last executing test programs: 4m37.527271745s ago: executing program 0 (id=9419): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x1234, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000001040)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000001080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x18) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001280)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000012c0)={0x1d, r4}, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001500)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000001540), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) write$nci(r5, &(0x7f0000001640)=ANY=[@ANYBLOB="71055901020400060003"], 0x5c) sendmmsg$sock(r3, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000013c0)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001480)="01000000030000006400000000000000000000000000000000000000000000000000000000000000000000000000000002000000010000000200", 0x3a}], 0x1}}], 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffff9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0xf}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x20028001) socket$inet6(0xa, 0x3, 0xff) r9 = socket(0x29, 0x5, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r10, 0x0, 0x17, &(0x7f0000001200), &(0x7f0000001240)=0x3) setsockopt$RDS_GET_MR(r9, 0x114, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000fc0)={&(0x7f00000000c0), 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0x90, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x56, 0x6, "9e5a3e2854c64a5b30672905f95e1565c99878b859c3d929a4a45af1deaaedaa7de6bb6c9ead02e5f7b10e64296e0f8a0d1eba2143ff5a20c0a474a722b17257fc59158ba91804e2e46074dad2753318d2e0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x74, 0xb, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8}]}}}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1f0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8085) r11 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000001680)={'vcan0\x00', 0x0}) bind(r11, &(0x7f00000016c0)=@can={0x1d, r12, 0x1, 0x2}, 0x10) r13 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg$unix(r11, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) sendmsg$can_raw(r13, &(0x7f00000017c0)={&(0x7f0000001800)={0x1d, r12}, 0x10, &(0x7f0000001840)={&(0x7f0000001880)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x0) 4m33.49722006s ago: executing program 0 (id=9439): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0x270, 0x138, 0x1d8, 0x138, 0x1d8, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x3, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x26e1, 0x0) (async) r3 = socket$kcm(0x2, 0x2, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000940)=[{&(0x7f0000000980)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000009c0), 0x577801, 0x100408) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f0000000200), 0x161) (async) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000280)=r2, 0x4) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000b40e05b30b4a67b0f23c5cff269c59fb00000a000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, 0x25, r2}, 0x94) (async) pselect6(0x40, &(0x7f0000000180), 0x0, 0xfffffffffffffffc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000a00)={'team_slave_0\x00', {0x2, 0x4e24, @broadcast}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r6, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r8, 0x4) 4m33.201711214s ago: executing program 0 (id=9443): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x90ff, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34190}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 4m32.999273861s ago: executing program 0 (id=9446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000480)={@broadcast, @link_local, @void, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "509ae5a9d735f585"}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[], 0xa8}}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r8) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="03002dbd70000000000003e7ff00100001800b0001006574683a6c6f000047528c00ba9fe640fa949c078a254921e4f426c99f87223dcda7939dac5c19ac33091021bf71ab8a1610bc3e7ee7bad0d18b11db0edd"], 0x24}}, 0x4044844) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) 4m32.345028744s ago: executing program 0 (id=9457): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newtaction={0x60, 0x30, 0x871a15abc695f839, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3003, 0x3, 0x4009, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f0000000d80)={0xffffffffffffffff, &(0x7f0000000dc0), &(0x7f0000000e00)=""/73, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000001b0000e9ff000000000000c3018f00000389da4921af2b00bfd82f48eaa70000009500000000000000"], &(0x7f0000000dc0)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000000440)='GPL\x00', 0x3, 0xfd90, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6b}, 0x48) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000380), 0x4000000000001f2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000001c00)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000310000a480000a6060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800e000100627974656f7264657200000014000280140000001100010000000000000000000000000ac52bf03c767288cd76e2e685eed21fc2035c4dfe19bd8c5ce11981f3509e04fb2e36abab702cdd9f749836d862ba8e58886cbc1aaafdc9d378683d1fd208a0ed5bfe00000000"], 0x70}, 0x1, 0x0, 0x0, 0x4880}, 0x2404c810) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000001085200000db48030095"], &(0x7f0000000000)='syzkaller\x00', 0x26, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x16, 0x4, &(0x7f0000001140)=ANY=[@ANYBLOB="b40000000000000079b03f0000000000620040000000000095"], &(0x7f0000001180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) sendmsg(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001240)="a11a18b46223cc5d499038b37dba247bfda343d773fe5cb17e5256f5c45e37acf1da8345a1b634fd0b97c56f59c5e86fa875674a28626917baf278b0967a4a87cadd44f63c382f0ede64cd8fb09ce6e5f0b626ec5bf5fb21ef27014c95bdb692f5ee8206f55cb7352c98719fd12a7b8d33c83df88113baa3e1633117fa647b2090d35e6eda0ea745bd442bd90e60b9e769", 0x91}, {&(0x7f0000001580)="1618edda22afd50e1a81c8f2bbadce8ea4f4a0d92666631e3e763789f7291f8d06c0537a65a18267f13d5b930e25821a6772052c049fe2a06f31a10cb25a7eab3c073ade5c2db1a2c8d0bd7cc61effa6052c288ccdb7f6a5f099b1c5487f800d2b2e5d1b97018def8520b8fb6c3185bf41e782eccbc39be03c4956909e60512b1fee918891dd4e2c62291a0611d68c02cfdd6cbfec45e3c6014bcaae9edb64e67ad7b16d7519acfe7757a79185a6d4729cbc060baf40828ad5b7581851fc430c11a9234ca3a72bb91c8151211e1c0cd740402a6b528170c2bb05beba729d", 0xde}, {&(0x7f0000001680)="d1e0d600235efb494183820d5e336823a96dbb633cc66fbd805e0993268143e92794b885797e0d3fa28d82ea576d71bf22ed4ef62fb58b16fdf09bdbbcf88fc6dda47db604fb7a37ae9b770e7ae86ebdda8bd92fdc41800ad1c4c7964d2b07ad2246bec8cbbbd83ecc4a729c0d7a1cb7b3a23cd9c96ed0c87aa04dd32ddbdcde563f014e9989a17042e7f0075c2e8254b507297a559ead1d6344a0213f4f3ea3e9b686d1e8b90827db8c18734cb05b6445593c31c2c882955dc8058c9f2501a56b6f1f714b31ae18078f92f267b9634205c440000490867bec70c72193d3f1a2772da002a8e3", 0xe6}, {&(0x7f0000001780)="49f93369b0a5", 0x6}, {&(0x7f00000017c0)="6ddddb5ba87441", 0x7}, {&(0x7f0000001800)="61f37fd69cf1a9bda8763421f3b2b094f6e3bb001aceeb6dc692b7c131b12cf774a95bca8cc128addbec5dea070829e6d81dbd7c1936721c52082faa25877e381043c966bb44dc75f87c4a48cc8fe6895dc2eeec7d12d01628a3cda4b33cce3f4c726981777e6d3c61f43ce586f1549bf4bc051655670402f3a4c939f8b3b4e6f7ec9035a58ec4ecaed78851906d5cfba1bc80d17f306568b1b7c818a7cbde1a27ea3542a72f6ccbfdbd8feb78f752c6a35ab7b1a815bb26b488293ac9e73f72f2f7ed62", 0xc4}], 0x6, &(0x7f0000001980)=[{0xa0, 0x119, 0x6, "452b2dcdf83dd767f12248cacdd7117275e592a0215b428df315a634e7dcf9a65214d92563f9639e8820321397e75a8594d094c166994a2c08bdd28e470d265164c35d425bddeea16e787feca1508cf9dc5e92b28843041ac40a0f68c336d2cbe74617d19871693065c1144320592629e52f679f65d91a480c25b1fc47a59a45e883099127965de6ba3850"}, {0x20, 0x1, 0x39, "2835492c72b59613ee32e1a903d1"}, {0x20, 0x1, 0x6a, "ed7d8101e46cc77a9e0b5469ac"}, {0x58, 0x1, 0x1, "2c4818f431835d75fce669632bef76b31ed9590296a70fce805f480c7ec861af3f8d9ff1ab08d9f867dd86e18cc6f6843c844cec0faea105dafc7fd7b22d0bf4a0ad"}, {0xe8, 0x5, 0x3, "3440f4c99a99ca9bb0e03b1179ebd5091c49e5f6fe8fac35e11da7b0fcbe2b0b330be0f815eefd975c12ae9d1b9a94d3ad4b52092fcd61cd281f50877f0f7e94b8465c1e6356f3884794a040f67f30e4c9a5bd89bd45719b194c1922c85e3d53c2d6cf150c6f0c43b576f18066ad4b0b078ec5be1ffb3ae53fd41adc2c02b71cf8675ea8c38eb8c1da862ce41ec0552cbed5cd7f23d517e0bc9660bbb8c46d765e98d9b3bf631c2a4086b1ab09f445b2af4f1ed067f7ff697c70ec82ba1528b5a5dae21e017045130f0d30d0a2b2825e26cc6c171f"}], 0x220}, 0x4010) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001380)=r5, 0x4) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r3, 0x40786e88, &(0x7f0000000c40)={{&(0x7f0000000840)=[{0x2, 0x1, 0x800, {0x7ff}, 0x10001, 0x0, 0x4}, {0xc, 0x30cf, 0x7, {0x1, 0xa6e}, 0x1f, 0xffffffffffffffff, 0x3}, {0x80000001, 0xfffffffffffff000, 0xb, {0xd3a, 0x3}, 0xa290, 0x40, 0x9}, {0x5, 0x8b7, 0x3, {0xffffffff, 0x9}, 0x2, 0x5, 0x4}, {0xe8, 0x2b9d, 0x8000000000000001, {0xf}, 0x2d3, 0xb, 0x6}, {0x1, 0xae08, 0x5772e6ec, {0xe57, 0x5}, 0xffffffffffffff73, 0x3, 0x5}, {0x183c, 0x4, 0x2, {0x9, 0xfffffffffffffff7}, 0x39, 0x7, 0xf9f}], 0x7, 0x40, 0x80, 0xa}, {&(0x7f0000000a00)=[{0x9}], 0x1, 0x10, 0x2f6, 0x100}, {&(0x7f0000000a40)=[0x6, 0x2, 0x1, 0xfd2b, 0x6, 0x2, 0x2, 0x9], 0x8, 0x8, 0xae2, 0xf}, {&(0x7f0000000a80)=[{0xc, 0x8000000000000000, 0x0, 0x5, 0x6}, {0x3410, 0x6, 0x7fffffffffffffff, 0x1000}, {0x0, 0x5f, 0xb64, 0x3, 0x5}, {0x9, 0x2, 0x7, 0x519, 0x9}, {0x0, 0x0, 0xb7, 0x7, 0x9}, {0x100000000000, 0x0, 0x3, 0xfffffffffffffffd, 0x200}, {0x3, 0x7fffffffffffffff, 0xe473, 0x401, 0xed}], 0x7, 0x28, 0x2, 0x9}, {&(0x7f0000000bc0)=[0x6, 0x2700000000000000, 0x1, 0x8000, 0x7, 0x101, 0x5, 0xfa, 0xffffffffffffff7b, 0xfffffffffffffc00], 0xa, 0x8, 0x9, 0xbf8}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0x20001000) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000f00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000001300)=ANY=[@ANYBLOB="40000000170a05000000000000000000020000010900010073797a31000000000c000540000000000000000208000740000000010900010073797a31000000005d40fc69d12babc5beaa39237c397d44542fc9c6ab56"], 0x40}, 0x1, 0x0, 0x0, 0x854}, 0x40090) 4m31.447955344s ago: executing program 0 (id=9463): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000400)={0x1, 0x53, "f6f7ca715716e43d97d6bdcf91b67e971ee4982fe79a62e13015e89ed8946c68c408fcd6268db9ade0f88918448787ed120c2e0e30da4501321e3ab63c0d076d34867c1c415d6b08cbbd1b8a76b9de8980bae1"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@restrict, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}]}}, 0x0, 0x4a}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@ldst={0x6}]}, &(0x7f0000000140)='GPL\x00', 0xf, 0x3e0, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000300), 0x76}, 0x48) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) 4m16.411679599s ago: executing program 32 (id=9463): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000400)={0x1, 0x53, "f6f7ca715716e43d97d6bdcf91b67e971ee4982fe79a62e13015e89ed8946c68c408fcd6268db9ade0f88918448787ed120c2e0e30da4501321e3ab63c0d076d34867c1c415d6b08cbbd1b8a76b9de8980bae1"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@restrict, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}]}}, 0x0, 0x4a}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@ldst={0x6}]}, &(0x7f0000000140)='GPL\x00', 0xf, 0x3e0, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000300), 0x76}, 0x48) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) 2m32.121655272s ago: executing program 1 (id=10971): r0 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x7) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="9eb8a2c0e241", 0x6}], 0x1, 0x0, 0x18}, 0x8080) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b80), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000bc0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="400109"], 0x87) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000540)=0x1b, 0x4) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000480)=[{&(0x7f00000004c0)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) (async) r7 = socket$netlink(0x10, 0x3, 0x4) (async) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000005c0)={r9, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000600)={r9, 0x3, 0x6, @remote}, 0x10) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x228, 0x2d0, 0xffffffff, 0xd8, 0x170, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3], 0xff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) write(r7, &(0x7f0000000640)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) r12 = socket(0x10, 0x80002, 0x0) (async) r13 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r13, 0x4004f506, &(0x7f0000000440)=0x1) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newtaction={0x204, 0x30, 0x51b, 0x0, 0x0, {}, [{0x1f0, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x1}}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xd8, 0x0, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x204}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) 2m28.825592324s ago: executing program 1 (id=10981): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1d, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="b70000000fffffff95"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bcb7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m28.553316449s ago: executing program 1 (id=10986): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01000000ef010101000000000ffe000000000000080000002800028005000300010000001c0002800c000180080001000a0000010c000180080001"], 0x60}}, 0x0) 2m28.305974625s ago: executing program 1 (id=10990): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3481f}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m28.113601811s ago: executing program 1 (id=10994): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18008dc02b00000000000000000000108520000060ca020095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m27.905686925s ago: executing program 1 (id=10998): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="f0000000120003", @ANYBLOB="22e2cf8975608d18d91a17cb3776054e081dabffa7f6d27fde1ce1430ce08e97c0b5b8f7c62feaf4d6a382197b0c779680ea688b149c8f8f0743684688243db3cbf65e6217f0aec537"], 0xf0}}, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x6, 0x1b, 0x0, &(0x7f00000022c0)) r2 = socket$xdp(0x2c, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) (async) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000021c0)={&(0x7f0000002200)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="010000000400000008000000010900001d000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="010000000300000000"], 0x50) (async) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/17, 0x11}, {&(0x7f00000004c0)=""/226, 0xe2}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/44, 0x2c}, {&(0x7f0000001600)=""/76, 0x4c}, {&(0x7f0000001680)=""/197, 0xc5}, {&(0x7f0000001780)=""/156, 0x9c}, {&(0x7f0000001840)=""/225, 0xe1}], 0x8}, 0xa2a}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0x7}}, 0x14}}, 0x4000880) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x3, 0x2a, @local, @empty, 0x20, 0x8087, 0x8, 0x7f}}) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f00000019c0)=0x3, 0x2) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071101a000000000095000000ac4d2ded"], &(0x7f0000000480)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x0, r7}, 0x94) sendmsg$inet(r2, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002300)="b9da04fbdd34e3ba0f5f448f2f7bd418d3af3e1d3463539a954b02f153f5836b02ca31dde8f15c381b5db5c9ce613079c53fa42d2ef5a691ddfcc3660a31d9be198b80377602a4018a330432bd95b56f824f2a8ec2cc61adf7b8df96c9adcdf36d97b7d5c78ea605d458dc18184168058fe9704b98b797eb0cbb5f6cfed109a6056600065d54a50378f33132037bdd0fc1608904c6ce2fb84f36d5f09a186d30d81699f9eac4003ce9189329aab2d67e873fcfffd8d654fcc2fda6452c9b7d66f82d338afca174f6a8051d453ee5243d04ac", 0xd2}, {&(0x7f0000002400)="2bdba63afc7c0def6ddaf41076750b530e2a626c5bce2a6ca0a27c01071536bc7eb410d8cd1870847f1614d10980e80bb91b00374dfe1bdec7eb3838047cbe86d10e24781fea5252a66f9890903b0a32096ca67ed56dd31ffd09e6e94767d8f6f98ef49fe020abd27138197c82ac5fc0bafbda8fd0119a025838fc350f0de7a841cfff52f77419194a0a54c88a4a96d7b6b97bf8e832f0e6b6edccd7b5d59d6f92ddad54c3a0f70f32c4a0650754c9018c3a69baf40f4753f0e419124ad72bfbc90dc28f6bcfc3584e71b2b9645a12ef37", 0xd1}, {&(0x7f0000002500)="27cd268034001f301e9541bb2963d1cc08a12442b82befd8c80fa3a91dec264713d267186247476ca698c53f06b146d071d16b9d2c930979e7f1cc9e65a94bbf31f3276aaa15b929ca3603dca410790850842b2fc5ab1b0ee9737dee8de58cac54100239ee0caaa9cc8c1a6357b707510d9d32f826630639ae3978c445dc79c870cc984613b8a9339f0dae5d3cc3bd9818fa2315", 0x94}, {&(0x7f00000025c0)="27a8560f022da581ee80aef50364f66f10b43bd2a46928a61fd548a00e4b2af2d73a0aeb1c8cfbdf5f9687a495ee62de0406a87efa2a504ec7fbd986e56921ef960892be8fcccbf90a098c6f58", 0x4d}, {&(0x7f0000002640)="df0a3582bea71d17667d5a1a792daffda492814e2e9fca97f6949e8d580ebef302e4f21cde50e41eed73bd96d44d276eb7e7f45dd0622f3729a920ba66aabebbd84914a75b4109f9e1a680d03922084cae6dacf51ae5092a3902a4d4e77a3b556a02ebb79ace1df88195228d40d7dbedcfc2c420c7dde1f9929b7a2fdd0643325adde94b53438aa78a", 0x89}, {&(0x7f0000002700)="9db65405d7dc5789bcd74e5f0d6f53db181d6368b292640aa3a0eb1676457dbc062007c91fa8aa60bd889e3019674267c3b72ad6543cde138db63e7d4f", 0x3d}, {&(0x7f0000002740)="741a78c879919d468bbf6a60f41ef12768f98463f653f891bc2bb174fe49e8da4a0486f26f4010da8766d1cf2434cff983ef50", 0x33}, {&(0x7f0000002780)="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", 0xfd}, {&(0x7f0000002880)="ef6e174b2469e81f57e4a7583c78b38d0de3b65d9fafec8820b9c2d70068dc465d0f606661a182301926a99da4001f179d96b68bddfeb3170f42a53a41678d26ca75f423e793d8e1a6490d6eb1b007b74b1430bca71a8e873af86f98b32a2ef8b0d1be51ac1140480b6701701be0ad18d4c64789bf9e2d33961e0be2", 0x7c}, {&(0x7f0000002900)="ace0f32bd2e1f125dde590f0e9afaef200c3d4e17962d85723ee2666a6c4cd661012dcd372394a783b2df4d5a831ac2e5866bd7c9997572175b3c16b420190df3a5bf9d28d456d406af7adbf4209a9f358767364e7c79342facd707870a12d16a9140e102a1ace3d6c9ca7e176869cfeec8f67d8eca2d42bc06c6806b134b24f763a6f5dc2b01abf6287e84ff4cdce623cddacf6b67b3dd02b871b9cd12f91b492a09a9af4dbeeb6ddbc95d33a9f79f9798de9cecac655c0735881202d009b5417a85ac267ffdb489cf15a472c2db0a79e0052dcc5f30bc8a7", 0xd9}], 0xa, &(0x7f0000002ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x13}}, @ip_ttl={{0x14, 0x0, 0x2, 0x15}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x60}, 0x2000c000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000002b80), 0x4000, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002140)={&(0x7f0000001a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x2b0, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x800}]}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'geneve0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x1a4, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x2e, 0x6, "e92c85990ccfcfcd8619a0888cd6ec607b79a9bc496ef884e5fe9b11483e98f11a0ed12f2fff84d25a84"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x75, 0x6, "7a6576ddca68426198e9e31d97bd30aaed07527fc5f4aabc9b2a9ba6ab7110347b80ec5d2baaa40f53c80d92b8e5c08bc2582e0b82682189bac0cefe8bd4e768629b41ab2b9fe329f06ad3ccc801d9fbebd42f9a7af62c9189bb39bc13c850898f7c3cc9eefcbfb607cf9695f67aa28a15"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xc1, 0x6, "d2f5258f07d8301db182e700fb9d467bb31aaaf74d9932c864d24877e8f902bb83b3d57b66774e311f7f74102117a5bea8934122904ec05168cb38b1e3d413afb00fc9fa6915f90aad7906e163a3100fe9594b33179062399c23e6fe9c46d697bfe787f6e5489eb5e59470612d2fdd41c90a821d9c55617a08116188e3600e35fcb88915e0a51147847a9cac84b2b88d065acd71ef4204f322ee67ed8b5d10e61539f60aa5a830b6ffd8e4337ec1cb4c94aa0ac26dcd5665da8646395f"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @nat={{0x8}, @void}}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWTABLE={0x100, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xc7, 0x6, "3136633f2a362febe7c9ec458155d1267bc73d176b6d9c2b5a250bc8e9b0b4fd6b999d8f7908f9aaab19cc70eeb247f56791583f9c30d5e72e92d81543bfe633fe3cdafcd69bd757b20add9047e961ed29c3d476aed68ada2bda1e8fb7aabf824cd289b05294d657caa1b9d5663877ef664ba1ba8bf4da41be108a0dc276f3c477bd8bcb14d50853e44021d12ea914637e459da719109d9866c5c3f608a2d7e802bc6dbb938c0533fef314d79c4d072276f5826771cbcc5a516d4114e68c759f5807fa"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x50, 0x5, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_USERDATA={0x17, 0x8, "c1d335acca05ad6b92b5090fd2dac9cb4e57ee"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa8222404f7c4b40a}}}, 0x66c}}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000002c40)={r2, 0x200, 0x2, 0x800}) write$cgroup_type(r8, &(0x7f0000002c80), 0x9) 2m12.666338307s ago: executing program 33 (id=10998): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="f0000000120003", @ANYBLOB="22e2cf8975608d18d91a17cb3776054e081dabffa7f6d27fde1ce1430ce08e97c0b5b8f7c62feaf4d6a382197b0c779680ea688b149c8f8f0743684688243db3cbf65e6217f0aec537"], 0xf0}}, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x6, 0x1b, 0x0, &(0x7f00000022c0)) r2 = socket$xdp(0x2c, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) (async) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000021c0)={&(0x7f0000002200)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="010000000400000008000000010900001d000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="010000000300000000"], 0x50) (async) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/17, 0x11}, {&(0x7f00000004c0)=""/226, 0xe2}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/44, 0x2c}, {&(0x7f0000001600)=""/76, 0x4c}, {&(0x7f0000001680)=""/197, 0xc5}, {&(0x7f0000001780)=""/156, 0x9c}, {&(0x7f0000001840)=""/225, 0xe1}], 0x8}, 0xa2a}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0x7}}, 0x14}}, 0x4000880) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x3, 0x2a, @local, @empty, 0x20, 0x8087, 0x8, 0x7f}}) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f00000019c0)=0x3, 0x2) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071101a000000000095000000ac4d2ded"], &(0x7f0000000480)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x0, r7}, 0x94) sendmsg$inet(r2, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002300)="b9da04fbdd34e3ba0f5f448f2f7bd418d3af3e1d3463539a954b02f153f5836b02ca31dde8f15c381b5db5c9ce613079c53fa42d2ef5a691ddfcc3660a31d9be198b80377602a4018a330432bd95b56f824f2a8ec2cc61adf7b8df96c9adcdf36d97b7d5c78ea605d458dc18184168058fe9704b98b797eb0cbb5f6cfed109a6056600065d54a50378f33132037bdd0fc1608904c6ce2fb84f36d5f09a186d30d81699f9eac4003ce9189329aab2d67e873fcfffd8d654fcc2fda6452c9b7d66f82d338afca174f6a8051d453ee5243d04ac", 0xd2}, {&(0x7f0000002400)="2bdba63afc7c0def6ddaf41076750b530e2a626c5bce2a6ca0a27c01071536bc7eb410d8cd1870847f1614d10980e80bb91b00374dfe1bdec7eb3838047cbe86d10e24781fea5252a66f9890903b0a32096ca67ed56dd31ffd09e6e94767d8f6f98ef49fe020abd27138197c82ac5fc0bafbda8fd0119a025838fc350f0de7a841cfff52f77419194a0a54c88a4a96d7b6b97bf8e832f0e6b6edccd7b5d59d6f92ddad54c3a0f70f32c4a0650754c9018c3a69baf40f4753f0e419124ad72bfbc90dc28f6bcfc3584e71b2b9645a12ef37", 0xd1}, {&(0x7f0000002500)="27cd268034001f301e9541bb2963d1cc08a12442b82befd8c80fa3a91dec264713d267186247476ca698c53f06b146d071d16b9d2c930979e7f1cc9e65a94bbf31f3276aaa15b929ca3603dca410790850842b2fc5ab1b0ee9737dee8de58cac54100239ee0caaa9cc8c1a6357b707510d9d32f826630639ae3978c445dc79c870cc984613b8a9339f0dae5d3cc3bd9818fa2315", 0x94}, {&(0x7f00000025c0)="27a8560f022da581ee80aef50364f66f10b43bd2a46928a61fd548a00e4b2af2d73a0aeb1c8cfbdf5f9687a495ee62de0406a87efa2a504ec7fbd986e56921ef960892be8fcccbf90a098c6f58", 0x4d}, {&(0x7f0000002640)="df0a3582bea71d17667d5a1a792daffda492814e2e9fca97f6949e8d580ebef302e4f21cde50e41eed73bd96d44d276eb7e7f45dd0622f3729a920ba66aabebbd84914a75b4109f9e1a680d03922084cae6dacf51ae5092a3902a4d4e77a3b556a02ebb79ace1df88195228d40d7dbedcfc2c420c7dde1f9929b7a2fdd0643325adde94b53438aa78a", 0x89}, {&(0x7f0000002700)="9db65405d7dc5789bcd74e5f0d6f53db181d6368b292640aa3a0eb1676457dbc062007c91fa8aa60bd889e3019674267c3b72ad6543cde138db63e7d4f", 0x3d}, {&(0x7f0000002740)="741a78c879919d468bbf6a60f41ef12768f98463f653f891bc2bb174fe49e8da4a0486f26f4010da8766d1cf2434cff983ef50", 0x33}, {&(0x7f0000002780)="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", 0xfd}, {&(0x7f0000002880)="ef6e174b2469e81f57e4a7583c78b38d0de3b65d9fafec8820b9c2d70068dc465d0f606661a182301926a99da4001f179d96b68bddfeb3170f42a53a41678d26ca75f423e793d8e1a6490d6eb1b007b74b1430bca71a8e873af86f98b32a2ef8b0d1be51ac1140480b6701701be0ad18d4c64789bf9e2d33961e0be2", 0x7c}, {&(0x7f0000002900)="ace0f32bd2e1f125dde590f0e9afaef200c3d4e17962d85723ee2666a6c4cd661012dcd372394a783b2df4d5a831ac2e5866bd7c9997572175b3c16b420190df3a5bf9d28d456d406af7adbf4209a9f358767364e7c79342facd707870a12d16a9140e102a1ace3d6c9ca7e176869cfeec8f67d8eca2d42bc06c6806b134b24f763a6f5dc2b01abf6287e84ff4cdce623cddacf6b67b3dd02b871b9cd12f91b492a09a9af4dbeeb6ddbc95d33a9f79f9798de9cecac655c0735881202d009b5417a85ac267ffdb489cf15a472c2db0a79e0052dcc5f30bc8a7", 0xd9}], 0xa, &(0x7f0000002ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x13}}, @ip_ttl={{0x14, 0x0, 0x2, 0x15}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x60}, 0x2000c000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000002b80), 0x4000, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002140)={&(0x7f0000001a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x2b0, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x800}]}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'geneve0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x1a4, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x2e, 0x6, "e92c85990ccfcfcd8619a0888cd6ec607b79a9bc496ef884e5fe9b11483e98f11a0ed12f2fff84d25a84"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x75, 0x6, "7a6576ddca68426198e9e31d97bd30aaed07527fc5f4aabc9b2a9ba6ab7110347b80ec5d2baaa40f53c80d92b8e5c08bc2582e0b82682189bac0cefe8bd4e768629b41ab2b9fe329f06ad3ccc801d9fbebd42f9a7af62c9189bb39bc13c850898f7c3cc9eefcbfb607cf9695f67aa28a15"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xc1, 0x6, "d2f5258f07d8301db182e700fb9d467bb31aaaf74d9932c864d24877e8f902bb83b3d57b66774e311f7f74102117a5bea8934122904ec05168cb38b1e3d413afb00fc9fa6915f90aad7906e163a3100fe9594b33179062399c23e6fe9c46d697bfe787f6e5489eb5e59470612d2fdd41c90a821d9c55617a08116188e3600e35fcb88915e0a51147847a9cac84b2b88d065acd71ef4204f322ee67ed8b5d10e61539f60aa5a830b6ffd8e4337ec1cb4c94aa0ac26dcd5665da8646395f"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @nat={{0x8}, @void}}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWTABLE={0x100, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xc7, 0x6, "3136633f2a362febe7c9ec458155d1267bc73d176b6d9c2b5a250bc8e9b0b4fd6b999d8f7908f9aaab19cc70eeb247f56791583f9c30d5e72e92d81543bfe633fe3cdafcd69bd757b20add9047e961ed29c3d476aed68ada2bda1e8fb7aabf824cd289b05294d657caa1b9d5663877ef664ba1ba8bf4da41be108a0dc276f3c477bd8bcb14d50853e44021d12ea914637e459da719109d9866c5c3f608a2d7e802bc6dbb938c0533fef314d79c4d072276f5826771cbcc5a516d4114e68c759f5807fa"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x50, 0x5, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_USERDATA={0x17, 0x8, "c1d335acca05ad6b92b5090fd2dac9cb4e57ee"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa8222404f7c4b40a}}}, 0x66c}}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000002c40)={r2, 0x200, 0x2, 0x800}) write$cgroup_type(r8, &(0x7f0000002c80), 0x9) 4.656028885s ago: executing program 5 (id=12507): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000005400050001000000000000000700", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01000000ef0101010000000000ffffffff800000000000002800028005000300010000001c0002800c000180080001000a0000010c000180080001"], 0x60}}, 0x0) 4.400387752s ago: executing program 5 (id=12513): sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006180a0200000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f5090", 0x52, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x49) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0005440002802c000180140003007b0111ff01000000000000000000000000000114000400ff0200000000000000000000000000010c000280050001000000000006000340000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400200100000000000000000000000000010800074000000000046dc1ffb7d449fe86cc3fddd2b35694065f1d"], 0xa0}}, 0x0) 4.147913064s ago: executing program 5 (id=12518): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0x180}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 4.056332617s ago: executing program 5 (id=12519): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710800e835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/181, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xffffffffffffff8b}, 0x48) r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@sco, &(0x7f00000000c0)=0x80, 0x80000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000002080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002040)={&(0x7f0000000b40)={0x14e8, r1, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2b}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@mesh_chsw={0x76, 0x6, {0x6, 0x6, 0xa}}]}, @NL80211_ATTR_PROBE_RESP={0x3bb, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x2b8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x76, 0x3, "ff26bea58e82046fe534dbe58e469461db87d1e6fcad0b026b331eda2d64a2f0c5f5d021474b37c74aa543a960a7edad88e01bf98340c65f7a87565afbb6aff8946ca9e94c0ed73a96a449ebef73039bf60e5443532358583274695122b61f68710ed893b4a3fc052ff90ab70508cd726ee2"}, @NL80211_FTM_RESP_ATTR_LCI={0x6b, 0x2, "1f4ba5261479b46e2d6b14cbef22b2928f5e90f49aaccd7a3a29e515500b145b95226bb37313854d1ea8f087d39499529b41ad14f02bacddeef0b63dd7f54fdff494b866ea0ea3b556ad15a83e28cbb1b94c6010564283178dfc66af2bc5781718cf514965b15b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xfb, 0x3, "d3894b48209fbee24d2827ed9172da484620ec956fe2a372faef5c03a1577a5a21b050dd7d688ac911bbee435fb00dbc8fc7e08193e546bbed1c2a3c0544aa0c2021324c4d425a3b3c181cbe2cb8656f7dd479b963b22c0a632e22450b9e2a2fd2dbec1739a1c7d185ab256ceafb81d49706c2a3b0f2baee000ac8a27502d8551435fdfa9cdb3bfc7ffc007a93cdef8133aafa6d6f6dc735482e6a8ba8aa8f81d9f6084d6f62ec2b4219579d23c908d1854cd69048a2fd08808801c7f4c48fb73e337178b287e36b3567d5853deb6e18b388b0360cc3bd76f5f25c5ad51b82bd1a2c59c80fbf583e4dabff252ec976d0bcec68a72845e4"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3c, 0x3, "c62d9ec074f780905543dc212909eb89269b05924fb4f0555574c46dde26a553d92757cd3f207da2e3df4d1a9f9d42ecf761235f2d87ca4e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x8c, 0x3, "c7b8b8b695ec27e0d7c31d7b54452e901aa21514e3d71aa7c901489afa50a25a9111403983b61c8239fb970dabf512ac4eec3ef8475654891b0ba1c5e0101a2b689d2b82d9b69c0c0c33d594dc06b9b725c3f06dfc8247b7c34b20d7774f292157834d8b664b750e8de412fe058a3788ef9cba194c393a1a54ed426cb4f74589e8cd9e9de5512cd8"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x250, 0x80, [@random={0x97, 0xaa, "47a3742180fa1f1895f41d8d75597ca57b419637cf9a8633238b4760003d8f84bebe107c8a67a2d00e5b347792d74714a37aa0b146c1152881dc1670bb7ca42d363a8b313e2ca3e00b934bb9bdbd1a3a0c3f116571f4772ab88c1d75e651568f4c07b765e34514c6b583a397bc2c7f93088b60013174e7f19651b260359d421bf17228cf79d83b42d3f7300042955a7323e241708ef001f4e4ac7ea67885db521268cca5628acc55c8c1"}, @supported_rates={0x1, 0x8, [{0x36}, {0x12}, {0xc}, {0x30}, {0x36, 0x1}, {0xc}, {0x1, 0x1}, {}]}, @fast_bss_trans={0x37, 0x136, {0x16, 0x8, "8ce65bf57b563614b32ae76a5937bec2", "0fabffd16ec9d71f1ced6a8ce0cb3d4bf700022635fc1b8d3f1c0ae8204fcd60", "598c90445d531ab044ce16dbbc7959cc0ca45bb8d423bf749d0ced117e4540b9", [{0x4, 0x1c, "82893e16189336bcc95a3dbe39033782f6d9c9750c7f20051dc4a4cd"}, {0x2, 0x28, "6445c1a64cd4f9b2043c357273dc69202668b7f7057784692e90b697650f26e7e8349a7aaf80910b"}, {0x1, 0x20, "d2b335c7fa2c2dd8a0cd9a056e780685bdb5ff58f89fb365b1185e64a7aa8a66"}, {0x3, 0x20, "c3df6565be89fed6e94fb6b51bf5b931b14cb292eba62d324084b510dd2086d9"}, {0x1, 0xe, "7765a5581a990f28f2682950eb12"}, {0x3, 0x1c, "ce52575acbd748bef3f9769f3bf5f32b404cd9dc13012bc033a37cdc"}, {0x1, 0x9, "ce0e83d6cd4520b94d"}, {0x2, 0x1d, "6f0646ffb8a5fc43ea49bf013410716e0e018dce5cbb0ffe9892be0e78"}]}}, @random={0x8, 0x1e, "c957da0604903edf16994e0c705a7cb5e09993f890c308c0615892960edb"}, @measure_req={0x26, 0x3c, {0x6, 0x9, 0x5, "24025122cc4122f473acdf207509354b70f1a7ad6f9a4abed96b9aaa3f41f48e247132c29af79a8d4915018a6c87a5fb03cbbe9944eca65800"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1b8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x83, 0x3, "19230575bfd9e26c3f467740b7a900a137d729d28ee5fd0ffad8a30e8165a6e2dfeb81297c26d88638ac57236028ca5860e2ef3b7aa1d08c0f4257e68033944df2e133c7475e511e3de396d432d4b58abda5d8a0725f502e03275843a51a5a0d0640e96ff48fa40f5a80ddfadee012da107b3830f4e4a9dd4c3e3370a7c508"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xee, 0x3, "1b2eca0c2f8d5c788d6d99990707fe9ab9f30a93e04046e32d8d77902a0f78675e1dcf2473ec69bcb52993919d13edc49c686378367c520aace7732aca276f119ee9ad91560cb9dd8fe8bbad40673b5f78debecee99e597940b8424aba1db9efbb4fdb9d106834ae9c9faf25917b70ff3d5b3495e9fa3d70c4da6d77a728ba6b555d50066d18b2930e8684e42849ed5df4735c1bc0d883d39c7c3268551be544609933d6f405d0e7223340e74d6387ae3adbd8df304c0a89124128bc078c7aa1096f955b9c85e6ff071cb710d2469886d15c27078d994bf0278ee63b09586b8c198d836f88dc6820c5a1"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x32, 0x3, "4b61ba4c804e56a59266bbc164ecbe05a62c976d8099dae5e1e4129be5b33e365c1c1e0663e70079e0b558356ca1"}]}, @NL80211_ATTR_PROBE_RESP={0x4b2, 0x91, "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"}, @NL80211_ATTR_IE={0x177, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x28}}, @dsss={0x3, 0x1, 0xa}, @fast_bss_trans={0x37, 0x125, {0x40, 0x8, "0cdd561c34cf7d9ebff288589c63a48c", "da7fd52e7252ba383261808f689f2be8dc8ed616a0e442b6399cb5d42cd77f22", "2763a2e6df3f535a5d684549e5158249d97c5e76e33ade2cfa09a05a5d6f5256", [{0x1, 0x18, "e2bd40acec137e6444f3f19d0f10261ac782fc8fc33f2746"}, {0x1, 0x20, "60fb4a1c31a8874e4e03f8fd6b797308c9d882df37a1095c87827888e00d023f"}, {0x3, 0x18, "11e4fd06902c8df91bc6a6dbd69ba0dc15ff034443691040"}, {0x4, 0x18, "b6a6187b843db16aca04e3deaa4a537da2ea1bad68859f83"}, {0x1, 0x2, "d4c4"}, {0x3, 0x1f, "a419ab214fa8324c6c38f62cc3c6e803acb357d79a0d353d6c7d69d8f35324"}, {0x4, 0x13, "e1cf5cf37c269b9b61f141323961284e8e09d3"}, {0x1, 0x27, "01e95c5587f5eed656e85b566a9d4da64c13d3e69692534c907ba3f0f0387f54dec034c704174a"}]}}, @supported_rates={0x1, 0x6, [{0x44, 0x1}, {0x97d0b9f5da478784}, {0x18}, {0x4}, {0xc, 0x1}, {0x1, 0x1}]}, @preq={0x82, 0x36, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x1, 0xf, 0x80000001, @device_b, 0x0, @value, 0x43b1, 0xe30f, 0x2, [{{0x1, 0x0, 0x1}, @device_a, 0x81}, {{0x0, 0x0, 0x1}, @broadcast, 0xffffffff}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x2d8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x57, 0x3, "eb34c529787fc91b4c3b19f511d9d82c268069e0193c2ac2a4970c105d93f2cfb211e1d1340ed1bc07f3dfb511f20f36699b8979ce78a8c4dfe787606733c1ba8275cab193d91eeaf0b03507af20d512fe2a0c"}, @NL80211_FTM_RESP_ATTR_LCI={0xb0, 0x2, "895ea0690ef840f66b84c8983d8b44d8ac34705e205ddf45f720c88a1406a7868c5273ab09e18d783169fe3f627ee38cc9cc9fbb690391b96fc9f2451da5ec7f39a47fca2c51fa35d894c5e711d02e686936d68724669a85c949fea327f64d0fa12f40d1ca6173f1c2ae6bf1f5704cd319c3a4366174345d6db22ada549de63db4a15b810bd14828ffbaace1dded29b232adc41381231de480ecbaf201cf2a905529f6702b26e4c0fed59c47"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7a, 0x3, "f98b6ff67e6b67b803dbe24acdfe2be563488e7bc347d4e8ef809cdfc68a30b33dfda8a1c6935c2087227f033ea65298f9613341b869b607c16ffa3b6eade3943bb73fcecfefbfe2471a6bcd720e9ab6c6eec87fc2aa6494fa1555de2fc6d224fa025a4f2b7a5893d356a111c4331f1508a6ceae5ce1"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7, 0x3, "dcfe6f"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xf7, 0x2, "e8586f7aa391f65c68aebbb803868f2f94e5695d8c8e99f24dc78eacf0d61190bf4c94eab177250b5b28421b07ee3b49c0490374a39b069ba40d1e6934d14a58c78d3f419934036f82e4b5d19d0f6ccf53955e88a2d88a723746396ef24e2f1f43ad3f9cb5514a304acff52f44d11184219e76f94743be45a498c0ef3e6466f6f5e1515fa004433a9e86e6799eeef5bab9c1692602ee182c5130993e5f375a8a6095b833897b7c7675b88c87c4bfda018a304c6520b8e7e6ef2c3aa458c97b9093b903b4e95ac7e4861aad2790c79fc6f5a6421444ad373f1782c7d2e3828ef42a023d5b29c7e2285d19b713d527fbb50418f7"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x48, 0x3, "e3c486d04fdba003d9fda43d9829b3bca67ca9101cdd6606e7837bad291332a6143819586c9487708a50ee2524cb25362573c21c4ff66f6f0444b5b33c8c2bb3e2b5948f"}]}, @NL80211_ATTR_BEACON_HEAD={0x13b, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xa}, @device_a, @broadcast, @random="89ea5aa0a0b0", {0x6, 0x5}}, 0xcbb, @random=0xff, 0x4002, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x6c, 0x1}, {0x9}, {0x48, 0x1}, {0x0, 0x1}, {0x18, 0x1}]}, @void, @void, @void, @val={0x5, 0x9d, {0xf, 0x34, 0x5, "06a2b27a10e12a2fbabd5f5de34c47e566046c500c365b3d6d6dcfff2c171d2966f1c658c2888fa96ff298dfeb5804f625cb41336ffee55c28b14c1776c27ef1616de75d145ac7e4b3eae2e4c17cc6dce9694489cbc31ea5cb5133982b03bc9008b1519c3c6efb4fa4b1c380bd08b5b450f33943a79ae324a758fba09a2a3bba5717ba20e0df97d0a334e6fa81e77b37212e4ca146560932e24f"}}, @val={0x25, 0x3, {0x0, 0x30, 0x1c}}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x53, "fc2be7e0caf638acc71a973651878fb80ca05c437665c0ad32f7a195ec1505da2e53605ec0c0fbffdb9798ffe48181930fddf4637d191cf19b479fe012b26a6b8bc473f1e8d85fc3bc9df38c300fe738e56eba"}]}}]}, 0x14e8}}, 0x40010) 3.921997942s ago: executing program 5 (id=12520): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x20, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 3.784575313s ago: executing program 3 (id=12524): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%-010d \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008300000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x15, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}]}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) sendmsg$NFT_BATCH(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @mcast2}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8020}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x94, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x402}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_NAT_DST={0x50, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x888) pipe(&(0x7f0000000240)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x12, 0x12, r6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x24, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x56}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xa}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x80000000}, @ldst={0x3, 0x2, 0x2, 0x5, 0x9, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) 3.69151737s ago: executing program 5 (id=12525): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000090000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x69}, 0x50) 3.528955724s ago: executing program 3 (id=12529): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01000000ef01010100000000000000000000e000080000002800028005000300010000001c0002800c000180080001000a0000010c000180080001"], 0x60}}, 0x0) 3.296074523s ago: executing program 3 (id=12532): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000007b000010852000008f42030095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2.997042727s ago: executing program 3 (id=12534): socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x8031, 0xffffffffffffffff, 0x6a855000) socket$netlink(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000100), &(0x7f0000000140)=0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r2, 0x8914, &(0x7f0000000040)) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x400000, 0x25dfdbfa, {0x60, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000540)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 2.086534331s ago: executing program 6 (id=12542): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x9, 0xfffffffffffffff9, 0x80}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34}]}]}]}, 0x38}}, 0x4000) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000001700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000016c0)={&(0x7f0000000300)={0x13a4, r3, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff87b4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6141}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1c6}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x124, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40a7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c9b}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "00e8eff207a7c09d4b4d200c5013ee7ae95807476373af12fd1f7ded19"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x2c, 0x3, "33088d353100d6877e43edabd95265fb364d92da23dae50bd2dbe748a45ac89979fca89e238ca8e4"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "e051ba7f011adb4c959056c9f73fa7a9956b8ef6c66effdf28c5576ef217c24d0ed7"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "a075f18dd7b8ab2346ab9c9b0b759ce041166ce950ea3302ccd72fa689"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "f672d979283f52bd547e0af73048bc1f913580e5"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x13a4}, 0x1, 0x0, 0x0, 0x40080}, 0x4005) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="090300000000000000002e"], 0x14}}, 0x0) 1.878774475s ago: executing program 2 (id=12545): r0 = socket$kcm(0x29, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, &(0x7f0000000040)=0x1, 0x7) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x50}}, 0x4002) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) sendfile(r1, r0, &(0x7f0000000340)=0xffff, 0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r5, &(0x7f0000000380)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xff}}, 0x24) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r3) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe4, r6, 0x1e, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xeed1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff581d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r7 = accept4(r1, &(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000640)=0x80, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r4, 0x81, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x66, 0x1b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3af}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x800}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3238}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x406d}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa0}]}, 0x58}, 0x1, 0x0, 0x0, 0x411}, 0x40081) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r7, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, 0x140a, 0x212, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4c010) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r10, &(0x7f0000000940)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x40001) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r3) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x88, r11, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'nicvf0\x00'}}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd6a9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x14a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x80000}, 0x40000) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000b80), r7) sendmsg$SEG6_CMD_DUMPHMAC(r10, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1018000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, r12, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x2, 0x40, 0x7, 0x5, 0x8]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040801}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r10, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40004}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x120, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x2, 0x10}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_IE={0xf3, 0x2a, [@measure_req={0x26, 0xed, {0x2, 0x7, 0x38, "52116fd7ec9b509ef8a1d693a3e2d5f3ec583ee34055059635533e4494a61ad059911aeac958fbcbca938126ea98cd4febfc71499788b20ea5211c288cc32361fe61309807d03bc2ee629ba1fd43fbe2dabaf6dc3876c0d416a8561078865180846686a6a32529866397dcebeadddeb56c855856543d9ea082158dcc8370f57853b186562c243b411f390cb8caabc1c5f957643fbac665912f14092cbb5cf9b1db0da7fcfffe5ce81900fe953f53546c70091bbfc991c46bafbb8d9448c329d4d93bef192250c4438bc20430727eeaa18d41918bee383fd1983f589e9303e75f223dede4cefb34ffbe8d"}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4008081}, 0x880) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f40), r9) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x3c, r14, 0x200, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) unshare(0x10000000) unshare(0x200) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0xac, r4, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x12}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3af}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9c}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7e}]]}, 0xac}, 0x1, 0x0, 0x0, 0x4004}, 0x44000) 1.853537323s ago: executing program 6 (id=12546): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$cgroup_devices(r2, &(0x7f0000000100)={'a', ' *:* ', 'rm\x00'}, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) 1.448131128s ago: executing program 4 (id=12548): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000010200000000001085200000af43030095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.440146802s ago: executing program 6 (id=12549): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000540005000100000000000000070000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01000000ef0101010000000000ffffffff800000000000002800028005000300010000001c0002800c000180080001000a0000010c000180080001"], 0x60}}, 0x0) 1.332208024s ago: executing program 3 (id=12550): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000020bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.266579436s ago: executing program 2 (id=12551): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05000000000000000000020100000900010073797a3000000000070002006c6f0000070003006c6f"], 0x30}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10) connect$inet(r6, &(0x7f0000000540)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000740)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000900)='nv', 0x2) recvfrom$inet(r6, &(0x7f0000000940), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r6, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@delneigh={0x28, 0x1d, 0x1, 0xc00, 0x0, {0x7, 0x0, 0x0, r8, 0x40, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x58, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r4, @ANYBLOB="14000200ff020000000000000000000000000001080008000105"], 0x34}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x25dfdbfe, {0xa, 0x68, 0x42, 0xc8, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x706}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.240380845s ago: executing program 4 (id=12552): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000b40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000b80)="05000000010000", 0x7) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = socket(0x10, 0x7045cc45af6885b6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a00)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000bc0)) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0100003cd44bda594d825d0000"], 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', r4, 0x20, 0x40, 0x70e2, 0xf, {{0xa, 0x4, 0x1, 0x11, 0x28, 0x66, 0x0, 0x8, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@timestamp={0x44, 0x14, 0xee, 0x0, 0x8, [0x3, 0xc103, 0x6, 0x1]}]}}}}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)=""/203, 0x103, 0xcb, 0x0, 0x10000, 0x4200cbcbf6e0a668}, 0x28) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100e08ddf8f0000", @ANYRES32=0x1, @ANYBLOB="9d5900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000000000000000"], 0x50) r11 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, 0x0, 0xa4ff) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000ffffffffffffffff00"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="850000003c000000184700000000000000000000000000009933fd0df5927300329eb54068fd661017d7b49288a7cf8a41fdddc8fc1c936412d4b25417bbab8386e6319867666c1818b3bacba90a77607a5b3b129b3cabd0819fe41cc07deb672366592accd16b494cd915139ef53f1b236750e5aca1121ffdc75a13bd081afb02a5cfe4"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xd7, &(0x7f00000000c0)=""/215, 0x41100, 0x10, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780)=[r9, 0x1, r10, 0xffffffffffffffff, r12, 0x1, r13], &(0x7f00000007c0)=[{0x3, 0x5, 0x8, 0x5}, {0x3, 0x3, 0x4, 0xb}, {0x1, 0x3, 0x7, 0x1}, {0x5, 0x3, 0x7, 0x1}], 0x10, 0x4e}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000d00)=0x40049, 0x4) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040), 0x4) 1.220870912s ago: executing program 6 (id=12553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000080)=@ethtool_cmd={0x27, 0x0, 0xf, 0xd1cd, 0x9, 0x9, 0x7, 0x6, 0x5, 0x2, 0xa, 0x6, 0x3, 0x2, 0x6, 0x20000000, [0x9, 0x45de]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "e11fd25f228e7de8", "8452fe0e66fa615e00e1c0742c52d98f60149ba20f6258068c42e89f4175c12c", "8c11f4c2", "1bd80c52b34eb5b5"}, 0x38) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000007c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf253b00000008000300", @ANYRES8=r3, @ANYBLOB='\t\x003'], 0x40}}, 0x28008004) 930.435773ms ago: executing program 3 (id=12554): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000280)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x79}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000040)=0x714, 0x4) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004600002c0000000000019078ac1e0101ac14000000020000000000000000"], 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/92, 0x5c}], 0x1) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100001000000003f00004b2ad708000000000008001c00c9000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 770.797996ms ago: executing program 2 (id=12555): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2ca60}], {0x95, 0x0, 0xfeff}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 751.962579ms ago: executing program 6 (id=12556): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000090000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x73}, 0x50) 745.386581ms ago: executing program 4 (id=12557): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="380000001e000100fdffffff0000000002000000010000070000000014000300766c616e3000000000000000000000080001006401010200"], 0x38}, 0x1, 0x0, 0x0, 0x42812}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01026f86dca5e3538198b1530000000000000000010000000900030073797a32000000000900010073797a300000000038000000060a010400000000000000000100000008000b40000000000900010073797a3000000000100004800c000180040001006e61740014000000110001000000"], 0xac}}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x300, &(0x7f0000000c00), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000203000000020000000000001200000000000000000000000902000000000051"], &(0x7f0000000940)=""/228, 0x40, 0xe4, 0x1}, 0x20) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000001e80)=ANY=[@ANYRES8=r3, @ANYRES32=r4, @ANYRES64], 0xfe33) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c000000100001006cbd700002dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200305b010014000300687372300000009d37fea54bacbcee0008000400ff010000"], 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000f07f0002000000ee8000dfe7d26f19cb196b88", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r10, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x8051}, 0x0) sendmmsg(r11, &(0x7f0000000d00), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fcdb8b830a8eb9edd00f901f", @ANYRES32=r9, @ANYBLOB="0c0050800800070000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004048}, 0x8010) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="ff1a149c", @ANYRES16=0x0, @ANYBLOB="000429bd7000fbdbdf251300000008000300", @ANYRES32=r6, @ANYBLOB="0c009900090000004e00000006001401050000006400ac00932243651ef138a43d23c5962b3e992430209a97f8bfcf67f06cf4b5f7b25ba9a8e3ad8d9b675a0bcdbbd99b0853d01bc85a04b5326ada1e2bd3033e75a4fef0a6c9f06305e9b69ad0ec9e4d944d49af6f9dbec458423abe602bc9afde3d8d600800a40003000000"], 0x9c}, 0x1, 0x0, 0x0, 0x44110}, 0x8010) 587.144007ms ago: executing program 2 (id=12558): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34291}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 586.922348ms ago: executing program 6 (id=12559): socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x8031, 0xffffffffffffffff, 0x6a855000) socket$netlink(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000100), &(0x7f0000000140)=0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x400000, 0x25dfdbfa, {0x60, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000540)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 434.07009ms ago: executing program 2 (id=12560): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34ae3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x9c106e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 302.205556ms ago: executing program 4 (id=12561): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000003000000000000000000000000000a0030"], 0xb8}}, 0x4000) 51.515346ms ago: executing program 2 (id=12562): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000540005000100000000000000070000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01000000ef0101010000000000ffffffff800000000000002800028005000300010000001c0002800c000180080001000a0000010c000180080001"], 0x60}}, 0x0) 51.360104ms ago: executing program 4 (id=12563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000060a010400000000000000000a000001140000001100010000000000000000000100000a7d064e08b46480334fe47c9268a4b884818ec626ad786e1fc3381c92bef51b4309eb2e89de2896fe6164112b670d887fb30af38f71508b92c819dd5c9d76527a0c9710b903971ab8a5d58ef2c6b56db00e12beb3e878e0b4b733016ca1728346fc68c9cdb7d5e7ef28ab62d186ce"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$TUNSETIFF(r0, 0x80111500, &(0x7f0000000040)={'wlan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) 0s ago: executing program 4 (id=12564): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}}}}}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x5c}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r9, 0x114, 0x3f, &(0x7f0000000300), 0x4) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000008008"], 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="6000000010300200280012800a000100767863616e000000180002801400010000000000fba4ed2cb7c05eb3c1649cac8f3db095243466512d510cdfc18a2293d8e5b42dec011e8704cc", @ANYRES32=0x0, @ANYBLOB="00140200000000000a0003003a712f0756b80000"], 0x54}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x10, 0x80, 0x0, 0xffffffff, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x10, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}) kernel console output (not intermixed with test programs): _noprof+0x29e/0x5a0 [ 1146.228811][ T7583] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1146.228846][ T7583] ? __pfx_policy_nodemask+0x10/0x10 [ 1146.228876][ T7583] ? __get_vm_area_node+0x155/0x2f0 [ 1146.228896][ T7583] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 1146.228919][ T7583] ? __vmalloc_noprof+0xd2/0x120 [ 1146.228946][ T7583] __alloc_pages_noprof+0x10/0x100 [ 1146.228976][ T7583] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 1146.229014][ T7583] ? alloc_pages_noprof+0x140/0x2b0 [ 1146.229051][ T7583] __kasan_populate_vmalloc+0xb7/0x1c0 [ 1146.229086][ T7583] alloc_vmap_area+0xd1a/0x1420 [ 1146.229138][ T7583] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1146.229172][ T7583] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 1146.229202][ T7583] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 1146.229229][ T7583] ? __get_vm_area_node+0x155/0x2f0 [ 1146.229257][ T7583] __get_vm_area_node+0x200/0x2f0 [ 1146.229384][ T7583] __vmalloc_node_range_noprof+0x343/0x1540 [ 1146.229410][ T7583] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1146.229440][ T7583] ? __lock_acquire+0x747/0x2de0 [ 1146.229492][ T7583] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1146.229527][ T7583] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1146.229554][ T7583] __vmalloc_noprof+0xd2/0x120 [ 1146.229578][ T7583] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1146.229610][ T7583] bpf_prog_alloc_no_stats+0x47/0x560 [ 1146.229637][ T7583] ? bpf_prog_alloc+0x2a/0x1a0 [ 1146.229668][ T7583] bpf_prog_alloc+0x3c/0x1a0 [ 1146.229700][ T7583] bpf_prog_load+0x7f8/0x1c20 [ 1146.229744][ T7583] ? __pfx_bpf_prog_load+0x10/0x10 [ 1146.229814][ T7583] __sys_bpf+0xd0d/0xd90 [ 1146.229871][ T7583] ? __pfx___sys_bpf+0x10/0x10 [ 1146.229907][ T7583] ? __fget_files+0x2a/0x420 [ 1146.229939][ T7583] ? ksys_write+0x242/0x270 [ 1146.229960][ T7583] ? __pfx_ksys_write+0x10/0x10 [ 1146.229989][ T7583] __x64_sys_bpf+0xba/0xd0 [ 1146.230018][ T7583] do_syscall_64+0x166/0x520 [ 1146.230044][ T7583] ? trace_irq_disable+0x3b/0x140 [ 1146.230069][ T7583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.230093][ T7583] ? clear_bhb_loop+0x70/0xc0 [ 1146.230121][ T7583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.230144][ T7583] RIP: 0033:0x7faad259e1d9 [ 1146.230165][ T7583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.230186][ T7583] RSP: 002b:00007faad341b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1146.230211][ T7583] RAX: ffffffffffffffda RBX: 00007faad2825fa0 RCX: 00007faad259e1d9 [ 1146.230229][ T7583] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1146.230244][ T7583] RBP: 00007faad341b090 R08: 0000000000000000 R09: 0000000000000000 [ 1146.230259][ T7583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1146.230273][ T7583] R13: 00007faad2826038 R14: 00007faad2825fa0 R15: 00007ffcd44e6508 [ 1146.230310][ T7583] [ 1146.292083][ T7577] netlink: 'syz.3.11878': attribute type 10 has an invalid length. [ 1146.292146][ T7577] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11878'. [ 1146.682271][ T7588] FAULT_INJECTION: forcing a failure. [ 1146.682271][ T7588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1146.682316][ T7588] CPU: 0 UID: 0 PID: 7588 Comm: syz.4.11882 Not tainted syzkaller #0 PREEMPT(full) [ 1146.682341][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1146.682355][ T7588] Call Trace: [ 1146.682365][ T7588] [ 1146.682376][ T7588] dump_stack_lvl+0xe8/0x150 [ 1146.682415][ T7588] should_fail_ex+0x410/0x560 [ 1146.682454][ T7588] _copy_to_user+0x31/0xb0 [ 1146.682492][ T7588] simple_read_from_buffer+0xe1/0x170 [ 1146.682534][ T7588] proc_fail_nth_read+0x1bb/0x230 [ 1146.682561][ T7588] ? common_file_perm+0x20e/0x2b0 [ 1146.682597][ T7588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1146.682628][ T7588] ? rw_verify_area+0x24a/0x4c0 [ 1146.682654][ T7588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1146.682680][ T7588] vfs_read+0x213/0xa80 [ 1146.682710][ T7588] ? __pfx___mutex_lock+0x10/0x10 [ 1146.682738][ T7588] ? __pfx_vfs_read+0x10/0x10 [ 1146.682765][ T7588] ? __fget_files+0x2a/0x420 [ 1146.682792][ T7588] ? __fget_files+0x3a2/0x420 [ 1146.682812][ T7588] ? __fget_files+0x2a/0x420 [ 1146.682844][ T7588] ksys_read+0x150/0x270 [ 1146.682875][ T7588] ? __pfx_ksys_read+0x10/0x10 [ 1146.682912][ T7588] do_syscall_64+0x166/0x520 [ 1146.682938][ T7588] ? trace_irq_disable+0x3b/0x140 [ 1146.682963][ T7588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.682987][ T7588] ? clear_bhb_loop+0x70/0xc0 [ 1146.683016][ T7588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.683040][ T7588] RIP: 0033:0x7f6a18d5ea0e [ 1146.683061][ T7588] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1146.683081][ T7588] RSP: 002b:00007f6a19c6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1146.683106][ T7588] RAX: ffffffffffffffda RBX: 00007f6a19c6e6c0 RCX: 00007f6a18d5ea0e [ 1146.683124][ T7588] RDX: 000000000000000f RSI: 00007f6a19c6e0a0 RDI: 0000000000000003 [ 1146.683139][ T7588] RBP: 00007f6a19c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1146.683153][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1146.683167][ T7588] R13: 00007f6a19026038 R14: 00007f6a19025fa0 R15: 00007ffc7bd76398 [ 1146.683204][ T7588] [ 1146.978635][ T7575] bond1: (slave dummy0): making interface the new active one [ 1146.981309][ T7575] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1146.986673][ T7577] dummy0: entered promiscuous mode [ 1147.043624][ T7577] bond1: (slave dummy0): Releasing active interface [ 1147.102990][ T7596] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1147.171691][ T7598] FAULT_INJECTION: forcing a failure. [ 1147.171691][ T7598] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.171728][ T7598] CPU: 1 UID: 0 PID: 7598 Comm: syz.5.11889 Not tainted syzkaller #0 PREEMPT(full) [ 1147.171753][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1147.171768][ T7598] Call Trace: [ 1147.171778][ T7598] [ 1147.171788][ T7598] dump_stack_lvl+0xe8/0x150 [ 1147.171827][ T7598] should_fail_ex+0x410/0x560 [ 1147.171866][ T7598] should_failslab+0xa8/0x100 [ 1147.171901][ T7598] __kmalloc_node_noprof+0x100/0x720 [ 1147.171927][ T7598] ? __get_vm_area_node+0x200/0x2f0 [ 1147.171949][ T7598] ? __get_vm_area_node+0x283/0x2f0 [ 1147.171969][ T7598] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1147.171992][ T7598] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1147.172026][ T7598] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1147.172065][ T7598] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1147.172101][ T7598] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1147.172128][ T7598] ? apparmor_capable+0x126/0x170 [ 1147.172165][ T7598] ? bpf_lsm_capable+0x9/0x20 [ 1147.172189][ T7598] ? security_capable+0x7e/0x2c0 [ 1147.172224][ T7598] ? bpf_check+0x115b/0x2ef0 [ 1147.172249][ T7598] __vmalloc_noprof+0xd2/0x120 [ 1147.172274][ T7598] ? bpf_check+0x115b/0x2ef0 [ 1147.172303][ T7598] bpf_check+0x115b/0x2ef0 [ 1147.172350][ T7598] ? __pfx_bpf_check+0x10/0x10 [ 1147.172380][ T7598] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1147.172420][ T7598] bpf_prog_load+0x14d6/0x1c20 [ 1147.172463][ T7598] ? __pfx_bpf_prog_load+0x10/0x10 [ 1147.172519][ T7598] __sys_bpf+0xd0d/0xd90 [ 1147.172556][ T7598] ? __pfx___sys_bpf+0x10/0x10 [ 1147.172597][ T7598] ? __fget_files+0x2a/0x420 [ 1147.172637][ T7598] ? ksys_write+0x242/0x270 [ 1147.172664][ T7598] ? __pfx_ksys_write+0x10/0x10 [ 1147.172694][ T7598] __x64_sys_bpf+0xba/0xd0 [ 1147.172723][ T7598] do_syscall_64+0x166/0x520 [ 1147.172748][ T7598] ? trace_irq_disable+0x3b/0x140 [ 1147.172773][ T7598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.172797][ T7598] ? clear_bhb_loop+0x70/0xc0 [ 1147.172826][ T7598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.172849][ T7598] RIP: 0033:0x7f4b7399e1d9 [ 1147.172870][ T7598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1147.172890][ T7598] RSP: 002b:00007f4b747e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1147.172915][ T7598] RAX: ffffffffffffffda RBX: 00007f4b73c25fa0 RCX: 00007f4b7399e1d9 [ 1147.172932][ T7598] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1147.172948][ T7598] RBP: 00007f4b747e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1147.172963][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1147.172977][ T7598] R13: 00007f4b73c26038 R14: 00007f4b73c25fa0 R15: 00007ffc69b848c8 [ 1147.173013][ T7598] [ 1147.502372][ T7601] syzkaller0: entered promiscuous mode [ 1147.502398][ T7601] syzkaller0: entered allmulticast mode [ 1147.528258][ T7602] netlink: 'syz.6.11887': attribute type 101 has an invalid length. [ 1147.541634][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11887'. [ 1147.581697][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11887'. [ 1147.598832][ T4569] batadv10: left allmulticast mode [ 1147.598862][ T4569] batadv10: left promiscuous mode [ 1147.599084][ T4569] bridge0: port 12(batadv10) entered disabled state [ 1147.630766][ T4569] batadv9: left allmulticast mode [ 1147.630796][ T4569] batadv9: left promiscuous mode [ 1147.631027][ T4569] bridge0: port 11(batadv9) entered disabled state [ 1147.657886][ T4569] batadv8: left allmulticast mode [ 1147.657916][ T4569] batadv8: left promiscuous mode [ 1147.658116][ T4569] bridge0: port 10(batadv8) entered disabled state [ 1147.684973][ T4569] batadv7: left allmulticast mode [ 1147.685000][ T4569] batadv7: left promiscuous mode [ 1147.685220][ T4569] bridge0: port 9(batadv7) entered disabled state [ 1147.707511][ T4569] batadv6: left allmulticast mode [ 1147.707537][ T4569] batadv6: left promiscuous mode [ 1147.707742][ T4569] bridge0: port 8(batadv6) entered disabled state [ 1147.713027][ T4569] batadv5: left allmulticast mode [ 1147.713079][ T4569] batadv5: left promiscuous mode [ 1147.713282][ T4569] bridge0: port 7(batadv5) entered disabled state [ 1147.758022][ T4569] batadv4: left allmulticast mode [ 1147.758052][ T4569] batadv4: left promiscuous mode [ 1147.758267][ T4569] bridge0: port 6(batadv4) entered disabled state [ 1147.787865][ T4569] batadv3: left allmulticast mode [ 1147.787896][ T4569] batadv3: left promiscuous mode [ 1147.788109][ T4569] bridge0: port 5(batadv3) entered disabled state [ 1147.825928][ T4569] batadv2: left allmulticast mode [ 1147.825957][ T4569] batadv2: left promiscuous mode [ 1147.826168][ T4569] bridge0: port 4(batadv2) entered disabled state [ 1147.849825][ T4569] batadv1: left allmulticast mode [ 1147.849856][ T4569] batadv1: left promiscuous mode [ 1147.850089][ T4569] bridge0: port 3(batadv1) entered disabled state [ 1147.873423][ T4569] bridge_slave_1: left allmulticast mode [ 1147.873452][ T4569] bridge_slave_1: left promiscuous mode [ 1147.873700][ T4569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.907616][ T4569] bridge_slave_0: left allmulticast mode [ 1147.907646][ T4569] bridge_slave_0: left promiscuous mode [ 1147.907855][ T4569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.391464][ T4569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1148.407030][ T4569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1148.408842][ T4569] bond0 (unregistering): Released all slaves [ 1148.432469][ T4569] bond1 (unregistering): Released all slaves [ 1148.458618][ T4569] bond2 (unregistering): Released all slaves [ 1148.479741][ T4569] bond3 (unregistering): Released all slaves [ 1148.502853][ T4569] bond4 (unregistering): Released all slaves [ 1148.521475][ T4569] bond5 (unregistering): Released all slaves [ 1148.539424][ T4569] bond6 (unregistering): Released all slaves [ 1148.577723][ T7611] FAULT_INJECTION: forcing a failure. [ 1148.577723][ T7611] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.577759][ T7611] CPU: 0 UID: 0 PID: 7611 Comm: syz.3.11890 Not tainted syzkaller #0 PREEMPT(full) [ 1148.577785][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1148.577799][ T7611] Call Trace: [ 1148.577808][ T7611] [ 1148.577818][ T7611] dump_stack_lvl+0xe8/0x150 [ 1148.577855][ T7611] should_fail_ex+0x410/0x560 [ 1148.577891][ T7611] ? __alloc_skb+0x1db/0x7a0 [ 1148.577915][ T7611] should_failslab+0xa8/0x100 [ 1148.577940][ T7611] ? __alloc_skb+0x1db/0x7a0 [ 1148.577962][ T7611] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1148.577981][ T7611] ? __alloc_skb+0x18d/0x7a0 [ 1148.578007][ T7611] ? __alloc_skb+0x1db/0x7a0 [ 1148.578036][ T7611] __alloc_skb+0x1db/0x7a0 [ 1148.578063][ T7611] netlink_ack+0x136/0xb30 [ 1148.578081][ T7611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1148.578106][ T7611] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1148.578137][ T7611] netlink_rcv_skb+0x2a4/0x4a0 [ 1148.578158][ T7611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1148.578184][ T7611] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1148.578216][ T7611] ? down_read+0x2be/0x330 [ 1148.578239][ T7611] genl_rcv+0x28/0x40 [ 1148.578262][ T7611] netlink_unicast+0x7bd/0x940 [ 1148.578288][ T7611] netlink_sendmsg+0x813/0xb40 [ 1148.578316][ T7611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1148.578342][ T7611] ? apparmor_socket_sendmsg+0x98/0x360 [ 1148.578367][ T7611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1148.578387][ T7611] sock_sendmsg_nosec+0x13a/0x180 [ 1148.578411][ T7611] ____sys_sendmsg+0x54e/0x850 [ 1148.578433][ T7611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1148.578457][ T7611] ? import_iovec+0x73/0xa0 [ 1148.578493][ T7611] ___sys_sendmsg+0x2a5/0x360 [ 1148.578509][ T7611] ? __lock_acquire+0x747/0x2de0 [ 1148.578531][ T7611] ? __pfx____sys_sendmsg+0x10/0x10 [ 1148.578575][ T7611] ? __fget_files+0x2a/0x420 [ 1148.578590][ T7611] ? __fget_files+0x3a2/0x420 [ 1148.578613][ T7611] __x64_sys_sendmsg+0x1b1/0x290 [ 1148.578633][ T7611] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1148.578666][ T7611] do_syscall_64+0x166/0x520 [ 1148.578684][ T7611] ? trace_irq_disable+0x3b/0x140 [ 1148.578702][ T7611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.578719][ T7611] ? clear_bhb_loop+0x70/0xc0 [ 1148.578739][ T7611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.578755][ T7611] RIP: 0033:0x7fbfe4f9e1d9 [ 1148.578771][ T7611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.578820][ T7611] RSP: 002b:00007fbfe31f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1148.578846][ T7611] RAX: ffffffffffffffda RBX: 00007fbfe5225fa0 RCX: 00007fbfe4f9e1d9 [ 1148.578863][ T7611] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000003 [ 1148.578878][ T7611] RBP: 00007fbfe31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.578893][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.578907][ T7611] R13: 00007fbfe5226038 R14: 00007fbfe5225fa0 R15: 00007ffe58fdb488 [ 1148.578947][ T7611] [ 1149.182053][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11901'. [ 1149.388692][ T4569] : left promiscuous mode [ 1149.431482][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880462ef000: rx timeout, send abort [ 1149.519893][ T4569] tipc: Left network mode [ 1149.545708][T26543] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 1149.545997][T26543] Bluetooth: hci0: command 0x0c13 tx timeout [ 1149.790067][ T7659] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1149.817010][ T7662] netlink: 193 bytes leftover after parsing attributes in process `syz.2.11911'. [ 1149.868333][ T7668] netlink: 'syz.3.11913': attribute type 1 has an invalid length. [ 1149.881857][ T7664] netlink: 193 bytes leftover after parsing attributes in process `syz.2.11911'. [ 1149.890947][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11912'. [ 1149.954834][ T7668] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1150.005513][ T7670] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.015287][ T7670] bond2: (slave team0): Enslaving as a backup interface with an up link [ 1150.242090][ T4575] bond2: (slave team0): link status definitely down, disabling slave [ 1150.371109][ T4569] hsr_slave_0: left promiscuous mode [ 1150.372519][ T4569] hsr_slave_1: left promiscuous mode [ 1150.373465][ T4569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1150.373488][ T4569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.428166][ T4569] veth1_macvtap: left promiscuous mode [ 1150.428200][ T4569] veth0_macvtap: left promiscuous mode [ 1150.428281][ T4569] veth1_vlan: left promiscuous mode [ 1150.509397][ T7693] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11921'. [ 1150.509462][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11921'. [ 1150.770407][ T7702] netlink: 'syz.6.11926': attribute type 1 has an invalid length. [ 1150.912752][ T7711] netlink: 'syz.2.11928': attribute type 1 has an invalid length. [ 1151.031059][ T7714] netlink: 'syz.2.11928': attribute type 10 has an invalid length. [ 1151.031077][ T7714] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11928'. [ 1151.372355][ T7702] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1151.400769][ T7708] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.418795][ T7708] bond3: (slave team0): Enslaving as a backup interface with an up link [ 1151.466877][ T7711] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1151.467876][ T7713] dummy0: left promiscuous mode [ 1151.510915][ T7713] bond12: (slave dummy0): making interface the new active one [ 1151.511716][ T7713] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 1151.511852][ T7714] dummy0: entered promiscuous mode [ 1151.553490][ T7714] bond12: (slave dummy0): Releasing active interface [ 1151.673363][ T7728] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20003 [ 1151.673776][ T4591] IPVS: starting estimator thread 0... [ 1151.689339][ T7728] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1151.690548][ T7728] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1151.754248][ T7730] IPVS: using max 26 ests per chain, 62400 per kthread [ 1151.915673][ T4575] bond3: (slave team0): link status definitely down, disabling slave [ 1152.079398][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11941'. [ 1152.097344][ T7745] bridge0: port 10(batadv8) entered blocking state [ 1152.097538][ T7745] bridge0: port 10(batadv8) entered disabled state [ 1152.097707][ T7745] batadv8: entered allmulticast mode [ 1152.099686][ T7745] batadv8: entered promiscuous mode [ 1152.360157][ T7752] netlink: 'syz.5.11943': attribute type 1 has an invalid length. [ 1152.360183][ T7752] netlink: 220 bytes leftover after parsing attributes in process `syz.5.11943'. [ 1152.361635][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11942'. [ 1152.481199][ T7761] netlink: 'syz.6.11946': attribute type 1 has an invalid length. [ 1152.599051][ T4575] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled [ 1152.599088][ T4575] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled [ 1152.633152][ T7766] netlink: 'syz.6.11946': attribute type 10 has an invalid length. [ 1152.633179][ T7766] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11946'. [ 1152.725021][ T7761] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1152.732737][ T7764] dummy0: left promiscuous mode [ 1152.768806][ T7764] bond4: (slave dummy0): making interface the new active one [ 1152.769776][ T7764] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1152.805726][ T7766] dummy0: entered promiscuous mode [ 1152.809750][ T7766] bond4: (slave dummy0): Releasing active interface [ 1152.896466][ T7775] can: request_module (can-proto-4) failed. [ 1153.029825][ T7780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11955'. [ 1153.047539][ T7780] bridge0: port 6(batadv4) entered blocking state [ 1153.047742][ T7780] bridge0: port 6(batadv4) entered disabled state [ 1153.047904][ T7780] batadv4: entered allmulticast mode [ 1153.049898][ T7780] batadv4: entered promiscuous mode [ 1153.160228][ T7788] FAULT_INJECTION: forcing a failure. [ 1153.160228][ T7788] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.160265][ T7788] CPU: 1 UID: 0 PID: 7788 Comm: syz.2.11957 Not tainted syzkaller #0 PREEMPT(full) [ 1153.160291][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1153.160305][ T7788] Call Trace: [ 1153.160315][ T7788] [ 1153.160325][ T7788] dump_stack_lvl+0xe8/0x150 [ 1153.160364][ T7788] should_fail_ex+0x410/0x560 [ 1153.160401][ T7788] should_failslab+0xa8/0x100 [ 1153.160435][ T7788] __kvmalloc_node_noprof+0x176/0x820 [ 1153.160467][ T7788] ? __kvmalloc_node_noprof+0x345/0x820 [ 1153.160495][ T7788] ? analyze_subprog+0x882/0x9e00 [ 1153.160522][ T7788] ? analyze_subprog+0x882/0x9e00 [ 1153.160559][ T7788] analyze_subprog+0x882/0x9e00 [ 1153.160587][ T7788] ? is_bpf_text_address+0x292/0x2b0 [ 1153.160624][ T7788] ? kernel_text_address+0xa5/0xe0 [ 1153.160661][ T7788] ? arch_stack_walk+0xfb/0x150 [ 1153.160704][ T7788] ? __pfx_stack_trace_save+0x10/0x10 [ 1153.160745][ T7788] ? call_instance+0x263/0x560 [ 1153.160772][ T7788] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 1153.160801][ T7788] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 1153.160831][ T7788] ? __pfx_analyze_subprog+0x10/0x10 [ 1153.160858][ T7788] ? __x64_sys_bpf+0xba/0xd0 [ 1153.160881][ T7788] ? do_syscall_64+0x166/0x520 [ 1153.160905][ T7788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.160969][ T7788] ? call_instance+0x263/0x560 [ 1153.160996][ T7788] ? rcu_is_watching+0x16/0xb0 [ 1153.161026][ T7788] ? call_instance+0x263/0x560 [ 1153.161052][ T7788] ? trace_kmalloc+0x2a/0xf0 [ 1153.161079][ T7788] ? call_instance+0x263/0x560 [ 1153.161113][ T7788] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1153.161144][ T7788] ? __kvmalloc_node_noprof+0x345/0x820 [ 1153.161171][ T7788] ? call_instance+0x263/0x560 [ 1153.161197][ T7788] ? call_instance+0x263/0x560 [ 1153.161232][ T7788] ? call_instance+0x42e/0x560 [ 1153.161268][ T7788] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 1153.161299][ T7788] ? btf_type_by_id+0xe6/0x180 [ 1153.161349][ T7788] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1153.161385][ T7788] ? __kvmalloc_node_noprof+0x345/0x820 [ 1153.161413][ T7788] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1153.161441][ T7788] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1153.161479][ T7788] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1153.161529][ T7788] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1153.161571][ T7788] bpf_check+0x2744/0x2ef0 [ 1153.161619][ T7788] ? __pfx_bpf_check+0x10/0x10 [ 1153.161650][ T7788] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1153.161689][ T7788] bpf_prog_load+0x14d6/0x1c20 [ 1153.161731][ T7788] ? __pfx_bpf_prog_load+0x10/0x10 [ 1153.161788][ T7788] __sys_bpf+0xd0d/0xd90 [ 1153.161826][ T7788] ? __pfx___sys_bpf+0x10/0x10 [ 1153.161866][ T7788] ? __fget_files+0x2a/0x420 [ 1153.161907][ T7788] ? ksys_write+0x242/0x270 [ 1153.161934][ T7788] ? __pfx_ksys_write+0x10/0x10 [ 1153.161964][ T7788] __x64_sys_bpf+0xba/0xd0 [ 1153.161993][ T7788] do_syscall_64+0x166/0x520 [ 1153.162017][ T7788] ? trace_irq_disable+0x3b/0x140 [ 1153.162041][ T7788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.162064][ T7788] ? clear_bhb_loop+0x70/0xc0 [ 1153.162099][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.162123][ T7788] RIP: 0033:0x7fece079e1d9 [ 1153.162145][ T7788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.162163][ T7788] RSP: 002b:00007fecde9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1153.162189][ T7788] RAX: ffffffffffffffda RBX: 00007fece0a25fa0 RCX: 00007fece079e1d9 [ 1153.162207][ T7788] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1153.162221][ T7788] RBP: 00007fecde9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.162236][ T7788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1153.162250][ T7788] R13: 00007fece0a26038 R14: 00007fece0a25fa0 R15: 00007ffde2dde8b8 [ 1153.162286][ T7788] [ 1153.539738][ T4592] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 1153.539792][ T4592] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 1153.944428][T26543] Bluetooth: hci0: command 0x0c13 tx timeout [ 1153.944501][ T5630] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 1154.040333][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11968'. [ 1154.095326][ T7819] bridge0: port 5(batadv3) entered blocking state [ 1154.095521][ T7819] bridge0: port 5(batadv3) entered disabled state [ 1154.095738][ T7819] batadv3: entered allmulticast mode [ 1154.125445][ T7819] batadv3: entered promiscuous mode [ 1154.245437][ T7830] FAULT_INJECTION: forcing a failure. [ 1154.245437][ T7830] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.245474][ T7830] CPU: 0 UID: 0 PID: 7830 Comm: syz.2.11972 Not tainted syzkaller #0 PREEMPT(full) [ 1154.245496][ T7830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1154.245509][ T7830] Call Trace: [ 1154.245516][ T7830] [ 1154.245525][ T7830] dump_stack_lvl+0xe8/0x150 [ 1154.245556][ T7830] should_fail_ex+0x410/0x560 [ 1154.245586][ T7830] should_failslab+0xa8/0x100 [ 1154.245627][ T7830] __kvmalloc_node_noprof+0x176/0x820 [ 1154.245651][ T7830] ? __kvmalloc_node_noprof+0x345/0x820 [ 1154.245673][ T7830] ? analyze_subprog+0x8ac/0x9e00 [ 1154.245697][ T7830] ? analyze_subprog+0x8ac/0x9e00 [ 1154.245725][ T7830] analyze_subprog+0x8ac/0x9e00 [ 1154.245745][ T7830] ? is_bpf_text_address+0x292/0x2b0 [ 1154.245773][ T7830] ? kernel_text_address+0xa5/0xe0 [ 1154.245811][ T7830] ? __pfx_stack_trace_save+0x10/0x10 [ 1154.245841][ T7830] ? call_instance+0x263/0x560 [ 1154.245861][ T7830] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 1154.245883][ T7830] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 1154.245907][ T7830] ? __pfx_analyze_subprog+0x10/0x10 [ 1154.245928][ T7830] ? __x64_sys_bpf+0xba/0xd0 [ 1154.245944][ T7830] ? do_syscall_64+0x166/0x520 [ 1154.245963][ T7830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.246011][ T7830] ? call_instance+0x263/0x560 [ 1154.246031][ T7830] ? rcu_is_watching+0x16/0xb0 [ 1154.246054][ T7830] ? call_instance+0x263/0x560 [ 1154.246075][ T7830] ? trace_kmalloc+0x2a/0xf0 [ 1154.246102][ T7830] ? call_instance+0x263/0x560 [ 1154.246127][ T7830] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1154.246157][ T7830] ? __kvmalloc_node_noprof+0x345/0x820 [ 1154.246184][ T7830] ? call_instance+0x263/0x560 [ 1154.246208][ T7830] ? call_instance+0x263/0x560 [ 1154.246241][ T7830] ? call_instance+0x42e/0x560 [ 1154.246276][ T7830] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 1154.246306][ T7830] ? btf_type_by_id+0xe6/0x180 [ 1154.246355][ T7830] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1154.246391][ T7830] ? __kvmalloc_node_noprof+0x345/0x820 [ 1154.246426][ T7830] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1154.246454][ T7830] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1154.246490][ T7830] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1154.246539][ T7830] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1154.246579][ T7830] bpf_check+0x2744/0x2ef0 [ 1154.246626][ T7830] ? __pfx_bpf_check+0x10/0x10 [ 1154.246654][ T7830] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1154.246711][ T7830] bpf_prog_load+0x14d6/0x1c20 [ 1154.246753][ T7830] ? __pfx_bpf_prog_load+0x10/0x10 [ 1154.246810][ T7830] __sys_bpf+0xd0d/0xd90 [ 1154.246848][ T7830] ? __pfx___sys_bpf+0x10/0x10 [ 1154.246889][ T7830] ? __fget_files+0x2a/0x420 [ 1154.246926][ T7830] ? ksys_write+0x242/0x270 [ 1154.246954][ T7830] ? __pfx_ksys_write+0x10/0x10 [ 1154.246984][ T7830] __x64_sys_bpf+0xba/0xd0 [ 1154.247013][ T7830] do_syscall_64+0x166/0x520 [ 1154.247038][ T7830] ? trace_irq_disable+0x3b/0x140 [ 1154.247064][ T7830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.247083][ T7830] ? clear_bhb_loop+0x70/0xc0 [ 1154.247105][ T7830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.247122][ T7830] RIP: 0033:0x7fece079e1d9 [ 1154.247139][ T7830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1154.247156][ T7830] RSP: 002b:00007fecde9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1154.247176][ T7830] RAX: ffffffffffffffda RBX: 00007fece0a25fa0 RCX: 00007fece079e1d9 [ 1154.247189][ T7830] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1154.247201][ T7830] RBP: 00007fecde9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.247213][ T7830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1154.247224][ T7830] R13: 00007fece0a26038 R14: 00007fece0a25fa0 R15: 00007ffde2dde8b8 [ 1154.247251][ T7830] [ 1154.648965][ T4582] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 1154.648981][ T4582] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 1154.992150][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11975'. [ 1155.125949][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11981'. [ 1155.126735][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11981'. [ 1155.661258][ T7882] FAULT_INJECTION: forcing a failure. [ 1155.661258][ T7882] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.661297][ T7882] CPU: 0 UID: 0 PID: 7882 Comm: syz.3.11991 Not tainted syzkaller #0 PREEMPT(full) [ 1155.661323][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1155.661345][ T7882] Call Trace: [ 1155.661355][ T7882] [ 1155.661365][ T7882] dump_stack_lvl+0xe8/0x150 [ 1155.661405][ T7882] should_fail_ex+0x410/0x560 [ 1155.661443][ T7882] should_failslab+0xa8/0x100 [ 1155.661479][ T7882] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1155.661506][ T7882] ? unwind_get_return_address+0x4d/0x90 [ 1155.661535][ T7882] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1155.661560][ T7882] ? __get_vm_area_node+0x155/0x2f0 [ 1155.661581][ T7882] ? __get_vm_area_node+0x155/0x2f0 [ 1155.661610][ T7882] __get_vm_area_node+0x155/0x2f0 [ 1155.661639][ T7882] __vmalloc_node_range_noprof+0x343/0x1540 [ 1155.661666][ T7882] ? bpf_prog_calc_tag+0x51/0x370 [ 1155.661697][ T7882] ? __x64_sys_bpf+0xba/0xd0 [ 1155.661721][ T7882] ? do_syscall_64+0x166/0x520 [ 1155.661753][ T7882] ? __kasan_kmalloc+0x93/0xb0 [ 1155.661787][ T7882] ? bpf_prog_load+0x14d6/0x1c20 [ 1155.661815][ T7882] ? __sys_bpf+0xd0d/0xd90 [ 1155.661840][ T7882] ? __x64_sys_bpf+0xba/0xd0 [ 1155.661879][ T7882] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1155.661916][ T7882] ? bpf_prog_calc_tag+0x51/0x370 [ 1155.661944][ T7882] __vmalloc_noprof+0xd2/0x120 [ 1155.661969][ T7882] ? bpf_prog_calc_tag+0x51/0x370 [ 1155.662001][ T7882] bpf_prog_calc_tag+0x51/0x370 [ 1155.662030][ T7882] ? __pfx_cmp_subprogs+0x10/0x10 [ 1155.662064][ T7882] check_and_resolve_insns+0xbb/0x21d0 [ 1155.662100][ T7882] ? add_subprog+0x2e2/0x3f0 [ 1155.662133][ T7882] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1155.662175][ T7882] bpf_check+0x18f7/0x2ef0 [ 1155.662223][ T7882] ? __pfx_bpf_check+0x10/0x10 [ 1155.662254][ T7882] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1155.662295][ T7882] bpf_prog_load+0x14d6/0x1c20 [ 1155.662345][ T7882] ? __pfx_bpf_prog_load+0x10/0x10 [ 1155.662402][ T7882] __sys_bpf+0xd0d/0xd90 [ 1155.662439][ T7882] ? __pfx___sys_bpf+0x10/0x10 [ 1155.662481][ T7882] ? __fget_files+0x2a/0x420 [ 1155.662524][ T7882] ? ksys_write+0x242/0x270 [ 1155.662551][ T7882] ? __pfx_ksys_write+0x10/0x10 [ 1155.662581][ T7882] __x64_sys_bpf+0xba/0xd0 [ 1155.662611][ T7882] do_syscall_64+0x166/0x520 [ 1155.662636][ T7882] ? trace_irq_disable+0x3b/0x140 [ 1155.662661][ T7882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.662686][ T7882] ? clear_bhb_loop+0x70/0xc0 [ 1155.662714][ T7882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.662737][ T7882] RIP: 0033:0x7fbfe4f9e1d9 [ 1155.662759][ T7882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.662780][ T7882] RSP: 002b:00007fbfe31f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1155.662805][ T7882] RAX: ffffffffffffffda RBX: 00007fbfe5225fa0 RCX: 00007fbfe4f9e1d9 [ 1155.662823][ T7882] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1155.662838][ T7882] RBP: 00007fbfe31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.662853][ T7882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1155.662867][ T7882] R13: 00007fbfe5226038 R14: 00007fbfe5225fa0 R15: 00007ffe58fdb488 [ 1155.662904][ T7882] [ 1155.761989][ T7882] warn_alloc: 2 callbacks suppressed [ 1155.762049][ T7882] syz.3.11991: vmalloc error: size 32, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1155.762214][ T7882] CPU: 1 UID: 0 PID: 7882 Comm: syz.3.11991 Not tainted syzkaller #0 PREEMPT(full) [ 1155.762239][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1155.762254][ T7882] Call Trace: [ 1155.762269][ T7882] [ 1155.762278][ T7882] dump_stack_lvl+0xe8/0x150 [ 1155.762325][ T7882] warn_alloc+0x24d/0x270 [ 1155.762361][ T7882] ? __kasan_kmalloc+0x22/0xb0 [ 1155.762494][ T7882] ? __pfx_warn_alloc+0x10/0x10 [ 1155.762564][ T7882] ? __get_vm_area_node+0x155/0x2f0 [ 1155.762647][ T7882] ? __get_vm_area_node+0x2a9/0x2f0 [ 1155.762729][ T7882] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1155.762794][ T7882] ? __x64_sys_bpf+0xba/0xd0 [ 1155.762844][ T7882] ? do_syscall_64+0x166/0x520 [ 1155.762934][ T7882] ? __kasan_kmalloc+0x93/0xb0 [ 1155.763011][ T7882] ? bpf_prog_load+0x14d6/0x1c20 [ 1155.763082][ T7882] ? __sys_bpf+0xd0d/0xd90 [ 1155.763146][ T7882] ? __x64_sys_bpf+0xba/0xd0 [ 1155.763249][ T7882] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1155.763347][ T7882] ? bpf_prog_calc_tag+0x51/0x370 [ 1155.763423][ T7882] __vmalloc_noprof+0xd2/0x120 [ 1155.763501][ T7882] ? bpf_prog_calc_tag+0x51/0x370 [ 1155.763578][ T7882] bpf_prog_calc_tag+0x51/0x370 [ 1155.763675][ T7882] ? __pfx_cmp_subprogs+0x10/0x10 [ 1155.763756][ T7882] check_and_resolve_insns+0xbb/0x21d0 [ 1155.763858][ T7882] ? add_subprog+0x2e2/0x3f0 [ 1155.763963][ T7882] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1155.764069][ T7882] bpf_check+0x18f7/0x2ef0 [ 1155.764198][ T7882] ? __pfx_bpf_check+0x10/0x10 [ 1155.764274][ T7882] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1155.764384][ T7882] bpf_prog_load+0x14d6/0x1c20 [ 1155.764497][ T7882] ? __pfx_bpf_prog_load+0x10/0x10 [ 1155.764649][ T7882] __sys_bpf+0xd0d/0xd90 [ 1155.764745][ T7882] ? __pfx___sys_bpf+0x10/0x10 [ 1155.764836][ T7882] ? __fget_files+0x2a/0x420 [ 1155.764951][ T7882] ? ksys_write+0x242/0x270 [ 1155.765017][ T7882] ? __pfx_ksys_write+0x10/0x10 [ 1155.765091][ T7882] __x64_sys_bpf+0xba/0xd0 [ 1155.765173][ T7882] do_syscall_64+0x166/0x520 [ 1155.765250][ T7882] ? trace_irq_disable+0x3b/0x140 [ 1155.765336][ T7882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.765399][ T7882] ? clear_bhb_loop+0x70/0xc0 [ 1155.765492][ T7882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.765555][ T7882] RIP: 0033:0x7fbfe4f9e1d9 [ 1155.765601][ T7882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.765653][ T7882] RSP: 002b:00007fbfe31f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1155.765716][ T7882] RAX: ffffffffffffffda RBX: 00007fbfe5225fa0 RCX: 00007fbfe4f9e1d9 [ 1155.765760][ T7882] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1155.765804][ T7882] RBP: 00007fbfe31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.765839][ T7882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1155.765879][ T7882] R13: 00007fbfe5226038 R14: 00007fbfe5225fa0 R15: 00007ffe58fdb488 [ 1155.765972][ T7882] [ 1155.911399][ T7882] Mem-Info: [ 1155.911450][ T7882] active_anon:9191 inactive_anon:0 isolated_anon:0 [ 1155.911450][ T7882] active_file:0 inactive_file:44472 isolated_file:0 [ 1155.911450][ T7882] unevictable:0 dirty:109 writeback:0 [ 1155.911450][ T7882] slab_reclaimable:13211 slab_unreclaimable:128070 [ 1155.911450][ T7882] mapped:40394 shmem:523 pagetables:5830 [ 1155.911450][ T7882] sec_pagetables:0 bounce:0 [ 1155.911450][ T7882] kernel_misc_reclaimable:0 [ 1155.911450][ T7882] free:1252954 free_pcp:10396 free_cma:0 [ 1155.911605][ T7882] Node 0 active_anon:36764kB inactive_anon:0kB active_file:0kB inactive_file:177688kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:161576kB dirty:436kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17308kB pagetables:23176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1155.911844][ T7882] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1155.912002][ T7882] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1155.912223][ T7882] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 1155.912337][ T7882] Node 0 DMA32 free:1071716kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36764kB inactive_anon:0kB active_file:0kB inactive_file:177688kB unevictable:0kB writepending:436kB zspages:0kB present:3129332kB managed:2527516kB mlocked:0kB bounce:0kB free_pcp:40832kB local_pcp:20680kB free_cma:0kB [ 1155.912516][ T7882] lowmem_reserve[]: 0 0 0 0 0 [ 1155.912619][ T7882] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1155.912773][ T7882] lowmem_reserve[]: 0 0 0 0 0 [ 1155.959052][ T7882] Node 1 Normal free:3924940kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:0kB free_cma:0kB [ 1155.959234][ T7882] lowmem_reserve[]: 0 0 0 0 0 [ 1155.959341][ T7882] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1155.959721][ T7882] Node 0 DMA32: 1401*4kB (UME) 1360*8kB (UME) 1586*16kB (UME) 639*32kB (UME) 944*64kB (UM) 804*128kB (UME) 497*256kB (UM) 158*512kB (UME) 29*1024kB (UM) 9*2048kB (UME) 144*4096kB (UM) = 1071716kB [ 1155.960442][ T7882] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1155.963536][ T7882] Node 1 Normal: 2*4kB (M) 1*8kB (M) 1*16kB (M) 1*32kB (M) 1*64kB (M) 3*128kB (UM) 2*256kB (M) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 957*4096kB (M) = 3924992kB [ 1155.963987][ T7882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1155.964041][ T7882] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1156.029408][ T7882] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1156.029484][ T7882] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1156.029529][ T7882] 44991 total pagecache pages [ 1156.029559][ T7882] 0 pages in swap cache [ 1156.029580][ T7882] Free swap = 124996kB [ 1156.029601][ T7882] Total swap = 124996kB [ 1156.029632][ T7882] 2097051 pages RAM [ 1156.029653][ T7882] 0 pages HighMem/MovableOnly [ 1156.029675][ T7882] 433556 pages reserved [ 1156.029697][ T7882] 0 pages cma reserved [ 1157.001778][ T7899] __nla_validate_parse: 2 callbacks suppressed [ 1157.001800][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11999'. [ 1157.322893][ T7918] wg0 speed is unknown, defaulting to 1000 [ 1157.322960][ T7918] wg0 speed is unknown, defaulting to 1000 [ 1157.323795][ T7918] wg0 speed is unknown, defaulting to 1000 [ 1157.343788][ T7918] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1157.343828][ T7918] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1157.343869][ T7918] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1157.356727][ T7922] netlink: 'syz.6.12010': attribute type 1 has an invalid length. [ 1157.423495][ T7918] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1157.479372][ T7932] netlink: 'syz.6.12010': attribute type 10 has an invalid length. [ 1157.479400][ T7932] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12010'. [ 1157.562863][ T7922] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1157.567679][ T7928] dummy0: left promiscuous mode [ 1157.607440][ T7928] bond5: (slave dummy0): making interface the new active one [ 1157.611862][ T7928] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1157.612075][ T7932] dummy0: entered promiscuous mode [ 1157.640098][ T7932] bond5: (slave dummy0): Releasing active interface [ 1157.681417][ T7918] wg0 speed is unknown, defaulting to 1000 [ 1157.690930][ T7939] netlink: 68 bytes leftover after parsing attributes in process `syz.5.12013'. [ 1157.690953][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12013'. [ 1157.733684][ T7918] wg0 speed is unknown, defaulting to 1000 [ 1157.769894][ T7918] wg0 speed is unknown, defaulting to 1000 [ 1157.782047][ T7918] wg0 speed is unknown, defaulting to 1000 [ 1157.797462][ T7918] wg0 speed is unknown, defaulting to 1000 [ 1157.808802][ T7918] wg0 speed is unknown, defaulting to 1000 [ 1157.811479][ T7918] wg0 speed is unknown, defaulting to 1000 [ 1157.840998][ T7918] wg0 speed is unknown, defaulting to 1000 [ 1157.851925][ T7918] wg0 speed is unknown, defaulting to 1000 [ 1157.869974][ T7918] wg0 speed is unknown, defaulting to 1000 [ 1158.259995][ T7973] netlink: 'syz.2.12025': attribute type 1 has an invalid length. [ 1158.260022][ T7973] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12025'. [ 1158.621366][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12031'. [ 1158.831633][ T5630] Bluetooth: hci6: command 0x0406 tx timeout [ 1159.122292][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12037'. [ 1159.325129][ T8030] FAULT_INJECTION: forcing a failure. [ 1159.325129][ T8030] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.325165][ T8030] CPU: 0 UID: 0 PID: 8030 Comm: syz.6.12045 Not tainted syzkaller #0 PREEMPT(full) [ 1159.325191][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1159.325206][ T8030] Call Trace: [ 1159.325216][ T8030] [ 1159.325227][ T8030] dump_stack_lvl+0xe8/0x150 [ 1159.325266][ T8030] should_fail_ex+0x410/0x560 [ 1159.325301][ T8030] should_failslab+0xa8/0x100 [ 1159.325336][ T8030] __kvmalloc_node_noprof+0x176/0x820 [ 1159.325367][ T8030] ? rcu_is_watching+0x16/0xb0 [ 1159.325406][ T8030] ? analyze_subprog+0x4a5a/0x9e00 [ 1159.325434][ T8030] ? analyze_subprog+0x4a5a/0x9e00 [ 1159.325470][ T8030] analyze_subprog+0x4a5a/0x9e00 [ 1159.325499][ T8030] ? __uprobe_trace_func+0xf/0x3f0 [ 1159.325582][ T8030] ? __pfx_analyze_subprog+0x10/0x10 [ 1159.325609][ T8030] ? __x64_sys_bpf+0xba/0xd0 [ 1159.325632][ T8030] ? put_net+0x205/0x260 [ 1159.325656][ T8030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.325722][ T8030] ? call_instance+0x263/0x560 [ 1159.325750][ T8030] ? rcu_is_watching+0x16/0xb0 [ 1159.325778][ T8030] ? call_instance+0x263/0x560 [ 1159.325803][ T8030] ? trace_kmalloc+0x2a/0xf0 [ 1159.325830][ T8030] ? call_instance+0x263/0x560 [ 1159.325856][ T8030] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1159.325886][ T8030] ? __kvmalloc_node_noprof+0x345/0x820 [ 1159.325915][ T8030] ? call_instance+0x263/0x560 [ 1159.325941][ T8030] ? call_instance+0x263/0x560 [ 1159.325988][ T8030] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 1159.326019][ T8030] ? btf_type_by_id+0xe6/0x180 [ 1159.326070][ T8030] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1159.326107][ T8030] ? __kvmalloc_node_noprof+0x345/0x820 [ 1159.326135][ T8030] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1159.326164][ T8030] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1159.326202][ T8030] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1159.326252][ T8030] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1159.326297][ T8030] bpf_check+0x2744/0x2ef0 [ 1159.326345][ T8030] ? __pfx_bpf_check+0x10/0x10 [ 1159.326376][ T8030] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1159.326426][ T8030] bpf_prog_load+0x14d6/0x1c20 [ 1159.326470][ T8030] ? __pfx_bpf_prog_load+0x10/0x10 [ 1159.326528][ T8030] __sys_bpf+0xd0d/0xd90 [ 1159.326566][ T8030] ? __pfx___sys_bpf+0x10/0x10 [ 1159.326607][ T8030] ? __fget_files+0x2a/0x420 [ 1159.326649][ T8030] ? ksys_write+0x242/0x270 [ 1159.326676][ T8030] ? __pfx_ksys_write+0x10/0x10 [ 1159.326707][ T8030] __x64_sys_bpf+0xba/0xd0 [ 1159.326735][ T8030] do_syscall_64+0x166/0x520 [ 1159.326759][ T8030] ? trace_irq_disable+0x3b/0x140 [ 1159.326784][ T8030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.326808][ T8030] ? clear_bhb_loop+0x70/0xc0 [ 1159.326837][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.326860][ T8030] RIP: 0033:0x7faad259e1d9 [ 1159.326882][ T8030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1159.326904][ T8030] RSP: 002b:00007faad341b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1159.326929][ T8030] RAX: ffffffffffffffda RBX: 00007faad2825fa0 RCX: 00007faad259e1d9 [ 1159.326947][ T8030] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1159.326963][ T8030] RBP: 00007faad341b090 R08: 0000000000000000 R09: 0000000000000000 [ 1159.326979][ T8030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1159.326993][ T8030] R13: 00007faad2826038 R14: 00007faad2825fa0 R15: 00007ffcd44e6508 [ 1159.327031][ T8030] [ 1159.781564][ T8037] netlink: 'syz.6.12048': attribute type 1 has an invalid length. [ 1159.841039][ T8037] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1159.867581][ T8039] dummy0: left promiscuous mode [ 1159.902209][ T8039] bond6: (slave dummy0): making interface the new active one [ 1159.903131][ T8039] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1159.939159][ T8037] netlink: 'syz.6.12048': attribute type 10 has an invalid length. [ 1159.939184][ T8037] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12048'. [ 1159.941538][ T8037] dummy0: entered promiscuous mode [ 1159.968784][ T8037] bond6: (slave dummy0): Releasing active interface [ 1160.086500][ T8042] tc action pedit offset must be on 32 bit boundaries [ 1160.229423][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12053'. [ 1160.266537][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12053'. [ 1160.736391][ T8087] veth0_to_bond: default FDB implementation only supports local addresses [ 1160.757230][ T8087] veth0_to_bond: default FDB implementation only supports local addresses [ 1160.855540][ T8091] bridge0: port 11(batadv9) entered blocking state [ 1160.857449][ T8091] bridge0: port 11(batadv9) entered disabled state [ 1160.857628][ T8091] batadv9: entered allmulticast mode [ 1160.888683][ T8091] batadv9: entered promiscuous mode [ 1161.326096][ T4569] batman_adv: batadv9: No IGMP Querier present - multicast optimizations disabled [ 1161.326120][ T4569] batman_adv: batadv9: No MLD Querier present - multicast optimizations disabled [ 1161.398682][ T8126] openvswitch: netlink: nsh attr 94 is out of range max 3 [ 1161.769807][ T5282] veth1_vlan: left promiscuous mode [ 1161.845889][ T8151] bridge0: port 12(batadv10) entered blocking state [ 1161.847617][ T8151] bridge0: port 12(batadv10) entered disabled state [ 1161.847783][ T8151] batadv10: entered allmulticast mode [ 1161.880500][ T8151] batadv10: entered promiscuous mode [ 1161.954910][ T8155] FAULT_INJECTION: forcing a failure. [ 1161.954910][ T8155] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.954948][ T8155] CPU: 1 UID: 0 PID: 8155 Comm: syz.6.12081 Not tainted syzkaller #0 PREEMPT(full) [ 1161.954979][ T8155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1161.954994][ T8155] Call Trace: [ 1161.955004][ T8155] [ 1161.955014][ T8155] dump_stack_lvl+0xe8/0x150 [ 1161.955070][ T8155] should_fail_ex+0x410/0x560 [ 1161.955108][ T8155] should_failslab+0xa8/0x100 [ 1161.955143][ T8155] __kmalloc_cache_noprof+0xa3/0x600 [ 1161.955173][ T8155] ? bpf_diag_init+0x87/0x140 [ 1161.955202][ T8155] ? bpf_diag_init+0x87/0x140 [ 1161.955240][ T8155] bpf_diag_init+0x87/0x140 [ 1161.955272][ T8155] bpf_check+0x5dc/0x2ef0 [ 1161.955319][ T8155] ? __pfx_bpf_check+0x10/0x10 [ 1161.955349][ T8155] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1161.955389][ T8155] bpf_prog_load+0x14d6/0x1c20 [ 1161.955432][ T8155] ? __pfx_bpf_prog_load+0x10/0x10 [ 1161.955489][ T8155] __sys_bpf+0xd0d/0xd90 [ 1161.955527][ T8155] ? __pfx___sys_bpf+0x10/0x10 [ 1161.955567][ T8155] ? __fget_files+0x2a/0x420 [ 1161.955618][ T8155] ? ksys_write+0x242/0x270 [ 1161.955646][ T8155] ? __pfx_ksys_write+0x10/0x10 [ 1161.955677][ T8155] __x64_sys_bpf+0xba/0xd0 [ 1161.955705][ T8155] do_syscall_64+0x166/0x520 [ 1161.955731][ T8155] ? trace_irq_disable+0x3b/0x140 [ 1161.955756][ T8155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.955780][ T8155] ? clear_bhb_loop+0x70/0xc0 [ 1161.955809][ T8155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.955832][ T8155] RIP: 0033:0x7faad259e1d9 [ 1161.955854][ T8155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.955877][ T8155] RSP: 002b:00007faad341b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1161.955902][ T8155] RAX: ffffffffffffffda RBX: 00007faad2825fa0 RCX: 00007faad259e1d9 [ 1161.955920][ T8155] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1161.955935][ T8155] RBP: 00007faad341b090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.955951][ T8155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1161.955965][ T8155] R13: 00007faad2826038 R14: 00007faad2825fa0 R15: 00007ffcd44e6508 [ 1161.956001][ T8155] [ 1162.253075][ T8157] __nla_validate_parse: 40 callbacks suppressed [ 1162.253101][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12082'. [ 1162.253132][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12082'. [ 1162.336834][ T4584] batman_adv: batadv10: No IGMP Querier present - multicast optimizations disabled [ 1162.336857][ T4584] batman_adv: batadv10: No MLD Querier present - multicast optimizations disabled [ 1162.379914][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12085'. [ 1162.504988][ T5630] Bluetooth: hci0: command 0x0c13 tx timeout [ 1162.505977][T26543] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 1162.540525][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12086'. [ 1162.540551][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12086'. [ 1162.568856][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12086'. [ 1162.568883][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12086'. [ 1162.587393][ T4584] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1162.589311][ T4569] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1162.589434][ T4569] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1162.589625][ T4569] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1162.626899][ T8169] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12087'. [ 1162.657106][ T8170] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12087'. [ 1162.659614][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12087'. [ 1162.973368][ T8187] bridge0: port 6(batadv4) entered blocking state [ 1162.973511][ T8187] bridge0: port 6(batadv4) entered disabled state [ 1162.973616][ T8187] batadv4: entered allmulticast mode [ 1162.997637][ T8187] batadv4: entered promiscuous mode [ 1163.474841][ T4569] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 1163.474863][ T4569] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 1164.135886][ T8111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1164.238478][ T8198] netlink: 'syz.5.12095': attribute type 1 has an invalid length. [ 1164.275933][ T8198] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1164.370576][ T8198] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.373342][ T8198] bond6: (slave team0): Enslaving as a backup interface with a down link [ 1164.571632][ T8212] netlink: 'syz.2.12096': attribute type 1 has an invalid length. [ 1164.668569][ T8212] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1164.713347][ T8212] netlink: 'syz.2.12096': attribute type 10 has an invalid length. [ 1164.796430][ T8210] syzkaller0: entered promiscuous mode [ 1164.796458][ T8210] syzkaller0: entered allmulticast mode [ 1164.799351][ T8219] dummy0: left promiscuous mode [ 1164.827733][ T8219] bond13: (slave dummy0): making interface the new active one [ 1164.830526][ T8219] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 1167.377809][ T8212] dummy0: entered promiscuous mode [ 1167.379452][ T8212] bond13: (slave dummy0): Releasing active interface [ 1167.638619][ T8241] __nla_validate_parse: 2 callbacks suppressed [ 1167.638643][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12104'. [ 1167.685575][ T8241] xfrm0: entered promiscuous mode [ 1167.685599][ T8241] xfrm0: entered allmulticast mode [ 1167.690669][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12104'. [ 1168.096333][ T8267] netlink: 'syz.4.12114': attribute type 16 has an invalid length. [ 1168.096357][ T8267] netlink: 'syz.4.12114': attribute type 17 has an invalid length. [ 1168.099009][ T8271] netlink: 'syz.4.12114': attribute type 16 has an invalid length. [ 1168.099031][ T8271] netlink: 'syz.4.12114': attribute type 17 has an invalid length. [ 1168.191617][ T8267] dummy0: left promiscuous mode [ 1168.273364][ T8267] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1168.280013][ T8267] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1168.363953][ T8267] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1168.498228][ T8266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.691492][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12119'. [ 1168.758697][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.758911][ T8271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.848433][ T8271] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1168.848753][ T8272] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 1168.848936][ T8273] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 1169.093221][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12119'. [ 1169.093357][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12119'. [ 1169.093476][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12119'. [ 1169.093586][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12119'. [ 1169.095695][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12119'. [ 1169.096012][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12119'. [ 1169.096356][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12119'. [ 1169.338947][ T8306] Unknown options in mask 4 [ 1169.632456][ T8316] can: request_module (can-proto-0) failed. [ 1170.613451][ T8364] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1170.629396][ T8364] bond3 (unregistering): Released all slaves [ 1170.719454][ T8373] netlink: 'syz.3.12147': attribute type 21 has an invalid length. [ 1170.719698][ T8375] netlink: 'syz.3.12147': attribute type 21 has an invalid length. [ 1170.939944][ T8390] netlink: NAT attribute has 8 unknown bytes [ 1170.939986][ T8390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1171.041811][ T8388] bond7: option mode: invalid value (11) [ 1171.056616][ T8388] bond7 (unregistering): Released all slaves [ 1171.362276][ T8408] netlink: 'syz.4.12161': attribute type 1 has an invalid length. [ 1171.424942][ T8408] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1171.471229][ T8408] bond2: (slave team0): Releasing backup interface [ 1171.502463][ T8408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1171.519821][ T8408] bond6: (slave team0): Enslaving as a backup interface with a down link [ 1171.899063][ T8435] xt_IDLETIMER: timeout value is zero [ 1172.770268][ T8491] mac80211_hwsim hwsim86 syzkaller0: entered promiscuous mode [ 1172.770297][ T8491] mac80211_hwsim hwsim86 syzkaller0: entered allmulticast mode [ 1173.072593][ T8508] __nla_validate_parse: 66 callbacks suppressed [ 1173.072618][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12201'. [ 1173.233391][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12205'. [ 1173.258147][ T8519] netlink: 'syz.3.12205': attribute type 16 has an invalid length. [ 1173.391899][ T8527] FAULT_INJECTION: forcing a failure. [ 1173.391899][ T8527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1173.391936][ T8527] CPU: 1 UID: 0 PID: 8527 Comm: syz.3.12209 Not tainted syzkaller #0 PREEMPT(full) [ 1173.391960][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1173.391975][ T8527] Call Trace: [ 1173.391985][ T8527] [ 1173.391995][ T8527] dump_stack_lvl+0xe8/0x150 [ 1173.392034][ T8527] should_fail_ex+0x410/0x560 [ 1173.392071][ T8527] _copy_from_iter+0x1d3/0x1660 [ 1173.392104][ T8527] ? __alloc_skb+0x27a/0x7a0 [ 1173.392140][ T8527] ? __alloc_skb+0x27a/0x7a0 [ 1173.392175][ T8527] ? __alloc_skb+0x27a/0x7a0 [ 1173.392220][ T8527] ? __pfx__copy_from_iter+0x10/0x10 [ 1173.392249][ T8527] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1173.392273][ T8527] ? __alloc_skb+0x27a/0x7a0 [ 1173.392304][ T8527] ? __alloc_skb+0x27a/0x7a0 [ 1173.392343][ T8527] ? netlink_sendmsg+0x650/0xb40 [ 1173.392371][ T8527] ? skb_put+0x112/0x210 [ 1173.392394][ T8527] netlink_sendmsg+0x6c0/0xb40 [ 1173.392432][ T8527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1173.392469][ T8527] ? apparmor_socket_sendmsg+0x98/0x360 [ 1173.392501][ T8527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1173.392536][ T8527] sock_sendmsg_nosec+0x13a/0x180 [ 1173.392569][ T8527] ____sys_sendmsg+0x54e/0x850 [ 1173.392599][ T8527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1173.392632][ T8527] ? import_iovec+0x73/0xa0 [ 1173.392668][ T8527] ___sys_sendmsg+0x2a5/0x360 [ 1173.392690][ T8527] ? __lock_acquire+0x747/0x2de0 [ 1173.392720][ T8527] ? __pfx____sys_sendmsg+0x10/0x10 [ 1173.392780][ T8527] ? __fget_files+0x2a/0x420 [ 1173.392801][ T8527] ? __fget_files+0x3a2/0x420 [ 1173.392833][ T8527] __x64_sys_sendmsg+0x1b1/0x290 [ 1173.392860][ T8527] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1173.392907][ T8527] do_syscall_64+0x166/0x520 [ 1173.392936][ T8527] ? trace_irq_disable+0x3b/0x140 [ 1173.392960][ T8527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.392983][ T8527] ? clear_bhb_loop+0x70/0xc0 [ 1173.393010][ T8527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.393032][ T8527] RIP: 0033:0x7fbfe4f9e1d9 [ 1173.393053][ T8527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1173.393072][ T8527] RSP: 002b:00007fbfe31f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1173.393096][ T8527] RAX: ffffffffffffffda RBX: 00007fbfe5225fa0 RCX: 00007fbfe4f9e1d9 [ 1173.393112][ T8527] RDX: 0000000000040000 RSI: 0000200000004140 RDI: 0000000000000003 [ 1173.393128][ T8527] RBP: 00007fbfe31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.393142][ T8527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.393155][ T8527] R13: 00007fbfe5226038 R14: 00007fbfe5225fa0 R15: 00007ffe58fdb488 [ 1173.393190][ T8527] [ 1173.739368][ T8534] netlink: 'syz.6.12211': attribute type 1 has an invalid length. [ 1173.845785][ T8534] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1173.876582][ T8541] bond3: (slave team0): Releasing backup interface [ 1173.900621][ T8541] 8021q: adding VLAN 0 to HW filter on device team0 [ 1173.921666][ T8541] bond7: (slave team0): Enslaving as a backup interface with a down link [ 1173.980674][ T8553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12217'. [ 1173.998625][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12216'. [ 1174.003225][ T8557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12216'. [ 1174.039243][ T8552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.058616][ T8553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12217'. [ 1174.058651][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12217'. [ 1174.097652][ T8549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12216'. [ 1174.226182][ T8553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12217'. [ 1174.226215][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12217'. [ 1174.436315][ T8580] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1175.144279][ T5630] Bluetooth: hci0: command 0x0c13 tx timeout [ 1175.144345][T26543] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 1175.562442][ T8621] FAULT_INJECTION: forcing a failure. [ 1175.562442][ T8621] name failslab, interval 1, probability 0, space 0, times 0 [ 1175.562496][ T8621] CPU: 0 UID: 0 PID: 8621 Comm: syz.3.12234 Not tainted syzkaller #0 PREEMPT(full) [ 1175.562522][ T8621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1175.562536][ T8621] Call Trace: [ 1175.562546][ T8621] [ 1175.562556][ T8621] dump_stack_lvl+0xe8/0x150 [ 1175.562595][ T8621] should_fail_ex+0x410/0x560 [ 1175.562633][ T8621] should_failslab+0xa8/0x100 [ 1175.562667][ T8621] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 1175.562696][ T8621] ? btf_param_match_suffix+0x1be/0x250 [ 1175.562724][ T8621] ? bpf_add_kfunc_call+0x9ca/0xdc0 [ 1175.562747][ T8621] ? bpf_add_kfunc_call+0x9ca/0xdc0 [ 1175.562775][ T8621] ? bpf_add_kfunc_call+0x9ca/0xdc0 [ 1175.562800][ T8621] krealloc_node_align_noprof+0x19a/0x390 [ 1175.562834][ T8621] ? __pfx_bpf_list_add+0x10/0x10 [ 1175.562868][ T8621] bpf_add_kfunc_call+0x9ca/0xdc0 [ 1175.562893][ T8621] ? kasan_save_track+0x4f/0x80 [ 1175.562930][ T8621] ? __pfx_bpf_add_kfunc_call+0x10/0x10 [ 1175.563006][ T8621] ? bpf_prog_calc_tag+0x310/0x370 [ 1175.563035][ T8621] ? vfree+0x42b/0x490 [ 1175.563081][ T8621] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1175.563114][ T8621] add_kfuncs+0x176/0x2e0 [ 1175.563147][ T8621] bpf_check+0x191d/0x2ef0 [ 1175.563202][ T8621] ? __pfx_bpf_check+0x10/0x10 [ 1175.563233][ T8621] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1175.563277][ T8621] bpf_prog_load+0x14d6/0x1c20 [ 1175.563319][ T8621] ? __pfx_bpf_prog_load+0x10/0x10 [ 1175.563376][ T8621] __sys_bpf+0xd0d/0xd90 [ 1175.563414][ T8621] ? __pfx___sys_bpf+0x10/0x10 [ 1175.563455][ T8621] ? __fget_files+0x2a/0x420 [ 1175.563496][ T8621] ? ksys_write+0x242/0x270 [ 1175.563523][ T8621] ? __pfx_ksys_write+0x10/0x10 [ 1175.563553][ T8621] __x64_sys_bpf+0xba/0xd0 [ 1175.563582][ T8621] do_syscall_64+0x166/0x520 [ 1175.563609][ T8621] ? trace_irq_disable+0x3b/0x140 [ 1175.563634][ T8621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.563670][ T8621] ? clear_bhb_loop+0x70/0xc0 [ 1175.563698][ T8621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.563721][ T8621] RIP: 0033:0x7fbfe4f9e1d9 [ 1175.563741][ T8621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1175.563761][ T8621] RSP: 002b:00007fbfe31f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1175.563786][ T8621] RAX: ffffffffffffffda RBX: 00007fbfe5225fa0 RCX: 00007fbfe4f9e1d9 [ 1175.563802][ T8621] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1175.563817][ T8621] RBP: 00007fbfe31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1175.563832][ T8621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1175.563846][ T8621] R13: 00007fbfe5226038 R14: 00007fbfe5225fa0 R15: 00007ffe58fdb488 [ 1175.563882][ T8621] [ 1176.155476][ T8636] rdma_rxe: rxe_newlink: failed to add lo [ 1176.202471][ T8641] netlink: 'syz.2.12243': attribute type 1 has an invalid length. [ 1176.303181][ T8641] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1176.323484][ T8647] bond11: (slave team0): Releasing backup interface [ 1176.363359][ T8647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.381476][ T8647] bond14: (slave team0): Enslaving as a backup interface with a down link [ 1176.653654][ T8667] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1176.811835][ T8673] v: renamed from veth0_vlan (while UP) [ 1177.028655][ T8682] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1177.191592][ T8697] netlink: 'syz.5.12260': attribute type 1 has an invalid length. [ 1177.291807][ T8697] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1177.304406][ T5630] Bluetooth: hci0: command 0x0c13 tx timeout [ 1177.304467][T26543] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 1177.520527][ T8691] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1177.526322][ T8691] bond0: (slave bond15): Enslaving as an active interface with an up link [ 1177.547196][ T8699] bond6: (slave team0): Releasing backup interface [ 1177.590369][ T8699] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.619534][ T8699] bond7: (slave team0): Enslaving as a backup interface with a down link [ 1178.079829][ T8728] __nla_validate_parse: 8 callbacks suppressed [ 1178.079852][ T8728] netlink: 632 bytes leftover after parsing attributes in process `syz.6.12271'. [ 1178.306455][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12272'. [ 1178.309995][ T8736] netlink: 260 bytes leftover after parsing attributes in process `syz.4.12275'. [ 1178.352179][ T8739] bridge0: port 3(batadv1) entered blocking state [ 1178.354368][ T8739] bridge0: port 3(batadv1) entered disabled state [ 1178.354593][ T8739] batadv1: entered allmulticast mode [ 1178.357333][ T8739] batadv1: entered promiscuous mode [ 1178.422062][ T8742] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1178.641106][ T8749] tun0: tun_chr_ioctl cmd 1074025675 [ 1178.641130][ T8749] tun0: persist enabled [ 1178.732216][ T8756] netlink: 'syz.4.12280': attribute type 1 has an invalid length. [ 1178.816795][ T4587] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1178.816818][ T4587] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1178.880229][ T8756] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1178.936226][ T8762] bond6: (slave team0): Releasing backup interface [ 1178.983947][ T8762] 8021q: adding VLAN 0 to HW filter on device team0 [ 1179.042727][ T8762] bond7: (slave team0): Enslaving as a backup interface with a down link [ 1179.219945][ T8784] netlink: 'syz.3.12286': attribute type 1 has an invalid length. [ 1179.327057][ T8789] netlink: 'syz.3.12286': attribute type 10 has an invalid length. [ 1179.327082][ T8789] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12286'. [ 1179.357709][ T8788] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.12288'. [ 1179.431707][ T8796] FAULT_INJECTION: forcing a failure. [ 1179.431707][ T8796] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.431739][ T8796] CPU: 1 UID: 0 PID: 8796 Comm: syz.6.12291 Not tainted syzkaller #0 PREEMPT(full) [ 1179.431761][ T8796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1179.431773][ T8796] Call Trace: [ 1179.431781][ T8796] [ 1179.431790][ T8796] dump_stack_lvl+0xe8/0x150 [ 1179.431832][ T8796] should_fail_ex+0x410/0x560 [ 1179.431865][ T8796] should_failslab+0xa8/0x100 [ 1179.431893][ T8796] __kvmalloc_node_noprof+0x176/0x820 [ 1179.431918][ T8796] ? bpf_compute_postorder+0x83/0x970 [ 1179.431938][ T8796] ? bpf_compute_postorder+0x83/0x970 [ 1179.431965][ T8796] bpf_compute_postorder+0x83/0x970 [ 1179.431986][ T8796] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1179.432013][ T8796] ? add_kfuncs+0x251/0x2e0 [ 1179.432039][ T8796] bpf_check+0x261d/0x2ef0 [ 1179.432078][ T8796] ? __pfx_bpf_check+0x10/0x10 [ 1179.432105][ T8796] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1179.432139][ T8796] bpf_prog_load+0x14d6/0x1c20 [ 1179.432175][ T8796] ? __pfx_bpf_prog_load+0x10/0x10 [ 1179.432225][ T8796] __sys_bpf+0xd0d/0xd90 [ 1179.432255][ T8796] ? __pfx___sys_bpf+0x10/0x10 [ 1179.432287][ T8796] ? __fget_files+0x2a/0x420 [ 1179.432375][ T8796] ? ksys_write+0x242/0x270 [ 1179.432399][ T8796] ? __pfx_ksys_write+0x10/0x10 [ 1179.432425][ T8796] __x64_sys_bpf+0xba/0xd0 [ 1179.432449][ T8796] do_syscall_64+0x166/0x520 [ 1179.432470][ T8796] ? trace_irq_disable+0x3b/0x140 [ 1179.432492][ T8796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.432512][ T8796] ? clear_bhb_loop+0x70/0xc0 [ 1179.432536][ T8796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.432558][ T8796] RIP: 0033:0x7faad259e1d9 [ 1179.432580][ T8796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.432599][ T8796] RSP: 002b:00007faad341b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1179.432620][ T8796] RAX: ffffffffffffffda RBX: 00007faad2825fa0 RCX: 00007faad259e1d9 [ 1179.432636][ T8796] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1179.432647][ T8796] RBP: 00007faad341b090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.432659][ T8796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1179.432670][ T8796] R13: 00007faad2826038 R14: 00007faad2825fa0 R15: 00007ffcd44e6508 [ 1179.432699][ T8796] [ 1179.561934][ T8784] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1179.698823][ T8786] dummy0: left promiscuous mode [ 1179.723720][ T8802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12289'. [ 1179.723745][ T8802] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1179.747765][ T8786] bond3: (slave dummy0): making interface the new active one [ 1179.751523][ T8786] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1179.753217][ T8803] FAULT_INJECTION: forcing a failure. [ 1179.753217][ T8803] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1179.753251][ T8803] CPU: 1 UID: 0 PID: 8803 Comm: syz.5.12290 Not tainted syzkaller #0 PREEMPT(full) [ 1179.753276][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1179.753291][ T8803] Call Trace: [ 1179.753301][ T8803] [ 1179.753311][ T8803] dump_stack_lvl+0xe8/0x150 [ 1179.753350][ T8803] should_fail_ex+0x410/0x560 [ 1179.753388][ T8803] prepare_alloc_pages+0x223/0x600 [ 1179.753424][ T8803] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1179.753459][ T8803] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1179.753487][ T8803] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 1179.753521][ T8803] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1179.753557][ T8803] ? __pfx_policy_nodemask+0x10/0x10 [ 1179.753587][ T8803] ? __get_vm_area_node+0x155/0x2f0 [ 1179.753608][ T8803] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 1179.753632][ T8803] ? __vmalloc_noprof+0xd2/0x120 [ 1179.753660][ T8803] __alloc_pages_noprof+0x10/0x100 [ 1179.753691][ T8803] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 1179.753740][ T8803] ? alloc_pages_noprof+0x140/0x2b0 [ 1179.753781][ T8803] __kasan_populate_vmalloc+0xb7/0x1c0 [ 1179.753816][ T8803] alloc_vmap_area+0xd1a/0x1420 [ 1179.753870][ T8803] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1179.753904][ T8803] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 1179.753946][ T8803] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 1179.753972][ T8803] ? __get_vm_area_node+0x155/0x2f0 [ 1179.754000][ T8803] __get_vm_area_node+0x200/0x2f0 [ 1179.754032][ T8803] __vmalloc_node_range_noprof+0x343/0x1540 [ 1179.754058][ T8803] ? bpf_prog_calc_tag+0x51/0x370 [ 1179.754091][ T8803] ? __x64_sys_bpf+0xba/0xd0 [ 1179.754113][ T8803] ? do_syscall_64+0x166/0x520 [ 1179.754144][ T8803] ? __kasan_kmalloc+0x93/0xb0 [ 1179.754173][ T8803] ? bpf_prog_load+0x14d6/0x1c20 [ 1179.754249][ T8803] ? __sys_bpf+0xd0d/0xd90 [ 1179.754317][ T8803] ? __x64_sys_bpf+0xba/0xd0 [ 1179.754424][ T8803] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1179.754526][ T8803] ? bpf_prog_calc_tag+0x51/0x370 [ 1179.754585][ T8803] __vmalloc_noprof+0xd2/0x120 [ 1179.754643][ T8803] ? bpf_prog_calc_tag+0x51/0x370 [ 1179.754741][ T8803] bpf_prog_calc_tag+0x51/0x370 [ 1179.754799][ T8803] ? __pfx_cmp_subprogs+0x10/0x10 [ 1179.754882][ T8803] check_and_resolve_insns+0xbb/0x21d0 [ 1179.754974][ T8803] ? add_subprog+0x2e2/0x3f0 [ 1179.755048][ T8803] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1179.755150][ T8803] bpf_check+0x18f7/0x2ef0 [ 1179.755252][ T8803] ? __pfx_bpf_check+0x10/0x10 [ 1179.755331][ T8803] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1179.755425][ T8803] bpf_prog_load+0x14d6/0x1c20 [ 1179.755536][ T8803] ? __pfx_bpf_prog_load+0x10/0x10 [ 1179.755687][ T8803] __sys_bpf+0xd0d/0xd90 [ 1179.755802][ T8803] ? __pfx___sys_bpf+0x10/0x10 [ 1179.755902][ T8803] ? __fget_files+0x2a/0x420 [ 1179.756007][ T8803] ? ksys_write+0x242/0x270 [ 1179.756080][ T8803] ? __pfx_ksys_write+0x10/0x10 [ 1179.756148][ T8803] __x64_sys_bpf+0xba/0xd0 [ 1179.756216][ T8803] do_syscall_64+0x166/0x520 [ 1179.756266][ T8803] ? trace_irq_disable+0x3b/0x140 [ 1179.756325][ T8803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.756376][ T8803] ? clear_bhb_loop+0x70/0xc0 [ 1179.756443][ T8803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.756493][ T8803] RIP: 0033:0x7f4b7399e1d9 [ 1179.756543][ T8803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.756607][ T8803] RSP: 002b:00007f4b747e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1179.756673][ T8803] RAX: ffffffffffffffda RBX: 00007f4b73c25fa0 RCX: 00007f4b7399e1d9 [ 1179.756720][ T8803] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 1179.756765][ T8803] RBP: 00007f4b747e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.756804][ T8803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1179.756837][ T8803] R13: 00007f4b73c26038 R14: 00007f4b73c25fa0 R15: 00007ffc69b848c8 [ 1179.756931][ T8803] [ 1179.801240][ T8789] dummy0: entered promiscuous mode [ 1179.861887][ T8803] syz.5.12290: vmalloc error: size 16, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1179.862075][ T8803] CPU: 1 UID: 0 PID: 8803 Comm: syz.5.12290 Not tainted syzkaller #0 PREEMPT(full) [ 1179.862139][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1179.862181][ T8803] Call Trace: [ 1179.862210][ T8803] [ 1179.862233][ T8803] dump_stack_lvl+0xe8/0x150 [ 1179.862345][ T8803] warn_alloc+0x24d/0x270 [ 1179.862426][ T8803] ? lockdep_hardirqs_on+0x7b/0x110 [ 1179.862501][ T8803] ? __pfx_warn_alloc+0x10/0x10 [ 1179.862565][ T8803] ? kfree+0x1c5/0x650 [ 1179.862650][ T8803] ? __get_vm_area_node+0x219/0x2f0 [ 1179.862726][ T8803] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1179.862800][ T8803] ? __x64_sys_bpf+0xba/0xd0 [ 1179.862856][ T8803] ? do_syscall_64+0x166/0x520 [ 1179.862938][ T8803] ? __kasan_kmalloc+0x93/0xb0 [ 1179.863013][ T8803] ? bpf_prog_load+0x14d6/0x1c20 [ 1179.863085][ T8803] ? __sys_bpf+0xd0d/0xd90 [ 1179.863150][ T8803] ? __x64_sys_bpf+0xba/0xd0 [ 1179.863256][ T8803] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1179.863351][ T8803] ? bpf_prog_calc_tag+0x51/0x370 [ 1179.863424][ T8803] __vmalloc_noprof+0xd2/0x120 [ 1179.863487][ T8803] ? bpf_prog_calc_tag+0x51/0x370 [ 1179.863572][ T8803] bpf_prog_calc_tag+0x51/0x370 [ 1179.863662][ T8803] ? __pfx_cmp_subprogs+0x10/0x10 [ 1179.863771][ T8803] check_and_resolve_insns+0xbb/0x21d0 [ 1179.863865][ T8803] ? add_subprog+0x2e2/0x3f0 [ 1179.863949][ T8803] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1179.864052][ T8803] bpf_check+0x18f7/0x2ef0 [ 1179.864179][ T8803] ? __pfx_bpf_check+0x10/0x10 [ 1179.864257][ T8803] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1179.864354][ T8803] bpf_prog_load+0x14d6/0x1c20 [ 1179.864462][ T8803] ? __pfx_bpf_prog_load+0x10/0x10 [ 1179.864612][ T8803] __sys_bpf+0xd0d/0xd90 [ 1179.864708][ T8803] ? __pfx___sys_bpf+0x10/0x10 [ 1179.864822][ T8803] ? __fget_files+0x2a/0x420 [ 1179.864930][ T8803] ? ksys_write+0x242/0x270 [ 1179.865003][ T8803] ? __pfx_ksys_write+0x10/0x10 [ 1179.865091][ T8803] __x64_sys_bpf+0xba/0xd0 [ 1179.865168][ T8803] do_syscall_64+0x166/0x520 [ 1179.865232][ T8803] ? trace_irq_disable+0x3b/0x140 [ 1179.865291][ T8803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.865349][ T8803] ? clear_bhb_loop+0x70/0xc0 [ 1179.865422][ T8803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.865483][ T8803] RIP: 0033:0x7f4b7399e1d9 [ 1179.865530][ T8803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.865583][ T8803] RSP: 002b:00007f4b747e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1179.865645][ T8803] RAX: ffffffffffffffda RBX: 00007f4b73c25fa0 RCX: 00007f4b7399e1d9 [ 1179.865689][ T8803] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 1179.865739][ T8803] RBP: 00007f4b747e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.865782][ T8803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1179.865815][ T8803] R13: 00007f4b73c26038 R14: 00007f4b73c25fa0 R15: 00007ffc69b848c8 [ 1179.865909][ T8803] [ 1179.932136][ T8803] Mem-Info: [ 1179.932178][ T8803] active_anon:9336 inactive_anon:0 isolated_anon:0 [ 1179.932178][ T8803] active_file:0 inactive_file:44482 isolated_file:0 [ 1179.932178][ T8803] unevictable:0 dirty:105 writeback:0 [ 1179.932178][ T8803] slab_reclaimable:13313 slab_unreclaimable:132336 [ 1179.932178][ T8803] mapped:40418 shmem:523 pagetables:5894 [ 1179.932178][ T8803] sec_pagetables:0 bounce:0 [ 1179.932178][ T8803] kernel_misc_reclaimable:0 [ 1179.932178][ T8803] free:1248608 free_pcp:10191 free_cma:0 [ 1179.932320][ T8803] Node 0 active_anon:37344kB inactive_anon:0kB active_file:0kB inactive_file:177728kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:161672kB dirty:420kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18140kB pagetables:23432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1179.939481][ T8803] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1179.939608][ T8803] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1179.939772][ T8803] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 1179.939883][ T8803] Node 0 DMA32 free:1053580kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:37344kB inactive_anon:0kB active_file:0kB inactive_file:177728kB unevictable:0kB writepending:420kB zspages:0kB present:3129332kB managed:2527516kB mlocked:0kB bounce:0kB free_pcp:40764kB local_pcp:19604kB free_cma:0kB [ 1179.940051][ T8803] lowmem_reserve[]: 0 0 0 0 0 [ 1179.940170][ T8803] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1179.940402][ T8803] lowmem_reserve[]: 0 0 0 0 0 [ 1179.940596][ T8803] Node 1 Normal free:3925492kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1179.941000][ T8803] lowmem_reserve[]: 0 0 0 0 0 [ 1179.941106][ T8803] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1179.941398][ T8803] Node 0 DMA32: 1287*4kB (UM) 992*8kB (UME) 1405*16kB (UME) 387*32kB (UME) 929*64kB (UME) 802*128kB (UME) 499*256kB (UME) 156*512kB (UM) 27*1024kB (UM) 9*2048kB (UME) 144*4096kB (UM) = 1053580kB [ 1179.953099][ T8803] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1179.953213][ T8803] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 8*16kB (UM) 7*32kB (UM) 2*64kB (UM) 4*128kB (UM) 2*256kB (M) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 957*4096kB (M) = 3925492kB [ 1179.953380][ T8803] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1179.953399][ T8803] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1179.953417][ T8803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1179.953435][ T8803] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1179.953454][ T8803] 45001 total pagecache pages [ 1179.953463][ T8803] 0 pages in swap cache [ 1179.953471][ T8803] Free swap = 124996kB [ 1179.953481][ T8803] Total swap = 124996kB [ 1179.953490][ T8803] 2097051 pages RAM [ 1179.953498][ T8803] 0 pages HighMem/MovableOnly [ 1179.953507][ T8803] 433556 pages reserved [ 1179.953515][ T8803] 0 pages cma reserved [ 1180.217062][ T8789] bond3: (slave dummy0): Releasing active interface [ 1180.272963][ T8806] Bluetooth: MGMT ver 1.23 [ 1180.833476][ T8788] 0ªX¹¦Dö»: renamed from gretap0 [ 1180.911761][ T8788] 0ªX¹¦Dö»: left promiscuous mode [ 1180.911786][ T8788] 0ªX¹¦Dö»: entered allmulticast mode [ 1180.985650][ T52] Bluetooth: hci0: command 0x0c13 tx timeout [ 1180.985717][T26543] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 1181.593707][ T8837] x_tables: unsorted entry at hook 4 [ 1181.685034][ T8843] netlink: 'syz.5.12305': attribute type 1 has an invalid length. [ 1181.810260][ T8854] netlink: 'syz.5.12305': attribute type 10 has an invalid length. [ 1181.810287][ T8854] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12305'. [ 1181.880008][ T8843] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1181.917624][ T8851] dummy0: left promiscuous mode [ 1181.971418][ T8851] bond8: (slave dummy0): making interface the new active one [ 1181.983319][ T8851] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 1182.037214][ T8854] dummy0: entered promiscuous mode [ 1182.052900][ T8854] bond8: (slave dummy0): Releasing active interface [ 1182.348711][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 1182.576216][ T8878] TC_ACT_REPEAT abuse ? [ 1182.674765][ T8884] netlink: 244 bytes leftover after parsing attributes in process `syz.3.12317'. [ 1183.060364][ T8904] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1183.289358][ T8909] tipc: Enabling of bearer rejected, failed to enable media [ 1183.385401][ T5630] Bluetooth: hci0: command 0x0c13 tx timeout [ 1183.385468][T26543] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 1183.429087][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1183.433771][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1183.451153][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1183.453166][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1183.453873][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1183.594961][ T8922] dummy0: left promiscuous mode [ 1183.629940][ T8922] bond0: (slave dummy0): Error: Slave does not support XDP [ 1183.682420][ T8922] netlink: 'syz.6.12329': attribute type 3 has an invalid length. [ 1183.956140][ T8937] FAULT_INJECTION: forcing a failure. [ 1183.956140][ T8937] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.956177][ T8937] CPU: 0 UID: 0 PID: 8937 Comm: syz.6.12335 Not tainted syzkaller #0 PREEMPT(full) [ 1183.956203][ T8937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1183.956218][ T8937] Call Trace: [ 1183.956228][ T8937] [ 1183.956238][ T8937] dump_stack_lvl+0xe8/0x150 [ 1183.956285][ T8937] should_fail_ex+0x410/0x560 [ 1183.956324][ T8937] should_failslab+0xa8/0x100 [ 1183.956360][ T8937] __kvmalloc_node_noprof+0x176/0x820 [ 1183.956389][ T8937] ? kasan_save_track+0x3e/0x80 [ 1183.956417][ T8937] ? __kvmalloc_node_noprof+0x50f/0x820 [ 1183.956444][ T8937] ? bpf_stack_liveness_init+0x29/0x90 [ 1183.956471][ T8937] ? bpf_check+0x263f/0x2ef0 [ 1183.956498][ T8937] ? bpf_compute_const_regs+0x18f/0x3450 [ 1183.956528][ T8937] ? bpf_compute_const_regs+0x18f/0x3450 [ 1183.956567][ T8937] bpf_compute_const_regs+0x18f/0x3450 [ 1183.956623][ T8937] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 1183.956654][ T8937] ? check_attach_btf_id+0x325/0x1af0 [ 1183.956692][ T8937] ? bpf_stack_liveness_init+0x29/0x90 [ 1183.956718][ T8937] ? trace_kmalloc+0x2a/0xf0 [ 1183.956743][ T8937] ? __pfx_check_attach_btf_id+0x10/0x10 [ 1183.956791][ T8937] ? bpf_stack_liveness_init+0x29/0x90 [ 1183.956815][ T8937] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1183.956854][ T8937] ? __asan_memset+0x22/0x50 [ 1183.956883][ T8937] bpf_check+0x26ac/0x2ef0 [ 1183.956937][ T8937] ? __pfx_bpf_check+0x10/0x10 [ 1183.956969][ T8937] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1183.957008][ T8937] bpf_prog_load+0x14d6/0x1c20 [ 1183.957051][ T8937] ? __pfx_bpf_prog_load+0x10/0x10 [ 1183.957109][ T8937] __sys_bpf+0xd0d/0xd90 [ 1183.957147][ T8937] ? __pfx___sys_bpf+0x10/0x10 [ 1183.957189][ T8937] ? __fget_files+0x2a/0x420 [ 1183.957229][ T8937] ? ksys_write+0x242/0x270 [ 1183.957257][ T8937] ? __pfx_ksys_write+0x10/0x10 [ 1183.957296][ T8937] __x64_sys_bpf+0xba/0xd0 [ 1183.957326][ T8937] do_syscall_64+0x166/0x520 [ 1183.957353][ T8937] ? trace_irq_disable+0x3b/0x140 [ 1183.957379][ T8937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.957403][ T8937] ? clear_bhb_loop+0x70/0xc0 [ 1183.957431][ T8937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.957455][ T8937] RIP: 0033:0x7faad259e1d9 [ 1183.957478][ T8937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.957498][ T8937] RSP: 002b:00007faad341b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1183.957524][ T8937] RAX: ffffffffffffffda RBX: 00007faad2825fa0 RCX: 00007faad259e1d9 [ 1183.957542][ T8937] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1183.957557][ T8937] RBP: 00007faad341b090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.957573][ T8937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1183.957588][ T8937] R13: 00007faad2826038 R14: 00007faad2825fa0 R15: 00007ffcd44e6508 [ 1183.957625][ T8937] [ 1183.959340][ T8936] netlink: 'syz.4.12334': attribute type 2 has an invalid length. [ 1183.959364][ T8936] netlink: 244 bytes leftover after parsing attributes in process `syz.4.12334'. [ 1184.360654][ T8940] pimreg: entered allmulticast mode [ 1184.379451][ T8940] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12336'. [ 1184.379478][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12336'. [ 1184.380033][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12336'. [ 1184.492275][ T8943] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1184.499468][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12338'. [ 1184.551694][ T8945] bridge0: port 4(batadv2) entered blocking state [ 1184.553572][ T8945] bridge0: port 4(batadv2) entered disabled state [ 1184.553743][ T8945] batadv2: entered allmulticast mode [ 1184.591465][ T8945] batadv2: entered promiscuous mode [ 1184.605302][ T8939] pimreg: left allmulticast mode [ 1184.640401][ T8947] FAULT_INJECTION: forcing a failure. [ 1184.640401][ T8947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1184.640428][ T8947] CPU: 1 UID: 0 PID: 8947 Comm: syz.4.12339 Not tainted syzkaller #0 PREEMPT(full) [ 1184.640446][ T8947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1184.640457][ T8947] Call Trace: [ 1184.640463][ T8947] [ 1184.640483][ T8947] dump_stack_lvl+0xe8/0x150 [ 1184.640511][ T8947] should_fail_ex+0x410/0x560 [ 1184.640541][ T8947] strncpy_from_user+0x36/0x2c0 [ 1184.640566][ T8947] bpf_prog_load+0xdef/0x1c20 [ 1184.640596][ T8947] ? __pfx_bpf_prog_load+0x10/0x10 [ 1184.640635][ T8947] __sys_bpf+0xd0d/0xd90 [ 1184.640661][ T8947] ? __pfx___sys_bpf+0x10/0x10 [ 1184.640688][ T8947] ? __fget_files+0x2a/0x420 [ 1184.640720][ T8947] ? ksys_write+0x242/0x270 [ 1184.640739][ T8947] ? __pfx_ksys_write+0x10/0x10 [ 1184.640758][ T8947] __x64_sys_bpf+0xba/0xd0 [ 1184.640778][ T8947] do_syscall_64+0x166/0x520 [ 1184.640795][ T8947] ? trace_irq_disable+0x3b/0x140 [ 1184.640812][ T8947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.640828][ T8947] ? clear_bhb_loop+0x70/0xc0 [ 1184.640847][ T8947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.640862][ T8947] RIP: 0033:0x7f6a18d9e1d9 [ 1184.640876][ T8947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.640890][ T8947] RSP: 002b:00007f6a19c6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1184.640909][ T8947] RAX: ffffffffffffffda RBX: 00007f6a19025fa0 RCX: 00007f6a18d9e1d9 [ 1184.640921][ T8947] RDX: 0000000000000094 RSI: 0000200000001000 RDI: 0000000000000005 [ 1184.640931][ T8947] RBP: 00007f6a19c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.640942][ T8947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.640951][ T8947] R13: 00007f6a19026038 R14: 00007f6a19025fa0 R15: 00007ffc7bd76398 [ 1184.640975][ T8947] [ 1184.917890][ T8951] batadv_slave_0: entered promiscuous mode [ 1184.920918][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12341'. [ 1184.921053][ T8951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1185.045157][ T4591] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1185.045184][ T4591] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1185.088267][ T8951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.191953][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12346'. [ 1185.223604][ T8954] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12341'. [ 1185.327737][ T8915] wlan1 speed is unknown, defaulting to 1000 [ 1185.338056][ T8915] C speed is unknown, defaulting to 1000 [ 1185.372176][ T8915] wg0 speed is unknown, defaulting to 1000 [ 1185.443905][ T8974] FAULT_INJECTION: forcing a failure. [ 1185.443905][ T8974] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.443940][ T8974] CPU: 1 UID: 0 PID: 8974 Comm: syz.3.12349 Not tainted syzkaller #0 PREEMPT(full) [ 1185.443965][ T8974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1185.443979][ T8974] Call Trace: [ 1185.443988][ T8974] [ 1185.443999][ T8974] dump_stack_lvl+0xe8/0x150 [ 1185.444036][ T8974] should_fail_ex+0x410/0x560 [ 1185.444076][ T8974] should_failslab+0xa8/0x100 [ 1185.444110][ T8974] __kvmalloc_node_noprof+0x176/0x820 [ 1185.444141][ T8974] ? __kvmalloc_node_noprof+0x345/0x820 [ 1185.444167][ T8974] ? bpf_compute_postorder+0xda/0x970 [ 1185.444200][ T8974] ? bpf_compute_postorder+0xda/0x970 [ 1185.444233][ T8974] bpf_compute_postorder+0xda/0x970 [ 1185.444259][ T8974] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1185.444292][ T8974] ? add_kfuncs+0x251/0x2e0 [ 1185.444323][ T8974] bpf_check+0x261d/0x2ef0 [ 1185.444368][ T8974] ? __pfx_bpf_check+0x10/0x10 [ 1185.444399][ T8974] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1185.444438][ T8974] bpf_prog_load+0x14d6/0x1c20 [ 1185.444480][ T8974] ? __pfx_bpf_prog_load+0x10/0x10 [ 1185.444534][ T8974] __sys_bpf+0xd0d/0xd90 [ 1185.444571][ T8974] ? __pfx___sys_bpf+0x10/0x10 [ 1185.444611][ T8974] ? __fget_files+0x2a/0x420 [ 1185.444651][ T8974] ? ksys_write+0x242/0x270 [ 1185.444678][ T8974] ? __pfx_ksys_write+0x10/0x10 [ 1185.444707][ T8974] __x64_sys_bpf+0xba/0xd0 [ 1185.444735][ T8974] do_syscall_64+0x166/0x520 [ 1185.444760][ T8974] ? trace_irq_disable+0x3b/0x140 [ 1185.444784][ T8974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.444807][ T8974] ? clear_bhb_loop+0x70/0xc0 [ 1185.444850][ T8974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.444873][ T8974] RIP: 0033:0x7fbfe4f9e1d9 [ 1185.444894][ T8974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.444914][ T8974] RSP: 002b:00007fbfe31f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1185.444938][ T8974] RAX: ffffffffffffffda RBX: 00007fbfe5225fa0 RCX: 00007fbfe4f9e1d9 [ 1185.444955][ T8974] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 1185.444970][ T8974] RBP: 00007fbfe31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.444985][ T8974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1185.444998][ T8974] R13: 00007fbfe5226038 R14: 00007fbfe5225fa0 R15: 00007ffe58fdb488 [ 1185.445034][ T8974] [ 1185.549572][T26543] Bluetooth: hci1: command tx timeout [ 1185.715521][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12351'. [ 1185.758056][ T8978] bridge0: port 3(batadv2) entered blocking state [ 1185.758282][ T8978] bridge0: port 3(batadv2) entered disabled state [ 1185.758458][ T8978] batadv2: entered allmulticast mode [ 1185.762304][ T8978] batadv2: entered promiscuous mode [ 1185.869559][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12353'. [ 1186.111465][ T8993] IPVS: Scheduler module ip_vs_sip not found [ 1186.225042][T13127] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1186.225066][T13127] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1186.568892][ T9020] sctp: [Deprecated]: syz.4.12364 (pid 9020) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1186.568892][ T9020] Use struct sctp_sack_info instead [ 1186.759344][ T9028] bridge0: port 7(batadv5) entered blocking state [ 1186.761780][ T9028] bridge0: port 7(batadv5) entered disabled state [ 1186.761950][ T9028] batadv5: entered allmulticast mode [ 1186.793649][ T9028] batadv5: entered promiscuous mode [ 1186.826126][ T9036] FAULT_INJECTION: forcing a failure. [ 1186.826126][ T9036] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.826162][ T9036] CPU: 1 UID: 0 PID: 9036 Comm: syz.3.12369 Not tainted syzkaller #0 PREEMPT(full) [ 1186.826186][ T9036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1186.826199][ T9036] Call Trace: [ 1186.826208][ T9036] [ 1186.826218][ T9036] dump_stack_lvl+0xe8/0x150 [ 1186.826256][ T9036] should_fail_ex+0x410/0x560 [ 1186.826293][ T9036] should_failslab+0xa8/0x100 [ 1186.826327][ T9036] __kvmalloc_node_noprof+0x176/0x820 [ 1186.826356][ T9036] ? bpf_compute_postorder+0x87c/0x970 [ 1186.826382][ T9036] ? bpf_stack_liveness_init+0x29/0x90 [ 1186.826408][ T9036] ? bpf_stack_liveness_init+0x29/0x90 [ 1186.826442][ T9036] bpf_stack_liveness_init+0x29/0x90 [ 1186.826476][ T9036] bpf_check+0x263f/0x2ef0 [ 1186.826547][ T9036] ? __pfx_bpf_check+0x10/0x10 [ 1186.826577][ T9036] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1186.826617][ T9036] bpf_prog_load+0x14d6/0x1c20 [ 1186.826659][ T9036] ? __pfx_bpf_prog_load+0x10/0x10 [ 1186.826716][ T9036] __sys_bpf+0xd0d/0xd90 [ 1186.826753][ T9036] ? __pfx___sys_bpf+0x10/0x10 [ 1186.826794][ T9036] ? __fget_files+0x2a/0x420 [ 1186.826835][ T9036] ? ksys_write+0x242/0x270 [ 1186.826866][ T9036] ? __pfx_ksys_write+0x10/0x10 [ 1186.826896][ T9036] __x64_sys_bpf+0xba/0xd0 [ 1186.826925][ T9036] do_syscall_64+0x166/0x520 [ 1186.826949][ T9036] ? trace_irq_disable+0x3b/0x140 [ 1186.826974][ T9036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.826997][ T9036] ? clear_bhb_loop+0x70/0xc0 [ 1186.827025][ T9036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.827048][ T9036] RIP: 0033:0x7fbfe4f9e1d9 [ 1186.827070][ T9036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1186.827090][ T9036] RSP: 002b:00007fbfe31f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1186.827115][ T9036] RAX: ffffffffffffffda RBX: 00007fbfe5225fa0 RCX: 00007fbfe4f9e1d9 [ 1186.827133][ T9036] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 1186.827149][ T9036] RBP: 00007fbfe31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1186.827163][ T9036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1186.827178][ T9036] R13: 00007fbfe5226038 R14: 00007fbfe5225fa0 R15: 00007ffe58fdb488 [ 1186.827213][ T9036] [ 1187.134679][ T8915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.134863][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.135015][ T8915] bridge_slave_0: entered allmulticast mode [ 1187.137630][ T8915] bridge_slave_0: entered promiscuous mode [ 1187.170332][ T8915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.172057][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.172224][ T8915] bridge_slave_1: entered allmulticast mode [ 1187.178848][ T8915] bridge_slave_1: entered promiscuous mode [ 1187.236230][ T4569] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 1187.236251][ T4569] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 1187.362606][ T8915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.403229][ T8915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.597424][ T8915] team0: Port device team_slave_0 added [ 1187.617440][ T8915] team0: Port device team_slave_1 added [ 1187.630856][T26543] Bluetooth: hci1: command tx timeout [ 1187.707941][ T8915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1187.707971][ T8915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1187.707999][ T8915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1187.819981][ T9060] veth3: entered promiscuous mode [ 1187.820006][ T9060] veth3: entered allmulticast mode [ 1187.821559][ T8915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1187.821576][ T8915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1187.821607][ T8915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1187.961086][ T9069] netlink: 'syz.6.12382': attribute type 1 has an invalid length. [ 1188.038398][ T9071] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1188.091552][ T8915] hsr_slave_0: entered promiscuous mode [ 1188.097981][ T8915] hsr_slave_1: entered promiscuous mode [ 1188.110268][ T8915] debugfs: 'hsr0' already exists in 'hsr' [ 1188.110292][ T8915] Cannot create hsr debugfs directory [ 1188.174786][ T9076] netlink: 'syz.3.12384': attribute type 1 has an invalid length. [ 1188.178382][ T9069] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1188.253211][ T9076] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1188.297976][ T9081] bond2: (slave team0): Releasing backup interface [ 1188.316291][ T9081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1188.318805][ T9081] bond4: (slave team0): Enslaving as a backup interface with a down link [ 1188.617656][ T9100] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1188.790190][ T9104] syzkaller0: entered promiscuous mode [ 1188.790215][ T9104] syzkaller0: entered allmulticast mode [ 1189.025890][ T8915] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1189.100072][ T9116] __nla_validate_parse: 6 callbacks suppressed [ 1189.100096][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12398'. [ 1189.173540][ T9116] bridge0: port 7(batadv5) entered blocking state [ 1189.173619][ T9116] bridge0: port 7(batadv5) entered disabled state [ 1189.173755][ T9116] batadv5: entered allmulticast mode [ 1189.196878][ T9116] batadv5: entered promiscuous mode [ 1189.379698][ T8915] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1189.492458][ T8915] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1189.541593][ T9133] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1189.541738][ T9133] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1189.541863][ T9133] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1189.541990][ T9133] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1189.542113][ T9133] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1189.542243][ T9133] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1189.542366][ T9133] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1189.542490][ T9133] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1189.542614][ T9133] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1189.542737][ T9133] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1189.633813][T13127] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 1189.633828][T13127] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 1189.705076][ T5630] Bluetooth: hci1: command tx timeout [ 1189.753288][ T8915] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1190.000146][ T9150] syzkaller0: entered promiscuous mode [ 1190.000170][ T9150] syzkaller0: entered allmulticast mode [ 1190.162774][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12409'. [ 1190.371540][ T9164] netlink: 'syz.6.12414': attribute type 2 has an invalid length. [ 1190.676359][ T8915] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1190.683886][ T8915] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1190.702618][ T8915] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1190.730750][ T8915] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1190.733865][ T8915] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1190.791284][ T8915] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1190.825928][ T8915] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1190.852030][ T8915] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1190.882039][ T9173] batman_adv: batadv0: Adding interface: syzkaller0 [ 1190.882056][ T9173] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.882091][ T9173] batman_adv: batadv0: Interface activated: syzkaller0 [ 1191.028129][ T9171] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1191.113030][ T9171] batman_adv: batadv0: Removing interface: syzkaller0 [ 1191.137848][ T9194] netlink: 112 bytes leftover after parsing attributes in process `syz.5.12421'. [ 1191.137973][ T9198] netlink: 112 bytes leftover after parsing attributes in process `syz.5.12421'. [ 1191.147776][ T5630] Bluetooth: hci0: command 0x0c13 tx timeout [ 1191.147956][T26543] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 1191.249727][ T8915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.352920][ T8915] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.377893][ T4582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.377997][ T4582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1191.417882][ T9203] netlink: 'syz.5.12424': attribute type 1 has an invalid length. [ 1191.422217][ T4582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.422328][ T4582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1191.485380][ T9203] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1191.492162][ T9208] dummy0: left promiscuous mode [ 1191.513319][ T9208] bond9: (slave dummy0): making interface the new active one [ 1191.526212][ T9208] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 1191.562794][ T9203] netlink: 'syz.5.12424': attribute type 10 has an invalid length. [ 1191.562818][ T9203] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12424'. [ 1191.563309][ T9203] dummy0: entered promiscuous mode [ 1191.596495][ T9203] bond9: (slave dummy0): Releasing active interface [ 1191.785024][T26543] Bluetooth: hci1: command tx timeout [ 1192.046469][ T9228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12431'. [ 1192.083091][ T9228] bridge0: port 5(batadv3) entered blocking state [ 1192.086932][ T9228] bridge0: port 5(batadv3) entered disabled state [ 1192.087108][ T9228] batadv3: entered allmulticast mode [ 1192.091131][ T9228] batadv3: entered promiscuous mode [ 1192.223213][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12432'. [ 1192.223252][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12432'. [ 1192.422169][ T9240] netlink: 'syz.3.12435': attribute type 1 has an invalid length. [ 1192.575109][T13127] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 1192.575131][T13127] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 1192.580944][ T9240] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1192.635884][ T9246] bond4: (slave team0): Releasing backup interface [ 1192.692560][ T9246] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.723732][ T9246] bond5: (slave team0): Enslaving as a backup interface with a down link [ 1192.785278][ T9251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12438'. [ 1192.811546][ T8915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1192.962208][ T9257] FAULT_INJECTION: forcing a failure. [ 1192.962208][ T9257] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.962244][ T9257] CPU: 0 UID: 0 PID: 9257 Comm: syz.5.12441 Not tainted syzkaller #0 PREEMPT(full) [ 1192.962281][ T9257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1192.962301][ T9257] Call Trace: [ 1192.962316][ T9257] [ 1192.962331][ T9257] dump_stack_lvl+0xe8/0x150 [ 1192.962379][ T9257] should_fail_ex+0x410/0x560 [ 1192.962414][ T9257] should_failslab+0xa8/0x100 [ 1192.962446][ T9257] __kvmalloc_node_noprof+0x176/0x820 [ 1192.962476][ T9257] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1192.962504][ T9257] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1192.962538][ T9257] bpf_compute_live_registers+0x14f/0x1ff0 [ 1192.962566][ T9257] ? kfree+0x1c5/0x650 [ 1192.962593][ T9257] ? bpf_compute_scc+0xab6/0xb10 [ 1192.962623][ T9257] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1192.962661][ T9257] bpf_check+0x2744/0x2ef0 [ 1192.962706][ T9257] ? __pfx_bpf_check+0x10/0x10 [ 1192.962733][ T9257] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1192.962769][ T9257] bpf_prog_load+0x14d6/0x1c20 [ 1192.962809][ T9257] ? __pfx_bpf_prog_load+0x10/0x10 [ 1192.962861][ T9257] __sys_bpf+0xd0d/0xd90 [ 1192.962896][ T9257] ? __pfx___sys_bpf+0x10/0x10 [ 1192.962933][ T9257] ? __fget_files+0x2a/0x420 [ 1192.962971][ T9257] ? ksys_write+0x242/0x270 [ 1192.962995][ T9257] ? __pfx_ksys_write+0x10/0x10 [ 1192.963023][ T9257] __x64_sys_bpf+0xba/0xd0 [ 1192.963050][ T9257] do_syscall_64+0x166/0x520 [ 1192.963072][ T9257] ? trace_irq_disable+0x3b/0x140 [ 1192.963095][ T9257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.963116][ T9257] ? clear_bhb_loop+0x70/0xc0 [ 1192.963142][ T9257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.963162][ T9257] RIP: 0033:0x7f4b7399e1d9 [ 1192.963181][ T9257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.963203][ T9257] RSP: 002b:00007f4b747e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1192.963227][ T9257] RAX: ffffffffffffffda RBX: 00007f4b73c25fa0 RCX: 00007f4b7399e1d9 [ 1192.963242][ T9257] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1192.963257][ T9257] RBP: 00007f4b747e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.963271][ T9257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1192.963284][ T9257] R13: 00007f4b73c26038 R14: 00007f4b73c25fa0 R15: 00007ffc69b848c8 [ 1192.963318][ T9257] [ 1193.310412][ T8915] veth0_vlan: entered promiscuous mode [ 1193.353304][ T8915] veth1_vlan: entered promiscuous mode [ 1193.453186][ T9262] syzkaller0: entered promiscuous mode [ 1193.453214][ T9262] syzkaller0: entered allmulticast mode [ 1193.480234][ T8915] veth0_macvtap: entered promiscuous mode [ 1193.510987][ T8915] veth1_macvtap: entered promiscuous mode [ 1193.562387][ T9268] sctp: [Deprecated]: syz.4.12447 (pid 9268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1193.562387][ T9268] Use struct sctp_sack_info instead [ 1193.633097][ T9268] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12447'. [ 1193.728983][ T8915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1193.768729][ T8915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1193.815382][T13133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.816455][T13133] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.816499][T13133] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.816537][T13133] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.078071][ T9282] netlink: 'syz.3.12450': attribute type 2 has an invalid length. [ 1194.139860][T13127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.139884][T13127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.205382][ T9282] __nla_validate_parse: 32 callbacks suppressed [ 1194.205406][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12450'. [ 1194.237977][ T4592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.238000][ T4592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.393782][ T9288] openvswitch: netlink: Multiple metadata blocks provided [ 1194.668818][ T5630] Bluetooth: hci4: command 0x0405 tx timeout [ 1194.838334][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12460'. [ 1194.933721][ T9311] netlink: 'syz.3.12461': attribute type 4 has an invalid length. [ 1194.976327][ T9314] netlink: 76 bytes leftover after parsing attributes in process `syz.6.12460'. [ 1194.976373][ T9314] netlink: 76 bytes leftover after parsing attributes in process `syz.6.12460'. [ 1195.206304][ T9330] netlink: 'syz.3.12468': attribute type 1 has an invalid length. [ 1195.239894][ T9333] FAULT_INJECTION: forcing a failure. [ 1195.239894][ T9333] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.239932][ T9333] CPU: 0 UID: 0 PID: 9333 Comm: syz.5.12471 Not tainted syzkaller #0 PREEMPT(full) [ 1195.239958][ T9333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1195.239973][ T9333] Call Trace: [ 1195.239983][ T9333] [ 1195.239993][ T9333] dump_stack_lvl+0xe8/0x150 [ 1195.240032][ T9333] should_fail_ex+0x410/0x560 [ 1195.240071][ T9333] should_failslab+0xa8/0x100 [ 1195.240106][ T9333] __kvmalloc_node_noprof+0x176/0x820 [ 1195.240135][ T9333] ? rcu_is_watching+0x16/0xb0 [ 1195.240166][ T9333] ? analyze_subprog+0x846/0x9e00 [ 1195.240194][ T9333] ? analyze_subprog+0x846/0x9e00 [ 1195.240230][ T9333] analyze_subprog+0x846/0x9e00 [ 1195.240259][ T9333] ? is_bpf_text_address+0x292/0x2b0 [ 1195.240296][ T9333] ? kernel_text_address+0xa5/0xe0 [ 1195.240330][ T9333] ? arch_stack_walk+0xfb/0x150 [ 1195.240374][ T9333] ? __pfx_stack_trace_save+0x10/0x10 [ 1195.240416][ T9333] ? call_instance+0x263/0x560 [ 1195.240442][ T9333] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 1195.240471][ T9333] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 1195.240502][ T9333] ? __pfx_analyze_subprog+0x10/0x10 [ 1195.240528][ T9333] ? __x64_sys_bpf+0xba/0xd0 [ 1195.240552][ T9333] ? do_syscall_64+0x166/0x520 [ 1195.240576][ T9333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.240650][ T9333] ? call_instance+0x263/0x560 [ 1195.240678][ T9333] ? rcu_is_watching+0x16/0xb0 [ 1195.240708][ T9333] ? call_instance+0x263/0x560 [ 1195.240732][ T9333] ? trace_kmalloc+0x2a/0xf0 [ 1195.240759][ T9333] ? call_instance+0x263/0x560 [ 1195.240786][ T9333] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1195.240816][ T9333] ? __kvmalloc_node_noprof+0x345/0x820 [ 1195.240844][ T9333] ? call_instance+0x263/0x560 [ 1195.240870][ T9333] ? call_instance+0x263/0x560 [ 1195.240906][ T9333] ? call_instance+0x42e/0x560 [ 1195.240943][ T9333] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 1195.240973][ T9333] ? btf_type_by_id+0xe6/0x180 [ 1195.241024][ T9333] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1195.241062][ T9333] ? __kvmalloc_node_noprof+0x345/0x820 [ 1195.241090][ T9333] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1195.241119][ T9333] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1195.241158][ T9333] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1195.241210][ T9333] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1195.241253][ T9333] bpf_check+0x2744/0x2ef0 [ 1195.241301][ T9333] ? __pfx_bpf_check+0x10/0x10 [ 1195.241332][ T9333] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1195.241376][ T9333] bpf_prog_load+0x14d6/0x1c20 [ 1195.241419][ T9333] ? __pfx_bpf_prog_load+0x10/0x10 [ 1195.241477][ T9333] __sys_bpf+0xd0d/0xd90 [ 1195.241515][ T9333] ? __pfx___sys_bpf+0x10/0x10 [ 1195.241556][ T9333] ? __fget_files+0x2a/0x420 [ 1195.241598][ T9333] ? ksys_write+0x242/0x270 [ 1195.241632][ T9333] ? __pfx_ksys_write+0x10/0x10 [ 1195.241662][ T9333] __x64_sys_bpf+0xba/0xd0 [ 1195.241691][ T9333] do_syscall_64+0x166/0x520 [ 1195.241716][ T9333] ? trace_irq_disable+0x3b/0x140 [ 1195.241741][ T9333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.241765][ T9333] ? clear_bhb_loop+0x70/0xc0 [ 1195.241793][ T9333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.241816][ T9333] RIP: 0033:0x7f4b7399e1d9 [ 1195.241838][ T9333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1195.241858][ T9333] RSP: 002b:00007f4b747e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1195.241884][ T9333] RAX: ffffffffffffffda RBX: 00007f4b73c25fa0 RCX: 00007f4b7399e1d9 [ 1195.241901][ T9333] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1195.241916][ T9333] RBP: 00007f4b747e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1195.241931][ T9333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1195.241946][ T9333] R13: 00007f4b73c26038 R14: 00007f4b73c25fa0 R15: 00007ffc69b848c8 [ 1195.241995][ T9333] [ 1195.656019][ T9330] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1195.695149][ T9334] bond5: (slave team0): Releasing backup interface [ 1195.728914][ T9334] 8021q: adding VLAN 0 to HW filter on device team0 [ 1195.757337][ T9334] bond6: (slave team0): Enslaving as a backup interface with a down link [ 1196.400553][ T9372] netlink: 'syz.4.12483': attribute type 1 has an invalid length. [ 1196.418506][ T9373] netlink: 'syz.3.12481': attribute type 3 has an invalid length. [ 1197.146046][ T5630] Bluetooth: hci0: command 0x0c13 tx timeout [ 1197.146135][T26543] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 1197.523940][ T9419] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12500'. [ 1197.723650][ T9430] netlink: 'syz.4.12503': attribute type 1 has an invalid length. [ 1197.835157][ T9433] netlink: 'syz.4.12503': attribute type 10 has an invalid length. [ 1197.835183][ T9433] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12503'. [ 1197.872887][ T9430] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1197.932804][ T9432] bond8: (slave dummy0): making interface the new active one [ 1197.948120][ T9432] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 1197.954883][ T9433] dummy0: entered promiscuous mode [ 1197.983561][ T9433] bond8: (slave dummy0): Releasing active interface [ 1198.182305][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12506'. [ 1198.182347][ T9440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12506'. [ 1198.317018][ T9447] netlink: 72 bytes leftover after parsing attributes in process `syz.5.12507'. [ 1198.487417][ T9460] netlink: 140 bytes leftover after parsing attributes in process `syz.5.12513'. [ 1198.794573][ T9466] netlink: 'syz.2.12516': attribute type 11 has an invalid length. [ 1199.646822][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1199.651074][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1199.652982][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1199.682583][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1199.683276][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1200.366626][ T9526] __nla_validate_parse: 1 callbacks suppressed [ 1200.366648][ T9526] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12538'. [ 1200.974227][ T9505] wlan1 speed is unknown, defaulting to 1000 [ 1200.976203][ T9505] C speed is unknown, defaulting to 1000 [ 1200.978183][ T9505] wg0 speed is unknown, defaulting to 1000 [ 1201.057238][ T9554] FAULT_INJECTION: forcing a failure. [ 1201.057238][ T9554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1201.057274][ T9554] CPU: 1 UID: 0 PID: 9554 Comm: syz.4.12547 Not tainted syzkaller #0 PREEMPT(full) [ 1201.057299][ T9554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1201.057314][ T9554] Call Trace: [ 1201.057324][ T9554] [ 1201.057335][ T9554] dump_stack_lvl+0xe8/0x150 [ 1201.057375][ T9554] should_fail_ex+0x410/0x560 [ 1201.057413][ T9554] _copy_to_user+0x31/0xb0 [ 1201.057453][ T9554] simple_read_from_buffer+0xe1/0x170 [ 1201.057497][ T9554] proc_fail_nth_read+0x1bb/0x230 [ 1201.057522][ T9554] ? common_file_perm+0x20e/0x2b0 [ 1201.057565][ T9554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1201.057596][ T9554] ? rw_verify_area+0x24a/0x4c0 [ 1201.057623][ T9554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1201.057657][ T9554] vfs_read+0x213/0xa80 [ 1201.057688][ T9554] ? __pfx___mutex_lock+0x10/0x10 [ 1201.057717][ T9554] ? __pfx_vfs_read+0x10/0x10 [ 1201.057742][ T9554] ? __fget_files+0x2a/0x420 [ 1201.057770][ T9554] ? __fget_files+0x3a2/0x420 [ 1201.057791][ T9554] ? __fget_files+0x2a/0x420 [ 1201.057823][ T9554] ksys_read+0x150/0x270 [ 1201.057851][ T9554] ? __pfx_ksys_read+0x10/0x10 [ 1201.057889][ T9554] do_syscall_64+0x166/0x520 [ 1201.057915][ T9554] ? trace_irq_disable+0x3b/0x140 [ 1201.057940][ T9554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.057964][ T9554] ? clear_bhb_loop+0x70/0xc0 [ 1201.057994][ T9554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.058018][ T9554] RIP: 0033:0x7f6a18d5ea0e [ 1201.058040][ T9554] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1201.058060][ T9554] RSP: 002b:00007f6a19c6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1201.058086][ T9554] RAX: ffffffffffffffda RBX: 00007f6a19c6e6c0 RCX: 00007f6a18d5ea0e [ 1201.058103][ T9554] RDX: 000000000000000f RSI: 00007f6a19c6e0a0 RDI: 0000000000000003 [ 1201.058119][ T9554] RBP: 00007f6a19c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1201.058134][ T9554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1201.058148][ T9554] R13: 00007f6a19026038 R14: 00007f6a19025fa0 R15: 00007ffc7bd76398 [ 1201.058187][ T9554] [ 1201.482598][ T9562] netlink: 'syz.3.12550': attribute type 1 has an invalid length. [ 1201.501969][ T9559] netlink: 72 bytes leftover after parsing attributes in process `syz.6.12549'. [ 1201.599256][ T9570] netlink: 'syz.3.12550': attribute type 10 has an invalid length. [ 1201.599281][ T9570] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12550'. [ 1201.631895][ T9562] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1201.646507][ T9564] dummy0: left promiscuous mode [ 1201.676783][ T9564] bond7: (slave dummy0): making interface the new active one [ 1201.677598][ T9564] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1201.681656][ T9567] smc: net device lo applied user defined pnetid SYZ0 [ 1201.682026][ T9567] smc: smcd device lo applied user defined pnetid SYZ0 [ 1201.682331][ T9570] dummy0: entered promiscuous mode [ 1201.727811][ T9570] bond7: (slave dummy0): Releasing active interface [ 1201.785007][ T5630] Bluetooth: hci2: command tx timeout [ 1201.832023][ T9572] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12553'. [ 1202.132177][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12557'. [ 1202.231672][ T9592] hsr0: entered allmulticast mode [ 1202.231691][ T9592] hsr_slave_0: entered allmulticast mode [ 1202.231704][ T9592] hsr_slave_1: entered allmulticast mode [ 1202.271584][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12557'. [ 1202.271942][ T9592] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12557'. [ 1202.334735][ T9505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.335085][ T9505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.335579][ T9505] bridge_slave_0: entered allmulticast mode [ 1202.337602][ T9505] bridge_slave_0: entered promiscuous mode [ 1202.370133][ T9505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.370316][ T9505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.370775][ T9505] bridge_slave_1: entered allmulticast mode [ 1202.373090][ T9505] bridge_slave_1: entered promiscuous mode [ 1202.436923][ T9505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.440577][ T9505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.501256][ T9505] team0: Port device team_slave_0 added [ 1202.512295][ T9505] team0: Port device team_slave_1 added [ 1202.549963][ T9505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1202.549984][ T9505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1202.550013][ T9505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1202.552303][ T9505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1202.552320][ T9505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1202.552350][ T9505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1202.783067][ T9505] hsr_slave_0: entered promiscuous mode [ 1202.792259][ T9505] hsr_slave_1: entered promiscuous mode [ 1202.799233][ T9505] debugfs: 'hsr0' already exists in 'hsr' [ 1202.799309][ T9505] Cannot create hsr debugfs directory [ 1202.831197][ T33] INFO: task syz.1.10998:4897 blocked for more than 143 seconds. [ 1202.831224][ T33] Not tainted syzkaller #0 [ 1202.831236][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1202.831247][ T33] task:syz.1.10998 state:D stack:27104 pid:4897 tgid:4896 ppid:31584 task_flags:0x400140 flags:0x00080002 [ 1202.831314][ T33] Call Trace: [ 1202.831322][ T33] [ 1202.831337][ T33] __schedule+0x17db/0x58f0 [ 1202.831396][ T33] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1202.831430][ T33] ? schedule+0x90/0x2b0 [ 1202.831455][ T33] schedule+0x164/0x2b0 [ 1202.831480][ T33] schedule_preempt_disabled+0x13/0x30 [ 1202.831502][ T33] __mutex_lock+0x7c1/0x1550 [ 1202.831533][ T33] ? __mutex_lock+0x5d4/0x1550 [ 1202.831563][ T33] ? nfsd_nl_listener_get_doit+0x104/0x610 [ 1202.831599][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1202.831633][ T33] ? __nlmsg_put+0xef/0x1b0 [ 1202.831662][ T33] ? genlmsg_put+0x137/0x2e0 [ 1202.831697][ T33] nfsd_nl_listener_get_doit+0x104/0x610 [ 1202.831731][ T33] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1202.831763][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1202.831844][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 1202.831887][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1202.831948][ T33] genl_rcv_msg+0x614/0x7a0 [ 1202.831989][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1202.832022][ T33] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 1202.832072][ T33] netlink_rcv_skb+0x226/0x4a0 [ 1202.832101][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1202.832135][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1202.832180][ T33] ? down_read+0x2be/0x330 [ 1202.832212][ T33] genl_rcv+0x28/0x40 [ 1202.832242][ T33] netlink_unicast+0x7bd/0x940 [ 1202.832280][ T33] netlink_sendmsg+0x813/0xb40 [ 1202.832319][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1202.832357][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 1202.832390][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1202.832417][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 1202.832450][ T33] ____sys_sendmsg+0x54e/0x850 [ 1202.832481][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1202.832514][ T33] ? import_iovec+0x73/0xa0 [ 1202.832552][ T33] ___sys_sendmsg+0x2a5/0x360 [ 1202.832574][ T33] ? __lock_acquire+0x747/0x2de0 [ 1202.832631][ T33] ? __pfx_ ** replaying previous printk message ** [ 1202.832631][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 1202.832659][ T33] ? futex_wait+0x2a2/0x390 [ 1202.832713][ T33] ? __fget_files+0x2a/0x420 [ 1202.832735][ T33] ? __fget_files+0x3a2/0x420 [ 1202.832767][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 1202.832802][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1202.832851][ T33] do_syscall_64+0x166/0x520 [ 1202.832876][ T33] ? trace_irq_disable+0x3b/0x140 [ 1202.832901][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.832925][ T33] ? clear_bhb_loop+0x70/0xc0 [ 1202.832954][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.832976][ T33] RIP: 0033:0x7f631039e1d9 [ 1202.832997][ T33] RSP: 002b:00007f631126a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1202.833022][ T33] RAX: ffffffffffffffda RBX: 00007f6310625fa0 RCX: 00007f631039e1d9 [ 1202.833040][ T33] RDX: 0000000004000880 RSI: 0000200000000440 RDI: 0000000000000008 [ 1202.833055][ T33] RBP: 00007f6310435888 R08: 0000000000000000 R09: 0000000000000000 [ 1202.833071][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1202.833085][ T33] R13: 00007f6310626038 R14: 00007f6310625fa0 R15: 00007ffe66059078 [ 1202.833121][ T33] [ 1202.833183][ T33] [ 1202.833183][ T33] Showing all locks held in the system: [ 1202.833195][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 1202.833211][ T33] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1202.833287][ T33] locks held by kworker/u8:13/3373: 2, last CPU#1: [ 1202.833305][ T33] #0: ffff8880329a2140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1202.833367][ T33] #1: ffffc9000ef8fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1202.833432][ T33] locks held by getty/5375: 2, on CPU#1: [ 1202.833447][ T33] #0: ffff888035b200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1202.833505][ T33] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1202.833581][ T33] locks held by syz.0.9463/367: 2, on CPU#1: [ 1202.833597][ T33] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1202.833659][ T33] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1202.833727][ T33] locks held by syz-executor/4358: 4, last CPU#0: [ 1202.833748][ T33] #0: ffffffff8fe36530 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 1202.833834][ T33] #1: ffff88807a01d900 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1202.833890][ T33] #2: ffff888035d84cc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1202.833951][ T33] #3: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1202.834020][ T33] locks held by syz.1.10998/4897: 2, on CPU#1: [ 1202.834037][ T33] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1202.965237][ T33] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 1202.965316][ T33] locks held by kworker/u8:44/9305: 3, on CPU#1: [ 1202.965335][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1202.965398][ T33] #1: ffffc9000437fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1202.965459][ T33] #2: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1202.965520][ T33] locks held by syz-executor/9505: 3, last CPU#1: [ 1202.965537][ T33] #0: ffffffff909bc7a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1202.965598][ T33] #1: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1202.965664][ T33] #2: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1202.965724][ T33] locks held by syz.3.12554/9585: 2, last CPU#1: [ 1202.965741][ T33] #0: ffff888057835900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1202.965806][ T33] #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1202.965872][ T33] locks held by syz.6.12559/9599: 1, on CPU#1: [ 1202.965887][ T33] #0: ffff888079217180 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1202.965949][ T33] locks held by syz.6.12559/9600: 3, last CPU#1: [ 1202.965965][ T33] #0: ffff888079217180 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 1202.966028][ T33] #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: charge_memcg+0x47/0x310 [ 1202.966088][ T33] #2: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: percpu_ref_tryget+0x15/0x180 [ 1202.966150][ T33] locks held by syz.2.12562/9608: 1, on CPU#1: [ 1202.966166][ T33] #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 1202.966232][ T33] [ 1202.966239][ T33] ============================================= [ 1202.966239][ T33] [ 1202.966267][ T33] NMI backtrace for cpu 0 [ 1202.966283][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1202.966307][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1202.966321][ T33] Call Trace: [ 1202.966332][ T33] [ 1202.966342][ T33] dump_stack_lvl+0xe8/0x150 [ 1202.966383][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 1202.966418][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1202.966459][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1202.966497][ T33] sys_info+0x135/0x170 [ 1202.966526][ T33] watchdog+0xfd7/0x1030 [ 1202.966560][ T33] ? watchdog+0x1c7/0x1030 [ 1202.966594][ T33] kthread+0x38b/0x480 [ 1202.966619][ T33] ? __pfx_watchdog+0x10/0x10 [ 1202.966642][ T33] ? __pfx_kthread+0x10/0x10 [ 1202.966666][ T33] ret_from_fork+0x514/0xb70 [ 1202.966693][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1202.966716][ T33] ? __switch_to+0xc89/0x1420 [ 1202.966752][ T33] ? __pfx_kthread+0x10/0x10 [ 1202.966776][ T33] ret_from_fork_asm+0x1a/0x30 [ 1202.966823][ T33] [ 1202.966854][ T33] Sending NMI from CPU 0 to CPUs 1: [ 1202.966954][ C1] NMI backtrace for cpu 1 [ 1202.966969][ C1] CPU: 1 UID: 0 PID: 5608 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1202.966992][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1202.967004][ C1] RIP: 0010:lock_release+0x5a/0x3c0 [ 1202.967029][ C1] Code: 12 83 f8 08 0f 83 60 02 00 00 89 c0 48 0f a3 05 d4 d9 d6 0f 73 0d e8 f5 04 09 00 84 c0 0f 84 9e 02 00 00 83 3d c6 0a d7 0f 00 <0f> 84 26 02 00 00 65 8b 05 f1 bc f2 12 85 c0 0f 85 17 02 00 00 65 [ 1202.967046][ C1] RSP: 0018:ffffc90003a2f528 EFLAGS: 00000202 [ 1202.967064][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 8000000000000002 [ 1202.967077][ C1] RDX: 0000000000000000 RSI: ffffffff8c6dd860 RDI: ffffffff8c6dd820 [ 1202.967090][ C1] RBP: ffff88801f5fdab0 R08: ffff88801f5fdafb R09: 1ffff11003ebfb5f [ 1202.967105][ C1] R10: dffffc0000000000 R11: ffffed1003ebfb60 R12: 0000000000000000 [ 1202.967118][ C1] R13: ffffffff8244d0b4 R14: ffffffff8fd5c8a0 R15: 00000000000665ef [ 1202.967133][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 1202.967149][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1202.967168][ C1] CR2: 00007f8023b57e20 CR3: 0000000076e86000 CR4: 00000000003526f0 [ 1202.967185][ C1] Call Trace: [ 1202.967192][ C1] [ 1202.967204][ C1] ? page_table_check_clear+0x124/0x500 [ 1202.967232][ C1] page_table_check_clear+0x49d/0x500 [ 1202.967257][ C1] ? page_table_check_clear+0x124/0x500 [ 1202.967289][ C1] __zap_vma_range+0x3a34/0x4f80 [ 1202.967349][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 1202.967375][ C1] ? lock_acquire+0x115/0x350 [ 1202.967401][ C1] ? unmap_vmas+0x1b9/0x550 [ 1202.967425][ C1] unmap_vmas+0x390/0x550 [ 1202.967453][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1202.967474][ C1] ? mas_next_slot+0xc91/0xd70 [ 1202.967509][ C1] exit_mmap+0x293/0x9f0 [ 1202.967529][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1202.967561][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1202.967589][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 1202.967622][ C1] __mmput+0x118/0x420 [ 1202.967646][ C1] exit_mm+0x18e/0x240 [ 1202.967667][ C1] do_exit+0x6cd/0x2360 [ 1202.967691][ C1] ? __pfx_do_exit+0x10/0x10 [ 1202.967707][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1202.967743][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1202.967763][ C1] do_group_exit+0x22d/0x2f0 [ 1202.967785][ C1] __x64_sys_exit_group+0x3f/0x40 [ 1202.967806][ C1] x64_sys_call+0x18c6/0x18d0 [ 1202.967824][ C1] do_syscall_64+0x166/0x520 [ 1202.967846][ C1] ? trace_irq_disable+0x3b/0x140 [ 1202.967868][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.967888][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1202.967910][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.967930][ C1] RIP: 0033:0x7f8022d9e1d9 [ 1202.967968][ C1] Code: Unable to access opcode bytes at 0x7f8022d9e1af. [ 1202.967978][ C1] RSP: 002b:00007fff191f0128 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1202.967998][ C1] RAX: ffffffffffffffda RBX: 00007f8022e50e1d RCX: 00007f8022d9e1d9 [ 1202.968012][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 1202.968024][ C1] RBP: 00007f8022e50e3b R08: 0000000000000000 R09: 00007fff191f024c [ 1202.968038][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 1202.968050][ C1] R13: 00007fff191f024c R14: 00007fff191f02e0 R15: 0000000000000000 [ 1202.968074][ C1] [ 1203.061653][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 1203.963662][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1203.972793][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1203.982872][ T33] Call Trace: [ 1203.986184][ T33] [ 1203.989132][ T33] vpanic+0x56d/0xa60 [ 1203.993149][ T33] ? __pfx___schedule+0x10/0x10 [ 1203.998018][ T33] ? __pfx_vpanic+0x10/0x10 [ 1204.002564][ T33] panic+0xc5/0xd0 [ 1204.006316][ T33] ? __pfx_panic+0x10/0x10 [ 1204.010757][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 1204.016237][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 1204.021743][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1204.027937][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1204.034140][ T33] watchdog+0x1030/0x1030 [ 1204.038513][ T33] ? watchdog+0x1c7/0x1030 [ 1204.043047][ T33] kthread+0x38b/0x480 [ 1204.047141][ T33] ? __pfx_watchdog+0x10/0x10 [ 1204.051841][ T33] ? __pfx_kthread+0x10/0x10 [ 1204.056476][ T33] ret_from_fork+0x514/0xb70 [ 1204.061105][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1204.066243][ T33] ? __switch_to+0xc89/0x1420 [ 1204.070955][ T33] ? __pfx_kthread+0x10/0x10 [ 1204.075568][ T33] ret_from_fork_asm+0x1a/0x30 [ 1204.080373][ T33] [ 1204.084011][ T33] Kernel Offset: disabled [ 1204.088350][ T33] Rebooting in 86400 seconds..