last executing test programs: 5.679386883s ago: executing program 4 (id=9607): write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000280)={'full', 0x20, 0xa000000000, 0x20, 0x179e}, 0x2f) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="262d0200b5cd01002c0012800e00010069703665727370616e000003000002800500160000000000040012000800050000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040014}, 0x200440c4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="d4d567c37000fcc2df255400020008c564e5", @ANYRES32=r3, @ANYBLOB="0c009900030000003f0000000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a0006000802110000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000045) 5.4040826s ago: executing program 4 (id=9611): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x12, &(0x7f00000003c0)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x2, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f00000005c0)='GPL\x00', 0x2, 0xde, &(0x7f0000000600)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x201}, 0x94) 5.140760376s ago: executing program 4 (id=9615): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) 3.859131508s ago: executing program 4 (id=9627): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000240)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000680)=[{&(0x7f0000000700)="99c0c8a64944a05e9c346de4d3d3a9bb39a0f78b255ad412db84b364a11507d57ebe76f665aa34319949d11ac4742b1e21768d7255e6fadbe63c5361ffa11811d2b17ec2289c7a18786e0a226f6fe59ee2ffdbf142cf0477b841c9457ee2ea08ae81d4a3", 0x64}, {&(0x7f0000000780)="e85adb6a4d1a8746eac7dfbfc4425e242d0b83bf6a5d7eddee7f42ebd47e3e45498f220f7a0a57909dcf6199cbcad1a4310a9164af92b63381eb4ec1585cf5ce4b7b56ac8e2bb8c522148434f8794629edc06d69", 0x54}, {&(0x7f0000000800)="58eb2c5f4861f02f200c15a24904c3bee774847f569bed51040025a08a0191a5eb14d91b8c8c510d600553f4ed0ee0a928e2ccbd303cff39", 0xffffffd8}, {&(0x7f0000000840)="51380ec09bd99ead10314c60dd84ede5853a989a50373ac712415d8507e6932ddee21ea42c5a23ae95e79250499276fccb9664194c8cd6c2fae81193d8b3b9be16f971daedea10580316cb74311dc5554dda3033aef6740c3e40681e462f186b9ea4f4492a52a98681e1b274cf9426a421b972aa87496a4dcde29945", 0x7c}, {&(0x7f00000008c0)="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", 0xfb}], 0x5, &(0x7f00000010c0)=[{0x1010, 0x0, 0x0, "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"}, {0x28, 0x0, 0x0, "8192fbea2c061381413fc28cb06b4e988dc486c74cfc"}, {0x18, 0x0, 0x0, "4fdf1ab71595"}, {0x18, 0x0, 0x0, "f47d"}, {0xe0, 0x0, 0x0, "06435d82744e2bd9e2a1fe8560ac7d60b467b377f0399e14a4b82078fbecc311bfb75da80df4176c4561790eae2e1f95dd46a7d7add48146b7b5c82746d8d36469209f1157ef17dbcd007409c3146b57a228d6100cf363fe754e480ace4546319526df51a444b225ac6df534283e28711f46fc77e9fda0596f402ec4c67aa5d0c5e535ca6edfe639e562cb3f41c27b110d3f65ecadd12a490fd27c6eea3f254c1a651207d6a239d3289641254ed028de2cedd5f658793983cea494d38b136b5f72a624ea0975c31041f46ca0"}], 0x1148}, 0x0) (async) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000002240)=0x4, 0x4) (async) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000002280)=0x4, 0x4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000df}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0xfca804a0, 0xe, 0x0, &(0x7f0000000540)="bc0a4703c8b57f000000d03a36f2", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x6, 0x0) (async) r9 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r9, &(0x7f0000000a00)={0xa, 0x4e24, 0x3, @remote, 0xcaa}, 0x1c) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r8, 0x0) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FICLONERANGE(r10, 0x4020940d, &(0x7f0000000580)={{r0}, 0x8, 0x2, 0xd}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xf6, 0x0, 0xffffffffffffffff, 0x5bd7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r12, 0x8916, &(0x7f0000000280)="76657468303a3000000000000000000002") (async) bind$nfc_llcp(r11, &(0x7f0000000080)={0x27, r4, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)) 3.799517464s ago: executing program 2 (id=9628): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000071103d00000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, &(0x7f00000002c0)=0x8, 0x12) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0x0, 0x11, 0x148, 0x0, 0x0, 0x3e8, 0x2a8, 0x2a8, 0x3e8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x2f0, 0x0, {}, [@inet=@rpfilter={{}, {0xf}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file1\x00', {0x5}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x49, 'CLUSTERIP\x00', 0x0, {0x7ff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xd, 0x8, [0x7, 0x16, 0xe, 0x36, 0x23, 0x6, 0x2f, 0x30, 0x13, 0x10, 0x33, 0x27, 0x30, 0x2a, 0x13, 0x6], 0x1, 0x5, 0x3e}}}], {{'\x00', 0x0, 0x70, 0xf7}, {0x28}}}}, 0x4a2) socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002480)=ANY=[@ANYBLOB="14000000100001f500000000000000f50000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 2.43999997s ago: executing program 2 (id=9641): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x21}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2d, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="a00000002100010000000000feffffff7f00000100000000020000000000000000000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fcfeffff7f20000000000000000000007688f27e0000000000040000dd4231fd00000000000000000000ffffffffffffffffffff0000000000000000000000006c0100000435"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 1.783505103s ago: executing program 2 (id=9644): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400010401000000000000002d000000010000000500020008000000"], 0x20}}, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_mtu=0x44}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000077f3508f4ec1a45600"/28], 0x48) close(0x3) socket$inet_sctp(0x2, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="230000000500000002000000ffff000005"], 0x48) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000004c0)=@req={0x20, 0x8, 0x1000, 0x3}, 0x10) socket(0xa, 0x1, 0x0) unshare(0x2020600) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001300)={0xffffffffffffffff, 0x20, &(0x7f00000012c0)={&(0x7f0000001200)=""/121, 0x79, 0x0, &(0x7f0000001280)=""/34, 0x22}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x10, 0x17, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000005000000000000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018160000", @ANYRES32=r3, @ANYBLOB="0000000000000000851000000600000018120000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf9100007a1867ef24ec44733e00000000b702000061cacfcd8500000084000000b7000000000000009500000000000000"], &(0x7f0000000f00)='GPL\x00', 0x1, 0xc5, &(0x7f0000000f40)=""/197, 0x41000, 0x10, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000011c0)={0x0, 0x4, 0x6, 0x6}, 0x10, r5, 0xffffffffffffffff, 0x1, &(0x7f0000001340)=[r2], &(0x7f0000001380)=[{0x2, 0x2, 0xe, 0x7}], 0x10, 0xf}, 0x94) pselect6(0x40, &(0x7f0000000580)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000005c0)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f00000006c0)={0x0, 0x3938700}, 0x0) readv(r4, &(0x7f0000000440)=[{&(0x7f0000000480)=""/59, 0x3b}, {&(0x7f0000000780)=""/224, 0xe0}, {0x0}], 0x3) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000880)={0x27, 0x0, 0x0, 0x5, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) unshare(0x2a060400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r6, @ANYRESHEX, @ANYRESOCT=r8], 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r9, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000ac0)={r10, &(0x7f0000000b00)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000bfa300000000000007030000f8ffffff18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70400000000000285000000350000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x21, 0x2, 0x7) r11 = socket(0x2d, 0x2, 0x0) sendto(r11, &(0x7f0000000600)="010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101", 0xc8, 0x0, &(0x7f0000000700)=@generic={0x2d, "00000100000008010800"}, 0x80) 1.775554093s ago: executing program 1 (id=9647): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1808000000000102000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000001800b702000014000000b7030000000000008500000005000000bca900000000000045090200000300008520000000000000b7020000000000007b9af0ff00000000c509fcff00000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000880)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.768854321s ago: executing program 1 (id=9649): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r2}, 0xc) sendmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=']', 0x1}], 0x1}, 0x20004040) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="2100000000000000000000003b00000000000200", @ANYRES32=r1, @ANYBLOB="080000000000100000000000dd000e51000000000000c94982e6fe8828245543aecf8c7c70926ef50f7542466feebc582ffdaae04867879d7e40a437d26cdd67618a651db93f304325154d02e43a28fa4c67c0a3d807fd19e59bf862d6b7edb17d04cfa65dd946caedb5cc05d39f27bfd141a048084a163b8cfe0670e769771b7d68744132d643e10abedd3e757b98487482def72320cc9a623b1ab784dfbcec12e213903ae32462f30991f7d87fde8bd848de20300100000000000000a09638832ff4579c8c6dc7c5d35508adf19f228b5357524825875441c8f7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000300"/28], 0x50) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000002a40)={&(0x7f0000001a40)=""/4096, 0x0, 0x1000, 0x7fff, 0x3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r5, r4}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000001c0)={r5}) socket$packet(0x11, 0x1, 0x300) 1.764645532s ago: executing program 1 (id=9651): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async, rerun: 32) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000040c0)=0xc) (rerun: 32) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004140)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x40000}}], 0x1, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004180)={0x0, 0x0, 0x0}, &(0x7f00000041c0)=0xc) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004200)='devices.list\x00', 0x26e1, 0x0) (rerun: 32) sendmsg$unix(r5, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004280)=[{&(0x7f00000042c0)="ff2d", 0x2}], 0x1, &(0x7f0000004300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}], 0x20, 0x10}, 0x10044001) (async, rerun: 32) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private1}}, &(0x7f0000004440)=0xe8) (async, rerun: 32) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x270, 0x2b8, 0xb0000010, 0x270, 0x5c8f0200, 0x368, 0x3a8, 0x3a8, 0x368, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [0x0, 0x0, 0xff000000], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x270, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0x8, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff, 0xfffffff0}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffffffffffff}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x4, 0x5, 0x1}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000004480)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000004500)=ANY=[@ANYBLOB="300000002d0001000000000002dcdf25027c000014000280100001800c00a180080053006401010108000100", @ANYRES32=r8, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4c000}, 0xc010) (async) sendmsg$NL80211_CMD_SET_PMKSA(r8, &(0x7f0000004540)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000045c0)={&(0x7f0000004600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf25340000000a0006005050505007e68ccd324af2b88463615c4a4f35e659993b94ad5dd10a"], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x24040010) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000004640), 0xa000, 0x0) (async) r10 = getgid() (async) r11 = socket(0x10, 0x803, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004680), r11) getsockname$packet(r11, &(0x7f00000046c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004700)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000004740)={'ip6tnl0\x00', &(0x7f0000004780)={'syztnl1\x00', r13, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x31}, 0x80, 0x40, 0x1, 0x1}}) (async, rerun: 32) r14 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$ETHTOOL_MSG_DEBUG_SET(r14, &(0x7f0000004800)={0x0, 0x0, &(0x7f0000004840)={&(0x7f0000004880)=ANY=[@ANYRES8=r12, @ANYRES32, @ANYRESDEC=r13, @ANYRES32=r8, @ANYRES16=r10, @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20044801) (async) ioctl$TUNSETGROUP(r9, 0x400454ce, r10) (async) r15 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r15, &(0x7f00000048c0)={0x2, 0x4e21, @local}, 0x47) (async) setsockopt$inet_tcp_int(r15, 0x6, 0x210000000013, &(0x7f0000004900)=0x100000001, 0x4) connect$inet(r15, &(0x7f0000004940)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r15, 0x6, 0x16, &(0x7f0000004980)=[@timestamp, @window={0x3, 0x6, 0x8000}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x8) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r15, 0x6, 0x13, &(0x7f00000049c0), 0x4) (async, rerun: 64) sendto$inet(r15, &(0x7f0000004a00)='<', 0x381, 0x805, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000140)="e09a7f58775e97fb99b6311277e3521a22f32d3ab924667f4f9d88d248303b79da2e598fdaed5d16b161dabd46964555b8b08e411e499a8407645c715872fdf5e525c812ff7267d4d19196e16c213e1c3c1f8323d7eb4075a33deae01d79c37fc92f4e329632dbfdb1", 0x69}, {&(0x7f0000000380)="4beab6b39b3ae884be91480908d883f4db8b106cfd0490ee34d7fedc18bb271549839282f3f7bfdad65e58db4b85d6d2f859466bead7c832373ad733e5ceab9285ab72e4b809e4dc48b95bc40348dbcaeefec59da22c7fd42155e28ebce664b9edf844924041d7597a8f85de72622a680b047694a90c026dc75753edb275a5e8daf1525598cbe16038eda9974b06a826773f6f1a29ce6c47eca480c90735fe8528ac4770936fe196757da6c25eb5ff0f0a5332a0c2e39cfdb0ccf12f8b6a5d7bc01723b2b83dbcaf067db5bcd8142df4a60fc9c2718d09b30feab6c9462298e01bb8e7238ba79034908e032452", 0xed}, {&(0x7f0000000480)="e75609993cfade89340f47eaa2790fabc3406d28f07f04dc4bf117ce779b59f77953c9410f35fa4b590fd64c334c9bb0ee091c60bf3ca0d47030b65d3ea9e4f9a45fee7a0a7229c335ffdd26f02ddb8390231980a956df", 0x57}, {&(0x7f0000000500)="df8b1734709392281191c4bd652e1abc69e73bc0ec7ed5b8710539547792221d0cee3f06ffe3c1a5c4eed244a6a5a0ae1179473893f1c7a4f0200d79d9f5d2f538b673c364078c796e97d0bd871accbe09916894d225a34dd9eadc3550bd30e05801b07bc1b0e35d6790bc18507acc13ca36bdbf989437da8acdf2023e5a337e134ead6f724b4938371873893e88a17e5f0dbc72495d751493b6c164792c12ff30f52d69e09e46be22c7be0a00089228899dda841e7c3a39", 0xb8}], 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="340000000000000f010000000100000099b53ab8447b8f18eca8539895ed8bdefd5ab683969c203db96ddb5c4c4634f173e872c74b01f3a34881f176459943eb12cd690a560d132f8064da0c225dcf8d148c9dea41917fe1420c03185737228d11788026ba7fa90eeee1c20f290d6e99e88f9c6e70af82a4b73401c0248ce6ccf89c6e74f0f60cc203962ece75151fe17d78c5a04f5b05", @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32], 0x150, 0x20000800}}, {{&(0x7f0000000f40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000fc0)="f53f9f855c1ca83d4fea1757e5fb13b9460f807942c16c9104b89e980d56fca28314f7cbbfb6e867a7ae9bd9207e886ec582dc278c7d64830e706a3ed82a2ffdd785d2351c4e92105fd8470de0642fdcf91adbaf7be80bbad683b403724d0835acc2f77b358721dca69f0e58eb5e7c0207f4d747f459808af938fd8ce2836035cc26b900de592bb0f731146b4d04ba5883a46431858525922cec50785cc9c2cc85032a5b27301a4fba4796bbefcbd20fa72739cb41a0c24914e3a367b0b19db30aa3928e6930d774502db3403b9ddb2ccdd07bfd71c29051b31df3fcad726371f7579b42e0", 0xe5}, {&(0x7f00000010c0)="e0fd067e97f3f7d8e29c90dec4644b4f8f1ebf433fb72b179f368cf9fa6096fe38455a79d08826bfdd847da48e206a1dc07662e301a9ba37683b67927a8f341424017e71aa79f2464a36ce0ed7eba61d19e0c1b1280857c21e58540238cf205cdc01410274efb210212b30a6", 0x6c}, {&(0x7f0000001140)="8f69c86ca4f896b0778cf2a462300b1f4b9833f325bf9b51ce14b6004d5ff3fdf9fbd0d110d19a1288bceeada39907d719adb2417fed4ea21cd51810cbca2623191f998a5d3437e5e7d6ab8d634b9d7e2a356080b06cf36df8d64a8dd14840d065e01e40b092b8909b289ba432783572e30323ea179a0f483f5fc4ffa8504644649147ebb602d25cbbd5c663d4", 0x8d}, {0x0}, {&(0x7f0000001200)="09c4620d41feda3e58e93a091eed9a0993d37b9b89463654609458fadb01eef7b5d870fff1fbcfb7efc373456236d2729e1bdb22d51526a634dd74723b96dd38d3dad3fd6a4379a1d08c79df357d05002dbd774b8b65f6957ccc2d7a0c", 0x5d}], 0x5, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r3}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x138, 0x200400c0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000002680)="4ab6a1c1fe82ef42e8179e9d321a93907ebd819374a6d07e75a7d06bededfd085a2cf8a8d0bd7c3a03e07e7a438163ab4fcacf9d57377701179da73ddc070c81d55f9feda28f9f6ffd2b7261fbda5fd0a1fda32189c1bdacbe02925a0fde733b7d92b015e2b6972af878762a5e02013422833183ace123066e1894ce67862d19d9841efa05bfd2e776cf0966186fca6481215cd16f69bec6cae3986a32103a110999c8134c2efd383c1e9ae624e67ecb884f3d37b4e9d855f1d66f676aa45182ea5939bb30f1d6f95dc6b2365be94a359e1a6d68ebee5b52235bae6f4ffd4974bee295eb256e", 0xe6}, {&(0x7f0000002780)="a7e41821", 0x4}, {&(0x7f00000027c0)="3ae534bdf4b367962612bdecb8a08392b7bb47bf0133e8b6bd", 0x19}, {&(0x7f0000002800)="3267e003d95410e62ff661c26b16e2148565a7ed74ea8e7d21aab4dfb46db0b6d940cc995deeee808f753361a4c4691996f4acdcc5d6804ca24cc4f489fc78971ab20ce096af057fdcd6e6890fc082ab996f9271628e73c76704b1e92ba5b61075bebb21e636098695c18e77f5f5f6f867e588e278c8b591c5b85bacc504204540414b4b5b8812fbfda8a9627a456d7e38d473813fb178222dc65808e04a2f264c8f39", 0xa3}, {&(0x7f00000028c0)="c8004c23fdc505b35b0949f94334c4c13846143e948d305e42d2e5437d485e9e6da6f1d7d75b659085ccc14c20cf8c5f180c0db76fd25b8ceed232021c305c5942f92825b1b8fdf01d1b4251f08aca0869967297ff400dbd3e118697469fdb54232937010e40093953719ae1d600ed03a6940e6e80b95ab39460fb0bfa2fe7058f5a92ef01fcc2282e3808a6018e2c55a4f78fafd5fc8c6207d1396ae7e8bb01cda1d92de7b41ebbaf9e9e7f99579638700301cb18cfa1ad5db5c62dff102ee321e76d38822691fb11a4fd72c7154edfdeda4312fc925873703a79cb90d8ac47650dc93dba73496d41fc4d4dc321", 0xee}, {&(0x7f00000029c0)="b58a9c18a78deda6695898a5157ee2d201e3ea73160a72a53f05c0cab69d8b03aab7e34df53d7bdeba0b4b2d66b8f645e428384403a5c42daa58135d56cd7c987365c4be4d2a6ef79e3c8cb0a1f1e9318775cb7e39b6f3f720e36d1325c9246d8f27255deed798d64101c11c79d907401e804bedf116", 0x76}, {&(0x7f0000002a40)="b6d81931f81410531b0efb6b06bc6fae5be416751b5a6b928369c1a4140922e35d4480b8117cf0b4c80f8905a3a6414ff6d7bf3b73611398aaf645fb0f4a4ebf72bcfc9fa303c1ced4c1e3a43be95ee1067e8372aca61fa0fa628d84e683c2e21b6e1a74fbbd6143922217379442b2eae4ca0c25043d5f6e507773a056c28c062f26a756ae2c9307598d314470c1055caf592d5ad0af79528b7126276710983fd9eb0a07a3f2aa3a0695d49ebcc0831bfdc1e2b1eca611996c455b42eb347345a0942da62e6e880a9d84e40a07c50a6eeca45eb8dfdf78961c0f27399298ed3072b00def52690b5e4eced45f84e51a44b01c78ee149225b9b225ea62a233a11f3a45f6e13a124e545c14d81d50594f0aec332077cf66bb012bf26960fc8c8831fa7bb3a3d53367794af33c1c3103dc55e57975dc12547618d97ac887f6c1c283a0e7628a43dcf7862faa3753b94d5bd456b85cd7f3c72df8d0e302ecde8e5bf8c3dd7f7075523a2d0e7b1ce8377ae3bdee169d01798a17f332931ed95fc27bba91e558397aa834ef1d257300025e93c671160e63587bce6d34404250ff1f60a3db48b0c49341b37b1ea440c7d4c4c65f6cd9fb38eac5d9187388bb659acd64818ec5d63090ca8055ab68d7b3b55b6fed10316dd9ee947b514758f72e7749c257bbb0c609b25594033334b6b426390245c817c58cd2256bef48c1e4dfd12a2420047ad3167a183cdc9dff1a28de80eead6b68abafd77ff6768da0177de27d04a81d4989edf468da21c6ea4094cff32ac5bdab1ca58c06bbdd45c82cf2102824bfc2f99f3f017fe39e3d37699f1fcc03c345bd603c9184fa77d11c9b4ed0def611ad70e954ec041b4907cb4e09a94e3db6dcd9529acbe1e4be97cf1f31f15a5e41026eceae7e693fe002bc98c280a01271925021cb9a8d40dfe66320824b511d05836db5b266194aa32e17e57e395d0166225fbb5d6ab2e1addeac28274b97a7e1cd874df6f64c086b3a8bbf50a84db8494b9aeada6df038d0cc1f082e7542629e13b8871b06829cd5df799c67f07ca571b1e90a96b92ca82074595b1dc5bf78db31d21f697e7c6071841c60a19f544522e1e72cbfbd8bb1a822f842065c52c68e41980fda1d608a94fb71aa1f42ecebf14d7c0269cd6dfef730ed23d32cbc239d75cb9a6f0e98640aab1927b1d72a6dd4dc3be7b4d1273895c3289a0bd3c1ec3e093b9e9b4fe0d8578ca93aeca720e9e245cee8b9bba706463c702c4b95327f3831907c27ce325b2eb1d3ec5034cdaf43ba784be103f582195bcb438e834224b359f5db65a8921470891db6dacfa62674bedf45a97994121b863004c30d9555c543a1d031afa5dfef28fa9460a22e5495f76a89c6810e3f3bff59651f132307492ea3d46483a2df56f6401f0b8c0909d3b4221be097d5efd11522c99b87501f80b962ad9ed76ca7c6c4b52130e28c1ee5b52c0b0a2e5895d3f94082fb6f04d6d3e7b717bc8a3ee15d11f9acf861cc40d7bfae71fd6e99b1d1ecf3a022680444a7a11385b4be6270322be7a24a0c2f02ecb43b586c957987adcb90f8f9dbfc4b724fb05161cc0e03d695de50788bc16e57a6b5ea761a465766f7a4261c69acc9072ccebbdd2195c8cc307c05fb3ebff73de34e35092e890fa0f7dec5fc79598d723d5ab74c60e693c050c46b635b86066970ba326de9a309e58d256b87b9c5b8d3e4a83431ad94dd19e6d53aad124a4b329e963b9b12946377be472c85bb006f5703c6190830c0ee42f7971ce5c025959a9a506f6ef2c481c5b917c26a5caa0e8c406ad482f9e2781ee9fba003f989b741df75bf1850b8198572eddd6cc7896deb6d0223015636c4d05fb9912a48274d216ed19285adc30fad7c1a27223bc46a538f46ca78800b6e914a885a909e0d75f591aca93ee16782e58b8705680a840b33bfd4a4d7e9f6eb0cc92c31984e201e2c597c6f0eed7eb726ced8e4adcb524faff0b68f08d6a4da52d7a2c36908559d16832e37894a208cf9ba544f32b7625c6d087ebe44a29393bbba1f8f9d27e62e6aad240f8973997b56e8eacf3e2448c410a50e55814dc2fa968ec71113a8a2a8fda1cd61efd9b3db198a1220cfdf91837dc31bbe09ce6dc3154aaa9860536a442acf4fa71cfdb2d94a0d3a269f28e4d8ef8f75b6180106340ae270f19111831ecd6b86134d160bfdff4feebead984f4efbe2afa66fbe30a74280064e7f9a1c1e6556f6c9a40f9571c32ac4d8a44d50717cc5423615278c1905ed9c25b42b44971e75ab27624d6fdc84b31424e2e0be8e2f573f4a81ab882d479aadb8e7f4286ac060caded2307ecae54c4c27a09d24f406e47038f94ccedcc81f7bd046790b290f5e62b3fea28776c64578c42c6d4cfd3f2a09e3f6ebba53b8e15c9f5b61ba4e11a860ea53bd29405f4bb2186a9972587d1afe86db97776f113439635b0092a06bc5908570c7a428f23ab5e47bbf71a9d4cc5daa8385a1800c968f0d5f8ed7ce67ccf925ec93de0ebbf30fa711bae0dc8185869b080290722a0e789e81262e4e49a9c2e29fbb0aecc2304ef7aa57ca5603759fb8c1e2f425e4d4899cd0f8e481ed911e4bb80421a76689ac8c097f0a73222c6ffff965fed7695b46a998c9e3ea0bcd34b029d9a852d21cb007825e3ad0d8884a2e2044c68ec57f54171d6c98006ea417579a39c40ea03577197f716214d7c383cc3409f44f299edd7670c8eb4562d876f6e6bc5b7c59e2479e0b0ae45fb95629da33091118c14fa0086239e3428eebd448c45d6d9fde3fe6c4a9e06ded0de54c38d449a9350a8c7d4b678bb89eb1f9890d735a4f9d3ee918e72fad5042902155995b15a2f60094fe1eedd15d882d0303e6f4a4119b3a61e6c1c5c1eb44d7e58a3dc7802799c8da82adcef8e84b89a594100fa27ee65b14deb7c2caeb3ef458ff433062b6a17b8a42619f4dffc7f8d0d78e9175be0eaff6f5587c627b62450950271926c737f111220de074c3354271d48bfcab3f48e5a481e6d17da2d27a81834db1300eb334420d4219057d083b5e9c98452c41c5deb33e01af6cbb93e21e4a8615cbe1068fa784f7b49c8fc76ace8c28dbc97bb879ed7781c4c039680ba40e8c1e72d66169f508fcca4fa102d5657d8b28a3e695ccd57383e920c8139acd3655f34d8bb53a8cf7ceb9d24b2d4dd8c31f6853148e8256b31ee88b7fbe8222328359423617bdbaba5f613bd75fa1f2d5533be28c683c78582b8c3acf9cb237e6fad1aef7ca7c960141227f10fced37d0defbf1c087e57af3ed4640516665882c70a787128f1b957839b7556a570484dd6f0bd48ba8dc316ebe2011f6d493557b5a1433f5caa43e0455e75331e32e3e2e3cbaf734832a01b934c7c05044bac90ddc8e8c1e69565e42030d00ccec7b3c642309bc1cd0e4823ab899e35c807dda165e7a3a51259a67500ffa94eea8250169038a377248903c338d76bf0fb2f4dacd858dd9a1e413c096104ba7ab45353f553866c7c4a87d19fd8a5a041f798b1f939dcfee32ab1420ec91ef812036b8b125d08eb85c2beab2a5773f1be723f0d0a4f8295ca23d2c60cd23e6d4d1e196f9191840b5be8ffa0558c569459a90b5cacd095d4dfb4db8dd81bb65707c5d88867fab583f4ed60a635baa228f6d1de23a70a428a427cb1362c65b78ffde0360ef959fcaf6255179347ca7e70798fa79591d3885adcb8b3ddb4f5c907d9924d7973c6fff25ce2f2c8affca16d39808c8b97bf5bde291fc5eacae872cb00bdaea4fd91d7e0c73797d351505cdf83ec0447a809486bf5e985a26e4d90599aa54515469a7d33948001c8fc0cc7176f633b17528832a526e645ab24913023af45224c865ca31cc22878895a6688eee7a25c7b98d0768747af9eb8b5c1690d70d5bd828b7d9ca10b3105f53229cfdaa15035503383b9c6fbfecd26ea95a14cfe352f17df97fc1a5151c2aa3e191e4203cdc85a586378b17162885020122150b4870f53255f5ad43e2c8222b606adc2d84172bbedb72f9e3f588620231147d6ebdbaf5a659d8f83c32a921c781afe7f8be61269373efe1010ee30b3393dee3be6639ed4fad591b111507049506dc965f1a4b5bbe920d1ef6f04bc62dcc224a26cf8540999776e77d697677529af5c77e16716316bf81a5919c8f0ef66ecd5a3850424521ea8b6911683ac9c9e504eafc6e3eaaccaf7ddac803ed3f21e4a81fa2592471e0b2e37b5ed6996613e711d4537eaf1b32a5f3574f3579e5cb99b3685adaf5622cdd96c485455f7c2543f5f9ec588a36ee8632131b364d78af621c30ec533a04be07c3730fb84f2806fc1f192382d72cbf028659638929dcc1b42d398f66721cdbddecfe50bf9342828c5c273584d49089d024e3e0eff7e80fbc4fecfd643dc8518f6a2b560fdf3a0879702f6491ae8b9a9e83349b795e09eeea6883b9d9545b3facb3a4a09108e964f9fd237e4e1b03ba580aa7175ecde485516b4d12bda2d2da6aea4d6dccfaae21d7efb2b744b2bfb03ebf1a0e487cd93ead13f4a6817660f8b68a78cbe216c38b9e55d5f232ca9c635a6f38349da51519257582842046d6e63caea3a9f72f783eebfb7bb8aa22ddedd66fc50c5b3446159a13c1e02d68fef4502400cbc9b3aefbd067aca71b1e70e3c16355221d9f8660ff498fa441aadf9f96596b5b1c53dd387bd492271f04b02d423116e17312027219fe590e75a69f928934537ceb12be8229421bb3b52d2ca9e246617949ab1f9e991c3434915cfc48629a3597f04e4b0bacbafa0100b940018c2bdaea42e14ee4628d4012b6832b841a60284ab7a302eb80cf88c0955ffae17637cabac8160aea860f086cee444e58af064e89df81f945f02d98d12ae861ae4d64ce42f52ffcdf36545d6f713a58198836fb4db76a435aed940bb208a70ad3e7988b86afed4a576981143c2b1f1949bd75804e3ca13b1bf5bbd49dd07c0469f45ba593f4bd5c456135224b3deabb7564bded2f83d387e00a6192d851907fbd75f5b59d5ad8aa1dc92a9ffdea60405a6e2a75be5de6686b65ea45fde3eb778f1d70216f485b74c2e19b77ec4b91e46311bd90ec7bda25e984ee51d8bd91d84486e08489f5d1dd5736929cf6a918590940a6cba6d8c6d1639392098cbfc74b837b75b66ce469fead27dda64d3c057747c5003a92396be74b047bb1c2e9e2422e0b73c4b2739465b718ba5eee32b23ad8cd75888a4e0a999746ae458c407fce1e7d93e63d81c891b694dc2afc0ef23af01879badd223037765065b8ef1efdd4f69cbdd175acc1592ec2714ee50763e7b6878c381c8f985244548dff63582fda7154648cdf1c21278c8742ce9140a2576f5342c8728ea2df343413ed66fdfd9bf9347fcb36ab5c1134f3ff08134fb2893547edc197b31d6348739f1cd2c786c49ac9a65f126372ff8ee1e86e6643bad1b33ec11a199fc09a60bd5c54210e297fbbd2d7caec21c1efbffd45ce7f41bb85296886ab4d3da3cdadbfe339b81519fb1b6d95c9e9465f27d0ac22374a379f67e1dde6d1d3bfc1a27a81ba04c651ed33ba79dbe2aea43cdd01495e8927688974cc635fefafc431178ef9346d131c5f5c1d1e2eeed2366ea832b47ae3d6e93dc730b8b32ad68cccd33e718fde2bb54ff4c71cf263fcbf7115990490786f724a81ee57c5078919afacd9fd4b31e34402445eee524700339982d9535cf9eea7a6888a78a2ee6b60156617ba1f14f87aa150a5d32284bea18a82158992835ea05617232f30cc83a1efb7ffc9ffb210bb5985", 0x1000}], 0x7, 0x0, 0x0, 0x4040081}}, {{&(0x7f0000003ac0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003c00)=[{&(0x7f0000003b40)="dfa7920cc99fe378c0064dc0a8a1fa218f1e2010c079fb1f1d230625e7c197d85ee0231855736945e25326d0afca8cbbf21f1b35ae2f8552ff561a2f34838316f8a650583650447809c85d88ca2661f09b3647b841cdfaade7e8e580a2894d20962a162c76689cc4e9d5c79807d13cc5bd07a39e34c142a66f1f0e408b7afa1b17dc1a312d97b9c756859d68a7bc1915b5536251b4", 0x95}], 0x1, &(0x7f0000004a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r10, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r15, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x8010}}], 0x4, 0x8000) 1.480960754s ago: executing program 1 (id=9655): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x0, 0x10, &(0x7f0000000340)={0x3}, 0x3c089665}, 0x42) 1.457043671s ago: executing program 3 (id=9656): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x44890}, 0x8000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000940)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18, 0x10}], 0x1, 0x20004010) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="54000000020601080000000000000000030000000500050005000000050001000600000005000400000000000500040000000004a557e07586cdd49d344100090002007335ca300000000014000300686173683a"], 0x54}, 0x1, 0x0, 0x0, 0x54}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ifreq(0xffffffffffffffff, 0x8917, &(0x7f0000000500)={'\x00', @ifru_mtu=0x8}) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xb0}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f0000000100)="469dc2d34ae2b700000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.252208516s ago: executing program 1 (id=9658): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e21, 0x2, @remote, 0x6}, 0x1c) getpeername$inet6(r2, 0x0, &(0x7f0000000200)) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req3={0x3, 0x3, 0xd, 0x10001, 0x5, 0xfff, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000140)=[{&(0x7f00000002c0)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x9, 0xe, 0x1}, 0x0, &(0x7f0000000280)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x200000000}, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2020600) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="980000002600010125bd7000fcffc76d3100000008000300470000007b00db"], 0x98}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000008b080000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0900000000000055090100000000809500000000000000bf91000000000000b70200002000000085000000d4000000b7000000000500009500000000000000"], &(0x7f0000000b80)='GPL\x00', 0x3, 0xfec, &(0x7f0000000bc0)=""/4076, 0x40f00, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000380)) 1.251477035s ago: executing program 3 (id=9659): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000f7ff00000003000000300001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff0000000000000000"], 0x44}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000340)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r4, &(0x7f0000000380)=[{0x0}, {&(0x7f00000003c0)="eee7bc", 0x3}], 0x2) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf2505000000280001800d0001007564703a73797a320000000014000280080003008a000000080000ba572a79bfb61d777ae54d220ac0e75c4415bf"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000100)) 1.219059618s ago: executing program 0 (id=9660): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x0, 0x2, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x0, 0x6, "5bcb111f73025443fb94b178ae3b32865ede6d05c4ad4b79d7c1709cf8abd078b7b6ae8c4c461070a69f033be840d638a98cc0b9ad1d20a7e17dee0373b3bef7c5bf606e6ef010969fb491fa83a006568d070254ebe44ce9386a0e846f9168589ca7bd497cc4170e5afd4878f1ac72b51dd426339dac0e2a4e6db13241484060416bf826c50a344c956bdd6bfc1b5100886625d1afc3b924d0e99afdbc43fb0e0c75fb33cb673ff91ac1959759d50cf6b7b756"}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24000800}, 0x24000840) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc1c8e73e5489660e}}, [@NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffff7fd}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELOBJ={0x17c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xad, 0x8, "a3f4c8489a8b9b706d6884b338ad6aba9a97420f37bf8a510924aa17cbd3a26efc54375d081bb67fe25688c5a2f9335075bd08a7b38b1ff4f7d3bdf9c0f29dca5e9e324a8eeb6fb242fce7f0775bfb2bb4c252725c9d55a0d070b9cdc15093c02cf684d9eee2590f722cbb6dc04e8327d43b68743fab3ddeecb06e52ef222897bec9efc1f397e89e11f2524c3bcb3156f63c357d52564cc68cad064cdd1f65f35cabc16b6308c7156d"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x7f, 0x8, "128dd2a128d788ab279fe3890dfd7bd030230d0ea6333f421b60706b85962648ed12f68c1812bc17c3b6efabdcd58bfa7d3b271ba05a6cc3176c5a34af70a55a686ed672e785ede7cb22758ead41773489a54c0aeb02799d3c279ae6cfb827b25cab9b223af627edf5335c0a70a9aee3da5bcf82355c9ff07c67e3"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x218}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.215075407s ago: executing program 2 (id=9661): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1808000000000102000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000002000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300008520000000000000b7020000000000007b9af0ff00000000c509fcff00000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000880)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.036309552s ago: executing program 0 (id=9662): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000400)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x3, 0xc}, @sadb_address={0x5, 0x5, 0x3c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x78}, 0x1, 0x7}, 0x4) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000800)={r2, 0x800b, 0x1}, &(0x7f0000000840)=0x8) 1.035655518s ago: executing program 3 (id=9663): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf250100000008000100030000000c00048005000100800000000800020003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x20000040) r3 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x101, 0x8000}, @mss={0x2, 0x2}, @window={0x3, 0xd, 0xe746}, @timestamp, @mss={0x2, 0x9}, @mss={0x2, 0x4}], 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000580), 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000180)="7ce07b9038ee029684a0c7bd387161c036743c54e45723927d59bcf20af4491c352d4f474e432055e494743c3a8ce1022a371c1f6a703c6a5a68a00bd98a58", 0x3f, 0x4000, 0x0, 0x0) connect$inet(r4, &(0x7f0000000e00)={0x2, 0x4e23, @multicast2}, 0x10) 1.035331161s ago: executing program 2 (id=9664): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xec5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xffffffff}}}, &(0x7f0000000880)='GPL\x00', 0xf, 0x1002, &(0x7f00000008c0)=""/4098, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfd8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) 974.558497ms ago: executing program 1 (id=9665): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) close(r3) (async) close(r3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000200)="100000000000000001000000", 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000240)={'netpci0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000d00)={&(0x7f00000002c0), 0xc, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="28030000", @ANYRES16=0x0, @ANYBLOB="00082b0300879be02c9a57a35906edf11d6bf98a65a876ef444f7df287409551cfac3d50555761a8f57465441282d7bb08b2a98eab4db8cc91c5b3bfe0cea554ab991e1089d855ce69ddca9c59a2335df211b369119e0867d62a172681130e231e1497a9452f81b34316", @ANYRES32=0x0, @ANYBLOB="0c009900080000002300000042012a00dd69e347d277995fcbd2aaad3b680c0d78294aa9ccba3443648db1f9c00cde8cae64d8f429c8f15a1281610b4fdb84b4047b2b78cc34034ceb51118f3d8a2680a477462b8e97dfcbdfde407f5eb53df8a087c59bff15eb16cc1591033b0a52802eac9a21d509a9435f95d77e1500010d0802110000010a00000007000000060000007e15e90804ffffffffffffff0f00000600000009000000030184250301a5057107ffffffff000708bd06ffffffffffff2a0102dd87148a44465c74c1f1f0f5f857daf512a0ab2f4039fab784995c94a7e44c458273b7a4980407567d3e059b9ec296de00be700445f281bf2ba64ad9e8a55a76fdf2e0418fe081dee67c070d2ebc2e569ca59789b25654ea814ba788413c874e7d87b445713b1c82c38ee6659168baa63a5ac3bef20379d8d0640827b892a229042d73ea23631c997d00000c002a00bd0608021100000116003400db03feb20aa5144ff230763ad7f49b53a73f00000a000600f4d49a1be5a0000066012a002d1a00031c0900000000000000ed0007000d00000000080300000006dd4c2b49646181f9808bc07dc0bc5ac8f5276a987d9af66e04246849b8f08df65d860846413a1360305aef4c7362c99dc5c970202ba93b30e75bcdaa851971e99809c88b64d650cb0705fb33e55637dc02078db8ee79f453497bee15fa26e8fa3c43f33462cb3bccfc3891c8d54badc35ff48855de2beaef40c0ad913ffd04067e86688967c4faa34c25b309a36bfc9f13dda9d5b9113dc0f9a0295b91de09a0c22301010004266eabac02bd7d9e5867ad663f40d1e71aa213403eed66414a417653e097aa07407dbcbe8389bc031ba397ef9a96003b4d5416d26af7378ec89a4bdd2c732ed0cab0c54a020d6d67a2ab10da8969e80b1e229d031a6028261f464454cfa8b3f7a89136f7e95cbdd669c3cfc719237a020391026d0110b3889e7ea8e4724c2d3e8e8ec02a66218c185800bd40b4dd29cc64902618750aeaaeb1c5f283c1bd2fac00000a000600ffffffffffff00000a00340001010101010100000a000600080211000001000096d502647a81264eb7c8837264b674da2d61df8664fdc4fec4ace9a997020d13b339169b434ec8c22be0adb5af"], 0x328}, 0x1, 0x0, 0x0, 0x20044005}, 0x24004010) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000d00)={&(0x7f00000002c0), 0xc, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="28030000", @ANYRES16=0x0, @ANYBLOB="00082b0300879be02c9a57a35906edf11d6bf98a65a876ef444f7df287409551cfac3d50555761a8f57465441282d7bb08b2a98eab4db8cc91c5b3bfe0cea554ab991e1089d855ce69ddca9c59a2335df211b369119e0867d62a172681130e231e1497a9452f81b34316", @ANYRES32=0x0, @ANYBLOB="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"], 0x328}, 0x1, 0x0, 0x0, 0x20044005}, 0x24004010) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000480)=""/197, 0xc5}], 0x1) r6 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRES16=r5, @ANYRESHEX=r1, @ANYRES16=r4, @ANYRES64=r0, @ANYRES8, @ANYRES16=r2, @ANYBLOB="1ca377bd70e80ab1aa826897d44dedb80cc2342b98407dfe7bcdd4b40ce8d47411a4537ee98aa0692edbe02e8c23b203441a48a006011cec12179fa8d94fd95ff9ae9159473a34665d4abe5f181f9951be24dc5148fe8c138717466a9bf49a4190b7ee8176ce0aa233461f8aa22b619c759cb3deb811674bc7c68e06c8174e5a56dba5b024ba82dc2baab219467d2eeaa7ab6793db036a43512e1dd5e26e07c4440d5d88"], 0x48}, 0x1, 0x0, 0x0, 0x4000045}, 0x60) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRES16=r5, @ANYRESHEX=r1, @ANYRES16=r4, @ANYRES64=r0, @ANYRES8, @ANYRES16=r2, @ANYBLOB="1ca377bd70e80ab1aa826897d44dedb80cc2342b98407dfe7bcdd4b40ce8d47411a4537ee98aa0692edbe02e8c23b203441a48a006011cec12179fa8d94fd95ff9ae9159473a34665d4abe5f181f9951be24dc5148fe8c138717466a9bf49a4190b7ee8176ce0aa233461f8aa22b619c759cb3deb811674bc7c68e06c8174e5a56dba5b024ba82dc2baab219467d2eeaa7ab6793db036a43512e1dd5e26e07c4440d5d88"], 0x48}, 0x1, 0x0, 0x0, 0x4000045}, 0x60) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@getchain={0x2c, 0x66, 0x300, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf, 0x2}, {0x5, 0xf}, {0xffff, 0xfff3}}, [{0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x1, 0x6, 0x88, 0xfe, 0xfc}, 0xfffffffffffffdd3) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x1, 0x6, 0x88, 0xfe, 0xfc}, 0xfffffffffffffdd3) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtfilter={0x24, 0x11, 0x200, 0x70bd2a, 0x4, {0x0, 0x0, 0x74, r8, {0xffe0, 0x6}, {0xafabc05531515610, 0x2}, {0x4, 0x9}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000008c0)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000008c0)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000900)=@req3={0x1003, 0x3a, 0x1000, 0x3a, 0x5, 0x2, 0x8}, 0x1c) (async) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000900)=@req3={0x1003, 0x3a, 0x1000, 0x3a, 0x5, 0x2, 0x8}, 0x1c) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000980)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000980)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000400)={'bond0\x00', @multicast}) write$tun(r9, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0xfdef) socket$unix(0x1, 0x3, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x4000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000}}}, 0x108) 941.850092ms ago: executing program 0 (id=9666): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001300)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000001340), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c00", @ANYRES16=r4, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001440)=ANY=[@ANYBLOB="0200050109189bcc21a9"], 0xa) 784.127291ms ago: executing program 0 (id=9667): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000180)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x5, 0xe, 0x0, &(0x7f00000004c0)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1_to_batadv\x00', &(0x7f0000000540)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x88, 0x0, 0xffb, 0x7, 0xb6b, 0x10000000, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0x3, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x1, 0x100000, 0x2, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0x7, 0x40, 0x2, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x2, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x10001, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x8, 0x80180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x40000000, 0x800, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xffffffff, 0x84, 0x100, 0xffffffff, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffc, 0x43, 0x2, 0x5, 0x8, 0x1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1f8, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000780), 0x20000000000000b5, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x20892) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001240)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x300000000000000, 0x50}, 0x0) 759.494637ms ago: executing program 2 (id=9668): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x100}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpeername$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x128}, 0x40000) recvmsg(r9, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/4096, 0x1000}, 0x0) close(r9) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00008848ffffffffffffaaaaaaaaaaaa88a8110081002f00080045000020407f0000002f90787f000001ac141440a001880b"], 0x3a) 721.9109ms ago: executing program 3 (id=9669): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x44890}, 0x8000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000940)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18, 0x10}], 0x1, 0x20004010) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="54000000020601080000000000000000030000000500050005000000050001000600000005000400000000000500040000000004a557e07586cdd49d344100090002007335ca300000000014000300686173683a"], 0x54}, 0x1, 0x0, 0x0, 0x54}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ifreq(0xffffffffffffffff, 0x8917, &(0x7f0000000500)={'\x00', @ifru_mtu=0x8}) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xb0}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f0000000100)="469dc2d34ae2b700000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 444.020351ms ago: executing program 3 (id=9670): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x312, 0x800}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x8a, &(0x7f0000000200)=@req3, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xe, 0x0, 0x2}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r4 = socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f000000bac0), r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'wg0\x00', 0x400}) 323.774827ms ago: executing program 4 (id=9671): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x0, 0x10, &(0x7f0000000340)={0x3}, 0x3c089665}, 0x42) 276.721534ms ago: executing program 3 (id=9672): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x304}, "3d30bf70dd0f50e0", "795a7581107e4d4e2a24a9c459b4f95d", "dd8976d5", "ec938b15d34f5c3e"}, 0x28) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) socket$inet(0x2, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}]}]}], {0x14}}, 0xa4}}, 0x24004000) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x2, 0x3, 0xa, 0x8, 0x34a}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r3, 0x0, 0x20000000002) 206.172871ms ago: executing program 0 (id=9673): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x4, 0x9, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0xfe, 0x7000000}}}, &(0x7f0000000400)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0xc}, 0x94) 134.300882ms ago: executing program 4 (id=9674): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x182b}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x3}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000010000000003000000280001800e0001"], 0x3c}}, 0x0) 0s ago: executing program 0 (id=9675): r0 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000068a00800000000004000000cb2004001001000095"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0xfdf, &(0x7f0000001300)=""/4063, 0x40f00, 0x5}, 0x94) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0xcb, 0x5, 0x80f7}, {0x6, 0xfc, 0x4, 0x75}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x20048000}, 0x34008050) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x48, 0x2c, 0x937, 0x30bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) kernel console output (not intermixed with test programs): 5.755803][ T2917] ? __dev_queue_xmit+0x29b/0x3920 [ 945.755832][ T2917] ? __local_bh_enable_ip+0xd6/0x140 [ 945.755856][ T2917] ? lockdep_hardirqs_on+0x7b/0x110 [ 945.755906][ T2917] ? __pfx_rtnl_newlink+0x10/0x10 [ 945.755929][ T2917] rtnetlink_rcv_msg+0x802/0xc00 [ 945.755956][ T2917] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 945.755978][ T2917] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 945.756005][ T2917] ? __copy_skb_header+0xa3/0x4a0 [ 945.756037][ T2917] netlink_rcv_skb+0x226/0x4a0 [ 945.756056][ T2917] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 945.756081][ T2917] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 945.756112][ T2917] ? netlink_deliver_tap+0x2e/0x1b0 [ 945.756131][ T2917] ? netlink_deliver_tap+0x2e/0x1b0 [ 945.756163][ T2917] netlink_unicast+0x8ef/0xa80 [ 945.756208][ T2917] netlink_sendmsg+0x813/0xb40 [ 945.756234][ T2917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.756259][ T2917] ? apparmor_socket_sendmsg+0x98/0x360 [ 945.756285][ T2917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.756303][ T2917] sock_sendmsg_nosec+0x14e/0x190 [ 945.756324][ T2917] ____sys_sendmsg+0x54e/0x850 [ 945.756354][ T2917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 945.756385][ T2917] ? import_iovec+0x73/0xa0 [ 945.756415][ T2917] ___sys_sendmsg+0x2a5/0x360 [ 945.756438][ T2917] ? __lock_acquire+0x747/0x2de0 [ 945.756462][ T2917] ? __pfx____sys_sendmsg+0x10/0x10 [ 945.756520][ T2917] ? __fget_files+0x2a/0x420 [ 945.756546][ T2917] ? __fget_files+0x3a2/0x420 [ 945.756580][ T2917] __x64_sys_sendmsg+0x1b1/0x290 [ 945.756606][ T2917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 945.756650][ T2917] do_syscall_64+0x166/0x520 [ 945.756673][ T2917] ? trace_irq_disable+0x3b/0x140 [ 945.756692][ T2917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.756710][ T2917] ? clear_bhb_loop+0x70/0xc0 [ 945.756733][ T2917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.756752][ T2917] RIP: 0033:0x7f0071f9e559 [ 945.756771][ T2917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.756787][ T2917] RSP: 002b:00007f0072e6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.756809][ T2917] RAX: ffffffffffffffda RBX: 00007f0072225fa0 RCX: 00007f0071f9e559 [ 945.756822][ T2917] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 945.756834][ T2917] RBP: 00007f0072e6c090 R08: 0000000000000000 R09: 0000000000000000 [ 945.756846][ T2917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 945.756857][ T2917] R13: 00007f0072226038 R14: 00007f0072225fa0 R15: 00007fffa85b0988 [ 945.756889][ T2917] [ 945.845172][T26643] bond1: (slave dummy0): failed to get link speed/duplex [ 945.934487][ T2923] netlink: 'syz.0.8663': attribute type 15 has an invalid length. [ 945.976236][T26640] bond1: (slave dummy0): failed to get link speed/duplex [ 946.055728][ T2932] netlink: 'syz.0.8663': attribute type 15 has an invalid length. [ 946.090490][T16296] bond1: (slave dummy0): failed to get link speed/duplex [ 946.168753][ T2937] netlink: 'syz.3.8666': attribute type 4 has an invalid length. [ 946.168779][ T2937] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8666'. [ 946.201414][T26643] bond1: (slave dummy0): failed to get link speed/duplex [ 946.614082][ T2947] sctp: [Deprecated]: syz.4.8667 (pid 2947) Use of int in max_burst socket option. [ 946.614082][ T2947] Use struct sctp_assoc_value instead [ 946.654449][ T2947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8667'. [ 946.728259][ T2947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8667'. [ 947.432644][ T3000] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8673'. [ 948.124542][ T3028] sctp: [Deprecated]: syz.1.8680 (pid 3028) Use of int in max_burst socket option. [ 948.124542][ T3028] Use struct sctp_assoc_value instead [ 948.152688][ T3028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8680'. [ 948.191351][ T3028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8680'. [ 948.494439][ T3047] netlink: 'syz.3.8683': attribute type 1 has an invalid length. [ 948.567497][ T3054] netlink: 'syz.4.8685': attribute type 2 has an invalid length. [ 948.567520][ T3054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8685'. [ 948.567537][ T3054] nbd: must specify an index to disconnect [ 948.900557][T27359] IPVS: ip_vs_send_async error -101 [ 949.013936][ T5624] Bluetooth: hci4: unexpected event 0x05 length: 0 < 4 [ 949.137838][ T3082] FAULT_INJECTION: forcing a failure. [ 949.137838][ T3082] name failslab, interval 1, probability 0, space 0, times 0 [ 949.137868][ T3082] CPU: 0 UID: 0 PID: 3082 Comm: syz.2.8689 Not tainted syzkaller #0 PREEMPT(full) [ 949.137888][ T3082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 949.137898][ T3082] Call Trace: [ 949.137906][ T3082] [ 949.137914][ T3082] dump_stack_lvl+0xe8/0x150 [ 949.137946][ T3082] should_fail_ex+0x410/0x560 [ 949.137976][ T3082] should_failslab+0xa8/0x100 [ 949.138002][ T3082] __kmalloc_cache_node_noprof+0xaa/0x620 [ 949.138026][ T3082] ? __css_rstat_updated+0x237/0x540 [ 949.138052][ T3082] ? __get_vm_area_node+0x155/0x2f0 [ 949.138079][ T3082] ? __get_vm_area_node+0x155/0x2f0 [ 949.138110][ T3082] __get_vm_area_node+0x155/0x2f0 [ 949.138143][ T3082] __vmalloc_node_range_noprof+0x343/0x1540 [ 949.138162][ T3082] ? bpf_check+0x115b/0x2ef0 [ 949.138197][ T3082] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 949.138226][ T3082] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 949.138265][ T3082] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 949.138285][ T3082] ? apparmor_capable+0x126/0x170 [ 949.138307][ T3082] ? bpf_lsm_capable+0x9/0x20 [ 949.138324][ T3082] ? security_capable+0x7e/0x2c0 [ 949.138348][ T3082] ? bpf_check+0x115b/0x2ef0 [ 949.138365][ T3082] __vmalloc_noprof+0xd2/0x120 [ 949.138383][ T3082] ? bpf_check+0x115b/0x2ef0 [ 949.138415][ T3082] bpf_check+0x115b/0x2ef0 [ 949.138452][ T3082] ? __pfx_bpf_check+0x10/0x10 [ 949.138475][ T3082] ? bpf_obj_name_cpy+0x194/0x1e0 [ 949.138525][ T3082] bpf_prog_load+0x14d6/0x1c20 [ 949.138557][ T3082] ? __pfx_bpf_prog_load+0x10/0x10 [ 949.138603][ T3082] __sys_bpf+0xd0d/0xd90 [ 949.138633][ T3082] ? __pfx___sys_bpf+0x10/0x10 [ 949.138667][ T3082] ? __fget_files+0x2a/0x420 [ 949.138709][ T3082] ? ksys_write+0x242/0x270 [ 949.138729][ T3082] ? __pfx_ksys_write+0x10/0x10 [ 949.138752][ T3082] __x64_sys_bpf+0xba/0xd0 [ 949.138775][ T3082] do_syscall_64+0x166/0x520 [ 949.138797][ T3082] ? trace_irq_disable+0x3b/0x140 [ 949.138816][ T3082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.138835][ T3082] ? clear_bhb_loop+0x70/0xc0 [ 949.138858][ T3082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.138877][ T3082] RIP: 0033:0x7f0091d9e559 [ 949.138895][ T3082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.138911][ T3082] RSP: 002b:00007f0092d19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 949.138931][ T3082] RAX: ffffffffffffffda RBX: 00007f0092025fa0 RCX: 00007f0091d9e559 [ 949.138945][ T3082] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 949.138957][ T3082] RBP: 00007f0092d19090 R08: 0000000000000000 R09: 0000000000000000 [ 949.138969][ T3082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 949.138981][ T3082] R13: 00007f0092026038 R14: 00007f0092025fa0 R15: 00007fff3bb2b6e8 [ 949.139012][ T3082] [ 949.159626][ T3082] syz.2.8689: vmalloc error: size 816, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 949.159716][ T3082] CPU: 0 UID: 0 PID: 3082 Comm: syz.2.8689 Not tainted syzkaller #0 PREEMPT(full) [ 949.159736][ T3082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 949.159748][ T3082] Call Trace: [ 949.159756][ T3082] [ 949.159766][ T3082] dump_stack_lvl+0xe8/0x150 [ 949.159797][ T3082] warn_alloc+0x24d/0x270 [ 949.159818][ T3082] ? __kasan_kmalloc+0x22/0xb0 [ 949.159843][ T3082] ? __pfx_warn_alloc+0x10/0x10 [ 949.159861][ T3082] ? __css_rstat_updated+0x237/0x540 [ 949.159882][ T3082] ? __get_vm_area_node+0x155/0x2f0 [ 949.159913][ T3082] ? __get_vm_area_node+0x2a9/0x2f0 [ 949.159946][ T3082] __vmalloc_node_range_noprof+0x36b/0x1540 [ 949.159978][ T3082] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 949.160005][ T3082] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 949.160041][ T3082] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 949.160062][ T3082] ? apparmor_capable+0x126/0x170 [ 949.160084][ T3082] ? bpf_lsm_capable+0x9/0x20 [ 949.160103][ T3082] ? security_capable+0x7e/0x2c0 [ 949.160129][ T3082] ? bpf_check+0x115b/0x2ef0 [ 949.160147][ T3082] __vmalloc_noprof+0xd2/0x120 [ 949.160165][ T3082] ? bpf_check+0x115b/0x2ef0 [ 949.160189][ T3082] bpf_check+0x115b/0x2ef0 [ 949.160226][ T3082] ? __pfx_bpf_check+0x10/0x10 [ 949.160250][ T3082] ? bpf_obj_name_cpy+0x194/0x1e0 [ 949.160280][ T3082] bpf_prog_load+0x14d6/0x1c20 [ 949.160314][ T3082] ? __pfx_bpf_prog_load+0x10/0x10 [ 949.160360][ T3082] __sys_bpf+0xd0d/0xd90 [ 949.160390][ T3082] ? __pfx___sys_bpf+0x10/0x10 [ 949.160428][ T3082] ? __fget_files+0x2a/0x420 [ 949.160471][ T3082] ? ksys_write+0x242/0x270 [ 949.160492][ T3082] ? __pfx_ksys_write+0x10/0x10 [ 949.160515][ T3082] __x64_sys_bpf+0xba/0xd0 [ 949.160537][ T3082] do_syscall_64+0x166/0x520 [ 949.160560][ T3082] ? trace_irq_disable+0x3b/0x140 [ 949.160580][ T3082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.160598][ T3082] ? clear_bhb_loop+0x70/0xc0 [ 949.160620][ T3082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.160639][ T3082] RIP: 0033:0x7f0091d9e559 [ 949.160657][ T3082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.160671][ T3082] RSP: 002b:00007f0092d19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 949.160689][ T3082] RAX: ffffffffffffffda RBX: 00007f0092025fa0 RCX: 00007f0091d9e559 [ 949.160703][ T3082] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 949.160715][ T3082] RBP: 00007f0092d19090 R08: 0000000000000000 R09: 0000000000000000 [ 949.160726][ T3082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 949.160737][ T3082] R13: 00007f0092026038 R14: 00007f0092025fa0 R15: 00007fff3bb2b6e8 [ 949.160767][ T3082] [ 949.170787][ T3082] Mem-Info: [ 949.170803][ T3082] active_anon:5745 inactive_anon:0 isolated_anon:0 [ 949.170803][ T3082] active_file:33 inactive_file:44723 isolated_file:0 [ 949.170803][ T3082] unevictable:0 dirty:230 writeback:0 [ 949.170803][ T3082] slab_reclaimable:11844 slab_unreclaimable:126679 [ 949.170803][ T3082] mapped:30470 shmem:544 pagetables:1640 [ 949.170803][ T3082] sec_pagetables:0 bounce:0 [ 949.170803][ T3082] kernel_misc_reclaimable:0 [ 949.170803][ T3082] free:1226644 free_pcp:15370 free_cma:0 [ 949.170848][ T3082] Node 0 active_anon:22980kB inactive_anon:0kB active_file:132kB inactive_file:178688kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121880kB dirty:916kB writeback:0kB shmem:2176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15248kB pagetables:6412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 949.170891][ T3082] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 949.170959][ T3082] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 949.171009][ T3082] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 949.171039][ T3082] Node 0 DMA32 free:944976kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22980kB inactive_anon:0kB active_file:132kB inactive_file:178688kB unevictable:0kB writepending:916kB zspages:0kB present:3129332kB managed:2527416kB mlocked:0kB bounce:0kB free_pcp:61476kB local_pcp:34216kB free_cma:0kB [ 949.171088][ T3082] lowmem_reserve[]: 0 0 0 0 0 [ 949.171116][ T3082] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 949.171155][ T3082] lowmem_reserve[]: 0 0 0 0 0 [ 949.171184][ T3082] Node 1 Normal free:3946240kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 949.171231][ T3082] lowmem_reserve[]: 0 0 0 0 0 [ 949.171260][ T3082] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 949.171356][ T3082] Node 0 DMA32: 1057*4kB (UME) 1015*8kB (UME) 217*16kB (UME) 483*32kB (UME) 330*64kB (UME) 337*128kB (UME) 444*256kB (UME) 325*512kB (UM) 234*1024kB (UM) 11*2048kB (UME) 75*4096kB (UM) = 944940kB [ 949.171506][ T3082] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 949.171592][ T3082] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 6*16kB (UM) 2*32kB (UM) 9*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 962*4096kB (UM) = 3946240kB [ 949.171722][ T3082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 949.171737][ T3082] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 949.171751][ T3082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 949.171766][ T3082] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 949.171780][ T3082] 45296 total pagecache pages [ 949.171829][ T3082] 0 pages in swap cache [ 949.171837][ T3082] Free swap = 124996kB [ 949.171843][ T3082] Total swap = 124996kB [ 949.171854][ T3082] 2097051 pages RAM [ 949.171861][ T3082] 0 pages HighMem/MovableOnly [ 949.171868][ T3082] 433581 pages reserved [ 949.171874][ T3082] 0 pages cma reserved [ 949.957210][T26640] net_ratelimit: 28 callbacks suppressed [ 949.957234][T26640] bond1: (slave dummy0): failed to get link speed/duplex [ 949.976693][T27359] IPVS: ip_vs_send_async error -101 [ 949.976738][T27359] IPVS: ip_vs_send_async error -101 [ 950.071865][T16296] bond1: (slave dummy0): failed to get link speed/duplex [ 950.098086][ T3087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8691'. [ 950.186667][ T31] bond1: (slave dummy0): failed to get link speed/duplex [ 950.234738][ T3108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8697'. [ 950.291731][ T31] bond1: (slave dummy0): failed to get link speed/duplex [ 950.393619][ T3117] wg0: Caught tx_queue_len zero misconfig [ 950.421846][T16296] bond1: (slave dummy0): failed to get link speed/duplex [ 950.530370][T26640] bond1: (slave dummy0): failed to get link speed/duplex [ 950.640384][T26643] bond1: (slave dummy0): failed to get link speed/duplex [ 950.685918][ T3130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8702'. [ 950.750416][ T1124] bond1: (slave dummy0): failed to get link speed/duplex [ 950.931791][T26643] bond1: (slave dummy0): failed to get link speed/duplex [ 951.012652][T27359] IPVS: ip_vs_send_async error -101 [ 951.040365][T26643] bond1: (slave dummy0): failed to get link speed/duplex [ 951.169546][ T3151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8707'. [ 951.572035][ T3178] sctp: [Deprecated]: syz.3.8713 (pid 3178) Use of int in max_burst socket option. [ 951.572035][ T3178] Use struct sctp_assoc_value instead [ 951.702756][ T3183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8713'. [ 951.779200][ T3189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8713'. [ 952.029321][T27359] IPVS: ip_vs_send_async error -101 [ 952.195418][ T3230] netlink: 'syz.0.8718': attribute type 1 has an invalid length. [ 952.262320][ T3230] 8021q: adding VLAN 0 to HW filter on device bond7 [ 952.379931][ T3239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8725'. [ 952.391635][ T3240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8723'. [ 952.584420][ T3252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8729'. [ 952.766310][ T3260] sctp: [Deprecated]: syz.2.8732 (pid 3260) Use of int in max_burst socket option. [ 952.766310][ T3260] Use struct sctp_assoc_value instead [ 952.795727][ T3260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8732'. [ 952.822334][ T3260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8732'. [ 952.854800][ T3265] v: renamed from veth0_vlan (while UP) [ 953.048281][ T3271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8733'. [ 953.060823][T27359] IPVS: ip_vs_send_async error -101 [ 953.381384][T26643] tipc: Resetting bearer [ 953.481417][ T3271] 8021q: adding VLAN 0 to HW filter on device bond11 [ 953.489462][ T3265] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.489497][ T3265] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 953.532752][ T2187] bond6: (slave macvlan0): link status definitely down, disabling slave [ 953.536346][ T2187] bond6: now running without any active interface! [ 953.551911][ T3285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8740'. [ 953.609033][ T3282] macsec0: entered promiscuous mode [ 953.653788][ T3285] macsec0 (unregistering): left promiscuous mode [ 953.706468][ T3292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8740'. [ 953.726509][ T3265] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.726551][ T3265] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 953.772357][ T3284] tipc: Enabled bearer , priority 0 [ 953.956803][ T3265] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.956839][ T3265] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 954.004436][ T3310] sctp: [Deprecated]: syz.2.8745 (pid 3310) Use of int in max_burst socket option. [ 954.004436][ T3310] Use struct sctp_assoc_value instead [ 954.100923][T27359] IPVS: ip_vs_send_async error -101 [ 954.177534][ T3265] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.177572][ T3265] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 954.449993][ T3328] FAULT_INJECTION: forcing a failure. [ 954.449993][ T3328] name failslab, interval 1, probability 0, space 0, times 0 [ 954.450022][ T3328] CPU: 1 UID: 0 PID: 3328 Comm: syz.2.8746 Not tainted syzkaller #0 PREEMPT(full) [ 954.450040][ T3328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 954.450050][ T3328] Call Trace: [ 954.450056][ T3328] [ 954.450064][ T3328] dump_stack_lvl+0xe8/0x150 [ 954.450090][ T3328] should_fail_ex+0x410/0x560 [ 954.450114][ T3328] should_failslab+0xa8/0x100 [ 954.450137][ T3328] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 954.450158][ T3328] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 954.450181][ T3328] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 954.450202][ T3328] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 954.450223][ T3328] krealloc_node_align_noprof+0x19a/0x390 [ 954.450244][ T3328] ? bpf_lsm_capable+0x9/0x20 [ 954.450260][ T3328] ? security_capable+0x7e/0x2c0 [ 954.450282][ T3328] kvrealloc_node_align_noprof+0x7b/0xf0 [ 954.450303][ T3328] bpf_iarray_realloc+0x34/0xa0 [ 954.450322][ T3328] bpf_check+0x148b/0x2ef0 [ 954.450358][ T3328] ? __pfx_bpf_check+0x10/0x10 [ 954.450389][ T3328] ? bpf_obj_name_cpy+0x194/0x1e0 [ 954.450412][ T3328] bpf_prog_load+0x14d6/0x1c20 [ 954.450438][ T3328] ? __pfx_bpf_prog_load+0x10/0x10 [ 954.450474][ T3328] __sys_bpf+0xd0d/0xd90 [ 954.450496][ T3328] ? __pfx___sys_bpf+0x10/0x10 [ 954.450520][ T3328] ? __fget_files+0x2a/0x420 [ 954.450553][ T3328] ? ksys_write+0x242/0x270 [ 954.450570][ T3328] ? __pfx_ksys_write+0x10/0x10 [ 954.450589][ T3328] __x64_sys_bpf+0xba/0xd0 [ 954.450607][ T3328] do_syscall_64+0x166/0x520 [ 954.450625][ T3328] ? trace_irq_disable+0x3b/0x140 [ 954.450640][ T3328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.450655][ T3328] ? clear_bhb_loop+0x70/0xc0 [ 954.450674][ T3328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.450688][ T3328] RIP: 0033:0x7f0091d9e559 [ 954.450709][ T3328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.450725][ T3328] RSP: 002b:00007f0092d19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 954.450740][ T3328] RAX: ffffffffffffffda RBX: 00007f0092025fa0 RCX: 00007f0091d9e559 [ 954.450751][ T3328] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 954.450760][ T3328] RBP: 00007f0092d19090 R08: 0000000000000000 R09: 0000000000000000 [ 954.450769][ T3328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 954.450777][ T3328] R13: 00007f0092026038 R14: 00007f0092025fa0 R15: 00007fff3bb2b6e8 [ 954.450802][ T3328] [ 954.507230][ T3327] netlink: 'syz.0.8747': attribute type 4 has an invalid length. [ 954.761618][T26643] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 954.761820][T26643] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 954.770826][ T2187] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 954.770866][ T2187] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 954.776335][T26643] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 954.776368][T26643] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 954.776403][T26643] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 954.776426][T26643] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 954.880401][T28229] tipc: Node number set to 2496265066 [ 955.142063][T27359] IPVS: ip_vs_send_async error -101 [ 955.337006][ T3283] tipc: Disabling bearer [ 955.521789][ T2187] net_ratelimit: 19 callbacks suppressed [ 955.521810][ T2187] bond1: (slave dummy0): failed to get link speed/duplex [ 955.613216][ T3357] syzkaller0: entered promiscuous mode [ 955.613241][ T3357] syzkaller0: entered allmulticast mode [ 955.642902][ T2187] bond1: (slave dummy0): failed to get link speed/duplex [ 955.706038][ T3353] tipc: Invalid UDP bearer configuration [ 955.706084][ T3353] tipc: Enabling of bearer rejected, failed to enable media [ 955.752242][ T2187] bond1: (slave dummy0): failed to get link speed/duplex [ 955.881699][ T2187] bond1: (slave dummy0): failed to get link speed/duplex [ 955.899561][ T3371] sctp: [Deprecated]: syz.0.8757 (pid 3371) Use of int in max_burst socket option. [ 955.899561][ T3371] Use struct sctp_assoc_value instead [ 956.012827][T26643] bond1: (slave dummy0): failed to get link speed/duplex [ 956.125030][T26640] bond1: (slave dummy0): failed to get link speed/duplex [ 956.180864][T27359] IPVS: ip_vs_send_async error -101 [ 956.233353][T26640] bond1: (slave dummy0): failed to get link speed/duplex [ 956.343383][T26643] bond1: (slave dummy0): failed to get link speed/duplex [ 956.454278][T26640] bond1: (slave dummy0): failed to get link speed/duplex [ 956.565522][T26643] bond1: (slave dummy0): failed to get link speed/duplex [ 956.701608][ T3419] netlink: 'syz.1.8770': attribute type 3 has an invalid length. [ 956.756920][ T3413] syzkaller0: left promiscuous mode [ 956.756944][ T3413] syzkaller0: left allmulticast mode [ 956.757424][ T3422] netlink: 'syz.1.8770': attribute type 3 has an invalid length. [ 957.043935][ T3434] __nla_validate_parse: 9 callbacks suppressed [ 957.043954][ T3434] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8773'. [ 957.207523][ T3441] sctp: [Deprecated]: syz.4.8775 (pid 3441) Use of int in max_burst socket option. [ 957.207523][ T3441] Use struct sctp_assoc_value instead [ 957.231624][T27359] IPVS: ip_vs_send_async error -101 [ 957.237775][ T3441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8775'. [ 957.307171][ T3441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8775'. [ 957.435033][ T3458] FAULT_INJECTION: forcing a failure. [ 957.435033][ T3458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.435067][ T3458] CPU: 0 UID: 0 PID: 3458 Comm: syz.2.8781 Not tainted syzkaller #0 PREEMPT(full) [ 957.435088][ T3458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 957.435100][ T3458] Call Trace: [ 957.435108][ T3458] [ 957.435117][ T3458] dump_stack_lvl+0xe8/0x150 [ 957.435147][ T3458] should_fail_ex+0x410/0x560 [ 957.435178][ T3458] _copy_from_user+0x2d/0xb0 [ 957.435206][ T3458] bpf_test_init+0xd8/0x150 [ 957.435231][ T3458] bpf_prog_test_run_skb+0x31e/0x2230 [ 957.435251][ T3458] ? lock_acquire+0x115/0x350 [ 957.435289][ T3458] ? __fget_files+0x3a2/0x420 [ 957.435317][ T3458] ? __fget_files+0x2a/0x420 [ 957.435346][ T3458] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 957.435365][ T3458] bpf_prog_test_run+0x2c5/0x340 [ 957.435391][ T3458] __sys_bpf+0xa22/0xd90 [ 957.435420][ T3458] ? __pfx___sys_bpf+0x10/0x10 [ 957.435452][ T3458] ? __fget_files+0x2a/0x420 [ 957.435507][ T3458] ? ksys_write+0x242/0x270 [ 957.435528][ T3458] ? __pfx_ksys_write+0x10/0x10 [ 957.435554][ T3458] __x64_sys_bpf+0xba/0xd0 [ 957.435578][ T3458] do_syscall_64+0x166/0x520 [ 957.435601][ T3458] ? trace_irq_disable+0x3b/0x140 [ 957.435621][ T3458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.435640][ T3458] ? clear_bhb_loop+0x70/0xc0 [ 957.435665][ T3458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.435683][ T3458] RIP: 0033:0x7f0091d9e559 [ 957.435701][ T3458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.435718][ T3458] RSP: 002b:00007f0092d19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 957.435738][ T3458] RAX: ffffffffffffffda RBX: 00007f0092025fa0 RCX: 00007f0091d9e559 [ 957.435750][ T3458] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 957.435761][ T3458] RBP: 00007f0092d19090 R08: 0000000000000000 R09: 0000000000000000 [ 957.435773][ T3458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.435784][ T3458] R13: 00007f0092026038 R14: 00007f0092025fa0 R15: 00007fff3bb2b6e8 [ 957.435811][ T3458] [ 957.470130][ T3455] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8778'. [ 957.744479][ T3466] syzkaller0: entered promiscuous mode [ 957.744502][ T3466] syzkaller0: entered allmulticast mode [ 958.013230][ T3482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8787'. [ 958.290457][T27359] IPVS: ip_vs_send_async error -101 [ 958.482007][ T3498] FAULT_INJECTION: forcing a failure. [ 958.482007][ T3498] name failslab, interval 1, probability 0, space 0, times 0 [ 958.482052][ T3498] CPU: 1 UID: 0 PID: 3498 Comm: syz.4.8794 Not tainted syzkaller #0 PREEMPT(full) [ 958.482073][ T3498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 958.482085][ T3498] Call Trace: [ 958.482093][ T3498] [ 958.482102][ T3498] dump_stack_lvl+0xe8/0x150 [ 958.482134][ T3498] should_fail_ex+0x410/0x560 [ 958.482164][ T3498] should_failslab+0xa8/0x100 [ 958.482191][ T3498] __kmalloc_noprof+0xfe/0x720 [ 958.482210][ T3498] ? sk_prot_alloc+0xe7/0x210 [ 958.482229][ T3498] ? sk_prot_alloc+0xe7/0x210 [ 958.482259][ T3498] sk_prot_alloc+0xe7/0x210 [ 958.482278][ T3498] ? sk_alloc+0x27/0x390 [ 958.482302][ T3498] sk_alloc+0x3a/0x390 [ 958.482327][ T3498] bpf_prog_test_run_skb+0x3a6/0x2230 [ 958.482344][ T3498] ? lock_acquire+0x115/0x350 [ 958.482375][ T3498] ? __fget_files+0x3a2/0x420 [ 958.482396][ T3498] ? __fget_files+0x2a/0x420 [ 958.482420][ T3498] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 958.482436][ T3498] bpf_prog_test_run+0x2c5/0x340 [ 958.482457][ T3498] __sys_bpf+0xa22/0xd90 [ 958.482480][ T3498] ? __pfx___sys_bpf+0x10/0x10 [ 958.482505][ T3498] ? __fget_files+0x2a/0x420 [ 958.482545][ T3498] ? ksys_write+0x242/0x270 [ 958.482562][ T3498] ? __pfx_ksys_write+0x10/0x10 [ 958.482580][ T3498] __x64_sys_bpf+0xba/0xd0 [ 958.482598][ T3498] do_syscall_64+0x166/0x520 [ 958.482617][ T3498] ? trace_irq_disable+0x3b/0x140 [ 958.482632][ T3498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.482647][ T3498] ? clear_bhb_loop+0x70/0xc0 [ 958.482667][ T3498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.482685][ T3498] RIP: 0033:0x7f874839e559 [ 958.482699][ T3498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.482712][ T3498] RSP: 002b:00007f87491b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 958.482729][ T3498] RAX: ffffffffffffffda RBX: 00007f8748625fa0 RCX: 00007f874839e559 [ 958.482740][ T3498] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 958.482750][ T3498] RBP: 00007f87491b3090 R08: 0000000000000000 R09: 0000000000000000 [ 958.482760][ T3498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.482768][ T3498] R13: 00007f8748626038 R14: 00007f8748625fa0 R15: 00007ffc8b9030e8 [ 958.482792][ T3498] [ 958.546369][ T3495] Cannot find map_set index 2 as target [ 959.251961][ T3539] syzkaller1: entered promiscuous mode [ 959.251985][ T3539] syzkaller1: entered allmulticast mode [ 959.326627][T27359] IPVS: ip_vs_send_async error -101 [ 959.358712][T26068] IPVS: ip_vs_send_async error -101 [ 959.624204][ T3557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8805'. [ 959.624228][ T3557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8805'. [ 959.671337][ T3554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 959.737824][ T3557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.748180][ T3557] bond1: (slave bond0): making interface the new active one [ 959.749461][ T3557] bond1: (slave bond0): Enslaving as an active interface with an up link [ 959.821754][ T3554] netlink: 'syz.2.8805': attribute type 2 has an invalid length. [ 959.821776][ T3554] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8805'. [ 959.871960][ T3554] : entered promiscuous mode [ 960.340332][T27359] IPVS: ip_vs_send_async error -101 [ 960.530426][T26640] net_ratelimit: 30 callbacks suppressed [ 960.530448][T26640] bond1: (slave dummy0): failed to get link speed/duplex [ 960.681212][ T2186] bond1: (slave dummy0): failed to get link speed/duplex [ 960.791433][T26640] bond1: (slave dummy0): failed to get link speed/duplex [ 960.900724][T26640] bond1: (slave dummy0): failed to get link speed/duplex [ 960.986319][ T3635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8824'. [ 960.986345][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8824'. [ 961.022973][ T2186] bond1: (slave dummy0): failed to get link speed/duplex [ 961.064641][ T2187] bond2: (slave bond0): link status definitely down, disabling slave [ 961.105880][ T2187] bond2: now running without any active interface! [ 961.131389][T26643] bond1: (slave dummy0): failed to get link speed/duplex [ 961.251439][T26643] bond1: (slave dummy0): failed to get link speed/duplex [ 961.362217][ T2186] bond1: (slave dummy0): failed to get link speed/duplex [ 961.380412][T27359] IPVS: ip_vs_send_async error -101 [ 961.483872][ T2186] bond1: (slave dummy0): failed to get link speed/duplex [ 961.593760][T26643] bond1: (slave dummy0): failed to get link speed/duplex [ 962.329597][ T3685] __nla_validate_parse: 1 callbacks suppressed [ 962.329618][ T3685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8838'. [ 962.426122][T27359] IPVS: ip_vs_send_async error -101 [ 962.450564][ T3691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8841'. [ 962.509305][ T3694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8840'. [ 962.805522][ T3711] netlink: 'syz.2.8846': attribute type 2 has an invalid length. [ 962.805546][ T3711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8846'. [ 962.805561][ T3711] nbd: must specify an index to disconnect [ 962.861914][ T3708] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8844'. [ 962.888061][ T3715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8844'. [ 962.888265][ T3715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8844'. [ 962.888471][ T3715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8844'. [ 962.893238][ T3715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8844'. [ 962.893502][ T3715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8844'. [ 963.355916][ T3724] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 963.460071][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 963.465632][T27359] IPVS: ip_vs_send_async error -101 [ 963.476258][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 963.483304][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 963.500118][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 963.510056][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 964.375781][ T3782] sctp: Trying to GSO but underlying device doesn't support it. [ 964.501548][T27359] IPVS: ip_vs_send_async error -101 [ 964.544539][ T3742] rxe_eth0 speed is unknown, defaulting to 1000 [ 964.717830][ T3798] FAULT_INJECTION: forcing a failure. [ 964.717830][ T3798] name failslab, interval 1, probability 0, space 0, times 0 [ 964.717865][ T3798] CPU: 0 UID: 0 PID: 3798 Comm: syz.4.8868 Not tainted syzkaller #0 PREEMPT(full) [ 964.717886][ T3798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 964.717897][ T3798] Call Trace: [ 964.717905][ T3798] [ 964.717913][ T3798] dump_stack_lvl+0xe8/0x150 [ 964.717945][ T3798] should_fail_ex+0x410/0x560 [ 964.717976][ T3798] should_failslab+0xa8/0x100 [ 964.718005][ T3798] __kvmalloc_node_noprof+0x176/0x820 [ 964.718030][ T3798] ? __kvmalloc_node_noprof+0x345/0x820 [ 964.718051][ T3798] ? bpf_check_cfg+0x1ad/0x3840 [ 964.718070][ T3798] ? bpf_check_cfg+0x1ad/0x3840 [ 964.718101][ T3798] bpf_check_cfg+0x1ad/0x3840 [ 964.718142][ T3798] ? kasan_quarantine_put+0xbb/0x1f0 [ 964.718164][ T3798] ? lockdep_hardirqs_on+0x7b/0x110 [ 964.718193][ T3798] ? __pfx_bpf_check_cfg+0x10/0x10 [ 964.718212][ T3798] ? bpf_prog_calc_tag+0x310/0x370 [ 964.718233][ T3798] ? vfree+0x42b/0x490 [ 964.718265][ T3798] ? bpf_prog_calc_tag+0x310/0x370 [ 964.718292][ T3798] ? check_and_resolve_insns+0x1d54/0x21d0 [ 964.718332][ T3798] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 964.718358][ T3798] ? add_kfuncs+0x251/0x2e0 [ 964.718384][ T3798] bpf_check+0x25fb/0x2ef0 [ 964.718424][ T3798] ? __pfx_bpf_check+0x10/0x10 [ 964.718448][ T3798] ? bpf_obj_name_cpy+0x194/0x1e0 [ 964.718479][ T3798] bpf_prog_load+0x14d6/0x1c20 [ 964.718514][ T3798] ? __pfx_bpf_prog_load+0x10/0x10 [ 964.718562][ T3798] __sys_bpf+0xd0d/0xd90 [ 964.718596][ T3798] ? __pfx___sys_bpf+0x10/0x10 [ 964.718628][ T3798] ? __fget_files+0x2a/0x420 [ 964.718669][ T3798] ? ksys_write+0x242/0x270 [ 964.718690][ T3798] ? __pfx_ksys_write+0x10/0x10 [ 964.718714][ T3798] __x64_sys_bpf+0xba/0xd0 [ 964.718736][ T3798] do_syscall_64+0x166/0x520 [ 964.718758][ T3798] ? trace_irq_disable+0x3b/0x140 [ 964.718777][ T3798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.718797][ T3798] ? clear_bhb_loop+0x70/0xc0 [ 964.718819][ T3798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.718838][ T3798] RIP: 0033:0x7f874839e559 [ 964.718857][ T3798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.718872][ T3798] RSP: 002b:00007f87491b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 964.718893][ T3798] RAX: ffffffffffffffda RBX: 00007f8748625fa0 RCX: 00007f874839e559 [ 964.718907][ T3798] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 964.718920][ T3798] RBP: 00007f87491b3090 R08: 0000000000000000 R09: 0000000000000000 [ 964.718931][ T3798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 964.718943][ T3798] R13: 00007f8748626038 R14: 00007f8748625fa0 R15: 00007ffc8b9030e8 [ 964.718973][ T3798] [ 964.871794][T26893] IPVS: ip_vs_send_async error -101 [ 965.088496][ T3807] syzkaller0: entered promiscuous mode [ 965.088520][ T3807] syzkaller0: entered allmulticast mode [ 965.510840][T27359] IPVS: ip_vs_send_async error -101 [ 965.591398][ T2187] net_ratelimit: 28 callbacks suppressed [ 965.591420][ T2187] bond1: (slave dummy0): failed to get link speed/duplex [ 965.591576][ T5627] Bluetooth: hci1: command tx timeout [ 965.704908][T26643] bond1: (slave dummy0): failed to get link speed/duplex [ 965.910814][ T2187] bond1: (slave dummy0): failed to get link speed/duplex [ 965.915985][ T3842] netlink: 'syz.4.8879': attribute type 70 has an invalid length. [ 966.020356][ T2187] bond1: (slave dummy0): failed to get link speed/duplex [ 966.062901][ T3858] FAULT_INJECTION: forcing a failure. [ 966.062901][ T3858] name failslab, interval 1, probability 0, space 0, times 0 [ 966.062934][ T3858] CPU: 0 UID: 0 PID: 3858 Comm: syz.1.8882 Not tainted syzkaller #0 PREEMPT(full) [ 966.062956][ T3858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 966.062967][ T3858] Call Trace: [ 966.062975][ T3858] [ 966.062984][ T3858] dump_stack_lvl+0xe8/0x150 [ 966.063015][ T3858] should_fail_ex+0x410/0x560 [ 966.063044][ T3858] should_failslab+0xa8/0x100 [ 966.063072][ T3858] __kvmalloc_node_noprof+0x176/0x820 [ 966.063097][ T3858] ? __kvmalloc_node_noprof+0x345/0x820 [ 966.063118][ T3858] ? bpf_check_cfg+0x1ad/0x3840 [ 966.063135][ T3858] ? bpf_check_cfg+0x1ad/0x3840 [ 966.063161][ T3858] bpf_check_cfg+0x1ad/0x3840 [ 966.063202][ T3858] ? kasan_quarantine_put+0xbb/0x1f0 [ 966.063223][ T3858] ? lockdep_hardirqs_on+0x7b/0x110 [ 966.063252][ T3858] ? __pfx_bpf_check_cfg+0x10/0x10 [ 966.063271][ T3858] ? bpf_prog_calc_tag+0x310/0x370 [ 966.063292][ T3858] ? vfree+0x42b/0x490 [ 966.063322][ T3858] ? bpf_prog_calc_tag+0x310/0x370 [ 966.063349][ T3858] ? check_and_resolve_insns+0x1d54/0x21d0 [ 966.063380][ T3858] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 966.063405][ T3858] ? add_kfuncs+0x251/0x2e0 [ 966.063430][ T3858] bpf_check+0x25fb/0x2ef0 [ 966.063469][ T3858] ? __pfx_bpf_check+0x10/0x10 [ 966.063492][ T3858] ? bpf_obj_name_cpy+0x194/0x1e0 [ 966.063523][ T3858] bpf_prog_load+0x14d6/0x1c20 [ 966.063557][ T3858] ? __pfx_bpf_prog_load+0x10/0x10 [ 966.063606][ T3858] __sys_bpf+0xd0d/0xd90 [ 966.063636][ T3858] ? __pfx___sys_bpf+0x10/0x10 [ 966.063671][ T3858] ? __fget_files+0x2a/0x420 [ 966.063716][ T3858] ? ksys_write+0x242/0x270 [ 966.063738][ T3858] ? __pfx_ksys_write+0x10/0x10 [ 966.063762][ T3858] __x64_sys_bpf+0xba/0xd0 [ 966.063791][ T3858] do_syscall_64+0x166/0x520 [ 966.063814][ T3858] ? trace_irq_disable+0x3b/0x140 [ 966.063833][ T3858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.063853][ T3858] ? clear_bhb_loop+0x70/0xc0 [ 966.063876][ T3858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.063895][ T3858] RIP: 0033:0x7f62aa59e559 [ 966.063913][ T3858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.063928][ T3858] RSP: 002b:00007f62ab4db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 966.063949][ T3858] RAX: ffffffffffffffda RBX: 00007f62aa825fa0 RCX: 00007f62aa59e559 [ 966.063962][ T3858] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 966.063975][ T3858] RBP: 00007f62ab4db090 R08: 0000000000000000 R09: 0000000000000000 [ 966.063986][ T3858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 966.063998][ T3858] R13: 00007f62aa826038 R14: 00007f62aa825fa0 R15: 00007fff3f8f2258 [ 966.064028][ T3858] [ 966.130390][ T2187] bond1: (slave dummy0): failed to get link speed/duplex [ 966.240537][ T31] bond1: (slave dummy0): failed to get link speed/duplex [ 966.355405][T26640] bond1: (slave dummy0): failed to get link speed/duplex [ 966.554852][T27359] IPVS: ip_vs_send_async error -101 [ 966.776317][ T3887] syzkaller0: entered promiscuous mode [ 966.776343][ T3887] syzkaller0: entered allmulticast mode [ 967.590588][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 967.613585][T27359] IPVS: ip_vs_send_async error -101 [ 967.670674][ T5627] Bluetooth: hci1: command tx timeout [ 967.736261][ T3907] __nla_validate_parse: 33 callbacks suppressed [ 967.736283][ T3907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8889'. [ 968.634322][T27359] IPVS: ip_vs_send_async error -101 [ 969.703754][T27359] IPVS: ip_vs_send_async error -101 [ 969.750338][ T5627] Bluetooth: hci1: command tx timeout [ 970.738552][T27359] IPVS: ip_vs_send_async error -101 [ 970.848780][ T3742] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.849242][ T3742] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.849337][ T3742] bridge_slave_0: entered allmulticast mode [ 970.860760][ T3742] bridge_slave_0: entered promiscuous mode [ 970.863532][ T3742] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.863629][ T3742] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.863755][ T3742] bridge_slave_1: entered allmulticast mode [ 970.865452][ T3742] bridge_slave_1: entered promiscuous mode [ 970.948461][ T3905] veth1_to_bond: entered promiscuous mode [ 970.948795][ T3906] veth1_to_bond: entered allmulticast mode [ 970.948851][ T3906] veth1_to_bond: left allmulticast mode [ 970.948882][ T3906] veth1_to_bond: left promiscuous mode [ 971.042111][T26640] bond1: (slave dummy0): failed to get link speed/duplex [ 971.170419][ T3742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.173465][ T3742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.210397][ T2187] bond1: (slave dummy0): failed to get link speed/duplex [ 971.247058][ T3742] team0: Port device team_slave_0 added [ 971.256944][ T3742] team0: Port device team_slave_1 added [ 971.296844][ T3742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.296861][ T3742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.296881][ T3742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.298800][ T3742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.298815][ T3742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.298836][ T3742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.414040][ T3926] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8896'. [ 971.416639][ T3929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8898'. [ 971.421601][ T2187] bond1: (slave dummy0): failed to get link speed/duplex [ 971.525294][ T3936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8900'. [ 971.572607][ T3742] hsr_slave_0: entered promiscuous mode [ 971.573546][ T3742] hsr_slave_1: entered promiscuous mode [ 971.574284][ T3742] debugfs: 'hsr0' already exists in 'hsr' [ 971.574304][ T3742] Cannot create hsr debugfs directory [ 971.620816][ T3936] veth7: entered allmulticast mode [ 971.670930][T26643] bond1: (slave dummy0): failed to get link speed/duplex [ 971.703446][ T3942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8902'. [ 971.751463][T27359] IPVS: ip_vs_send_async error -101 [ 971.802595][T26643] bond1: (slave dummy0): failed to get link speed/duplex [ 971.832405][ T5627] Bluetooth: hci1: command tx timeout [ 972.101118][ T3964] netlink: 23 bytes leftover after parsing attributes in process `syz.2.8906'. [ 972.101153][ T3964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8906'. [ 972.120394][T26643] bond1: (slave dummy0): failed to get link speed/duplex [ 972.393960][ T3742] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 972.393994][ T3742] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 972.470790][T16296] bond1: (slave dummy0): failed to get link speed/duplex [ 972.494152][ T3980] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 972.584107][T16296] bond1: (slave dummy0): failed to get link speed/duplex [ 972.618092][ T3988] FAULT_INJECTION: forcing a failure. [ 972.618092][ T3988] name failslab, interval 1, probability 0, space 0, times 0 [ 972.618138][ T3988] CPU: 0 UID: 0 PID: 3988 Comm: syz.0.8911 Not tainted syzkaller #0 PREEMPT(full) [ 972.618159][ T3988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 972.618178][ T3988] Call Trace: [ 972.618185][ T3988] [ 972.618193][ T3988] dump_stack_lvl+0xe8/0x150 [ 972.618222][ T3988] should_fail_ex+0x410/0x560 [ 972.618248][ T3988] should_failslab+0xa8/0x100 [ 972.618271][ T3988] __kvmalloc_node_noprof+0x176/0x820 [ 972.618286][ T3988] ? kasan_save_track+0x3e/0x80 [ 972.618301][ T3988] ? __kvmalloc_node_noprof+0x50f/0x820 [ 972.618316][ T3988] ? bpf_stack_liveness_init+0x29/0x90 [ 972.618333][ T3988] ? bpf_check+0x263f/0x2ef0 [ 972.618349][ T3988] ? bpf_compute_const_regs+0x18f/0x3450 [ 972.618365][ T3988] ? bpf_compute_const_regs+0x18f/0x3450 [ 972.618415][ T3988] bpf_compute_const_regs+0x18f/0x3450 [ 972.618474][ T3988] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 972.618491][ T3988] ? check_attach_btf_id+0x325/0x1af0 [ 972.618513][ T3988] ? bpf_stack_liveness_init+0x29/0x90 [ 972.618528][ T3988] ? trace_kmalloc+0x2a/0xf0 [ 972.618542][ T3988] ? __pfx_check_attach_btf_id+0x10/0x10 [ 972.618558][ T3988] ? bpf_stack_liveness_init+0x29/0x90 [ 972.618573][ T3988] ? __kvmalloc_node_noprof+0x52f/0x820 [ 972.618597][ T3988] ? __asan_memset+0x22/0x50 [ 972.618613][ T3988] bpf_check+0x26ac/0x2ef0 [ 972.618642][ T3988] ? __pfx_bpf_check+0x10/0x10 [ 972.618660][ T3988] ? bpf_obj_name_cpy+0x194/0x1e0 [ 972.618685][ T3988] bpf_prog_load+0x14d6/0x1c20 [ 972.618710][ T3988] ? __pfx_bpf_prog_load+0x10/0x10 [ 972.618745][ T3988] __sys_bpf+0xd0d/0xd90 [ 972.618767][ T3988] ? __pfx___sys_bpf+0x10/0x10 [ 972.618792][ T3988] ? __fget_files+0x2a/0x420 [ 972.618825][ T3988] ? ksys_write+0x242/0x270 [ 972.618841][ T3988] ? __pfx_ksys_write+0x10/0x10 [ 972.618859][ T3988] __x64_sys_bpf+0xba/0xd0 [ 972.618876][ T3988] do_syscall_64+0x166/0x520 [ 972.618893][ T3988] ? trace_irq_disable+0x3b/0x140 [ 972.618908][ T3988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.618923][ T3988] ? clear_bhb_loop+0x70/0xc0 [ 972.618940][ T3988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.618954][ T3988] RIP: 0033:0x7f6ad059e559 [ 972.618969][ T3988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.618981][ T3988] RSP: 002b:00007f6ace7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 972.618997][ T3988] RAX: ffffffffffffffda RBX: 00007f6ad0825fa0 RCX: 00007f6ad059e559 [ 972.619007][ T3988] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 972.619016][ T3988] RBP: 00007f6ace7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 972.619024][ T3988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 972.619033][ T3988] R13: 00007f6ad0826038 R14: 00007f6ad0825fa0 R15: 00007fff0f16ec58 [ 972.619055][ T3988] [ 972.640107][ T3742] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 972.640141][ T3742] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 972.751504][T26640] bond1: (slave dummy0): failed to get link speed/duplex [ 972.805481][T27359] IPVS: ip_vs_send_async error -101 [ 972.909942][ T3742] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 972.909974][ T3742] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 973.108053][ T3742] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 973.108076][ T3742] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 973.188003][ T4004] tipc: Started in network mode [ 973.188034][ T4004] tipc: Node identity 76aebeb03236, cluster identity 4711 [ 973.188190][ T4004] tipc: Enabled bearer , priority 0 [ 973.213010][ T3998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8915'. [ 973.265038][ T4004] syzkaller0: entered promiscuous mode [ 973.265066][ T4004] syzkaller0: entered allmulticast mode [ 973.265703][ T4004] tipc: Resetting bearer [ 973.563268][ T4003] tipc: Resetting bearer [ 973.861908][T27359] IPVS: ip_vs_send_async error -101 [ 974.911462][T27359] IPVS: ip_vs_send_async error -101 [ 974.950898][T26765] IPVS: ip_vs_send_async error -101 [ 974.950996][T26068] IPVS: ip_vs_send_async error -101 [ 975.921578][T27359] IPVS: ip_vs_send_async error -101 [ 977.006022][T27359] IPVS: ip_vs_send_async error -101 [ 977.544499][ T4003] tipc: Disabling bearer [ 977.563861][T10028] tipc: Node number set to 1150860976 [ 977.745216][ T4066] xt_CT: You must specify a L4 protocol and not use inversions on it [ 977.763166][ T4063] netlink: 'syz.0.8925': attribute type 1 has an invalid length. [ 977.870447][ T4075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8925'. [ 977.914428][ T4080] net_ratelimit: 4 callbacks suppressed [ 977.914451][ T4080] ip_tables: iptables: counters copy to user failed while replacing table [ 977.920094][ T4063] 8021q: adding VLAN 0 to HW filter on device bond8 [ 977.978474][ T4071] bond8: (slave veth11): Enslaving as an active interface with a down link [ 977.980615][ T31] bond1: (slave dummy0): failed to get link speed/duplex [ 978.017757][ T4074] syzkaller1: entered promiscuous mode [ 978.017778][ T4074] syzkaller1: entered allmulticast mode [ 978.022897][T27359] IPVS: ip_vs_send_async error -101 [ 978.037786][ T4068] syzkaller1: left promiscuous mode [ 978.037807][ T4068] syzkaller1: left allmulticast mode [ 978.312381][T26640] bond1: (slave dummy0): failed to get link speed/duplex [ 978.312454][ T3742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 978.343598][ T3742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 978.346296][ T3742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 978.374998][ T3742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 978.376013][ T3742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 978.399876][ T3742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 978.409285][ T3742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 978.420770][ T3742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 978.460402][ T2187] bond1: (slave dummy0): failed to get link speed/duplex [ 978.692145][T26644] bond1: (slave dummy0): failed to get link speed/duplex [ 978.793337][ T3742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.860371][T26644] bond1: (slave dummy0): failed to get link speed/duplex [ 978.876579][ T3742] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.909721][T26644] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.909825][T26644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.936685][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.936793][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.062158][T27359] IPVS: ip_vs_send_async error -101 [ 979.071204][ T31] bond1: (slave dummy0): failed to get link speed/duplex [ 979.242893][ T2187] bond1: (slave dummy0): failed to get link speed/duplex [ 979.353201][T26644] bond1: (slave dummy0): failed to get link speed/duplex [ 979.460583][T26644] bond1: (slave dummy0): failed to get link speed/duplex [ 979.733805][ T4152] syzkaller0: entered promiscuous mode [ 979.733827][ T4152] syzkaller0: entered allmulticast mode [ 980.101928][T27359] IPVS: ip_vs_send_async error -101 [ 980.151245][T26765] IPVS: ip_vs_send_async error -101 [ 981.110809][T27359] IPVS: ip_vs_send_async error -101 [ 982.153616][T27359] IPVS: ip_vs_send_async error -101 [ 982.551594][ T3742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.831228][ T3742] veth0_vlan: entered promiscuous mode [ 982.849547][ T3742] veth1_vlan: entered promiscuous mode [ 982.986755][ T4205] bond4: option ad_select: invalid value (34) [ 983.220337][T27359] IPVS: ip_vs_send_async error -101 [ 983.267408][ T4205] bond4 (unregistering): Released all slaves [ 983.970784][ T2187] net_ratelimit: 7 callbacks suppressed [ 983.970805][ T2187] bond1: (slave dummy0): failed to get link speed/duplex [ 984.029275][ T3742] veth0_macvtap: entered promiscuous mode [ 984.040969][ T3742] veth1_macvtap: entered promiscuous mode [ 984.067431][ T3742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.092518][T26640] bond1: (slave dummy0): failed to get link speed/duplex [ 984.098209][ T3742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.122521][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.122897][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.123225][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.123404][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.231486][T27359] IPVS: ip_vs_send_async error -101 [ 984.244293][ T2187] bond1: (slave dummy0): failed to get link speed/duplex [ 984.352205][ T2187] bond1: (slave dummy0): failed to get link speed/duplex [ 984.515881][T26640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.515903][T26640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.522913][T26640] bond1: (slave dummy0): failed to get link speed/duplex [ 984.546159][ T4255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8963'. [ 984.586538][ T4260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8964'. [ 984.586573][ T4260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8964'. [ 984.664297][ T4260] erspan0: entered promiscuous mode [ 984.669577][ T4260] gretap0: entered promiscuous mode [ 984.684789][ T4260] debugfs: 'hsr0' already exists in 'hsr' [ 984.684814][ T4260] Cannot create hsr debugfs directory [ 984.691251][ T31] bond1: (slave dummy0): failed to get link speed/duplex [ 984.734365][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.734388][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.744137][ T4267] ip_tables: iptables: counters copy to user failed while replacing table [ 984.782139][ T4267] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8966'. [ 984.800454][ T31] bond1: (slave dummy0): failed to get link speed/duplex [ 985.063213][T26640] bond1: (slave dummy0): failed to get link speed/duplex [ 985.171571][ T2187] bond1: (slave dummy0): failed to get link speed/duplex [ 985.273501][T27359] IPVS: ip_vs_send_async error -101 [ 985.681745][T26893] IPVS: ip_vs_send_async error -101 [ 985.892592][ T4310] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.892630][ T4310] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.892654][ T4310] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 986.198293][ T4310] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 986.198330][ T4310] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.198357][ T4310] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 986.360478][T27359] IPVS: ip_vs_send_async error -101 [ 986.394548][ T4310] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 986.394584][ T4310] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.394611][ T4310] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 986.572905][ T4364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8988'. [ 986.575980][ T4367] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8991'. [ 986.577077][ T4366] xt_CT: You must specify a L4 protocol and not use inversions on it [ 986.627781][ T4310] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 986.627819][ T4310] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.627845][ T4310] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 986.875385][ T1124] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 986.875420][ T1124] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 986.875442][ T1124] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 986.988937][ T31] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 986.988970][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 986.988994][ T31] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 987.000444][ T1124] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.000478][ T1124] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 987.000502][ T1124] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 987.003451][ T4382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8995'. [ 987.003544][ T4382] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 987.004458][ T4382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8995'. [ 987.124369][ T31] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.124404][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 987.124428][ T31] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 987.380539][T27359] IPVS: ip_vs_send_async error -101 [ 987.574639][ T4418] FAULT_INJECTION: forcing a failure. [ 987.574639][ T4418] name failslab, interval 1, probability 0, space 0, times 0 [ 987.574672][ T4418] CPU: 1 UID: 0 PID: 4418 Comm: syz.4.9008 Not tainted syzkaller #0 PREEMPT(full) [ 987.574717][ T4418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 987.574728][ T4418] Call Trace: [ 987.574735][ T4418] [ 987.574744][ T4418] dump_stack_lvl+0xe8/0x150 [ 987.574775][ T4418] should_fail_ex+0x410/0x560 [ 987.574805][ T4418] should_failslab+0xa8/0x100 [ 987.574832][ T4418] __kvmalloc_node_noprof+0x176/0x820 [ 987.574855][ T4418] ? __kvmalloc_node_noprof+0x345/0x820 [ 987.574876][ T4418] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 987.574898][ T4418] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 987.574928][ T4418] bpf_compute_subprog_arg_access+0x187/0x14d0 [ 987.574953][ T4418] ? tc_cls_act_func_proto+0x64e/0x720 [ 987.575000][ T4418] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 987.575038][ T4418] ? __kvmalloc_node_noprof+0x345/0x820 [ 987.575060][ T4418] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 987.575081][ T4418] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 987.575110][ T4418] bpf_compute_live_registers+0x8d3/0x1ff0 [ 987.575151][ T4418] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 987.575182][ T4418] bpf_check+0x2744/0x2ef0 [ 987.575222][ T4418] ? __pfx_bpf_check+0x10/0x10 [ 987.575247][ T4418] ? bpf_obj_name_cpy+0x194/0x1e0 [ 987.575277][ T4418] bpf_prog_load+0x14d6/0x1c20 [ 987.575310][ T4418] ? __pfx_bpf_prog_load+0x10/0x10 [ 987.575357][ T4418] __sys_bpf+0xd0d/0xd90 [ 987.575387][ T4418] ? __pfx___sys_bpf+0x10/0x10 [ 987.575419][ T4418] ? __fget_files+0x2a/0x420 [ 987.575463][ T4418] ? ksys_write+0x242/0x270 [ 987.575484][ T4418] ? __pfx_ksys_write+0x10/0x10 [ 987.575507][ T4418] __x64_sys_bpf+0xba/0xd0 [ 987.575531][ T4418] do_syscall_64+0x166/0x520 [ 987.575554][ T4418] ? trace_irq_disable+0x3b/0x140 [ 987.575574][ T4418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.575594][ T4418] ? clear_bhb_loop+0x70/0xc0 [ 987.575617][ T4418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.575635][ T4418] RIP: 0033:0x7f874839e559 [ 987.575653][ T4418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.575668][ T4418] RSP: 002b:00007f87491b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 987.575688][ T4418] RAX: ffffffffffffffda RBX: 00007f8748625fa0 RCX: 00007f874839e559 [ 987.575701][ T4418] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 987.575713][ T4418] RBP: 00007f87491b3090 R08: 0000000000000000 R09: 0000000000000000 [ 987.575725][ T4418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 987.575736][ T4418] R13: 00007f8748626038 R14: 00007f8748625fa0 R15: 00007ffc8b9030e8 [ 987.575764][ T4418] [ 987.683210][ T4417] sctp: [Deprecated]: syz.1.9007 (pid 4417) Use of int in max_burst socket option. [ 987.683210][ T4417] Use struct sctp_assoc_value instead [ 987.844234][ T4423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9007'. [ 987.952293][ T4423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9007'. [ 988.275448][ T4443] xt_CT: You must specify a L4 protocol and not use inversions on it [ 988.338263][ T4445] netlink: 'syz.0.9017': attribute type 10 has an invalid length. [ 988.378008][ T4445] bond1: (slave dummy0): Releasing backup interface [ 988.393188][T27359] IPVS: ip_vs_send_async error -101 [ 988.488450][ T4445] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 989.046262][ T4483] netlink: 'syz.4.9028': attribute type 1 has an invalid length. [ 989.283114][ T4500] xt_CT: You must specify a L4 protocol and not use inversions on it [ 989.328104][ T4503] xt_IDLETIMER: timeout value is zero [ 989.461092][T27359] IPVS: ip_vs_send_async error -101 [ 989.680064][ T4517] __nla_validate_parse: 4 callbacks suppressed [ 989.680082][ T4517] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9036'. [ 989.697029][ T4516] vlan3: entered allmulticast mode [ 989.697051][ T4516] bond0: entered allmulticast mode [ 989.697063][ T4516] bond_slave_0: entered allmulticast mode [ 989.697079][ T4516] bond_slave_1: entered allmulticast mode [ 989.697092][ T4516] team0: entered allmulticast mode [ 989.697104][ T4516] team_slave_1: entered allmulticast mode [ 989.697362][ T4516] dummy0: entered allmulticast mode [ 990.116247][ T4540] netlink: 'syz.2.9043': attribute type 2 has an invalid length. [ 990.116272][ T4540] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9043'. [ 990.116329][ T4540] netlink: 'syz.2.9043': attribute type 2 has an invalid length. [ 990.116343][ T4540] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9043'. [ 990.159254][ T5624] Bluetooth: hci0: command 0x0405 tx timeout [ 990.228519][ T4542] net_ratelimit: 19 callbacks suppressed [ 990.228538][ T4542] syzkaller0: mtu less than device minimum [ 990.471056][T27359] IPVS: ip_vs_send_async error -101 [ 990.779454][ T4573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9051'. [ 990.790821][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9051'. [ 990.825441][ T4573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9051'. [ 990.895250][ T4573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9051'. [ 990.968859][ T4573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9051'. [ 991.108793][ T4573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9051'. [ 991.186570][ T4573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9051'. [ 991.510969][T27359] IPVS: ip_vs_send_async error -101 [ 993.070497][ T2187] IPVS: starting estimator thread 0... [ 993.170386][ T4632] IPVS: using max 27 ests per chain, 64800 per kthread [ 993.230456][T27359] IPVS: ip_vs_send_async error -101 [ 994.618063][T27359] IPVS: ip_vs_send_async error -101 [ 995.341049][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 995.347791][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 995.354233][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 995.375811][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 995.378568][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 995.550522][ T4671] __nla_validate_parse: 10 callbacks suppressed [ 995.550545][ T4671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9071'. [ 995.570414][T27359] IPVS: ip_vs_send_async error -101 [ 996.031276][T24129] syz_tun (unregistering): left allmulticast mode [ 996.357165][ T4699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9074'. [ 996.397322][ T4694] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.415422][ T4694] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.583269][T27359] IPVS: ip_vs_send_async error -101 [ 996.583314][T27359] IPVS: ip_vs_send_async error -101 [ 996.670775][T26639] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.670813][T26639] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 996.670837][T26639] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 996.803811][ T4716] xt_CT: You must specify a L4 protocol and not use inversions on it [ 996.854392][ T4665] rxe_eth0 speed is unknown, defaulting to 1000 [ 996.908009][T26639] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.908053][T26639] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 996.908074][T26639] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 997.045390][T26639] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.045425][T26639] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 997.047044][T26639] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 997.181292][T26639] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.181328][T26639] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 997.181352][T26639] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 997.430796][ T5627] Bluetooth: hci4: command tx timeout [ 997.602396][T27359] IPVS: ip_vs_send_async error -101 [ 998.186311][T26639] bridge_slave_1: left allmulticast mode [ 998.186442][T26639] bridge_slave_1: left promiscuous mode [ 998.186653][T26639] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.223926][T26639] bridge_slave_0: left allmulticast mode [ 998.223953][T26639] bridge_slave_0: left promiscuous mode [ 998.224193][T26639] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.312309][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 998.452655][ T4783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9091'. [ 998.489415][ T4783] netlink: 'syz.1.9091': attribute type 2 has an invalid length. [ 998.489440][ T4783] netlink: 'syz.1.9091': attribute type 2 has an invalid length. [ 998.663545][T27359] IPVS: ip_vs_send_async error -101 [ 999.021926][T26639] bond3 (unregistering): (slave geneve4): Releasing active interface [ 999.187514][T26639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.187838][T26639] bond_slave_0: left allmulticast mode [ 999.189481][T26639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.189735][T26639] bond_slave_1: left allmulticast mode [ 999.221180][T26639] bond0 (unregistering): (slave team0): Releasing backup interface [ 999.221438][T26639] team0: left allmulticast mode [ 999.221448][T26639] team_slave_1: left allmulticast mode [ 999.223235][T26639] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 999.223679][T26639] dummy0: left allmulticast mode [ 999.265650][T26639] bond0 (unregistering): Released all slaves [ 999.277217][T26639] bond1 (unregistering): (slave veth5): Removing an active aggregator [ 999.277742][T26639] bond1 (unregistering): (slave veth5): Releasing backup interface [ 999.278982][T26639] bond1 (unregistering): Released all slaves [ 999.314357][T26639] bond2 (unregistering): Released all slaves [ 999.328654][T26639] bond3 (unregistering): Released all slaves [ 999.343394][T26639] bond4 (unregistering): Released all slaves [ 999.371578][T26639] bond5 (unregistering): Released all slaves [ 999.386793][T26639] bond6 (unregistering): (slave wireguard1): Releasing backup interface [ 999.386818][T26639] wireguard1: left promiscuous mode [ 999.388648][T26639] bond6 (unregistering): (slave wireguard2): Releasing backup interface [ 999.389561][T26639] bond6 (unregistering): Released all slaves [ 999.433255][T26639] bond7 (unregistering): Released all slaves [ 999.447920][T26639] bond8 (unregistering): (slave veth11): Releasing active interface [ 999.449306][T26639] bond8 (unregistering): Released all slaves [ 999.510571][ T5627] Bluetooth: hci4: command tx timeout [ 999.655541][T26639] ovs-s: left promiscuous mode [ 999.716572][T27359] IPVS: ip_vs_send_async error -101 [ 999.978393][ T4810] 8021q: adding VLAN 0 to HW filter on device bond2 [ 999.979169][T26639] tipc: Left network mode [ 1000.034032][T26639] IPVS: stopping master sync thread 28549 ... [ 1000.249575][ T4827] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9103'. [ 1000.751877][T27359] IPVS: ip_vs_send_async error -101 [ 1001.218439][ T4883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9114'. [ 1001.278862][ T4665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.279038][ T4665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.279226][ T4665] bridge_slave_0: entered allmulticast mode [ 1001.318616][ T4665] bridge_slave_0: entered promiscuous mode [ 1001.406028][ T4883] ifb1: entered allmulticast mode [ 1001.412500][ T4665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.412602][ T4665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.412766][ T4665] bridge_slave_1: entered allmulticast mode [ 1001.506304][ T4665] bridge_slave_1: entered promiscuous mode [ 1001.558695][ T4891] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1001.592729][ T5627] Bluetooth: hci4: command tx timeout [ 1001.685219][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1001.779599][ T4902] FAULT_INJECTION: forcing a failure. [ 1001.779599][ T4902] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.779631][ T4902] CPU: 1 UID: 0 PID: 4902 Comm: syz.1.9122 Not tainted syzkaller #0 PREEMPT(full) [ 1001.779648][ T4902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1001.779657][ T4902] Call Trace: [ 1001.779663][ T4902] [ 1001.779670][ T4902] dump_stack_lvl+0xe8/0x150 [ 1001.779694][ T4902] should_fail_ex+0x410/0x560 [ 1001.779718][ T4902] should_failslab+0xa8/0x100 [ 1001.779740][ T4902] __kvmalloc_node_noprof+0x176/0x820 [ 1001.779760][ T4902] ? check_max_stack_depth+0x5c/0x21b0 [ 1001.779777][ T4902] ? check_max_stack_depth+0x5c/0x21b0 [ 1001.779800][ T4902] check_max_stack_depth+0x5c/0x21b0 [ 1001.779823][ T4902] ? kasan_quarantine_put+0xbb/0x1f0 [ 1001.779839][ T4902] ? lockdep_hardirqs_on+0x7b/0x110 [ 1001.779863][ T4902] ? bpf_remove_fastcall_spills_fills+0xabc/0xb00 [ 1001.779886][ T4902] bpf_check+0x1a50/0x2ef0 [ 1001.779915][ T4902] ? __pfx_bpf_check+0x10/0x10 [ 1001.779933][ T4902] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1001.779957][ T4902] bpf_prog_load+0x14d6/0x1c20 [ 1001.779987][ T4902] ? __pfx_bpf_prog_load+0x10/0x10 [ 1001.780025][ T4902] __sys_bpf+0xd0d/0xd90 [ 1001.780048][ T4902] ? __pfx___sys_bpf+0x10/0x10 [ 1001.780087][ T4902] ? __fget_files+0x2a/0x420 [ 1001.780136][ T4902] ? ksys_write+0x242/0x270 [ 1001.780155][ T4902] ? __pfx_ksys_write+0x10/0x10 [ 1001.780173][ T4902] __x64_sys_bpf+0xba/0xd0 [ 1001.780191][ T4902] do_syscall_64+0x166/0x520 [ 1001.780208][ T4902] ? trace_irq_disable+0x3b/0x140 [ 1001.780223][ T4902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.780239][ T4902] ? clear_bhb_loop+0x70/0xc0 [ 1001.780258][ T4902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.780273][ T4902] RIP: 0033:0x7f62aa59e559 [ 1001.780290][ T4902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.780303][ T4902] RSP: 002b:00007f62ab4db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1001.780320][ T4902] RAX: ffffffffffffffda RBX: 00007f62aa825fa0 RCX: 00007f62aa59e559 [ 1001.780330][ T4902] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 1001.780339][ T4902] RBP: 00007f62ab4db090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.780347][ T4902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1001.780356][ T4902] R13: 00007f62aa826038 R14: 00007f62aa825fa0 R15: 00007fff3f8f2258 [ 1001.780380][ T4902] [ 1001.782453][T27359] IPVS: ip_vs_send_async error -101 [ 1001.811206][ T4665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.816561][ T4900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9120'. [ 1001.851318][ T4665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.092842][T26639] veth1_macvtap: left promiscuous mode [ 1002.092877][T26639] veth0_macvtap: left promiscuous mode [ 1002.092985][T26639] veth1_vlan: left promiscuous mode [ 1002.093054][T26639] veth0_vlan: left promiscuous mode [ 1002.223796][ T4922] netlink: 58 bytes leftover after parsing attributes in process `syz.1.9123'. [ 1002.399806][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9123'. [ 1002.416212][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9123'. [ 1002.733592][T26639] team0 (unregistering): Port device team_slave_1 removed [ 1002.803052][T27359] IPVS: ip_vs_send_async error -101 [ 1002.892994][ T4665] team0: Port device team_slave_0 added [ 1002.974027][ T4665] team0: Port device team_slave_1 added [ 1003.200447][ T4665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1003.200466][ T4665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.200490][ T4665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.202929][ T4665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.202943][ T4665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.202966][ T4665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1003.368839][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9128'. [ 1003.415288][ T4955] ifb0: entered allmulticast mode [ 1003.447351][ T4665] hsr_slave_0: entered promiscuous mode [ 1003.449458][ T4665] hsr_slave_1: entered promiscuous mode [ 1003.461739][ T4665] debugfs: 'hsr0' already exists in 'hsr' [ 1003.461762][ T4665] Cannot create hsr debugfs directory [ 1003.725931][ T4973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1003.860603][T27359] IPVS: ip_vs_send_async error -101 [ 1003.899839][ T4978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9133'. [ 1003.899873][ T4978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9133'. [ 1004.910430][T27359] IPVS: ip_vs_send_async error -101 [ 1005.139056][ T5027] netlink: 'syz.2.9142': attribute type 4 has an invalid length. [ 1005.173980][ T5027] netlink: 'syz.2.9142': attribute type 4 has an invalid length. [ 1005.358857][ T5035] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 1005.365990][ T5032] bridge1: entered promiscuous mode [ 1005.366059][ T5032] bridge1: entered allmulticast mode [ 1005.761149][ T4665] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1005.766658][ T4665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1005.767539][ T4665] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1005.774169][ T4665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1005.804385][ T5049] TC_ACT_REPEAT abuse ? [ 1005.819291][ T4665] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1005.831739][ T4665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1005.832852][ T4665] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1005.839227][ T4665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1005.902598][ T5049] TC_ACT_REPEAT abuse ? [ 1005.940353][T27359] IPVS: ip_vs_send_async error -101 [ 1006.950891][T27359] IPVS: ip_vs_send_async error -101 [ 1008.020464][T27359] IPVS: ip_vs_send_async error -101 [ 1009.054341][T27359] IPVS: ip_vs_send_async error -101 [ 1009.074426][ T5090] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9152'. [ 1009.141865][ T4665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.218573][ T4665] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.246048][T16296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.246158][T16296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.289395][T26644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.289494][T26644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.101837][T27359] IPVS: ip_vs_send_async error -101 [ 1010.504826][ T4665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.813495][ T4665] veth0_vlan: entered promiscuous mode [ 1010.832415][ T5172] TC_ACT_REPEAT abuse ? [ 1010.844668][ T4665] veth1_vlan: entered promiscuous mode [ 1011.024686][ T4665] veth0_macvtap: entered promiscuous mode [ 1011.035309][ T4665] veth1_macvtap: entered promiscuous mode [ 1011.106269][ T4665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.144102][T27359] IPVS: ip_vs_send_async error -101 [ 1011.159882][ T4665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.220429][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.265487][ T1124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.270883][ T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.271569][ T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.325617][ T5192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9173'. [ 1011.639597][ T2185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.639634][ T2185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.721183][ T1114] nci: nci_rsp_packet: unknown rsp opcode 0x7 [ 1012.181076][T27359] IPVS: ip_vs_send_async error -101 [ 1012.332873][ T5207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1012.530152][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.530274][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.599141][ T5234] atomic_op ffff88807b51a1e0 conn xmit_atomic 0000000000000000 [ 1013.122180][ T5259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9186'. [ 1013.163016][ T5259] ifb0: entered allmulticast mode [ 1013.193874][T27359] IPVS: ip_vs_send_async error -101 [ 1013.248551][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1013.260818][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1013.274679][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1013.275567][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1013.276270][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1013.396524][ T5255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9185'. [ 1013.511694][ T5273] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1013.858271][ T5281] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1013.969021][T25014] syz_tun (unregistering): left allmulticast mode [ 1014.037009][ T5286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9188'. [ 1014.189958][ T5263] rxe_eth0 speed is unknown, defaulting to 1000 [ 1014.234639][T27359] IPVS: ip_vs_send_async error -101 [ 1014.344784][ T5273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1014.346462][ T5274] netlink: 'syz.0.9188': attribute type 2 has an invalid length. [ 1014.346489][ T5274] netlink: 'syz.0.9188': attribute type 2 has an invalid length. [ 1014.809472][ T5329] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9195'. [ 1014.975013][ T5339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9199'. [ 1015.276305][T27359] IPVS: ip_vs_send_async error -101 [ 1015.289251][ T5263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.291371][ T5263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.291554][ T5263] bridge_slave_0: entered allmulticast mode [ 1015.293412][ T5263] bridge_slave_0: entered promiscuous mode [ 1015.297653][ T5263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.297817][ T5263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.297957][ T5263] bridge_slave_1: entered allmulticast mode [ 1015.299912][ T5263] bridge_slave_1: entered promiscuous mode [ 1015.370677][ T5263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.389196][ T5263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.431015][ T5624] Bluetooth: hci5: command tx timeout [ 1015.453950][ T5263] team0: Port device team_slave_0 added [ 1015.455140][ T5344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9200'. [ 1015.457255][ T5263] team0: Port device team_slave_1 added [ 1015.507452][ T5263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.507470][ T5263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.507491][ T5263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.509724][ T5263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.509740][ T5263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.509761][ T5263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.652018][ T5263] hsr_slave_0: entered promiscuous mode [ 1015.653098][ T5263] hsr_slave_1: entered promiscuous mode [ 1015.653840][ T5263] debugfs: 'hsr0' already exists in 'hsr' [ 1015.653859][ T5263] Cannot create hsr debugfs directory [ 1015.989871][ T5263] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1015.989908][ T5263] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.131527][ T5263] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.131559][ T5263] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.187328][ T5386] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9208'. [ 1016.191938][ T5386] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9208'. [ 1016.235184][ T5263] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.235220][ T5263] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.237790][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9210'. [ 1016.271691][ T5386] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1016.311905][T27359] IPVS: ip_vs_send_async error -101 [ 1016.411882][ T5263] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.411918][ T5263] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.822804][ T5263] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1016.840412][ T5263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1016.841339][ T5263] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1016.849252][ T5263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1016.888996][ T5263] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1016.906282][ T5263] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1016.911281][ T5263] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1016.918980][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9213'. [ 1016.936232][ T5263] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1017.184592][ T5431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9215'. [ 1017.305602][ T5438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9217'. [ 1017.329560][ T5439] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1017.339161][ T5263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.395139][T27359] IPVS: ip_vs_send_async error -101 [ 1017.436996][ T5263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.467647][T26644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.467775][T26644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.497330][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.497464][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1018.422949][T27359] IPVS: ip_vs_send_async error -101 [ 1018.515518][ T5493] batadv_slave_1: entered promiscuous mode [ 1018.599752][ T5263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1018.902220][ T5510] netlink: 'syz.2.9229': attribute type 16 has an invalid length. [ 1018.902243][ T5510] netlink: 'syz.2.9229': attribute type 17 has an invalid length. [ 1018.967618][ T5510] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 1019.021476][ T5263] veth0_vlan: entered promiscuous mode [ 1019.029038][ T5263] veth1_vlan: entered promiscuous mode [ 1019.075108][ T5263] veth0_macvtap: entered promiscuous mode [ 1019.078907][ T5263] veth1_macvtap: entered promiscuous mode [ 1019.099007][ T5263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1019.112534][ T5263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1019.131040][ T2185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.193562][ T1124] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.201382][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.202630][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.285778][ T5488] batadv_slave_1: left promiscuous mode [ 1019.460616][T27359] IPVS: ip_vs_send_async error -101 [ 1020.520802][T27359] IPVS: ip_vs_send_async error -101 [ 1021.217235][ T5475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1021.452086][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.452108][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.540377][T27359] IPVS: ip_vs_send_async error -101 [ 1021.670481][T26068] IPVS: ip_vs_send_async error -101 [ 1021.694024][T26644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.694047][T26644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.194000][ T5569] syzkaller1: entered promiscuous mode [ 1022.194023][ T5569] syzkaller1: entered allmulticast mode [ 1022.382606][ T5580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9246'. [ 1022.382757][ T5580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.458237][ T5580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.552029][T27359] IPVS: ip_vs_send_async error -101 [ 1023.622683][T27359] IPVS: ip_vs_send_async error -101 [ 1024.006249][ T5620] ip6erspan0: entered allmulticast mode [ 1024.009625][ T5623] netlink: 'syz.0.9258': attribute type 5 has an invalid length. [ 1024.038155][ T5620] netlink: 'syz.0.9258': attribute type 39 has an invalid length. [ 1024.633720][T27359] IPVS: ip_vs_send_async error -101 [ 1025.076204][ T5678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9277'. [ 1025.204426][ T5694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9278'. [ 1025.316712][ T5704] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9281'. [ 1025.562410][ T5717] TC_ACT_REPEAT abuse ? [ 1025.671462][T27359] IPVS: ip_vs_send_async error -101 [ 1025.930462][ T5748] atomic_op ffff88803c5681e0 conn xmit_atomic 0000000000000000 [ 1025.999014][ T5760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9292'. [ 1026.127424][ T5770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9293'. [ 1026.159247][ T5775] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9296'. [ 1026.328107][ T5782] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9296'. [ 1026.382582][ T5780] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 1026.435777][ T5788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9300'. [ 1026.710979][T26893] IPVS: ip_vs_send_async error -101 [ 1026.740634][T27359] IPVS: ip_vs_send_async error -101 [ 1027.397827][ T5791] tipc: Started in network mode [ 1027.397862][ T5791] tipc: Node identity 26d4b2ff2a91, cluster identity 4711 [ 1027.398525][ T5791] tipc: Enabled bearer , priority 20 [ 1027.574122][ T5800] bridge1: entered promiscuous mode [ 1027.574147][ T5800] bridge1: entered allmulticast mode [ 1027.577764][ T5800] team0: Port device bridge1 added [ 1027.616343][ T5800] bridge0: port 3(team0) entered blocking state [ 1027.616555][ T5800] bridge0: port 3(team0) entered disabled state [ 1027.616732][ T5800] team0: entered allmulticast mode [ 1027.616748][ T5800] team_slave_0: entered allmulticast mode [ 1027.616766][ T5800] team_slave_1: entered allmulticast mode [ 1027.659569][ T5800] team0: entered promiscuous mode [ 1027.659592][ T5800] team_slave_0: entered promiscuous mode [ 1027.659811][ T5800] team_slave_1: entered promiscuous mode [ 1027.686331][ T5800] bridge0: port 3(team0) entered blocking state [ 1027.686495][ T5800] bridge0: port 3(team0) entered forwarding state [ 1027.751970][T27359] IPVS: ip_vs_send_async error -101 [ 1027.781722][ T5807] tipc: Started in network mode [ 1027.781755][ T5807] tipc: Node identity ac1414aa, cluster identity 4711 [ 1027.782347][ T5807] tipc: Enabled bearer , priority 10 [ 1027.976748][ T5818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9308'. [ 1028.146504][ T5830] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9311'. [ 1028.391042][T13220] tipc: Node number set to 205894399 [ 1028.589024][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9313'. [ 1028.820852][T27359] IPVS: ip_vs_send_async error -101 [ 1028.975978][T28229] tipc: Node number set to 2886997162 [ 1029.170619][ T5858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9320'. [ 1029.306923][ T5864] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 1029.306949][ T5864] bridge11: entered allmulticast mode [ 1029.506888][ T5872] netlink: 'syz.1.9323': attribute type 16 has an invalid length. [ 1029.506908][ T5872] netlink: 'syz.1.9323': attribute type 17 has an invalid length. [ 1029.507573][ T5872] gre0: left promiscuous mode [ 1029.507589][ T5872] gre0: left allmulticast mode [ 1029.552109][ T30] audit: type=1800 audit(1792492722.009:13): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9324" name="blkio.bfq.time" dev="tmpfs" ino=84 res=0 errno=0 [ 1029.555459][ T5878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9324'. [ 1029.589205][ T5872] mac80211_hwsim hwsim41 wlan1: left promiscuous mode [ 1029.599495][ T5872] ifb0: left allmulticast mode [ 1029.601807][ T5872] ip6gretap1: left allmulticast mode [ 1029.737375][ T5872] bridge0: port 3(vlan2) entered blocking state [ 1029.737483][ T5872] bridge0: port 3(vlan2) entered forwarding state [ 1029.763893][ T5895] netlink: 'syz.1.9323': attribute type 16 has an invalid length. [ 1029.763917][ T5895] netlink: 'syz.1.9323': attribute type 17 has an invalid length. [ 1029.790480][ T5872] bridge0: port 4(vlan3) entered blocking state [ 1029.790622][ T5872] bridge0: port 4(vlan3) entered forwarding state [ 1029.851218][ T5872] ip6gre1: left allmulticast mode [ 1029.861591][T27359] IPVS: ip_vs_send_async error -101 [ 1030.024014][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9332'. [ 1030.024045][ T5912] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9332'. [ 1030.357848][ T5926] Bluetooth: MGMT ver 1.23 [ 1030.450112][ T5913] ipvlan2: entered promiscuous mode [ 1030.526862][ T5935] atomic_op ffff888078f9b1e0 conn xmit_atomic 0000000000000000 [ 1030.664871][ T1114] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1030.665151][ T1114] bond2: (slave veth3): making interface the new active one [ 1030.734702][ T1114] bond2: active interface up! [ 1030.843972][ T5954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9347'. [ 1030.865361][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9345'. [ 1030.883112][T27359] IPVS: ip_vs_send_async error -101 [ 1031.123909][ T5966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9348'. [ 1031.272302][ T5964] rxe_eth0 speed is unknown, defaulting to 1000 [ 1031.717405][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1031.729526][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1031.738460][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1031.740489][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1031.750735][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1031.952724][T27359] IPVS: ip_vs_send_async error -101 [ 1032.199633][ T6018] x_tables: duplicate underflow at hook 1 [ 1032.459915][T26775] syz_tun (unregistering): left allmulticast mode [ 1033.023013][ T6055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9366'. [ 1033.092635][ T6055] bond3: option ad_select: invalid value (34) [ 1033.103484][ T6055] bond3 (unregistering): Released all slaves [ 1033.177062][ T6001] rxe_eth0 speed is unknown, defaulting to 1000 [ 1033.255045][ T6061] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9367'. [ 1033.476827][ T6070] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9369'. [ 1033.813293][ T6079] syzkaller0: entered promiscuous mode [ 1033.813319][ T6079] syzkaller0: entered allmulticast mode [ 1033.990934][T27359] IPVS: ip_vs_send_async error -101 [ 1034.363718][ T6104] netlink: 'syz.0.9375': attribute type 6 has an invalid length. [ 1034.513040][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.513579][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.513771][ T6001] bridge_slave_0: entered allmulticast mode [ 1034.517609][ T6001] bridge_slave_0: entered promiscuous mode [ 1034.574409][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.574513][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.574684][ T6001] bridge_slave_1: entered allmulticast mode [ 1034.579233][ T6001] bridge_slave_1: entered promiscuous mode [ 1034.639875][ T6001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.654801][ T6001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.708852][ T6001] team0: Port device team_slave_0 added [ 1034.725301][ T6001] team0: Port device team_slave_1 added [ 1034.776700][ T6001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.776718][ T6001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.776741][ T6001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.778764][ T6001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.778778][ T6001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.778802][ T6001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.863881][ T6117] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1034.947242][ T6001] hsr_slave_0: entered promiscuous mode [ 1034.948364][ T6001] hsr_slave_1: entered promiscuous mode [ 1034.962584][ T6001] debugfs: 'hsr0' already exists in 'hsr' [ 1034.962606][ T6001] Cannot create hsr debugfs directory [ 1035.067920][ T6127] netlink: 196 bytes leftover after parsing attributes in process `syz.3.9384'. [ 1035.463917][ T6148] netlink: 'syz.3.9390': attribute type 21 has an invalid length. [ 1035.463943][ T6148] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9390'. [ 1035.519543][ T6001] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.519567][ T6001] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.560547][ T6148] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9390'. [ 1035.773445][ T6001] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.773480][ T6001] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.977411][ T6146] infiniband syz0: set active [ 1035.977437][ T6146] infiniband syz0: added veth1_virt_wifi [ 1036.042520][ T6146] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1036.042557][ T6146] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1036.042590][ T6146] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1036.125563][ T6001] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.125601][ T6001] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.181121][ T6146] RDS/IB: syz0: added [ 1036.181192][ T6146] smc: adding ib device syz0 with port count 1 [ 1036.181213][ T6146] smc: ib device syz0 port 1 has no pnetid [ 1036.235994][T26068] IPVS: ip_vs_send_async error -101 [ 1037.051748][ T6001] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1037.093530][ T6001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1037.095997][ T6001] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1037.153872][ T6001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1037.154806][ T6001] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1037.185518][ T6001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1037.189277][ T6001] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1037.214228][ T6001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1037.598022][ T6001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.645878][ T6001] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.667008][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.667116][ T8049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.694113][T26644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.694416][T26644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.348468][ T6243] netlink: 'syz.3.9418': attribute type 1 has an invalid length. [ 1038.659365][ T6226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1038.927977][ T6256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1038.936407][ T6258] netlink: 'syz.3.9422': attribute type 12 has an invalid length. [ 1038.936428][ T6258] netlink: 'syz.3.9422': attribute type 29 has an invalid length. [ 1038.936440][ T6258] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9422'. [ 1038.996730][ T6261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1039.283880][ T6001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.407793][ T6274] atomic_op ffff88807f5421e0 conn xmit_atomic 0000000000000000 [ 1039.437522][ T6001] veth0_vlan: entered promiscuous mode [ 1039.469376][ T6001] veth1_vlan: entered promiscuous mode [ 1039.507059][ T6276] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9426'. [ 1039.537388][ T6276] netlink: 'syz.3.9426': attribute type 1 has an invalid length. [ 1039.579487][ T6276] bond3: option mode: invalid value (7) [ 1039.596724][ T6276] bond3 (unregistering): Released all slaves [ 1039.722732][ T6001] veth0_macvtap: entered promiscuous mode [ 1039.773664][ T6001] veth1_macvtap: entered promiscuous mode [ 1039.846728][ T6001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.871619][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9430'. [ 1039.874079][ T6001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.996832][ T2190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.998753][ T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.998811][ T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.998844][ T70] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.233606][T27359] IPVS: ip_vs_send_async error -101 [ 1040.383900][ T6304] atomic_op ffff8880282029e0 conn xmit_atomic 0000000000000000 [ 1040.492319][T26644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.492341][T26644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.520071][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9435'. [ 1040.583631][ T8049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.583654][ T8049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.907139][ T6321] FAULT_INJECTION: forcing a failure. [ 1040.907139][ T6321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.925122][ T6321] CPU: 0 UID: 0 PID: 6321 Comm: syz.3.9439 Not tainted syzkaller #0 PREEMPT(full) [ 1040.925151][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1040.925163][ T6321] Call Trace: [ 1040.925171][ T6321] [ 1040.925190][ T6321] dump_stack_lvl+0xe8/0x150 [ 1040.925226][ T6321] should_fail_ex+0x410/0x560 [ 1040.925257][ T6321] _copy_from_user+0x2d/0xb0 [ 1040.925285][ T6321] do_sys_poll+0x258/0x1110 [ 1040.925323][ T6321] ? __lock_acquire+0x747/0x2de0 [ 1040.925349][ T6321] ? __pfx_do_sys_poll+0x10/0x10 [ 1040.925374][ T6321] ? lock_acquire+0x115/0x350 [ 1040.925491][ T6321] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1040.925518][ T6321] ? __fget_files+0x3a2/0x420 [ 1040.925553][ T6321] __x64_sys_poll+0x190/0x360 [ 1040.925581][ T6321] ? __pfx___x64_sys_poll+0x10/0x10 [ 1040.925614][ T6321] do_syscall_64+0x166/0x520 [ 1040.925635][ T6321] ? trace_irq_disable+0x3b/0x140 [ 1040.925655][ T6321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.925672][ T6321] ? clear_bhb_loop+0x70/0xc0 [ 1040.925691][ T6321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.925710][ T6321] RIP: 0033:0x7fb61039e559 [ 1040.925729][ T6321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.925745][ T6321] RSP: 002b:00007fb611322028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1040.925765][ T6321] RAX: ffffffffffffffda RBX: 00007fb610626090 RCX: 00007fb61039e559 [ 1040.925779][ T6321] RDX: 0000000000000000 RSI: 0000000000000055 RDI: 0000200000000240 [ 1040.925791][ T6321] RBP: 00007fb611322090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.925804][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.925815][ T6321] R13: 00007fb610626128 R14: 00007fb610626090 R15: 00007fff5b68d388 [ 1040.925843][ T6321] [ 1040.971584][ T6312] netlink: 'syz.4.9438': attribute type 2 has an invalid length. [ 1040.971608][ T6312] netlink: 'syz.4.9438': attribute type 2 has an invalid length. [ 1042.159634][ T6361] atomic_op ffff8880274331e0 conn xmit_atomic 0000000000000000 [ 1042.248043][ T6365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1042.289254][ T6365] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9447'. [ 1042.724887][ T6385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1042.742043][ T6375] netlink: 'syz.4.9451': attribute type 2 has an invalid length. [ 1042.742069][ T6375] netlink: 'syz.4.9451': attribute type 2 has an invalid length. [ 1043.130394][ T6398] atomic_op ffff8880550d79e0 conn xmit_atomic 0000000000000000 [ 1043.195874][ T6399] ip6tnl1: entered allmulticast mode [ 1043.214220][T26644] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1043.214601][T26644] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1043.241547][T13219] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1043.310477][ T11] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1043.435276][ T6408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9460'. [ 1044.076198][ T6427] netlink: 'syz.2.9467': attribute type 2 has an invalid length. [ 1044.076239][ T6427] netlink: 'syz.2.9467': attribute type 2 has an invalid length. [ 1044.152310][ T11] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1044.357429][ T6440] atomic_op ffff888027b049e0 conn xmit_atomic 0000000000000000 [ 1044.576037][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9473'. [ 1044.639242][ T6455] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9476'. [ 1044.727066][ T6455] syzkaller1: entered promiscuous mode [ 1044.727091][ T6455] syzkaller1: entered allmulticast mode [ 1044.857872][ T6455] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9476'. [ 1045.431133][T27359] IPVS: ip_vs_send_async error -101 [ 1045.770037][ T6487] netlink: 'syz.3.9484': attribute type 2 has an invalid length. [ 1045.770064][ T6487] netlink: 'syz.3.9484': attribute type 2 has an invalid length. [ 1046.196860][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1046.216028][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1046.217046][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1046.220165][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1046.240628][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1047.304559][ T6559] sctp: [Deprecated]: syz.3.9501 (pid 6559) Use of int in max_burst socket option. [ 1047.304559][ T6559] Use struct sctp_assoc_value instead [ 1047.498769][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9500'. [ 1047.512905][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1047.566717][ T6567] netlink: 'syz.2.9500': attribute type 2 has an invalid length. [ 1047.566743][ T6567] netlink: 'syz.2.9500': attribute type 2 has an invalid length. [ 1047.818581][ T6503] rxe_eth0 speed is unknown, defaulting to 1000 [ 1047.994924][ T6581] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9504'. [ 1050.309896][ T6595] FAULT_INJECTION: forcing a failure. [ 1050.309896][ T6595] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.309927][ T6595] CPU: 0 UID: 0 PID: 6595 Comm: syz.4.9507 Not tainted syzkaller #0 PREEMPT(full) [ 1050.309946][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1050.309957][ T6595] Call Trace: [ 1050.309964][ T6595] [ 1050.309973][ T6595] dump_stack_lvl+0xe8/0x150 [ 1050.310003][ T6595] should_fail_ex+0x410/0x560 [ 1050.310033][ T6595] should_failslab+0xa8/0x100 [ 1050.310060][ T6595] __kmalloc_cache_noprof+0xa3/0x600 [ 1050.310080][ T6595] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1050.310102][ T6595] ? __request_module+0x2d0/0x630 [ 1050.310124][ T6595] ? __request_module+0x2d0/0x630 [ 1050.310153][ T6595] __request_module+0x2d0/0x630 [ 1050.310183][ T6595] ? __pfx___request_module+0x10/0x10 [ 1050.310216][ T6595] ? security_capable+0x7e/0x2c0 [ 1050.310243][ T6595] ? dev_load+0x21/0x1f0 [ 1050.310273][ T6595] dev_load+0x190/0x1f0 [ 1050.310295][ T6595] dev_ioctl+0x680/0x1150 [ 1050.310321][ T6595] sock_do_ioctl+0x23e/0x320 [ 1050.310342][ T6595] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1050.310356][ T6595] ? hook_file_ioctl+0x1f2/0x600 [ 1050.310391][ T6595] sock_ioctl+0x57a/0x7e0 [ 1050.310420][ T6595] ? __pfx_sock_ioctl+0x10/0x10 [ 1050.310448][ T6595] ? __fget_files+0x2a/0x420 [ 1050.310472][ T6595] ? __fget_files+0x3a2/0x420 [ 1050.310496][ T6595] ? __fget_files+0x2a/0x420 [ 1050.310525][ T6595] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1050.310552][ T6595] ? __pfx_sock_ioctl+0x10/0x10 [ 1050.310579][ T6595] __se_sys_ioctl+0xfc/0x170 [ 1050.310602][ T6595] do_syscall_64+0x166/0x520 [ 1050.310622][ T6595] ? trace_irq_disable+0x3b/0x140 [ 1050.310640][ T6595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.310658][ T6595] ? clear_bhb_loop+0x70/0xc0 [ 1050.310678][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.310695][ T6595] RIP: 0033:0x7f117b59e559 [ 1050.310712][ T6595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.310725][ T6595] RSP: 002b:00007f117c3bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1050.310743][ T6595] RAX: ffffffffffffffda RBX: 00007f117b825fa0 RCX: 00007f117b59e559 [ 1050.310756][ T6595] RDX: 00002000000003c0 RSI: 0000000000008933 RDI: 0000000000000003 [ 1050.310767][ T6595] RBP: 00007f117c3bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1050.310778][ T6595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1050.310789][ T6595] R13: 00007f117b826038 R14: 00007f117b825fa0 R15: 00007ffe593a7a48 [ 1050.310816][ T6595] [ 1050.949009][ T6621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9515'. [ 1051.052087][ T6627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9516'. [ 1051.093223][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9514'. [ 1051.098305][ T6620] netlink: 'syz.3.9514': attribute type 2 has an invalid length. [ 1051.098327][ T6620] netlink: 'syz.3.9514': attribute type 2 has an invalid length. [ 1051.671779][T27359] IPVS: ip_vs_send_async error -101 [ 1051.702619][ T6652] FAULT_INJECTION: forcing a failure. [ 1051.702619][ T6652] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.702649][ T6652] CPU: 0 UID: 0 PID: 6652 Comm: syz.4.9521 Not tainted syzkaller #0 PREEMPT(full) [ 1051.702674][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1051.702690][ T6652] Call Trace: [ 1051.702697][ T6652] [ 1051.702705][ T6652] dump_stack_lvl+0xe8/0x150 [ 1051.702737][ T6652] should_fail_ex+0x410/0x560 [ 1051.702778][ T6652] should_failslab+0xa8/0x100 [ 1051.702806][ T6652] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 1051.702828][ T6652] ? __kasan_kmalloc+0x93/0xb0 [ 1051.702855][ T6652] ? __request_module+0x2ec/0x630 [ 1051.702878][ T6652] ? __request_module+0x2ec/0x630 [ 1051.702901][ T6652] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1051.702926][ T6652] kstrdup+0x42/0x100 [ 1051.702950][ T6652] __request_module+0x2ec/0x630 [ 1051.702979][ T6652] ? __pfx___request_module+0x10/0x10 [ 1051.703018][ T6652] ? security_capable+0x7e/0x2c0 [ 1051.703048][ T6652] ? dev_load+0x21/0x1f0 [ 1051.703070][ T6652] dev_load+0x190/0x1f0 [ 1051.703093][ T6652] dev_ioctl+0x680/0x1150 [ 1051.703124][ T6652] sock_do_ioctl+0x23e/0x320 [ 1051.703146][ T6652] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1051.703163][ T6652] ? hook_file_ioctl+0x1f2/0x600 [ 1051.703204][ T6652] sock_ioctl+0x57a/0x7e0 [ 1051.703232][ T6652] ? __pfx_sock_ioctl+0x10/0x10 [ 1051.703258][ T6652] ? __fget_files+0x2a/0x420 [ 1051.703283][ T6652] ? __fget_files+0x3a2/0x420 [ 1051.703309][ T6652] ? __fget_files+0x2a/0x420 [ 1051.703338][ T6652] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1051.703366][ T6652] ? __pfx_sock_ioctl+0x10/0x10 [ 1051.703393][ T6652] __se_sys_ioctl+0xfc/0x170 [ 1051.703416][ T6652] do_syscall_64+0x166/0x520 [ 1051.703438][ T6652] ? trace_irq_disable+0x3b/0x140 [ 1051.703458][ T6652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.703478][ T6652] ? clear_bhb_loop+0x70/0xc0 [ 1051.703501][ T6652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.703519][ T6652] RIP: 0033:0x7f117b59e559 [ 1051.703535][ T6652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.703550][ T6652] RSP: 002b:00007f117c3bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1051.703566][ T6652] RAX: ffffffffffffffda RBX: 00007f117b825fa0 RCX: 00007f117b59e559 [ 1051.703579][ T6652] RDX: 00002000000003c0 RSI: 0000000000008933 RDI: 0000000000000003 [ 1051.703590][ T6652] RBP: 00007f117c3bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.703602][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.703614][ T6652] R13: 00007f117b826038 R14: 00007f117b825fa0 R15: 00007ffe593a7a48 [ 1051.703643][ T6652] [ 1052.058238][ T6659] netlink: 112 bytes leftover after parsing attributes in process `syz.3.9522'. [ 1052.078274][ T6659] ip_tables: iptables: counters copy to user failed while replacing table [ 1052.292144][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.292301][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.292473][ T6503] bridge_slave_0: entered allmulticast mode [ 1052.294743][ T6503] bridge_slave_0: entered promiscuous mode [ 1052.311764][ T6503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.318475][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.318656][ T6503] bridge_slave_1: entered allmulticast mode [ 1052.331565][ T6503] bridge_slave_1: entered promiscuous mode [ 1052.365465][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9525'. [ 1052.446830][ T6678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1052.447677][ T6670] syzkaller1: entered promiscuous mode [ 1052.447699][ T6670] syzkaller1: entered allmulticast mode [ 1052.488914][ T6678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9525'. [ 1052.508736][ T6503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.542662][ T6503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.630440][ T6503] team0: Port device team_slave_0 added [ 1052.633255][ T6503] team0: Port device team_slave_1 added [ 1052.674306][ T6503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.674324][ T6503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.674343][ T6503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.676300][ T6503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.676314][ T6503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.676336][ T6503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.994731][ T6503] hsr_slave_0: entered promiscuous mode [ 1052.998930][ T6503] hsr_slave_1: entered promiscuous mode [ 1053.003928][ T6503] debugfs: 'hsr0' already exists in 'hsr' [ 1053.003951][ T6503] Cannot create hsr debugfs directory [ 1053.129687][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9530'. [ 1053.275887][ T6699] udevd[6699]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1053.296870][ T6301] udevd[6301]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1054.038680][ T6503] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.038717][ T6503] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.256697][ T6503] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.256735][ T6503] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.507519][ T5627] Bluetooth: hci4: ACL packet for unknown connection handle 125 [ 1054.547507][ T6772] x_tables: unsorted underflow at hook 3 [ 1054.548140][ T6771] x_tables: unsorted underflow at hook 3 [ 1054.568429][ T6503] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.568465][ T6503] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.860026][ T6503] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.860063][ T6503] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.865409][ T6788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9548'. [ 1054.991979][ T6790] veth6: entered allmulticast mode [ 1056.179381][ T6503] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1056.208282][ T6503] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1056.362476][ T6503] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1056.385803][ T6503] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1056.386695][ T6503] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1056.411362][ T6503] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1056.413726][ T6503] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1056.440840][ T6503] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1056.550376][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1056.642556][ T6503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.718321][ T6503] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.767145][T26644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.767251][T26644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.810218][ T2190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.810322][ T2190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.870816][T27359] IPVS: ip_vs_send_async error -101 [ 1056.963969][ T6857] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1058.037932][ T6909] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9580'. [ 1058.058136][ T6913] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1058.279696][ T6928] netlink: 'syz.4.9585': attribute type 11 has an invalid length. [ 1058.293633][ T6928] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9585'. [ 1058.618754][ T6503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.862247][ T6957] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9596'. [ 1058.933016][ T6954] netlink: 'syz.3.9595': attribute type 2 has an invalid length. [ 1058.963279][ T6503] veth0_vlan: entered promiscuous mode [ 1059.009249][ T6503] veth1_vlan: entered promiscuous mode [ 1059.173472][ T6503] veth0_macvtap: entered promiscuous mode [ 1059.207079][ T6503] veth1_macvtap: entered promiscuous mode [ 1059.328661][ T6503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.356639][ T6503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.357849][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9600'. [ 1059.479872][ T6987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9607'. [ 1059.516464][ T6983] netlink: 'syz.2.9600': attribute type 13 has an invalid length. [ 1059.687430][T26644] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.687481][T26644] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.687516][T26644] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.687574][T26644] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.012833][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.012854][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.183232][T26644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.183254][T26644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.542119][ T7033] netlink: 'syz.1.9486': attribute type 2 has an invalid length. [ 1060.642964][ T7033] syzkaller1: entered promiscuous mode [ 1060.642988][ T7033] syzkaller1: entered allmulticast mode [ 1060.693378][ T7033] syzkaller1: left promiscuous mode [ 1060.693403][ T7033] syzkaller1: left allmulticast mode [ 1060.978095][ T7047] ip_tables: iptables: counters copy to user failed while replacing table [ 1061.736103][ T7083] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9631'. [ 1061.829361][ T7087] netlink: 'syz.3.9632': attribute type 10 has an invalid length. [ 1061.835451][ T7085] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9630'. [ 1061.835474][ T7085] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9630'. [ 1061.920133][ T7087] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 1061.948040][ T7087] team0: Port device wlan0 added [ 1062.071266][T27359] IPVS: ip_vs_send_async error -101 [ 1062.227455][ T7101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9635'. [ 1062.668580][ T7122] xt_hashlimit: size too large, truncated to 1048576 [ 1063.366411][ T7157] Cannot find del_set index 4 as target [ 1063.368409][ T7157] netlink: 'syz.1.9651': attribute type 2 has an invalid length. [ 1063.368439][ T7157] block nbd6: NBD_DISCONNECT [ 1063.368479][ T7157] block nbd6: Send disconnect failed -32 [ 1063.368496][ T7157] block nbd6: Send disconnect failed -32 [ 1063.368516][ T7157] block nbd6: shutting down sockets [ 1063.485991][ T7171] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1064.038673][ T7189] netlink: 'syz.1.9658': attribute type 219 has an invalid length. [ 1064.175083][ T7204] netlink: 'syz.3.9663': attribute type 1 has an invalid length. [ 1064.194921][ T7204] ip_tables: iptables: counters copy to user failed while replacing table [ 1064.528761][ T7220] bond0: entered promiscuous mode [ 1064.528786][ T7220] bond_slave_0: entered promiscuous mode [ 1064.528985][ T7220] bond_slave_1: entered promiscuous mode [ 1064.529146][ T7220] bond0: entered allmulticast mode [ 1064.529158][ T7220] bond_slave_0: entered allmulticast mode [ 1064.529170][ T7220] bond_slave_1: entered allmulticast mode [ 1064.925857][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9672'. [ 1065.027844][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9674'. [ 1065.027881][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9674'. [ 1065.166667][ T5627] block nbd6: Receive control failed (result -1) [ 1065.166767][ T5627] [ 1065.175454][ T5627] ====================================================== [ 1065.182466][ T5627] WARNING: possible circular locking dependency detected [ 1065.189497][ T5627] syzkaller #0 Not tainted [ 1065.193902][ T5627] ------------------------------------------------------ [ 1065.200908][ T5627] kworker/u9:4/5627 is trying to acquire lock: [ 1065.207050][ T5627] ffff8880859eee60 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 1065.216443][ T5627] [ 1065.216443][ T5627] but task is already holding lock: [ 1065.223793][ T5627] ffff888079ca8668 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 1065.232670][ T5627] [ 1065.232670][ T5627] which lock already depends on the new lock. [ 1065.232670][ T5627] [ 1065.243063][ T5627] [ 1065.243063][ T5627] the existing dependency chain (in reverse order) is: [ 1065.252087][ T5627] [ 1065.252087][ T5627] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1065.259720][ T5627] __mutex_lock+0x19d/0x1550 [ 1065.264840][ T5627] nbd_queue_rq+0x373/0xff0 [ 1065.269854][ T5627] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1065.275911][ T5627] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1065.282759][ T5627] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1065.289262][ T5627] blk_mq_run_work_fn+0x16c/0x300 [ 1065.294796][ T5627] process_scheduled_works+0xc3d/0x1630 [ 1065.300855][ T5627] worker_thread+0xa47/0xfb0 [ 1065.305965][ T5627] kthread+0x38b/0x480 [ 1065.310542][ T5627] ret_from_fork+0x514/0xb70 [ 1065.315644][ T5627] ret_from_fork_asm+0x1a/0x30 [ 1065.320927][ T5627] [ 1065.320927][ T5627] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1065.328124][ T5627] __mutex_lock+0x19d/0x1550 [ 1065.333231][ T5627] nbd_queue_rq+0xc1/0xff0 [ 1065.338186][ T5627] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1065.344247][ T5627] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1065.351087][ T5627] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1065.357581][ T5627] blk_mq_run_work_fn+0x16c/0x300 [ 1065.363113][ T5627] process_scheduled_works+0xc3d/0x1630 [ 1065.369171][ T5627] worker_thread+0xa47/0xfb0 [ 1065.374282][ T5627] kthread+0x38b/0x480 [ 1065.378865][ T5627] ret_from_fork+0x514/0xb70 [ 1065.383974][ T5627] ret_from_fork_asm+0x1a/0x30 [ 1065.389252][ T5627] [ 1065.389252][ T5627] -> #4 (set->srcu){.+.+}-{0:0}: [ 1065.396366][ T5627] __synchronize_srcu+0xc9/0x2f0 [ 1065.401824][ T5627] elevator_switch+0x1e8/0x7b0 [ 1065.407105][ T5627] elevator_change+0x2fa/0x480 [ 1065.412402][ T5627] elevator_set_default+0x375/0x440 [ 1065.418115][ T5627] blk_register_queue+0x3f3/0x4e0 [ 1065.423655][ T5627] __add_disk+0x6b8/0xdb0 [ 1065.428500][ T5627] add_disk_fwnode+0x100/0x3a0 [ 1065.433837][ T5627] nbd_dev_add+0x733/0xb60 [ 1065.438794][ T5627] nbd_init+0x168/0x1f0 [ 1065.443592][ T5627] do_one_initcall+0x250/0x870 [ 1065.448884][ T5627] do_initcall_level+0x10a/0x1a0 [ 1065.454431][ T5627] do_initcalls+0x59/0xa0 [ 1065.459570][ T5627] kernel_init_freeable+0x29d/0x3e0 [ 1065.465370][ T5627] kernel_init+0x22/0x1d0 [ 1065.470387][ T5627] ret_from_fork+0x514/0xb70 [ 1065.475539][ T5627] ret_from_fork_asm+0x1a/0x30 [ 1065.480827][ T5627] [ 1065.480827][ T5627] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1065.488725][ T5627] __mutex_lock+0x19d/0x1550 [ 1065.493839][ T5627] elevator_change+0x1af/0x480 [ 1065.499154][ T5627] elevator_set_none+0xb5/0x140 [ 1065.504723][ T5627] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1065.512571][ T5627] nbd_start_device+0x189/0xb30 [ 1065.518047][ T5627] nbd_genl_connect+0x167d/0x1cd0 [ 1065.523599][ T5627] genl_family_rcv_msg_doit+0x233/0x340 [ 1065.529672][ T5627] genl_rcv_msg+0x614/0x7a0 [ 1065.534782][ T5627] netlink_rcv_skb+0x226/0x4a0 [ 1065.540406][ T5627] genl_rcv+0x28/0x40 [ 1065.544933][ T5627] netlink_unicast+0x8ef/0xa80 [ 1065.550534][ T5627] netlink_sendmsg+0x813/0xb40 [ 1065.555911][ T5627] sock_sendmsg_nosec+0x14e/0x190 [ 1065.561463][ T5627] ____sys_sendmsg+0x54e/0x850 [ 1065.566750][ T5627] ___sys_sendmsg+0x2a5/0x360 [ 1065.571945][ T5627] __x64_sys_sendmsg+0x1b1/0x290 [ 1065.577408][ T5627] do_syscall_64+0x166/0x520 [ 1065.582563][ T5627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.588977][ T5627] [ 1065.588977][ T5627] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 1065.597576][ T5627] blk_alloc_queue+0x544/0x690 [ 1065.602894][ T5627] __blk_mq_alloc_disk+0x194/0x390 [ 1065.608532][ T5627] nbd_dev_add+0x494/0xb60 [ 1065.613471][ T5627] nbd_init+0x168/0x1f0 [ 1065.618138][ T5627] do_one_initcall+0x250/0x870 [ 1065.623417][ T5627] do_initcall_level+0x10a/0x1a0 [ 1065.628884][ T5627] do_initcalls+0x59/0xa0 [ 1065.633767][ T5627] kernel_init_freeable+0x29d/0x3e0 [ 1065.639482][ T5627] kernel_init+0x22/0x1d0 [ 1065.644359][ T5627] ret_from_fork+0x514/0xb70 [ 1065.649480][ T5627] ret_from_fork_asm+0x1a/0x30 [ 1065.654940][ T5627] [ 1065.654940][ T5627] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1065.662149][ T5627] fs_reclaim_acquire+0x71/0x100 [ 1065.667607][ T5627] __kmalloc_noprof+0xbc/0x720 [ 1065.672885][ T5627] tls_sw_sendmsg+0x5d6/0x2c00 [ 1065.678168][ T5627] sock_sendmsg_nosec+0x90/0x190 [ 1065.683627][ T5627] sock_sendmsg+0x1ca/0x2d0 [ 1065.688643][ T5627] splice_to_socket+0xb5e/0x12a0 [ 1065.694094][ T5627] direct_splice_actor+0x101/0x160 [ 1065.699716][ T5627] splice_direct_to_actor+0x57b/0xcb0 [ 1065.705599][ T5627] do_splice_direct+0x195/0x290 [ 1065.710962][ T5627] do_sendfile+0x52e/0x7c0 [ 1065.715897][ T5627] __se_sys_sendfile64+0x144/0x1a0 [ 1065.721517][ T5627] do_syscall_64+0x166/0x520 [ 1065.726623][ T5627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.733029][ T5627] [ 1065.733029][ T5627] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 1065.741097][ T5627] __lock_acquire+0x164c/0x2de0 [ 1065.746458][ T5627] lock_acquire+0x115/0x350 [ 1065.751472][ T5627] lock_sock_nested+0x41/0x100 [ 1065.756747][ T5627] inet_shutdown+0x6a/0x390 [ 1065.761764][ T5627] nbd_mark_nsock_dead+0x2cb/0x550 [ 1065.767393][ T5627] recv_work+0x1cee/0x1e10 [ 1065.772327][ T5627] process_scheduled_works+0xc3d/0x1630 [ 1065.778393][ T5627] worker_thread+0xa47/0xfb0 [ 1065.783495][ T5627] kthread+0x38b/0x480 [ 1065.788073][ T5627] ret_from_fork+0x514/0xb70 [ 1065.793193][ T5627] ret_from_fork_asm+0x1a/0x30 [ 1065.798489][ T5627] [ 1065.798489][ T5627] other info that might help us debug this: [ 1065.798489][ T5627] [ 1065.808709][ T5627] Chain exists of: [ 1065.808709][ T5627] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 1065.808709][ T5627] [ 1065.821739][ T5627] Possible unsafe locking scenario: [ 1065.821739][ T5627] [ 1065.829189][ T5627] CPU0 CPU1 [ 1065.834546][ T5627] ---- ---- [ 1065.839899][ T5627] lock(&nsock->tx_lock); [ 1065.844599][ T5627] lock(&cmd->lock); [ 1065.851537][ T5627] lock(&nsock->tx_lock); [ 1065.858474][ T5627] lock(sk_lock-AF_INET6-NBD); [ 1065.863318][ T5627] [ 1065.863318][ T5627] *** DEADLOCK *** [ 1065.863318][ T5627] [ 1065.871452][ T5627] locks held by kworker/u9:4/5627: 3, last CPU#1: [ 1065.877857][ T5627] #0: ffff888028280940 ((wq_completion)nbd6-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1065.889079][ T5627] #1: ffffc9000426fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1065.900820][ T5627] #2: ffff888079ca8668 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 1065.910130][ T5627] [ 1065.910130][ T5627] stack backtrace: [ 1065.916019][ T5627] CPU: 1 UID: 0 PID: 5627 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 1065.925472][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1065.935532][ T5627] Workqueue: nbd6-recv recv_work [ 1065.940477][ T5627] Call Trace: [ 1065.943756][ T5627] [ 1065.946678][ T5627] dump_stack_lvl+0xe8/0x150 [ 1065.951265][ T5627] print_circular_bug+0x2e2/0x300 [ 1065.956287][ T5627] check_noncircular+0x12f/0x150 [ 1065.961222][ T5627] __lock_acquire+0x164c/0x2de0 [ 1065.966068][ T5627] ? do_raw_spin_unlock+0xf5/0x200 [ 1065.971186][ T5627] lock_acquire+0x115/0x350 [ 1065.975838][ T5627] ? inet_shutdown+0x6a/0x390 [ 1065.980534][ T5627] ? __queue_work+0x201/0x10e0 [ 1065.985310][ T5627] lock_sock_nested+0x41/0x100 [ 1065.990074][ T5627] ? inet_shutdown+0x6a/0x390 [ 1065.994752][ T5627] inet_shutdown+0x6a/0x390 [ 1065.999252][ T5627] nbd_mark_nsock_dead+0x2cb/0x550 [ 1066.004454][ T5627] recv_work+0x1cee/0x1e10 [ 1066.008880][ T5627] ? __lock_acquire+0x747/0x2de0 [ 1066.013817][ T5627] ? register_lock_class+0x31/0x2e0 [ 1066.019017][ T5627] ? __lock_acquire+0x747/0x2de0 [ 1066.023967][ T5627] ? trace_hrtimer_start+0x82/0x200 [ 1066.029181][ T5627] ? __pfx_recv_work+0x10/0x10 [ 1066.033949][ T5627] ? do_raw_spin_lock+0x12b/0x2f0 [ 1066.039013][ T5627] ? rcu_is_watching+0x16/0xb0 [ 1066.043791][ T5627] ? process_scheduled_works+0x97a/0x1630 [ 1066.049521][ T5627] process_scheduled_works+0xc3d/0x1630 [ 1066.055169][ T5627] ? __pfx_process_scheduled_works+0x10/0x10 [ 1066.061158][ T5627] ? assign_work+0x3cf/0x5d0 [ 1066.065839][ T5627] worker_thread+0xa47/0xfb0 [ 1066.070442][ T5627] kthread+0x38b/0x480 [ 1066.074503][ T5627] ? __pfx_worker_thread+0x10/0x10 [ 1066.079637][ T5627] ? __pfx_kthread+0x10/0x10 [ 1066.084226][ T5627] ret_from_fork+0x514/0xb70 [ 1066.088824][ T5627] ? __pfx_ret_from_fork+0x10/0x10 [ 1066.093962][ T5627] ? __switch_to+0xc89/0x1420 [ 1066.098645][ T5627] ? __pfx_kthread+0x10/0x10 [ 1066.103227][ T5627] ret_from_fork_asm+0x1a/0x30 [ 1066.108018][ T5627] [ 1068.160387][T27359] IPVS: ip_vs_send_async error -101 [ 1073.350324][T27359] IPVS: ip_vs_send_async error -101 [ 1073.840955][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!