last executing test programs: 3.490164209s ago: executing program 3 (id=4111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x21, "04000787b600eca6aa0825471829a00700e54b93e70b65949906a13b76078a07f95f5e8bc0e7b3635240e82fa543d570618759f1f1f349"}}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007910480000000000630a1719000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x200, 0x4, 0xffffffff, r4}, 0x10) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)={r4, 0x6, 0x4, [0x8, 0x6, 0xe, 0x58e]}, &(0x7f0000000080)=0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x34}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) (async, rerun: 64) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x28, 0x0, 0x0, 0xc0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x1000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10, 0x40}}}}}}, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r7}, 0xc) 2.907054564s ago: executing program 1 (id=4115): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000500), &(0x7f0000001200)=@tcp, 0x1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'syztnl2\x00', r3, 0x1, 0x10, 0x9, 0x10, {{0x22, 0x4, 0x0, 0x1b, 0x88, 0x65, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x13, 0x60, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @noop, @cipso={0x86, 0x16, 0x2, [{0x1, 0x10, "f5255447eca10a4eca0e04fa9016"}]}, @rr={0x7, 0x1f, 0x62, [@local, @broadcast, @private=0xa010100, @multicast2, @broadcast, @rand_addr=0x64010100, @remote]}, @timestamp={0x44, 0x28, 0x82, 0x0, 0xb, [0x2, 0x9, 0x9, 0x100, 0x10, 0x5, 0x101, 0xa5, 0x8]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9d, 0x9d, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xc}]}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x5, 0x9}, @ptr={0x3, 0x0, 0x0, 0x2, 0x2}, @restrict={0x4}, @datasec={0x1, 0x6, 0x0, 0xf, 0x1, [{0x5, 0x1f5, 0x8}, {0x2, 0x1ff, 0x5}, {0x4, 0x7f, 0x6}, {0x4, 0x800, 0x1b0}, {0x2, 0x8, 0x10001}, {0x1, 0xcb, 0x8193}], '\x00'}, @float={0xa, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x30, 0x0]}}, &(0x7f0000000580)=""/213, 0xbf, 0xd5, 0x0, 0x401, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x0, 0x4, 0x10001, 0xc004, r0, 0x80, '\x00', r4, r5, 0x5, 0x5, 0x2, 0x0, @value=r6}, 0x50) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC_PROXY(r7, 0x29, 0xd3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d000100000c00000000000007000000", @ANYRES32=r3, @ANYBLOB="400096040a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 2.808052113s ago: executing program 2 (id=4116): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001e40)={&(0x7f0000000c40)="ee0def4930", &(0x7f0000000d00)=""/4096, &(0x7f0000001d00), &(0x7f0000001d80), 0x1, r3}, 0x38) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed3aea0d14f20bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b", 0xd8}], 0x1}, 0x800) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) (async, rerun: 32) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x6}, [@typed={0x8, 0xa, 0x0, 0x0, @binary="11000000"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2.683157993s ago: executing program 1 (id=4118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000e00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c800}, 0x54) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x1, 0x700, 0x4, 0xd, {{0xb, 0x4, 0x3, 0x0, 0x2c, 0x68, 0x0, 0x4, 0x2f, 0x0, @empty, @broadcast, {[@rr={0x7, 0x17, 0xcf, [@remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x21}, @loopback, @private=0xa010101]}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40001) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@link_local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x50, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x2c, 0x0, @private1, @loopback, [@hopopts={0x33}, @hopopts={0x3c, 0x1, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x8, 0xa}}]}]}}}}}}}, 0x0) 2.562587864s ago: executing program 1 (id=4120): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'ipvlan0\x00', &(0x7f0000000580)=@ethtool_ringparam={0xa, 0x0, 0x300, 0xfffffffc, 0x0, 0x5, 0x7, 0x0, 0x8}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000480)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x10000, @rand_addr=' \x01\x00', 0x10000}}, 0x24) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r3, @ANYBLOB="04002dbd7000fcdbdf2518000000940002800400040008000100070000000400040014000380000002000800000008000200ff0100000400040008000200d00200004c00038008000200060000000800010000000000080002000600000008000100fb070000080002000600000008000100ff0f00000800010002000000080001000600000008000200f8ffffff0400040008000200020000000800020001000000340003800800020025050000080002000000000008000100010000000800020003000000080002008100000008000100040000001400098008000100060000000800010006000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x400a054) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) ioctl$int_in(r9, 0x5421, &(0x7f0000000340)=0xfff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r10, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @loopback}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02008f210958db410bc0f4bccbb01f7574144878a1513a7ff4000004000000080000000100000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x11, &(0x7f0000000640)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0000000000000002b70500000800000085000000a50000008500f8000f0000009500000000000000da641b53728c79ecccc67f5b94839d090999561b7b14cfdb058e42886e68e7902153d55d02567b8db84eff49282d133b05ab183305948400fca7f8210bb97a38ea424770982fdc67cb63e10e320169d976d65c", @ANYRES8=r4], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0xd, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01300134b1ff"}) 2.539567768s ago: executing program 2 (id=4121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r1, 0x3a, 0xc8, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fcffffff000000002f000000100003800400040008000200fd7f000018000180140002006d61637674617030"], 0x3c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0xfe46, 0x7, 0x1, 0x0, 'hj'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 2.521059167s ago: executing program 3 (id=4122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000080a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31110000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c00018008000140000000044400"], 0xf0}}, 0x0) 2.327544521s ago: executing program 4 (id=4123): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a02000000715b1deeb176570a25fb0001180100002001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600"], &(0x7f0000000500)='GPL\x00', 0xa, 0xd4, &(0x7f0000000340)=""/212, 0x0, 0x8}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}], 0x18}, 0xfc40) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=0x0], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xe02, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "595b6028a0e4931133f6d9919fd48557896811cd874f3c107bbfc1c8831026f40798a2b35d0600e02216198977dc3d41ed0880c64c39e5ff0f00000000000012"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'vcan0\x00'}) write(0xffffffffffffffff, &(0x7f0000001040)="b295439aaa4f4a975f74ed15e6d461bc177e6955979c548dad4c737fe663fe3101324c448f2def08dc27fdc870296c59868d7c5756fc7c04e6027f01cbc214e2ab208d25fd3940782fc21aca33b4530b303e5e0af91c7df06b102eb3728c4fb0788c4c", 0x63) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000540)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000102000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300006e00000000000000b7020000000000007b9af0ff00000000c509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(r2, &(0x7f0000000100)=0x400000000000808, 0x12) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x4, 0x2, 0x9, 0x0, 0x1, 0xe92}, 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r14, r13}, 0xc) 2.323570032s ago: executing program 2 (id=4124): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRESHEX=r3, @ANYRESDEC=r3], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) socket$inet6(0xa, 0x5, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4412c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r13, @ANYBLOB="010000000000040000000100000024000300000000000000f2000000000000feff00000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r13, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r11, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x37}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}]}, 0x67}, 0x1, 0x0, 0x0, 0x4000020}, 0x40040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000480)={r14, 0x7, 0x3}, 0x8) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r15, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) 2.12136412s ago: executing program 3 (id=4125): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2c, &(0x7f0000000000)=0x80000001, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000200)={r0, 0x6, 0xd, 0x9}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$x25(r0, &(0x7f00000002c0), 0x12) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f00000001c0), 0x12) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="2bdacaffeb52cf29384ebbd450f618b0587b75ca3a085df0c9b5a03325"], 0xf0}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001240)='a', 0x0, 0x1}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) recvmsg(r1, &(0x7f0000000640)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/63, 0x3f}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000780)=""/122, 0x7a}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f0000000680)=""/110, 0x6e}], 0x6, &(0x7f0000000500)=""/4, 0x4}, 0x40) 1.923698879s ago: executing program 3 (id=4126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000180)={0x1, 0x100, 0xe1, 0xbf1e, 0x1}) (async) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r2, &(0x7f0000002b00), 0x400000000000358, 0x40844) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) (async) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) close(0x4) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) tee(r1, r0, 0x9, 0x3) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x28, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x14, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_SIZE={0x5}, @NFTA_CT_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}]}}, @NFT_MSG_DELRULE={0x68, 0x8, 0xa, 0xa03, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x4c, 0x7, 0x1, 0x0, "7f75b2f9d55465b0cd0f09166a7b5823240a84bac5988ae4c3bf0fd2c6b4613cbae2b5a42018dcbb7dea3fce45c0fe1cbe9f310f6e1380cb8a8d6accda0ff4c25f56daf4347a55a4"}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x248, 0x8, 0xa, 0x103, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xf7, 0x7, 0x1, 0x0, "882123f931bab3f33201a534324f5f70bc3b98dc01e9013bafd09b8c74a6cb1862e57af600875d05b04740e27a811a2d859cc523ac691f148d05f62850faf5c072b998c6b15c1c11419e5b64e40b9190a491d239fbd7e182138f8a042cc20ce4b8ab857b95f3e64cc352588399e3f0e391e6a8ef022a9a6f80896edc08676d1ada1ccd3588c942afa204ce23f8674d8842fb35d368f912ba07ddc8efc77e97202a98653ea3081100bbacd775c2d57f7638defc08ce9b627a9f50addd9eb3ba5e27b88643d526759963494102ba469a471b73c19548cbcf1e77f6ce3ccb7526b276008d8e0f0820790f116c4ba1f51f33917115"}, @NFTA_RULE_USERDATA={0x27, 0x7, 0x1, 0x0, "5ae8485fe657f37190a258fe8fd71c29a19df06cd1773d5c4a3e08eda4280dfb7a6d67"}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0xdb, 0x7, 0x1, 0x0, "368286340dcdfc791ee23af8a4c33e0b054aefe7066436f1810660328f38459b7d74528c13c48c933727ebaf43b9c095010ffb86a6b1f429079464842fec2136f63e3d0b520025927f14764b769f68d9878940962f9a20ac559c7e33049c029877d887dbe0940ce0024264836386189431dcac7b3ace97a46d86527be89cd3fdd1f7a86f550e846923e0b65c30876e0a5bfb9d0cda954fc4b65a326281becc961aa5a2c6121be673b621e97312295a1b12a6002b6122dbc3e1d74ca930ffef7c575fffab405f86b5192102a043715fac611058dbb2e856"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x360}, 0x1, 0x0, 0x0, 0x20044001}, 0x10) (async) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000000)={0xd10, 0x38, 0x1}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@mcast2, @mcast2, [0x0, 0xffffffff, 0x0, 0xff000000], [0xff, 0x0, 0xff000000], 'veth1_to_batadv\x00', 'batadv0\x00', {0xff}, {0xff}, 0x2c, 0x69, 0x7, 0x20}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffffff, 0xffffff00, 0xffffffff], [0x0, 0xff000000, 0xff, 0xff], 'ip6_vti0\x00', 'team_slave_1\x00', {}, {}, 0x3a, 0x9, 0x1, 0x20}, 0x0, 0xd8, 0x148, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e21], [0x4e23, 0x4e22], 0x13, 0x10, 0xc2, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x500, 0xb, 0x8, 0x0, 0x0, "7e53077295d9e9a49db2fdc490dc756b0de9034f8a19cb2189bb5a4745583e987dba6c5f2b77cae662c53e87ceda5c32c7daefa9f9f188319a1b3a57225a6ccb"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x1f}, [0x0, 0x0, 0x0, 0xffffffff], [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {}, 0xff, 0x7f, 0x2}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x6, 0x0, 0x1, [0xe, 0xc83d, 0xff, 0x401, 0x5, 0xadfb, 0x8000, 0x8000, 0xac, 0x401, 0x7, 0x3, 0x4, 0xfff4, 0x1e95, 0x1ff], 0x10}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x400, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000031d414000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.738679496s ago: executing program 2 (id=4128): socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000bc0)}}], 0x1, 0x400c011) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004084}, 0x480c4) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}, @TCA_U32_POLICE={0x4}]}}]}, 0x60}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x4, 0x206, 0x4}]}}]}}]}, 0x5c}}, 0x24040084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) unshare(0x2a060400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r8, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) 1.735075365s ago: executing program 4 (id=4129): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) pwritev(r0, &(0x7f00000023c0)=[{&(0x7f0000001240)="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"}, {&(0x7f0000002240)="b1c59673c60338c4f9a60088c4939e13e52992da4fd3abc36f520f2c057c5729d59b3b3c0cec33335a74c120f8bfe114c8ed394e86275bde5e088b858e997bb67c5c29d87446a760f16e651a52a4ed33c9a47f4270452d5c0a4341f4b41b8da43268"}, {&(0x7f00000022c0)="0dd9581fb3d62bd1a5717014b8525f8d273aadb9efb4da4e1818f70b6f6f725351d0be10884cd489b09251cf1d9907aad7a7138b913b90c1d7189a0deb3b9fcbee6c4b22e7b17ec5751363d49811f5bc89b8ba87d787edb6ca178f116f1dba665b895bbf577a2f15af6e63b0a52ac42808bfb7b6a7746feee87a0d"}, {&(0x7f0000002340)="9a61ebcab1015195fcb995b5a6afaff12868dbfb7268c2d7b6a4d53ee6d6cf6848079a956ac7dbb3efcf687197665e33f0cc8ebf976241cad23cad94b0b9d762afd2"}], 0x100000000000039f, 0x807, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f00000000c0)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) pwritev(r0, &(0x7f00000023c0)=[{&(0x7f0000001240)="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"}, {&(0x7f0000002240)="b1c59673c60338c4f9a60088c4939e13e52992da4fd3abc36f520f2c057c5729d59b3b3c0cec33335a74c120f8bfe114c8ed394e86275bde5e088b858e997bb67c5c29d87446a760f16e651a52a4ed33c9a47f4270452d5c0a4341f4b41b8da43268"}, {&(0x7f00000022c0)="0dd9581fb3d62bd1a5717014b8525f8d273aadb9efb4da4e1818f70b6f6f725351d0be10884cd489b09251cf1d9907aad7a7138b913b90c1d7189a0deb3b9fcbee6c4b22e7b17ec5751363d49811f5bc89b8ba87d787edb6ca178f116f1dba665b895bbf577a2f15af6e63b0a52ac42808bfb7b6a7746feee87a0d"}, {&(0x7f0000002340)="9a61ebcab1015195fcb995b5a6afaff12868dbfb7268c2d7b6a4d53ee6d6cf6848079a956ac7dbb3efcf687197665e33f0cc8ebf976241cad23cad94b0b9d762afd2"}], 0x100000000000039f, 0x807, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f00000000c0)={0x1}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.61576577s ago: executing program 3 (id=4130): socket(0x10, 0x5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x297, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0x23e, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x22a, 0x0, @wg=@cookie={0x3, 0x3, "9cbff63586f481b853526f1cad72c0f4b49d23554acc4455", "4e6e0d13cd33bd8bb44d5dda3c463ca64576989838e7de4f0182bddc54ae0d2c"}}}}}}, 0x0) readv(r0, &(0x7f0000004000)=[{&(0x7f0000002c40)=""/248, 0xf8}, {&(0x7f0000002f80)=""/4096, 0x1000}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x8) pread64(r3, &(0x7f0000000340)=""/69, 0x45, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000003000000020f00000080000088000000", @ANYRES32=r1, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03002000"/19], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000faffbfff000000f93f00000018110000d5e30194771005627a6da470bccd3a7e714a479bfd1b2ea793f17d08a35952f9b8c4b1e8e0381fe9049a8b83859bf44102a8a9fbd1a0e27530b407983821a983b8dbb08d739dac3c510aecb62ca54e4e6b53102128515b6c835452f7e6dd339dd34707d35d0c7d71064eeda8c200a214704af9acfef98c1bb2acb70010e603119bf2e9d4a92d38d6b25373ec62955998265d8d94381626c3c77512b20df0d0657f6b2e9618f565aa91ec96c268aa0bd3d4eda9e4747c61e489e7a5ce4ff6a0e9a891c9ffae01", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850000000e0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r7], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r8, 0x50, 0x800}}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x8000) sendmsg$inet(r10, 0x0, 0x0) 1.36454391s ago: executing program 4 (id=4132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x24008804) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x8, 0x15, 0x3, 0x4b0, 0x8, 0xb, 0x40, 0x4}}]}}]}, 0x44}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf25210000000c0005000201aaaaaaaaaaaa0c0005000203aa020000000000000000010000000c0005000201aaaaaaaaaaaa0500200001000000050020000000000009001f0070687933000000000a0001007770616e310000000a0001007770616e30000000"], 0x74}, 0x1, 0x0, 0x0, 0x48895}, 0x4050) 1.278198311s ago: executing program 1 (id=4133): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x68, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x49, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000001c0)={{r1}, 0x4000, 0x8, 0x7}) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) socket(0x1e, 0x803, 0x8) (async) r8 = socket(0x1e, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="3cffff4010001fff00000000c819090048902f3a", @ANYRES32=0x0, @ANYRES64=r6, @ANYRESOCT=0x0, @ANYRESHEX=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r11], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket(0x10, 0x803, 0x8) (async) r12 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r12, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r14) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r14) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r15], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.265815279s ago: executing program 0 (id=4134): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@initdev, @rand_addr, 0x0}, &(0x7f0000000080)=0xc) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0xc891) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044400}, 0x10) (async) close(r0) (async) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000340)={{0x6, 0x80000001}, 0x100, './file0\x00'}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r3, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}]}, 0x20}}, 0x0) (async) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000600), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x16, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x16}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000700)=@gcm_256={{0x303}, "c6b4f696511c6a48", "4d5dca119a8bf8b9f462e39910aa0a34e144c2e02fc68ef5dbefd968fd9831a5", "c43c0e89", "203d03b8700d59b9"}, 0x38) (async) r6 = accept4(r0, &(0x7f0000000740)=@tipc=@id, &(0x7f00000007c0)=0x80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040000}, 0x40800) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x4e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8080) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r3, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x47}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x48004) (async) sendmsg$tipc(r5, &(0x7f0000000e00)={&(0x7f0000000b40)=@name={0x1e, 0x2, 0x1, {{0x41, 0x1}, 0x4}}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000b80)="259255bab3024974309878ade4c61a594c8b74313f9da0530dec418c3f7f338243ac0987339b5ce2ac08be77d160333aab7d59984a482a3d6d530c2488abbbd6ead6554a65fd0e7374adae320289b9b28366b0b1e18499e4aeac480c4ed94e3e6660c7ca5a0fdd737c59ee8b25535682d8545c4a89772f7a10ce319927ff926b4d120c1f3b69f5592613197070ba5c1eb78ed8e6cd7e116f27d2a8ec8caf51539f02d52d974fc3965394e12b76971598a45728e2631ae8a53e9c88d9a5f23bb07abfc29576db2c80eec6499ed1d02752f16fb0c4e0c618886cc02886ea66ca06a26cbb23", 0xe4}, {&(0x7f0000000c80)="3ee96e0f4c7fb2289e193c7cf481f2c961fbd91131b05502eb25eb7bb097da168b2c", 0x22}, {&(0x7f0000000cc0)="9189994e0ca1", 0x6}, {&(0x7f0000000d00)="c7e9c554318e317181d866a017596022d27b0fea9548a314a744198b83d34665841be831951b527fb47a352d3a04985665d81fafe9a0c8c1fbd96f3890d633e64cc8ae3299ddc1d9bdfebed990fe209031fefc8f3a3fbb9c56e10720c43a1c", 0x5f}], 0x4, &(0x7f0000000dc0)="45b70e29f3ded5f3c22528af887594d072", 0x11, 0x40}, 0x4000004) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r6, &(0x7f0000001100)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e80)=@getae={0x210, 0x1f, 0x300, 0x70bd2a, 0x25dfdbfe, {{@in=@loopback, 0x4d6, 0xa}, @in6=@private2, 0x1}, [@algo_comp={0xc8, 0x3, {{'lzs\x00'}, 0x400, "52197ee044aa8cb2512504cfe0aba820fc4520cff87a5e28bd353269318dfc512e767186f1e4f3c2569bdf69f782271689d302e5f19a3196b1d560f5c6bd460d5d09bc1abadef1440715ec6751e622b760f3230656625f64447ef7f414ad607aaf4acb32368ef691cd4d59561fb6bb09d5d7217e2ee31a025edfff018d4b8935"}}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2d, 0x70bd29, 0x70bd28, 0x70bd2d, 0x3, [0xfa80, 0xd970, 0x81, 0x3]}}, @iptfs_dont_frag={0x4}, @tfcpad={0x8, 0x16, 0x6}, @migrate={0x9c, 0x11, [{@in6=@mcast2, @in6=@mcast2, @in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x3502, 0x2, 0x2}, {@in=@multicast2, @in6=@mcast1, @in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x32, 0x1, 0x0, 0x3505, 0x2, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0xa}}, @extra_flags={0x8, 0x18, 0x2}]}, 0x210}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80020009}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x4c, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xffa48a0649145c09}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1df}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x2b9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40804) (async) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000001280), &(0x7f00000012c0)=0x8) (async) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000001300)={0x1, 0x2000}, 0x4) (async) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000001500)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001380)={0x130, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0xf, 0x1a, 'SMC_PNETID\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x3}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xa}, @IPSET_ATTR_IFACE={0x14, 0x17, 'dummy0\x00'}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'ipvlan0\x00'}, @IPSET_ATTR_COMMENT={0x8, 0x1a, 'lzs\x00'}]}, @IPSET_ATTR_ADT={0x80, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x130}, 0x1, 0x0, 0x0, 0x48d1}, 0x200000c0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x78, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x845}, 0x1) (async) sendmsg$IPVS_CMD_ZERO(r9, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001780)={&(0x7f00000016c0)={0xb4, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x26}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x806) (async) ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f0000001800)) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b80)={&(0x7f0000001880)={0x298, r3, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x10}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_KEYS={0xe8, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a44ec6bd9c611a075e33449862"}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f99d44c755"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e42592f7f0c6e6b5f593e3b890"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0xd, 0x4, "fba9df5d2c4ef0708c"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3e7d0a702ce71e40731282a8af"}, @NL80211_KEY_SEQ={0x13, 0x4, "a3b7297a467959ec062c8b4a1c963c"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a7e39e5db50ac63676c58c2d82"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5}]}]}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_IE={0x160, 0x2a, [@prep={0x83, 0x1f, {{}, 0x8, 0x2, @device_b, 0x0, @void, 0x9, 0x9, @broadcast, 0x8}}, @perr={0x84, 0x103, {0x0, 0x11, [{{}, @broadcast, 0x4, @void, 0x11}, {{}, @device_a, 0x2, @void, 0x35}, {{0x0, 0x1}, @broadcast, 0x8000, @value, 0x39}, {{}, @device_a, 0xffff0001, @void, 0x14}, {{}, @broadcast, 0x5a, @void, 0x13}, {{0x0, 0x1}, @device_b, 0xffffffff, @value, 0x1c}, {{0x0, 0x1}, @device_a, 0x6, @value=@broadcast, 0x1e}, {{0x0, 0x1}, @device_a, 0x1000, @value=@broadcast, 0x3d}, {{}, @device_a, 0xfffffffc, @void, 0x20}, {{}, @device_b, 0x4, @void, 0x4}, {{0x0, 0x1}, @broadcast, 0x9, @value, 0x10}, {{}, @device_a, 0xfffffff3, @void, 0x11}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x42}, {{}, @broadcast, 0x4, @void, 0x3c}, {{}, @device_b, 0xdc, @void, 0x21}, {{}, @device_a, 0xffffb255, @void, 0x2e}, {{}, @device_b, 0x9, @void, 0xb}]}}, @mic={0x8c, 0x18, {0xaaf, "75c5ad284161", @long="69a1f345c2dab514893175d701680107"}}, @ht={0x2d, 0x1a, {0x0, 0x0, 0x7, 0x0, {0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x1, 0x3}}]}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x298}, 0x1, 0x0, 0x0, 0x8001}, 0x4) 1.003873639s ago: executing program 0 (id=4135): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e, 0x0, 0x2}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf060000000c0000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0xa, 0x1000, &(0x7f0000001000)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 880.115102ms ago: executing program 0 (id=4136): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2c, &(0x7f0000000000)=0x80000001, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000200)={r0, 0x6, 0xd, 0x9}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$x25(r0, &(0x7f00000002c0), 0x12) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f00000001c0), 0x12) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="2bdacaffeb52cf29384ebbd450f618b0587b75ca3a085df0c9b5a03325"], 0xf0}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001240)='a', 0x0, 0x1}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) recvmsg(r1, &(0x7f0000000640)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/63, 0x3f}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000780)=""/122, 0x7a}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f0000000680)=""/110, 0x6e}], 0x6, &(0x7f0000000500)=""/4, 0x4}, 0x40) 758.393498ms ago: executing program 1 (id=4137): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 694.626407ms ago: executing program 4 (id=4138): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000300000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c000000000000007f0000010000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fc0000000000000000000400000000017f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000140)=0x1, 0x4) 648.751848ms ago: executing program 0 (id=4139): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000ff0300008500000072000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000000600000095000000000000a058510fba28f4cc1430e06764df9be3e8d6f1d61fe9065de982c4483111e9d4f17cf05edcd0f3772db3ef563260e5afa19ba1f9d8fb6496258598061cd21420aa45a8d7da1dd9349b122d6a1fe333789eeca4322e518bf9a1204781bf"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a0800000000080041007278650014"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x20040000) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'veth0_vlan\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000680)='tasks\x00', 0x2, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r5, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f00000000c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000980)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0xc55ed31a2166ec3f}, 0x40844) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYRESOCT=r5, @ANYRES16=0x0, @ANYBLOB="200028bd7000fddbdf25160000000500030000000000340001801400020076657468315f746f5f6272696467650008000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164765f736c6176655f310000"], 0x50}, 0x1, 0x0, 0x0, 0x94}, 0x11) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r8, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r8, 0x4004743a, &(0x7f00000000c0)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], 0x0, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xd, &(0x7f0000000900)=ANY=[@ANYRES64=r9, @ANYRESHEX=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffcaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xe, 0x0, &(0x7f0000000000)="aaf3a4cd08258cebe46db996738b", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00151b070601080000000000000000030000090900020073797a31000000000900020073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60020000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) 611.123541ms ago: executing program 2 (id=4140): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) unshare(0x22020600) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x3951d, 0x4b7bc}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004854}, 0x8000002) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r7, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'bridge0\x00'}) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 560.212896ms ago: executing program 3 (id=4141): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='X'], 0x6) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {0x0, 0x27}], 0x2) (async) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, &(0x7f0000000300)={0x8, 0x400, 0x9, 0x2, 0x2}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500), 0x4) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x3, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) (async, rerun: 32) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0xff00, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00ff0000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000e9ffffffffffffff0000000000000000000000000000000000000000feffffff00000000"]}, 0x108) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x6}, {0x6}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0x5, 0x7, 0x1, 0x3d3f, 0x1, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_FLAGS={0x8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000"], 0x48) (rerun: 64) 503.179786ms ago: executing program 4 (id=4142): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x2f, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x65, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendto$packet(r0, &(0x7f00000000c0)="4830e010c4af7fb12eaeafa7d66afbc80503c4c7c765b4c4401e16be0e48cf8c7bd16daf523506628722fc87c7379b0ef2b2de35cda5a5abfcb67bfc69cd57c3ba09b6e634ba8aeb85d1bcb0d355c0a5a0b7d3e6b69274f8c0ae057f4f0959016e5f35ffaa891b6a6a253d5552b04269e5877e86f662f4922513e63800bdb4c7507ebeceffc29bf27b121a2e4fb4bfd83425cbe7b7efc0f7717abe4ee3", 0x9d, 0x4040080, &(0x7f0000000540)={0x11, 0xc, r2, 0x1, 0x9}, 0x14) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002040)={'vxcan1\x00', 0x0}) sendmmsg(r0, &(0x7f00000034c0)=[{{&(0x7f0000000580)=@nfc_llcp={0x27, r7, 0xffffffffffffffff, 0x6, 0x1, 0xa8, "34a83069afa40c9629a56e82580458f610cea80593553c8700ce9ad44f6ed037a480dfaf8eaf54ebf8f2bca134f33568007aefad40b0d8240c0df5e908c1f3", 0x2f}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000680)="a076297421", 0x5}, {&(0x7f00000008c0)="e15fa4bcc70b8865009783af553e7900862c7515cbbbedb2f9e5af8c3548ff6d4f70505a48dd4ba5ebdd8ece5144229d2da6cfa1bb54b668e5675aaa03b6a7556b4e11cb62f1a0289beeac0dc7dd4bff21c0688a999d23784aa8787898d66f3a8c236afeef7c6777", 0x68}, {&(0x7f0000000940)="c932453f31a837e06c7faf7a", 0xc}, {&(0x7f0000001a40)="82b4cf4552862ebbd3c8e4b29e674a4e29df18fc9c6f265049e0d26033079fbfff83a1a5bc7491c29f52165cecb902cadd2f7d9de5a1c1db47a8d1add9e62a8434ce5b82739dc4333b83ab5dbc9b53444ec6d22e6ea281b7b34f6e5257869ca1c3c5130016c72a49e9f0a9823f44086920be7b5e2e3eab84c6dac9bcfd40e977f3500af1c7", 0x85}, {&(0x7f0000001b00)="52941f7aef32259205b0510fc372f147045336618180aafcf3bf548931c037d4cdc489aaea1067b1ae95565035b941020c9243dbbe909de26fb50398d5549ae7514ef41fbb19d1ae5cdcc9015c2ff91f42442f65217239a9239f936beefed698483cc4aa31abb077d7c47f24c58dc3dbea2f499a7ed7d8cec37f", 0x7a}, {&(0x7f0000001b80)="91923d79f67e72b279bbe6a36d515616d387ffd4a61535f6399e63e2b87d5303321a454108515015a610a71532c914aaa716ca0be0a0", 0x36}, {&(0x7f0000001bc0)="5d2d658286cfc9e3c62183b2e08c86666d2d08ae59d8b833f20e4b5aec60a01ae5a950852bdf8758f90f35eb75575e79504d289adab4a332ff0a18c6a44c95655a288425e25b99917283c616c5083ead29aa3327f83b5a77fe41117c398dfc48377d89157ff91557c82ecf0522d036d0ef7b3398403438c0708bc0c6b6454b1e039d1aae1046fd76691926189f38c4c75290ce7c49b645645d43fa7342d9255c90fb227d07cf6a3d8e9edc0950b7ca2209bc5978dd0c6c752a4bae14", 0xbc}], 0x7}}, {{&(0x7f0000001d00)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x80, @private1, 0xffffffff}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001d80)="3798b55d91284a71aa95c85324f282cfdaa675c9604e8820ad08394e36cb80c8fa5c08ba462669f697c7c501711aa68e02615a5847ecefe1d8f3ac5ee6eec5d7300c8ac7eb680e886882c74eaea943ef074ca95efd384fd0ca40962834f59f5c2e2290069830375802c3c8fc5b6db92b98c39eee69325e788faa6cd81faa39c4bcdaf629508c85445c44ee9c970e7b7e3e577957d272b341479856fc620a597c6948f68a5388245c950c3e84a9fb2ff3f0d59c79ad3e45e1d86e11107adfb0d71aee320c4aef95ab738dcb", 0xcb}], 0x1}}, {{&(0x7f0000001ec0)=@caif=@dbg={0x25, 0x1, 0x8}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f40)="4af81037bee3c3c5dc3ff55b5d4238d3170aa6790dcb26dd4d251c9fad9961854c89b0d454064eac463df25aa98027a6a164defa9cba28973b4be9041684c62abd3bbf9485d72079d8254c9fd1cdc61212b5af1294dbe09214eae9e0e5fe5794af949d0d7514d3142d905d332e0980e6e6c26cec6602c4654e4bc705bc85f969f4ea4b4158614f6ea44e819adeea3e3eff007ffd71c34c64c696b9ded18cabc37df06c", 0xa3}], 0x1}}, {{&(0x7f0000002080)=@can={0x1d, r8}, 0x80, &(0x7f0000003300)=[{&(0x7f0000002100)="0a6f3bcc4696a64467f495b5f2a71f9a4d1bfb3c88fb6d221f21b6de5ce47c0c4a3ff0a6cff72cc246b9f8144aa357716dd914c8880ebbf12c11a7ea7b43c878ab2b6da3220a8a559814e3a1a227f15295bce23ad03c2e0abfc77d0a01c762f7ed05a15bb8a1ed3e2246b2d192786e1ba16556f2febec946fdf3ad7962dea869bbfa2a13bdb6447d6e2eb266dc325394c4c71182faf1756c4fb846e203b2d9dc33581f64e2c42648e7bca7d44695f8b1ffadedd0638ff68fc8e84250acb42abf37802bdb8ba380b1f904a2c494ecb0c0f65dce0faaecebc4c5f2b621c1", 0xdd}, {&(0x7f0000002200)="fb8ad32d2109bfc8fadc052c0a73cdbc2d81a4d3fec66a0cf2ce667d91f14b7812ff7ec6498e900527a03ce565791d82458c378a7befd9964bb39df4b32bf7f0648db224707e9aca5142b1bc778d1bd50e0d07ed023db1585a0a57e77d7c01cf001746ece833487fae0608d13a08c80cd4f0190a3a31860993ef8d3b7414da329a2e13de9dda96ab7407be075d8aebbf8dfa432604b4d1e12ef8e22b7fd1bd4ff40f76666cdd6ea160eb26b9c3527454dd48c66d6f43493690d900eadcfb2fd043c6d7dd25", 0xc5}, {&(0x7f0000002300)="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", 0x1000}], 0x3, &(0x7f00000035c0)=ANY=[@ANYBLOB="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"], 0x148}}], 0x4, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000840)={0x70, 0x0, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_QUEUE_NUM={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0xc001) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f00000001c0)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="680000004100010029bd7000040000000300000004004780500001804c001080460008807155e263fb868f196c19ccbdbbf28f29e0b716477cb244bc30e3ef3e444a5ced1d6fbb0e5c05b8767c7f01b8124e8d5f07e0e1cf3f1551cfbf8cf54285bf321992a20000c3a30e"], 0x68}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="450a0000ea1bb21346e92b82b90aef7e000000006111880000000000180000000000000000000000000000009500000000000000d7b50700b1e04c244a0ba956b732442521da29e575a0c57160ab79ad6eb09ae22b37", @ANYRESHEX=r2, @ANYRESOCT=r2, @ANYRES16, @ANYRES16=r0, @ANYRESOCT=r1, @ANYRES32=r1, @ANYBLOB="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", @ANYRESHEX=r1, @ANYRES8=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'ip6_vti0\x00', r2, 0x4, 0xb, 0x0, 0x401, 0x42, @remote, @empty, 0x9e91f6cf962644c1, 0x20, 0x5}}) 453.766269ms ago: executing program 1 (id=4143): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0xfffffffc, 0x0, 0x5, 0x7}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0xe0c) connect$inet(r2, &(0x7f0000006780)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket(0x11, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@remote, @multicast1}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000000200)=0x89) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000280)=0xe9, 0x4) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000040)=0x93bd, 0x4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0xec, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "dc9b45037c57522d4002fd85dfcec0c937b268a321377f09"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "ed6ea87392e5b156aa11153cb6ae63655abe57a9"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10001}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "f573104b959bb67dbf882ff947788222fc2825ef537903a8d33cdd15"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x24004090) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800050000000000000000002d6000000000000100fffffff7000100110000000c000500000000000a000000300000001800050000000000000000002d000000000020000000000005000100110000000c000500000000000a0000"], 0xe1c}}, 0x0) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x44040) r8 = socket$l2tp(0x2, 0x2, 0x73) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r9, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0xbe3456cb96a4f519) connect$inet(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x70bd2a, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_TABLE={0x8, 0xf, 0x4}, @RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240440c4}, 0x80) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 243.966597ms ago: executing program 2 (id=4144): unshare(0x4000400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) unshare(0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x357) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x100000000000002}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x3c, @private=0xa010101, 0x4e23, 0x4, 'none\x00', 0x13, 0x9, 0x13}, 0x2c) 168.987502ms ago: executing program 4 (id=4145): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000040)={'syzkaller0\x00', @ifru_mtu=0x5}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140c, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x4008005}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000180001002cbd700000010000fe880000000000000000000000000001fc010000000000000000000000000041000107144e230005000000605c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000ffffac1e000100000000000000000400000000000000060000000000000002000100000000001c2508000000000002000000000000000d000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff1a000000fcffffff020000002abd7000043500000a000100080000000000000048"], 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) close(r5) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2710, &(0x7f0000c35fff), &(0x7f0000000000)) getpeername$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000340)={@rand_addr=' \x01\x00', 0x33, r8}) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1f4ffffffffff06010000f8ffffffbf", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000ec0000001e0000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010040"], 0x12) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="5b14dd31aec604001780"], 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1}}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r11, &(0x7f0000000380), 0x0}, 0x20) 156.125675ms ago: executing program 0 (id=4146): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e, 0x0, 0x2}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000100000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0xa, 0x1000, &(0x7f0000001000)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=4147): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x2000000022ff, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000000)=0x7) kernel console output (not intermixed with test programs): 816193][T16198] ? unwind_get_return_address+0x4d/0x90 [ 380.816215][T16198] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 380.816233][T16198] ? __pfx_ip4_obj_cmpfn+0x10/0x10 [ 380.816271][T16198] ? lock_acquire+0x115/0x350 [ 380.816292][T16198] ? __pfx_inet_frag_find+0x10/0x10 [ 380.816316][T16198] ? __queue_work+0x1f8/0x10d0 [ 380.816339][T16198] ? skb_clone+0x212/0x3a0 [ 380.816381][T16198] ip_defrag+0x332/0x2030 [ 380.816405][T16198] ? dev_queue_xmit_nit+0x28d/0xac0 [ 380.816431][T16198] ? dev_hard_start_xmit+0x1c1/0x830 [ 380.816455][T16198] ? __dev_queue_xmit+0x14c0/0x3820 [ 380.816485][T16198] ? bpf_prog_test_run_skb+0xe35/0x2230 [ 380.816512][T16198] ? bpf_prog_test_run+0x2c5/0x340 [ 380.816533][T16198] ? __sys_bpf+0xa22/0xd90 [ 380.816550][T16198] ? __x64_sys_bpf+0xba/0xd0 [ 380.816567][T16198] ? do_syscall_64+0x166/0x520 [ 380.816590][T16198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.816617][T16198] ? ip_defrag+0xdf/0x2030 [ 380.816640][T16198] ? __pfx_ip_defrag+0x10/0x10 [ 380.816665][T16198] ? skb_copy_bits+0x658/0x8e0 [ 380.816698][T16198] ip_check_defrag+0x3ec/0x670 [ 380.816729][T16198] ? __pfx_ip_check_defrag+0x10/0x10 [ 380.816763][T16198] ? __skb_clone+0x449/0x6c0 [ 380.816801][T16198] packet_rcv_fanout+0x143/0x6f0 [ 380.816826][T16198] ? skb_clone+0x246/0x3a0 [ 380.816851][T16198] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 380.816876][T16198] dev_queue_xmit_nit+0xa2c/0xac0 [ 380.816899][T16198] ? dev_queue_xmit_nit+0x2d/0xac0 [ 380.816928][T16198] dev_hard_start_xmit+0x1c1/0x830 [ 380.816971][T16198] __dev_queue_xmit+0x14c0/0x3820 [ 380.816996][T16198] ? bpf_prog_test_run+0x2c5/0x340 [ 380.817016][T16198] ? __sys_bpf+0xa22/0xd90 [ 380.817045][T16198] ? __dev_queue_xmit+0x29b/0x3820 [ 380.817083][T16198] ? __pfx___dev_queue_xmit+0x10/0x10 [ 380.817150][T16198] __bpf_redirect+0xa76/0x1250 [ 380.817188][T16198] bpf_clone_redirect+0x319/0x4b0 [ 380.817215][T16198] ? bpf_test_run+0x1d1/0x830 [ 380.817232][T16198] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 380.817252][T16198] ? __kernel_text_address+0xd/0x30 [ 380.817275][T16198] ? arch_stack_walk+0xfb/0x150 [ 380.817303][T16198] ? __pfx___schedule+0x10/0x10 [ 380.817338][T16198] ? preempt_schedule_thunk+0x16/0x40 [ 380.817363][T16198] ? preempt_schedule_common+0x7f/0xd0 [ 380.817384][T16198] ? bpf_test_run+0x1d1/0x830 [ 380.817406][T16198] ? bpf_test_timer_continue+0x10c/0x320 [ 380.817430][T16198] bpf_test_run+0x354/0x830 [ 380.817473][T16198] ? __pfx_bpf_test_run+0x10/0x10 [ 380.817511][T16198] ? __kasan_krealloc+0xec/0x110 [ 380.817543][T16198] ? skb_dst_set+0x72/0x140 [ 380.817564][T16198] bpf_prog_test_run_skb+0xe35/0x2230 [ 380.817614][T16198] ? __fget_files+0x3a2/0x420 [ 380.817640][T16198] ? __fget_files+0x2a/0x420 [ 380.817669][T16198] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 380.817696][T16198] bpf_prog_test_run+0x2c5/0x340 [ 380.817718][T16198] __sys_bpf+0xa22/0xd90 [ 380.817744][T16198] ? __pfx___sys_bpf+0x10/0x10 [ 380.817781][T16198] ? __fget_files+0x2a/0x420 [ 380.817820][T16198] ? ksys_write+0x242/0x270 [ 380.817851][T16198] ? __pfx_ksys_write+0x10/0x10 [ 380.817883][T16198] __x64_sys_bpf+0xba/0xd0 [ 380.817904][T16198] do_syscall_64+0x166/0x520 [ 380.817927][T16198] ? trace_irq_disable+0x3b/0x140 [ 380.817946][T16198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.817966][T16198] ? clear_bhb_loop+0x70/0xc0 [ 380.817990][T16198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.818008][T16198] RIP: 0033:0x7fde2af9e159 [ 380.818027][T16198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.818043][T16198] RSP: 002b:00007fde2befe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 380.818062][T16198] RAX: ffffffffffffffda RBX: 00007fde2b225fa0 RCX: 00007fde2af9e159 [ 380.818076][T16198] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 380.818088][T16198] RBP: 00007fde2befe090 R08: 0000000000000000 R09: 0000000000000000 [ 380.818101][T16198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 380.818111][T16198] R13: 00007fde2b226038 R14: 00007fde2b225fa0 R15: 00007ffdf76c2148 [ 380.818143][T16198] [ 380.891593][T16192] syzkaller0: entered promiscuous mode [ 380.891618][T16192] syzkaller0: entered allmulticast mode [ 382.080862][T16238] netlink: 'syz.3.3262': attribute type 21 has an invalid length. [ 382.266926][ T52] Bluetooth: hci1: command tx timeout [ 382.816321][T16036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.876519][T16276] FAULT_INJECTION: forcing a failure. [ 382.876519][T16276] name failslab, interval 1, probability 0, space 0, times 0 [ 382.876552][T16276] CPU: 1 UID: 0 PID: 16276 Comm: syz.4.3268 Not tainted syzkaller #0 PREEMPT(full) [ 382.876573][T16276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.876585][T16276] Call Trace: [ 382.876596][T16276] [ 382.876611][T16276] dump_stack_lvl+0xe8/0x150 [ 382.876641][T16276] should_fail_ex+0x410/0x560 [ 382.876669][T16276] should_failslab+0xa8/0x100 [ 382.876691][T16276] ? inet_frag_find+0x8c6/0x1e50 [ 382.876708][T16276] kmem_cache_alloc_noprof+0xa1/0x600 [ 382.876738][T16276] ? inet_frag_find+0x8c6/0x1e50 [ 382.876764][T16276] inet_frag_find+0x8c6/0x1e50 [ 382.876782][T16276] ? unwind_get_return_address+0x4d/0x90 [ 382.876805][T16276] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 382.876824][T16276] ? __pfx_ip4_obj_cmpfn+0x10/0x10 [ 382.876865][T16276] ? lock_acquire+0x115/0x350 [ 382.876886][T16276] ? __pfx_inet_frag_find+0x10/0x10 [ 382.876910][T16276] ? __queue_work+0x1f8/0x10d0 [ 382.876936][T16276] ? skb_clone+0x212/0x3a0 [ 382.876968][T16276] ip_defrag+0x332/0x2030 [ 382.876992][T16276] ? dev_queue_xmit_nit+0x28d/0xac0 [ 382.877016][T16276] ? dev_hard_start_xmit+0x1c1/0x830 [ 382.877041][T16276] ? __dev_queue_xmit+0x14c0/0x3820 [ 382.877070][T16276] ? bpf_prog_test_run_skb+0xe35/0x2230 [ 382.877098][T16276] ? bpf_prog_test_run+0x2c5/0x340 [ 382.877119][T16276] ? __sys_bpf+0xa22/0xd90 [ 382.877137][T16276] ? __x64_sys_bpf+0xba/0xd0 [ 382.877154][T16276] ? do_syscall_64+0x166/0x520 [ 382.877178][T16276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.877210][T16276] ? ip_defrag+0xdf/0x2030 [ 382.877235][T16276] ? __pfx_ip_defrag+0x10/0x10 [ 382.877264][T16276] ? skb_copy_bits+0x658/0x8e0 [ 382.877300][T16276] ip_check_defrag+0x3ec/0x670 [ 382.877334][T16276] ? __pfx_ip_check_defrag+0x10/0x10 [ 382.877369][T16276] ? __skb_clone+0x449/0x6c0 [ 382.877400][T16276] packet_rcv_fanout+0x143/0x6f0 [ 382.877425][T16276] ? skb_clone+0x246/0x3a0 [ 382.877450][T16276] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 382.877477][T16276] dev_queue_xmit_nit+0xa2c/0xac0 [ 382.877502][T16276] ? dev_queue_xmit_nit+0x2d/0xac0 [ 382.877535][T16276] dev_hard_start_xmit+0x1c1/0x830 [ 382.877581][T16276] __dev_queue_xmit+0x14c0/0x3820 [ 382.877624][T16276] ? bpf_prog_test_run+0x2c5/0x340 [ 382.877645][T16276] ? __sys_bpf+0xa22/0xd90 [ 382.877678][T16276] ? __dev_queue_xmit+0x29b/0x3820 [ 382.877716][T16276] ? __pfx___dev_queue_xmit+0x10/0x10 [ 382.877788][T16276] __bpf_redirect+0xa76/0x1250 [ 382.877825][T16276] bpf_clone_redirect+0x319/0x4b0 [ 382.877854][T16276] ? bpf_test_run+0x1d1/0x830 [ 382.877872][T16276] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 382.877895][T16276] ? __kernel_text_address+0xd/0x30 [ 382.877920][T16276] ? arch_stack_walk+0xfb/0x150 [ 382.877948][T16276] ? __pfx___schedule+0x10/0x10 [ 382.877986][T16276] ? preempt_schedule_thunk+0x16/0x40 [ 382.878010][T16276] ? preempt_schedule_common+0x7f/0xd0 [ 382.878032][T16276] ? bpf_test_run+0x1d1/0x830 [ 382.878055][T16276] ? bpf_test_timer_continue+0x10c/0x320 [ 382.878079][T16276] bpf_test_run+0x354/0x830 [ 382.878121][T16276] ? __pfx_bpf_test_run+0x10/0x10 [ 382.878157][T16276] ? __kasan_krealloc+0xec/0x110 [ 382.878190][T16276] ? skb_dst_set+0x72/0x140 [ 382.878212][T16276] bpf_prog_test_run_skb+0xe35/0x2230 [ 382.878280][T16276] ? __fget_files+0x3a2/0x420 [ 382.878305][T16276] ? __fget_files+0x2a/0x420 [ 382.878336][T16276] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 382.878366][T16276] bpf_prog_test_run+0x2c5/0x340 [ 382.878394][T16276] __sys_bpf+0xa22/0xd90 [ 382.878425][T16276] ? __pfx___sys_bpf+0x10/0x10 [ 382.878460][T16276] ? __fget_files+0x2a/0x420 [ 382.878506][T16276] ? ksys_write+0x242/0x270 [ 382.878536][T16276] ? __pfx_ksys_write+0x10/0x10 [ 382.878571][T16276] __x64_sys_bpf+0xba/0xd0 [ 382.878595][T16276] do_syscall_64+0x166/0x520 [ 382.878625][T16276] ? trace_irq_disable+0x3b/0x140 [ 382.878644][T16276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.878663][T16276] ? clear_bhb_loop+0x70/0xc0 [ 382.878687][T16276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.878707][T16276] RIP: 0033:0x7fde2af9e159 [ 382.878726][T16276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.878742][T16276] RSP: 002b:00007fde2befe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 382.878763][T16276] RAX: ffffffffffffffda RBX: 00007fde2b225fa0 RCX: 00007fde2af9e159 [ 382.878778][T16276] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 382.878790][T16276] RBP: 00007fde2befe090 R08: 0000000000000000 R09: 0000000000000000 [ 382.878802][T16276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.878814][T16276] R13: 00007fde2b226038 R14: 00007fde2b225fa0 R15: 00007ffdf76c2148 [ 382.878849][T16276] [ 383.476038][T16036] veth0_vlan: entered promiscuous mode [ 383.779418][T16036] veth1_vlan: entered promiscuous mode [ 383.853668][T16295] netlink: 'syz.4.3272': attribute type 1 has an invalid length. [ 383.895465][T16298] netlink: 'syz.2.3273': attribute type 3 has an invalid length. [ 383.895488][T16298] __nla_validate_parse: 1 callbacks suppressed [ 383.895500][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3273'. [ 383.922146][T16036] veth0_macvtap: entered promiscuous mode [ 383.933239][T16036] veth1_macvtap: entered promiscuous mode [ 383.965166][T16036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.018094][T16036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.038199][ T3797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.147673][ T181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.149146][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.167860][ T1007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.258253][T15478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.258274][T15478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.338705][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.338728][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.347648][ T52] Bluetooth: hci1: command tx timeout [ 384.620094][T16315] netlink: 'syz.1.3277': attribute type 1 has an invalid length. [ 384.636286][T16323] netlink: 'syz.1.3277': attribute type 1 has an invalid length. [ 384.725282][T16330] FAULT_INJECTION: forcing a failure. [ 384.725282][T16330] name failslab, interval 1, probability 0, space 0, times 0 [ 384.725313][T16330] CPU: 1 UID: 0 PID: 16330 Comm: syz.0.3217 Not tainted syzkaller #0 PREEMPT(full) [ 384.725334][T16330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 384.725346][T16330] Call Trace: [ 384.725353][T16330] [ 384.725362][T16330] dump_stack_lvl+0xe8/0x150 [ 384.725404][T16330] should_fail_ex+0x410/0x560 [ 384.725432][T16330] should_failslab+0xa8/0x100 [ 384.725457][T16330] ? dst_alloc+0x105/0x170 [ 384.725476][T16330] kmem_cache_alloc_noprof+0xa1/0x600 [ 384.725508][T16330] ? dst_alloc+0x105/0x170 [ 384.725529][T16330] ? __pfx_ip6_dst_gc+0x10/0x10 [ 384.725550][T16330] dst_alloc+0x105/0x170 [ 384.725567][T16330] ? __rt6_find_exception_rcu+0x13b/0x4e0 [ 384.725599][T16330] ip6_rt_cache_alloc+0x3ae/0xa10 [ 384.725628][T16330] ? __pfx_ip6_rt_cache_alloc+0x10/0x10 [ 384.725648][T16330] ? fib6_select_path+0x114/0xb50 [ 384.725678][T16330] ip6_pol_route+0x1237/0x14d0 [ 384.725701][T16330] ? ip6_pol_route+0x163/0x14d0 [ 384.725727][T16330] ? __pfx_ip6_pol_route+0x10/0x10 [ 384.725758][T16330] ? ip6_addr_string+0x263/0x300 [ 384.725787][T16330] fib6_rule_lookup+0x21a/0x6e0 [ 384.725814][T16330] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 384.725837][T16330] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 384.725860][T16330] ? lock_acquire+0x115/0x350 [ 384.725898][T16330] ip6_route_output_flags+0x364/0x5d0 [ 384.725921][T16330] ? ip6_route_output_flags+0x2e/0x5d0 [ 384.725946][T16330] ip6_dst_lookup_tail+0x273/0x1610 [ 384.725978][T16330] ? txopt_get+0x79/0x3f0 [ 384.726008][T16330] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 384.726033][T16330] ? txopt_get+0x79/0x3f0 [ 384.726058][T16330] ? txopt_get+0x79/0x3f0 [ 384.726081][T16330] ? txopt_get+0x79/0x3f0 [ 384.726107][T16330] ? txopt_get+0x343/0x3f0 [ 384.726135][T16330] ? __pfx_txopt_get+0x10/0x10 [ 384.726165][T16330] ip6_dst_lookup_flow+0x89/0x150 [ 384.726194][T16330] rawv6_sendmsg+0xdd0/0x18c0 [ 384.726234][T16330] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 384.726286][T16330] ? __lock_acquire+0x747/0x2de0 [ 384.726312][T16330] ? aa_sock_msg_perm+0xf5/0x210 [ 384.726335][T16330] ? sock_rps_record_flow+0x19/0x350 [ 384.726357][T16330] ? inet_sendmsg+0x298/0x320 [ 384.726404][T16330] ? apparmor_socket_sendmsg+0x274/0x360 [ 384.726428][T16330] ? __pfx_inet_sendmsg+0x10/0x10 [ 384.726446][T16330] sock_sendmsg_nosec+0x10e/0x180 [ 384.726471][T16330] ____sys_sendmsg+0x54e/0x850 [ 384.726504][T16330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.726540][T16330] ? import_iovec+0x73/0xa0 [ 384.726569][T16330] ___sys_sendmsg+0x2a5/0x360 [ 384.726594][T16330] ? __lock_acquire+0x747/0x2de0 [ 384.726614][T16330] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.726642][T16330] ? kstrtouint+0x6e/0xe0 [ 384.726682][T16330] ? __fget_files+0x2a/0x420 [ 384.726705][T16330] ? __fget_files+0x3a2/0x420 [ 384.726741][T16330] __sys_sendmmsg+0x273/0x4d0 [ 384.726773][T16330] ? __pfx___sys_sendmmsg+0x10/0x10 [ 384.726810][T16330] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 384.726852][T16330] ? ksys_write+0x242/0x270 [ 384.726882][T16330] ? __pfx_ksys_write+0x10/0x10 [ 384.726918][T16330] __x64_sys_sendmmsg+0xa0/0xc0 [ 384.726947][T16330] do_syscall_64+0x166/0x520 [ 384.726971][T16330] ? trace_irq_disable+0x3b/0x140 [ 384.726990][T16330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.727011][T16330] ? clear_bhb_loop+0x70/0xc0 [ 384.727035][T16330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.727054][T16330] RIP: 0033:0x7f74b619e159 [ 384.727074][T16330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.727089][T16330] RSP: 002b:00007f74b6f9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 384.727110][T16330] RAX: ffffffffffffffda RBX: 00007f74b6425fa0 RCX: 00007f74b619e159 [ 384.727125][T16330] RDX: 0000000000000001 RSI: 0000200000003b80 RDI: 0000000000000004 [ 384.727138][T16330] RBP: 00007f74b6f9d090 R08: 0000000000000000 R09: 0000000000000000 [ 384.727150][T16330] R10: 0000000020000850 R11: 0000000000000246 R12: 0000000000000001 [ 384.727162][T16330] R13: 00007f74b6426038 R14: 00007f74b6425fa0 R15: 00007ffcdd84dbe8 [ 384.727195][T16330] [ 384.873102][T16301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3272'. [ 385.506968][T16353] FAULT_INJECTION: forcing a failure. [ 385.506968][T16353] name failslab, interval 1, probability 0, space 0, times 0 [ 385.507002][T16353] CPU: 0 UID: 0 PID: 16353 Comm: syz.3.3282 Not tainted syzkaller #0 PREEMPT(full) [ 385.507024][T16353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.507035][T16353] Call Trace: [ 385.507044][T16353] [ 385.507053][T16353] dump_stack_lvl+0xe8/0x150 [ 385.507084][T16353] should_fail_ex+0x410/0x560 [ 385.507113][T16353] should_failslab+0xa8/0x100 [ 385.507136][T16353] ? inet_frag_find+0x8c6/0x1e50 [ 385.507157][T16353] kmem_cache_alloc_noprof+0xa1/0x600 [ 385.507189][T16353] ? inet_frag_find+0x8c6/0x1e50 [ 385.507216][T16353] inet_frag_find+0x8c6/0x1e50 [ 385.507234][T16353] ? unwind_get_return_address+0x4d/0x90 [ 385.507257][T16353] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 385.507275][T16353] ? __pfx_ip4_obj_cmpfn+0x10/0x10 [ 385.507315][T16353] ? lock_acquire+0x115/0x350 [ 385.507335][T16353] ? __pfx_inet_frag_find+0x10/0x10 [ 385.507360][T16353] ? __queue_work+0x1f8/0x10d0 [ 385.507386][T16353] ? skb_clone+0x212/0x3a0 [ 385.507417][T16353] ip_defrag+0x332/0x2030 [ 385.507444][T16353] ? dev_queue_xmit_nit+0x28d/0xac0 [ 385.507467][T16353] ? dev_hard_start_xmit+0x1c1/0x830 [ 385.507491][T16353] ? __dev_queue_xmit+0x14c0/0x3820 [ 385.507520][T16353] ? bpf_prog_test_run_skb+0xe35/0x2230 [ 385.507547][T16353] ? bpf_prog_test_run+0x2c5/0x340 [ 385.507568][T16353] ? __sys_bpf+0xa22/0xd90 [ 385.507584][T16353] ? __x64_sys_bpf+0xba/0xd0 [ 385.507599][T16353] ? do_syscall_64+0x166/0x520 [ 385.507622][T16353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.507657][T16353] ? ip_defrag+0xdf/0x2030 [ 385.507680][T16353] ? __pfx_ip_defrag+0x10/0x10 [ 385.507706][T16353] ? skb_copy_bits+0x658/0x8e0 [ 385.507742][T16353] ip_check_defrag+0x3ec/0x670 [ 385.507774][T16353] ? __pfx_ip_check_defrag+0x10/0x10 [ 385.507813][T16353] ? __skb_clone+0x449/0x6c0 [ 385.507843][T16353] packet_rcv_fanout+0x143/0x6f0 [ 385.507866][T16353] ? skb_clone+0x246/0x3a0 [ 385.507888][T16353] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 385.507913][T16353] dev_queue_xmit_nit+0xa2c/0xac0 [ 385.507937][T16353] ? dev_queue_xmit_nit+0x2d/0xac0 [ 385.507967][T16353] dev_hard_start_xmit+0x1c1/0x830 [ 385.508009][T16353] __dev_queue_xmit+0x14c0/0x3820 [ 385.508033][T16353] ? bpf_prog_test_run+0x2c5/0x340 [ 385.508054][T16353] ? __sys_bpf+0xa22/0xd90 [ 385.508087][T16353] ? __dev_queue_xmit+0x29b/0x3820 [ 385.508126][T16353] ? __pfx___dev_queue_xmit+0x10/0x10 [ 385.508197][T16353] __bpf_redirect+0xa76/0x1250 [ 385.508236][T16353] bpf_clone_redirect+0x319/0x4b0 [ 385.508266][T16353] ? bpf_test_run+0x1d1/0x830 [ 385.508286][T16353] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 385.508308][T16353] ? __kernel_text_address+0xd/0x30 [ 385.508333][T16353] ? arch_stack_walk+0xfb/0x150 [ 385.508362][T16353] ? __pfx___schedule+0x10/0x10 [ 385.508400][T16353] ? preempt_schedule_thunk+0x16/0x40 [ 385.508425][T16353] ? preempt_schedule_common+0x7f/0xd0 [ 385.508447][T16353] ? bpf_test_run+0x1d1/0x830 [ 385.508470][T16353] ? bpf_test_timer_continue+0x10c/0x320 [ 385.508495][T16353] bpf_test_run+0x354/0x830 [ 385.508539][T16353] ? __pfx_bpf_test_run+0x10/0x10 [ 385.508576][T16353] ? __kasan_krealloc+0xec/0x110 [ 385.508610][T16353] ? skb_dst_set+0x72/0x140 [ 385.508632][T16353] bpf_prog_test_run_skb+0xe35/0x2230 [ 385.508684][T16353] ? __fget_files+0x3a2/0x420 [ 385.508709][T16353] ? __fget_files+0x2a/0x420 [ 385.508739][T16353] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 385.508769][T16353] bpf_prog_test_run+0x2c5/0x340 [ 385.508805][T16353] __sys_bpf+0xa22/0xd90 [ 385.508836][T16353] ? __pfx___sys_bpf+0x10/0x10 [ 385.508871][T16353] ? __fget_files+0x2a/0x420 [ 385.508917][T16353] ? ksys_write+0x242/0x270 [ 385.508948][T16353] ? __pfx_ksys_write+0x10/0x10 [ 385.508983][T16353] __x64_sys_bpf+0xba/0xd0 [ 385.509007][T16353] do_syscall_64+0x166/0x520 [ 385.509030][T16353] ? trace_irq_disable+0x3b/0x140 [ 385.509050][T16353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.509069][T16353] ? clear_bhb_loop+0x70/0xc0 [ 385.509094][T16353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.509114][T16353] RIP: 0033:0x7fc45cd9e159 [ 385.509132][T16353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.509148][T16353] RSP: 002b:00007fc45aff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 385.509169][T16353] RAX: ffffffffffffffda RBX: 00007fc45d025fa0 RCX: 00007fc45cd9e159 [ 385.509184][T16353] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 385.509197][T16353] RBP: 00007fc45aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 385.509209][T16353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 385.509220][T16353] R13: 00007fc45d026038 R14: 00007fc45d025fa0 R15: 00007ffc8e74e048 [ 385.509254][T16353] [ 386.523033][T16370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3287'. [ 386.551733][T16385] syzkaller0: entered promiscuous mode [ 386.551756][T16385] syzkaller0: entered allmulticast mode [ 386.571471][T16379] bridge_slave_0: left allmulticast mode [ 386.571500][T16379] bridge_slave_0: left promiscuous mode [ 386.573379][T16379] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.421154][T16420] x_tables: unsorted entry at hook 2 [ 387.983836][T16416] syzkaller1: entered promiscuous mode [ 387.983859][T16416] syzkaller1: entered allmulticast mode [ 388.000627][T16450] wg2: entered allmulticast mode [ 388.817127][T16485] syzkaller0: entered promiscuous mode [ 388.817151][T16485] syzkaller0: entered allmulticast mode [ 388.818970][ T3755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.821236][T16485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.906812][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 388.975274][T16496] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3303'. [ 389.407887][T16512] bridge_slave_1: left allmulticast mode [ 389.407913][T16512] bridge_slave_1: left promiscuous mode [ 389.408132][T16512] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.451381][T16512] bridge_slave_0: left allmulticast mode [ 389.451412][T16512] bridge_slave_0: left promiscuous mode [ 389.451647][T16512] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.622734][T16519] netlink: 'syz.3.3306': attribute type 10 has an invalid length. [ 389.849103][T16519] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.885965][T16519] team0: Port device netdevsim1 added [ 390.164771][T16535] FAULT_INJECTION: forcing a failure. [ 390.164771][T16535] name failslab, interval 1, probability 0, space 0, times 0 [ 390.164802][T16535] CPU: 0 UID: 0 PID: 16535 Comm: syz.2.3310 Not tainted syzkaller #0 PREEMPT(full) [ 390.164824][T16535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 390.164835][T16535] Call Trace: [ 390.164842][T16535] [ 390.164851][T16535] dump_stack_lvl+0xe8/0x150 [ 390.164877][T16535] should_fail_ex+0x410/0x560 [ 390.164898][T16535] should_failslab+0xa8/0x100 [ 390.164916][T16535] ? inet_frag_find+0x8c6/0x1e50 [ 390.164931][T16535] kmem_cache_alloc_noprof+0xa1/0x600 [ 390.164954][T16535] ? inet_frag_find+0x8c6/0x1e50 [ 390.164973][T16535] inet_frag_find+0x8c6/0x1e50 [ 390.164985][T16535] ? unwind_get_return_address+0x4d/0x90 [ 390.165002][T16535] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 390.165016][T16535] ? __pfx_ip4_obj_cmpfn+0x10/0x10 [ 390.165045][T16535] ? lock_acquire+0x115/0x350 [ 390.165060][T16535] ? __pfx_inet_frag_find+0x10/0x10 [ 390.165079][T16535] ? skb_clone+0x212/0x3a0 [ 390.165102][T16535] ip_defrag+0x332/0x2030 [ 390.165118][T16535] ? dev_queue_xmit_nit+0x28d/0xac0 [ 390.165135][T16535] ? dev_hard_start_xmit+0x1c1/0x830 [ 390.165153][T16535] ? __dev_queue_xmit+0x14c0/0x3820 [ 390.165174][T16535] ? bpf_prog_test_run_skb+0xe35/0x2230 [ 390.165194][T16535] ? bpf_prog_test_run+0x2c5/0x340 [ 390.165210][T16535] ? __sys_bpf+0xa22/0xd90 [ 390.165223][T16535] ? __x64_sys_bpf+0xba/0xd0 [ 390.165235][T16535] ? do_syscall_64+0x166/0x520 [ 390.165253][T16535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.165278][T16535] ? ip_defrag+0xdf/0x2030 [ 390.165296][T16535] ? __pfx_ip_defrag+0x10/0x10 [ 390.165317][T16535] ? skb_copy_bits+0x658/0x8e0 [ 390.165343][T16535] ip_check_defrag+0x3ec/0x670 [ 390.165374][T16535] ? __pfx_ip_check_defrag+0x10/0x10 [ 390.165399][T16535] ? __skb_clone+0x449/0x6c0 [ 390.165420][T16535] packet_rcv_fanout+0x143/0x6f0 [ 390.165439][T16535] ? skb_clone+0x246/0x3a0 [ 390.165457][T16535] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 390.165476][T16535] dev_queue_xmit_nit+0xa2c/0xac0 [ 390.165494][T16535] ? dev_queue_xmit_nit+0x2d/0xac0 [ 390.165518][T16535] dev_hard_start_xmit+0x1c1/0x830 [ 390.165551][T16535] __dev_queue_xmit+0x14c0/0x3820 [ 390.165570][T16535] ? bpf_prog_test_run+0x2c5/0x340 [ 390.165585][T16535] ? __sys_bpf+0xa22/0xd90 [ 390.165609][T16535] ? __dev_queue_xmit+0x29b/0x3820 [ 390.165637][T16535] ? __pfx___dev_queue_xmit+0x10/0x10 [ 390.165688][T16535] __bpf_redirect+0xa76/0x1250 [ 390.165714][T16535] bpf_clone_redirect+0x319/0x4b0 [ 390.165737][T16535] ? bpf_test_run+0x1d1/0x830 [ 390.165751][T16535] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 390.165768][T16535] ? __kernel_text_address+0xd/0x30 [ 390.165787][T16535] ? arch_stack_walk+0xfb/0x150 [ 390.165809][T16535] ? __pfx___schedule+0x10/0x10 [ 390.165836][T16535] ? preempt_schedule_thunk+0x16/0x40 [ 390.165855][T16535] ? preempt_schedule_common+0x7f/0xd0 [ 390.165873][T16535] ? bpf_test_run+0x1d1/0x830 [ 390.165889][T16535] ? bpf_test_timer_continue+0x10c/0x320 [ 390.165909][T16535] bpf_test_run+0x354/0x830 [ 390.165940][T16535] ? __pfx_bpf_test_run+0x10/0x10 [ 390.165968][T16535] ? __kasan_krealloc+0xec/0x110 [ 390.165995][T16535] ? skb_dst_set+0x72/0x140 [ 390.166014][T16535] bpf_prog_test_run_skb+0xe35/0x2230 [ 390.166056][T16535] ? __fget_files+0x3a2/0x420 [ 390.166074][T16535] ? __fget_files+0x2a/0x420 [ 390.166096][T16535] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 390.166117][T16535] bpf_prog_test_run+0x2c5/0x340 [ 390.166137][T16535] __sys_bpf+0xa22/0xd90 [ 390.166159][T16535] ? __pfx___sys_bpf+0x10/0x10 [ 390.166185][T16535] ? __fget_files+0x2a/0x420 [ 390.166222][T16535] ? ksys_write+0x242/0x270 [ 390.166248][T16535] ? __pfx_ksys_write+0x10/0x10 [ 390.166279][T16535] __x64_sys_bpf+0xba/0xd0 [ 390.166300][T16535] do_syscall_64+0x166/0x520 [ 390.166321][T16535] ? trace_irq_disable+0x3b/0x140 [ 390.166336][T16535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.166365][T16535] ? clear_bhb_loop+0x70/0xc0 [ 390.166383][T16535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.166397][T16535] RIP: 0033:0x7f3afaf9e159 [ 390.166412][T16535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.166425][T16535] RSP: 002b:00007f3afbefe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 390.166444][T16535] RAX: ffffffffffffffda RBX: 00007f3afb225fa0 RCX: 00007f3afaf9e159 [ 390.166454][T16535] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 390.166465][T16535] RBP: 00007f3afbefe090 R08: 0000000000000000 R09: 0000000000000000 [ 390.166475][T16535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.166484][T16535] R13: 00007f3afb226038 R14: 00007f3afb225fa0 R15: 00007ffeab2a4ff8 [ 390.166509][T16535] [ 390.504136][T16545] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3311'. [ 390.738004][T16558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3312'. [ 390.818810][T16545] gretap0: entered promiscuous mode [ 390.896159][T16556] openvswitch: netlink: IP tunnel dst address not specified [ 390.927169][T16561] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3311'. [ 390.927360][T16561] 0ªî{X¹¦: renamed from gretap0 [ 390.972119][T16561] 0ªî{X¹¦: left promiscuous mode [ 390.972144][T16561] 0ªî{X¹¦: entered allmulticast mode [ 390.993737][T16561] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 391.481903][T16578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3316'. [ 391.541909][T16579] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 391.606578][T16579] xt_CT: No such helper "netbios-ns" [ 391.770995][T16586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3318'. [ 392.022768][T16589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.024965][T16597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3320'. [ 392.034617][T16589] bridge0: port 3(bond1) entered blocking state [ 392.034796][T16589] bridge0: port 3(bond1) entered disabled state [ 392.034998][T16589] bond1: entered allmulticast mode [ 392.037959][T16589] bond1: entered promiscuous mode [ 392.040261][T16589] bridge0: port 3(bond1) entered blocking state [ 392.040374][T16589] bridge0: port 3(bond1) entered forwarding state [ 392.059561][T16598] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 392.250145][T16608] FAULT_INJECTION: forcing a failure. [ 392.250145][T16608] name failslab, interval 1, probability 0, space 0, times 0 [ 392.250179][T16608] CPU: 1 UID: 0 PID: 16608 Comm: syz.0.3323 Not tainted syzkaller #0 PREEMPT(full) [ 392.250200][T16608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.250212][T16608] Call Trace: [ 392.250220][T16608] [ 392.250229][T16608] dump_stack_lvl+0xe8/0x150 [ 392.250262][T16608] should_fail_ex+0x410/0x560 [ 392.250290][T16608] should_failslab+0xa8/0x100 [ 392.250317][T16608] ? skb_clone+0x212/0x3a0 [ 392.250344][T16608] kmem_cache_alloc_noprof+0xa1/0x600 [ 392.250371][T16608] ? lock_acquire+0x115/0x350 [ 392.250392][T16608] ? skb_clone+0x212/0x3a0 [ 392.250426][T16608] skb_clone+0x212/0x3a0 [ 392.250450][T16608] ? dev_queue_xmit_nit+0x25c/0xac0 [ 392.250478][T16608] dev_queue_xmit_nit+0x28d/0xac0 [ 392.250502][T16608] ? dev_queue_xmit_nit+0x2d/0xac0 [ 392.250535][T16608] dev_hard_start_xmit+0x1c1/0x830 [ 392.250581][T16608] __dev_queue_xmit+0x14c0/0x3820 [ 392.250607][T16608] ? bpf_prog_test_run+0x2c5/0x340 [ 392.250628][T16608] ? __sys_bpf+0xa22/0xd90 [ 392.250661][T16608] ? __dev_queue_xmit+0x29b/0x3820 [ 392.250700][T16608] ? __pfx___dev_queue_xmit+0x10/0x10 [ 392.250763][T16608] __bpf_redirect+0xa76/0x1250 [ 392.250793][T16608] bpf_clone_redirect+0x319/0x4b0 [ 392.250819][T16608] ? bpf_test_run+0x1d1/0x830 [ 392.250839][T16608] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 392.250860][T16608] ? __kernel_text_address+0xd/0x30 [ 392.250884][T16608] ? arch_stack_walk+0xfb/0x150 [ 392.250907][T16608] ? __pfx___schedule+0x10/0x10 [ 392.250943][T16608] ? preempt_schedule_thunk+0x16/0x40 [ 392.250966][T16608] ? preempt_schedule_common+0x7f/0xd0 [ 392.250988][T16608] ? bpf_test_run+0x1d1/0x830 [ 392.251009][T16608] ? bpf_test_timer_continue+0x10c/0x320 [ 392.251033][T16608] bpf_test_run+0x354/0x830 [ 392.251072][T16608] ? __pfx_bpf_test_run+0x10/0x10 [ 392.251107][T16608] ? __kasan_krealloc+0xec/0x110 [ 392.251144][T16608] ? skb_dst_set+0x72/0x140 [ 392.251164][T16608] bpf_prog_test_run_skb+0xe35/0x2230 [ 392.251211][T16608] ? __fget_files+0x3a2/0x420 [ 392.251237][T16608] ? __fget_files+0x2a/0x420 [ 392.251266][T16608] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 392.251296][T16608] bpf_prog_test_run+0x2c5/0x340 [ 392.251323][T16608] __sys_bpf+0xa22/0xd90 [ 392.251352][T16608] ? __pfx___sys_bpf+0x10/0x10 [ 392.251383][T16608] ? __fget_files+0x2a/0x420 [ 392.251426][T16608] ? ksys_write+0x242/0x270 [ 392.251457][T16608] ? __pfx_ksys_write+0x10/0x10 [ 392.251488][T16608] __x64_sys_bpf+0xba/0xd0 [ 392.251508][T16608] do_syscall_64+0x166/0x520 [ 392.251531][T16608] ? trace_irq_disable+0x3b/0x140 [ 392.251548][T16608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.251566][T16608] ? clear_bhb_loop+0x70/0xc0 [ 392.251589][T16608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.251608][T16608] RIP: 0033:0x7f74b619e159 [ 392.251626][T16608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.251642][T16608] RSP: 002b:00007f74b6f9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 392.251661][T16608] RAX: ffffffffffffffda RBX: 00007f74b6425fa0 RCX: 00007f74b619e159 [ 392.251676][T16608] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 392.251688][T16608] RBP: 00007f74b6f9d090 R08: 0000000000000000 R09: 0000000000000000 [ 392.251699][T16608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 392.251710][T16608] R13: 00007f74b6426038 R14: 00007f74b6425fa0 R15: 00007ffcdd84dbe8 [ 392.251743][T16608] [ 392.706214][ T12] bridge0: port 3(bond1) entered disabled state [ 393.513282][T16642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3335'. [ 393.532454][T16637] syzkaller0: entered promiscuous mode [ 393.532475][T16637] syzkaller0: entered allmulticast mode [ 393.768267][T16646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3334'. [ 394.033489][ T2587] block nbd2: Possible stuck request ffff88802768e000: control (read@0,1024B). Runtime 120 seconds [ 394.033532][ T2587] block nbd2: Possible stuck request ffff88802768e1c0: control (read@1024,3072B). Runtime 120 seconds [ 394.060001][T16668] syzkaller0: entered promiscuous mode [ 394.060023][T16668] syzkaller0: entered allmulticast mode [ 394.126163][T16668] FAULT_INJECTION: forcing a failure. [ 394.126163][T16668] name failslab, interval 1, probability 0, space 0, times 0 [ 394.126199][T16668] CPU: 1 UID: 0 PID: 16668 Comm: syz.3.3339 Not tainted syzkaller #0 PREEMPT(full) [ 394.126220][T16668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.126231][T16668] Call Trace: [ 394.126239][T16668] [ 394.126248][T16668] dump_stack_lvl+0xe8/0x150 [ 394.126281][T16668] should_fail_ex+0x410/0x560 [ 394.126309][T16668] should_failslab+0xa8/0x100 [ 394.126333][T16668] ? skb_clone+0x212/0x3a0 [ 394.126359][T16668] kmem_cache_alloc_noprof+0xa1/0x600 [ 394.126394][T16668] ? skb_clone+0x212/0x3a0 [ 394.126426][T16668] skb_clone+0x212/0x3a0 [ 394.126455][T16668] __netlink_deliver_tap+0x355/0x6e0 [ 394.126486][T16668] ? netlink_deliver_tap+0x2e/0x1b0 [ 394.126506][T16668] netlink_deliver_tap+0x19c/0x1b0 [ 394.126524][T16668] netlink_unicast+0x781/0x940 [ 394.126558][T16668] netlink_sendmsg+0x813/0xb40 [ 394.126582][T16668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.126607][T16668] ? apparmor_socket_sendmsg+0x98/0x360 [ 394.126628][T16668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.126644][T16668] sock_sendmsg_nosec+0x13a/0x180 [ 394.126666][T16668] ____sys_sendmsg+0x54e/0x850 [ 394.126694][T16668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.126726][T16668] ? import_iovec+0x73/0xa0 [ 394.126753][T16668] ___sys_sendmsg+0x2a5/0x360 [ 394.126776][T16668] ? __lock_acquire+0x747/0x2de0 [ 394.126799][T16668] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.126858][T16668] ? __fget_files+0x2a/0x420 [ 394.126883][T16668] ? __fget_files+0x3a2/0x420 [ 394.126920][T16668] __x64_sys_sendmsg+0x1b1/0x290 [ 394.126949][T16668] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.126998][T16668] do_syscall_64+0x166/0x520 [ 394.127022][T16668] ? trace_irq_disable+0x3b/0x140 [ 394.127050][T16668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.127069][T16668] ? clear_bhb_loop+0x70/0xc0 [ 394.127093][T16668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.127111][T16668] RIP: 0033:0x7fc45cd9e159 [ 394.127128][T16668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.127144][T16668] RSP: 002b:00007fc45afd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.127164][T16668] RAX: ffffffffffffffda RBX: 00007fc45d026090 RCX: 00007fc45cd9e159 [ 394.127179][T16668] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 394.127191][T16668] RBP: 00007fc45afd5090 R08: 0000000000000000 R09: 0000000000000000 [ 394.127203][T16668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.127214][T16668] R13: 00007fc45d026128 R14: 00007fc45d026090 R15: 00007ffc8e74e048 [ 394.127247][T16668] [ 394.182858][T16660] syzkaller1: entered promiscuous mode [ 394.182882][T16660] syzkaller1: entered allmulticast mode [ 394.324212][T16638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.484044][T16672] --map-set only usable from mangle table [ 394.680456][T16681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3344'. [ 394.714345][T16679] syzkaller0: entered promiscuous mode [ 394.714368][T16679] syzkaller0: entered allmulticast mode [ 395.068506][T16701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3347'. [ 395.491516][T16714] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 395.589283][T16715] tc_dump_action: action bad kind [ 395.602014][T16723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3354'. [ 395.858488][T16729] syzkaller0: entered promiscuous mode [ 395.858512][T16729] syzkaller0: entered allmulticast mode [ 395.942939][T16729] FAULT_INJECTION: forcing a failure. [ 395.942939][T16729] name failslab, interval 1, probability 0, space 0, times 0 [ 395.942972][T16729] CPU: 1 UID: 0 PID: 16729 Comm: syz.1.3355 Not tainted syzkaller #0 PREEMPT(full) [ 395.942992][T16729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.943003][T16729] Call Trace: [ 395.943011][T16729] [ 395.943019][T16729] dump_stack_lvl+0xe8/0x150 [ 395.943050][T16729] should_fail_ex+0x410/0x560 [ 395.943074][T16729] ? __alloc_skb+0x1db/0x7a0 [ 395.943096][T16729] should_failslab+0xa8/0x100 [ 395.943120][T16729] ? __alloc_skb+0x1db/0x7a0 [ 395.943139][T16729] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 395.943167][T16729] ? __alloc_skb+0x18d/0x7a0 [ 395.943188][T16729] ? __alloc_skb+0x1db/0x7a0 [ 395.943217][T16729] __alloc_skb+0x1db/0x7a0 [ 395.943244][T16729] tipc_nl_compat_doit+0x18a/0x650 [ 395.943272][T16729] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 395.943301][T16729] ? apparmor_capable+0x126/0x170 [ 395.943335][T16729] ? bpf_lsm_capable+0x9/0x20 [ 395.943353][T16729] ? security_capable+0x7e/0x2c0 [ 395.943383][T16729] tipc_nl_compat_recv+0x8d3/0xcf0 [ 395.943402][T16729] ? kasan_quarantine_put+0xbb/0x1f0 [ 395.943424][T16729] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 395.943446][T16729] ? __mutex_trylock_common+0x15f/0x270 [ 395.943472][T16729] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 395.943496][T16729] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 395.943516][T16729] ? __pfx___mutex_trylock_common+0x10/0x10 [ 395.943545][T16729] ? trace_contention_end+0x3d/0x140 [ 395.943568][T16729] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 395.943600][T16729] genl_family_rcv_msg_doit+0x233/0x340 [ 395.943630][T16729] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 395.943668][T16729] ? __dev_queue_xmit+0x29b/0x3820 [ 395.943703][T16729] genl_rcv_msg+0x614/0x7a0 [ 395.943733][T16729] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.943763][T16729] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 395.943799][T16729] netlink_rcv_skb+0x226/0x4a0 [ 395.943831][T16729] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.943856][T16729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 395.943898][T16729] ? down_read+0x2be/0x330 [ 395.943930][T16729] genl_rcv+0x28/0x40 [ 395.943951][T16729] netlink_unicast+0x7bd/0x940 [ 395.943987][T16729] netlink_sendmsg+0x813/0xb40 [ 395.944016][T16729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.944044][T16729] ? apparmor_socket_sendmsg+0x98/0x360 [ 395.944068][T16729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.944086][T16729] sock_sendmsg_nosec+0x13a/0x180 [ 395.944110][T16729] ____sys_sendmsg+0x54e/0x850 [ 395.944142][T16729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.944176][T16729] ? import_iovec+0x73/0xa0 [ 395.944205][T16729] ___sys_sendmsg+0x2a5/0x360 [ 395.944230][T16729] ? __lock_acquire+0x747/0x2de0 [ 395.944254][T16729] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.944317][T16729] ? __fget_files+0x2a/0x420 [ 395.944343][T16729] ? __fget_files+0x3a2/0x420 [ 395.944379][T16729] __x64_sys_sendmsg+0x1b1/0x290 [ 395.944409][T16729] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.944457][T16729] do_syscall_64+0x166/0x520 [ 395.944481][T16729] ? trace_irq_disable+0x3b/0x140 [ 395.944500][T16729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.944519][T16729] ? clear_bhb_loop+0x70/0xc0 [ 395.944544][T16729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.944563][T16729] RIP: 0033:0x7f0ec1f9e159 [ 395.944581][T16729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.944597][T16729] RSP: 002b:00007f0ec2e62028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.944617][T16729] RAX: ffffffffffffffda RBX: 00007f0ec2225fa0 RCX: 00007f0ec1f9e159 [ 395.944630][T16729] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 395.944642][T16729] RBP: 00007f0ec2e62090 R08: 0000000000000000 R09: 0000000000000000 [ 395.944652][T16729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.944663][T16729] R13: 00007f0ec2226038 R14: 00007f0ec2225fa0 R15: 00007ffefca9cc38 [ 395.944692][T16729] [ 396.614337][T16746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3360'. [ 396.617967][T16746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.624798][T16752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3360'. [ 396.638770][T16746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.106091][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3365'. [ 397.273786][T16754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3359'. [ 397.771536][T16792] netlink: 'syz.0.3371': attribute type 2 has an invalid length. [ 397.771561][T16792] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3371'. [ 397.884986][T16793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3372'. [ 397.885015][T16793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3372'. [ 397.988570][T16777] netlink: 'syz.1.3366': attribute type 40 has an invalid length. [ 398.054525][T16793] team0: Port device team_slave_0 removed [ 398.135187][T16797] syzkaller1: entered promiscuous mode [ 398.135211][T16797] syzkaller1: entered allmulticast mode [ 398.713453][T16818] netlink: 'syz.0.3377': attribute type 39 has an invalid length. [ 399.055237][T16836] team1: entered promiscuous mode [ 399.055306][T16836] team1: entered allmulticast mode [ 399.055959][T16836] 8021q: adding VLAN 0 to HW filter on device team1 [ 399.748561][T16859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.842552][T16860] __nla_validate_parse: 5 callbacks suppressed [ 399.842573][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3388'. [ 399.842586][T16860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3388'. [ 399.842984][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3388'. [ 399.843000][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3388'. [ 399.892710][T16862] netlink: 'syz.0.3389': attribute type 1 has an invalid length. [ 399.954957][T16860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.974482][T16860] bond1: (slave bond0): Enslaving as an active interface with a down link [ 400.048438][T16865] bond1 (unregistering): (slave bond0): Releasing active interface [ 400.051435][T16865] bond1 (unregistering): Released all slaves [ 400.781438][T16891] FAULT_INJECTION: forcing a failure. [ 400.781438][T16891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.781471][T16891] CPU: 0 UID: 0 PID: 16891 Comm: syz.3.3395 Not tainted syzkaller #0 PREEMPT(full) [ 400.781493][T16891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 400.781505][T16891] Call Trace: [ 400.781513][T16891] [ 400.781522][T16891] dump_stack_lvl+0xe8/0x150 [ 400.781553][T16891] should_fail_ex+0x410/0x560 [ 400.781580][T16891] _copy_from_user+0x2d/0xb0 [ 400.781606][T16891] ___sys_sendmsg+0x1c6/0x360 [ 400.781632][T16891] ? __lock_acquire+0x747/0x2de0 [ 400.781657][T16891] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.781719][T16891] ? __fget_files+0x2a/0x420 [ 400.781744][T16891] ? __fget_files+0x3a2/0x420 [ 400.781780][T16891] __x64_sys_sendmsg+0x1b1/0x290 [ 400.781807][T16891] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.781849][T16891] do_syscall_64+0x166/0x520 [ 400.781873][T16891] ? trace_irq_disable+0x3b/0x140 [ 400.781892][T16891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.781911][T16891] ? clear_bhb_loop+0x70/0xc0 [ 400.781935][T16891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.781954][T16891] RIP: 0033:0x7fc45cd9e159 [ 400.781971][T16891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.781987][T16891] RSP: 002b:00007fc45aff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.782009][T16891] RAX: ffffffffffffffda RBX: 00007fc45d025fa0 RCX: 00007fc45cd9e159 [ 400.782022][T16891] RDX: 0000000020040040 RSI: 0000200000000500 RDI: 0000000000000003 [ 400.782035][T16891] RBP: 00007fc45aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 400.782047][T16891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.782058][T16891] R13: 00007fc45d026038 R14: 00007fc45d025fa0 R15: 00007ffc8e74e048 [ 400.782089][T16891] [ 401.356959][T16911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3402'. [ 401.642460][T16922] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3405'. [ 401.684681][T16924] pim6reg: entered allmulticast mode [ 401.715308][T16924] x_tables: duplicate underflow at hook 2 [ 401.737282][T16924] netlink: 'syz.3.3406': attribute type 10 has an invalid length. [ 401.777951][T16924] team0: Port device dummy0 added [ 401.780916][T16924] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 402.296934][T16934] bond2: invalid ARP target 0.0.0.0 specified for addition [ 402.296960][T16934] bond2: option arp_ip_target: invalid value (0) [ 402.390738][T16934] bond2 (unregistering): Released all slaves [ 402.459344][T16931] syzkaller0: entered promiscuous mode [ 402.459369][T16931] syzkaller0: entered allmulticast mode [ 402.640492][T16936] tipc: Enabled bearer , priority 0 [ 402.794827][ T12] IPVS: starting estimator thread 0... [ 402.809055][T16950] IPVS: rr: UDP [::1]:8080 - no destination available [ 402.956233][T16956] IPVS: using max 34 ests per chain, 81600 per kthread [ 403.394696][T16965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3413'. [ 406.056434][T16930] tipc: Resetting bearer [ 406.079196][T16930] tipc: Disabling bearer [ 406.082238][T16957] syzkaller0: entered promiscuous mode [ 406.082254][T16957] syzkaller0: entered allmulticast mode [ 406.290378][T16974] Bluetooth: MGMT ver 1.23 [ 406.317373][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3415'. [ 406.499223][T16982] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3422'. [ 406.569780][T16987] FAULT_INJECTION: forcing a failure. [ 406.569780][T16987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.569812][T16987] CPU: 1 UID: 0 PID: 16987 Comm: syz.1.3423 Not tainted syzkaller #0 PREEMPT(full) [ 406.569833][T16987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.569846][T16987] Call Trace: [ 406.569854][T16987] [ 406.569863][T16987] dump_stack_lvl+0xe8/0x150 [ 406.569895][T16987] should_fail_ex+0x410/0x560 [ 406.569922][T16987] _copy_from_iter+0x1d3/0x1660 [ 406.569957][T16987] ? __pfx__copy_from_iter+0x10/0x10 [ 406.569977][T16987] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 406.569997][T16987] ? netlink_sendmsg+0x5d4/0xb40 [ 406.570015][T16987] ? netlink_sendmsg+0x5d4/0xb40 [ 406.570039][T16987] ? netlink_sendmsg+0x650/0xb40 [ 406.570056][T16987] ? skb_put+0x112/0x210 [ 406.570084][T16987] netlink_sendmsg+0x6c0/0xb40 [ 406.570113][T16987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.570140][T16987] ? apparmor_socket_sendmsg+0x18b/0x360 [ 406.570164][T16987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.570182][T16987] sock_sendmsg_nosec+0x13a/0x180 [ 406.570205][T16987] ____sys_sendmsg+0x54e/0x850 [ 406.570236][T16987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.570278][T16987] ? import_iovec+0x73/0xa0 [ 406.570305][T16987] ___sys_sendmsg+0x2a5/0x360 [ 406.570329][T16987] ? __lock_acquire+0x747/0x2de0 [ 406.570353][T16987] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.570410][T16987] ? __fget_files+0x2a/0x420 [ 406.570433][T16987] ? __fget_files+0x3a2/0x420 [ 406.570465][T16987] __x64_sys_sendmsg+0x1b1/0x290 [ 406.570491][T16987] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.570532][T16987] do_syscall_64+0x166/0x520 [ 406.570554][T16987] ? trace_irq_disable+0x3b/0x140 [ 406.570571][T16987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.570590][T16987] ? clear_bhb_loop+0x70/0xc0 [ 406.570613][T16987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.570631][T16987] RIP: 0033:0x7f0ec1f9e159 [ 406.570649][T16987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.570665][T16987] RSP: 002b:00007f0ec2e62028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.570684][T16987] RAX: ffffffffffffffda RBX: 00007f0ec2225fa0 RCX: 00007f0ec1f9e159 [ 406.570695][T16987] RDX: 0000000020040040 RSI: 0000200000000500 RDI: 0000000000000003 [ 406.570706][T16987] RBP: 00007f0ec2e62090 R08: 0000000000000000 R09: 0000000000000000 [ 406.570718][T16987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.570729][T16987] R13: 00007f0ec2226038 R14: 00007f0ec2225fa0 R15: 00007ffefca9cc38 [ 406.570759][T16987] [ 407.007000][T17000] macsec1: entered promiscuous mode [ 407.315388][T17013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3430'. [ 407.436564][T17002] netlink: 'syz.3.3426': attribute type 4 has an invalid length. [ 407.547374][T17025] netlink: 'syz.4.3435': attribute type 10 has an invalid length. [ 407.720588][T17025] team0 (unregistering): Port device team_slave_1 removed [ 407.746472][T17037] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3435'. [ 407.768684][T17036] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3438'. [ 408.133490][T17073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3442'. [ 408.382914][T17081] bridge0: port 3(bond0) entered disabled state [ 408.412640][T17081] bond0 (unregistering): left allmulticast mode [ 408.412664][T17081] bond_slave_0: left allmulticast mode [ 408.412679][T17081] bond_slave_1: left allmulticast mode [ 408.412694][T17081] bond0 (unregistering): left promiscuous mode [ 408.412704][T17081] bond_slave_0: left promiscuous mode [ 408.415525][T17081] bond_slave_1: left promiscuous mode [ 408.415800][T17081] bridge0: port 3(bond0) entered disabled state [ 408.461060][T17081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.478537][T17081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.488479][T17081] bond0 (unregistering): Released all slaves [ 408.553894][T17130] FAULT_INJECTION: forcing a failure. [ 408.553894][T17130] name failslab, interval 1, probability 0, space 0, times 0 [ 408.553925][T17130] CPU: 1 UID: 0 PID: 17130 Comm: syz.1.3447 Not tainted syzkaller #0 PREEMPT(full) [ 408.553946][T17130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.553956][T17130] Call Trace: [ 408.553964][T17130] [ 408.553972][T17130] dump_stack_lvl+0xe8/0x150 [ 408.554001][T17130] should_fail_ex+0x410/0x560 [ 408.554028][T17130] should_failslab+0xa8/0x100 [ 408.554051][T17130] ? skb_clone+0x212/0x3a0 [ 408.554077][T17130] kmem_cache_alloc_noprof+0xa1/0x600 [ 408.554106][T17130] ? skb_clone+0x212/0x3a0 [ 408.554138][T17130] skb_clone+0x212/0x3a0 [ 408.554160][T17130] ? nfnetlink_rcv+0x4b0/0x28c0 [ 408.554188][T17130] nfnetlink_rcv+0x4de/0x28c0 [ 408.554216][T17130] ? __dev_queue_xmit+0x29b/0x3820 [ 408.554250][T17130] ? __local_bh_enable_ip+0xd6/0x140 [ 408.554275][T17130] ? lockdep_hardirqs_on+0x7b/0x110 [ 408.554299][T17130] ? __dev_queue_xmit+0x29b/0x3820 [ 408.554323][T17130] ? __local_bh_enable_ip+0xd6/0x140 [ 408.554345][T17130] ? __dev_queue_xmit+0x29b/0x3820 [ 408.554370][T17130] ? __dev_queue_xmit+0x1edc/0x3820 [ 408.554407][T17130] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 408.554454][T17130] ? __copy_skb_header+0xa3/0x4a0 [ 408.554495][T17130] ? skb_clone+0x246/0x3a0 [ 408.554522][T17130] ? __netlink_deliver_tap+0x681/0x6e0 [ 408.554540][T17130] ? netlink_deliver_tap+0x2e/0x1b0 [ 408.554564][T17130] ? netlink_deliver_tap+0x2e/0x1b0 [ 408.554582][T17130] ? netlink_deliver_tap+0x2e/0x1b0 [ 408.554605][T17130] netlink_unicast+0x7bd/0x940 [ 408.554651][T17130] netlink_sendmsg+0x813/0xb40 [ 408.554677][T17130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.554704][T17130] ? apparmor_socket_sendmsg+0x18b/0x360 [ 408.554729][T17130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.554745][T17130] sock_sendmsg_nosec+0x13a/0x180 [ 408.554766][T17130] ____sys_sendmsg+0x54e/0x850 [ 408.554796][T17130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.554828][T17130] ? import_iovec+0x73/0xa0 [ 408.554856][T17130] ___sys_sendmsg+0x2a5/0x360 [ 408.554880][T17130] ? __lock_acquire+0x747/0x2de0 [ 408.554905][T17130] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.554965][T17130] ? __fget_files+0x2a/0x420 [ 408.554988][T17130] ? __fget_files+0x3a2/0x420 [ 408.555020][T17130] __x64_sys_sendmsg+0x1b1/0x290 [ 408.555048][T17130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 408.555094][T17130] do_syscall_64+0x166/0x520 [ 408.555117][T17130] ? trace_irq_disable+0x3b/0x140 [ 408.555136][T17130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.555155][T17130] ? clear_bhb_loop+0x70/0xc0 [ 408.555178][T17130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.555196][T17130] RIP: 0033:0x7f0ec1f9e159 [ 408.555214][T17130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.555230][T17130] RSP: 002b:00007f0ec2e62028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.555250][T17130] RAX: ffffffffffffffda RBX: 00007f0ec2225fa0 RCX: 00007f0ec1f9e159 [ 408.555263][T17130] RDX: 0000000020040040 RSI: 0000200000000500 RDI: 0000000000000003 [ 408.555276][T17130] RBP: 00007f0ec2e62090 R08: 0000000000000000 R09: 0000000000000000 [ 408.555287][T17130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.555299][T17130] R13: 00007f0ec2226038 R14: 00007f0ec2225fa0 R15: 00007ffefca9cc38 [ 408.555330][T17130] [ 408.633991][T17042] workqueue: Failed to create a rescuer kthread for wq "nfc20_nci_tx_wq": -EINTR [ 408.678919][T17099] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3445'. [ 409.273204][T17147] tipc: Resetting bearer [ 409.732239][T17168] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3457'. [ 409.981177][T17147] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 409.981203][T17147] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 411.156131][T17182] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3459'. [ 411.158128][T17147] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 411.158149][T17147] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 411.257987][T17147] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 411.258012][T17147] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 411.339718][T17147] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 411.339742][T17147] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 411.401945][T17147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 411.401969][T17147] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 411.773595][T17212] tipc: Enabling of bearer rejected, failed to enable media [ 411.839629][T17207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3463'. [ 411.875340][T17216] syzkaller0: entered promiscuous mode [ 411.875365][T17216] syzkaller0: entered allmulticast mode [ 411.988877][T17216] tipc: Started in network mode [ 411.988907][T17216] tipc: Node identity 1a9d988d5a76, cluster identity 4711 [ 411.989155][T17216] tipc: Enabled bearer , priority 0 [ 412.009503][T17214] tipc: Resetting bearer [ 412.212719][T17214] tipc: Disabling bearer [ 412.345560][T17230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3468'. [ 412.542964][T17247] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3471'. [ 412.675372][T17238] syzkaller0: entered promiscuous mode [ 412.675395][T17238] syzkaller0: entered allmulticast mode [ 412.882259][T17261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3476'. [ 413.089201][ T1007] IPVS: starting estimator thread 0... [ 413.177134][T17269] IPVS: using max 34 ests per chain, 81600 per kthread [ 413.550946][T17298] netlink: 'syz.4.3484': attribute type 39 has an invalid length. [ 413.742760][T17299] tipc: Enabling of bearer rejected, failed to enable media [ 414.079308][T17316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3490'. [ 414.103477][T17316] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3490'. [ 414.103502][T17316] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3490'. [ 414.103516][T17316] netlink: 'syz.2.3490': attribute type 6 has an invalid length. [ 414.103529][T17316] netlink: 'syz.2.3490': attribute type 5 has an invalid length. [ 414.103541][T17316] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3490'. [ 414.194067][T17284] netlink: 'syz.1.3483': attribute type 15 has an invalid length. [ 414.194092][T17284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3483'. [ 414.510887][T17336] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3495'. [ 414.510912][T17336] nbd: illegal input index -1721480071 [ 415.179557][T17368] netlink: 'syz.2.3507': attribute type 1 has an invalid length. [ 415.179578][T17368] netlink: 'syz.2.3507': attribute type 2 has an invalid length. [ 415.364976][T17379] netlink: 'syz.0.3510': attribute type 1 has an invalid length. [ 415.448495][T17386] netlink: 'syz.3.3508': attribute type 16 has an invalid length. [ 415.448516][T17386] netlink: 'syz.3.3508': attribute type 17 has an invalid length. [ 415.490889][T17386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.514009][T17386] wg2: left allmulticast mode [ 415.532577][T17388] netlink: 'syz.2.3511': attribute type 1 has an invalid length. [ 415.561127][T17386] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 416.116766][T17423] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 416.353496][T17432] ovs-s!: entered promiscuous mode [ 417.145868][T17480] __nla_validate_parse: 9 callbacks suppressed [ 417.145890][T17480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3539'. [ 417.422330][T17493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3542'. [ 417.698447][T17496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.783220][T17496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.812276][T17499] : entered promiscuous mode [ 418.809357][T17496] 8021q: adding VLAN 0 to HW filter on device bond3 [ 419.717318][T17554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3554'. [ 419.805773][T17559] validate_nla: 2 callbacks suppressed [ 419.805784][T17568] netlink: 'syz.4.3556': attribute type 63 has an invalid length. [ 419.805791][T17559] netlink: 'syz.4.3556': attribute type 63 has an invalid length. [ 419.805798][T17568] netlink: 'syz.4.3556': attribute type 3 has an invalid length. [ 419.805803][T17559] netlink: 'syz.4.3556': attribute type 3 has an invalid length. [ 419.853725][T17569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3557'. [ 420.009315][T17576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3559'. [ 420.118839][T17576] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 420.124409][T17584] netlink: 'syz.1.3559': attribute type 1 has an invalid length. [ 420.790905][T17616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3566'. [ 422.479374][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3578'. [ 422.612611][T17691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3580'. [ 422.981877][T17679] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.982505][T17679] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.498534][T17679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.552463][T17679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.107043][ T2587] block nbd2: Possible stuck request ffff88802768e000: control (read@0,1024B). Runtime 150 seconds [ 424.110696][ T2587] block nbd2: Possible stuck request ffff88802768e1c0: control (read@1024,3072B). Runtime 150 seconds [ 424.116101][T17685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3577'. [ 424.116875][ T181] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.117719][ T181] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.117756][ T181] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.117789][ T181] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.194173][T17693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3579'. [ 424.194223][T17693] bridge_slave_1: entered promiscuous mode [ 424.370380][T17705] syzkaller0: entered promiscuous mode [ 424.370404][T17705] syzkaller0: entered allmulticast mode [ 424.505862][T17707] Cannot find map_set index 2 as target [ 424.584425][T17714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3585'. [ 424.679242][T17716] Set syz1 is full, maxelem 2076 reached [ 424.788347][T17727] netlink: 'syz.3.3585': attribute type 1 has an invalid length. [ 424.789566][T17726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3586'. [ 424.849685][T17707] bond2: option primary_reselect: invalid value (6) [ 424.856486][T17731] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3587'. [ 424.893022][T17707] bond2 (unregistering): Released all slaves [ 424.908311][T17732] IPv6: NLM_F_CREATE should be specified when creating new route [ 424.908405][T17732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 424.908415][T17732] IPv6: NLM_F_CREATE should be set when creating new route [ 424.908456][T17732] IPv6: NLM_F_CREATE should be set when creating new route [ 424.908480][T17732] IPv6: NLM_F_CREATE should be set when creating new route [ 425.052542][T17719] bond2: option primary_reselect: invalid value (6) [ 425.053851][T17719] bond2 (unregistering): Released all slaves [ 425.232752][T17749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3591'. [ 425.446398][T17766] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3596'. [ 425.446422][T17766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3596'. [ 425.485587][T17757] x_tables: duplicate underflow at hook 3 [ 425.500825][T17762] ip6erspan0: entered allmulticast mode [ 426.051094][T17781] syzkaller0: entered promiscuous mode [ 426.051118][T17781] syzkaller0: entered allmulticast mode [ 427.864533][T17867] __nla_validate_parse: 3 callbacks suppressed [ 427.864554][T17867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3612'. [ 428.130291][T17880] netlink: 'syz.0.3613': attribute type 1 has an invalid length. [ 430.971828][T17819] veth2: entered allmulticast mode [ 430.975744][T17822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3603'. [ 431.013386][ T4989] udevd[4989]: worker [10860] /devices/virtual/block/nbd2 is taking a long time [ 431.231859][T17904] SET target dimension over the limit! [ 431.299565][T17907] bond4: entered promiscuous mode [ 431.299628][T17907] bond4: entered allmulticast mode [ 431.300042][T17907] 8021q: adding VLAN 0 to HW filter on device bond4 [ 431.303442][T17904] tipc: Enabled bearer , priority 10 [ 431.306046][T17913] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3618'. [ 431.353380][T17912] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 431.808763][T17941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3624'. [ 432.041480][T17952] openvswitch: netlink: Message has 8 unknown bytes. [ 432.041751][T17952] sctp: [Deprecated]: syz.1.3628 (pid 17952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 432.041751][T17952] Use struct sctp_sack_info instead [ 432.206086][T17956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3630'. [ 432.206124][T17956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3630'. [ 432.251464][T17954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3629'. [ 432.379136][T17958] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 432.425500][T13964] tipc: Node number set to 1089181837 [ 432.478096][T17947] ip_tables: iptables: counters copy to user failed while replacing table [ 432.799971][T17982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3638'. [ 432.969904][T17983] No such timeout policy "syz1" [ 433.371732][T18010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3645'. [ 434.024189][T18047] Unsupported ieee802154 address type: 0 [ 434.156503][T18053] batman_adv: batadv0: Adding interface: veth0 [ 434.156522][T18053] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.156551][T18053] batman_adv: batadv0: Interface activated: veth0 [ 434.170247][T18053] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3656'. [ 434.170272][T18053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.170289][T18053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.204413][T18053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.204438][T18053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.206466][T18053] batman_adv: batadv0: Interface deactivated: veth0 [ 434.206486][T18053] batman_adv: batadv0: Removing interface: veth0 [ 435.420213][T18117] bridge_slave_1: left allmulticast mode [ 435.420242][T18117] bridge_slave_1: left promiscuous mode [ 435.420504][T18117] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.494421][ T30] audit: type=1804 audit(1790334926.860:9): pid=18129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3668" name="/newroot/172/memory.events" dev="tmpfs" ino=900 res=1 errno=0 [ 435.494538][ T30] audit: type=1800 audit(1790334926.860:10): pid=18129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3668" name="memory.events" dev="tmpfs" ino=900 res=0 errno=0 [ 435.495729][ T30] audit: type=1804 audit(1790334926.860:11): pid=18129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3668" name="/newroot/172/memory.events" dev="tmpfs" ino=900 res=1 errno=0 [ 435.510103][T18117] team0: Port device team_slave_0 removed [ 435.596001][T18117] team0: Port device team_slave_1 removed [ 435.611996][T18117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.612014][T18117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.641102][T18117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.641126][T18117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.682632][T18117] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 436.367335][ T52] block nbd3: Receive control failed (result -32) [ 436.369240][ T5634] block nbd3: Receive control failed (result -32) [ 436.431506][T18170] netlink: 'syz.4.3675': attribute type 12 has an invalid length. [ 436.636175][T18181] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3678'. [ 436.749714][T18188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3677'. [ 436.833175][T18188] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 436.924081][T18055] workqueue: Failed to create a rescuer kthread for wq "bond30": -EINTR [ 437.042549][ T5647] udevd[5647]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 437.311916][T18207] syzkaller0: entered promiscuous mode [ 437.311937][T18207] syzkaller0: entered allmulticast mode [ 437.425028][T18219] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 437.887006][T18235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3687'. [ 438.034161][T18235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3687'. [ 438.070564][T18239] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3688'. [ 438.125149][T18247] gtp0: entered promiscuous mode [ 438.125164][T18247] gtp0: entered allmulticast mode [ 438.218870][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3691'. [ 438.218894][T18251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3691'. [ 438.222355][T18239] hsr_slave_1 (unregistering): left promiscuous mode [ 438.290400][T18257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3693'. [ 438.518229][T18268] __nla_validate_parse: 5 callbacks suppressed [ 438.518253][T18268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3697'. [ 438.561320][T18268] veth3: entered allmulticast mode [ 438.600468][T18269] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 438.617930][T18275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3699'. [ 438.696222][T18277] netlink: 'syz.2.3700': attribute type 18 has an invalid length. [ 439.186144][T18299] batadv_slave_1: entered promiscuous mode [ 439.197851][T18299] macsec1: entered promiscuous mode [ 439.198352][T18299] macsec1: entered allmulticast mode [ 439.198374][T18299] batadv_slave_1: entered allmulticast mode [ 439.206446][T18299] batadv_slave_1: left allmulticast mode [ 439.242937][T18299] batadv_slave_1: left promiscuous mode [ 439.259994][T18309] xt_hashlimit: size too large, truncated to 1048576 [ 439.939481][T18345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3713'. [ 439.969624][T18345] netlink: 'syz.1.3713': attribute type 1 has an invalid length. [ 440.044948][T18345] 8021q: adding VLAN 0 to HW filter on device bond30 [ 440.089695][T18351] netlink: 'syz.0.3716': attribute type 2 has an invalid length. [ 440.090002][T18351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.258486][T18360] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3721'. [ 440.443903][T18370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3722'. [ 440.830875][T18394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3730'. [ 440.831166][T18396] Bluetooth: MGMT ver 1.23 [ 441.270391][T18421] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3735'. [ 441.330698][T18421] netlink: 'syz.1.3735': attribute type 4 has an invalid length. [ 441.330721][T18421] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3735'. [ 441.380401][T18421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.420140][T18430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3737'. [ 441.545113][T18430] 8021q: adding VLAN 0 to HW filter on device bond5 [ 441.555982][T18433] bond5: option ad_select: unable to set because the bond device is up [ 441.783117][T18440] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20004 [ 441.989696][T18447] dvmrp0: entered allmulticast mode [ 442.011207][T18447] dvmrp1: entered allmulticast mode [ 442.021416][T18447] dvmrp0: left allmulticast mode [ 442.021543][T18447] dvmrp1: left allmulticast mode [ 442.138027][T18454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3745'. [ 442.333774][T18465] netlink: 'syz.3.3747': attribute type 13 has an invalid length. [ 442.361085][T18465] netlink: 'syz.3.3747': attribute type 13 has an invalid length. [ 442.367420][ T3755] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.367462][ T3755] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.367493][ T3755] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.367522][ T3755] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.427093][T18465] Dead loop on virtual device lo (net 395), fix it urgently! [ 442.428853][T18465] Dead loop on virtual device lo (net 395), fix it urgently! [ 442.429003][T18465] Dead loop on virtual device lo (net 395), fix it urgently! [ 442.450003][T18465] Dead loop on virtual device lo (net 395), fix it urgently! [ 442.450154][T18465] Dead loop on virtual device lo (net 395), fix it urgently! [ 442.451843][T18465] Dead loop on virtual device lo (net 395), fix it urgently! [ 442.463994][T18465] Dead loop on virtual device lo (net 395), fix it urgently! [ 442.464144][T18465] Dead loop on virtual device lo (net 395), fix it urgently! [ 442.691827][T18474] tipc: Enabling of bearer rejected, failed to enable media [ 443.310281][T18501] syzkaller0: entered promiscuous mode [ 443.310316][T18501] syzkaller0: entered allmulticast mode [ 443.661396][T18528] __nla_validate_parse: 5 callbacks suppressed [ 443.661414][T18528] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3765'. [ 443.812493][T18533] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 443.924380][T18535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3769'. [ 444.018580][ T1152] IPVS: starting estimator thread 0... [ 444.019890][T18536] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3769'. [ 444.023143][T18547] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 444.040013][T18542] net_ratelimit: 43 callbacks suppressed [ 444.040031][T18542] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 444.107632][T18550] FAULT_INJECTION: forcing a failure. [ 444.107632][T18550] name failslab, interval 1, probability 0, space 0, times 0 [ 444.107664][T18550] CPU: 0 UID: 0 PID: 18550 Comm: syz.1.3772 Not tainted syzkaller #0 PREEMPT(full) [ 444.107686][T18550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 444.107697][T18550] Call Trace: [ 444.107705][T18550] [ 444.107714][T18550] dump_stack_lvl+0xe8/0x150 [ 444.107745][T18550] should_fail_ex+0x410/0x560 [ 444.107773][T18550] should_failslab+0xa8/0x100 [ 444.107797][T18550] ? skb_clone+0x212/0x3a0 [ 444.107824][T18550] kmem_cache_alloc_noprof+0xa1/0x600 [ 444.107851][T18550] ? skb_clone+0x212/0x3a0 [ 444.107880][T18550] skb_clone+0x212/0x3a0 [ 444.107906][T18550] bpf_clone_redirect+0x170/0x4b0 [ 444.107932][T18550] ? bpf_test_run+0x1d1/0x830 [ 444.107954][T18550] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 444.107977][T18550] ? __kernel_text_address+0xd/0x30 [ 444.108000][T18550] ? arch_stack_walk+0xfb/0x150 [ 444.108024][T18550] ? __pfx___schedule+0x10/0x10 [ 444.108057][T18550] ? preempt_schedule_thunk+0x16/0x40 [ 444.108078][T18550] ? preempt_schedule_common+0x7f/0xd0 [ 444.108100][T18550] ? bpf_test_run+0x1d1/0x830 [ 444.108116][T18550] ? bpf_test_timer_continue+0x10c/0x320 [ 444.108138][T18550] bpf_test_run+0x354/0x830 [ 444.108171][T18550] ? __pfx_bpf_test_run+0x10/0x10 [ 444.108189][T18550] ? __kasan_krealloc+0xec/0x110 [ 444.108207][T18550] ? skb_dst_set+0x72/0x140 [ 444.108218][T18550] bpf_prog_test_run_skb+0xe35/0x2230 [ 444.108244][T18550] ? __fget_files+0x3a2/0x420 [ 444.108258][T18550] ? __fget_files+0x2a/0x420 [ 444.108273][T18550] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 444.108289][T18550] bpf_prog_test_run+0x2c5/0x340 [ 444.108305][T18550] __sys_bpf+0xa22/0xd90 [ 444.108320][T18550] ? __pfx___sys_bpf+0x10/0x10 [ 444.108344][T18550] ? __fget_files+0x2a/0x420 [ 444.108367][T18550] ? ksys_write+0x242/0x270 [ 444.108394][T18550] ? __pfx_ksys_write+0x10/0x10 [ 444.108419][T18550] __x64_sys_bpf+0xba/0xd0 [ 444.108431][T18550] do_syscall_64+0x166/0x520 [ 444.108445][T18550] ? trace_irq_disable+0x3b/0x140 [ 444.108456][T18550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.108467][T18550] ? clear_bhb_loop+0x70/0xc0 [ 444.108480][T18550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.108490][T18550] RIP: 0033:0x7f0ec1f9e159 [ 444.108502][T18550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.108511][T18550] RSP: 002b:00007f0ec2e62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 444.108524][T18550] RAX: ffffffffffffffda RBX: 00007f0ec2225fa0 RCX: 00007f0ec1f9e159 [ 444.108532][T18550] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 444.108538][T18550] RBP: 00007f0ec2e62090 R08: 0000000000000000 R09: 0000000000000000 [ 444.108545][T18550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 444.108551][T18550] R13: 00007f0ec2226038 R14: 00007f0ec2225fa0 R15: 00007ffefca9cc38 [ 444.108568][T18550] [ 444.127286][T18546] IPVS: using max 29 ests per chain, 69600 per kthread [ 445.590752][T18608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.955768][T18624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3788'. [ 446.353763][ T1007] bond3 (unregistering): (slave geneve3): Releasing active interface [ 446.462665][ T1007] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 446.463396][ T1007] bond0 (unregistering): Released all slaves [ 446.471421][ T1007] bond1 (unregistering): Released all slaves [ 446.484600][ T1007] bond2 (unregistering): Released all slaves [ 446.505110][ T1007] bond3 (unregistering): Released all slaves [ 446.521491][ T1007] bond5 (unregistering): Released all slaves [ 446.531309][ T1007] bond6 (unregistering): Released all slaves [ 446.543406][T18611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3785'. [ 446.582692][T18622] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 446.916760][ T1007] tipc: Disabling bearer [ 446.960906][ T1007] tipc: Left network mode [ 447.311937][ T1007] IPVS: stopping master sync thread 13194 ... [ 447.377724][T18676] netlink: zone id is out of range [ 447.377754][T18676] netlink: zone id is out of range [ 447.377915][T18676] netlink: zone id is out of range [ 447.377939][T18676] netlink: zone id is out of range [ 447.377948][T18676] netlink: zone id is out of range [ 447.377956][T18676] netlink: zone id is out of range [ 447.377963][T18676] netlink: zone id is out of range [ 447.377971][T18676] netlink: zone id is out of range [ 447.878122][T18680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3799'. [ 447.931533][T18681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3798'. [ 448.182945][T18691] SET target dimension over the limit! [ 448.324797][T18670] netlink: 'syz.1.3794': attribute type 3 has an invalid length. [ 448.327905][T18691] tipc: Enabling of bearer rejected, already enabled [ 448.624299][T18695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3803'. [ 448.696536][T18703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3805'. [ 449.684560][ T1007] hsr_slave_0: left promiscuous mode [ 449.692086][ T1007] hsr_slave_1: left promiscuous mode [ 449.743577][T18721] FAULT_INJECTION: forcing a failure. [ 449.743577][T18721] name failslab, interval 1, probability 0, space 0, times 0 [ 449.743614][T18721] CPU: 1 UID: 0 PID: 18721 Comm: syz.4.3808 Not tainted syzkaller #0 PREEMPT(full) [ 449.743636][T18721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 449.743647][T18721] Call Trace: [ 449.743655][T18721] [ 449.743665][T18721] dump_stack_lvl+0xe8/0x150 [ 449.743698][T18721] should_fail_ex+0x410/0x560 [ 449.743725][T18721] should_failslab+0xa8/0x100 [ 449.743750][T18721] ? skb_clone+0x212/0x3a0 [ 449.743777][T18721] kmem_cache_alloc_noprof+0xa1/0x600 [ 449.743808][T18721] ? skb_clone+0x212/0x3a0 [ 449.743842][T18721] skb_clone+0x212/0x3a0 [ 449.743872][T18721] bpf_clone_redirect+0x170/0x4b0 [ 449.743902][T18721] ? bpf_test_run+0x1d1/0x830 [ 449.743921][T18721] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 449.743944][T18721] ? __kernel_text_address+0xd/0x30 [ 449.743969][T18721] ? arch_stack_walk+0xfb/0x150 [ 449.743997][T18721] ? __pfx___schedule+0x10/0x10 [ 449.744037][T18721] ? preempt_schedule_thunk+0x16/0x40 [ 449.744061][T18721] ? preempt_schedule_common+0x7f/0xd0 [ 449.744084][T18721] ? bpf_test_run+0x1d1/0x830 [ 449.744106][T18721] ? bpf_test_timer_continue+0x10c/0x320 [ 449.744130][T18721] bpf_test_run+0x354/0x830 [ 449.744171][T18721] ? __pfx_bpf_test_run+0x10/0x10 [ 449.744206][T18721] ? __kasan_krealloc+0xec/0x110 [ 449.744245][T18721] ? skb_dst_set+0x72/0x140 [ 449.744267][T18721] bpf_prog_test_run_skb+0xe35/0x2230 [ 449.744316][T18721] ? __fget_files+0x3a2/0x420 [ 449.744342][T18721] ? __fget_files+0x2a/0x420 [ 449.744373][T18721] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 449.744403][T18721] bpf_prog_test_run+0x2c5/0x340 [ 449.744431][T18721] __sys_bpf+0xa22/0xd90 [ 449.744461][T18721] ? __pfx___sys_bpf+0x10/0x10 [ 449.744494][T18721] ? __fget_files+0x2a/0x420 [ 449.744538][T18721] ? ksys_write+0x242/0x270 [ 449.744569][T18721] ? __pfx_ksys_write+0x10/0x10 [ 449.744602][T18721] __x64_sys_bpf+0xba/0xd0 [ 449.744625][T18721] do_syscall_64+0x166/0x520 [ 449.744650][T18721] ? trace_irq_disable+0x3b/0x140 [ 449.744669][T18721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.744688][T18721] ? clear_bhb_loop+0x70/0xc0 [ 449.744712][T18721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.744731][T18721] RIP: 0033:0x7fde2af9e159 [ 449.744749][T18721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.744764][T18721] RSP: 002b:00007fde2befe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 449.744785][T18721] RAX: ffffffffffffffda RBX: 00007fde2b225fa0 RCX: 00007fde2af9e159 [ 449.744799][T18721] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 449.744811][T18721] RBP: 00007fde2befe090 R08: 0000000000000000 R09: 0000000000000000 [ 449.744824][T18721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 449.744835][T18721] R13: 00007fde2b226038 R14: 00007fde2b225fa0 R15: 00007ffdf76c2148 [ 449.744867][T18721] [ 450.053955][T18724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3809'. [ 451.807321][T18739] SET target dimension over the limit! [ 452.062335][T18748] tipc: Enabling of bearer rejected, already enabled [ 452.353905][T18760] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.3818'. [ 452.549111][T18749] net_ratelimit: 11 callbacks suppressed [ 452.549130][T18749] openvswitch: netlink: VLAN attribute unexpected. [ 452.562886][T18752] bond0: option min_links: invalid value (18446744073709551615) [ 452.562912][T18752] bond0: option min_links: allowed values 0 - 2147483647 [ 452.575545][T18752] bond0 (unregistering): Released all slaves [ 452.635554][T18760] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 452.642927][T18760] 0ªX¹¦Dö»: entered allmulticast mode [ 452.709932][T18762] syzkaller0: entered promiscuous mode [ 452.709956][T18762] syzkaller0: entered allmulticast mode [ 452.778358][T18762] tipc: Enabled bearer , priority 0 [ 452.782661][ T1007] IPVS: stop unused estimator thread 0... [ 452.986290][T18769] FAULT_INJECTION: forcing a failure. [ 452.986290][T18769] name failslab, interval 1, probability 0, space 0, times 0 [ 452.986324][T18769] CPU: 0 UID: 0 PID: 18769 Comm: syz.4.3821 Not tainted syzkaller #0 PREEMPT(full) [ 452.986342][T18769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 452.986352][T18769] Call Trace: [ 452.986359][T18769] [ 452.986365][T18769] dump_stack_lvl+0xe8/0x150 [ 452.986394][T18769] should_fail_ex+0x410/0x560 [ 452.986416][T18769] should_failslab+0xa8/0x100 [ 452.986436][T18769] ? inet_frag_find+0x8c6/0x1e50 [ 452.986453][T18769] kmem_cache_alloc_noprof+0xa1/0x600 [ 452.986478][T18769] ? inet_frag_find+0x8c6/0x1e50 [ 452.986499][T18769] inet_frag_find+0x8c6/0x1e50 [ 452.986513][T18769] ? unwind_get_return_address+0x4d/0x90 [ 452.986533][T18769] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 452.986548][T18769] ? __pfx_ip4_obj_cmpfn+0x10/0x10 [ 452.986585][T18769] ? lock_acquire+0x115/0x350 [ 452.986601][T18769] ? __pfx_inet_frag_find+0x10/0x10 [ 452.986620][T18769] ? __queue_work+0x1f8/0x10d0 [ 452.986645][T18769] ? skb_clone+0x212/0x3a0 [ 452.986672][T18769] ip_defrag+0x332/0x2030 [ 452.986693][T18769] ? dev_queue_xmit_nit+0x28d/0xac0 [ 452.986713][T18769] ? dev_hard_start_xmit+0x1c1/0x830 [ 452.986736][T18769] ? __dev_queue_xmit+0x14c0/0x3820 [ 452.986766][T18769] ? bpf_prog_test_run_skb+0xe35/0x2230 [ 452.986793][T18769] ? bpf_prog_test_run+0x2c5/0x340 [ 452.986814][T18769] ? __sys_bpf+0xa22/0xd90 [ 452.986832][T18769] ? __x64_sys_bpf+0xba/0xd0 [ 452.986849][T18769] ? do_syscall_64+0x166/0x520 [ 452.986872][T18769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.986904][T18769] ? ip_defrag+0xdf/0x2030 [ 452.986929][T18769] ? __pfx_ip_defrag+0x10/0x10 [ 452.986958][T18769] ? skb_copy_bits+0x658/0x8e0 [ 452.986994][T18769] ip_check_defrag+0x3ec/0x670 [ 452.987034][T18769] ? __pfx_ip_check_defrag+0x10/0x10 [ 452.987066][T18769] ? __skb_clone+0x449/0x6c0 [ 452.987094][T18769] packet_rcv_fanout+0x143/0x6f0 [ 452.987117][T18769] ? skb_clone+0x246/0x3a0 [ 452.987140][T18769] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 452.987164][T18769] dev_queue_xmit_nit+0xa2c/0xac0 [ 452.987186][T18769] ? dev_queue_xmit_nit+0x2d/0xac0 [ 452.987216][T18769] dev_hard_start_xmit+0x1c1/0x830 [ 452.987264][T18769] __dev_queue_xmit+0x14c0/0x3820 [ 452.987290][T18769] ? bpf_prog_test_run+0x2c5/0x340 [ 452.987311][T18769] ? __sys_bpf+0xa22/0xd90 [ 452.987340][T18769] ? __dev_queue_xmit+0x29b/0x3820 [ 452.987377][T18769] ? __pfx___dev_queue_xmit+0x10/0x10 [ 452.987469][T18769] __bpf_redirect+0xa76/0x1250 [ 452.987505][T18769] bpf_clone_redirect+0x319/0x4b0 [ 452.987534][T18769] ? bpf_test_run+0x1d1/0x830 [ 452.987553][T18769] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 452.987577][T18769] ? __kernel_text_address+0xd/0x30 [ 452.987602][T18769] ? arch_stack_walk+0xfb/0x150 [ 452.987629][T18769] ? __pfx___schedule+0x10/0x10 [ 452.987668][T18769] ? preempt_schedule_thunk+0x16/0x40 [ 452.987692][T18769] ? preempt_schedule_common+0x7f/0xd0 [ 452.987714][T18769] ? bpf_test_run+0x1d1/0x830 [ 452.987735][T18769] ? bpf_test_timer_continue+0x10c/0x320 [ 452.987759][T18769] bpf_test_run+0x354/0x830 [ 452.987802][T18769] ? __pfx_bpf_test_run+0x10/0x10 [ 452.987839][T18769] ? __kasan_krealloc+0xec/0x110 [ 452.987873][T18769] ? skb_dst_set+0x72/0x140 [ 452.987896][T18769] bpf_prog_test_run_skb+0xe35/0x2230 [ 452.987939][T18769] ? __fget_files+0x3a2/0x420 [ 452.987965][T18769] ? __fget_files+0x2a/0x420 [ 452.987995][T18769] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 452.988030][T18769] bpf_prog_test_run+0x2c5/0x340 [ 452.988057][T18769] __sys_bpf+0xa22/0xd90 [ 452.988085][T18769] ? __pfx___sys_bpf+0x10/0x10 [ 452.988118][T18769] ? __fget_files+0x2a/0x420 [ 452.988161][T18769] ? ksys_write+0x242/0x270 [ 452.988191][T18769] ? __pfx_ksys_write+0x10/0x10 [ 452.988225][T18769] __x64_sys_bpf+0xba/0xd0 [ 452.988249][T18769] do_syscall_64+0x166/0x520 [ 452.988273][T18769] ? trace_irq_disable+0x3b/0x140 [ 452.988293][T18769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.988312][T18769] ? clear_bhb_loop+0x70/0xc0 [ 452.988337][T18769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.988356][T18769] RIP: 0033:0x7fde2af9e159 [ 452.988376][T18769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.988392][T18769] RSP: 002b:00007fde2befe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 452.988414][T18769] RAX: ffffffffffffffda RBX: 00007fde2b225fa0 RCX: 00007fde2af9e159 [ 452.988428][T18769] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 452.988441][T18769] RBP: 00007fde2befe090 R08: 0000000000000000 R09: 0000000000000000 [ 452.988454][T18769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 452.988466][T18769] R13: 00007fde2b226038 R14: 00007fde2b225fa0 R15: 00007ffdf76c2148 [ 452.988500][T18769] [ 453.378891][T18782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3824'. [ 453.746011][T18762] tipc: Resetting bearer [ 453.780908][T18758] tipc: Resetting bearer [ 453.925327][T18758] tipc: Disabling bearer [ 454.122424][ T1007] bridge_slave_1: left allmulticast mode [ 454.122452][ T1007] bridge_slave_1: left promiscuous mode [ 454.125273][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.172747][ T1007] bridge_slave_0: left allmulticast mode [ 454.172774][ T1007] bridge_slave_0: left promiscuous mode [ 454.173065][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.187747][ T2587] block nbd2: Possible stuck request ffff88802768e000: control (read@0,1024B). Runtime 180 seconds [ 454.187787][ T2587] block nbd2: Possible stuck request ffff88802768e1c0: control (read@1024,3072B). Runtime 180 seconds [ 454.340488][T18799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3827'. [ 454.658240][ T1007] batman_adv: batadv0: Removing interface: ip6gretap1 [ 454.691883][T18815] Cannot find del_set index 0 as target [ 455.922448][T18841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3834'. [ 455.971892][T18842] FAULT_INJECTION: forcing a failure. [ 455.971892][T18842] name failslab, interval 1, probability 0, space 0, times 0 [ 455.971927][T18842] CPU: 0 UID: 0 PID: 18842 Comm: syz.3.3835 Not tainted syzkaller #0 PREEMPT(full) [ 455.971949][T18842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.971961][T18842] Call Trace: [ 455.971970][T18842] [ 455.971978][T18842] dump_stack_lvl+0xe8/0x150 [ 455.972011][T18842] should_fail_ex+0x410/0x560 [ 455.972040][T18842] should_failslab+0xa8/0x100 [ 455.972067][T18842] ? inet_frag_find+0x8c6/0x1e50 [ 455.972088][T18842] kmem_cache_alloc_noprof+0xa1/0x600 [ 455.972121][T18842] ? inet_frag_find+0x8c6/0x1e50 [ 455.972147][T18842] inet_frag_find+0x8c6/0x1e50 [ 455.972165][T18842] ? unwind_get_return_address+0x4d/0x90 [ 455.972188][T18842] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 455.972206][T18842] ? __pfx_ip4_obj_cmpfn+0x10/0x10 [ 455.972248][T18842] ? lock_acquire+0x115/0x350 [ 455.972267][T18842] ? __pfx_inet_frag_find+0x10/0x10 [ 455.972291][T18842] ? __queue_work+0x1f8/0x10d0 [ 455.972318][T18842] ? skb_clone+0x212/0x3a0 [ 455.972349][T18842] ip_defrag+0x332/0x2030 [ 455.972374][T18842] ? dev_queue_xmit_nit+0x28d/0xac0 [ 455.972397][T18842] ? dev_hard_start_xmit+0x1c1/0x830 [ 455.972422][T18842] ? __dev_queue_xmit+0x14c0/0x3820 [ 455.972449][T18842] ? bpf_prog_test_run_skb+0xe35/0x2230 [ 455.972474][T18842] ? bpf_prog_test_run+0x2c5/0x340 [ 455.972492][T18842] ? __sys_bpf+0xa22/0xd90 [ 455.972510][T18842] ? __x64_sys_bpf+0xba/0xd0 [ 455.972528][T18842] ? do_syscall_64+0x166/0x520 [ 455.972552][T18842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.972578][T18842] ? ip_defrag+0xdf/0x2030 [ 455.972599][T18842] ? __pfx_ip_defrag+0x10/0x10 [ 455.972622][T18842] ? skb_copy_bits+0x658/0x8e0 [ 455.972656][T18842] ip_check_defrag+0x3ec/0x670 [ 455.972684][T18842] ? __pfx_ip_check_defrag+0x10/0x10 [ 455.972717][T18842] ? __skb_clone+0x449/0x6c0 [ 455.972746][T18842] packet_rcv_fanout+0x143/0x6f0 [ 455.972776][T18842] ? skb_clone+0x246/0x3a0 [ 455.972800][T18842] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 455.972823][T18842] dev_queue_xmit_nit+0xa2c/0xac0 [ 455.972844][T18842] ? dev_queue_xmit_nit+0x2d/0xac0 [ 455.972872][T18842] dev_hard_start_xmit+0x1c1/0x830 [ 455.972913][T18842] __dev_queue_xmit+0x14c0/0x3820 [ 455.972939][T18842] ? bpf_prog_test_run+0x2c5/0x340 [ 455.972957][T18842] ? __sys_bpf+0xa22/0xd90 [ 455.972985][T18842] ? __dev_queue_xmit+0x29b/0x3820 [ 455.973024][T18842] ? __pfx___dev_queue_xmit+0x10/0x10 [ 455.973089][T18842] __bpf_redirect+0xa76/0x1250 [ 455.973124][T18842] bpf_clone_redirect+0x319/0x4b0 [ 455.973150][T18842] ? bpf_test_run+0x1d1/0x830 [ 455.973168][T18842] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 455.973187][T18842] ? __kernel_text_address+0xd/0x30 [ 455.973210][T18842] ? arch_stack_walk+0xfb/0x150 [ 455.973238][T18842] ? __pfx___schedule+0x10/0x10 [ 455.973273][T18842] ? preempt_schedule_thunk+0x16/0x40 [ 455.973296][T18842] ? preempt_schedule_common+0x7f/0xd0 [ 455.973318][T18842] ? bpf_test_run+0x1d1/0x830 [ 455.973339][T18842] ? bpf_test_timer_continue+0x10c/0x320 [ 455.973364][T18842] bpf_test_run+0x354/0x830 [ 455.973408][T18842] ? __pfx_bpf_test_run+0x10/0x10 [ 455.973445][T18842] ? __kasan_krealloc+0xec/0x110 [ 455.973479][T18842] ? skb_dst_set+0x72/0x140 [ 455.973505][T18842] bpf_prog_test_run_skb+0xe35/0x2230 [ 455.973556][T18842] ? __fget_files+0x3a2/0x420 [ 455.973582][T18842] ? __fget_files+0x2a/0x420 [ 455.973613][T18842] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 455.973643][T18842] bpf_prog_test_run+0x2c5/0x340 [ 455.973671][T18842] __sys_bpf+0xa22/0xd90 [ 455.973704][T18842] ? __pfx___sys_bpf+0x10/0x10 [ 455.973739][T18842] ? __fget_files+0x2a/0x420 [ 455.973790][T18842] ? ksys_write+0x242/0x270 [ 455.973821][T18842] ? __pfx_ksys_write+0x10/0x10 [ 455.973855][T18842] __x64_sys_bpf+0xba/0xd0 [ 455.973880][T18842] do_syscall_64+0x166/0x520 [ 455.973903][T18842] ? trace_irq_disable+0x3b/0x140 [ 455.973922][T18842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.973942][T18842] ? clear_bhb_loop+0x70/0xc0 [ 455.973967][T18842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.973986][T18842] RIP: 0033:0x7fc45cd9e159 [ 455.974005][T18842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.974019][T18842] RSP: 002b:00007fc45aff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 455.974040][T18842] RAX: ffffffffffffffda RBX: 00007fc45d025fa0 RCX: 00007fc45cd9e159 [ 455.974054][T18842] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 455.974066][T18842] RBP: 00007fc45aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 455.974078][T18842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 455.974089][T18842] R13: 00007fc45d026038 R14: 00007fc45d025fa0 R15: 00007ffc8e74e048 [ 455.974124][T18842] [ 456.122454][T18844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3834'. [ 456.528875][T18836] IPVS: Scheduler module ip_vs_ not found [ 456.731029][ T1007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.733277][ T1007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.769804][ T1007] bond0 (unregistering): Released all slaves [ 456.812959][ T1007] bond1 (unregistering): Released all slaves [ 456.834585][ T1007] bond2 (unregistering): Released all slaves [ 456.860903][ T1007] bond3 (unregistering): Released all slaves [ 456.885489][ T1007] bond4 (unregistering): Released all slaves [ 456.901798][T15478] smbdirect: ib_dev[syz1] removed [ 456.906470][ T1007] bond5 (unregistering): Released all slaves [ 456.989646][ T1007] bond6 (unregistering): Released all slaves [ 457.019799][ T1007] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 457.021903][ T1007] bond7 (unregistering): Released all slaves [ 457.538965][ T989] infiniband syz1: ib_query_port failed (-19) [ 457.779677][T18847] bond1: ARP target 9.0.0.0 is already present [ 457.779704][T18847] bond1: option arp_ip_target: invalid value (9) [ 457.819489][T18847] bond1 (unregistering): Released all slaves [ 458.208730][T18856] syzkaller0: entered promiscuous mode [ 458.208757][T18856] syzkaller0: entered allmulticast mode [ 458.233699][ T1007] tipc: Disabling bearer [ 458.233921][ T1007] tipc: Disabling bearer [ 458.254018][ T1007] tipc: Left network mode [ 458.462809][ T1007] IPVS: stopping master sync thread 11942 ... [ 459.269845][T18913] x_tables: duplicate underflow at hook 3 [ 459.433594][T18914] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3845'. [ 459.462399][T18914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3845'. [ 460.588032][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 462.102755][ T4989] udevd[4989]: worker [10860] /devices/virtual/block/nbd2 timeout; kill it [ 462.103030][ T4989] udevd[4989]: seq 16344 '/devices/virtual/block/nbd2' killed [ 463.090803][T18895] tipc: Enabled bearer , priority 0 [ 463.180492][T18907] syzkaller0: entered promiscuous mode [ 463.180525][T18907] syzkaller0: entered allmulticast mode [ 463.182692][T18889] tipc: Disabling bearer [ 463.221591][T18911] syzkaller0: mtu less than device minimum [ 463.336250][T18916] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 464.238560][ T1007] hsr_slave_0: left promiscuous mode [ 464.240657][ T1007] hsr_slave_1: left promiscuous mode [ 464.241576][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.244334][ T1007] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 464.244400][ T1007] batman_adv: batadv0: Removing interface: ipvlan2 [ 465.022261][ T1007] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 465.062810][T18964] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 465.284506][ T1007] team0 (unregistering): Port device team_slave_1 removed [ 465.318459][ T1007] team0 (unregistering): Port device team_slave_0 removed [ 466.310314][ T1007] IPVS: stop unused estimator thread 0... [ 466.392055][T18982] FAULT_INJECTION: forcing a failure. [ 466.392055][T18982] name failslab, interval 1, probability 0, space 0, times 0 [ 466.392089][T18982] CPU: 1 UID: 0 PID: 18982 Comm: syz.0.3863 Not tainted syzkaller #0 PREEMPT(full) [ 466.392111][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.392122][T18982] Call Trace: [ 466.392129][T18982] [ 466.392138][T18982] dump_stack_lvl+0xe8/0x150 [ 466.392171][T18982] should_fail_ex+0x410/0x560 [ 466.392200][T18982] should_failslab+0xa8/0x100 [ 466.392224][T18982] ? skb_clone+0x212/0x3a0 [ 466.392251][T18982] kmem_cache_alloc_noprof+0xa1/0x600 [ 466.392278][T18982] ? lock_acquire+0x115/0x350 [ 466.392297][T18982] ? skb_clone+0x212/0x3a0 [ 466.392328][T18982] skb_clone+0x212/0x3a0 [ 466.392351][T18982] ? dev_queue_xmit_nit+0x25c/0xac0 [ 466.392379][T18982] dev_queue_xmit_nit+0x28d/0xac0 [ 466.392404][T18982] ? dev_queue_xmit_nit+0x2d/0xac0 [ 466.392437][T18982] dev_hard_start_xmit+0x1c1/0x830 [ 466.392482][T18982] __dev_queue_xmit+0x14c0/0x3820 [ 466.392509][T18982] ? bpf_prog_test_run+0x2c5/0x340 [ 466.392529][T18982] ? __sys_bpf+0xa22/0xd90 [ 466.392561][T18982] ? __dev_queue_xmit+0x29b/0x3820 [ 466.392599][T18982] ? __pfx___dev_queue_xmit+0x10/0x10 [ 466.392679][T18982] __bpf_redirect+0xa76/0x1250 [ 466.392714][T18982] bpf_clone_redirect+0x319/0x4b0 [ 466.392744][T18982] ? bpf_test_run+0x1d1/0x830 [ 466.392764][T18982] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 466.392787][T18982] ? __kernel_text_address+0xd/0x30 [ 466.392815][T18982] ? arch_stack_walk+0xfb/0x150 [ 466.392842][T18982] ? __pfx___schedule+0x10/0x10 [ 466.392881][T18982] ? preempt_schedule_thunk+0x16/0x40 [ 466.392905][T18982] ? preempt_schedule_common+0x7f/0xd0 [ 466.392928][T18982] ? bpf_test_run+0x1d1/0x830 [ 466.392951][T18982] ? bpf_test_timer_continue+0x10c/0x320 [ 466.392975][T18982] bpf_test_run+0x354/0x830 [ 466.393017][T18982] ? __pfx_bpf_test_run+0x10/0x10 [ 466.393054][T18982] ? __kasan_krealloc+0xec/0x110 [ 466.393087][T18982] ? skb_dst_set+0x72/0x140 [ 466.393108][T18982] bpf_prog_test_run_skb+0xe35/0x2230 [ 466.393160][T18982] ? __fget_files+0x3a2/0x420 [ 466.393185][T18982] ? __fget_files+0x2a/0x420 [ 466.393216][T18982] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 466.393247][T18982] bpf_prog_test_run+0x2c5/0x340 [ 466.393274][T18982] __sys_bpf+0xa22/0xd90 [ 466.393306][T18982] ? __pfx___sys_bpf+0x10/0x10 [ 466.393340][T18982] ? __fget_files+0x2a/0x420 [ 466.393384][T18982] ? ksys_write+0x242/0x270 [ 466.393415][T18982] ? __pfx_ksys_write+0x10/0x10 [ 466.393449][T18982] __x64_sys_bpf+0xba/0xd0 [ 466.393473][T18982] do_syscall_64+0x166/0x520 [ 466.393497][T18982] ? trace_irq_disable+0x3b/0x140 [ 466.393516][T18982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.393537][T18982] ? clear_bhb_loop+0x70/0xc0 [ 466.393561][T18982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.393580][T18982] RIP: 0033:0x7f74b619e159 [ 466.393599][T18982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.393615][T18982] RSP: 002b:00007f74b6f9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 466.393642][T18982] RAX: ffffffffffffffda RBX: 00007f74b6425fa0 RCX: 00007f74b619e159 [ 466.393656][T18982] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 466.393669][T18982] RBP: 00007f74b6f9d090 R08: 0000000000000000 R09: 0000000000000000 [ 466.393682][T18982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 466.393694][T18982] R13: 00007f74b6426038 R14: 00007f74b6425fa0 R15: 00007ffcdd84dbe8 [ 466.393728][T18982] [ 467.305206][T18993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3867'. [ 467.378769][T18997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.965950][T19012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3873'. [ 468.100840][T19021] bridge0: port 1(erspan0) entered blocking state [ 468.103715][T19021] bridge0: port 1(erspan0) entered disabled state [ 468.103901][T19021] erspan0: entered allmulticast mode [ 468.138654][T19021] erspan0: entered promiscuous mode [ 468.139831][T19021] bridge0: port 1(erspan0) entered blocking state [ 468.139950][T19021] bridge0: port 1(erspan0) entered forwarding state [ 468.224255][T19008] sctp: [Deprecated]: syz.3.3871 (pid 19008) Use of int in maxseg socket option. [ 468.224255][T19008] Use struct sctp_assoc_value instead [ 468.251292][T19008] netlink: 'syz.3.3871': attribute type 4 has an invalid length. [ 468.310162][T19024] FAULT_INJECTION: forcing a failure. [ 468.310162][T19024] name failslab, interval 1, probability 0, space 0, times 0 [ 468.310199][T19024] CPU: 1 UID: 0 PID: 19024 Comm: syz.0.3876 Not tainted syzkaller #0 PREEMPT(full) [ 468.310237][T19024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.310261][T19024] Call Trace: [ 468.310268][T19024] [ 468.310277][T19024] dump_stack_lvl+0xe8/0x150 [ 468.310310][T19024] should_fail_ex+0x410/0x560 [ 468.310337][T19024] should_failslab+0xa8/0x100 [ 468.310360][T19024] ? inet_frag_find+0x8c6/0x1e50 [ 468.310380][T19024] kmem_cache_alloc_noprof+0xa1/0x600 [ 468.310409][T19024] ? inet_frag_find+0x8c6/0x1e50 [ 468.310433][T19024] inet_frag_find+0x8c6/0x1e50 [ 468.310460][T19024] ? unwind_get_return_address+0x4d/0x90 [ 468.310483][T19024] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 468.310499][T19024] ? __pfx_ip4_obj_cmpfn+0x10/0x10 [ 468.310536][T19024] ? lock_acquire+0x115/0x350 [ 468.310556][T19024] ? __pfx_inet_frag_find+0x10/0x10 [ 468.310577][T19024] ? irqentry_exit+0x218/0x910 [ 468.310600][T19024] ? skb_clone+0x212/0x3a0 [ 468.310631][T19024] ip_defrag+0x332/0x2030 [ 468.310654][T19024] ? dev_queue_xmit_nit+0x28d/0xac0 [ 468.310676][T19024] ? dev_hard_start_xmit+0x1c1/0x830 [ 468.310700][T19024] ? __dev_queue_xmit+0x14c0/0x3820 [ 468.310728][T19024] ? bpf_prog_test_run_skb+0xe35/0x2230 [ 468.310755][T19024] ? bpf_prog_test_run+0x2c5/0x340 [ 468.310777][T19024] ? __sys_bpf+0xa22/0xd90 [ 468.310794][T19024] ? __x64_sys_bpf+0xba/0xd0 [ 468.310810][T19024] ? do_syscall_64+0x166/0x520 [ 468.310834][T19024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.310865][T19024] ? ip_defrag+0xdf/0x2030 [ 468.310888][T19024] ? __pfx_ip_defrag+0x10/0x10 [ 468.310914][T19024] ? skb_copy_bits+0x658/0x8e0 [ 468.310948][T19024] ip_check_defrag+0x3ec/0x670 [ 468.310978][T19024] ? __pfx_ip_check_defrag+0x10/0x10 [ 468.311012][T19024] ? __skb_clone+0x449/0x6c0 [ 468.311040][T19024] packet_rcv_fanout+0x143/0x6f0 [ 468.311066][T19024] ? skb_clone+0x246/0x3a0 [ 468.311092][T19024] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 468.311119][T19024] dev_queue_xmit_nit+0xa2c/0xac0 [ 468.311145][T19024] ? dev_queue_xmit_nit+0x2d/0xac0 [ 468.311178][T19024] dev_hard_start_xmit+0x1c1/0x830 [ 468.311221][T19024] __dev_queue_xmit+0x14c0/0x3820 [ 468.311245][T19024] ? bpf_prog_test_run+0x2c5/0x340 [ 468.311266][T19024] ? __sys_bpf+0xa22/0xd90 [ 468.311299][T19024] ? __dev_queue_xmit+0x29b/0x3820 [ 468.311338][T19024] ? __pfx___dev_queue_xmit+0x10/0x10 [ 468.311410][T19024] __bpf_redirect+0xa76/0x1250 [ 468.311449][T19024] bpf_clone_redirect+0x319/0x4b0 [ 468.311478][T19024] ? bpf_test_run+0x1d1/0x830 [ 468.311497][T19024] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 468.311521][T19024] ? __kernel_text_address+0xd/0x30 [ 468.311546][T19024] ? arch_stack_walk+0xfb/0x150 [ 468.311573][T19024] ? __pfx___schedule+0x10/0x10 [ 468.311612][T19024] ? preempt_schedule_thunk+0x16/0x40 [ 468.311636][T19024] ? preempt_schedule_common+0x7f/0xd0 [ 468.311659][T19024] ? bpf_test_run+0x1d1/0x830 [ 468.311681][T19024] ? bpf_test_timer_continue+0x10c/0x320 [ 468.311706][T19024] bpf_test_run+0x354/0x830 [ 468.311749][T19024] ? __pfx_bpf_test_run+0x10/0x10 [ 468.311786][T19024] ? __kasan_krealloc+0xec/0x110 [ 468.311819][T19024] ? skb_dst_set+0x72/0x140 [ 468.311841][T19024] bpf_prog_test_run_skb+0xe35/0x2230 [ 468.311893][T19024] ? __fget_files+0x3a2/0x420 [ 468.311918][T19024] ? __fget_files+0x2a/0x420 [ 468.311948][T19024] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 468.311979][T19024] bpf_prog_test_run+0x2c5/0x340 [ 468.312006][T19024] __sys_bpf+0xa22/0xd90 [ 468.312037][T19024] ? __pfx___sys_bpf+0x10/0x10 [ 468.312069][T19024] ? __fget_files+0x2a/0x420 [ 468.312111][T19024] ? ksys_write+0x242/0x270 [ 468.312142][T19024] ? __pfx_ksys_write+0x10/0x10 [ 468.312177][T19024] __x64_sys_bpf+0xba/0xd0 [ 468.312200][T19024] do_syscall_64+0x166/0x520 [ 468.312224][T19024] ? trace_irq_disable+0x3b/0x140 [ 468.312244][T19024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.312264][T19024] ? clear_bhb_loop+0x70/0xc0 [ 468.312288][T19024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.312308][T19024] RIP: 0033:0x7f74b619e159 [ 468.312326][T19024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.312343][T19024] RSP: 002b:00007f74b6f9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 468.312364][T19024] RAX: ffffffffffffffda RBX: 00007f74b6425fa0 RCX: 00007f74b619e159 [ 468.312379][T19024] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 468.312392][T19024] RBP: 00007f74b6f9d090 R08: 0000000000000000 R09: 0000000000000000 [ 468.312404][T19024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.312416][T19024] R13: 00007f74b6426038 R14: 00007f74b6425fa0 R15: 00007ffcdd84dbe8 [ 468.312457][T19024] [ 468.955282][T19028] openvswitch: netlink: IPv4 tunnel dst address is zero [ 469.031788][T19028] sit1: entered promiscuous mode [ 469.337554][T19029] bond6: option updelay: invalid value (18446744073709518847) [ 469.337580][T19029] bond6: option updelay: allowed values 0 - 2147483647 [ 469.454856][T19029] bond6 (unregistering): Released all slaves [ 469.903573][T19050] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3883'. [ 469.922965][T19050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3883'. [ 469.923057][T19050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.963185][T19053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3883'. [ 469.963220][T19053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.202803][T19060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3885'. [ 470.273771][T19063] ip6tnl1: entered allmulticast mode [ 470.284771][T19064] xt_hashlimit: size too large, truncated to 1048576 [ 470.575012][T19063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3888'. [ 470.736496][T19076] tipc: Enabling of bearer rejected, failed to enable media [ 470.741683][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 470.741940][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 470.770520][ T989] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 470.837424][T17176] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 470.988672][T19085] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.3891'. [ 471.274553][T19100] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 471.277019][T19102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3894'. [ 471.301421][T19102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3894'. [ 471.334777][T19095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.461817][T19094] netlink: zone id is out of range [ 471.461832][T19094] netlink: zone id is out of range [ 471.461840][T19094] netlink: zone id is out of range [ 471.461849][T19094] netlink: zone id is out of range [ 471.461855][T19094] netlink: zone id is out of range [ 471.461863][T19094] netlink: zone id is out of range [ 471.789518][T17176] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 472.455128][T19139] __nla_validate_parse: 1 callbacks suppressed [ 472.455147][T19139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3904'. [ 472.662613][T19144] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3905'. [ 472.894733][T19147] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3905'. [ 473.238330][T19176] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3908'. [ 473.317823][T19178] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3911'. [ 473.750612][T19193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3911'. [ 473.770889][T19181] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 473.881770][T19195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3912'. [ 473.881793][T19195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3912'. [ 473.987230][T19181] bond0 (unregistering): Released all slaves [ 474.162772][T19207] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3916'. [ 474.454582][T19189] net_ratelimit: 155 callbacks suppressed [ 474.454605][T19189] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 474.519754][T19207] gretap0: entered promiscuous mode [ 474.621371][T19211] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 474.621410][T19211] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 474.621446][T19211] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 474.688111][T19211] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 475.108195][T19232] syz_tun: entered promiscuous mode [ 475.147286][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 475.184127][T19237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3925'. [ 475.309898][T19236] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 475.395154][T19252] netlink: 'syz.3.3927': attribute type 2 has an invalid length. [ 475.530812][T19231] syz_tun: left promiscuous mode [ 476.697889][T19288] FAULT_INJECTION: forcing a failure. [ 476.697889][T19288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.697922][T19288] CPU: 0 UID: 0 PID: 19288 Comm: syz.4.3943 Not tainted syzkaller #0 PREEMPT(full) [ 476.697941][T19288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.697951][T19288] Call Trace: [ 476.697959][T19288] [ 476.697967][T19288] dump_stack_lvl+0xe8/0x150 [ 476.697999][T19288] should_fail_ex+0x410/0x560 [ 476.698025][T19288] _copy_from_user+0x2d/0xb0 [ 476.698049][T19288] get_user_ifreq+0x6b/0x180 [ 476.698078][T19288] sock_ioctl+0x6f8/0x7e0 [ 476.698100][T19288] ? __pfx_sock_ioctl+0x10/0x10 [ 476.698120][T19288] ? __fget_files+0x3a2/0x420 [ 476.698156][T19288] ? __fget_files+0x2a/0x420 [ 476.698181][T19288] ? bpf_lsm_file_ioctl+0x9/0x20 [ 476.698208][T19288] ? __pfx_sock_ioctl+0x10/0x10 [ 476.698225][T19288] __se_sys_ioctl+0xfc/0x170 [ 476.698248][T19288] do_syscall_64+0x166/0x520 [ 476.698274][T19288] ? trace_irq_disable+0x3b/0x140 [ 476.698293][T19288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.698311][T19288] ? clear_bhb_loop+0x70/0xc0 [ 476.698333][T19288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.698351][T19288] RIP: 0033:0x7fde2af9e159 [ 476.698369][T19288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.698384][T19288] RSP: 002b:00007fde2befe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.698404][T19288] RAX: ffffffffffffffda RBX: 00007fde2b225fa0 RCX: 00007fde2af9e159 [ 476.698418][T19288] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000003 [ 476.698430][T19288] RBP: 00007fde2befe090 R08: 0000000000000000 R09: 0000000000000000 [ 476.698442][T19288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.698454][T19288] R13: 00007fde2b226038 R14: 00007fde2b225fa0 R15: 00007ffdf76c2148 [ 476.698486][T19288] [ 477.138531][T19300] netlink: 'syz.1.3946': attribute type 34 has an invalid length. [ 477.301742][T19300] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 477.844338][T19331] __nla_validate_parse: 44 callbacks suppressed [ 477.844361][T19331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3952'. [ 477.971609][T19339] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 478.126451][T19345] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3956'. [ 478.312849][T19347] netlink: 'syz.4.3956': attribute type 2 has an invalid length. [ 478.312971][T19347] netlink: 'syz.4.3956': attribute type 2 has an invalid length. [ 478.318555][T19354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3959'. [ 478.428685][T19356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3958'. [ 478.843327][T19369] bond0: Removing last arp target with arp_interval on [ 478.898638][T19376] netlink: 'syz.0.3963': attribute type 1 has an invalid length. [ 478.904544][T19368] netdevsim netdevsim4: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 479.103971][T19389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3967'. [ 479.663319][T19414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3973'. [ 479.923951][T19417] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3974'. [ 479.985637][T19421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.022122][T19421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3976'. [ 480.169064][T19427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3975'. [ 480.413916][T19427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3975'. [ 481.465447][T19475] netlink: 'syz.0.3991': attribute type 1 has an invalid length. [ 481.611255][T19475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.631497][T19477] bond1: entered allmulticast mode [ 481.870523][T19475] can: request_module (can-proto-0) failed. [ 482.637855][T19498] netlink: 'syz.1.3997': attribute type 1 has an invalid length. [ 482.880855][T19498] 8021q: adding VLAN 0 to HW filter on device bond31 [ 483.080812][T19502] bond31: (slave gretap1): Enslaving as a backup interface with an up link [ 483.119011][ T181] bond31: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 483.156360][T19516] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 483.213291][T19504] bond31 (unregistering): (slave gretap1): Removing an active aggregator [ 483.241192][T19504] bond31 (unregistering): (slave gretap1): Releasing backup interface [ 483.269587][T19504] bond31 (unregistering): Released all slaves [ 483.626869][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 483.741618][T19533] netlink: 'syz.3.4003': attribute type 9 has an invalid length. [ 484.269039][ T2587] block nbd2: Possible stuck request ffff88802768e000: control (read@0,1024B). Runtime 210 seconds [ 484.269075][ T2587] block nbd2: Possible stuck request ffff88802768e1c0: control (read@1024,3072B). Runtime 210 seconds [ 484.710633][T19567] __nla_validate_parse: 10 callbacks suppressed [ 484.710656][T19567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4013'. [ 484.978898][T19569] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4016'. [ 485.315974][T19569] syzkaller0: entered promiscuous mode [ 485.316163][T19569] syzkaller0: entered allmulticast mode [ 486.444346][T19602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.562676][T19603] xt_CT: No such helper "snmp_trap" [ 486.610934][T19608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4023'. [ 490.883838][T19618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4025'. [ 491.037280][T19584] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.037928][T19584] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.856095][T19608] erspan0: entered promiscuous mode [ 491.856296][T19608] macvtap1: entered promiscuous mode [ 491.871203][T19608] macvtap1: entered allmulticast mode [ 491.871227][T19608] erspan0: entered allmulticast mode [ 492.067127][ T1007] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.067178][ T1007] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.067213][ T1007] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.067245][ T1007] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.263140][T19624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4029'. [ 492.307625][T19622] x_tables: duplicate entry at hook 1 [ 492.336394][T19630] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4030'. [ 492.542558][T19633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4027'. [ 492.769413][T19639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4033'. [ 492.911487][T19652] IPVS: length: 113 != 8 [ 493.174442][T19664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4034'. [ 493.225221][T19667] syzkaller0: entered promiscuous mode [ 493.225246][T19667] syzkaller0: entered allmulticast mode [ 493.548621][T19660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4037'. [ 493.548693][T19660] openvswitch: netlink: Flow actions attr not present in new flow. [ 493.726716][T19674] syzkaller0: mtu less than device minimum [ 493.835200][T19684] netlink: 'syz.3.4043': attribute type 23 has an invalid length. [ 494.325983][T19708] netlink: 'syz.0.4049': attribute type 16 has an invalid length. [ 494.495154][T19717] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4051'. [ 494.495181][T19717] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4051'. [ 495.952074][T19751] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4055'. [ 496.165879][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4058'. [ 496.422978][T19741] syzkaller0: entered promiscuous mode [ 496.423017][T19741] syzkaller0: entered allmulticast mode [ 500.272634][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 501.692113][T19759] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4058'. [ 501.998236][T19785] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 501.998418][T19785] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 502.006131][T19785] pim6reg1: entered promiscuous mode [ 502.006314][T19785] pim6reg1: entered allmulticast mode [ 502.035322][T19793] : renamed from bond0 (while UP) [ 502.192362][T19796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4067'. [ 502.391664][T19807] netlink: get zone limit has 4 unknown bytes [ 502.433041][T19794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4064'. [ 502.437221][T19807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4068'. [ 502.606739][T19816] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4071'. [ 502.606856][T19816] 0·: renamed from hsr0 (while UP) [ 502.645167][T19816] 0·: entered allmulticast mode [ 502.645201][T19816] hsr_slave_0: entered allmulticast mode [ 502.645827][T19816] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 503.799530][T19855] netlink: 18 bytes leftover after parsing attributes in process `syz.0.4083'. [ 503.817334][T19859] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 503.822728][T19851] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 504.343555][T19885] x_tables: duplicate underflow at hook 1 [ 504.368723][T19878] geneve1: entered promiscuous mode [ 505.047813][T19923] netlink: 'syz.1.4101': attribute type 1 has an invalid length. [ 505.508890][T19939] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4103'. [ 505.997818][T19950] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 506.224063][T19959] syzkaller0: entered promiscuous mode [ 506.224086][T19959] syzkaller0: entered allmulticast mode [ 506.263472][T19959] tipc: Enabled bearer , priority 0 [ 506.357679][T19959] tipc: Resetting bearer [ 506.382074][T19959] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 506.525979][T19966] ip_tables: iptables: counters copy to user failed while replacing table [ 506.660817][T19957] tipc: Resetting bearer [ 506.748976][T19957] tipc: Disabling bearer [ 506.895785][T19986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4117'. [ 506.895824][T19986] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4117'. [ 506.952016][T19988] netlink: 'syz.2.4116': attribute type 21 has an invalid length. [ 506.952040][T19988] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4116'. [ 507.165564][T19998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4120'. [ 507.216370][T19999] x_tables: duplicate underflow at hook 1 [ 507.255111][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4121'. [ 507.345406][T20005] block nbd0: reconnected socket [ 507.354405][T20005] netlink: 'syz.2.4124': attribute type 9 has an invalid length. [ 507.601379][T20006] ±ÿ: renamed from lo [ 507.789355][ T5634] block nbd0: Receive control failed (result -32) [ 508.171349][T20037] netlink: 'syz.3.4130': attribute type 1 has an invalid length. [ 508.386152][T20037] bond1: option mode: invalid value (7) [ 508.408350][T20037] bond1 (unregistering): Released all slaves [ 508.565432][T20057] netlink: 'syz.1.4133': attribute type 1 has an invalid length. [ 508.724282][T20057] bond0 (unregistering): Released all slaves [ 509.281583][T20082] openvswitch: netlink: Geneve opt len 66 is not a multiple of 4. [ 509.544708][T20095] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4145'. [ 509.618397][T20100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4145'. [ 509.639685][T20103] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20003 [ 509.661340][T20100] [ 509.663744][T20100] ====================================================== [ 509.670770][T20100] WARNING: possible circular locking dependency detected [ 509.677820][T20100] syzkaller #0 Not tainted [ 509.682244][T20100] ------------------------------------------------------ [ 509.689277][T20100] syz.4.4145/20100 is trying to acquire lock: [ 509.695360][T20100] ffff88805babab18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 509.704290][T20100] [ 509.704290][T20100] but task is already holding lock: [ 509.711669][T20100] ffff88802955e2a8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 509.721098][T20100] [ 509.721098][T20100] which lock already depends on the new lock. [ 509.721098][T20100] [ 509.731516][T20100] [ 509.731516][T20100] the existing dependency chain (in reverse order) is: [ 509.740546][T20100] [ 509.740546][T20100] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 509.748452][T20100] __mutex_lock+0x19d/0x1550 [ 509.753600][T20100] elevator_change+0x1af/0x480 [ 509.758908][T20100] elevator_set_none+0xb5/0x140 [ 509.764305][T20100] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 509.770662][T20100] nbd_start_device+0x189/0xb30 [ 509.776070][T20100] nbd_genl_connect+0x167d/0x1cd0 [ 509.781635][T20100] genl_family_rcv_msg_doit+0x233/0x340 [ 509.787734][T20100] genl_rcv_msg+0x614/0x7a0 [ 509.788003][T13943] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 509.800225][T20100] netlink_rcv_skb+0x226/0x4a0 [ 509.805544][T20100] genl_rcv+0x28/0x40 [ 509.810080][T20100] netlink_unicast+0x7bd/0x940 [ 509.815396][T20100] netlink_sendmsg+0x813/0xb40 [ 509.820705][T20100] sock_sendmsg_nosec+0x13a/0x180 [ 509.826276][T20100] ____sys_sendmsg+0x54e/0x850 [ 509.831595][T20100] ___sys_sendmsg+0x2a5/0x360 [ 509.836827][T20100] __x64_sys_sendmsg+0x1b1/0x290 [ 509.842312][T20100] do_syscall_64+0x166/0x520 [ 509.847456][T20100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.853896][T20100] [ 509.853896][T20100] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 509.862528][T20100] blk_alloc_queue+0x544/0x690 [ 509.867839][T20100] __blk_mq_alloc_disk+0x194/0x390 [ 509.873498][T20100] nbd_dev_add+0x494/0xb60 [ 509.878458][T20100] nbd_init+0x168/0x1f0 [ 509.883162][T20100] do_one_initcall+0x250/0x870 [ 509.888478][T20100] do_initcall_level+0x10a/0x1a0 [ 509.893961][T20100] do_initcalls+0x59/0xa0 [ 509.898829][T20100] kernel_init_freeable+0x29d/0x3e0 [ 509.904567][T20100] kernel_init+0x22/0x1d0 [ 509.909446][T20100] ret_from_fork+0x514/0xb70 [ 509.914584][T20100] ret_from_fork_asm+0x1a/0x30 [ 509.919900][T20100] [ 509.919900][T20100] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 509.927138][T20100] fs_reclaim_acquire+0x71/0x100 [ 509.932620][T20100] __kmalloc_cache_node_noprof+0x66/0x620 [ 509.938884][T20100] create_worker+0x112/0x7c0 [ 509.944024][T20100] workqueue_prepare_cpu+0xe4/0x170 [ 509.947587][T13943] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 509.957221][T20100] cpuhp_invoke_callback+0x434/0x810 [ 509.963056][T20100] _cpu_up+0x2ce/0x5b0 [ 509.967670][T20100] cpu_up+0x1d2/0x220 [ 509.972199][T20100] cpuhp_bringup_mask+0xb2/0x1a0 [ 509.977684][T20100] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 509.981648][T13943] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 509.991491][T20100] bringup_nonboot_cpus+0x17/0x30 [ 509.997069][T20100] smp_init+0x32/0x110 [ 510.001686][T20100] kernel_init_freeable+0x27f/0x3e0 [ 510.007428][T20100] kernel_init+0x22/0x1d0 [ 510.012302][T20100] ret_from_fork+0x514/0xb70 [ 510.017432][T20100] ret_from_fork_asm+0x1a/0x30 [ 510.022748][T20100] [ 510.022748][T20100] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 510.030507][T20100] cpus_read_lock+0x42/0x160 [ 510.035651][T20100] static_key_slow_inc+0x12/0x30 [ 510.041136][T20100] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 510.047408][T20100] nbd_genl_foreach_sock+0x265/0x450 [ 510.053237][T20100] nbd_genl_reconfigure+0xbbb/0x1040 [ 510.059073][T20100] genl_family_rcv_msg_doit+0x233/0x340 [ 510.065170][T20100] genl_rcv_msg+0x614/0x7a0 [ 510.070221][T20100] netlink_rcv_skb+0x226/0x4a0 [ 510.075536][T20100] genl_rcv+0x28/0x40 [ 510.080072][T20100] netlink_unicast+0x7bd/0x940 [ 510.085387][T20100] netlink_sendmsg+0x813/0xb40 [ 510.090703][T20100] sock_sendmsg_nosec+0x13a/0x180 [ 510.096278][T20100] ____sys_sendmsg+0x54e/0x850 [ 510.101632][T20100] ___sys_sendmsg+0x2a5/0x360 [ 510.106861][T20100] __x64_sys_sendmsg+0x1b1/0x290 [ 510.112345][T20100] do_syscall_64+0x166/0x520 [ 510.117484][T20100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.123921][T20100] [ 510.123921][T20100] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 510.131591][T20100] __mutex_lock+0x19d/0x1550 [ 510.136737][T20100] nbd_queue_rq+0x373/0xff0 [ 510.141790][T20100] blk_mq_dispatch_rq_list+0x499/0x1990 [ 510.147884][T20100] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 510.154757][T20100] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 510.159910][T13943] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 510.168738][T20100] blk_mq_run_work_fn+0x16c/0x300 [ 510.174318][T20100] process_scheduled_works+0xc3d/0x1630 [ 510.180410][T20100] worker_thread+0xa47/0xfb0 [ 510.185559][T20100] kthread+0x38b/0x480 [ 510.190172][T20100] ret_from_fork+0x514/0xb70 [ 510.195309][T20100] ret_from_fork_asm+0x1a/0x30 [ 510.200625][T20100] [ 510.200625][T20100] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 510.207865][T20100] __mutex_lock+0x19d/0x1550 [ 510.213010][T20100] nbd_queue_rq+0xc1/0xff0 [ 510.217972][T20100] blk_mq_dispatch_rq_list+0x499/0x1990 [ 510.224073][T20100] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 510.230955][T20100] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 510.237516][T20100] blk_mq_run_work_fn+0x16c/0x300 [ 510.243102][T20100] process_scheduled_works+0xc3d/0x1630 [ 510.249202][T20100] worker_thread+0xa47/0xfb0 [ 510.254344][T20100] kthread+0x38b/0x480 [ 510.258961][T20100] ret_from_fork+0x514/0xb70 [ 510.264097][T20100] ret_from_fork_asm+0x1a/0x30 [ 510.269416][T20100] [ 510.269416][T20100] -> #0 (set->srcu){.+.+}-{0:0}: [ 510.276567][T20100] __lock_acquire+0x164c/0x2de0 [ 510.281963][T20100] lock_sync+0xb3/0x130 [ 510.286664][T20100] __synchronize_srcu+0xc9/0x2f0 [ 510.292139][T20100] elevator_switch+0x1e8/0x7b0 [ 510.297444][T20100] elevator_change+0x2fa/0x480 [ 510.302747][T20100] elevator_set_default+0x375/0x440 [ 510.308490][T20100] blk_register_queue+0x3f3/0x4e0 [ 510.314068][T20100] __add_disk+0x6b8/0xdb0 [ 510.318946][T20100] add_disk_fwnode+0x100/0x3a0 [ 510.324257][T20100] nbd_dev_add+0x733/0xb60 [ 510.329217][T20100] nbd_genl_connect+0x96c/0x1cd0 [ 510.334696][T20100] genl_family_rcv_msg_doit+0x233/0x340 [ 510.340788][T20100] genl_rcv_msg+0x614/0x7a0 [ 510.345836][T20100] netlink_rcv_skb+0x226/0x4a0 [ 510.346880][T13943] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 510.358603][T20100] genl_rcv+0x28/0x40 [ 510.363133][T20100] netlink_unicast+0x7bd/0x940 [ 510.368447][T20100] netlink_sendmsg+0x813/0xb40 [ 510.373754][T20100] sock_sendmsg_nosec+0x13a/0x180 [ 510.379324][T20100] ____sys_sendmsg+0x54e/0x850 [ 510.384639][T20100] ___sys_sendmsg+0x2a5/0x360 [ 510.389865][T20100] __x64_sys_sendmsg+0x1b1/0x290 [ 510.395353][T20100] do_syscall_64+0x166/0x520 [ 510.400495][T20100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.406942][T20100] [ 510.406942][T20100] other info that might help us debug this: [ 510.406942][T20100] [ 510.417184][T20100] Chain exists of: [ 510.417184][T20100] set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock [ 510.417184][T20100] [ 510.430865][T20100] Possible unsafe locking scenario: [ 510.430865][T20100] [ 510.438324][T20100] CPU0 CPU1 [ 510.443703][T20100] ---- ---- [ 510.449081][T20100] lock(&q->elevator_lock); [ 510.453695][T20100] lock(&q->q_usage_counter(io)#50); [ 510.461610][T20100] lock(&q->elevator_lock); [ 510.468741][T20100] sync(set->srcu); [ 510.472655][T20100] [ 510.472655][T20100] *** DEADLOCK *** [ 510.472655][T20100] [ 510.480806][T20100] locks held by syz.4.4145/20100: 6, last CPU#1: [ 510.487150][T20100] #0: ffffffff902c6188 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 510.495368][T20100] #1: ffffffff902c5fc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 510.504367][T20100] #2: ffff8880795779c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 510.509918][ T1220] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 510.522207][T20100] #3: ffff88802955e330 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 510.532076][T20100] #4: ffff88802955ddb8 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 510.542989][T20100] #5: ffff88802955e2a8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 510.552856][T20100] [ 510.552856][T20100] stack backtrace: [ 510.558767][T20100] CPU: 1 UID: 0 PID: 20100 Comm: syz.4.4145 Not tainted syzkaller #0 PREEMPT(full) [ 510.568156][T20100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 510.578229][T20100] Call Trace: [ 510.581524][T20100] [ 510.584465][T20100] dump_stack_lvl+0xe8/0x150 [ 510.589081][T20100] print_circular_bug+0x2e2/0x300 [ 510.594135][T20100] check_noncircular+0x12f/0x150 [ 510.599100][T20100] __lock_acquire+0x164c/0x2de0 [ 510.603981][T20100] ? lockdep_unlock+0x5c/0xd0 [ 510.608675][T20100] ? __lock_acquire+0x1511/0x2de0 [ 510.613726][T20100] lock_sync+0xb3/0x130 [ 510.617898][T20100] ? __synchronize_srcu+0xb5/0x2f0 [ 510.623033][T20100] ? __synchronize_srcu+0xb5/0x2f0 [ 510.628166][T20100] __synchronize_srcu+0xc9/0x2f0 [ 510.633118][T20100] ? __pfx___synchronize_srcu+0x10/0x10 [ 510.638680][T20100] ? do_raw_spin_lock+0x12b/0x2f0 [ 510.643738][T20100] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 510.649564][T20100] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 510.655137][T20100] ? synchronize_srcu+0x20a/0x260 [ 510.660189][T20100] elevator_switch+0x1e8/0x7b0 [ 510.664976][T20100] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 510.670461][T20100] elevator_change+0x2fa/0x480 [ 510.675255][T20100] ? do_raw_spin_unlock+0xf5/0x200 [ 510.677769][ T1220] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 510.687853][T20100] elevator_set_default+0x375/0x440 [ 510.693077][T20100] ? __pfx_elevator_set_default+0x10/0x10 [ 510.698816][T20100] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 510.705874][T20100] ? blk_crypto_sysfs_register+0x11c/0x170 [ 510.711704][T20100] blk_register_queue+0x3f3/0x4e0 [ 510.716755][T20100] __add_disk+0x6b8/0xdb0 [ 510.721121][T20100] add_disk_fwnode+0x100/0x3a0 [ 510.725919][T20100] nbd_dev_add+0x733/0xb60 [ 510.730358][T20100] ? __pfx_nbd_dev_add+0x10/0x10 [ 510.735324][T20100] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 510.741151][T20100] ? bpf_lsm_capable+0x9/0x20 [ 510.745851][T20100] ? security_capable+0x7e/0x2c0 [ 510.750813][T20100] ? radix_tree_lookup+0x25c/0x290 [ 510.755959][T20100] nbd_genl_connect+0x96c/0x1cd0 [ 510.760926][T20100] ? __pfx_nbd_genl_connect+0x10/0x10 [ 510.766321][T20100] ? rcu_is_watching+0x16/0xb0 [ 510.771112][T20100] ? trace_kmalloc+0x2a/0xf0 [ 510.775723][T20100] ? __kmalloc_noprof+0x38c/0x720 [ 510.780767][T20100] ? __nla_parse+0x40/0x60 [ 510.785214][T20100] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 510.791566][T20100] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 510.797926][T20100] genl_family_rcv_msg_doit+0x233/0x340 [ 510.803509][T20100] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 510.809602][T20100] ? __lock_acquire+0x747/0x2de0 [ 510.814565][T20100] genl_rcv_msg+0x614/0x7a0 [ 510.819099][T20100] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.824146][T20100] ? __pfx_nbd_genl_connect+0x10/0x10 [ 510.829549][T20100] netlink_rcv_skb+0x226/0x4a0 [ 510.834351][T20100] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.839404][T20100] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 510.844728][T20100] ? down_read+0x2be/0x330 [ 510.849175][T20100] genl_rcv+0x28/0x40 [ 510.849655][ T1220] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 510.860624][T20100] netlink_unicast+0x7bd/0x940 [ 510.865425][T20100] netlink_sendmsg+0x813/0xb40 [ 510.870219][T20100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.875534][T20100] ? apparmor_socket_sendmsg+0x98/0x360 [ 510.881109][T20100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.886417][T20100] sock_sendmsg_nosec+0x13a/0x180 [ 510.891463][T20100] ____sys_sendmsg+0x54e/0x850 [ 510.896270][T20100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.901592][T20100] ? import_iovec+0x73/0xa0 [ 510.906126][T20100] ___sys_sendmsg+0x2a5/0x360 [ 510.910839][T20100] ? __lock_acquire+0x747/0x2de0 [ 510.915834][T20100] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.921069][T20100] ? futex_wait+0x2a2/0x390 [ 510.925617][T20100] ? __fget_files+0x2a/0x420 [ 510.930235][T20100] ? __fget_files+0x3a2/0x420 [ 510.934945][T20100] __x64_sys_sendmsg+0x1b1/0x290 [ 510.939915][T20100] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.945410][T20100] do_syscall_64+0x166/0x520 [ 510.950033][T20100] ? trace_irq_disable+0x3b/0x140 [ 510.955079][T20100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.961167][T20100] ? clear_bhb_loop+0x70/0xc0 [ 510.965861][T20100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.971777][T20100] RIP: 0033:0x7fde2af9e159 [ 510.976219][T20100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.995845][T20100] RSP: 002b:00007fde2bedd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.004284][T20100] RAX: ffffffffffffffda RBX: 00007fde2b226090 RCX: 00007fde2af9e159 [ 511.012279][T20100] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000b [ 511.020269][T20100] RBP: 00007fde2b03506b R08: 0000000000000000 R09: 0000000000000000 [ 511.028260][T20100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.028992][ T1220] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 511.043701][T20100] R13: 00007fde2b226128 R14: 00007fde2b226090 R15: 00007ffdf76c2148 [ 511.051702][T20100] [ 511.220743][ T5647] udevd[5647]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 511.257994][ T1220] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 511.281058][T20099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4143'. [ 514.347423][ T2587] block nbd2: Possible stuck request ffff88802768e000: control (read@0,1024B). Runtime 240 seconds [ 514.347461][ T2587] block nbd2: Possible stuck request ffff88802768e1c0: control (read@1024,3072B). Runtime 240 seconds