0x36, 0x6c, 0x6, 0xb, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x7fff, 0x8, 0x3, 0x800, 0x8, 0x80]}}]}]}, @NL80211_ATTR_TX_RATES={0x1f0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x8, 0x9, 0x0, 0x0, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x4}, {0x6, 0x8}, {0x7, 0x7}, {0x2}, {0x2, 0x3}, {0x5}, {0x3, 0x2}, {0x5, 0x9}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x6}, {0x4}, {0x4, 0x3}, {0x2, 0x1}, {0x2, 0x3}, {0x1, 0x2}, {0x7, 0x6}, {0x3, 0x1}, {0x3, 0x3}, {0x4, 0xa}, {0x0, 0x7}, {0x5, 0x4}, {0x2, 0x4}, {0x0, 0x6}, {0x6, 0x9}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x9}, {0x3, 0x5}, {0x0, 0x8}, {0x2, 0xa}, {0x3, 0x9}, {0x0, 0x1}, {0x4}, {0x2, 0x8}, {0x1, 0x5}, {0x7, 0x9}, {0x5, 0x3}, {0x3, 0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x3, 0xa}, {0x3, 0x5}, {0x5, 0x2}, {0x1, 0x3}, {0x7, 0x1}, {0x4}, {0x1, 0x2}, {0x7}, {0x4, 0x2}, {0x0, 0x5}, {0x2, 0x9}, {0x1, 0x4}, {0x7}, {0x4, 0x3}, {0x4, 0x8}, {0x2, 0x1}, {0x5, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x5, 0x4}, {0x5, 0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x3}, {0x4, 0xa}, {0x5, 0x6}, {0x6, 0x5}, {0x0, 0x2}, {0x6, 0x8}, {0x1}, {0x3}, {0x0, 0x7}, {0x0, 0x9}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x1, 0x4}, {0x4, 0x2}, {0x3, 0x1}, {0x4, 0x5}, {0x1, 0x2}, {0x7, 0xa}, {0x7, 0xa}, {0x1, 0x1}, {0x6, 0x5}, {0x2, 0x4}, {0x1, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x6, 0x2}, {0x7}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0x16]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x18, 0x4, 0xb, 0x48, 0x3, 0x48, 0x5, 0xb, 0xb, 0x12, 0x1b, 0x30, 0x3, 0x40, 0x30, 0x16]}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x6, 0x7}, {0x6, 0x3}, {0x1, 0xa}, {0x2, 0x9}, {0x2, 0x6}, {0x3, 0x1}, {0x5, 0x7}, {0x4, 0xa}, {0x1, 0xa}, {0x1, 0x3}, {0x6, 0x6}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0x3}, {0x0, 0x1}, {0x4, 0x9}, {0x1, 0x8}, {0x6, 0x8}, {}, {0x2, 0x9}, {0x1, 0x7}, {0x0, 0x4}, {0x3, 0x6}, {0x6, 0x9}, {0x3, 0x6}, {0x7, 0xa}]}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xcf36, 0x2, 0x7fff, 0x7, 0x7c0, 0xb, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0xa}, {0x1, 0x4}, {0x3, 0x4}, {0x1, 0x6}, {0x3, 0x9}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0x2}, {0x7, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {}, {0x2, 0x8}, {0x3, 0x6}, {0x3, 0x3}, {0x4, 0x6}, {0x6, 0x8}, {0x7, 0x2}, {0x2, 0x8}, {0x6, 0x4}, {0x4, 0x8}, {0x1, 0x6}, {0x0, 0x4}, {0x5, 0x7}, {0x4, 0x9}, {0x3, 0x2}, {0x1, 0xa}, {0x1, 0x2}, {0x3}, {0x2, 0x1}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x4}, {0x2, 0x8}, {0x1, 0x9}, {0x7, 0x2}, {0x1, 0x4}, {0x1}, {0x2}, {0x0, 0x6}, {0x7, 0x3}, {0x0, 0x5}, {0x7, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0x2}, {0x2, 0x5}, {0x1, 0x6}, {0x7, 0x1}, {0x1, 0x4}, {0x7, 0x4}, {0x5, 0x2}, {0x0, 0x7}, {}, {0x0, 0x6}, {0x1, 0x7}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0xa}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x2}, {0x4, 0x9}, {0x2, 0x6}, {0x1, 0x7}, {0x4, 0xa}, {0x3, 0x1}, {0x5, 0x5}, {0x5, 0xa}, {0x0, 0x9}, {0x1, 0x5}, {0x4, 0x8}, {0x3, 0x5}, {0x4, 0xa}, {0x7, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x7, 0x2}, {0x4, 0x2}, {0x3, 0x7}, {0x7, 0x9}, {0x6, 0x6}, {0x5, 0x3}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x6}, {0x5}, {0x1, 0x4}, {0x1, 0x4}, {0x4, 0x9}, {0x5, 0x3}, {0x0, 0x2}, {0x3, 0x8}, {0x2, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x1, 0x2}, {0x7, 0x9}, {0x1, 0x5}, {0x1, 0x6}, {0x3}, {0x3, 0x9}, {0x2, 0x1}, {0x4, 0x6}, {0x5, 0x9}, {0x7, 0x8}, {0x5, 0x3}, {0x4, 0x2}, {0x2, 0x1}, {0x6, 0xa}, {0x1, 0x6}, {0x6, 0x2}, {0x4, 0xa}, {0x5, 0x1}, {0x3, 0x4}, {0x0, 0x1}, {0x2, 0x9}, {0x5, 0x7}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0x9, 0x2, 0x12, 0x2, 0x13, 0xb, 0xc, 0x48, 0x6c, 0x9, 0x48, 0xc, 0x7f, 0x6c, 0x30, 0x6, 0x36, 0x16, 0x9, 0x9, 0x9, 0x4, 0x1b, 0x2, 0x24, 0x18, 0x1b, 0x24]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x7}, {0x7}, {0x2}, {0x6, 0x8}, {0x6, 0x4}, {0x1, 0x5}, {0x0, 0x9}, {0x3, 0x9}, {0x2, 0x4}, {0x1, 0x1}, {0x6}, {0x0, 0x4}, {0x0, 0x9}, {0x7, 0x4}, {0x6, 0x1}, {0x0, 0x3}, {0x6, 0x1}, {0x2, 0x7}, {0x3, 0x1}, {0x2}, {0x6, 0x7}]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x83c, 0x4, 0xa, 0x0, 0x8b, 0x8, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x48, 0xc, 0x6c, 0x5, 0x4, 0x1f, 0x9, 0x6c, 0x30, 0x36, 0x62, 0x48, 0x48, 0x6, 0x48, 0x1, 0x24, 0x5, 0x30, 0xc, 0x8778e1e3f54b34f9, 0x3c, 0x30, 0x9, 0x18]}]}]}, @NL80211_ATTR_TX_RATES={0x80, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x5, 0x4e, 0x5, 0xfffe, 0x400, 0x120]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x8, 0x7, 0x8, 0x4, 0xfc4f, 0x1]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x9}, {0x1}, {0x2, 0x4}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x1}, {0x5, 0x4}, {0x0, 0x2}, {0x7, 0x4}, {0x7, 0xa}, {0x0, 0x6}, {0x2, 0x9}, {0x0, 0x1}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0x3}, {0x2, 0x4}, {0x1, 0x3}, {0x4, 0x3}, {0x4, 0x8}, {0x7, 0x5}, {0x4, 0xa}, {0x1, 0x4}, {0x7, 0x4}, {0x3}, {0x2, 0x8}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x4}, {0x3, 0x3}, {0x1, 0x7}, {0x0, 0xa}, {0x2, 0x6}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x6}, {0x3, 0x9}, {0x5, 0x2}, {0x5, 0x7}, {0x1, 0x8}, {0x1}, {0x3}, {0x1, 0x9}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x4}, {0x0, 0x2}, {0x1, 0x5}, {0x3, 0x1}, {0x1, 0x9}, {0x4}, {0x2}, {0x0, 0x3}]}]}]}]}, 0x51c}, 0x1, 0x0, 0x0, 0x450}, 0x20000000) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000008c0)={0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000940)={0x2, 0x5, 0x1, 0x7, 0x9, 0x0, [{0x7ff, 0x8, 0x9, '\x00', 0x100}, {0x5, 0x8, 0x0, '\x00', 0x2202}, {0x7, 0x1602, 0xffffffffffffffac, '\x00', 0x1}, {0x3, 0x8000, 0x2, '\x00', 0x400}, {0x3, 0x9, 0x0, '\x00', 0x8}, {0x7, 0xb, 0x0, '\x00', 0x2000}, {0x6, 0x6, 0xe036, '\x00', 0x1}, {0x7, 0x6, 0x101, '\x00', 0x1502}, {0x5, 0x4, 0x800, '\x00', 0x80}]}) (async) socket(0x1, 0x5, 0xd5) r6 = socket$igmp(0x2, 0x3, 0x2) (async) sendmsg$802154_raw(r5, &(0x7f0000000d00)={&(0x7f0000000b80)={0x24, @short={0x2, 0xfffd, 0xffff}}, 0x14, &(0x7f0000000cc0)={&(0x7f0000000bc0)="6e28647415b954b75fffec9ed873c4ba4b57e5f8d84825509395599430fd2c53235c6cd3b3558ab7a120d0ac8f2bf3b01e48da51db53f7efc5d1be1b472e81273765443d5fd575865fd18744abf72f00873d9bedc3db53bd6aa15c8b6ca4d8a42c3e9c7146202b03a156e841aecb8fd016a6c8bdb600f2399b8010ae242c86d7692285abe76ef72630d947f09ff15986316ab2f99dda7a5532389ff09bf80335867b93944e8186179dffe859e4d795e0ae38bd0cb911c03f754c5cb0334a181267335de5e14a0eda3571ccf40c48800c6ee276b129468be1f1f3a00aae92", 0xde}, 0x1, 0x0, 0x0, 0x80}, 0x4040001) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000d40)={0x6, 'batadv_slave_1\x00', {0x8}, 0x8}) (async) sendmsg$802154_dgram(r1, &(0x7f0000000e80)={&(0x7f0000000d80)={0x24, @long={0x3, 0xffff, {0x5555555555550081}}}, 0x14, &(0x7f0000000e40)={&(0x7f0000000dc0)="47a8ef48fee18403375fdd2001af9d20f07548875aaad10c0404f770b27fc65e74c4aadea34ed69e6494cc45aaef9c88c76a2ab051763a51138b05fa1abad54c7024754d90f7a0be794c111792d24c5e80615b0a297a598cae5e5e902c95cc39979ae77d8c5b6e23f6d699ffd8b042943ad83cc05739a35775b9c7", 0x7b}, 0x1, 0x0, 0x0, 0x24000080}, 0xd3df22b00801f4ae) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x10, r2, 0x14a17000) (async) getpeername$netlink(r5, &(0x7f0000000ec0), &(0x7f0000000f00)=0xc) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000f40)=0x0) (async, rerun: 64) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000f80)=0x0) (rerun: 64) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000fc0)={"9d1c14f40250f9aff30827c8cd2a3696", r8, r9, {0x7f, 0x5}, {0x5d7, 0x6}, 0x68, [0x8, 0x1, 0x6, 0x5, 0x4, 0x8c7, 0x3, 0xaa6, 0x2, 0x40, 0x6, 0x4, 0x3, 0x401, 0x3, 0x826]}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001100), r5) (rerun: 64) sendmsg$DEVLINK_CMD_PORT_SET(r10, &(0x7f00000012c0)={&(0x7f00000010c0), 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x124, r11, 0x8, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0x124}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r10, 0xfd507000) (async, rerun: 32) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x30, r3, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b408ee5ca1c4c74f5e9cf030dde93427"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20001}, 0x80) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000001400)={0x74, 0xd, 0x9, 0x6}, 0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000001440)={0x1d, 0x1, '\x00', [@ra={0x5, 0x2, 0x8}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x18) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000014c0), r2) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f00000016c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001680)={&(0x7f0000001500)={0x178, r12, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x166}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6999}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff69}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14b8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x810}, 0x800) 19.841031595s ago: executing program 4 (id=1424): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0x8}, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r0, 0x32, 0x1, 0x100, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) listen(r1, 0x0) close(0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x81}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x23}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00442c2f"], 0xfdef) socket$netlink(0x10, 0x3, 0x0) 19.243441383s ago: executing program 3 (id=1431): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x8) unshare(0x4050c00) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x6, 0x0, 0x80000000, 0x1, r2, 0x3}, 0x50) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x7f, @private2, 0x100}, 0x1c) 18.641146005s ago: executing program 3 (id=1436): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x70bd40, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x71516}, @IFLA_GROUP={0x8, 0x1b, 0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmmsg$sock(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f00000006c0)="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", 0xfc}], 0x2}}], 0x1, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r3 = socket(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) (async) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000140)={0x8000, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) 18.641019867s ago: executing program 0 (id=1437): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="00000000000000000000000000000000000000001d98e43c17bcd22012c3b75aa54d2589e357ec35a26b3af120aea341e38daa0280613fed7316134799701c133f60dc54b60c66d90d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000340)) ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x15, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000200000018120000", @ANYRES32=r1, @ANYBLOB="0000000040000000b703000200000000b8e506e32a02b438f494ebf87e6f850000000c000000b700"], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xd}, 0x94) 18.639957049s ago: executing program 4 (id=1438): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x89}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4008010) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x5f0}}], 0x600, 0x0, 0x0) unshare(0x22020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) pread64(r5, &(0x7f0000002200)=""/87, 0x57, 0xfffd) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x0) (async) socket$inet6(0xa, 0x3, 0x3) (async) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x89}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) (async) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4008010) (async) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x5f0}}], 0x600, 0x0, 0x0) (async) unshare(0x22020400) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) pread64(r5, &(0x7f0000002200)=""/87, 0x57, 0xfffd) (async) 18.639765096s ago: executing program 2 (id=1439): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x2}}, 0x10) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x6, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0xa, 0xc}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0xc0956febbce12c1) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) (rerun: 64) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) preadv(r1, 0x0, 0x0, 0x3, 0xffffffff) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4100000000000006110080000000000730a0eff000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x2d) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00}, 0x94) 18.638941901s ago: executing program 0 (id=1441): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$inet(r0, &(0x7f00000018c0)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000080)="6c9d38d0757ce4913ec7db9ba0991028756ad22d181cdd5279669170656f5de64981430424f222bbc7ef70a8963e20d730fdd1fdc12ebc1b55f48a599162ee6db91778f15401905a237aca498928f9e7f71525b638e1672e3aaf254f4a", 0x5d}, {&(0x7f00000001c0)="5b737138ae1f09a0e4fd34ccf8925e50d5eeaeea1465eec1a24d46bcaea440ca1f2905126f47f6cb7bf44a19b1686ff7d8cd8d9675288730280fa344df897ee36719accebe656b475635dd1ff5c304b2a4164ce63c3eabe3e63eec16c92070434c21df97bf47f0770f", 0x69}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="d2c5be4051137080299f1ce2029ab4ffe0372fe705e7859d81a4e1f20fe618b05e58f9e611b3ca9bd84ff8f7efa158527ad189a8ea7de29995acaffeed536a7f4891fd8b90382f14af56eea98e2bab696d1b57477f67398a2ad827fcd383bc81cdc56342b31726f533f348265be7ca38531f684588f0387b44ea3d46bff5344624587e8c557b549619aef5180ec87deb7a1adb", 0x93}, {&(0x7f00000013c0)="62df3d54a5c2230ac1d81c9a50189303903b57dd70fc0660ac5bdb06c778d9ed67e90ea1aa99412bebb4525d2f4c236a2517ef0d2c0feb3c24d4d5051c158ecbc6c732b9935a98d82b968da335743d0867edac0e8a69a1add0be43aa25ef057571a33a41de82dc84036b9c9a95e6d02e5345f8e56cbced6e01a89765031192e1c1d973e3d25d6269369d36f3506c95e923e92fc0ba64cf18fd966e48e8007ee53c09f20fe39a4261f18377f0947a230ff84c2075ae4cd0783653497053f873ae557058", 0xc3}, {&(0x7f00000014c0)="0ecd2d0f6e7adabe3fa7b2c99ee2f439ebac14259103948af5af829416dc30c5645b9c39d60e5433807b31c48caaf452dc6b7d41cbae863ed43f45", 0x3b}], 0x6, &(0x7f0000001580)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x5e, 0x3, 0x4, [{@local, 0x2}]}, @rr={0x7, 0x3, 0x2f}, @ssrr={0x89, 0xf, 0xb9, [@broadcast, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback]}, @end, @rr={0x7, 0x7, 0x15, [@remote]}, @generic={0x7, 0x6, "c2bc80d3"}, @timestamp={0x44, 0xc, 0x9b, 0x0, 0x9, [0x571a4ef6, 0x2]}, @timestamp_addr={0x44, 0x24, 0xed, 0x1, 0x9, [{@remote, 0x9}, {@broadcast, 0x6}, {@remote, 0x4}, {@multicast2, 0x7fff}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6b, 0x0, 0xf, [0x1, 0xfffffffc]}, @noop, @timestamp_addr={0x44, 0x2c, 0xd8, 0x1, 0x6, [{@rand_addr=0x64010100, 0xfff}, {@private=0xa010102, 0x1}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x8}, {@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x5f}]}, @ssrr={0x89, 0xb, 0x56, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb}}, @ip_retopts={{0xec, 0x0, 0x7, {[@generic={0x94, 0xd, "4de96578bee5c4a40e6b22"}, @noop, @timestamp_addr={0x44, 0xc, 0xcb, 0x1, 0xc, [{@local, 0x4}]}, @timestamp_addr={0x44, 0x24, 0x33, 0x1, 0x4, [{@private=0xa010101, 0xffffff59}, {@empty, 0x200}, {@remote, 0x1}, {@local, 0x2}]}, @timestamp_prespec={0x44, 0x54, 0xf9, 0x3, 0x0, [{@loopback, 0xfffffffa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@empty, 0x6000000}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2, 0xa}, {@multicast2, 0x9}, {@local, 0xbb}, {@dev={0xac, 0x14, 0x14, 0x41}, 0xffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}]}, @ssrr={0x89, 0xb, 0x4, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0x6f, 0x3, 0x6, [{@rand_addr=0x64010101, 0xf6f}, {@rand_addr=0x64010101, 0x4}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@loopback, 0x6d}]}, @timestamp={0x44, 0x10, 0x67, 0x0, 0x1, [0x6, 0x2b, 0x3]}]}}}, @ip_retopts={{0x94, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x41, 0x0, 0xb, [0x5, 0x747, 0xb7, 0x3ff]}, @lsrr={0x83, 0xf, 0x61, [@empty, @remote, @multicast2]}, @end, @timestamp_prespec={0x44, 0x34, 0x93, 0x3, 0x2, [{@local, 0x1b}, {@private=0xa010101, 0xfffffffb}, {@broadcast, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x7}, {@broadcast, 0x5}, {@empty, 0x44}]}, @timestamp={0x44, 0x8, 0x44, 0x0, 0x4, [0x2]}, @ssrr={0x89, 0x23, 0xc2, [@empty, @dev={0xac, 0x14, 0x14, 0xe}, @empty, @dev={0xac, 0x14, 0x14, 0x35}, @remote, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback, @broadcast]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x48, 0x0, 0x7, [0x2, 0x145, 0x1, 0x6, 0x64623857]}, @rr={0x7, 0x7, 0xe7, [@local]}, @generic={0x83, 0x2}, @cipso={0x86, 0x2d, 0x3, [{0x6, 0x9, "13b1c496bf6096"}, {0x1, 0x2}, {0x2, 0xd, "a31204e4f07f502ba7bca5"}, {0x0, 0xf, "31fcfe35b25b78378e70aa918f"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x310}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 18.63744925s ago: executing program 3 (id=1442): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x70, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xe, 0xfff3}, {0x9, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x4}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 18.633652787s ago: executing program 2 (id=1443): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) (async) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) (async) close(0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) (async) r4 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000100037040000000000000000000000dfe0b074356fed00", @ANYRES32=r5, @ANYBLOB="83040500000000002000128008000100677265001400028006000e000200000008000600ac141426"], 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmmsg$inet(r4, &(0x7f0000000880), 0x0, 0x4880) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000280)=[0x0], 0x0, 0xa5, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'gre0\x00', 0x0, 0x27, 0x18, 0x6, 0x81, {{0xf, 0x4, 0x3, 0x5, 0x3c, 0x64, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp_addr={0x44, 0xc, 0xf2, 0x1, 0x2, [{@local, 0x3}]}, @rr={0x7, 0x3, 0xab}, @timestamp_addr={0x44, 0x14, 0xaf, 0x1, 0x5, [{@multicast2}, {@rand_addr=0x64010101, 0x5}]}, @ra={0x94, 0x4, 0xfffe}]}}}}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'vxcan1\x00'}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) (async, rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@getchain={0x64, 0x66, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x1, 0x8}, {0x1, 0xa}, {0xc, 0x9}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x79a7528a}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1444752f}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x25f}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4c050) (async, rerun: 64) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r10, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0x8001, 0x43}, 0xffff, [0xde99, 0x8e9, 0xc, 0xbf4, 0x10, 0xfffffffffffffffb, 0x4000000000, 0x1, 0x34e0000, 0x7ffffffffffffffb, 0x6, 0x4, 0x6, 0x8, 0x0, 0x4]}) (async) write$cgroup_subtree(r10, &(0x7f0000000280)=ANY=[], 0x10448) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) (rerun: 64) socket$inet_sctp(0x2, 0x1, 0x84) 18.447813133s ago: executing program 1 (id=1445): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f00000000c0)="1c0000001d005f021cfffffffffffff8070000001d00000000e8ff00", 0x1c) listen(r0, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r8, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x91, 0x8}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 18.447544178s ago: executing program 2 (id=1446): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 18.317964324s ago: executing program 2 (id=1447): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@canfd={0xd, {{0x3, 0x1}, 0x2c, 0x0, 0x0, 0x0, "92419c881fa504b751ced2e545532cc63242739c42f0642d882230a95ea35235e00f8bc8852595e1eb0b2cab2e2ff13e6b32a449c1e64e910ec5eac2f5cc19c2"}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(r4, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="0100800014000104fe8000000000000000000000000000bb"], 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0x17, 0x4}, 0x20) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r8) ioctl(r5, 0x8b2c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x120, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x9}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r9, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f0000000600)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x1, 0x20, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0x13, 0x0, 0x13) write(r2, 0x0, 0x0) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r10, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r10, 0x1) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800a001a"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000540)=r7, 0x4) 18.317636543s ago: executing program 1 (id=1448): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000003c80)=ANY=[@ANYBLOB="b7000000016d0300bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff000000002704000000ffffffdd0a05000000000014000000016d030063030400000000001d44010000000000620a00fe00ffffffdb03000000000000b500f3ff000000009500000000000000023bc065b70300c6dfa041b63af4a3912435b1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e5f58b7382a8b7e8177168001815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc20eec363e4a8f6456e5ccae25ea21714ee18cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a277c7a775d55dfc28abbe9b5ea62d84f3a10746443d64364f56e24e6d2105bd901128c7e0ec82770c8206b1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009df5daf87068a608628efc56c752af4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9610f0000d36f38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eeeb883418f562ae00003ea96d10f172c0374d6eed82640700dfffffffffff499c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c64a403ade624d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca5f1380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f254a9bf93f04bf072f0bc2d38092909ef3613861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf82807773e534015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d2a9441eb315209d199e029e9135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d8516800ef3f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe3907000000466f4ca2195234648e0a1ca50db6f3d9436a7d55a9ad382400000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b45eb6dc5f6a9257d2283c42efc54fa84323a3304f41ff442c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba51dd5ab2b7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f80724a5bfc1e8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f068840a754c02181561542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ec3d59901da21afd6400000000832503969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98c2c73e1661261173f359e93d2c80000000998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebccbaf1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91cda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fc7741c7e3f426b9ed20debd883593ff5d691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579c23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d0f086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc0095f5a3bfdcffffffffffffffff61ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d480e7f13a65dbaa1af102d97681656bf56ff0cf36518f674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ffbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656659db4cb06aaaf9f02cfab5b9e61cc00e8e194299219a3f4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd06961912052f441e96884fcdc91f4a974242aabfc8adbadc9ca27955b5c90f1ed9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b723621f3b706bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37a7e20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a149414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e13e3a7a1511573cb1a8cdce3a8fea40792297d023ef52de2e75b9dbbfb8713178e2409b8d3b981bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd610000000000000000000000000000000000000000000000b41248c570c4223a471b755ce6956908e2b0e5dbc5e71ff2373d3ed89c2e2eafac81c21ac2436d2ffacffe2fc0d601a50221c88a47b264c5129004f350963b52702c5a360000000000000000000000000000000b4077dc8a1801a8bf833350d302c5439ea3dd0f3b8eb1dc93af1fbf863d33a38a53a02ec1e5b90cb673d6b0cfe7f35b20e438653e0f73ddfc78e3e1d1cc9798af0eb9b61bb4fc72454a57237b68ea614ad898374e952784a18ffb9dc4447acd7ad28a63f88007ad8cba31a6fdd9982c97a913dffe69654d3a00b98c45ead9b9619f946c82f5789379d0d942020652ccfac45e1ef5e93e72b7d5381a3c61fbabc1286285110540075bc7aee3e595f9850b9e96887d53404add0021b198be851d9f797d964fe7501997524d28ce7b1d5f8203d9f756efd5676c5d85052030c27e2a99ee39007d9b3c305b1c7d14899b42149d6c437d863651d30426e36ff66bafa93ce3f76c18b8c91ac65b7ab49f03b7c0d0687e1ee0369e88d674f51fe69423000000000000596444d8a7bf983d6f0342b2987e520100000000000000f37cda7868234eeefbd472c7b396c182f2b9a8bf2f85ad1a7b18681784c8fcf0cf5e34baebc594de0d6c9244a834b82a162739619b5f2e3c24378417f71f855b7958fbae631a8aa30b2120a9e23d8711f529b0cd7ce6ee2b0841a4d9e82e6ef54089b64175338ed7effe440c97c663a1000000000033f9ee8bc74fb676198caf54f9a07461c30b4b65890f2b64e68eb2a265f641e68af046fb8751055c6dba7e49068656dbf01c26b3812cec4204084e4c3f5abb86121a3eddd10720d3b66a3a8033aab499cf56b7e5b01d37c1d7b4f5968040cd727efc9a1d69fa550313969508472efa833327d1bcae9167e3316f272ba2efdebf91f15b4a2bc27ea303834692d92961d3dcff0e4f55d9e3e7c66e8d3324216c4c77b95c000c5f30d56da969b1ce3a3e1a8ce5a632b3c404e7b455cac15273ce31a57dc7bed120f5396671eb7f8670ddc26ecc7461b1badfc98076c95aa811954827767c023c51e183cf1de0230912617f72169a3f9bda12524491e213929a9d095abb9e57f33ad7e5301e5995e65246bc06f931d983596a4979d403f1b3984123633e9af67a0972612b5874f2000000009a8c3199c30dd0c416da1c22e346958bda493b297fcb98181ac449ca17a08e27ae81320e316e018fc9c77e7434079bc06ca1d315a94d177a888cc189fa5649bf5b9ab787118c29d735cc6dfaa965ea9ebbbaff83a06292aff2e3ed23750786136f113cdb04b881f721d02bd3c99b9dd3fa2713cda74eb3dd3422c736dc5c7bd3d1d008b5af391dac38341744dc38e8620fd4b35974ef1d93a907f37a84e1d630dd93fcde4aaf59e0e1f64ba3eec9da0b3d3b241fa52d9db1b137140b27434e74b783f9b62cc516f99e425ed603c5e65c0c3b08815a4aac7c1db4e47261148fa3a54359a2157b9a0fcecd54abbfaaee20f9a6dcc5380f01f22b8fd02b340118a65cef1597f5ce8d8a602120a3b2bb8ccc199dc36b2110a2200a2d3eaff9bc85ff68cd233fb2c8198682bd1c99fd7d66f3554439db4145028bc69579e516fd32253f641b0bffebc32cd3e90d67c77017ae323d8d31bd9f061d270d89737acea845067d8fd36fcce1ae9cd64beeae55d4c8159262240837b2854e5e08c58551453f1b9e46c6a7aaa972255fe7ad8f653168ce260000000000000000008b816f1b5e51781fa92c8b2c886bd992507715f8554276f56e3498156ca6d639de489096f49f2e1850d7399b1fe3801d3b2c0f65abcb67ac3ded74b099f76fee439abfb20c23864280855f395e3449859040832ea50df150deb14fc420a8e91ec84ccd338ada3c5778cbd52bcc2ac93b00e64959286b99231afa239dbefc90a21180f12a03c370980c8101d8a014f6139e998c938bccc92bfc987af6f02ec667c9597c19cc4193c09d152093013629b93e5104447e54ba7bc95ed2b3532421d6a0424c1e000000000000c1af53b85ab7060d6797a18cac2bf246a16f503e09832de7f7aa523d2325b4e3b651b1883ab9a3012f2b5b91e2782250a650d2dddca42a671f083b4a3739a651feb7c1c6903f50ce2cb6501fa22cf55230792a1e2fc902c9115a3b912dcef392b050c9a2870e7da0ca2ce908ff7bc5c72b591004ec3034b189a580e7f6ef153c04bb5599ab22686c5520a02e14a53f105d7b6a097e86b61500bdd7e6e133a9870ec9c0bb77c90702910cc39a0f3a419f12ba636b5837a5ecb110c89fb8d14da2d04175b18a14b2618d05fb58e9a832a4993472e5d068fe44e92676e484662a656d93a0f368c0cfc7"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000}, 0x3c) 18.28086358s ago: executing program 3 (id=1449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, @broadcast, 0xf, 0xad6}}) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES64=r0, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64, @ANYRES64, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="ecff000001"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0200"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="c3100000010000002800128009000100766c616e00000000180002800c0002001e0000001f00000006000100ff00000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x58}}, 0x8000) 18.230986658s ago: executing program 1 (id=1450): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f00000001c0), 0x0}, 0x20) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 18.134177112s ago: executing program 3 (id=1451): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x1, 0x40, 0x2}}]}]}}}]}, 0x6c}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x1, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) unshare(0x2c020400) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r9}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x8, 0x70bd27, 0x25dfdc03, {0x0, 0x0, 0x0, r8, 0x40345, 0x6c101}}, 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 18.133407507s ago: executing program 0 (id=1452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x13) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)=ANY=[@ANYBLOB="69020000", @ANYRES16=r1, @ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf25030000005800018044000400200001000a004e200000000cff01000000000000000000000000000101000000200002000a004e2200000004fc0100000000000000000000000000008d0100000d0001007564703a73797a30000000dc197ff1a50fe6b953df2eadaf4aff281292b0c581e98653c3f2dc11b37bc034f695b657dbc458e170f900cbabca94d28cda551dbeb5754bb21d26882124a67c33f5d4b1a5b6ecffb18bd5"], 0x6c}}, 0x810) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @private}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000003c0)=[{&(0x7f0000001340)="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", 0xcc1}], 0x1, 0x0) socket(0xa, 0x80000, 0x7fff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x84, r8, 0x10, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x8e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r9, &(0x7f00000009c0)=@abs, &(0x7f0000000a40)=0x6e, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd0, r8, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x4040014) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r2) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000980)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r10, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1, 0x7fffffff, 0x3, 0x80, 0x3]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x8, 0x1]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xb, 0x4]}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40091}, 0x20000001) 18.032297442s ago: executing program 0 (id=1453): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000004c0)={0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="d22287a09ee4b0c898f493e2a1476e6f174b145ba11902b15cd5d397c832c7afa511dd10628830fadaf99abacfa80c82a60441220b3f1931334f587fbe6c0077b058d1f8220a014929a3edbebafe74880f19b4248e6d08006a4c4ff20f853a513db32303884716d586082a"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r2}, 0x94) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40084}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000018140100020000000300000008000100"], 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x0) 17.913011227s ago: executing program 4 (id=1454): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, &(0x7f0000000200)={0x2, @long}, 0x8) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000034b0d716d5ca84d9850000009b00000085000000070000009500000000000000"], &(0x7f0000000680)='GPL\x00'}, 0x5d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000180)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r6}, 0x20) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5b5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xcc}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x50}}, 0x8804) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, &(0x7f0000000400)=[{0x2, 0x0, {0x2, 0xff, 0x2}, {0x2, 0x0, 0x4}, 0xff, 0xfe}, {0xfffffffffffffffe, 0x0, {0x1d3c8e265b6f8605, 0x1, 0x4}, {0x0, 0xf0, 0x4}, 0xfc}, {0x1, 0x3, {0x0, 0xf0, 0x4}, {0x1, 0x0, 0x4}, 0x1, 0xfe}, {0x0, 0x2, {0x1, 0xff, 0x2}, {0x1, 0xff, 0x4}, 0x0, 0xfe}], 0x80) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r9, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_PROMISC(r9, 0x6b, 0x2, &(0x7f0000000180)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r10, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 17.61387219s ago: executing program 3 (id=1455): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="9200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000ffe4b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20020600) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000200), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001000370400000000000000000000d5d0", @ANYRES32=r7, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000390423bd700000000000000003e4", @ANYRES32=r7, @ANYBLOB="00000000000000001800128008000100736974000c00028006000f0041"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0xffffff81, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="42f71500000009000000930820001f1f00000000", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=r7, @ANYBLOB="04000000010000000200"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000060040000000000088020000183200000400000000000000000200e309790100d232bd7f85200000010000008762f4ff0800000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000940)='syzkaller\x00', 0x400, 0x98, &(0x7f0000000980)=""/152, 0x40f00, 0x5, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b80)=[r0, r0, r0, r8, r9], &(0x7f0000000bc0)=[{0x5, 0x3, 0x0, 0xa879c93d7c6e4f98}, {0x1, 0x4, 0xb, 0x6}, {0x1, 0x3, 0x7, 0xe06a2c312c83f145}, {0x1, 0x1, 0x6, 0x6}], 0x10, 0xd}, 0x94) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000540)=0xfff) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000680)='%pB \x00'}, 0x5) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000700)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xfffffffffffffff9) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@empty, @in=@multicast1, 0x4e20, 0x9, 0x4e20, 0x7, 0x2, 0x80, 0x80, 0x2b, r12, r13}, {0x9, 0x58e000, 0x2, 0x4, 0x3, 0x1, 0x7a8, 0x892}, {0x1, 0x8, 0x5, 0x6}, 0x2, 0x6e6bb9, 0x0, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x1, 0x2, 0xc, 0x7, 0xffffffff}}, 0xe8) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 17.57679872s ago: executing program 0 (id=1456): socket(0x10, 0x3, 0x0) (async, rerun: 64) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000020000000000000", 0x1b) r2 = socket$kcm(0xa, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x7) (async) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) close(0x4) (async) r4 = socket(0x2, 0x80805, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) (async) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r7, 0x2f, 0x1, 0x2, 0x1, 0x26, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x1, 0x1000}}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRES64=r2, @ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r8 = epoll_create1(0x0) (async) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0xa000000b}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000611920000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 17.476818597s ago: executing program 1 (id=1457): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='lp\x00', 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x65) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) tee(r2, r6, 0x8f5, 0x100000000000000) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x74, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x29}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0xb4, 0x16, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x164}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) write$cgroup_type(r6, &(0x7f0000000180), 0x9) accept$phonet_pipe(r3, 0x0, &(0x7f0000000140)) write(r4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.106721664s ago: executing program 2 (id=1458): socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80000, 0x3) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2800000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000000000054ddc5700000a400000000c0a010400000008000000000a0000060900020073797a31000000003b00e96513104597b3b9001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "99161d83"}, &(0x7f0000000080)=0xffffffffffffff52) 17.103587169s ago: executing program 0 (id=1459): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x20) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000001d0000000800e95a", @ANYRES32=0x0, @ANYBLOB="38002f800c0002000000000000000000280003801c0003800600010000000000080002000200000006000300a3aa0000080001"], 0x54}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r6], 0x5c}}, 0x800) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0) 16.454600662s ago: executing program 1 (id=1460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "7f3900005200", "9a5d38a17f00c500000000feff00", "a1e3837f", "542924b4eab9743a"}, 0x28) recvfrom(r1, &(0x7f0000000440)=""/4070, 0xfe6, 0x117, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000004758effeedbd7922ce4daa7efdc3c4c3faa5a735db1a1b198bb8532bc3c023d0cd49e6d8489100"/66, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000001440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 16.371127834s ago: executing program 2 (id=1461): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)={@cgroup=r3, r3, 0x2f, 0x1c, 0x4}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x3d289}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x9}]}}}, @IFLA_MTU={0x8, 0x4, 0x2000}]}, 0x50}}, 0x0) 15.31967699s ago: executing program 1 (id=1462): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xfa}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xea}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2}, @IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x80}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x78}}, 0x20000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x40, 0x7838, 0x135, 0x0, {{0x28, 0x4, 0x0, 0x9, 0xa0, 0x66, 0x0, 0x9, 0x29, 0x0, @private=0xa010101, @broadcast, {[@cipso={0x86, 0xd, 0x0, [{0x2, 0x7, "b416a8b372"}]}, @timestamp_addr={0x44, 0xc, 0x83, 0x1, 0x3, [{@rand_addr=0x64010100, 0x60a8}]}, @timestamp_prespec={0x44, 0x14, 0xf3, 0x3, 0x6, [{@remote, 0x5}, {@multicast2, 0x2}]}, @ra={0x94, 0x4}, @rr={0x7, 0x1b, 0xc9, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_prespec={0x44, 0x24, 0xa, 0x3, 0xb, [{@rand_addr=0x64010100, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @lsrr={0x83, 0x1b, 0xd1, [@broadcast, @rand_addr=0x64010101, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000300)={'ip_vti0\x00', r1, 0x40, 0x10, 0xf17, 0x80000001, {{0x32, 0x4, 0x3, 0x4, 0xc8, 0x65, 0x0, 0x6, 0x4, 0x0, @multicast1, @private=0xa010101, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x29, 0x1, 0x9, [{@private=0xa010101, 0x7}]}, @generic={0x88, 0xa, "5ca627695afbc0ef"}, @lsrr={0x83, 0xb, 0x83, [@loopback, @dev={0xac, 0x14, 0x14, 0x3c}]}, @rr={0x7, 0x27, 0x89, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x8, 0x61, 0x0, 0xf, [0x9]}, @lsrr={0x83, 0xf, 0xd5, [@loopback, @broadcast, @empty]}, @cipso={0x86, 0x46, 0x3, [{0x2, 0x5, 'b\']'}, {0x7, 0xe, "f8fd5999e4c9ee0874ec7750"}, {0x2, 0x7, "c6488cc404"}, {0x7, 0xc, "8c77892a43cc0a753934"}, {0x2, 0x3, "90"}, {0x1, 0xb, "be18e7ac5919f4c28b"}, {0x0, 0xc, "04d1acb12a62224e8f00"}]}, @rr={0x7, 0x7, 0x8a, [@rand_addr=0x64010100]}, @noop]}}}}}) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f00000001c0)=0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000280)="0800ac22a2caaf4a", 0x8}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000001000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x11, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4004010) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x28, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x2000300, 0xe, 0x0, &(0x7f0000000100)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r11, 0x2, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2000c811) listen(r2, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x52, 0x1, 0x0, 0x25dfdbfd, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfffffffffffffffe}]}, 0x20}}, 0x0) 2.846245058s ago: executing program 32 (id=1454): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, &(0x7f0000000200)={0x2, @long}, 0x8) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000034b0d716d5ca84d9850000009b00000085000000070000009500000000000000"], &(0x7f0000000680)='GPL\x00'}, 0x5d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000180)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r6}, 0x20) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5b5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xcc}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x50}}, 0x8804) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, &(0x7f0000000400)=[{0x2, 0x0, {0x2, 0xff, 0x2}, {0x2, 0x0, 0x4}, 0xff, 0xfe}, {0xfffffffffffffffe, 0x0, {0x1d3c8e265b6f8605, 0x1, 0x4}, {0x0, 0xf0, 0x4}, 0xfc}, {0x1, 0x3, {0x0, 0xf0, 0x4}, {0x1, 0x0, 0x4}, 0x1, 0xfe}, {0x0, 0x2, {0x1, 0xff, 0x2}, {0x1, 0xff, 0x4}, 0x0, 0xfe}], 0x80) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r9, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_PROMISC(r9, 0x6b, 0x2, &(0x7f0000000180)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r10, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.770244437s ago: executing program 33 (id=1459): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x20) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000001d0000000800e95a", @ANYRES32=0x0, @ANYBLOB="38002f800c0002000000000000000000280003801c0003800600010000000000080002000200000006000300a3aa0000080001"], 0x54}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r6], 0x5c}}, 0x800) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0) 1.655419411s ago: executing program 34 (id=1455): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="9200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000ffe4b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20020600) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000200), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001000370400000000000000000000d5d0", @ANYRES32=r7, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000390423bd700000000000000003e4", @ANYRES32=r7, @ANYBLOB="00000000000000001800128008000100736974000c00028006000f0041"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0xffffff81, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="42f71500000009000000930820001f1f00000000", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=r7, @ANYBLOB="04000000010000000200"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000060040000000000088020000183200000400000000000000000200e309790100d232bd7f85200000010000008762f4ff0800000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000940)='syzkaller\x00', 0x400, 0x98, &(0x7f0000000980)=""/152, 0x40f00, 0x5, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b80)=[r0, r0, r0, r8, r9], &(0x7f0000000bc0)=[{0x5, 0x3, 0x0, 0xa879c93d7c6e4f98}, {0x1, 0x4, 0xb, 0x6}, {0x1, 0x3, 0x7, 0xe06a2c312c83f145}, {0x1, 0x1, 0x6, 0x6}], 0x10, 0xd}, 0x94) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000540)=0xfff) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000680)='%pB \x00'}, 0x5) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000700)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xfffffffffffffff9) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@empty, @in=@multicast1, 0x4e20, 0x9, 0x4e20, 0x7, 0x2, 0x80, 0x80, 0x2b, r12, r13}, {0x9, 0x58e000, 0x2, 0x4, 0x3, 0x1, 0x7a8, 0x892}, {0x1, 0x8, 0x5, 0x6}, 0x2, 0x6e6bb9, 0x0, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x1, 0x2, 0xc, 0x7, 0xffffffff}}, 0xe8) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 541.697814ms ago: executing program 35 (id=1461): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)={@cgroup=r3, r3, 0x2f, 0x1c, 0x4}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x3d289}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x9}]}}}, @IFLA_MTU={0x8, 0x4, 0x2000}]}, 0x50}}, 0x0) 0s ago: executing program 36 (id=1462): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xfa}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xea}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2}, @IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x80}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x78}}, 0x20000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x40, 0x7838, 0x135, 0x0, {{0x28, 0x4, 0x0, 0x9, 0xa0, 0x66, 0x0, 0x9, 0x29, 0x0, @private=0xa010101, @broadcast, {[@cipso={0x86, 0xd, 0x0, [{0x2, 0x7, "b416a8b372"}]}, @timestamp_addr={0x44, 0xc, 0x83, 0x1, 0x3, [{@rand_addr=0x64010100, 0x60a8}]}, @timestamp_prespec={0x44, 0x14, 0xf3, 0x3, 0x6, [{@remote, 0x5}, {@multicast2, 0x2}]}, @ra={0x94, 0x4}, @rr={0x7, 0x1b, 0xc9, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_prespec={0x44, 0x24, 0xa, 0x3, 0xb, [{@rand_addr=0x64010100, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @lsrr={0x83, 0x1b, 0xd1, [@broadcast, @rand_addr=0x64010101, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000300)={'ip_vti0\x00', r1, 0x40, 0x10, 0xf17, 0x80000001, {{0x32, 0x4, 0x3, 0x4, 0xc8, 0x65, 0x0, 0x6, 0x4, 0x0, @multicast1, @private=0xa010101, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x29, 0x1, 0x9, [{@private=0xa010101, 0x7}]}, @generic={0x88, 0xa, "5ca627695afbc0ef"}, @lsrr={0x83, 0xb, 0x83, [@loopback, @dev={0xac, 0x14, 0x14, 0x3c}]}, @rr={0x7, 0x27, 0x89, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x8, 0x61, 0x0, 0xf, [0x9]}, @lsrr={0x83, 0xf, 0xd5, [@loopback, @broadcast, @empty]}, @cipso={0x86, 0x46, 0x3, [{0x2, 0x5, 'b\']'}, {0x7, 0xe, "f8fd5999e4c9ee0874ec7750"}, {0x2, 0x7, "c6488cc404"}, {0x7, 0xc, "8c77892a43cc0a753934"}, {0x2, 0x3, "90"}, {0x1, 0xb, "be18e7ac5919f4c28b"}, {0x0, 0xc, "04d1acb12a62224e8f00"}]}, @rr={0x7, 0x7, 0x8a, [@rand_addr=0x64010100]}, @noop]}}}}}) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f00000001c0)=0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000280)="0800ac22a2caaf4a", 0x8}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000001000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x11, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4004010) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x28, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x2000300, 0xe, 0x0, &(0x7f0000000100)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r11, 0x2, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2000c811) listen(r2, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x52, 0x1, 0x0, 0x25dfdbfd, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfffffffffffffffe}]}, 0x20}}, 0x0) kernel console output (not intermixed with test programs): lter on device netdevsim3 [ 192.822268][ T8767] 8021q: adding VLAN 0 to HW filter on device team1 [ 192.830326][ T8767] 8021q: adding VLAN 0 to HW filter on device team2 [ 192.838688][ T8767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.848869][ T8767] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.865624][ T8773] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 192.877487][ T7008] bond4: (slave bridge0): link status up again after 0 ms [ 192.915562][ T7008] bond4: (slave bridge0): link status up again after 0 ms [ 192.955454][ T663] bond4: (slave bridge0): link status up again after 0 ms [ 192.997748][ T7007] bond4: (slave bridge0): link status up again after 0 ms [ 193.036854][ T7007] bond4: (slave bridge0): link status up again after 0 ms [ 193.077149][ T7007] bond4: (slave bridge0): link status up again after 0 ms [ 193.111418][ T7007] bond4: (slave bridge0): link status up again after 0 ms [ 193.145349][ T7008] bond4: (slave bridge0): link status up again after 0 ms [ 193.175686][ T7008] bond4: (slave bridge0): link status up again after 0 ms [ 193.195364][ T7011] bond4: (slave bridge0): link status up again after 0 ms [ 193.259836][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.280679][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 193.513266][ T8800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.697'. [ 194.154699][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.162144][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.606838][ T8805] netlink: 28 bytes leftover after parsing attributes in process `syz.3.698'. [ 196.264860][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.297393][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 196.319256][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.336186][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 196.384172][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.427942][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 196.512616][ T7011] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 196.557511][ T7011] bond1: (slave veth3): making interface the new active one [ 196.649287][ T7011] bond1: active interface up! [ 197.426867][ T8838] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 197.437331][ T8838] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 197.655625][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 197.699415][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 197.967469][ T7008] net_ratelimit: 160 callbacks suppressed [ 197.967489][ T7008] bond4: (slave bridge0): failed to get link speed/duplex [ 198.156996][ T8862] bridge3: entered promiscuous mode [ 198.200261][ T8862] bridge3: entered allmulticast mode [ 198.367960][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 198.441145][ T8880] netlink: 20 bytes leftover after parsing attributes in process `syz.4.714'. [ 198.536050][ T8880] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 198.565799][ T7010] bond4: (slave bridge0): failed to get link speed/duplex [ 198.619553][ T8884] syzkaller0: entered promiscuous mode [ 198.638679][ T8884] syzkaller0: entered allmulticast mode [ 198.685511][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 198.724751][ T8888] Bluetooth: MGMT ver 1.23 [ 198.917632][ T7004] bond4: (slave bridge0): failed to get link speed/duplex [ 199.049896][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 199.181266][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 199.207126][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 199.386774][ T8909] xt_hashlimit: size too large, truncated to 1048576 [ 199.433749][ T8911] GUP no longer grows the stack in syz.2.725 (8911): 200000003000-20000000a000 (200000001000) [ 199.452524][ T8911] CPU: 0 UID: 0 PID: 8911 Comm: syz.2.725 Not tainted syzkaller #0 PREEMPT(full) [ 199.452551][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.452561][ T8911] Call Trace: [ 199.452569][ T8911] [ 199.452577][ T8911] dump_stack_lvl+0xe8/0x150 [ 199.452604][ T8911] __get_user_pages+0x2378/0x2730 [ 199.452646][ T8911] ? __gup_longterm_locked+0xc4e/0x1630 [ 199.452667][ T8911] ? down_read_killable+0x1bb/0x340 [ 199.452696][ T8911] __gup_longterm_locked+0xdcf/0x1630 [ 199.452715][ T8911] ? irqentry_exit+0x218/0x8b0 [ 199.452749][ T8911] ? gup_fast_fallback+0x1c40/0x20d0 [ 199.452776][ T8911] gup_fast_fallback+0x1d84/0x20d0 [ 199.452825][ T8911] ? __pfx_gup_fast_fallback+0x10/0x10 [ 199.452846][ T8911] ? is_valid_gup_args+0x11f/0x200 [ 199.452865][ T8911] ? get_user_pages_fast+0x4d/0xb0 [ 199.452883][ T8911] __iov_iter_get_pages_alloc+0x370/0xa10 [ 199.452908][ T8911] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 199.452936][ T8911] iov_iter_get_pages2+0x5e/0xa0 [ 199.452957][ T8911] __se_sys_vmsplice+0x7c7/0x1620 [ 199.452979][ T8911] ? irqentry_exit+0x218/0x8b0 [ 199.453016][ T8911] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 199.453038][ T8911] ? finish_task_switch+0x427/0xbe0 [ 199.453059][ T8911] ? rcu_is_watching+0x15/0xb0 [ 199.453083][ T8911] ? __schedule+0x1837/0x5740 [ 199.453098][ T8911] ? taprio_dequeue+0x26/0x540 [ 199.453130][ T8911] ? sched_clock_cpu+0x74/0x440 [ 199.453163][ T8911] ? __pfx___schedule+0x10/0x10 [ 199.453199][ T8911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.453217][ T8911] do_syscall_64+0x174/0x580 [ 199.453237][ T8911] ? clear_bhb_loop+0x40/0x90 [ 199.453259][ T8911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.453275][ T8911] RIP: 0033:0x7f4b1659ce59 [ 199.453292][ T8911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.453305][ T8911] RSP: 002b:00007f4b174b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 199.453321][ T8911] RAX: ffffffffffffffda RBX: 00007f4b16815fa0 RCX: 00007f4b1659ce59 [ 199.453333][ T8911] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 199.453342][ T8911] RBP: 00007f4b16632d6f R08: 0000000000000000 R09: 0000000000000000 [ 199.453350][ T8911] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 199.453359][ T8911] R13: 00007f4b16816038 R14: 00007f4b16815fa0 R15: 00007fff63f75578 [ 199.453386][ T8911] [ 199.455916][ T6987] bond4: (slave bridge0): failed to get link speed/duplex [ 200.123802][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.727'. [ 200.177166][ T7008] bond4: (slave bridge0): failed to get link speed/duplex [ 200.286043][ T7008] bond4: (slave bridge0): failed to get link speed/duplex [ 200.313638][ T8924] syzkaller0: entered promiscuous mode [ 200.325922][ T8928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.729'. [ 200.340423][ T8924] syzkaller0: entered allmulticast mode [ 202.233601][ T8903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.244525][ T8924] netlink: 'syz.3.728': attribute type 1 has an invalid length. [ 202.530395][ T8941] netlink: 40 bytes leftover after parsing attributes in process `syz.3.734'. [ 202.540848][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.735'. [ 202.622479][ T8950] netlink: 'syz.2.736': attribute type 1 has an invalid length. [ 202.744904][ T8944] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 202.804205][ T8944] bond5 (unregistering): Released all slaves [ 202.900923][ T8950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.933512][ T8953] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 202.967466][ T8953] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 203.032312][ T8963] netlink: 14 bytes leftover after parsing attributes in process `syz.1.737'. [ 203.831485][ T8978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.740'. [ 203.846825][ T12] net_ratelimit: 21 callbacks suppressed [ 203.846871][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 203.901680][ T8978] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 203.987908][ T8961] netlink: 'syz.1.737': attribute type 9 has an invalid length. [ 204.126073][ T6564] bond4: (slave bridge0): failed to get link speed/duplex [ 204.266669][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 204.548233][ T8993] x_tables: duplicate underflow at hook 3 [ 204.616621][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 204.808190][ T9000] tipc: Enabled bearer , priority 0 [ 204.895980][ T9007] FAULT_INJECTION: forcing a failure. [ 204.895980][ T9007] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 204.912382][ T9007] CPU: 0 UID: 0 PID: 9007 Comm: syz.0.746 Not tainted syzkaller #0 PREEMPT(full) [ 204.912404][ T9007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 204.912413][ T9007] Call Trace: [ 204.912420][ T9007] [ 204.912427][ T9007] dump_stack_lvl+0xe8/0x150 [ 204.912452][ T9007] should_fail_ex+0x412/0x560 [ 204.912474][ T9007] _copy_from_iter+0x1d3/0x1670 [ 204.912495][ T9007] ? rcu_is_watching+0x15/0xb0 [ 204.912521][ T9007] ? __pfx__copy_from_iter+0x10/0x10 [ 204.912545][ T9007] ? netlink_sendmsg+0x650/0xb40 [ 204.912562][ T9007] ? skb_put+0x11b/0x210 [ 204.912582][ T9007] netlink_sendmsg+0x6c0/0xb40 [ 204.912602][ T9007] ? lockdep_hardirqs_on+0x7a/0x110 [ 204.912628][ T9007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.912658][ T9007] ____sys_sendmsg+0x972/0x9f0 [ 204.912675][ T9007] ? __might_fault+0xaf/0x130 [ 204.912700][ T9007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.912726][ T9007] ? import_iovec+0x73/0xa0 [ 204.912746][ T9007] ___sys_sendmsg+0x2a5/0x360 [ 204.912762][ T9007] ? __lock_acquire+0x6b5/0x2cf0 [ 204.912792][ T9007] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.912842][ T9007] ? __fget_files+0x2a/0x420 [ 204.912859][ T9007] ? __fget_files+0x3a0/0x420 [ 204.912887][ T9007] __x64_sys_sendmsg+0x1bd/0x2a0 [ 204.912907][ T9007] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.912933][ T9007] ? __pfx_ksys_write+0x10/0x10 [ 204.912953][ T9007] ? handle_softirqs+0x715/0x840 [ 204.912978][ T9007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.912996][ T9007] do_syscall_64+0x174/0x580 [ 204.913014][ T9007] ? clear_bhb_loop+0x40/0x90 [ 204.913034][ T9007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.913049][ T9007] RIP: 0033:0x7fb75619ce59 [ 204.913064][ T9007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.913077][ T9007] RSP: 002b:00007fb7570c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.913093][ T9007] RAX: ffffffffffffffda RBX: 00007fb756416090 RCX: 00007fb75619ce59 [ 204.913104][ T9007] RDX: 0000000020000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 204.913114][ T9007] RBP: 00007fb7570c3090 R08: 0000000000000000 R09: 0000000000000000 [ 204.913123][ T9007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.913132][ T9007] R13: 00007fb756416128 R14: 00007fb756416090 R15: 00007ffd4a11ef58 [ 204.913159][ T9007] [ 205.194250][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 205.378014][ T9015] netlink: 'syz.3.750': attribute type 32 has an invalid length. [ 205.387537][ T7009] bond4: (slave bridge0): failed to get link speed/duplex [ 205.528328][ T9015] netlink: 76 bytes leftover after parsing attributes in process `syz.3.750'. [ 205.606239][ T7009] bond4: (slave bridge0): failed to get link speed/duplex [ 205.664437][ T9021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.752'. [ 205.673337][ T9021] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 205.745678][ T7009] bond4: (slave bridge0): failed to get link speed/duplex [ 205.901076][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.755'. [ 206.984203][ T9058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.764'. [ 207.076391][ T9065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.762'. [ 207.222236][ T9051] block nbd1: server does not support multiple connections per device. [ 207.261295][ T9051] block nbd1: shutting down sockets [ 209.278732][ T7011] net_ratelimit: 3 callbacks suppressed [ 209.278767][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 209.553719][ T7008] bond4: (slave bridge0): failed to get link speed/duplex [ 209.771484][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 209.981917][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 210.127409][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 210.633120][ T7008] bond4: (slave bridge0): failed to get link speed/duplex [ 210.804656][ T9115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.776'. [ 210.891911][ T9115] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 210.956986][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 211.039153][ T9133] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.782'. [ 211.196659][ T9136] netlink: 'syz.0.783': attribute type 1 has an invalid length. [ 211.363564][ T9140] netlink: 'syz.4.785': attribute type 1 has an invalid length. [ 211.406908][ T9144] netlink: 'syz.0.783': attribute type 10 has an invalid length. [ 211.443254][ T9144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.783'. [ 212.524106][ T9159] netlink: 36 bytes leftover after parsing attributes in process `syz.2.788'. [ 212.562280][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 213.434309][ T5645] Bluetooth: hci2: command 0x0401 tx timeout [ 213.441206][ T5627] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 214.012259][ T9171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.793'. [ 214.021205][ T9171] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 214.324622][ T9182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.796'. [ 214.808116][ T9136] 8021q: adding VLAN 0 to HW filter on device bond6 [ 214.846200][ T9139] bond6: (slave veth7): Enslaving as an active interface with a down link [ 214.874132][ T9142] bond6: (slave dummy0): making interface the new active one [ 214.882876][ T9142] dummy0: entered promiscuous mode [ 214.917699][ T9142] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 214.963432][ T9144] bond6: (slave dummy0): Releasing active interface [ 215.129733][ T9155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.155853][ T9193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.798'. [ 215.289489][ T9184] veth0: entered promiscuous mode [ 215.296432][ T9185] veth0: left promiscuous mode [ 215.309374][ T9197] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 215.354366][ T9193] ip6gre1: entered promiscuous mode [ 215.359620][ T9193] ip6gre1: entered allmulticast mode [ 215.851944][ T9215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.804'. [ 215.862068][ T9215] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 215.875672][ T9222] netlink: 168 bytes leftover after parsing attributes in process `syz.1.805'. [ 216.030904][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 216.986402][ T9243] netlink: zone id is out of range [ 217.153609][ T9246] netlink: 88 bytes leftover after parsing attributes in process `syz.0.811'. [ 217.260734][ T9248] netlink: 180 bytes leftover after parsing attributes in process `syz.3.813'. [ 218.769513][ T6564] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 219.052303][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 219.192020][ T9254] netlink: 40 bytes leftover after parsing attributes in process `syz.1.815'. [ 219.216926][ T663] bond4: (slave bridge0): failed to get link speed/duplex [ 219.403529][ T57] bond4: (slave bridge0): failed to get link speed/duplex [ 219.548364][ T9262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.818'. [ 219.557417][ T9262] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 219.565968][ T7010] bond4: (slave bridge0): failed to get link speed/duplex [ 219.746703][ T7010] bond4: (slave bridge0): failed to get link speed/duplex [ 220.051303][ T9279] syzkaller0: entered promiscuous mode [ 220.060485][ T9279] syzkaller0: entered allmulticast mode [ 220.091802][ T9279] tipc: Started in network mode [ 220.102765][ T9279] tipc: Node identity 7202d8a8aefe, cluster identity 4711 [ 220.110262][ T9279] tipc: Enabled bearer , priority 0 [ 220.168559][ T7004] net_ratelimit: 1 callbacks suppressed [ 220.168610][ T7004] bond4: (slave bridge0): failed to get link speed/duplex [ 220.169529][ T9279] netlink: 44 bytes leftover after parsing attributes in process `syz.1.823'. [ 220.209082][ T9284] netlink: 32 bytes leftover after parsing attributes in process `syz.1.823'. [ 221.024995][ T9307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.830'. [ 221.137725][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'. [ 221.199132][ T9316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.831'. [ 224.126945][ T9307] ip6gre1: entered promiscuous mode [ 224.132214][ T9307] ip6gre1: entered allmulticast mode [ 224.141739][ T6742] tipc: Node number set to 3707558056 [ 224.230685][ T9278] tipc: Resetting bearer [ 224.273253][ T9278] tipc: Disabling bearer [ 224.484885][ T9343] macsec1: entered allmulticast mode [ 224.492224][ T9343] bond0: entered allmulticast mode [ 224.511134][ T9347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.834'. [ 224.512214][ T9343] bond_slave_0: entered allmulticast mode [ 224.520023][ T9347] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 224.603112][ T9343] bond_slave_1: entered allmulticast mode [ 224.609053][ T9343] bond_slave_0: entered promiscuous mode [ 224.615018][ T9343] bond_slave_1: entered promiscuous mode [ 224.622207][ T9343] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 224.630697][ T9343] bond0: left allmulticast mode [ 224.635578][ T9343] bond_slave_0: left allmulticast mode [ 224.729735][ T9343] bond_slave_1: left allmulticast mode [ 224.830173][ T24] bond_slave_0: left promiscuous mode [ 224.837033][ T24] bond_slave_1: left promiscuous mode [ 224.939621][ T9357] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.836'. [ 224.948916][ T9357] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 224.983447][ T7010] bond4: (slave bridge0): failed to get link speed/duplex [ 225.210886][ T13] bond4: (slave bridge0): failed to get link speed/duplex [ 225.441236][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 225.498154][ T9369] netlink: 40 bytes leftover after parsing attributes in process `syz.2.842'. [ 225.676248][ T7010] bond4: (slave bridge0): failed to get link speed/duplex [ 225.886581][ T7010] bond4: (slave bridge0): failed to get link speed/duplex [ 226.105258][ T7009] bond4: (slave bridge0): failed to get link speed/duplex [ 226.129264][ T9385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.846'. [ 226.225807][ T9385] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 226.313852][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 226.334578][ T9390] netlink: 76 bytes leftover after parsing attributes in process `syz.0.847'. [ 226.454991][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 226.687553][ T7010] bond4: (slave bridge0): failed to get link speed/duplex [ 226.878027][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 226.908209][ T9409] Cannot find set identified by id 0 to match [ 227.232097][ T9421] netlink: 40 bytes leftover after parsing attributes in process `syz.4.854'. [ 227.267922][ T9421] ip6gre1: entered promiscuous mode [ 227.273180][ T9421] ip6gre1: entered allmulticast mode [ 227.721497][ T9431] netlink: 132 bytes leftover after parsing attributes in process `syz.2.857'. [ 227.806086][ T9436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.858'. [ 227.829583][ T9431] netlink: 68 bytes leftover after parsing attributes in process `syz.2.857'. [ 227.901115][ T9431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.857'. [ 227.975224][ T9431] veth0_to_bridge: entered promiscuous mode [ 228.657300][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'. [ 228.741618][ T9449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.860'. [ 228.870173][ T9451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.860'. [ 230.602559][ T6987] net_ratelimit: 8 callbacks suppressed [ 230.602577][ T6987] bond4: (slave bridge0): failed to get link speed/duplex [ 230.782887][ T6742] hsr0: left promiscuous mode [ 230.886726][ T9475] ip6gre2: entered promiscuous mode [ 230.891976][ T9475] ip6gre2: entered allmulticast mode [ 231.195676][ T9487] žÿ: renamed from team_slave_1 (while UP) [ 231.260624][ T7010] bond4: (slave bridge0): failed to get link speed/duplex [ 231.409392][ T9495] __nla_validate_parse: 3 callbacks suppressed [ 231.409410][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.873'. [ 231.464807][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.873'. [ 231.521832][ T9500] netlink: 'syz.2.874': attribute type 13 has an invalid length. [ 231.530047][ T9500] netlink: 'syz.2.874': attribute type 17 has an invalid length. [ 232.008320][ T9497] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.012932][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.874'. [ 232.016663][ T9497] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.335414][ T9497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.831254][ T9500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.838924][ T9500] team0: left allmulticast mode [ 232.843807][ T9500] team_slave_0: left allmulticast mode [ 232.849341][ T9500] team_slave_1: left allmulticast mode [ 232.855660][ T9500] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.875422][ T9500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.896589][ T9500] veth0_to_bridge: left promiscuous mode [ 232.921979][ T9500] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.929170][ T9500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.949719][ T9500] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.956901][ T9500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.997773][ T9500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.043874][ T9500] veth1_vlan: left promiscuous mode [ 233.050591][ T9500] veth0_vlan: left promiscuous mode [ 233.057393][ T9500] veth0_vlan: entered promiscuous mode [ 233.068217][ T9500] veth1_vlan: entered promiscuous mode [ 233.080372][ T9500] veth1_macvtap: left promiscuous mode [ 233.099061][ T9500] veth1_macvtap: entered promiscuous mode [ 233.111744][ T9500] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 233.119143][ T9500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 233.146653][ T9500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 233.161881][ T9500] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 233.175780][ T9500] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 233.202700][ T9500] ipip0: left promiscuous mode [ 233.213073][ T9500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.288693][ T9500] ip6gre1: left promiscuous mode [ 233.293981][ T9500] ip6gre1: left allmulticast mode [ 233.301303][ T9500] veth0_to_bridge: entered promiscuous mode [ 233.373776][ T9538] bridge_slave_0: left allmulticast mode [ 233.379531][ T9538] bridge_slave_0: left promiscuous mode [ 233.385293][ T9538] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.521383][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 233.533838][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.880'. [ 233.578316][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'. [ 233.609109][ T5627] block nbd1: Receive control failed (result -1) [ 233.962630][ T9538] bridge_slave_1: left allmulticast mode [ 233.988379][ T9538] bridge_slave_1: left promiscuous mode [ 233.994196][ T9538] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.037064][ T9538] bond0: (slave bond_slave_0): Releasing backup interface [ 234.052215][ T9538] bond0: (slave bond_slave_1): Releasing backup interface [ 234.064220][ T9538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.071640][ T9538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.084832][ T9538] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 234.091938][ T9538] batman_adv: batadv0: Removing interface: syzkaller0 [ 234.101530][ T9538] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 234.135550][ T6987] bond4: (slave bridge0): failed to get link speed/duplex [ 234.424922][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.881'. [ 234.486461][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 234.545705][ T9561] netlink: 40 bytes leftover after parsing attributes in process `syz.4.882'. [ 234.683521][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 234.780524][ T9563] team0: Port device xfrm0 removed [ 234.863504][ T9563] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 234.880156][ T6987] tipc: Resetting bearer [ 234.891456][ T9569] tipc: Enabling of bearer rejected, already enabled [ 234.946737][ T7004] bond4: (slave bridge0): failed to get link speed/duplex [ 235.091217][ T9586] netlink: 'syz.2.887': attribute type 4 has an invalid length. [ 235.128450][ T7004] bond4: (slave bridge0): failed to get link speed/duplex [ 235.135213][ T9586] netlink: 17 bytes leftover after parsing attributes in process `syz.2.887'. [ 235.203803][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 235.268032][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 235.379094][ T9588] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 235.623058][ T9591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.747673][ T663] wlan1: Trigger new scan to find an IBSS to join [ 235.838655][ T9603] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 235.846573][ T9603] net_ratelimit: 1 callbacks suppressed [ 235.846588][ T9603] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 235.912705][ T7004] bond4: (slave bridge0): failed to get link speed/duplex [ 235.925722][ T9603] netlink: 'syz.2.893': attribute type 1 has an invalid length. [ 235.944305][ T9603] netlink: 'syz.2.893': attribute type 2 has an invalid length. [ 235.991270][ T9607] bridge0: port 3(batadv1) entered blocking state [ 236.043122][ T9607] bridge0: port 3(batadv1) entered disabled state [ 236.049806][ T9607] batadv1: entered allmulticast mode [ 236.058124][ T9607] batadv1: entered promiscuous mode [ 236.090951][ T9603] syzkaller1: entered promiscuous mode [ 236.096463][ T9603] syzkaller1: entered allmulticast mode [ 236.124387][ T663] bond4: (slave bridge0): failed to get link speed/duplex [ 236.170625][ T9612] FAULT_INJECTION: forcing a failure. [ 236.170625][ T9612] name failslab, interval 1, probability 0, space 0, times 0 [ 236.187065][ T9612] CPU: 0 UID: 0 PID: 9612 Comm: syz.4.895 Not tainted syzkaller #0 PREEMPT(full) [ 236.187089][ T9612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 236.187098][ T9612] Call Trace: [ 236.187105][ T9612] [ 236.187111][ T9612] dump_stack_lvl+0xe8/0x150 [ 236.187135][ T9612] should_fail_ex+0x412/0x560 [ 236.187156][ T9612] should_failslab+0xa8/0x100 [ 236.187175][ T9612] __kmalloc_noprof+0xe8/0x760 [ 236.187197][ T9612] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 236.187218][ T9612] tomoyo_realpath_from_path+0xe3/0x5d0 [ 236.187236][ T9612] ? tomoyo_domain+0xd7/0x130 [ 236.187256][ T9612] ? tomoyo_path_number_perm+0x219/0x630 [ 236.187277][ T9612] tomoyo_path_number_perm+0x246/0x630 [ 236.187300][ T9612] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 236.187318][ T9612] ? __lock_acquire+0x6b5/0x2cf0 [ 236.187350][ T9612] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 236.187389][ T9612] ? __fget_files+0x2a/0x420 [ 236.187411][ T9612] ? __fget_files+0x2a/0x420 [ 236.187428][ T9612] ? __fget_files+0x3a0/0x420 [ 236.187445][ T9612] ? __fget_files+0x2a/0x420 [ 236.187467][ T9612] security_file_ioctl+0xc3/0x2a0 [ 236.187489][ T9612] __se_sys_ioctl+0x47/0x170 [ 236.187512][ T9612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.187529][ T9612] do_syscall_64+0x174/0x580 [ 236.187546][ T9612] ? trace_irq_disable+0x3b/0x140 [ 236.187569][ T9612] ? clear_bhb_loop+0x40/0x90 [ 236.187589][ T9612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.187604][ T9612] RIP: 0033:0x7fb403f9ce59 [ 236.187620][ T9612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.187633][ T9612] RSP: 002b:00007fb404f2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.187650][ T9612] RAX: ffffffffffffffda RBX: 00007fb404215fa0 RCX: 00007fb403f9ce59 [ 236.187661][ T9612] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 0000000000000009 [ 236.187670][ T9612] RBP: 00007fb404f2a090 R08: 0000000000000000 R09: 0000000000000000 [ 236.187680][ T9612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.187689][ T9612] R13: 00007fb404216038 R14: 00007fb404215fa0 R15: 00007ffd34f71538 [ 236.187716][ T9612] [ 236.188028][ T9612] ERROR: Out of memory at tomoyo_realpath_from_path. [ 236.519252][ T9619] geneve3: entered promiscuous mode [ 236.566310][ T6987] bond4: (slave bridge0): failed to get link speed/duplex [ 236.587103][ T7004] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 236.596349][ T7004] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 236.797667][ T6987] bond4: (slave bridge0): failed to get link speed/duplex [ 237.034380][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 237.232310][ T663] bond4: (slave bridge0): failed to get link speed/duplex [ 237.495951][ T7009] bond4: (slave bridge0): failed to get link speed/duplex [ 237.635639][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 237.725950][ T9664] __nla_validate_parse: 9 callbacks suppressed [ 237.725987][ T9664] netlink: 40 bytes leftover after parsing attributes in process `syz.1.909'. [ 237.755328][ T7004] bond4: (slave bridge0): failed to get link speed/duplex [ 238.066269][ T9680] netlink: 104 bytes leftover after parsing attributes in process `syz.1.913'. [ 238.197627][ T9680] syzkaller0: entered promiscuous mode [ 238.204225][ T9680] syzkaller0: entered allmulticast mode [ 238.248080][ T9689] netlink: 40 bytes leftover after parsing attributes in process `syz.3.914'. [ 238.276061][ T9689] FAULT_INJECTION: forcing a failure. [ 238.276061][ T9689] name failslab, interval 1, probability 0, space 0, times 0 [ 238.290147][ T9689] CPU: 1 UID: 0 PID: 9689 Comm: syz.3.914 Not tainted syzkaller #0 PREEMPT(full) [ 238.290170][ T9689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.290178][ T9689] Call Trace: [ 238.290184][ T9689] [ 238.290190][ T9689] dump_stack_lvl+0xe8/0x150 [ 238.290213][ T9689] should_fail_ex+0x412/0x560 [ 238.290233][ T9689] should_failslab+0xa8/0x100 [ 238.290250][ T9689] __kmalloc_noprof+0xe8/0x760 [ 238.290271][ T9689] ? tomoyo_encode+0x28b/0x550 [ 238.290291][ T9689] tomoyo_encode+0x28b/0x550 [ 238.290311][ T9689] tomoyo_realpath_from_path+0x58d/0x5d0 [ 238.290328][ T9689] ? tomoyo_domain+0xd7/0x130 [ 238.290346][ T9689] ? tomoyo_path_number_perm+0x219/0x630 [ 238.290367][ T9689] tomoyo_path_number_perm+0x246/0x630 [ 238.290389][ T9689] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 238.290407][ T9689] ? __lock_acquire+0x6b5/0x2cf0 [ 238.290439][ T9689] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 238.290464][ T9689] ? __fget_files+0x2a/0x420 [ 238.290477][ T9689] ? __fget_files+0x2a/0x420 [ 238.290488][ T9689] ? __fget_files+0x3a0/0x420 [ 238.290499][ T9689] ? __fget_files+0x2a/0x420 [ 238.290512][ T9689] security_file_ioctl+0xc3/0x2a0 [ 238.290526][ T9689] __se_sys_ioctl+0x47/0x170 [ 238.290541][ T9689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.290551][ T9689] do_syscall_64+0x174/0x580 [ 238.290563][ T9689] ? clear_bhb_loop+0x40/0x90 [ 238.290575][ T9689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.290584][ T9689] RIP: 0033:0x7fa1dd19ce59 [ 238.290602][ T9689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.290610][ T9689] RSP: 002b:00007fa1de07c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.290620][ T9689] RAX: ffffffffffffffda RBX: 00007fa1dd416090 RCX: 00007fa1dd19ce59 [ 238.290627][ T9689] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 000000000000000a [ 238.290632][ T9689] RBP: 00007fa1de07c090 R08: 0000000000000000 R09: 0000000000000000 [ 238.290638][ T9689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.290643][ T9689] R13: 00007fa1dd416128 R14: 00007fa1dd416090 R15: 00007fff0ac83168 [ 238.290658][ T9689] [ 238.291127][ T9689] ERROR: Out of memory at tomoyo_realpath_from_path. [ 238.866622][ T9707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.920'. [ 238.892795][ T9706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.920'. [ 238.998560][ T9711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.921'. [ 239.131951][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 239.141023][ T9715] netlink: 312 bytes leftover after parsing attributes in process `syz.2.921'. [ 239.671080][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'. [ 239.679933][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.925'. [ 239.698547][ T663] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.709525][ T663] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.720081][ T663] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.747333][ T7009] wlan1: Trigger new scan to find an IBSS to join [ 239.756867][ T7004] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.861564][ T9737] sit0: entered promiscuous mode [ 239.912950][ T9737] netlink: 'syz.4.927': attribute type 1 has an invalid length. [ 240.591063][ T9658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.845995][ T9743] nbd: must specify an index to disconnect [ 240.911676][ T9745] netlink: 'syz.2.933': attribute type 1 has an invalid length. [ 240.920300][ T9745] net_ratelimit: 17 callbacks suppressed [ 240.920317][ T9745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.011626][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 241.149018][ T12] wlan1: Creating new IBSS network, BSSID f6:58:da:47:58:a0 [ 241.244645][ T7009] bond4: (slave bridge0): failed to get link speed/duplex [ 241.450897][ T9757] vlan2: entered promiscuous mode [ 241.492674][ T9757] bridge0: entered promiscuous mode [ 241.641641][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 241.910079][ T663] bond4: (slave bridge0): failed to get link speed/duplex [ 242.009271][ T9782] netlink: 'syz.1.942': attribute type 1 has an invalid length. [ 242.166694][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 242.271692][ T9792] ieee802154 phy0 wpan0: encryption failed: -22 [ 242.296853][ T663] bond4: (slave bridge0): failed to get link speed/duplex [ 242.435743][ T7010] bond4: (slave bridge0): failed to get link speed/duplex [ 242.639610][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 242.884217][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 242.979266][ T9815] __nla_validate_parse: 10 callbacks suppressed [ 242.979283][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.951'. [ 243.023149][ T9815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.951'. [ 243.165761][ T9817] netlink: 'syz.4.953': attribute type 2 has an invalid length. [ 243.174780][ T9817] syzkaller0: entered promiscuous mode [ 243.261187][ T9817] syzkaller0: entered allmulticast mode [ 243.363135][ T9817] tipc: Enabling of bearer rejected, already enabled [ 243.577829][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.958'. [ 243.721161][ T9833] bridge4: port 1(vlan3) entered blocking state [ 243.788965][ T9833] bridge4: port 1(vlan3) entered disabled state [ 243.795485][ T9833] vlan3: entered allmulticast mode [ 243.800624][ T9833] bridge4: entered allmulticast mode [ 243.823031][ T9833] vlan3: left allmulticast mode [ 243.828115][ T9833] bridge4: left allmulticast mode [ 244.134588][ T9852] netlink: 40 bytes leftover after parsing attributes in process `syz.4.964'. [ 244.203762][ T9852] tipc: Enabling of bearer rejected, already enabled [ 244.310573][ T9855] macvtap0: entered allmulticast mode [ 244.317075][ T9855] veth0_to_bridge: entered allmulticast mode [ 244.354901][ T9855] veth0_to_bridge: left allmulticast mode [ 244.442576][ T9860] netlink: 40 bytes leftover after parsing attributes in process `syz.4.967'. [ 244.488579][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'. [ 244.497390][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 244.558643][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'. [ 244.606973][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 244.835769][ T9874] macsec1: entered promiscuous mode [ 244.889879][ T9874] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 244.913532][ T9874] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 244.991654][ T9882] xt_TPROXY: Can be used only with -p tcp or -p udp [ 245.017845][ T9884] xt_TPROXY: Can be used only with -p tcp or -p udp [ 245.024667][ T6740] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 245.415251][ T9897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.978'. [ 245.981428][ T663] net_ratelimit: 12 callbacks suppressed [ 245.981450][ T663] bond4: (slave bridge0): failed to get link speed/duplex [ 246.018137][ T9911] FAULT_INJECTION: forcing a failure. [ 246.018137][ T9911] name failslab, interval 1, probability 0, space 0, times 0 [ 246.044073][ T9911] CPU: 0 UID: 0 PID: 9911 Comm: syz.3.987 Not tainted syzkaller #0 PREEMPT(full) [ 246.044097][ T9911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.044122][ T9911] Call Trace: [ 246.044129][ T9911] [ 246.044136][ T9911] dump_stack_lvl+0xe8/0x150 [ 246.044159][ T9911] should_fail_ex+0x412/0x560 [ 246.044181][ T9911] should_failslab+0xa8/0x100 [ 246.044196][ T9911] ? skb_clone+0x212/0x3a0 [ 246.044215][ T9911] kmem_cache_alloc_noprof+0x87/0x650 [ 246.044236][ T9911] ? __netlink_lookup+0xc6/0x8b0 [ 246.044268][ T9911] skb_clone+0x212/0x3a0 [ 246.044289][ T9911] __netlink_deliver_tap+0x404/0x850 [ 246.044316][ T9911] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.044336][ T9911] netlink_deliver_tap+0x19c/0x1b0 [ 246.044356][ T9911] netlink_unicast+0x730/0x8e0 [ 246.044381][ T9911] netlink_sendmsg+0x813/0xb40 [ 246.044406][ T9911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.044425][ T9911] ? aa_sock_msg_perm+0xf1/0x1b0 [ 246.044448][ T9911] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 246.044473][ T9911] ____sys_sendmsg+0x972/0x9f0 [ 246.044489][ T9911] ? __might_fault+0xaf/0x130 [ 246.044516][ T9911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.044541][ T9911] ? import_iovec+0x73/0xa0 [ 246.044562][ T9911] ___sys_sendmsg+0x2a5/0x360 [ 246.044578][ T9911] ? __lock_acquire+0x6b5/0x2cf0 [ 246.044598][ T9911] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.044646][ T9911] ? __fget_files+0x2a/0x420 [ 246.044664][ T9911] ? __fget_files+0x3a0/0x420 [ 246.044692][ T9911] __x64_sys_sendmsg+0x1bd/0x2a0 [ 246.044713][ T9911] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 246.044740][ T9911] ? __pfx_ksys_write+0x10/0x10 [ 246.044759][ T9911] ? handle_softirqs+0x715/0x840 [ 246.044783][ T9911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.044800][ T9911] do_syscall_64+0x174/0x580 [ 246.044819][ T9911] ? clear_bhb_loop+0x40/0x90 [ 246.044839][ T9911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.044853][ T9911] RIP: 0033:0x7fa1dd19ce59 [ 246.044869][ T9911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.044883][ T9911] RSP: 002b:00007fa1de09d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.044900][ T9911] RAX: ffffffffffffffda RBX: 00007fa1dd415fa0 RCX: 00007fa1dd19ce59 [ 246.044909][ T9911] RDX: 0000000000000840 RSI: 00002000000000c0 RDI: 0000000000000003 [ 246.044919][ T9911] RBP: 00007fa1de09d090 R08: 0000000000000000 R09: 0000000000000000 [ 246.044928][ T9911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.044937][ T9911] R13: 00007fa1dd416038 R14: 00007fa1dd415fa0 R15: 00007fff0ac83168 [ 246.044964][ T9911] [ 246.406624][ T6564] bond4: (slave bridge0): failed to get link speed/duplex [ 246.545867][ T6564] bond4: (slave bridge0): failed to get link speed/duplex [ 246.901945][ T7009] bond4: (slave bridge0): failed to get link speed/duplex [ 247.034525][ T9945] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 247.245052][ T663] bond4: (slave bridge0): failed to get link speed/duplex [ 247.479529][ T9961] netlink: 'syz.1.1003': attribute type 3 has an invalid length. [ 247.562913][ T7009] bond4: (slave bridge0): failed to get link speed/duplex [ 247.640012][ T9966] FAULT_INJECTION: forcing a failure. [ 247.640012][ T9966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.655360][ T9966] CPU: 1 UID: 0 PID: 9966 Comm: syz.2.1004 Not tainted syzkaller #0 PREEMPT(full) [ 247.655382][ T9966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 247.655393][ T9966] Call Trace: [ 247.655400][ T9966] [ 247.655407][ T9966] dump_stack_lvl+0xe8/0x150 [ 247.655433][ T9966] should_fail_ex+0x412/0x560 [ 247.655455][ T9966] _copy_to_user+0x31/0xb0 [ 247.655478][ T9966] simple_read_from_buffer+0xe1/0x170 [ 247.655503][ T9966] proc_fail_nth_read+0x1bb/0x230 [ 247.655527][ T9966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.655551][ T9966] ? rw_verify_area+0x2a6/0x4d0 [ 247.655572][ T9966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.655593][ T9966] vfs_read+0x20c/0xa70 [ 247.655628][ T9966] ? __pfx___mutex_lock+0x10/0x10 [ 247.655648][ T9966] ? __pfx_vfs_read+0x10/0x10 [ 247.655672][ T9966] ? __fget_files+0x2a/0x420 [ 247.655695][ T9966] ? __fget_files+0x3a0/0x420 [ 247.655712][ T9966] ? __fget_files+0x2a/0x420 [ 247.655739][ T9966] ksys_read+0x150/0x270 [ 247.655757][ T9966] ? __irq_exit_rcu+0xca/0x220 [ 247.655777][ T9966] ? __pfx_ksys_read+0x10/0x10 [ 247.655796][ T9966] ? handle_softirqs+0x715/0x840 [ 247.655821][ T9966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.655839][ T9966] do_syscall_64+0x174/0x580 [ 247.655859][ T9966] ? clear_bhb_loop+0x40/0x90 [ 247.655878][ T9966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.655894][ T9966] RIP: 0033:0x7f4b1655d68e [ 247.655911][ T9966] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 247.655924][ T9966] RSP: 002b:00007f4b174affe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.655942][ T9966] RAX: ffffffffffffffda RBX: 00007f4b174b06c0 RCX: 00007f4b1655d68e [ 247.655953][ T9966] RDX: 000000000000000f RSI: 00007f4b174b00a0 RDI: 0000000000000004 [ 247.655963][ T9966] RBP: 00007f4b174b0090 R08: 0000000000000000 R09: 0000000000000000 [ 247.655972][ T9966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.655981][ T9966] R13: 00007f4b16816038 R14: 00007f4b16815fa0 R15: 00007fff63f75578 [ 247.656009][ T9966] [ 247.898623][ T9969] netlink: 'syz.1.1003': attribute type 1 has an invalid length. [ 247.937315][ T663] bond4: (slave bridge0): failed to get link speed/duplex [ 248.013016][ T663] bond4: (slave bridge0): failed to get link speed/duplex [ 248.139445][ T663] bond4: (slave bridge0): failed to get link speed/duplex [ 248.237005][ T9981] __nla_validate_parse: 7 callbacks suppressed [ 248.237021][ T9981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1008'. [ 248.386695][ T9990] netlink: 'syz.1.1009': attribute type 5 has an invalid length. [ 248.402789][ T9990] =v: renamed from veth0_to_bond (while UP) [ 248.577801][ T9997] netlink: 'syz.4.1012': attribute type 1 has an invalid length. [ 248.623164][ T9997] bond5: entered promiscuous mode [ 248.628649][ T9997] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.646637][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1012'. [ 248.655632][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1012'. [ 249.038908][T10023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1018'. [ 249.178807][T10028] netlink: 'syz.2.1020': attribute type 3 has an invalid length. [ 249.930498][T10047] netlink: 'syz.1.1026': attribute type 1 has an invalid length. [ 250.292751][T10063] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1027'. [ 250.620435][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 250.629332][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'. [ 250.656025][T10068] netlink: 'syz.2.1033': attribute type 12 has an invalid length. [ 250.663885][T10068] netlink: 'syz.2.1033': attribute type 11 has an invalid length. [ 250.903208][T10089] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 251.121891][ T7009] net_ratelimit: 22 callbacks suppressed [ 251.121909][ T7009] bond4: (slave bridge0): failed to get link speed/duplex [ 251.195193][T10103] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1042'. [ 251.211065][T10103] ip6gre1: entered promiscuous mode [ 251.216381][T10103] ip6gre1: entered allmulticast mode [ 251.522446][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 251.542816][T10109] netlink: 'syz.0.1045': attribute type 12 has an invalid length. [ 251.579279][T10114] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1047'. [ 251.635640][ T663] bond4: (slave bridge0): failed to get link speed/duplex [ 252.090823][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 252.193005][T10138] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 252.211504][T10138] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 252.218362][T10138] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 252.225160][T10138] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 252.231963][T10138] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 252.238788][T10138] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 252.513327][T10148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1053'. [ 252.572871][T10148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.583630][T10152] netlink: 'syz.3.1049': attribute type 4 has an invalid length. [ 252.605831][T10148] gretap1: entered allmulticast mode [ 252.615026][T10148] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 252.996276][T10148] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 253.016338][T10148] bond2 (unregistering): Released all slaves [ 253.473609][T10155] netlink: 'syz.4.1055': attribute type 1 has an invalid length. [ 253.508826][T10155] nbd: error processing sock list [ 253.653353][T10173] xt_hashlimit: size too large, truncated to 1048576 [ 253.894400][T10177] __nla_validate_parse: 1 callbacks suppressed [ 253.894418][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1062'. [ 253.995302][T10177] team3: entered promiscuous mode [ 254.003930][T10177] team3: entered allmulticast mode [ 254.009657][T10177] 8021q: adding VLAN 0 to HW filter on device team3 [ 254.019547][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1062'. [ 254.107269][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1066'. [ 254.108486][T10177] team4: entered promiscuous mode [ 254.121250][T10177] team4: entered allmulticast mode [ 254.126782][T10177] 8021q: adding VLAN 0 to HW filter on device team4 [ 254.223272][T10194] netlink: 'syz.3.1067': attribute type 1 has an invalid length. [ 254.251154][T10194] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.275047][T10195] syzkaller1: entered promiscuous mode [ 254.280553][T10195] syzkaller1: entered allmulticast mode [ 254.294953][T10194] vlan2: entered promiscuous mode [ 254.300028][T10194] bond5: entered promiscuous mode [ 254.305207][T10194] vlan2: entered allmulticast mode [ 254.310322][T10194] bond5: entered allmulticast mode [ 254.333190][T10194] bond5: (slave bridge2): making interface the new active one [ 254.340694][T10194] bridge2: entered promiscuous mode [ 254.346088][T10194] bridge2: entered allmulticast mode [ 254.356750][T10194] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 254.445608][T10198] bond6: option packets_per_slave: invalid value (1048582) [ 254.452859][T10198] bond6: option packets_per_slave: allowed values 0 - 65535 [ 254.462467][T10198] bond6 (unregistering): Released all slaves [ 254.603035][T10205] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 255.208085][T10214] geneve2: entered promiscuous mode [ 255.213339][T10214] geneve2: entered allmulticast mode [ 255.225186][T10214] netlink: 'syz.4.1076': attribute type 4 has an invalid length. [ 255.292264][T10220] netlink: 'syz.2.1075': attribute type 1 has an invalid length. [ 255.300517][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'. [ 255.349697][T10220] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.367065][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'. [ 255.425442][T10220] bond2: (slave veth7): Enslaving as an active interface with a down link [ 255.445922][T10220] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 255.452822][T10220] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 255.542138][T10231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1079'. [ 255.606218][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.612545][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.878370][T10233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1080'. [ 255.994159][T10233] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1080'. [ 256.012722][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 256.185497][ T7010] net_ratelimit: 3341 callbacks suppressed [ 256.185518][ T7010] bond4: (slave bridge0): failed to get link speed/duplex [ 256.273882][ T663] bond4: (slave bridge0): failed to get link speed/duplex [ 256.386767][ T663] bond4: (slave bridge0): failed to get link speed/duplex [ 256.540201][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 256.558289][T10249] netlink: 'syz.3.1085': attribute type 2 has an invalid length. [ 256.560417][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 256.638539][T10255] SET target dimension over the limit! [ 256.651581][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 256.816792][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 256.975655][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 257.139898][ T7009] bond4: (slave bridge0): failed to get link speed/duplex [ 257.251081][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 257.389466][ T7009] bond4: (slave bridge0): failed to get link speed/duplex [ 257.730606][ T50] block nbd2: Receive control failed (result -32) [ 257.730627][ T5645] block nbd2: Receive control failed (result -32) [ 258.096292][T10290] x_tables: duplicate underflow at hook 2 [ 258.172355][T10295] tipc: Resetting bearer [ 258.286470][T10295] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.533307][ T7010] bond6: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 258.561298][ T7010] bond6: (slave veth7): making interface the new active one [ 258.611425][ T7010] bond6: active interface up! [ 259.029620][T10331] syz.0.1111: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 259.062665][T10331] CPU: 1 UID: 0 PID: 10331 Comm: syz.0.1111 Not tainted syzkaller #0 PREEMPT(full) [ 259.062690][T10331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 259.062701][T10331] Call Trace: [ 259.062709][T10331] [ 259.062716][T10331] dump_stack_lvl+0xe8/0x150 [ 259.062742][T10331] warn_alloc+0x249/0x340 [ 259.062768][T10331] ? stack_trace_save+0xa9/0x100 [ 259.062795][T10331] ? __pfx_warn_alloc+0x10/0x10 [ 259.062825][T10331] ? kasan_save_track+0x4f/0x80 [ 259.062845][T10331] ? kasan_save_track+0x3e/0x80 [ 259.062865][T10331] ? __kasan_kmalloc+0x93/0xb0 [ 259.062887][T10331] ? __kmalloc_cache_noprof+0x31c/0x660 [ 259.062908][T10331] ? xskq_create+0x56/0x170 [ 259.062924][T10331] ? xsk_setsockopt+0x54c/0x990 [ 259.062944][T10331] ? do_sock_setsockopt+0x17c/0x1b0 [ 259.062962][T10331] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 259.062979][T10331] ? do_syscall_64+0x174/0x580 [ 259.063001][T10331] __vmalloc_node_range_noprof+0x132/0x1750 [ 259.063055][T10331] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 259.063084][T10331] ? __kasan_kmalloc+0x93/0xb0 [ 259.063112][T10331] vmalloc_user_noprof+0xad/0xe0 [ 259.063134][T10331] ? xskq_create+0xbf/0x170 [ 259.063152][T10331] xskq_create+0xbf/0x170 [ 259.063170][T10331] xsk_init_queue+0x8a/0xe0 [ 259.063197][T10331] xsk_setsockopt+0x54c/0x990 [ 259.063223][T10331] ? __pfx_xsk_setsockopt+0x10/0x10 [ 259.063246][T10331] ? __pfx_aa_sk_perm+0x10/0x10 [ 259.063272][T10331] ? aa_sock_opt_perm+0xff/0x1a0 [ 259.063298][T10331] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 259.063319][T10331] ? __pfx_xsk_setsockopt+0x10/0x10 [ 259.063344][T10331] do_sock_setsockopt+0x17c/0x1b0 [ 259.063367][T10331] __x64_sys_setsockopt+0x13d/0x1b0 [ 259.063388][T10331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.063407][T10331] do_syscall_64+0x174/0x580 [ 259.063425][T10331] ? trace_irq_disable+0x3b/0x140 [ 259.063448][T10331] ? clear_bhb_loop+0x40/0x90 [ 259.063468][T10331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.063484][T10331] RIP: 0033:0x7fb75619ce59 [ 259.063501][T10331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.063514][T10331] RSP: 002b:00007fb7570e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 259.063532][T10331] RAX: ffffffffffffffda RBX: 00007fb756415fa0 RCX: 00007fb75619ce59 [ 259.063543][T10331] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 259.063552][T10331] RBP: 00007fb756232d6f R08: 0000000000000004 R09: 0000000000000000 [ 259.063563][T10331] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.063581][T10331] R13: 00007fb756416038 R14: 00007fb756415fa0 R15: 00007ffd4a11ef58 [ 259.063610][T10331] [ 259.063627][T10331] Mem-Info: [ 259.375948][T10336] __nla_validate_parse: 11 callbacks suppressed [ 259.375964][T10336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1113'. [ 259.382249][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 259.398386][T10331] active_anon:7178 inactive_anon:0 isolated_anon:0 [ 259.398386][T10331] active_file:3272 inactive_file:40027 isolated_file:0 [ 259.398386][T10331] unevictable:768 dirty:325 writeback:0 [ 259.398386][T10331] slab_reclaimable:10700 slab_unreclaimable:976659 [ 259.398386][T10331] mapped:29658 shmem:1290 pagetables:1388 [ 259.398386][T10331] sec_pagetables:0 bounce:0 [ 259.398386][T10331] kernel_misc_reclaimable:0 [ 259.398386][T10331] free:440921 free_pcp:17028 free_cma:0 [ 259.500444][T10331] Node 0 active_anon:28612kB inactive_anon:0kB active_file:13088kB inactive_file:159904kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118632kB dirty:1296kB writeback:0kB shmem:3624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14040kB pagetables:5212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 259.539750][T10331] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 259.592736][T10331] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.623766][T10331] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 259.629549][T10331] Node 0 DMA32 free:192052kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28612kB inactive_anon:0kB active_file:13088kB inactive_file:159904kB unevictable:1536kB writepending:1296kB zspages:0kB present:3129332kB managed:2552484kB mlocked:0kB bounce:0kB free_pcp:40536kB local_pcp:19824kB free_cma:0kB [ 259.663470][T10331] lowmem_reserve[]: 0 0 0 0 0 [ 259.669074][T10331] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.698335][T10331] lowmem_reserve[]: 0 0 0 0 0 [ 259.703063][T10331] Node 1 Normal free:1560368kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:28652kB local_pcp:252kB free_cma:0kB [ 259.747470][T10331] lowmem_reserve[]: 0 0 0 0 0 [ 259.752328][T10331] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 259.764986][T10331] Node 0 DMA32: 2162*4kB (UM) 1911*8kB (UME) 1032*16kB (UM) 242*32kB (UM) 22*64kB (UME) 48*128kB (UME) 146*256kB (UM) 71*512kB (UM) 37*1024kB (UME) 12*2048kB (UM) 0*4096kB = 191936kB [ 259.783273][T10331] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 259.794780][T10331] Node 1 Normal: 2*4kB (U) 9*8kB (UM) 12*16kB (UM) 5*32kB (UM) 12*64kB (UM) 11*128kB (UM) 7*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 378*4096kB (UM) = 1560368kB [ 259.811953][T10331] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.821508][T10331] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 259.830834][T10331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.840413][T10331] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 259.870395][T10331] 44602 total pagecache pages [ 259.879858][T10331] 0 pages in swap cache [ 259.884049][T10331] Free swap = 124996kB [ 259.888206][T10331] Total swap = 124996kB [ 259.892365][T10331] 2097051 pages RAM [ 259.896173][T10331] 0 pages HighMem/MovableOnly [ 259.900838][T10331] 427148 pages reserved [ 259.916826][T10331] 0 pages cma reserved [ 259.942296][T10354] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 260.036157][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 260.055900][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1118'. [ 260.063179][T10360] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0 (while UP) [ 260.094056][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 260.102949][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1118'. [ 260.203730][T10363] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1119'. [ 260.757590][T10390] netlink: 'syz.1.1129': attribute type 3 has an invalid length. [ 260.886367][T10390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1129'. [ 261.161643][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'. [ 261.170536][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1131'. [ 261.333954][ T48] net_ratelimit: 29 callbacks suppressed [ 261.333971][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 261.478635][T10399] tap0: tun_chr_ioctl cmd 3221513862 [ 261.648109][T10399] tap0: tun_chr_ioctl cmd 1074025676 [ 261.653452][T10399] tap0: owner set to 0 [ 261.657016][T10405] FAULT_INJECTION: forcing a failure. [ 261.657016][T10405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.671746][T10405] CPU: 0 UID: 0 PID: 10405 Comm: syz.4.1135 Not tainted syzkaller #0 PREEMPT(full) [ 261.671768][T10405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.671778][T10405] Call Trace: [ 261.671784][T10405] [ 261.671791][T10405] dump_stack_lvl+0xe8/0x150 [ 261.671827][T10405] should_fail_ex+0x412/0x560 [ 261.671850][T10405] _copy_from_user+0x2d/0xb0 [ 261.671870][T10405] do_sock_getsockopt+0x200/0x7e0 [ 261.671895][T10405] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 261.671928][T10405] ? __fget_files+0x3a0/0x420 [ 261.671946][T10405] ? __fget_files+0x2a/0x420 [ 261.671971][T10405] __x64_sys_getsockopt+0x1a4/0x240 [ 261.671995][T10405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.672012][T10405] do_syscall_64+0x174/0x580 [ 261.672030][T10405] ? trace_irq_disable+0x3b/0x140 [ 261.672052][T10405] ? clear_bhb_loop+0x40/0x90 [ 261.672072][T10405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.672088][T10405] RIP: 0033:0x7fb403f9ce59 [ 261.672104][T10405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.672117][T10405] RSP: 002b:00007fb404f2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 261.672134][T10405] RAX: ffffffffffffffda RBX: 00007fb404215fa0 RCX: 00007fb403f9ce59 [ 261.672145][T10405] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 261.672155][T10405] RBP: 00007fb404f2a090 R08: 0000200000000000 R09: 0000000000000000 [ 261.672166][T10405] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 261.672176][T10405] R13: 00007fb404216038 R14: 00007fb404215fa0 R15: 00007ffd34f71538 [ 261.672203][T10405] [ 262.234916][ T7009] bond4: (slave bridge0): failed to get link speed/duplex [ 262.341711][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 262.342291][T10417] xt_TCPMSS: Only works on TCP SYN packets [ 262.367138][T10417] bond0 (unregistering): Released all slaves [ 262.456893][ T7009] bond4: (slave bridge0): failed to get link speed/duplex [ 262.591714][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 262.794475][T10434] Bluetooth: MGMT ver 1.23 [ 262.810340][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 262.839461][T10434] netlink: 'syz.2.1146': attribute type 2 has an invalid length. [ 263.038127][ T7010] bond4: (slave bridge0): failed to get link speed/duplex [ 263.153759][T10445] netlink: 'syz.0.1150': attribute type 13 has an invalid length. [ 263.176246][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 263.226310][T10445] tipc: Resetting bearer [ 263.484427][T10450] netlink: 'syz.1.1153': attribute type 11 has an invalid length. [ 263.508751][ T7010] bond4: (slave bridge0): link status up again after 0 ms [ 263.612191][T10455] sit0: left promiscuous mode [ 263.612727][ T7009] bond4: (slave bridge0): link status up again after 0 ms [ 263.775319][T10455] syzkaller0: left promiscuous mode [ 263.832911][T10455] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.840639][T10455] ip6gre1: left promiscuous mode [ 263.846716][T10455] bond5: left promiscuous mode [ 263.853631][T10455] geneve2: left promiscuous mode [ 263.963159][T10457] netlink: 'syz.0.1150': attribute type 2 has an invalid length. [ 264.175984][T10470] team1: entered promiscuous mode [ 264.181799][T10470] team1: entered allmulticast mode [ 264.195597][T10470] 8021q: adding VLAN 0 to HW filter on device team1 [ 264.306083][T10470] team2: entered promiscuous mode [ 264.350250][T10470] team2: entered allmulticast mode [ 264.362204][T10470] 8021q: adding VLAN 0 to HW filter on device team2 [ 264.440732][T10482] batadv0: entered promiscuous mode [ 264.485620][T10482] batadv0: left promiscuous mode [ 264.556990][T10487] netlink: 'syz.1.1161': attribute type 3 has an invalid length. [ 264.582699][ T29] audit: type=1804 audit(1781245895.145:5): pid=10487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1161" name="/newroot/240/cgroup.controllers" dev="tmpfs" ino=1256 res=1 errno=0 [ 264.605087][ T29] audit: type=1800 audit(1781245895.145:6): pid=10487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1161" name="cgroup.controllers" dev="tmpfs" ino=1256 res=0 errno=0 [ 264.661506][T10487] xt_hashlimit: size too large, truncated to 1048576 [ 264.702366][T10489] __nla_validate_parse: 17 callbacks suppressed [ 264.702385][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1162'. [ 264.907100][ T29] audit: type=1804 audit(1781245895.365:7): pid=10498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1161" name="/newroot/240/cgroup.controllers" dev="tmpfs" ino=1256 res=1 errno=0 [ 265.074190][T10507] netlink: 393 bytes leftover after parsing attributes in process `syz.2.1166'. [ 265.115056][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1168'. [ 265.343447][T10507] bond3 (unregistering): Released all slaves [ 265.406959][T10508] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 265.695540][T10531] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1172'. [ 265.712743][T10531] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1172'. [ 265.721679][T10531] netlink: 'syz.0.1172': attribute type 5 has an invalid length. [ 265.734052][T10531] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1172'. [ 265.852062][T10526] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1171'. [ 265.861060][T10526] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1171'. [ 265.935859][T10526] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 266.052397][T10551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1178'. [ 266.135568][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'. [ 266.147838][T10546] bridge0: port 1(syz_tun) entered blocking state [ 266.154698][T10546] bridge0: port 1(syz_tun) entered disabled state [ 266.161607][T10546] syz_tun: entered allmulticast mode [ 266.168767][T10546] syz_tun: entered promiscuous mode [ 266.174748][T10546] bridge0: port 1(syz_tun) entered blocking state [ 266.181553][T10546] bridge0: port 1(syz_tun) entered forwarding state [ 266.485179][T10551] vlan0: entered promiscuous mode [ 266.499013][T10567] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 266.561482][ T7010] net_ratelimit: 18 callbacks suppressed [ 266.561502][ T7010] bond4: (slave bridge0): failed to get link speed/duplex [ 266.605599][T10551] netlink: 'syz.4.1178': attribute type 15 has an invalid length. [ 266.800943][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 266.921743][T10579] gretap0: entered promiscuous mode [ 267.377985][T10588] vlan3: entered promiscuous mode [ 267.437382][T10588] bridge0: entered promiscuous mode [ 267.710073][ T6987] bond4: (slave bridge0): failed to get link speed/duplex [ 267.872327][ T6987] bond4: (slave bridge0): failed to get link speed/duplex [ 268.089329][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 268.309908][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 268.533393][ T6987] bond4: (slave bridge0): failed to get link speed/duplex [ 268.668648][T10624] gretap0: left promiscuous mode [ 268.846118][T10624] team1: left promiscuous mode [ 268.857134][T10624] team2: left promiscuous mode [ 268.862923][T10624] bond4: left promiscuous mode [ 268.869565][T10624] ip6gre2: left promiscuous mode [ 268.876266][T10624] vlan2: left promiscuous mode [ 268.931053][T10624] bond5: left promiscuous mode [ 268.941200][T10624] bridge2: left promiscuous mode [ 268.991691][T10635] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 269.008443][T10635] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 269.015288][T10635] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 269.058156][T10637] tipc: Resetting bearer [ 270.349885][T10667] __nla_validate_parse: 8 callbacks suppressed [ 270.349905][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1210'. [ 270.365397][T10664] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1208'. [ 270.374725][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1210'. [ 270.486439][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1210'. [ 270.573970][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1210'. [ 271.637133][ T12] net_ratelimit: 3352 callbacks suppressed [ 271.637154][ T12] bond4: (slave bridge0): link status up again after 0 ms [ 271.740906][ T663] bond4: (slave bridge0): link status up again after 0 ms [ 271.849333][ T7010] bond4: (slave bridge0): link status up again after 0 ms [ 271.885365][T10702] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 271.886341][ T7010] bond4: (slave bridge0): failed to get link speed/duplex [ 271.927043][T10695] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õËí [ 271.927043][T10695] 3ìUH†5rºBnœæ [ 272.012405][T10703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1216'. [ 272.376476][T10687] infiniband uyz0: set active [ 272.383786][T10687] infiniband uyz0: added bridge_slave_1 [ 272.410211][T10687] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 272.415556][T10687] infiniband uyz0: Couldn't open port 1 [ 272.489391][T10687] smbdirect: ib_dev[uyz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 272.558885][T10687] smbdirect: ib_dev[uyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 272.577415][T10687] smbdirect: ib_dev[uyz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 272.719817][T10687] RDS/IB: uyz0: added [ 272.724415][T10687] smc: adding ib device uyz0 with port count 1 [ 272.730780][T10687] smc: ib device uyz0 port 1 has no pnetid [ 272.796227][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 273.091545][ T6987] bond4: (slave bridge0): failed to get link speed/duplex [ 273.188871][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 273.292470][ T6987] bond4: (slave bridge0): failed to get link speed/duplex [ 273.463386][ T6564] bond4: (slave bridge0): failed to get link speed/duplex [ 273.472301][T10748] FAULT_INJECTION: forcing a failure. [ 273.472301][T10748] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 273.512220][T10748] CPU: 0 UID: 0 PID: 10748 Comm: syz.2.1222 Not tainted syzkaller #0 PREEMPT(full) [ 273.512243][T10748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 273.512251][T10748] Call Trace: [ 273.512258][T10748] [ 273.512266][T10748] dump_stack_lvl+0xe8/0x150 [ 273.512288][T10748] should_fail_ex+0x412/0x560 [ 273.512310][T10748] prepare_alloc_pages+0x22a/0x650 [ 273.512339][T10748] __alloc_frozen_pages_noprof+0x12f/0x380 [ 273.512366][T10748] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 273.512391][T10748] ? __pfx_policy_nodemask+0x10/0x10 [ 273.512412][T10748] ? __lock_acquire+0x6b5/0x2cf0 [ 273.512432][T10748] alloc_pages_mpol+0x235/0x490 [ 273.512454][T10748] folio_alloc_mpol_noprof+0x39/0x160 [ 273.512473][T10748] vma_alloc_folio_noprof+0xe1/0x1e0 [ 273.512492][T10748] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 273.512508][T10748] ? __pte_offset_map+0x29/0x240 [ 273.512528][T10748] ? __pte_offset_map+0x29/0x240 [ 273.512571][T10748] do_pte_missing+0x159d/0x33f0 [ 273.512603][T10748] ? handle_mm_fault+0xf1/0x3170 [ 273.512627][T10748] handle_mm_fault+0x1bf2/0x3170 [ 273.512659][T10748] ? handle_mm_fault+0xf1/0x3170 [ 273.512685][T10748] ? __pfx_handle_mm_fault+0x10/0x10 [ 273.512705][T10748] ? follow_page_pte+0x6cf/0xe60 [ 273.512738][T10748] ? __pfx_follow_page_pte+0x10/0x10 [ 273.512768][T10748] __get_user_pages+0x167f/0x2730 [ 273.512816][T10748] __gup_longterm_locked+0xdcf/0x1630 [ 273.512844][T10748] ? gup_fast_fallback+0x121/0x20d0 [ 273.512861][T10748] ? sanity_check_pinned_pages+0x7af/0x870 [ 273.512883][T10748] gup_fast_fallback+0x1d84/0x20d0 [ 273.512925][T10748] ? __pfx_gup_fast_fallback+0x10/0x10 [ 273.512942][T10748] ? rcu_is_watching+0x15/0xb0 [ 273.512963][T10748] ? pin_user_pages_fast+0x4d/0xb0 [ 273.512983][T10748] iov_iter_extract_pages+0x37b/0x5f0 [ 273.513009][T10748] rds_info_getsockopt+0x278/0x620 [ 273.513037][T10748] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 273.513068][T10748] ? __might_fault+0xaf/0x130 [ 273.513087][T10748] ? __might_fault+0xaf/0x130 [ 273.513106][T10748] rds_getsockopt+0x38b/0x600 [ 273.513125][T10748] ? __pfx_rds_getsockopt+0x10/0x10 [ 273.513152][T10748] do_sock_getsockopt+0x6ae/0x7e0 [ 273.513174][T10748] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 273.513203][T10748] ? __fget_files+0x3a0/0x420 [ 273.513219][T10748] ? __fget_files+0x2a/0x420 [ 273.513241][T10748] __x64_sys_getsockopt+0x1a4/0x240 [ 273.513263][T10748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.513280][T10748] do_syscall_64+0x174/0x580 [ 273.513296][T10748] ? trace_irq_disable+0x3b/0x140 [ 273.513315][T10748] ? clear_bhb_loop+0x40/0x90 [ 273.513335][T10748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.513349][T10748] RIP: 0033:0x7f4b1659ce59 [ 273.513365][T10748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.513378][T10748] RSP: 002b:00007f4b174b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 273.513395][T10748] RAX: ffffffffffffffda RBX: 00007f4b16815fa0 RCX: 00007f4b1659ce59 [ 273.513406][T10748] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 273.513415][T10748] RBP: 00007f4b174b0090 R08: 0000200000000000 R09: 0000000000000000 [ 273.513423][T10748] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 273.513432][T10748] R13: 00007f4b16816038 R14: 00007f4b16815fa0 R15: 00007fff63f75578 [ 273.513458][T10748] [ 273.974328][T10757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1220'. [ 275.074223][T10792] FAULT_INJECTION: forcing a failure. [ 275.074223][T10792] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 275.087470][T10792] CPU: 0 UID: 0 PID: 10792 Comm: syz.2.1234 Not tainted syzkaller #0 PREEMPT(full) [ 275.087492][T10792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.087502][T10792] Call Trace: [ 275.087508][T10792] [ 275.087516][T10792] dump_stack_lvl+0xe8/0x150 [ 275.087547][T10792] should_fail_ex+0x412/0x560 [ 275.087570][T10792] prepare_alloc_pages+0x22a/0x650 [ 275.087601][T10792] __alloc_frozen_pages_noprof+0x12f/0x380 [ 275.087628][T10792] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 275.087655][T10792] ? __pfx_policy_nodemask+0x10/0x10 [ 275.087676][T10792] ? __lock_acquire+0x6b5/0x2cf0 [ 275.087698][T10792] alloc_pages_mpol+0x235/0x490 [ 275.087719][T10792] folio_alloc_mpol_noprof+0x39/0x160 [ 275.087738][T10792] vma_alloc_folio_noprof+0xe1/0x1e0 [ 275.087758][T10792] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 275.087775][T10792] ? __pte_offset_map+0x29/0x240 [ 275.087795][T10792] ? __pte_offset_map+0x29/0x240 [ 275.087817][T10792] do_pte_missing+0x159d/0x33f0 [ 275.087852][T10792] ? handle_mm_fault+0xf1/0x3170 [ 275.087875][T10792] handle_mm_fault+0x1bf2/0x3170 [ 275.087908][T10792] ? handle_mm_fault+0xf1/0x3170 [ 275.087934][T10792] ? __pfx_handle_mm_fault+0x10/0x10 [ 275.087954][T10792] ? follow_page_pte+0x6cf/0xe60 [ 275.087982][T10792] ? __pfx_follow_page_pte+0x10/0x10 [ 275.088011][T10792] __get_user_pages+0x167f/0x2730 [ 275.088060][T10792] __gup_longterm_locked+0xdcf/0x1630 [ 275.088089][T10792] ? gup_fast_fallback+0x121/0x20d0 [ 275.088107][T10792] ? sanity_check_pinned_pages+0x7af/0x870 [ 275.088134][T10792] gup_fast_fallback+0x1d84/0x20d0 [ 275.088211][T10792] ? __pfx_gup_fast_fallback+0x10/0x10 [ 275.088231][T10792] ? rcu_is_watching+0x15/0xb0 [ 275.088253][T10792] ? pin_user_pages_fast+0x4d/0xb0 [ 275.088274][T10792] iov_iter_extract_pages+0x37b/0x5f0 [ 275.088302][T10792] rds_info_getsockopt+0x278/0x620 [ 275.088332][T10792] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 275.088366][T10792] ? __might_fault+0xaf/0x130 [ 275.088386][T10792] ? __might_fault+0xaf/0x130 [ 275.088408][T10792] rds_getsockopt+0x38b/0x600 [ 275.088430][T10792] ? __pfx_rds_getsockopt+0x10/0x10 [ 275.088459][T10792] do_sock_getsockopt+0x6ae/0x7e0 [ 275.088484][T10792] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 275.088518][T10792] ? __fget_files+0x3a0/0x420 [ 275.088542][T10792] ? __fget_files+0x2a/0x420 [ 275.088568][T10792] __x64_sys_getsockopt+0x1a4/0x240 [ 275.088593][T10792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.088610][T10792] do_syscall_64+0x174/0x580 [ 275.088628][T10792] ? trace_irq_disable+0x3b/0x140 [ 275.088650][T10792] ? clear_bhb_loop+0x40/0x90 [ 275.088670][T10792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.088686][T10792] RIP: 0033:0x7f4b1659ce59 [ 275.088702][T10792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.088716][T10792] RSP: 002b:00007f4b174b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 275.088733][T10792] RAX: ffffffffffffffda RBX: 00007f4b16815fa0 RCX: 00007f4b1659ce59 [ 275.088744][T10792] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 275.088754][T10792] RBP: 00007f4b174b0090 R08: 0000200000000000 R09: 0000000000000000 [ 275.088765][T10792] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 275.088774][T10792] R13: 00007f4b16816038 R14: 00007f4b16815fa0 R15: 00007fff63f75578 [ 275.088802][T10792] [ 275.576405][T10790] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1235'. [ 275.586695][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'. [ 275.711296][T10806] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1233'. [ 276.433369][T10824] FAULT_INJECTION: forcing a failure. [ 276.433369][T10824] name failslab, interval 1, probability 0, space 0, times 0 [ 276.447526][T10824] CPU: 0 UID: 0 PID: 10824 Comm: syz.1.1242 Not tainted syzkaller #0 PREEMPT(full) [ 276.447549][T10824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.447557][T10824] Call Trace: [ 276.447564][T10824] [ 276.447571][T10824] dump_stack_lvl+0xe8/0x150 [ 276.447596][T10824] should_fail_ex+0x412/0x560 [ 276.447620][T10824] should_failslab+0xa8/0x100 [ 276.447638][T10824] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 276.447662][T10824] ? __kernfs_new_node+0xaa/0x970 [ 276.447686][T10824] kstrdup+0x42/0x100 [ 276.447703][T10824] __kernfs_new_node+0xaa/0x970 [ 276.447729][T10824] ? __pfx___kernfs_new_node+0x10/0x10 [ 276.447752][T10824] ? kernfs_root+0x1c/0x230 [ 276.447778][T10824] ? kernfs_root+0x1c/0x230 [ 276.447797][T10824] ? kernfs_root+0x1c/0x230 [ 276.447813][T10824] ? kernfs_root+0x1c/0x230 [ 276.447835][T10824] kernfs_new_node+0x102/0x210 [ 276.447858][T10824] kernfs_create_dir_ns+0x44/0x130 [ 276.447884][T10824] sysfs_create_dir_ns+0x12f/0x2a0 [ 276.447908][T10824] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 276.447930][T10824] ? do_raw_spin_unlock+0xf5/0x210 [ 276.447956][T10824] kobject_add_internal+0x62b/0xd00 [ 276.447985][T10824] kobject_add+0x163/0x240 [ 276.448004][T10824] ? __pfx_kobject_add+0x10/0x10 [ 276.448025][T10824] ? __pfx_kobject_add+0x10/0x10 [ 276.448045][T10824] ? kobject_init+0x83/0x1e0 [ 276.448067][T10824] ? get_device_parent+0x366/0x3a0 [ 276.448094][T10824] device_add+0x408/0xbb0 [ 276.448115][T10824] ? device_initialize+0x26a/0x460 [ 276.448137][T10824] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 276.448160][T10824] wakeup_source_register+0x18a/0x380 [ 276.448185][T10824] ? ep_insert+0xba7/0x1a40 [ 276.448204][T10824] ep_insert+0xf34/0x1a40 [ 276.448237][T10824] ? __pfx_ep_insert+0x10/0x10 [ 276.448269][T10824] ? bpf_lsm_capable+0x9/0x20 [ 276.448293][T10824] do_epoll_ctl+0x7f4/0xe80 [ 276.448321][T10824] __x64_sys_epoll_ctl+0x165/0x1b0 [ 276.448354][T10824] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 276.448372][T10824] ? fput+0xa0/0xd0 [ 276.448397][T10824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.448412][T10824] do_syscall_64+0x174/0x580 [ 276.448429][T10824] ? trace_irq_disable+0x3b/0x140 [ 276.448451][T10824] ? clear_bhb_loop+0x40/0x90 [ 276.448469][T10824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.448484][T10824] RIP: 0033:0x7fcd3079ce59 [ 276.448499][T10824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.448511][T10824] RSP: 002b:00007fcd31659028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 276.448530][T10824] RAX: ffffffffffffffda RBX: 00007fcd30a15fa0 RCX: 00007fcd3079ce59 [ 276.448541][T10824] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000006 [ 276.448550][T10824] RBP: 00007fcd31659090 R08: 0000000000000000 R09: 0000000000000000 [ 276.448559][T10824] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000002 [ 276.448567][T10824] R13: 00007fcd30a16038 R14: 00007fcd30a15fa0 R15: 00007fff6bbd6df8 [ 276.448595][T10824] [ 276.448604][T10824] kobject: kobject_add_internal failed for wakeup13 (error: -12 parent: wakeup) [ 276.754111][ T7009] net_ratelimit: 913 callbacks suppressed [ 276.754160][ T7009] bond4: (slave bridge0): failed to get link speed/duplex [ 276.813078][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 276.822062][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 276.915807][T10837] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1244'. [ 276.929254][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'. [ 276.938120][T10832] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1244'. [ 276.948778][T10830] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 277.302205][ T7010] bond4: (slave bridge0): failed to get link speed/duplex [ 277.340214][T10845] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 277.352652][T10845] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 277.359513][T10845] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 277.366333][T10845] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 277.373155][T10845] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 277.379961][T10845] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 277.386772][T10845] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 277.405248][T10845] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 277.942146][T10789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 278.268744][T10855] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1251'. [ 278.389714][T10857] sctp: [Deprecated]: syz.3.1250 (pid 10857) Use of int in max_burst socket option. [ 278.389714][T10857] Use struct sctp_assoc_value instead [ 278.432092][T10857] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 278.480768][T10866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1253'. [ 278.651482][T10873] xt_connbytes: Forcing CT accounting to be enabled [ 278.658969][T10873] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.198751][T10898] syzkaller0: entered promiscuous mode [ 279.204261][T10898] syzkaller0: entered allmulticast mode [ 279.240445][T10902] syzkaller0: entered promiscuous mode [ 279.245959][T10902] syzkaller0: entered allmulticast mode [ 279.292892][T10896] tipc: Enabled bearer , priority 0 [ 279.440084][T10902] tipc: Resetting bearer [ 279.713834][T10891] tipc: Resetting bearer [ 279.800673][T10891] tipc: Disabling bearer [ 280.246622][T10920] netlink: 'syz.3.1272': attribute type 9 has an invalid length. [ 280.786998][T10941] __nla_validate_parse: 10 callbacks suppressed [ 280.787015][T10941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1277'. [ 280.953195][T10945] netlink: 'syz.2.1279': attribute type 1 has an invalid length. [ 281.184266][T10955] netlink: 'syz.2.1279': attribute type 10 has an invalid length. [ 281.192112][T10955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1279'. [ 281.244499][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1283'. [ 281.257385][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'. [ 281.281497][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'. [ 281.414846][T10945] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.427952][T10952] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 281.436825][T10955] dummy0: entered promiscuous mode [ 281.454563][T10955] bond3: (slave dummy0): Removing an active aggregator [ 281.462609][T10955] bond3: (slave dummy0): Releasing backup interface [ 281.495766][T10957] team3: entered promiscuous mode [ 281.500844][T10957] team3: entered allmulticast mode [ 281.506347][T10957] 8021q: adding VLAN 0 to HW filter on device team3 [ 281.532553][T10959] team4: entered promiscuous mode [ 281.537671][T10959] team4: entered allmulticast mode [ 281.543172][T10959] 8021q: adding VLAN 0 to HW filter on device team4 [ 281.675311][T10970] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1287'. [ 281.755103][T10966] syzkaller0: entered promiscuous mode [ 281.760620][T10966] syzkaller0: entered allmulticast mode [ 282.020570][ T6987] net_ratelimit: 3348 callbacks suppressed [ 282.020589][ T6987] bond4: (slave bridge0): failed to get link speed/duplex [ 282.400361][T10985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1290'. [ 282.409355][T10985] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 282.560437][T10991] netlink: 'syz.3.1291': attribute type 1 has an invalid length. [ 282.709674][T10991] 8021q: adding VLAN 0 to HW filter on device bond6 [ 282.729978][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 282.746162][T10994] veth0_to_team: left promiscuous mode [ 282.802421][T10994] veth0_to_team: entered promiscuous mode [ 282.810495][T10994] bond6: (slave macvlan0): making interface the new active one [ 282.819541][T10994] bond6: (slave macvlan0): Enslaving as an active interface with an up link [ 282.888755][ T7009] bond4: (slave bridge0): failed to get link speed/duplex [ 283.086885][ T6741] IPVS: starting estimator thread 0... [ 283.125696][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 283.286107][T11014] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 283.307342][T11014] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 283.314197][T11014] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 283.321030][T11014] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 283.327813][T11014] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 283.342150][T11010] IPVS: using max 32 ests per chain, 76800 per kthread [ 284.286677][T11042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1303'. [ 284.369941][T11040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1302'. [ 284.480992][T11042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1303'. [ 284.565207][T11043] 8021q: adding VLAN 0 to HW filter on device bond6 [ 284.709145][T11057] ip6gre2: entered promiscuous mode [ 284.714392][T11057] ip6gre2: entered allmulticast mode [ 284.721804][ T7004] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 284.729883][ T7004] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 284.746692][T11057] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 284.779606][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 285.130364][T11066] FAULT_INJECTION: forcing a failure. [ 285.130364][T11066] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 285.143612][T11066] CPU: 0 UID: 0 PID: 11066 Comm: syz.4.1310 Not tainted syzkaller #0 PREEMPT(full) [ 285.143633][T11066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.143643][T11066] Call Trace: [ 285.143650][T11066] [ 285.143657][T11066] dump_stack_lvl+0xe8/0x150 [ 285.143683][T11066] should_fail_ex+0x412/0x560 [ 285.143706][T11066] prepare_alloc_pages+0x22a/0x650 [ 285.143738][T11066] __alloc_frozen_pages_noprof+0x12f/0x380 [ 285.143765][T11066] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 285.143793][T11066] ? __pfx_policy_nodemask+0x10/0x10 [ 285.143813][T11066] ? __lock_acquire+0x6b5/0x2cf0 [ 285.143834][T11066] alloc_pages_mpol+0x235/0x490 [ 285.143855][T11066] folio_alloc_mpol_noprof+0x39/0x160 [ 285.143874][T11066] vma_alloc_folio_noprof+0xe1/0x1e0 [ 285.143893][T11066] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 285.143910][T11066] ? __pte_offset_map+0x29/0x240 [ 285.143931][T11066] ? __pte_offset_map+0x29/0x240 [ 285.143953][T11066] do_pte_missing+0x159d/0x33f0 [ 285.143987][T11066] ? handle_mm_fault+0xf1/0x3170 [ 285.144011][T11066] handle_mm_fault+0x1bf2/0x3170 [ 285.144043][T11066] ? handle_mm_fault+0xf1/0x3170 [ 285.144070][T11066] ? __pfx_handle_mm_fault+0x10/0x10 [ 285.144090][T11066] ? follow_page_pte+0x6cf/0xe60 [ 285.144118][T11066] ? __pfx_follow_page_pte+0x10/0x10 [ 285.144147][T11066] __get_user_pages+0x167f/0x2730 [ 285.144197][T11066] __gup_longterm_locked+0xdcf/0x1630 [ 285.144225][T11066] ? gup_fast_fallback+0x121/0x20d0 [ 285.144244][T11066] ? sanity_check_pinned_pages+0x7af/0x870 [ 285.144268][T11066] gup_fast_fallback+0x1d84/0x20d0 [ 285.144315][T11066] ? __pfx_gup_fast_fallback+0x10/0x10 [ 285.144334][T11066] ? rcu_is_watching+0x15/0xb0 [ 285.144357][T11066] ? pin_user_pages_fast+0x4d/0xb0 [ 285.144378][T11066] iov_iter_extract_pages+0x37b/0x5f0 [ 285.144405][T11066] rds_info_getsockopt+0x278/0x620 [ 285.144435][T11066] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 285.144469][T11066] ? __might_fault+0xaf/0x130 [ 285.144490][T11066] ? __might_fault+0xaf/0x130 [ 285.144512][T11066] rds_getsockopt+0x38b/0x600 [ 285.144534][T11066] ? __pfx_rds_getsockopt+0x10/0x10 [ 285.144569][T11066] do_sock_getsockopt+0x6ae/0x7e0 [ 285.144595][T11066] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 285.144629][T11066] ? __fget_files+0x3a0/0x420 [ 285.144648][T11066] ? __fget_files+0x2a/0x420 [ 285.144673][T11066] __x64_sys_getsockopt+0x1a4/0x240 [ 285.144697][T11066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.144716][T11066] do_syscall_64+0x174/0x580 [ 285.144733][T11066] ? trace_irq_disable+0x3b/0x140 [ 285.144755][T11066] ? clear_bhb_loop+0x40/0x90 [ 285.144775][T11066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.144791][T11066] RIP: 0033:0x7fb403f9ce59 [ 285.144808][T11066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.144821][T11066] RSP: 002b:00007fb404f2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 285.144839][T11066] RAX: ffffffffffffffda RBX: 00007fb404215fa0 RCX: 00007fb403f9ce59 [ 285.144850][T11066] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 285.144861][T11066] RBP: 00007fb404f2a090 R08: 0000200000000000 R09: 0000000000000000 [ 285.144871][T11066] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 285.144880][T11066] R13: 00007fb404216038 R14: 00007fb404215fa0 R15: 00007ffd34f71538 [ 285.144909][T11066] [ 285.650935][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 285.659413][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 286.192612][T11088] __nla_validate_parse: 4 callbacks suppressed [ 286.192629][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'. [ 286.209022][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'. [ 286.326824][T11090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1316'. [ 286.721405][T11107] FAULT_INJECTION: forcing a failure. [ 286.721405][T11107] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 286.734651][T11107] CPU: 1 UID: 0 PID: 11107 Comm: syz.1.1321 Not tainted syzkaller #0 PREEMPT(full) [ 286.734674][T11107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.734683][T11107] Call Trace: [ 286.734691][T11107] [ 286.734698][T11107] dump_stack_lvl+0xe8/0x150 [ 286.734721][T11107] should_fail_ex+0x412/0x560 [ 286.734744][T11107] prepare_alloc_pages+0x22a/0x650 [ 286.734775][T11107] __alloc_frozen_pages_noprof+0x12f/0x380 [ 286.734801][T11107] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 286.734828][T11107] ? __pfx_policy_nodemask+0x10/0x10 [ 286.734848][T11107] ? __lock_acquire+0x6b5/0x2cf0 [ 286.734869][T11107] alloc_pages_mpol+0x235/0x490 [ 286.734890][T11107] folio_alloc_mpol_noprof+0x39/0x160 [ 286.734909][T11107] vma_alloc_folio_noprof+0xe1/0x1e0 [ 286.734928][T11107] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 286.734946][T11107] ? __pte_offset_map+0x29/0x240 [ 286.734966][T11107] ? __pte_offset_map+0x29/0x240 [ 286.734989][T11107] do_pte_missing+0x159d/0x33f0 [ 286.735023][T11107] ? handle_mm_fault+0xf1/0x3170 [ 286.735046][T11107] handle_mm_fault+0x1bf2/0x3170 [ 286.735079][T11107] ? handle_mm_fault+0xf1/0x3170 [ 286.735105][T11107] ? __pfx_handle_mm_fault+0x10/0x10 [ 286.735125][T11107] ? follow_page_pte+0x6cf/0xe60 [ 286.735153][T11107] ? __pfx_follow_page_pte+0x10/0x10 [ 286.735183][T11107] __get_user_pages+0x167f/0x2730 [ 286.735234][T11107] __gup_longterm_locked+0xdcf/0x1630 [ 286.735262][T11107] ? gup_fast_fallback+0x121/0x20d0 [ 286.735281][T11107] ? sanity_check_pinned_pages+0x7af/0x870 [ 286.735315][T11107] gup_fast_fallback+0x1d84/0x20d0 [ 286.735365][T11107] ? __pfx_gup_fast_fallback+0x10/0x10 [ 286.735385][T11107] ? rcu_is_watching+0x15/0xb0 [ 286.735407][T11107] ? pin_user_pages_fast+0x4d/0xb0 [ 286.735428][T11107] iov_iter_extract_pages+0x37b/0x5f0 [ 286.735455][T11107] rds_info_getsockopt+0x278/0x620 [ 286.735483][T11107] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 286.735517][T11107] ? __might_fault+0xaf/0x130 [ 286.735537][T11107] ? __might_fault+0xaf/0x130 [ 286.735559][T11107] rds_getsockopt+0x38b/0x600 [ 286.735580][T11107] ? __pfx_rds_getsockopt+0x10/0x10 [ 286.735608][T11107] do_sock_getsockopt+0x6ae/0x7e0 [ 286.735633][T11107] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 286.735667][T11107] ? __fget_files+0x3a0/0x420 [ 286.735685][T11107] ? __fget_files+0x2a/0x420 [ 286.735710][T11107] __x64_sys_getsockopt+0x1a4/0x240 [ 286.735733][T11107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.735751][T11107] do_syscall_64+0x174/0x580 [ 286.735769][T11107] ? trace_irq_disable+0x3b/0x140 [ 286.735791][T11107] ? clear_bhb_loop+0x40/0x90 [ 286.735811][T11107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.735826][T11107] RIP: 0033:0x7fcd3079ce59 [ 286.735843][T11107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.735857][T11107] RSP: 002b:00007fcd31659028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 286.735875][T11107] RAX: ffffffffffffffda RBX: 00007fcd30a15fa0 RCX: 00007fcd3079ce59 [ 286.735887][T11107] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 286.735897][T11107] RBP: 00007fcd31659090 R08: 0000200000000000 R09: 0000000000000000 [ 286.735907][T11107] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 286.735917][T11107] R13: 00007fcd30a16038 R14: 00007fcd30a15fa0 R15: 00007fff6bbd6df8 [ 286.735945][T11107] [ 287.111513][T11109] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1322'. [ 287.305921][T11109] bridge0: port 1(vlan3) entered blocking state [ 287.312390][T11109] bridge0: port 1(vlan3) entered disabled state [ 287.318833][T11109] vlan3: entered allmulticast mode [ 287.324418][T11109] geneve0: entered allmulticast mode [ 287.335663][T11109] vlan3: entered promiscuous mode [ 287.340733][T11109] geneve0: entered promiscuous mode [ 287.449557][T11116] net_ratelimit: 3342 callbacks suppressed [ 287.449578][T11116] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 287.462231][T11116] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 287.469075][T11116] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 287.475845][T11116] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 287.482655][T11116] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 287.489492][T11116] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 287.491802][ T663] bond4: (slave bridge0): failed to get link speed/duplex [ 287.496302][T11116] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 287.510094][T11116] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 287.516925][T11116] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 287.932436][T11130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1329'. [ 288.480637][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 288.899030][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1340'. [ 289.866913][T11186] netlink: 'syz.1.1345': attribute type 1 has an invalid length. [ 289.913674][T11186] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1345'. [ 292.271766][T11189] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1346'. [ 292.661188][ T7011] net_ratelimit: 3335 callbacks suppressed [ 292.712676][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 292.750336][T11197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1349'. [ 292.806838][T11199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1348'. [ 292.835164][T11197] lo: Caught tx_queue_len zero misconfig [ 292.863966][T11197] netlink: 'syz.0.1349': attribute type 5 has an invalid length. [ 292.893394][T11199] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 292.926533][T11197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1349'. [ 292.989834][ T7004] bond4: (slave bridge0): failed to get link speed/duplex [ 293.000284][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'. [ 293.096995][T11209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 293.107789][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 293.212218][T11209] erspan0: entered promiscuous mode [ 293.218401][T11209] macvtap1: entered promiscuous mode [ 293.237544][T11209] macvtap1: entered allmulticast mode [ 293.277632][T11209] erspan0: entered allmulticast mode [ 293.329702][T11215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1356'. [ 293.338682][T11215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1356'. [ 293.464870][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 293.682482][T11209] erspan0: left allmulticast mode [ 293.687721][T11209] erspan0: left promiscuous mode [ 294.077818][T11209] macvtap1: left promiscuous mode [ 294.088312][T11209] macvtap1: left allmulticast mode [ 294.326938][ T7004] bond4: (slave bridge0): failed to get link speed/duplex [ 294.362592][T11227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.463552][T11222] bridge5: entered promiscuous mode [ 294.492328][T11222] bridge5: entered allmulticast mode [ 294.537303][T11222] team0: Port device bridge5 added [ 294.542775][ T1030] bond4: (slave bridge0): failed to get link speed/duplex [ 294.599351][ T6987] bond4: (slave bridge0): failed to get link speed/duplex [ 294.798041][T11240] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 294.973728][ T6987] bond4: (slave bridge0): failed to get link speed/duplex [ 295.000303][T11250] xt_hashlimit: size too large, truncated to 1048576 [ 295.039492][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 295.080566][T11253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1367'. [ 295.384715][T11262] batman_adv: batadv0: Adding interface: dummy0 [ 295.390995][T11262] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.416692][T11262] batman_adv: batadv0: Interface activated: dummy0 [ 295.905671][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 296.567772][T11305] netlink: 'syz.2.1384': attribute type 3 has an invalid length. [ 296.575544][T11305] netlink: 'syz.2.1384': attribute type 15 has an invalid length. [ 296.584123][T11305] netlink: 'syz.2.1384': attribute type 3 has an invalid length. [ 296.593994][T11305] netlink: 'syz.2.1384': attribute type 4 has an invalid length. [ 296.602133][T11305] netlink: 'syz.2.1384': attribute type 5 has an invalid length. [ 296.610183][T11305] netlink: 'syz.2.1384': attribute type 6 has an invalid length. [ 296.632971][T11305] netlink: 'syz.2.1384': attribute type 7 has an invalid length. [ 296.640729][T11305] netlink: 'syz.2.1384': attribute type 11 has an invalid length. [ 296.649315][T11305] netlink: 'syz.2.1384': attribute type 15 has an invalid length. [ 296.657259][T11305] netlink: 'syz.2.1384': attribute type 16 has an invalid length. [ 297.428034][T11334] lo speed is unknown, defaulting to 1000 [ 297.435474][T11334] lo speed is unknown, defaulting to 1000 [ 297.442013][T11334] lo speed is unknown, defaulting to 1000 [ 297.608179][T11334] infiniband syz1: set active [ 297.613001][ T8786] lo speed is unknown, defaulting to 1000 [ 297.619118][T11334] infiniband syz1: added lo [ 297.684096][T11334] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 297.700081][T11334] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 297.717298][T11334] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 297.753945][ T12] net_ratelimit: 38 callbacks suppressed [ 297.753965][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 297.781530][T11334] RDS/IB: syz1: added [ 297.786450][T11334] smc: adding ib device syz1 with port count 1 [ 297.793753][T11334] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 297.804378][ T996] lo speed is unknown, defaulting to 1000 [ 297.814452][T11334] lo speed is unknown, defaulting to 1000 [ 297.872859][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 297.924407][T11348] syzkaller1: entered promiscuous mode [ 297.937031][T11348] syzkaller1: entered allmulticast mode [ 298.075014][T11334] lo speed is unknown, defaulting to 1000 [ 298.135262][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 298.192574][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 298.347918][T11334] lo speed is unknown, defaulting to 1000 [ 298.366334][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 298.470402][ T1030] bond4: (slave bridge0): failed to get link speed/duplex [ 298.636723][T11334] lo speed is unknown, defaulting to 1000 [ 298.641366][ T1030] bond4: (slave bridge0): failed to get link speed/duplex [ 298.777656][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 298.825059][T11334] lo speed is unknown, defaulting to 1000 [ 298.895394][ T6564] bond4: (slave bridge0): failed to get link speed/duplex [ 299.070557][T11334] lo speed is unknown, defaulting to 1000 [ 299.102390][ T7004] bond4: (slave bridge0): failed to get link speed/duplex [ 300.077265][T11329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.088350][T11336] __nla_validate_parse: 8 callbacks suppressed [ 300.088382][T11336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1393'. [ 300.563721][T11368] 8021q: adding VLAN 0 to HW filter on device bond5 [ 300.603734][T11368] bond4: (slave bond5): making interface the new active one [ 300.611661][T11368] bond4: (slave bond5): Enslaving as an active interface with an up link [ 300.620101][T11386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1406'. [ 300.629047][T11386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1406'. [ 300.717470][T11368] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 300.733366][T11389] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 300.776836][T11368] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.786743][T11384] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1406'. [ 300.847656][T11389] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 300.944256][T11384] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 300.949910][T11384] dvmrp1: linktype set to 0 [ 300.980291][T11396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1411'. [ 301.149815][T11404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1414'. [ 301.296952][T11398] bond6: option packets_per_slave: invalid value (1048582) [ 301.327214][T11398] bond6: option packets_per_slave: allowed values 0 - 65535 [ 301.336501][T11398] bond6 (unregistering): Released all slaves [ 301.420505][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 301.455985][T11409] Cannot find del_set index 8192 as target [ 302.047275][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'. [ 302.149671][T11439] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 302.278584][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 302.342256][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1425'. [ 302.383452][T11451] veth0_macvtap: Caught tx_queue_len zero misconfig [ 302.441117][T11453] netlink: 'syz.1.1427': attribute type 11 has an invalid length. [ 302.448966][T11453] validate_nla: 11 callbacks suppressed [ 302.448983][T11453] netlink: 'syz.1.1427': attribute type 4 has an invalid length. [ 302.462235][T11453] netlink: 'syz.1.1427': attribute type 6 has an invalid length. [ 302.509906][T11455] veth1_to_bond: Caught tx_queue_len zero misconfig [ 302.838108][ T6742] hid-generic 0005:0B57:0008.0001: item fetching failed at offset 12/21 [ 302.847307][ T6742] hid-generic 0005:0B57:0008.0001: probe with driver hid-generic failed with error -22 [ 302.885709][ T6564] net_ratelimit: 20 callbacks suppressed [ 302.885725][ T6564] bond4: (slave bridge0): failed to get link speed/duplex [ 302.901257][T11480] netlink: 'syz.3.1436': attribute type 10 has an invalid length. [ 303.077888][T11480] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 303.142189][T11491] openvswitch: netlink: IPv4 tun info is not correct [ 303.150013][T11480] team0: Port device netdevsim1 added [ 303.178007][T11491] xt_HMARK: spi-set and port-set can't be combined [ 303.233901][T11493] macvtap1: entered allmulticast mode [ 303.239323][T11493] dummy0: entered allmulticast mode [ 303.263475][T11493] dummy0: left allmulticast mode [ 303.294013][T11495] netlink: 'syz.3.1442': attribute type 12 has an invalid length. [ 303.348616][T11495] netlink: 'syz.3.1442': attribute type 11 has an invalid length. [ 303.539093][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 303.584513][ T1030] bond4: (slave bridge0): failed to get link speed/duplex [ 303.660414][T11519] veth1_to_bond: entered allmulticast mode [ 303.698672][T11519] veth1_to_bond (unregistering): left allmulticast mode [ 303.716166][T11519] bond0: (slave bond_slave_1): Releasing backup interface [ 303.768474][T11522] tipc: Enabling of bearer rejected, failed to enable media [ 303.863231][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 303.982315][ T6987] bond4: (slave bridge0): failed to get link speed/duplex [ 304.104797][ T663] bond4: (slave bridge0): failed to get link speed/duplex [ 304.266282][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 304.435801][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 304.676112][ T7011] bond4: (slave bridge0): failed to get link speed/duplex [ 304.882181][T11565] Cannot find add_set index 2 as target [ 305.157173][T11565] __nla_validate_parse: 13 callbacks suppressed [ 305.157189][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1459'. [ 306.970863][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1462'. [ 309.990803][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 317.041727][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.048157][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.214052][ T5645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.224720][ T5645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.236060][ T5645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 319.244061][ T5645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 319.251723][ T5645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.419227][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 320.431380][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 320.441526][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 320.449608][ T5627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.457280][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 320.686786][ T5645] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 320.776637][ T5645] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 320.784671][ T5645] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 320.792753][ T5645] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 320.800940][ T5645] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 321.394912][ T5627] Bluetooth: hci5: command tx timeout [ 321.555667][ T5645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.566204][ T5645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.574481][ T5645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.600905][ T5645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.610928][ T5645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.984378][ T5627] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 321.994827][ T5627] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 322.003107][ T5627] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 322.011077][ T5627] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 322.018802][ T5627] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 322.587588][ T5627] Bluetooth: hci6: command tx timeout [ 322.918560][ T5627] Bluetooth: hci7: command tx timeout [ 323.467034][ T5627] Bluetooth: hci5: command tx timeout [ 323.686532][ T5627] Bluetooth: hci2: command tx timeout [ 324.235468][ T5627] Bluetooth: hci8: command tx timeout [ 324.674261][ T5627] Bluetooth: hci6: command tx timeout [ 325.004708][ T5627] Bluetooth: hci7: command tx timeout [ 325.561009][ T5627] Bluetooth: hci5: command tx timeout [ 325.773454][ T5627] Bluetooth: hci2: command tx timeout [ 326.322530][ T5627] Bluetooth: hci8: command tx timeout [ 326.760971][ T5627] Bluetooth: hci6: command tx timeout [ 327.091554][ T5627] Bluetooth: hci7: command tx timeout [ 327.639560][ T5627] Bluetooth: hci5: command tx timeout [ 327.859334][ T5627] Bluetooth: hci2: command tx timeout [ 328.409483][ T5627] Bluetooth: hci8: command tx timeout [ 328.850189][ T5627] Bluetooth: hci6: command tx timeout [ 329.177827][ T5627] Bluetooth: hci7: command tx timeout [ 329.947537][ T5627] Bluetooth: hci2: command tx timeout [ 330.496882][ T5627] Bluetooth: hci8: command tx timeout [ 337.514594][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 352.583500][T11578] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1459'. [ 352.827982][ T6564] net_ratelimit: 1 callbacks suppressed [ 352.828003][ T6564] bond4: (slave bridge0): failed to get link speed/duplex [ 353.180846][ T663] bond4: (slave bridge0): failed to get link speed/duplex [ 353.388602][ T6564] bond4: (slave bridge0): failed to get link speed/duplex [ 353.603620][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 353.880483][ T663] bond4: (slave bridge0): failed to get link speed/duplex [ 354.058648][ C1] sched: DL replenish lagged too much [ 354.307195][ T7004] bond4: (slave bridge0): failed to get link speed/duplex [ 354.509619][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 354.692701][ T48] bond4: (slave bridge0): failed to get link speed/duplex [ 354.827872][ T1030] bond4: (slave bridge0): failed to get link speed/duplex [ 378.473289][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.479653][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.341192][T11565] bridge0: port 1(syz_tun) entered disabled state [ 379.371199][T11565] syz_tun (unregistering): left allmulticast mode [ 379.377669][T11565] syz_tun (unregistering): left promiscuous mode [ 379.423582][T11565] bridge0: port 1(syz_tun) entered disabled state [ 380.076891][ T5645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.099274][ T5645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.107625][ T5645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.115625][ T5645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.123359][ T5645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.239471][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.251574][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.274267][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.284851][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.292561][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.415671][ T5645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 381.429317][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 381.437649][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 381.446145][ T5645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 381.453984][ T5645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.432114][ T5645] Bluetooth: hci0: command tx timeout [ 382.469010][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.538492][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.546796][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.557200][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.565372][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.690794][ T5645] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 382.716948][ T5645] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 382.725063][ T5645] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 382.733210][ T5645] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 382.740953][ T5645] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 383.484128][ T5645] Bluetooth: hci1: command tx timeout [ 383.594319][ T5645] Bluetooth: hci3: command tx timeout [ 384.584414][ T5645] Bluetooth: hci0: command tx timeout [ 384.695318][ T5645] Bluetooth: hci4: command tx timeout [ 384.915669][ T5645] Bluetooth: hci9: command tx timeout [ 385.464463][ T5645] Bluetooth: hci1: command tx timeout [ 385.684051][ T5645] Bluetooth: hci3: command tx timeout [ 386.562040][ T5645] Bluetooth: hci0: command tx timeout [ 386.672286][ T5645] Bluetooth: hci4: command tx timeout [ 386.892561][ T5645] Bluetooth: hci9: command tx timeout [ 387.550414][ T5645] Bluetooth: hci1: command tx timeout [ 387.770276][ T5645] Bluetooth: hci3: command tx timeout [ 388.648176][ T5645] Bluetooth: hci0: command tx timeout [ 388.759821][ T5645] Bluetooth: hci4: command tx timeout [ 388.978930][ T5645] Bluetooth: hci9: command tx timeout [ 389.637130][ T5645] Bluetooth: hci1: command tx timeout [ 389.856950][ T5645] Bluetooth: hci3: command tx timeout [ 390.844585][ T5645] Bluetooth: hci4: command tx timeout [ 391.064669][ T5645] Bluetooth: hci9: command tx timeout [ 393.827894][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 439.917671][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.924019][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.348684][ T5627] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 440.359594][ T5627] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 440.367937][ T5627] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 440.412662][ T5627] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 440.420428][ T5627] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 441.748505][ T50] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 441.758672][ T50] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 441.766946][ T50] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 441.775056][ T50] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 441.785050][ T50] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 442.026843][ T5627] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 442.086529][ T8789] Bluetooth: hci5: command 0x0406 tx timeout [ 442.095774][ T5627] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 442.104120][ T5627] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 442.112282][ T5627] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 442.122391][ T5627] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 442.488815][ T5627] Bluetooth: hci10: command tx timeout [ 443.276829][ T5645] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 443.289532][ T5645] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 443.297950][ T5645] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 443.307865][ T5645] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 443.316193][ T5645] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 443.454376][ T5627] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 443.499976][ T5627] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 443.508436][ T5627] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 443.516598][ T5627] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 443.524371][ T5627] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 443.920669][ T5627] Bluetooth: hci11: command tx timeout [ 444.251497][ T5627] Bluetooth: hci12: command tx timeout [ 444.580265][ T5627] Bluetooth: hci10: command tx timeout [ 445.459234][ T5648] Bluetooth: hci13: command tx timeout [ 445.678877][ T5648] Bluetooth: hci14: command tx timeout [ 446.008460][ T5648] Bluetooth: hci11: command tx timeout [ 446.337698][ T5648] Bluetooth: hci12: command tx timeout [ 446.667696][ T5648] Bluetooth: hci10: command tx timeout [ 447.228557][ T5648] Bluetooth: hci6: command 0x0406 tx timeout [ 447.234616][ T5648] Bluetooth: hci7: command 0x0406 tx timeout [ 447.240622][ T5648] Bluetooth: hci2: command 0x0406 tx timeout [ 447.246632][ T5648] Bluetooth: hci8: command 0x0406 tx timeout [ 447.547203][ T8789] Bluetooth: hci13: command tx timeout [ 447.765864][ T8789] Bluetooth: hci14: command tx timeout [ 448.094522][ T8789] Bluetooth: hci11: command tx timeout [ 448.424906][ T8789] Bluetooth: hci12: command tx timeout [ 448.753657][ T8789] Bluetooth: hci10: command tx timeout [ 449.632991][ T8789] Bluetooth: hci13: command tx timeout [ 449.852593][ T8789] Bluetooth: hci14: command tx timeout [ 450.182869][ T8789] Bluetooth: hci11: command tx timeout [ 450.510552][ T50] Bluetooth: hci12: command tx timeout [ 451.718840][ T50] Bluetooth: hci13: command tx timeout [ 451.938506][ T50] Bluetooth: hci14: command tx timeout [ 500.734690][ T8789] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 500.747083][ T8789] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 500.755431][ T8789] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 500.763619][ T8789] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 500.771371][ T8789] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 501.360953][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 501.361290][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.374750][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.739976][ T5645] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 501.753650][ T5645] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 501.761984][ T5645] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 501.770351][ T5645] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 501.778151][ T5645] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 502.322170][ T5645] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 502.333873][ T5645] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 502.377097][ T5645] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 502.385214][ T5645] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 502.393169][ T5645] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 502.911186][ T5645] Bluetooth: hci15: command tx timeout [ 503.492353][ T5627] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 503.503240][ T4945] Bluetooth: hci0: command 0x0406 tx timeout [ 503.509285][ T4945] Bluetooth: hci1: command 0x0406 tx timeout [ 503.520135][ T4945] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 503.531846][ T5648] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 503.543571][ T4945] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 503.558981][ T5648] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 503.590792][ T5648] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 503.600485][ T5648] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 503.608854][ T4945] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 503.618623][ T5648] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 503.626377][ T4945] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 503.917084][ T5648] Bluetooth: hci16: command tx timeout [ 504.472853][ T5648] Bluetooth: hci17: command tx timeout [ 505.030588][ T5648] Bluetooth: hci15: command tx timeout [ 506.035015][ T5648] Bluetooth: hci16: command tx timeout [ 506.592103][T11773] Bluetooth: hci17: command tx timeout [ 507.150856][T11773] Bluetooth: hci15: command tx timeout [ 508.155494][T11773] Bluetooth: hci16: command tx timeout [ 508.611181][T11773] Bluetooth: hci3: command 0x0406 tx timeout [ 508.617832][T11773] Bluetooth: hci4: command 0x0406 tx timeout [ 508.623858][T11773] Bluetooth: hci9: command 0x0406 tx timeout [ 508.712800][T11772] Bluetooth: hci17: command tx timeout [ 509.271224][T11772] Bluetooth: hci15: command tx timeout [ 510.274575][T11772] Bluetooth: hci16: command tx timeout [ 510.832568][T11772] Bluetooth: hci17: command tx timeout [ 513.622638][ T30] INFO: task syz.4.1454:11568 blocked for more than 143 seconds. [ 513.630414][ T30] Not tainted syzkaller #0 [ 513.635357][ T30] Blocked by coredump. [ 513.639943][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.648610][ T30] task:syz.4.1454 state:D stack:24344 pid:11568 tgid:11534 ppid:5641 task_flags:0x40054c flags:0x00080001 [ 513.660556][ T30] Call Trace: [ 513.663851][ T30] [ 513.666788][ T30] __schedule+0x1821/0x5740 [ 513.671463][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 513.676495][ T30] ? __pfx___schedule+0x10/0x10 [ 513.892265][ T30] ? schedule+0x90/0x360 [ 513.896569][ T30] schedule+0x164/0x360 [ 513.900739][ T30] schedule_preempt_disabled+0x13/0x30 [ 513.906204][ T30] __mutex_lock+0x7f7/0x1550 [ 513.910809][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 513.916344][ T30] ? __mutex_lock+0x608/0x1550 [ 513.921126][ T30] ? tun_chr_close+0x3e/0x1c0 [ 513.925961][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 513.931015][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 513.936137][ T30] tun_chr_close+0x3e/0x1c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 513.940657][ T30] __fput+0x44f/0xa60 [ 514.010418][ T30] task_work_run+0x1d9/0x270 [ 514.015092][ T30] ? __pfx_task_work_run+0x10/0x10 [ 514.020229][ T30] ? do_exit+0x70a/0x22c0 [ 514.024571][ T30] ? kmem_cache_free+0x182/0x650 [ 514.029558][ T30] ? put_net+0x191/0x260 [ 514.033814][ T30] do_exit+0x70f/0x22c0 [ 514.037987][ T30] ? __pfx_do_exit+0x10/0x10 [ 514.042587][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 514.047634][ T30] do_group_exit+0x21b/0x2d0 [ 514.052248][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.108914][ T30] get_signal+0x1284/0x1330 [ 514.113490][ T30] arch_do_signal_or_restart+0xbc/0x840 [ 514.119163][ T30] ? __x64_sys_sendmsg+0x26f/0x2a0 [ 514.124382][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 514.130572][ T30] exit_to_user_mode_loop+0xa9/0x680 [ 514.136121][ T30] ? rcu_is_watching+0x15/0xb0 [ 514.140914][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.147032][ T30] do_syscall_64+0x353/0x580 [ 514.151735][ T30] ? trace_irq_disable+0x3b/0x140 [ 514.156813][ T30] ? clear_bhb_loop+0x40/0x90 [ 514.161504][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.167406][ T30] RIP: 0033:0x7fb403f9ce59 [ 514.214281][ T30] RSP: 002b:00007fb404e85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.222745][ T30] RAX: 0000000000000024 RBX: 00007fb404216450 RCX: 00007fb403f9ce59 [ 514.230731][ T30] RDX: 0000000020000050 RSI: 0000200000000100 RDI: 0000000000000003 [ 514.238713][ T30] RBP: 00007fb404032d6f R08: 0000000000000000 R09: 0000000000000000 [ 514.246690][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.254681][ T30] R13: 00007fb4042164e8 R14: 00007fb404216450 R15: 00007ffd34f71538 [ 514.262687][ T30] [ 514.265718][ T30] INFO: task syz.1.1462:11610 blocked for more than 144 seconds. [ 514.273434][ T30] Not tainted syzkaller #0 [ 514.278375][ T30] Blocked by coredump. [ 514.282965][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.328237][ T30] task:syz.1.1462 state:D stack:24504 pid:11610 tgid:11595 ppid:5630 task_flags:0x40054c flags:0x00080001 [ 514.340199][ T30] Call Trace: [ 514.343487][ T30] [ 514.346426][ T30] __schedule+0x1821/0x5740 [ 514.350949][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 514.355924][ T30] ? __pfx___schedule+0x10/0x10 [ 514.360792][ T30] ? schedule+0x90/0x360 [ 514.365043][ T30] schedule+0x164/0x360 [ 514.369210][ T30] schedule_preempt_disabled+0x13/0x30 [ 514.374676][ T30] __mutex_lock+0x7f7/0x1550 [ 514.379276][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 514.384753][ T30] ? __mutex_lock+0x608/0x1550 [ 514.389528][ T30] ? tun_chr_close+0x3e/0x1c0 [ 514.394212][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 514.399263][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 514.404388][ T30] tun_chr_close+0x3e/0x1c0 [ 514.457329][ T30] __fput+0x44f/0xa60 [ 514.461378][ T30] task_work_run+0x1d9/0x270 [ 514.465995][ T30] ? __pfx_task_work_run+0x10/0x10 [ 514.471130][ T30] ? do_exit+0x70a/0x22c0 [ 514.475481][ T30] ? kmem_cache_free+0x182/0x650 [ 514.480434][ T30] ? put_net+0x191/0x260 [ 514.484694][ T30] do_exit+0x70f/0x22c0 [ 514.488871][ T30] ? __pfx_do_exit+0x10/0x10 [ 514.493476][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 514.498525][ T30] do_group_exit+0x21b/0x2d0 [ 514.503125][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.508342][ T30] get_signal+0x1284/0x1330 [ 514.512873][ T30] arch_do_signal_or_restart+0xbc/0x840 [ 514.518433][ T30] ? __x64_sys_sendmsg+0x26f/0x2a0 [ 514.551824][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 514.558058][ T30] exit_to_user_mode_loop+0xa9/0x680 [ 514.563359][ T30] ? rcu_is_watching+0x15/0xb0 [ 514.568140][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.574226][ T30] do_syscall_64+0x353/0x580 [ 514.578826][ T30] ? trace_irq_disable+0x3b/0x140 [ 514.583864][ T30] ? clear_bhb_loop+0x40/0x90 [ 514.588555][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.594460][ T30] RIP: 0033:0x7fcd3079ce59 [ 514.598882][ T30] RSP: 002b:00007fcd315d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.607306][ T30] RAX: 0000000000000048 RBX: 00007fcd30a16360 RCX: 00007fcd3079ce59 [ 514.615284][ T30] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000a [ 514.623261][ T30] RBP: 00007fcd30832d6f R08: 0000000000000000 R09: 0000000000000000 [ 514.631234][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.677021][ T30] R13: 00007fcd30a163f8 R14: 00007fcd30a16360 R15: 00007fff6bbd6df8 [ 514.685063][ T30] [ 514.688100][ T30] INFO: task syz-executor:11628 blocked for more than 144 seconds. [ 514.696001][ T30] Not tainted syzkaller #0 [ 514.700940][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.709610][ T30] task:syz-executor state:D stack:25656 pid:11628 tgid:11628 ppid:1 task_flags:0x400140 flags:0x00080002 [ 514.721539][ T30] Call Trace: [ 514.724834][ T30] [ 514.727792][ T30] __schedule+0x1821/0x5740 [ 514.732322][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 514.737303][ T30] ? __pfx___schedule+0x10/0x10 [ 514.742168][ T30] ? schedule+0x90/0x360 [ 514.746416][ T30] schedule+0x164/0x360 [ 514.750586][ T30] schedule_preempt_disabled+0x13/0x30 [ 514.821003][ T30] __mutex_lock+0x7f7/0x1550 [ 514.825667][ T30] ? __mutex_lock+0x608/0x1550 [ 514.830451][ T30] ? ib_get_eth_speed+0x173/0x7f0 [ 514.835661][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 514.840708][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 514.845838][ T30] ? _raw_spin_unlock+0x28/0x50 [ 514.850697][ T30] ? ib_device_get_netdev+0x220/0x2f0 [ 514.856149][ T30] ib_get_eth_speed+0x173/0x7f0 [ 514.861020][ T30] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 514.866451][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 514.912503][ T30] ? rxe_query_port+0x6b/0x3d0 [ 514.917441][ T30] rxe_query_port+0x93/0x3d0 [ 514.922058][ T30] ib_query_port+0x170/0x830 [ 514.926667][ T30] ib_setup_port_attrs+0x294/0x2380 [ 514.931883][ T30] ? rcu_is_watching+0x15/0xb0 [ 514.936658][ T30] ? trace_contention_end+0x3d/0x140 [ 514.941980][ T30] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 514.947630][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 514.953018][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 514.959033][ T30] ? device_add+0x70b/0xbb0 [ 514.963662][ T30] add_one_compat_dev+0x448/0x650 [ 514.968694][ T30] ? down_read+0x270/0x2e0 [ 514.973123][ T30] rdma_dev_init_net+0x243/0x2f0 [ 514.978077][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 514.983546][ T30] ? __kmalloc_noprof+0x37d/0x760 [ 515.029018][ T30] ops_init+0x35c/0x5c0 [ 515.033324][ T30] setup_net+0x118/0x340 [ 515.037641][ T30] ? __pfx_setup_net+0x10/0x10 [ 515.042421][ T30] ? preinit_net+0x492/0x7b0 [ 515.047024][ T30] copy_net_ns+0x50e/0x730 [ 515.051462][ T30] create_new_namespaces+0x3e7/0x6a0 [ 515.056759][ T30] ? security_capable+0x7e/0x2c0 [ 515.061835][ T30] unshare_nsproxy_namespaces+0x149/0x190 [ 515.067567][ T30] ksys_unshare+0x57d/0x9f0 [ 515.072089][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 515.077130][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.083206][ T30] __x64_sys_unshare+0x38/0x50 [ 515.137310][ T30] do_syscall_64+0x174/0x580 [ 515.141938][ T30] ? trace_irq_disable+0x3b/0x140 [ 515.146981][ T30] ? clear_bhb_loop+0x40/0x90 [ 515.151672][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.157580][ T30] RIP: 0033:0x7f737b79e127 [ 515.162001][ T30] RSP: 002b:00007ffce9da6f48 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 515.170423][ T30] RAX: ffffffffffffffda RBX: 00007f737ba15f40 RCX: 00007f737b79e127 [ 515.178400][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 515.186373][ T30] RBP: 00007f737ba167b8 R08: 0000000000000000 R09: 0000000000000000 [ 515.194346][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 515.202328][ T30] R13: 0000000000000003 R14: 00007ffce9da7188 R15: 0000000000000000 [ 515.210325][ T30] [ 515.213356][ T30] INFO: task syz-executor:11637 blocked for more than 145 seconds. [ 515.287736][ T30] Not tainted syzkaller #0 [ 515.292718][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.301390][ T30] task:syz-executor state:D stack:26760 pid:11637 tgid:11637 ppid:1 task_flags:0x400140 flags:0x00080002 [ 515.313327][ T30] Call Trace: [ 515.354882][ T30] [ 515.357883][ T30] __schedule+0x1821/0x5740 [ 515.362409][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 515.367374][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 515.372770][ T30] ? stack_depot_save_flags+0x33/0x810 [ 515.378357][ T30] ? __pfx___schedule+0x10/0x10 [ 515.383228][ T30] ? schedule+0x90/0x360 [ 515.387480][ T30] schedule+0x164/0x360 [ 515.391648][ T30] schedule_preempt_disabled+0x13/0x30 [ 515.397110][ T30] __mutex_lock+0x7f7/0x1550 [ 515.401710][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 515.407442][ T30] ? __mutex_lock+0x608/0x1550 [ 515.412215][ T30] ? rtnl_newlink+0x883/0x1bb0 [ 515.417079][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 515.422128][ T30] ? ns_capable+0x89/0xe0 [ 515.426471][ T30] ? rtnl_link_get_net_capable+0xd3/0x310 [ 515.432330][ T30] rtnl_newlink+0x883/0x1bb0 [ 515.436958][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 515.442016][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 515.446974][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 515.525691][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 515.530686][ T30] ? unwind_next_frame+0xa6/0x2550 [ 515.535862][ T30] ? unwind_next_frame+0xa6/0x2550 [ 515.541008][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 515.546232][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 515.551452][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 515.556415][ T30] ? kernel_text_address+0xa5/0xe0 [ 515.561556][ T30] ? __kernel_text_address+0xd/0x30 [ 515.582005][ T30] ? unwind_get_return_address+0x4d/0x90 [ 515.587689][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 515.593866][ T30] ? arch_stack_walk+0xfb/0x150 [ 515.598746][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 515.603882][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 515.608917][ T30] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 515.613884][ T30] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 515.619966][ T30] ? netlink_sendmsg+0x5d4/0xb40 [ 515.625057][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 515.630177][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 515.635642][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 515.640607][ T30] netlink_rcv_skb+0x232/0x4b0 [ 515.645389][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 515.650859][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 515.656172][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 515.661386][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 515.666603][ T30] netlink_unicast+0x75c/0x8e0 [ 515.671389][ T30] netlink_sendmsg+0x813/0xb40 [ 515.676177][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.746488][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 515.751612][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 515.756951][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.762257][ T30] __sys_sendto+0x672/0x710 [ 515.766776][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 515.771834][ T30] ? fput_close_sync+0x11f/0x240 [ 515.776788][ T30] ? __pfx_fput_close_sync+0x10/0x10 [ 515.782091][ T30] __x64_sys_sendto+0xde/0x100 [ 515.786864][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.792941][ T30] do_syscall_64+0x174/0x580 [ 515.842151][ T30] ? trace_irq_disable+0x3b/0x140 [ 515.847236][ T30] ? clear_bhb_loop+0x40/0x90 [ 515.851930][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.857835][ T30] RIP: 0033:0x7f4f77f5d68e [ 515.862259][ T30] RSP: 002b:00007ffd6c38a4f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 515.870686][ T30] RAX: ffffffffffffffda RBX: 00005555742c7500 RCX: 00007f4f77f5d68e [ 515.878670][ T30] RDX: 000000000000002c RSI: 00007f4f78d44670 RDI: 0000000000000003 [ 515.886661][ T30] RBP: 0000000000000001 R08: 00007ffd6c38a574 R09: 000000000000000c [ 515.894640][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 515.902618][ T30] R13: 0000000000000000 R14: 00007f4f78d44670 R15: 0000000000000000 [ 515.930021][ T30] [ 515.933112][ T30] [ 515.933112][ T30] Showing all locks held in the system: [ 515.940828][ T30] 1 lock held by kworker/R-mm_pe/14: [ 515.946112][ T30] #0: ffffffff8e7faf80 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 515.956666][ T30] 5 locks held by kworker/1:0/24: [ 515.961690][ T30] 1 lock held by khungtaskd/30: [ 515.966541][ T30] #0: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 515.976436][ T30] 5 locks held by kworker/u9:0/50: [ 515.981548][ T30] #0: ffff88805431d140 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 515.992361][ T30] #1: ffffc90000ba7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 516.004918][ T30] #2: ffff88804d6d4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 516.014940][ T30] #3: ffff88804d6d40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 516.076308][ T30] #4: ffffffff8ff50800 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 516.086215][ T30] 4 locks held by kworker/1:2/808: [ 516.091357][ T30] 5 locks held by kworker/u9:1/4945: [ 516.096642][ T30] #0: ffff888035cd3940 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 516.107457][ T30] #1: ffffc90010167c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 516.120011][ T30] #2: ffff888052534ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 516.129884][ T30] #3: ffff8880525340b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 516.160145][ T30] #4: ffffffff8ff50800 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 516.169950][ T30] 2 locks held by getty/5386: [ 516.174630][ T30] #0: ffff8880322f60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 516.184512][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 516.194628][ T30] 4 locks held by kworker/u9:2/5627: [ 516.199911][ T30] #0: ffff888031512940 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 516.210993][ T30] #1: ffffc9000425fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 516.223020][ T30] #2: ffff88805563c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950 [ 516.232966][ T30] #3: ffffffff8ff50800 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950 [ 516.243427][ T30] 4 locks held by kworker/u9:3/5645: [ 516.248709][ T30] #0: ffff88805647b940 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 516.297237][ T30] #1: ffffc900042efc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 516.309320][ T30] #2: ffff8880526c40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950 [ 516.319276][ T30] #3: ffffffff8ff50800 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950 [ 516.329753][ T30] 5 locks held by kworker/u9:4/5648: [ 516.335040][ T30] #0: ffff888032e07940 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 516.345851][ T30] #1: ffffc9000431fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 516.358403][ T30] #2: ffff88804f37cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 516.368268][ T30] #3: ffff88804f37c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 516.445389][ T30] #4: ffffffff8ff50800 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 516.455214][ T30] 1 lock held by kworker/R-wg-cr/5707: [ 516.460684][ T30] #0: ffffffff8e7faf80 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 516.471246][ T30] 1 lock held by kworker/R-wg-cr/5710: [ 516.476710][ T30] #0: ffffffff8e7faf80 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 516.487264][ T30] 1 lock held by kworker/R-wg-cr/5714: [ 516.542308][ T30] #0: ffffffff8e7faf80 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 516.552903][ T30] 1 lock held by kworker/R-wg-cr/5717: [ 516.558372][ T30] 2 locks held by kworker/1:5/5725: [ 516.563570][ T30] 3 locks held by kworker/1:6/5732: [ 516.568767][ T30] 2 locks held by kworker/1:13/6732: [ 516.574047][ T30] 5 locks held by kworker/1:14/6733: [ 516.579342][ T30] 3 locks held by kworker/0:13/6741: [ 516.584634][ T30] #0: ffff888078b86940 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 516.596158][ T30] #1: ffffc9001b5dfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 516.672234][ T30] #2: ffff888029543ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbd0 [ 516.683560][ T30] 4 locks held by kworker/0:14/6742: [ 516.688860][ T30] #0: ffff888059203940 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 516.700378][ T30] #1: ffffc9001b5efc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 516.737336][ T30] #2: ffff888035741400 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a1/0x9a0 [ 516.788907][ T30] #3: ffff888029544888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x58b/0x9a0 [ 516.800636][ T30] 4 locks held by kworker/1:15/6746: [ 516.805928][ T30] 3 locks held by kworker/u8:14/7004: [ 516.811309][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 516.823000][ T30] #1: ffffc90006ca7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 516.833988][ T30] #2: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 516.842988][ T30] 6 locks held by kworker/u8:19/7009: [ 516.848362][ T30] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 516.859266][ T30] #1: ffffc90006cd7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 516.904663][ T30] #2: ffffffff8fdbb0a8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 516.914032][ T30] #3: ffff888077d3c128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 516.924148][ T30] #4: ffff888077d3b258 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 516.934789][ T30] #5: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 516.944290][ T30] 3 locks held by kworker/u8:21/7011: [ 516.949661][ T30] #0: ffff8880319a5940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 516.961247][ T30] #1: ffffc9000620fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 516.974920][ T30] #2: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 517.033422][ T30] 1 lock held by kworker/1:16/8785: [ 517.038656][ T30] #0: ffffffff8e7faf80 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 517.049211][ T30] 3 locks held by kworker/1:17/8786: [ 517.054497][ T30] #0: ffff88813fe41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 517.066872][ T30] #1: ffffc9000dc37c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 517.077950][ T30] #2: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xab/0x10d0 [ 517.087771][ T30] 6 locks held by kworker/u9:5/8789: [ 517.093060][ T30] #0: ffff88802b5f9140 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 517.169610][ T30] #1: ffffc9000fe5fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 517.182214][ T30] #2: ffff888054190ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 517.192088][ T30] #3: ffff8880541900b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 517.201879][ T30] #4: ffffffff8ff50800 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 517.211669][ T30] #5: ffff888054ec42f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 517.264136][ T30] 1 lock held by syz.4.1454/11568: [ 517.269290][ T30] #0: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 517.278290][ T30] 2 locks held by syz.2.1461/11586: [ 517.283500][ T30] #0: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 517.292491][ T30] #1: ffffffff8e963028 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 517.303417][ T30] 1 lock held by syz.1.1462/11610: [ 517.308534][ T30] #0: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 517.317529][ T30] 6 locks held by syz-executor/11628: [ 517.322904][ T30] #0: ffffffff8fdbb0a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 517.332334][ T30] #1: ffffffff8fb1be68 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 517.377157][ T30] #2: ffffffff8fb1c028 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 517.387061][ T30] #3: ffff88807a8d8fe0 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 517.397889][ T30] #4: ffff88807a8d92d0 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3d0 [ 517.407498][ T30] #5: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0 [ 517.416848][ T30] 1 lock held by syz-executor/11637: [ 517.422145][ T30] #0: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 517.431224][ T30] 1 lock held by syz-executor/11642: [ 517.436511][ T30] #0: ffffffff8e963028 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 517.447410][ T30] 1 lock held by syz-executor/11681: [ 517.452697][ T30] #0: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 517.535358][ T30] 1 lock held by syz-executor/11690: [ 517.540684][ T30] #0: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 517.550213][ T30] 1 lock held by syz-executor/11693: [ 517.555504][ T30] #0: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 517.564934][ T30] 1 lock held by syz-executor/11700: [ 517.570217][ T30] #0: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 517.595265][ T30] 1 lock held by syz-executor/11703: [ 517.600590][ T30] #0: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 517.610018][ T30] 1 lock held by syz-executor/11713: [ 517.615306][ T30] #0: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 517.624734][ T30] 1 lock held by syz-executor/11721: [ 517.630020][ T30] #0: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 517.639446][ T30] 1 lock held by syz-executor/11725: [ 517.644814][ T30] #0: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 517.654256][ T30] 1 lock held by syz-executor/11731: [ 517.659539][ T30] #0: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 517.668963][ T30] 1 lock held by syz-executor/11734: [ 517.674252][ T30] #0: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 517.683676][ T30] 1 lock held by dhcpcd/11740: [ 517.688436][ T30] #0: ffff888069f02260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 517.718263][ T30] 1 lock held by dhcpcd/11741: [ 517.723064][ T30] #0: ffff8880790d0260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 517.732759][ T30] 1 lock held by dhcpcd/11742: [ 517.737527][ T30] #0: ffff88807925c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 517.747215][ T30] 1 lock held by dhcpcd/11743: [ 517.752028][ T30] #0: ffff888031ce4260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 517.761718][ T30] 1 lock held by syz-executor/11745: [ 517.767029][ T30] #0: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 517.776466][ T30] 1 lock held by syz-executor/11752: [ 517.781755][ T30] #0: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 517.791190][ T30] 1 lock held by syz-executor/11757: [ 517.796476][ T30] #0: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 517.805900][ T30] 1 lock held by syz-executor/11763: [ 517.811186][ T30] #0: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 517.877358][ T30] 1 lock held by syz-executor/11765: [ 517.882694][ T30] #0: ffffffff8fdc9e40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 517.892134][ T30] 5 locks held by kworker/u9:6/11767: [ 517.897507][ T30] #0: ffff888076470940 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 517.908322][ T30] #1: ffffc900031efc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 517.920869][ T30] #2: ffff8880460ccea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 517.930751][ T30] #3: ffff8880460cc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 517.958071][ T30] #4: ffffffff8ff50800 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 517.967892][ T30] [ 517.970219][ T30] ============================================= [ 517.970219][ T30] [ 517.978722][ T30] NMI backtrace for cpu 0 [ 517.978743][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 517.978778][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 517.978787][ T30] Call Trace: [ 517.978794][ T30] [ 517.978802][ T30] dump_stack_lvl+0xe8/0x150 [ 517.978854][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 517.978959][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 517.978979][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 517.979003][ T30] sys_info+0x135/0x170 [ 517.979022][ T30] watchdog+0xfd3/0x1030 [ 517.979062][ T30] ? watchdog+0x1c9/0x1030 [ 517.979088][ T30] kthread+0x389/0x470 [ 517.979107][ T30] ? __pfx_watchdog+0x10/0x10 [ 517.979125][ T30] ? __pfx_kthread+0x10/0x10 [ 517.979145][ T30] ret_from_fork+0x514/0xb70 [ 517.979165][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 517.979181][ T30] ? __switch_to+0xc79/0x1410 [ 517.979205][ T30] ? __pfx_kthread+0x10/0x10 [ 517.979222][ T30] ret_from_fork_asm+0x1a/0x30 [ 517.979255][ T30] [ 517.979261][ T30] Sending NMI from CPU 0 to CPUs 1: [ 518.103008][ C1] NMI backtrace for cpu 1 [ 518.103027][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 518.103045][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 518.103057][ C1] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 518.103154][ C1] RIP: 0010:lock_release+0x93/0x3c0 [ 518.103175][ C1] Code: 0f 85 0d 02 00 00 65 4c 8b 3d 81 e9 97 11 41 83 bf 8c 0b 00 00 00 0f 85 f7 01 00 00 49 81 3e 80 93 fd 93 0f 84 ea 01 00 00 9c <5b> fa 48 c7 c7 0e a9 fc 8d e8 3f 9c 08 0a 65 ff 05 f8 2e 98 11 c7 [ 518.103189][ C1] RSP: 0018:ffffc90000a08a70 EFLAGS: 00000202 [ 518.103201][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000080000102 [ 518.103212][ C1] RDX: 0000000000000100 RSI: ffffffff8c28a640 RDI: ffffffff8c28a600 [ 518.103223][ C1] RBP: ffffc90000a08c00 R08: ffff88801defdd00 R09: 0000000000000004 [ 518.103233][ C1] R10: 0000000000000003 R11: 0000000000000100 R12: 1ffff92000141164 [ 518.103243][ C1] R13: ffffffff8a0c986e R14: ffffffff8e95cd20 R15: ffff88801defdd00 [ 518.103262][ C1] FS: 0000000000000000(0000) GS:ffff888125384000(0000) knlGS:0000000000000000 [ 518.103274][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 518.103285][ C1] CR2: 000000110c3c8cf4 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 518.103300][ C1] Call Trace: [ 518.103305][ C1] [ 518.103313][ C1] ? nf_hook_slow+0x182/0x220 [ 518.103395][ C1] NF_HOOK+0x304/0x3c0 [ 518.103459][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 518.103478][ C1] ? NF_HOOK+0x9e/0x3c0 [ 518.103495][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 518.103514][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 518.103535][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 518.103560][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 518.103577][ C1] ? process_backlog+0x3eb/0x1950 [ 518.103616][ C1] process_backlog+0xaa3/0x1950 [ 518.103639][ C1] __napi_poll+0xae/0x340 [ 518.103660][ C1] ? skb_defer_free_flush+0x233/0x260 [ 518.103683][ C1] net_rx_action+0x627/0xf70 [ 518.103704][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 518.103725][ C1] ? sched_balance_domains+0x7ea/0x900 [ 518.103747][ C1] handle_softirqs+0x22a/0x840 [ 518.103764][ C1] ? do_softirq+0x76/0xd0 [ 518.103781][ C1] ? kernel_fpu_end+0x62/0x80 [ 518.103801][ C1] do_softirq+0x76/0xd0 [ 518.103815][ C1] [ 518.103820][ C1] [ 518.103826][ C1] __local_bh_enable_ip+0xf8/0x130 [ 518.103841][ C1] blake2s_compress+0xf9/0x1eb0 [ 518.103892][ C1] ? __local_bh_enable_ip+0xe1/0x130 [ 518.103907][ C1] ? blake2s_compress+0x1e17/0x1eb0 [ 518.103928][ C1] ? unwind_next_frame+0xa6/0x2550 [ 518.103948][ C1] ? unwind_next_frame+0xa6/0x2550 [ 518.103968][ C1] ? unwind_next_frame+0xa6/0x2550 [ 518.103988][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 518.104007][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 518.104028][ C1] ? unwind_next_frame+0xa6/0x2550 [ 518.104045][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 518.104063][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 518.104081][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 518.104106][ C1] ? blake2s_update+0x134/0x450 [ 518.104127][ C1] blake2s_update+0x14b/0x450 [ 518.104148][ C1] hmac+0x2d3/0x3b0 [ 518.104162][ C1] ? __pfx_hmac+0x10/0x10 [ 518.104180][ C1] ? wg_packet_handshake_receive_worker+0x6a9/0x10c0 [ 518.104199][ C1] ? process_scheduled_works+0xb5d/0x1860 [ 518.104213][ C1] ? worker_thread+0xa53/0xfc0 [ 518.104228][ C1] ? kthread+0x389/0x470 [ 518.104250][ C1] ? ret_from_fork+0x514/0xb70 [ 518.104273][ C1] ? kdf+0x136/0x2b0 [ 518.104287][ C1] kdf+0x1a3/0x2b0 [ 518.104303][ C1] ? __pfx_kdf+0x10/0x10 [ 518.104321][ C1] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 518.104346][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 518.104363][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 518.104386][ C1] ? seqcount_lockdep_reader_access+0xea/0x100 [ 518.104411][ C1] wg_noise_handshake_begin_session+0x2c2/0xbd0 [ 518.104444][ C1] wg_packet_send_handshake_response+0x13c/0x310 [ 518.104464][ C1] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 518.104482][ C1] ? wg_socket_set_peer_endpoint_from_skb+0xd7/0x130 [ 518.104509][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 518.104525][ C1] wg_packet_handshake_receive_worker+0x6a9/0x10c0 [ 518.104545][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 518.104559][ C1] ? look_up_lock_class+0x57/0x110 [ 518.104583][ C1] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 518.104602][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 518.104628][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 518.104651][ C1] ? process_scheduled_works+0xa70/0x1860 [ 518.104667][ C1] ? process_scheduled_works+0xa70/0x1860 [ 518.104686][ C1] ? process_scheduled_works+0xa70/0x1860 [ 518.104700][ C1] ? process_scheduled_works+0xa70/0x1860 [ 518.104716][ C1] process_scheduled_works+0xb5d/0x1860 [ 518.104745][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 518.104763][ C1] ? assign_work+0x3d5/0x5e0 [ 518.104780][ C1] worker_thread+0xa53/0xfc0 [ 518.104807][ C1] kthread+0x389/0x470 [ 518.104827][ C1] ? __pfx_worker_thread+0x10/0x10 [ 518.104841][ C1] ? __pfx_kthread+0x10/0x10 [ 518.104861][ C1] ret_from_fork+0x514/0xb70 [ 518.104877][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 518.104892][ C1] ? __switch_to+0xc79/0x1410 [ 518.104915][ C1] ? __pfx_kthread+0x10/0x10 [ 518.104935][ C1] ret_from_fork_asm+0x1a/0x30 [ 518.104959][ C1] [ 518.901295][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 518.908195][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 518.917312][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 518.927374][ T30] Call Trace: [ 518.930662][ T30] [ 518.933601][ T30] vpanic+0x56c/0xa60 [ 518.937604][ T30] ? __pfx___schedule+0x10/0x10 [ 518.942469][ T30] ? __pfx_vpanic+0x10/0x10 [ 518.946978][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 518.953154][ T30] panic+0xc5/0xd0 [ 518.956887][ T30] ? __pfx_panic+0x10/0x10 [ 518.961311][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 518.966702][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 518.972869][ T30] watchdog+0x102c/0x1030 [ 518.977215][ T30] ? watchdog+0x1c9/0x1030 [ 518.981640][ T30] kthread+0x389/0x470 [ 518.985716][ T30] ? __pfx_watchdog+0x10/0x10 [ 518.990404][ T30] ? __pfx_kthread+0x10/0x10 [ 518.995006][ T30] ret_from_fork+0x514/0xb70 [ 518.999610][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 519.004728][ T30] ? __switch_to+0xc79/0x1410 [ 519.009416][ T30] ? __pfx_kthread+0x10/0x10 [ 519.014023][ T30] ret_from_fork_asm+0x1a/0x30 [ 519.018811][ T30] [ 519.022105][ T30] Kernel Offset: disabled [ 519.026426][ T30] Rebooting in 86400 seconds..