last executing test programs: 1m7.501960161s ago: executing program 3 (id=1774): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x44, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x1, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4009c}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r6) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x2c, r7, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4080) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f00000000c0)=r8) (async) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f00000000c0)=r8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_NUM_TX_QUEUES={0x8}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x600}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000009, 0x3032, 0xffffffffffffffff, 0xc6dd5000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000009, 0x3032, 0xffffffffffffffff, 0xc6dd5000) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x19, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000008b00000000000000ffffffff18110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000000000095000000000000002d0a0600000000002500ffffdf070ae91801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000bc0)='GPL\x00', 0xb, 0x1001, &(0x7f0000000c00)=""/4097, 0x41000, 0x24}, 0x94) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x3, {{@in6=@empty, @in6=@local, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x73}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001}, {}, 0x0, 0x200}, [@tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d3, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3501, 0x2, 0x0, 0x73, 0x8000, 0x4, 0x7}, {{@in=@multicast2, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_xfrm(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x3, {{@in6=@empty, @in6=@local, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x73}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001}, {}, 0x0, 0x200}, [@tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d3, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3501, 0x2, 0x0, 0x73, 0x8000, 0x4, 0x7}, {{@in=@multicast2, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000100)=0xffffffffffffffff, 0x4) (async) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000100)=0xffffffffffffffff, 0x4) ioctl$OCFS2_IOC_UNRESVSP64(r4, 0x4030582b, &(0x7f0000000140)={0x1, 0x1, 0x2, 0x1ff, 0x9, 0x10001}) 1m6.94931565s ago: executing program 3 (id=1780): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000400000004000000010000000000000093c60bce96d82ad0d03e458b047b389df2d7", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @remote}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f00000003c0), &(0x7f0000000400)=@udp=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r1], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00\n', 0x0}, 0x50) 1m6.690136542s ago: executing program 3 (id=1781): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, r1, 0x852dd6c070cd7e4d}, 0x14}, 0x4, 0x700000000000000, 0x0, 0x20004000}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000540)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000580)="0a000300010000", 0x7) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6d}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'sit0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x3, 0x2, &(0x7f0000001c40)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x50300000, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001d80)={@map=0x1, 0x5, 0x1, 0xf, &(0x7f0000001780)=[0x0], 0x1, 0x0, &(0x7f0000001cc0)=[0x0, 0x0], &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d40)=[0x0, 0x0], 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0xd, 0x4, &(0x7f0000001ec0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000001f00)='GPL\x00', 0x2, 0xfd90, &(0x7f0000001f40)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000002040), 0x1f2, 0x10, &(0x7f0000002080), 0xfffffe51}, 0x48) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000020c0), 0x0) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002100)='ns/net\x00') r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002140)=@bpf_lsm={0x1e, 0x3, &(0x7f0000002200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000002240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000002280)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002300)=@bpf_lsm={0x1e, 0x3, &(0x7f00000023c0)=ANY=[], &(0x7f0000002400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000002440)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000024c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000002580)=ANY=[], &(0x7f00000025c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000002600)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001dc0)={r5, r4, 0x25, 0x1, @val=@netkit={@void, @value=r5, @void, @void, r6}}, 0x1c) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000280)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000017c0)=@newqdisc={0x3a8, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfb, {0x60, 0x0, 0x0, r13, {}, {0x4, 0xa}, {0x1, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x9d}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @qdisc_kind_options=@q_red={{0x8}, {0x36c, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x2}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x3}, @TCA_RED_FLAGS={0xc, 0x4, {0xf}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_STAB={0x104, 0x2, "d5c44ccbc70d0b2aa4aaff30755713a27103ba610eb439e0c91c9e5764aeffebc106d70181ddf550fdd28d9112d215167f9e339cfd1e3db2bf4513238dc1c937475b36e6258dc5ad44788fceb8533fcd9435ed7b991ccf244b3f1e6d126db39c663907aba7dfd33cfa01660eb773028d62941654aa4ad28a6a7aa931052efbe6c65c47a6058628df4bebfe234faf8fd49744a0b568f0ddbbb619ce938cf82bb2630c70d17c27ae41de039bb1a49615586cafc3765c57ef7d6e89013041208785f8e949a98ee1f549db2a1032f3a14b5c7a1b28643c23c37d946c56a9185b2a534362327fdb1357b2fe2255f482eb13b0ffe399cc7a25928d7d70c4e51c4137e1"}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x8}}, @TCA_RED_FLAGS={0xc, 0x4, {0x0, 0x1f}}, @TCA_RED_PARMS={0x14, 0x1, {0x3, 0x5, 0xaa7, 0x0, 0x3, 0x11, 0x2}}, @TCA_RED_PARMS={0x14, 0x1, {0x3, 0x2, 0x7359, 0x15, 0x11, 0x17, 0x6}}]}}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 1m4.919339015s ago: executing program 1 (id=1798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000006c0)={0x0, 0x1100000, 0x1800, 0x3}, 0x20) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) close(0x3) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r4, 0x101, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x6f}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f00000003c0), 0x806000) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000640)={0x0, 0x0, 0x4000, 0x9ffffc}) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000680)='dctcp', 0x5) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r8 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8954, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000000400)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x3, 0x0, 0xdad1124f55525050, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x5c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r10}, &(0x7f00000005c0), &(0x7f0000000600)=r9}, 0x20) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES64=r6], 0xfdef) 1m3.825953407s ago: executing program 1 (id=1804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}, @CTA_LABELS_MASK={0x18, 0x17, [0x7, 0x1, 0xffffff7f, 0x5, 0x4]}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x4008890) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xd}, [@jmp={0x5, 0x1, 0xb}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1m3.61914965s ago: executing program 1 (id=1806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000240)=0x2) (async) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000280)) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000080), 0x4) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) 1m1.977734011s ago: executing program 0 (id=1815): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r3, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f00000006c0)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r10) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x3c, r11, 0x109, 0x2000000, 0x25dfdbfc, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xb}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xdcb2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x800, 0x640}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) close(r4) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b40)=ANY=[@ANYBLOB="8c020000100001050000000000000000fc000000000000000000000000000000000000000000000000000000000000000000ecdf00000003020020002b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/569], 0x28c}}, 0x0) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="05200000b718a6c7361b9569792a7c22141e9f513605e874b6df03aa7a51b785c27dc651b10ca33a8cfe26dd0a7be247ccf9b9c5a0de2564381a9995ad", @ANYRES16=r14, @ANYBLOB="01072bbd74000000000005000000089c0bc54775fb7b346655be9bfffc63cd430f3da99bf9d63d5958dd8c0f093329e732dc2975e0e003"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r15) sendmsg$IEEE802154_LIST_PHY(r15, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, r16, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r12, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x84, r16, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "e8ed6bbd6b0f732c4e83e1445061a3b7"}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "ac2d06bc11ac28b12fc386aa0ad271bd25273bdb5b884f92b7e145c444dad57c"}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) 1m1.469086136s ago: executing program 1 (id=1817): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (rerun: 64) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x47}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x892f}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88e5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008001}, 0x20040084) (async, rerun: 64) r2 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64) setsockopt$inet6_buf(r2, 0x29, 0x14, &(0x7f0000000180)="9dd244dea171fab5574cddbb17e38a0efe5f7bb70a5e8927f7032a7dc715769f960d5e2f04d56b533143db26747bceb4218dfd957e7cdadc85d15b6384a8fb11e8693aa8c5e38add9b920e18d1", 0x4d) r3 = socket$kcm(0x29, 0x0, 0x0) (async) r4 = socket$kcm(0x29, 0x5, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2802, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) (async, rerun: 32) r7 = getuid() (rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000001580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001540)={&(0x7f00000003c0)={0x114c, 0x16, 0x1, 0x70bd2a, 0x25dfdbfc, {0x1c}, [@nested={0x1028, 0xe3, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @str=',}{\x00'}, @nested={0x4, 0x2c}, @generic="923c991f2139f27b5e63717f5b167a2542d5868e14eed7eb388621575c1117a6be467bb7fe4c2a6143a9e251cd4020dc4fbe924539f05ce1e888eda6944fe2301a2615253074d7225159c11e12db4197da72c0f7dde2ce1187481481783ef6bd3ab42d95608c62cc6e52753e7fbfcd97484544e72cc33f0bf8ff8ad2e7fe227cad55c0a11e6bab5da86451a229f924c2a3abae8c00b9335ea945d253c3ac9878e771b1489c99464ddeeba29741301b883047badef3a050644502b000524c04f7cdbf33dcffec36ee6cbc0d74947453ca8c8250d41e8e7e01036bacb71cc350e6ef17bffc5f8112584efeac04023ca2c0acd4970eb318b91c03c4e983add45472f0f059441e0b7b83f8c2d9dff0787f1d8bb49a0ace4962b1b1e2316d1fe597a00a912a6a690d2f8233d2438efe61f0890640ea735223858ab57be0caa92ed990c8462a44c6a934d1dc04bfd0600bf5e51b8b3d59fc6e9d04461d9e093be6d6a2d21aa46514a97787cb1c81281403ce859a5b3d6a696ea50d35f6019e2cbff09fd279923146bb5c58e1469c5d17c6a0947763ac0c7ed9838fe7b763b01ee104834ccaa2b1b77e8049d448dbdfb1f2b06ee33aa2f424c30ec21c930d2f95d7ae98630dcd8c395625f86056ea1a3afa11e782aa5bc6eb18bebf2bcd700016f816044df3eee734b6a95773081daa94a6ec5c36474ceef1960dca05d2ec0cc3389d3dd48a3fdb93acf2d4ac2d5c41db9ac7879fd83129483b6285e11e84ea5b0117d29a56923e102c5e03c38e5fa6c9f4a8c158748f4194575f229f41171ad06d28eb3d644d4e2040e80e092c93ee71248356d2c232a46bd233f2718b962549bee78821b4ab5e93eeeafb68b89df920b60b187859a8b853ec95b00dec74de392ba98dcb15133cb693cfe9b71848cede4d9c405e65becc22a29d45e1ceec31acf9f6babb8c88dd8056fbd5e8a8d5768c5f78def50dc28094858f0892e9c9531ea8b0eb2311cf0381868f7c1592d18dee626ef6dda8f5fa5079621ef7ea28d2185d77bf3c424c7932967566247d709af93bbab9affb7feea16814529d465be1562d1ed3cee78fe88738e4ecb6a76a2e3cdfc0ce848f69327ce31037d75d2eae8ddf929447d2b530167f29cf41ee93185eafcba354ea2bb1cc8e2e616e6f467c6a19db97d91770efc2a6afad214c461a56732ed5c0d5720166da5decd3f2b041c3c59773472c0750b0e6552bb44b6b879dc8dc733cbcbe79a8f59f9bde9a25bcdeb85616aaa2c312c6836ec882507a72402ab4b0ceb688655f3b1e856498e2f1fcb8dd648688aa857557747a49a09f4c3ca1de1146f8e6844b1e5a42f286b2115c62014bf99972d62a0b0c5b241411de57ed2d4a47607b39712794c5731630fd4cdf01416f70d93bb6add1446494474098b9f2ee22e94fca53b5255d1e872d8e7cfebf068452ad366d21b2e89b78260dd3069c020e70dcb4ac96fa007fc3d7ff06ea7724dc521ba289a1db718dc27768a99fc7143fa299a049d43e559cb2efaa1174b3199742d2606775e6a26a8c1adb22567612df25056285d071b5800d580952f4b00260ffb005ad58af0a1a2f348bdb8a4d364c7855508b126c374a3835c688b59b76cacefacea506f9632a3e40eeb1877aae8a3ae3586a25a60d0a996b4be06816f2151b04a9a6484a28b2f78653167f0fb027b82d1558a949e605e0c5e80b242a00c6f1567a723519c3fa907fd2c7687a79a4a152c6c2bfbc1a4798f34b09007bf9605a9d32cc41104bddbce50f4be81f5fa62e3cfbde53f2b21351c6f4398f74ad7baac6cf204f8a0d06f4fdbaeef5dcb41446d242bcfc2945d165cc44b683f2bf13dd745e3a3b130f935150c66274e155ccd14c6c1cecbfd35bb69490c6205e04568b1ccb36be3b62d30c4de8e5cb2e6314163173c87bc883e9c66e7009412a44f96f0e8d9a69bd285dea3c94e812c33591c9312ce9be8f866748dec26b6d1e940901a96ccfb5e1ae25dd5193765459ef60f580c65dd46767d271baaa078c1e53c6fb29a6fe1ad2c75a50b3c2be0e3ed6c7871d6a8303351d1a63384919adf356dc2e08ddfcadd5fe31716863b1e79866bc846afe6f12d1f85d1f4c5d8b1d7e251c68b4184931883e6bc20a3375beb149afe8bffc6eebc774e4bfaee1c8294da6e851b4b15253ce3c53b29e039618a0baa5612e12ee7b917d94b8055a1cf040d64e861cfd4ec8574d59e3432332e3ce39208e16e685ce008726c44e9da664b551c5a50d0219ed302468a3f62d49b80f80eea5566f815c1c59ea009bcae7a4d2b2b5c24d9e957b6463fc0fd34177a54338b4d623ba2395693deb35ea427e60379f87ad6cbbcec52f1d48dfb1886132825e37a3a1f2400d0b7e6114876208296df0313255e73c4477d2f4ec4cdd017d9efd78cb5eae7670cf52d5b25a05b76f119ed5788dcac3330d4f4d4fee14d366e43fce327e94f068e41f366637f0184c5d6335b7530f046875fc369e0efde405cc095fffc01e3def3f92d7d60eeb9c8cb1c665b3926545b813796c6a13c561d7d9745e15660c5b9c39d41c189aa928c01966abfcdca147073e8b0d138bccc2976ae577a04cdfbc0ae39fe64c2f4d24addd2e93bdc1e327951add430bd39a86c5c35c7f02a1eb560ba044752e9730bcbd658a2bb57577bf0b6a224de7ba89bfc459e6f88805099bbec036c8c85489c56964561629345df537a5fc8e3cfb4cb75fb60371d41988a78d998bd4dd7077a9c036d9ea536ed7b17b70de8baffd6d2e368c820663a61e6304c76098625d561f2cc1986d8659f91734982d3d114643187aa4a26707a5778852b975982c115a82f2faee40789e4d49d2170afd88faae45723bbe58b67db0e46cd0486df149168a0358930588a6bf3810b799e28b99ccf9da62794e821e16697ad62edca4b42c72552db6a367f362ba309a6a45847c4b91c127d6eb15fb4bb319009bab597116ea41bc864d2bb9961144484e62f180a50cd6f78c1752ba2fcfef0afe9df1ed9bc3d36bacad34b4f43e2548f3f613322e495d770bec59c763f35089fedb5341d779009aa76d158553d2f20c1a190bec866d93a284e52d0fb92cf6beccc1dddaa1b06cb07ca97ed63376d8b2012ecb0bba2fb841257e40c3ef34cdd55adf2679e41201e8424554013b9ac767c46f6ca4d5fb6265766e90417d8e817184622754c5a34f1a2b50d3c3733cb770025549b4728c04513191e26adf5b5550791f85ea02d7b2626df1ae9db9f55b3ec534bacf4a942901d05f63361d2f07628c4b3d91503b0b7838f1dc4de24976ca247dcbb988925794fce921fbe4cb9f50d1d17d759598ee245d8d3e2500b429153639ba57561cb64a1b860e49f78550d7202570dc1c31bd9c5d40a9b8ffe8e3687669b0b64f739d48cac114400f9077f9650c91bd5aee62c42307c8fa0f6b31dc9611671f046ee4e51148b9f5425db592f367495910344ac23542a711374f47d301d79477606774c9307e4b692d3f161c2730c6fbc77895426cdaf4b882fb9ef023429ab039a86be8e1cb4a5d9cfa5bfd308cc4f66a3e60b97c9fa3ee37b4347effc05e740b245a538bff6a5c6b01d54244dfc6c15e33c3dd3b85ffb91b5bcc33db281cf31838643469d097cd00bebcbbd7289110ee7756c16e57b85c4e51c735a09d9180aacadfaee03f9753d53403ec63508e253b7a8d45d574876f45b6e3a94d59cb2bba07d3ad7d130bef096c8571822883d0e15974494fa32ccd82073ceab9acbe3cd6f79337ebe05fc0217abf11451b1ddd29a4a053eb31b577fa402be23ee988dd4e1b1639b0380213ae286bcd88f0837e0a452a6a333d024f0686a604f4e4e7ee65e62bd7d988fcd7e126594571f3c5303a34d3217664323fa752870a133b62f54525efa12ec5a158abd3859ccb7684712a39421355f6509d308f0775173c784b63fee1e59faaaf5c1a2d73003fdc9a002578d5d6fc09d69dd243b3d6710fea80f11674e95c7c48efeee930261302a201051a21a77abdd1d367c726812b43cd660c51dccc30fe9935ebcfc24b97c8f25723f9e40bfeb4030a8f8ca50542ad0501b240cbbfd6b7de66cb9a065cc8d344ce036d69419e2bb0c5e465ab4ba53df7cd640b5b44a8b3da49fc8a6ac935f63d0e78e170cc28c72d41099745e48f11d4a67081399c3c0d2d99429a90fdb4bb5f1e753d4073c7ee5d02c8d73da2074248d99ac08f45f04187f9d5575dc62964c1041f228388178340fcc0c48ed0af21aa14a3d87c9de28ba542d01f4bec16a5f9bde3a8ea13a9f6c0b0c3ddb01cae329688df0e1f545b0fec92fbe521fadc6095897faec0172746bbe6ac620174d8d453fb679a410655477304dde860db07380bb2f88758e0c35034cbeb8cd95469adb2dbaa70020272c41b6ecdc2c5560def3937a56c0b586cd4edd0ea1f4ec10cf53cfd7b7e4c6f0b68106e0c65cfeae5086e6334761e0744d671fac297cee285e5c65d0667a2d31136f9b183a1208273374de644bacdca9c610f289ac3bf0a67c777e7d9588f510cbf1a02760c84a8351e370f20fdc60f10c47d724f2643de5780e61a2549eabd86d2de676f4e48c0ca8a1329330e0adfe91c0e090112421772e7a197fbb3596e68764361777fd6d4ebccfed4b8442b68ce9802a082fc0289d69f8348d9fae19a4bac0a6ed82fab380c31b0a0cd0a7852925d5ff219a1ea16dfc34ffa6fab859aa0241d9d0c06a872689d058e2f3abbb86b87871a5664f274176a2d50d8e82887a664a9e09e7029a4cbed1edd14ec8357f9c3624bfdd538dc93863a9d368752aa021c3108fe5d208d9ea7f5627651544979e106e2b2bf3c41fad0886079a95f7a838dc660e3f2bee1e427e7cb77280f1c90e3096178a9224cc6419e59372187fdc83597faf85d0e56d3591e9ae1be648e050fcaaa8f1b12c6553a20ea50ecbd9dc7ef2b490d56820cb19b4ee9878f8a89e93797c2cc1b99eefdc25878358e53b393c4650a946bdb770eb0f61a796c7f823696b84df9bc6465e5c0726e55f1e16876fc31443a12f9b64536bdf885196da889a8afd24616d2b37b540a4a615d4f69931a57344a7768137ba0c76f1df2349d1ee021de619bd6579413b1a966acd89e4311ca573aa2510919102811f9c2fbd27d66156cbd4f8cd7d76176feeb3341df66e5555d301fcf143d280fba4cf69f79f1be02dd6a00d2f962f1a25dfcb858a991ece5e3cb129b4379058280e7d28923cbb758b1ecbd47278e9702913c792b81e0ab51d7243e00303b007944c6437af4d2b506811a471e1b4b0f579a182e2d6ff7157dd70f5f05f7cec49e55606ef3017338eaede0dc3907f278f9555129629bbfe2e81b64ed9e0d264ba89d330258ef15a2ed00ce5376423f8597cf7309bd8c4250982e5a7e6599841cd0936c1c00f12df46e816b7ef150372b50e34170d7f47b67101f208fd79c3d8f7e3d596c3d3985a12458478c8fdbfb1d37c32377619c146242985e376fc22493e76aed9215a73646b14c533d2c27a99c58010bda5d467e88d5ee9c68879909880144086486d43dc6d86fff1a36aed88c237f65d2913f9e0f5b0ee312723b976780d298b871c33118073c48bd86b2aea6565b69105a2f877497f72216621215ad74177ec0d1244443f64eac5c1b93b6769eafcc18ee7c1003be04df3bd4bdc24172ceec6d77a751fef82f964ba0ffc8572418fec0e8768e3998cee09fbd1d2fda43707d6046f37fc84361c48739644ec5a5e0bfbb002125ac9de55ddda9499c5e20798dd797c29b", @typed={0x8, 0x16b, 0x0, 0x0, @fd=r4}, @typed={0x4, 0x126}, @nested={0x4, 0x7b}, @typed={0x8, 0x5e, 0x0, 0x0, @u32=0x3}]}, @generic="a3fa9732ccaf3c55c29d558297013d5ccefb8ca3688aec5f4cf3715d6695de1b7983e6ef2e5a1c046e1b03ee14d363", @nested={0xd5, 0xfe, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @uid=r6}, @nested={0x4, 0xdf}, @generic="6e7c7058bcc631eaa66b92df3b13e12804b23537af649e6f864417089337e1c342328f1a054ad8", @generic="e3b42ee6eb858b27c64cb5316b80eaa9e2279fd09f679fc4b77565c7096c2439afd2d72b2eb82c7cf8f559f3f939a7bb468ed818e40a875064137f71f9678e742a2e00cb451e5811f57e1ae5db6601d667b8a2142d8ec9d9c7a42108333ab5259c3573ebeb7a0b3a66442323c0abbaed2f3de8cbfb0ababa5b2171522b6e5a5dc0288012eaf66a", @nested={0x4, 0xf9}, @generic="59926d512ccfe09153bb12", @typed={0x8, 0x3c, 0x0, 0x0, @uid=r7}]}, @typed={0x8, 0x146, 0x0, 0x0, @u32=0x2}]}, 0x114c}, 0x1, 0x0, 0x0, 0x801}, 0x8051) (async) pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000001600)=0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000001640)={"0376d58512b6c0d595300df40139ba37", 0x0, 0x0, {0x4, 0x80000000}, {0x48fc, 0xd}, 0x6, [0x80000001, 0x3, 0x7, 0x1, 0x2, 0x4, 0x81, 0x8, 0x3, 0x6, 0x7, 0x5, 0x2, 0x9, 0x1, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f0000001740)={"77edcc9e2f373627f80849209b732a81", r10, r11, {0x436, 0x96}, {0x7, 0x2}, 0xe, [0x6, 0x8, 0x10, 0x8, 0x9, 0xfffffffeffffffff, 0x2, 0xffffffffffffffff, 0xfffffffffffffff7, 0xd, 0xbf, 0x9, 0x200, 0x6, 0x0, 0x4]}) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40086607, &(0x7f0000001840)=0x4) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r9, 0x8983, &(0x7f0000001880)) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), r12) r13 = socket$inet(0x2, 0x1, 0x6c8) pselect6(0x40, &(0x7f0000001900)={0x6, 0x33ed02cf, 0xc, 0x8, 0x2, 0x9, 0x4, 0x164}, &(0x7f0000001940)={0x16a, 0x4, 0x4, 0x0, 0x8, 0x3, 0xffffffffffffffff, 0x4}, &(0x7f0000001980)={0x100000000, 0x40, 0xd0, 0x400, 0x3f6f, 0x101, 0x7, 0x9}, &(0x7f00000019c0)={0x77359400}, &(0x7f0000001a40)={&(0x7f0000001a00)={[0x2]}, 0x8}) (async) ioctl$sock_inet_SIOCGARP(r13, 0x8954, &(0x7f0000001a80)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x8, {0x2, 0x4e21, @empty}, 'ip_vti0\x00'}) (async, rerun: 32) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0xffffffffffff2c50) (rerun: 32) write$tun(r5, &(0x7f0000001b00)={@val={0x0, 0x200}, @void, @llc={@llc={0x0, 0xfc, "18", "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"}}}, 0x1007) sendmsg$NL80211_CMD_NEW_INTERFACE(r12, &(0x7f0000002c80)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002b80)={0xbc, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x77}, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "de989f22557ac20497810515de037439af04391fa600bff4"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "831e8528e3ccd12378c9b7784ef7d3327c340d333203c208"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0bd66a1104636c8b04963e7c17f47c76df218c8080d96fe9"}]]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008814}, 0x24004015) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000002cc0), &(0x7f0000002d00)=0x8) (async, rerun: 64) setsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000002d40)={0x3, 0x6}, 0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x1c, r1, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40050) 1m0.909387165s ago: executing program 0 (id=1820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000007010200000000000000000100000908000540000000020c000640000000d7000000b40900018073797a313d000000f947094a2d8644cf986e221f07f291aba31d829afa38f3bed6dcf7c3da16363e775b7383953ddc0dd81a5c906cc8c2bdca5a2d94c930e65aa36685412724a7da82ab1d61c5daa82de9"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000007010200000000000000000100000908000540000000020c000640000000d7000000b40900018073797a313d000000f947094a2d8644cf986e221f07f291aba31d829afa38f3bed6dcf7c3da16363e775b7383953ddc0dd81a5c906cc8c2bdca5a2d94c930e65aa36685412724a7da82ab1d61c5daa82de9"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x50) (async) 1m0.825816992s ago: executing program 2 (id=1821): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = gettid() sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000a1fb00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="8422040004000600140012800900010076657468000000000400028008001300", @ANYRES32=r1, @ANYBLOB='\b\x00%'], 0x44}}, 0x4008040) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x36c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x34c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe9, 0x4, "e5a269dd5dd3479d49ae8acfeee0c503c11344f98706b10e6c34a56b87e4e7e3c047f976f3502c7acab2b9a4ad67b0a1fda5f115a0be0f7c7f2dccb84a975c2e5bd1d45d0e6106a84adf9487f6cd30d73973c8ab9ec256e5cd475341887289705c6058516cfc43f73cf1d5b82ba0994d9aa59539f525ccd38acd1e4dda95c3dffd9bc682cfdc7f7c9e1bb1b23dcd8ff8327e9668811af9b5d7900ad78872e910a73cfa07034f5ec126401e6b137e66b126b29cca7ceca123814f0e9bf0fb3333a6fd613d31c47286a15187eea0ea6fcdb680cdc0fdb7e6d1b34e910d44b74c078f63f008b8"}, @ETHTOOL_A_BITSET_VALUE={0xf2, 0x4, "198598529229ca343e086d098dabe34e26b0f9c7681280f96764b912fd5d015bbe4b29097cdea48d7e90b33ebc8e3e67622c2df8824d1467cf02123782454fa592025aa64d07810bf092ab0ef0bf78a96e7fc07a4a984dbce7e77ded270acca1f4a419f9c2c1bad7a7c477d1c297844e01d503d051f5862a9ebc38556ef45a0ebedbcc4b3b89e080d207301d00e9e523aaf1d2378338b0c3e41b7bf8f012a8902543676ebe44e9b75350d11fd95870c834fe6dc2a2f821a8593b6795263eeee8e8b95f2e99598e71d106e562d66c72558434c58fa8fb32c6f0b9e87a1c508cef024c2a2a6bf2fb4f9f252544c72c"}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '},\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-5\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#+\'-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^)%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vcan0\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vcan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}, {0x4}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf78}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) socket$inet6(0xa, 0x80e, 0xd3) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r3, @ANYBLOB="000427bd7000fddbdf2505000000080003000200000005000500080000004800068008000600000000000600010008000000060005004e21000008000300ac14143d08000300e000000214000400fe88000000000000000000000000010108000300e000000208000400ffffff7f0500050040000000080003000200000024000680080006001800000008000700c8a359d984806ada1c54a5cc0981c4dcf08d11472cc8f0490f", @ANYRES32=r4, @ANYBLOB="08000300ac14142f08000300ac14141a080004007a4e0000"], 0xb0}, 0x1, 0x0, 0x0, 0x4814}, 0x48810) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000040), 0x4) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000180)=@ethtool_coalesce={0xf, 0x2, 0x5a6, 0x400, 0x5, 0x10001, 0x2, 0x0, 0x8, 0x38, 0x1ff, 0x5, 0xfffffffd, 0x8, 0x2, 0xb, 0x81, 0x4, 0xfffff20f, 0x1, 0x3, 0x73, 0x9}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f00000002c0)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) 1m0.682606286s ago: executing program 0 (id=1822): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000047c0)=@nat={'nat\x00', 0x19, 0x3, 0xcd0, [0x200000003980, 0x0, 0x0, 0x2000000039b0, 0x200000004548], 0x0, 0x0, &(0x7f0000003980)=ANY=[@ANYBLOB="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"]}, 0xd48) 1m0.340259761s ago: executing program 1 (id=1823): syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x0, 0xff}]}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xd6, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20040000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xa, 0x474}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100099e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x40}}, 0x20000000) r4 = socket(0x23, 0xa, 0x7155) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r7], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000600)={@remote, 0x0}, &(0x7f0000000640)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000780)={'batadv_slave_1\x00', 0x0}) r13 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000000800), 0x56) sendmsg$kcm(r13, &(0x7f0000000840)={&(0x7f0000000880)=@xdp={0x2c, 0x0, r14, 0x3e}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000cc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000980)=ANY=[@ANYBLOB="e4020000", @ANYRES16=0x0, @ANYBLOB="080027bd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="080007000000000008000100", @ANYRES32=r8, @ANYBLOB="3c01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=r9, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="38000100240001006d636173745f72656a6f69000000000000000000000000000500030003000000080004000600000008000100", @ANYRES32=r11, @ANYBLOB="38010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400050000003c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000090004006861736800000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004007f00000008000600", @ANYRES32=r14, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB], 0x2e4}, 0x1, 0x0, 0x0, 0x48c5}, 0x8000) shutdown(r5, 0x0) recvmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r15, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17], 0x90}}, 0x0) 1m0.173930005s ago: executing program 0 (id=1824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002580)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0x9}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88f5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) (async) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, &(0x7f0000002f40)={&(0x7f0000002680)=0x7fff, 0xffffd74b, &(0x7f0000002840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000002f00)}) (async) socket(0x10, 0x3, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000025c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002700)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abf7001fddbdf251400000018000180140002006e657464657673696d30000000000000050019000100000008001200f3ffffff080011000004000008001000ec0e0000080014003d000000c17c3e9503b9c62a863440f8ca4a53cb0d2d747d5dc86531ebff98ea1e9d8a0befa227bbb72b27a0c889429a0d18bf66bb476c68b19e1daafa775b817e351f3d6f3234c5625335066417ddc447024eb0bc9b52045bd894d5419573b9b1f4b0d7895cf9f88baeeee84be85558271fd316d6d2658eb105538e7ce2b0aeb3de2f015f3472a9bf384edb3be0281b944134e8b26dbb52c48835031403fa29e1a77cc59675357cab530784d6df75a90b2ac133a7548a041d08dad651bcb07c1a78bf2d95fde15a1541dacf"], 0x54}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) (async) socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000300)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) (async) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000002300)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000002340)=0x10, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000002380)=0x10, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002400)={'veth0_to_bond\x00', 0x0}) bind$xdp(r6, &(0x7f0000002440)={0x2c, 0x2, r8, 0x0, 0x0}, 0x10) (async) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r6, 0x80000000) (async) pselect6(0x40, &(0x7f0000002480)={0x8, 0x8001, 0x3, 0x300, 0x0, 0x0, 0x9c28}, 0x0, &(0x7f00000024c0)={0x3ff, 0x4000000000002, 0x8000000000000, 0x9, 0x0, 0xfffffffffffffffe, 0x7, 0x9}, 0x0, 0x0) (async) bind$rds(0xffffffffffffffff, &(0x7f0000002500)={0x2, 0x3, @loopback}, 0x10) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r3, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x1}, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x8}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'gre0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40090}, 0x20000005) (async) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03031b003000320006006300000e000000ff00000000000000000000ffffac141417ff02"], 0x76) 1m0.135640893s ago: executing program 2 (id=1825): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 64) r0 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) bind$vsock_stream(r0, &(0x7f0000000140), 0x10) (async, rerun: 32) listen(r0, 0x0) (rerun: 32) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)='?', 0x30004}], 0x2) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[], 0x48) (async, rerun: 64) pipe(&(0x7f0000001440)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001480)={r2, &(0x7f00000014c0), &(0x7f0000001500)=@udp=r3, 0x2}, 0x20) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001540)={&(0x7f0000000240)="0b2a20114e735e0fed0b4e34b295e5570a5fd998d1b285e6c0537360ce6affac0b309c78492839f4ad853e9c9bd37ea0bb8aad8b5d9bdcfe46845f1c3144dfff2e40cb3b12380a30f5064b5ffe58a7b67bb46da63d99ceca941dd2c7700b45bac0171da87caf424691a2c3c501", &(0x7f0000000380)=""/4096, &(0x7f0000001380), &(0x7f00000013c0)="6807bf3ad8e92d659445c55e2ab31a", 0x5, r3, 0x4}, 0x38) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x1f, 0x11, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001740)={r5}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001780)={r5}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) 59.304123662s ago: executing program 0 (id=1826): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="33fe0000180091"], 0xfe33) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000a0044000000080000000100000080000016", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r5, 0x215eb000) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r7, &(0x7f0000000380)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x220080c1, &(0x7f00000003c0)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet6(r7, &(0x7f0000000400)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0x406f413, 0x0) tee(0xffffffffffffffff, r4, 0xffffffffffffffc9, 0x7) 59.049590338s ago: executing program 2 (id=1827): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="620ad0ff45002c00620ad4ff00000000620ad8ff40060000620adcff7f000001620ae0ff7f000001620ae4ff12345678620ae8ff15223344620aecff00000000620af0ff60021000620af4ff00000000620af8ff1c0405b4620afcff00000000bfa100000000000007010000d0ffffffbfa200000000000007020000e4ffffffb70300001800000085000000cc000000b70000000200000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0b0400000000000000000200000060000480240001800b000100736f636b65740000140002800800024000000003080001400000000228000180080001006e6174001c000280080002400000000208000140000000010800034000000003100001800900010068617368000000000900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000003c0)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000400)={0xa, 0xe22}, 0x1c) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x82, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x32, 0x0, &(0x7f0000000740)="e51b98b50b3b3b515a254123ba43652abdfacc1929ea04908ebab4007f01cb7034f367884992e4ff150ded6ba38dc4ba36dd", 0x1, 0x0, 0xffffffff}, 0x50) connect$inet6(r3, &(0x7f0000000780)={0xa, 0x4ea3, 0xe3, @mcast2, 0x9}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000d00)=ANY=[@ANYBLOB="0000000000000200"], 0x10) ioctl$XFS_IOC_FSGEOMETRY(r5, 0x8100587e, &(0x7f0000000d40)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x4c010) recvmmsg(r6, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000001080)=""/153, 0x99}, {&(0x7f0000001140)=""/4140, 0x102c}, {&(0x7f0000002180)=""/185, 0xb9}, {&(0x7f0000002240)=""/122, 0x7a}, {&(0x7f00000022c0)=""/4107, 0x100b}, {&(0x7f0000003300)=""/80, 0x50}], 0x6}, 0x401}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x4, 0x40002100, 0x0) sendmsg(r3, &(0x7f0000003380)={0x0, 0x953a, &(0x7f00000033c0)=[{&(0x7f0000003400)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000003440), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000003480)={0x0, 0x0, &(0x7f00000034c0)={&(0x7f0000003500)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000200012800900fcee5c5c00fe5d8d0100736974001400028008000300ffff"], 0x40}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000035c0)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000183a00fe8000000054389c00000000000000000000bbff0200000000000000f800000000000184009078000e0300ff010000000000000000000000000001"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x22, 0x0, &(0x7f0000000680)="00000000000100000000000208004500002800000000400600007f0000017f000001", 0x0, 0x4d08d857, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x528, @mcast1, 0x4}}, 0x1000, 0x2}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000140)={r9, 0x1}, 0x8) 58.684287962s ago: executing program 3 (id=1828): mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/104, 0x68}], 0x2, &(0x7f00000001c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x10001, @mcast2, 0x3}, 0x1c) 57.881658501s ago: executing program 4 (id=1831): syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000840)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6009000000742c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000f60000000080000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b0000000907800001312a2dbbe4b9d3310f52fe726f72f184a29a6600d368301eb675f161dfc3803030b01040205260000e0ae0000000500000003fffbfff7000000060000000200000008000000030000000e03030602020000131214ecd03146c92d8cac62cdc57b53d19100"], 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$int_in(r1, 0x5452, &(0x7f0000000400)=0xffffffffffffffff) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000440)={0xf0000003}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0700000004000000040000004804000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000000000000000000000000000ead9b4c911ba7c3b32f0b15080ba18676d3e319950db31090042009873a2dc0d1dccb3dd824e22b5115bab09f4d3dde096a07b28a61d6f6432ad9ae76d07625f722a24205379315c2ddf8f502d"], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r5, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) openat$cgroup_procs(r4, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000900)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x220, 0x2f0, 0xfeffffff, 0xf8, 0x2f0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x6}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000dc0)={'batadv0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="4800000010000104feffffff0002000000000000", @ANYRES32=0x0, @ANYBLOB="270201000000000008000a00", @ANYRES32=r8, @ANYBLOB="200012800e0001006970366772657461700000000c00028008000100", @ANYRES64=r9], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmmsg$inet(r4, &(0x7f0000000f00)=[{{&(0x7f0000000f40)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000fc0)="d2a7b3", 0x3}, {&(0x7f0000001000)="e06bd3f745", 0xfcfd}, {&(0x7f0000001040)="86e9a0d8", 0x4}, {&(0x7f0000001080)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000010c0)={'sit0\x00', 0x0}) 57.719033975s ago: executing program 3 (id=1832): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000fffff9000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000400000000000000000000000000000000000061aff3a6da12a04900"/144]}, 0x108) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={0x1c, 0x26, 0x301, 0x270bd1d, 0x25dfdbf4, {0x20}, [@typed={0x5, 0x167, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x14, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8af}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0x16, 0x0, &(0x7f0000000200)="c1dfb080cd21d308098e000081007e2288a8849088a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0xa, 0x3, 0x87) r7 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'sit0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000540)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000580)=ANY=[@ANYBLOB='a\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) write$cgroup_devices(r10, &(0x7f00000005c0)=ANY=[@ANYBLOB="62a02a3a3409776d0a89"], 0xa) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000600)={@local, 0x40, r8}) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fddbdf250a7800fe", @ANYRES32=r8, @ANYBLOB="0800080020e6000014000200fe8000000000000000000000000000aa"], 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1a, 0x4, &(0x7f0000000840)=ANY=[@ANYRESHEX=r7], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x28470ab90d7e54e6, 0x40, '\x00', 0x0, @fallback=0x23, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000009c0)=@newlink={0x84, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188, 0x10000}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x84, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x84}}, 0x24040001) sendmsg$nl_generic(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="38000000410007800c000180060006008848"], 0x38}, 0x1, 0x0, 0x0, 0x20004054}, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000140)={0x0, 0xfffffee4, &(0x7f00000007c0)={&(0x7f0000000800)={0x18, 0x1418, 0x1, 0x70bd25, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xa010}, 0x4000) 57.601522254s ago: executing program 3 (id=1833): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000004080101001600000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000016000000001e00007f"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f00000000c0), 0x0}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="5401000010000100000000000000000000007f0000010048ff0000e28a00000000000000000000000000020000000000000000000000000000000000000000007b0d385304a798b026195c63dbabdeaf2a71891598fa521edc92acfec99cc592873d02d121bfd4f9f096933feb601da86c04021906e2ac9374ca6f0c838c342fe003e0500abfb1e2fc0d0cc0a406fcf8562ffe7cfbdb50a9a495d3732f0ab882c3d011fa9c04c04f386f060cbebb0f8dc9a5a268d3d0cf1ff83ec7c320ac4fa356885e0244d6426c238c6261365a6dc6299f95", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/268, @ANYRES32=r5], 0x154}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000ac0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000b00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x80000, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) unshare(0x6a040000) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r10, 0x8982, &(0x7f0000000540)={0x8, 'veth0_to_bridge\x00', {'veth0_vlan\x00'}, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r10, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8800010}, 0xc, &(0x7f0000000840)={&(0x7f0000000940)={0x158, r6, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000002c0)=0x8, 0x4) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000300)=0x800001, 0x4) 57.532399415s ago: executing program 2 (id=1834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000c00000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 57.506241586s ago: executing program 4 (id=1835): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, 0x0) (async) syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @loopback, {[@lsrr={0x83, 0x3}, @ssrr={0x89, 0x3, 0x9e}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@multicast1}, {@remote}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private}]}]}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4b}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 57.361916149s ago: executing program 4 (id=1836): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000100)=0x97, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @mcast2}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005180)=""/30, 0x1e}, 0xe}], 0x1, 0x40002062, 0x0) 57.337036513s ago: executing program 2 (id=1837): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000480), 0x4) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000001500)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000001540), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000002640)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB="010028bd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000140008006d6163736563300000000000000000000c001000ffffffffffffffff"], 0x54}}, 0xaf6183dbf2aa0e2b) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000004c0)=0x2, 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) writev(r1, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000540)="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", 0xde9}], 0x3) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001340)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x3, 0x0, 0x0, &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r5 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000080)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000}, 0x5a, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x51) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x8, &(0x7f0000000100)=0xffffffffffffffff, 0x57) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x12) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe000001000000001400120002"], 0x30}}, 0x0) 57.267627983s ago: executing program 4 (id=1838): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000000a0000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x5}, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000004000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x7, 0x0, 0x100000000}, 0x9, 0x40000000, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x2040}, 0x50) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000) (async) sendmsg$nl_xfrm(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$rxrpc(0x21, 0x2, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f0000000b40)='\x00\xae>\xb7Cx\x837S\xb4B\x1b>\xa0\xcb\x01\xd2\x99\xf5u\x05+\xc8\xcc~\x15z\x9eA\xc7UZ\x95\"\x81\xcd\x16\xdc\xb8\n\xc1\xceY\xa7\x80A\xee\x8a\x81\xec\xc6!\x7f\xf7\x11t\xd7\x83K\xa6\x8a;\xd6\x98q\xf3\x12D\xe1\xa9\x16\xe8\xeeo\x15}\xd2V\xe8\xa91\xa8\x9f \t6\x87L\x82\xc2E\x83poM\x8d\xf8$z\x13\xaf\xac\xe4y\x97\xeex\xd8\xfa\x86\xda\xd2\x04\xf5\xc2\x83\x96{!\x06\x12\x16\xa2 \x01\x995V\x8e\x99\xabG\xbfZ]\x05kW\aS\xc0\x95\xc4\xddFR&\xe8~\x91\xc3\f1R\x7f\x81?V\xd3^\x98\xdfH`B-9I\xee\x15\b:mm\xb4\x88\x17\x15\x12h\xa7\t\x16\xdfE\xfc\x91\xb0\x19\x0e\xb7\xaf\xd3UZ8\xf7@K\\\x00\x00\x00\x00\x00\x00\x00', 0xfeb3) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)={0x2c, r8, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x2c}}, 0x80) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newsa={0x138, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0x3, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x70bd27, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x20000000) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc000000130001040000000000000000000000000000000000000000000000010000000000000000000000000000000112341234000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffffffffffffffffff07000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff1970000000000000000000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000001000004d2320000000a000000000000000000000000000000000000010000000000000000000002000000000000000000"], 0xfc}}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000640)={0xa, 0x1234, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c0005"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r11, @ANYBLOB="0000000002000000b703000008000000850000006900000095"], &(0x7f0000000940)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x5}, 0x94) 56.533460185s ago: executing program 4 (id=1839): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x10}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001400)=""/4100, 0x1004}], 0x1}, 0x4000011) 56.010951098s ago: executing program 2 (id=1840): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffe) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b705000000000000611030000000895f51638ce847cf5f00001fa00000000000"], &(0x7f0000000140)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000180)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x1f3, 0x10, &(0x7f0000000280), 0xfffffffffffffc79}, 0x2a) listen(r1, 0x402) syz_emit_ethernet(0x23a, &(0x7f0000000340)={@local, @empty, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x200, 0x6, 0xff, @local, @local, {[@hopopts={0x3c, 0x0, '\x00', [@ra={0x5, 0x2, 0xfffc}]}, @fragment={0x87, 0x0, 0xf, 0x0, 0x0, 0x9, 0x67}, @hopopts={0x87, 0x0, '\x00', [@ra={0x5, 0x2, 0x1}]}, @routing={0x2c, 0xe, 0x0, 0x4, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @remote, @remote]}, @fragment={0x0, 0x0, 0x5, 0x1, 0x0, 0x14, 0x66}, @hopopts={0x0, 0xe, '\x00', [@generic={0xc0, 0x11, "0262c9dd55ec6ebf2d5cbfcf899a5591e5"}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x40, {0x3, 0xe, 0x40, 0x5, [0x3, 0x6, 0x800, 0x1, 0xdff, 0x2, 0x1c]}}, @jumbo, @pad1]}, @srh={0x87, 0x4, 0x4, 0x2, 0x80, 0x8, 0x1ffc, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}, @srh={0xc6, 0x10, 0x4, 0x8, 0x3, 0x10, 0xcc, [@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private2, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast2, @empty]}], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x12, "04000000000000000000000000df0000"}]}}}}}}}}, 0x0) 55.947695845s ago: executing program 4 (id=1841): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0, 0x3e}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8}]}}}, {0x44, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x83d}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xfff}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_TYPE={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x11c}}, 0x0) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffa}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x11e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x30}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f00000015c0)={0x2, 0x4d2, @remote}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001600), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001640)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)={0x1c, r6, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24044080) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r6, @ANYBLOB="000229bd7000fddbdf250a000000"], 0x14}}, 0x4040000) socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000001800)={'veth0_to_bond\x00', &(0x7f0000001840)=@ethtool_gstrings={0x1b, 0x9}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000001880)={{0x84, @private=0xa010101, 0x4e24, 0x3, 'lc\x00', 0x39ffc08b9a63492e, 0x8, 0x77}, {@private=0xa010102, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) 55.734443211s ago: executing program 0 (id=1842): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x304, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2d8, 0x3, 0x0, 0x1, [{0x2d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2a4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5b, 0x1, "8359fa132e64f10d622d383f5ebb5135951c02f82fc04e617897afd48db051df750a8104ede94c45f815ab9a86a3eff59fb546153d14077450ef9059ff5cfaff4a23cfa98b461350320aea34c4cc432a37cf3b85bcff41"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "165c378f8a93fde7de6d4c635b5cf21ee34cd77a4ec0877185a59a78c5284279e4f2ed5027136ce9c7cc484302b8631221ed2289b08bf5e345474c95501561e788135dfe6166c2f368e3fa27bd9567229628e558d4588adec211a38cd2c9c12667496f33db7966dcbcd0dde93ea0fb1fddf9d4c4047f82"}, @NFTA_DATA_VALUE={0x35, 0x1, "d3496a941929c8e7262f000c20000482425290aacf24d2ee8f20b08150fb190b96033a24af7a225bc26955d68533601a5a"}, @NFTA_DATA_VERDICT={0x6, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "dc28f4b6652fb088c68673a464a9c9c8f02311436523f674dd3f7fdbd89d52905aa9b14293e16aed42d37a28bb6cab6e5e9f16476244a08093fc673e0800e2d7eab9ca4663f8254d36dc6a8cce845cb7e36bbeb753232cebc359930f78a4e1ad4d28171f0f1bb95c53adb43b8b4ae17a314f32c32d3a76099787b52fcb5a58c2aec752da2de2acf141ac2cd97fa5fe094886c28257eaa3925d0041ff2a5fcbe77dedbe8262e19ab1463f873d420e9308a7465df8ad69be98c37b58c823"}, @NFTA_DATA_VALUE={0x7c, 0x1, "4fcef62e0c28e37a2e439d3d6112a62c7cbe860c58c2acfc8321f970920af0e20f53ef4d1c15db88557192c06535c881e7552d6bb6d0713293f22ce0dc7817235c4d893c506e5081d59ee39687d00b8ce6c3c85ce9c82542c5daf9c6cbc120e460a5debba5486bf0d0ba4ea8d3954793fe888bf71588c976"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x388}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x2, '\x00', r2, r0, 0x4, 0x5, 0x5}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000052ea063929a80c2f4863438de4efb9af00"/28], 0x48) 55.7338877s ago: executing program 1 (id=1843): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_STATUS={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x24}}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x18, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0x4, 0x10}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80007}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x1001, &(0x7f0000001000)=""/4097, 0x41100, 0x2d}, 0x94) 0s ago: executing program 32 (id=1833): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000004080101001600000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000016000000001e00007f"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f00000000c0), 0x0}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="5401000010000100000000000000000000007f0000010048ff0000e28a00000000000000000000000000020000000000000000000000000000000000000000007b0d385304a798b026195c63dbabdeaf2a71891598fa521edc92acfec99cc592873d02d121bfd4f9f096933feb601da86c04021906e2ac9374ca6f0c838c342fe003e0500abfb1e2fc0d0cc0a406fcf8562ffe7cfbdb50a9a495d3732f0ab882c3d011fa9c04c04f386f060cbebb0f8dc9a5a268d3d0cf1ff83ec7c320ac4fa356885e0244d6426c238c6261365a6dc6299f95", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/268, @ANYRES32=r5], 0x154}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000ac0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000b00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x80000, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) unshare(0x6a040000) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r10, 0x8982, &(0x7f0000000540)={0x8, 'veth0_to_bridge\x00', {'veth0_vlan\x00'}, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r10, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8800010}, 0xc, &(0x7f0000000840)={&(0x7f0000000940)={0x158, r6, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000002c0)=0x8, 0x4) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000300)=0x800001, 0x4) kernel console output (not intermixed with test programs): 9667][ T8578] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.279710][ T8578] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.279742][ T8578] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.279774][ T8578] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.415460][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'. [ 179.478468][ T9750] netlink: 60 bytes leftover after parsing attributes in process `syz.4.921'. [ 179.629260][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 180.009728][ T9783] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 180.010813][ T9783] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 180.294921][ T9804] FAULT_INJECTION: forcing a failure. [ 180.294921][ T9804] name failslab, interval 1, probability 0, space 0, times 0 [ 180.294953][ T9804] CPU: 0 UID: 0 PID: 9804 Comm: syz.0.936 Not tainted syzkaller #0 PREEMPT(full) [ 180.294972][ T9804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 180.294982][ T9804] Call Trace: [ 180.294989][ T9804] [ 180.294997][ T9804] dump_stack_lvl+0xe8/0x150 [ 180.295029][ T9804] should_fail_ex+0x410/0x560 [ 180.295061][ T9804] should_failslab+0xa8/0x100 [ 180.295089][ T9804] __kvmalloc_node_noprof+0x171/0x820 [ 180.295117][ T9804] ? bpf_check_cfg+0x13f/0x3840 [ 180.295137][ T9804] ? bpf_check_cfg+0x13f/0x3840 [ 180.295161][ T9804] bpf_check_cfg+0x13f/0x3840 [ 180.295201][ T9804] ? kasan_quarantine_put+0xbb/0x1f0 [ 180.295222][ T9804] ? lockdep_hardirqs_on+0x7b/0x110 [ 180.295244][ T9804] ? __pfx_bpf_check_cfg+0x10/0x10 [ 180.295262][ T9804] ? bpf_prog_calc_tag+0x310/0x370 [ 180.295285][ T9804] ? vfree+0x426/0x490 [ 180.295306][ T9804] ? bpf_prog_calc_tag+0x310/0x370 [ 180.295334][ T9804] ? check_and_resolve_insns+0x1d54/0x21d0 [ 180.295366][ T9804] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 180.295394][ T9804] ? add_kfuncs+0x251/0x2e0 [ 180.295420][ T9804] bpf_check+0x25fb/0x2ef0 [ 180.295460][ T9804] ? __pfx_bpf_check+0x10/0x10 [ 180.295491][ T9804] ? bpf_obj_name_cpy+0x194/0x1e0 [ 180.295513][ T9804] bpf_prog_load+0x14d1/0x1c20 [ 180.295548][ T9804] ? __pfx_bpf_prog_load+0x10/0x10 [ 180.295599][ T9804] __sys_bpf+0xd0d/0xd90 [ 180.295630][ T9804] ? __pfx___sys_bpf+0x10/0x10 [ 180.295667][ T9804] ? __fget_files+0x2a/0x420 [ 180.295704][ T9804] ? ksys_write+0x242/0x270 [ 180.295727][ T9804] ? __pfx_ksys_write+0x10/0x10 [ 180.295753][ T9804] __x64_sys_bpf+0xba/0xd0 [ 180.295777][ T9804] do_syscall_64+0x166/0x520 [ 180.295795][ T9804] ? trace_irq_disable+0x3b/0x140 [ 180.295815][ T9804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.295833][ T9804] ? clear_bhb_loop+0x70/0xc0 [ 180.295855][ T9804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.295873][ T9804] RIP: 0033:0x7fe840b9f559 [ 180.295890][ T9804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.295903][ T9804] RSP: 002b:00007fe8419b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.295924][ T9804] RAX: ffffffffffffffda RBX: 00007fe840e25fa0 RCX: 00007fe840b9f559 [ 180.295937][ T9804] RDX: 0000000000000023 RSI: 000020000000e000 RDI: 0000000000000005 [ 180.295948][ T9804] RBP: 00007fe8419b0090 R08: 0000000000000000 R09: 0000000000000000 [ 180.295959][ T9804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.295970][ T9804] R13: 00007fe840e26038 R14: 00007fe840e25fa0 R15: 00007fffd4afbdc8 [ 180.296000][ T9804] [ 180.503946][ T9810] sctp: [Deprecated]: syz.2.937 (pid 9810) Use of int in max_burst socket option. [ 180.503946][ T9810] Use struct sctp_assoc_value instead [ 180.510733][ T9809] netlink: 'syz.0.938': attribute type 1 has an invalid length. [ 180.716725][ T9825] 8021q: adding VLAN 0 to HW filter on device bond6 [ 180.808373][ T9809] 8021q: adding VLAN 0 to HW filter on device bond6 [ 180.843161][ T9809] bond6: (slave geneve2): making interface the new active one [ 180.882626][ T9809] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 180.891102][ T8573] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 181.019168][ T8578] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 181.019403][ T8578] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 181.021201][ T8578] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 181.218360][ T9853] netlink: 'syz.1.946': attribute type 1 has an invalid length. [ 181.357073][ T9883] ip_tables: iptables: counters copy to user failed while replacing table [ 181.685582][ T9938] netlink: 'syz.0.953': attribute type 4 has an invalid length. [ 181.706136][ T9934] ipt_ECN: cannot use operation on non-tcp rule [ 182.241264][ T9994] netlink: 'syz.2.960': attribute type 1 has an invalid length. [ 182.766515][ T9998] bridge3: entered promiscuous mode [ 182.804299][T10016] netlink: 'syz.3.970': attribute type 1 has an invalid length. [ 184.985751][T10015] tipc: Started in network mode [ 184.985811][T10015] tipc: Node identity 2a2aae872937, cluster identity 4711 [ 185.009260][T10015] tipc: Enabled bearer , priority 0 [ 185.063223][T10017] bond5: (slave geneve3): making interface the new active one [ 185.063895][T10017] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 185.106698][T10011] tipc: Disabling bearer [ 185.155435][ T8574] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 185.155676][ T8574] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 185.155710][ T8574] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 185.155741][ T8574] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 185.224309][T10045] __nla_validate_parse: 18 callbacks suppressed [ 185.224330][T10045] netlink: 20 bytes leftover after parsing attributes in process `syz.2.974'. [ 185.394206][T10059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.974'. [ 185.394230][T10059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.974'. [ 185.523895][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.974'. [ 185.624059][T10066] ip_tables: iptables: counters copy to user failed while replacing table [ 185.667016][T10066] syzkaller1: entered promiscuous mode [ 185.667039][T10066] syzkaller1: entered allmulticast mode [ 185.859678][T10065] veth1_macvtap: left promiscuous mode [ 185.983768][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 186.185037][T10096] netlink: 'syz.0.986': attribute type 4 has an invalid length. [ 186.185059][T10096] netlink: 5620 bytes leftover after parsing attributes in process `syz.0.986'. [ 186.513840][T10115] tipc: Enabling of bearer rejected, failed to enable media [ 186.535294][T10118] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 186.550858][T10118] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 186.706041][T10122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.992'. [ 186.857123][T10125] netlink: 'syz.3.991': attribute type 1 has an invalid length. [ 186.857146][T10125] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.991'. [ 186.857722][T10125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.991'. [ 187.233179][T10149] macsec2: entered allmulticast mode [ 187.233204][T10149] veth1_macvtap: entered allmulticast mode [ 187.339460][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'. [ 187.427484][T10156] veth1_macvtap (unregistering): left allmulticast mode [ 187.878659][ T5291] veth1_macvtap: entered promiscuous mode [ 187.923135][T10172] tipc: Failed to obtain node identity [ 187.923157][T10172] tipc: Enabling of bearer rejected, failed to enable media [ 188.177241][T10179] syzkaller0: entered promiscuous mode [ 188.177265][T10179] syzkaller0: entered allmulticast mode [ 189.210978][ T148] IPVS: starting estimator thread 0... [ 189.299129][T10255] IPVS: using max 27 ests per chain, 64800 per kthread [ 190.197057][T10300] Cannot find add_set index 2 as target [ 190.266654][T10304] netlink: 'syz.0.1027': attribute type 1 has an invalid length. [ 190.396099][T10304] 8021q: adding VLAN 0 to HW filter on device bond7 [ 190.397037][T10309] veth0_virt_wifi: entered promiscuous mode [ 190.427509][T10304] __nla_validate_parse: 1 callbacks suppressed [ 190.427528][T10304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1027'. [ 190.477420][T10309] bond7: (slave veth0_virt_wifi): making interface the new active one [ 190.508868][T10309] bond7: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 190.538735][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 190.549691][T10304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1027'. [ 190.839136][T10304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.866063][T10304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.961955][T10318] vlan3: entered promiscuous mode [ 190.961970][T10318] hsr0: entered promiscuous mode [ 190.962215][T10318] vlan3: entered allmulticast mode [ 190.962223][T10318] hsr0: entered allmulticast mode [ 190.962233][T10318] hsr_slave_0: entered allmulticast mode [ 190.962240][T10318] hsr_slave_1: entered allmulticast mode [ 191.007102][T10054] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 191.027577][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'. [ 191.069952][T10318] hsr_slave_0: left promiscuous mode [ 191.072219][T10318] hsr_slave_1: left promiscuous mode [ 191.291913][T10346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1033'. [ 191.308232][T10344] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 191.311642][ T948] team_slave_0: entered promiscuous mode [ 191.311675][ T948] team_slave_1: entered promiscuous mode [ 193.388543][T10316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.786248][T10374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1042'. [ 193.813513][T10379] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1043'. [ 193.813539][T10379] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1043'. [ 193.813603][T10379] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1043'. [ 193.958052][T10384] bridge0: entered allmulticast mode [ 194.026544][T10384] bridge_slave_1: left allmulticast mode [ 194.026604][T10384] bridge_slave_1: left promiscuous mode [ 194.027703][T10384] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.054613][T10384] bridge_slave_0: left allmulticast mode [ 194.054639][T10384] bridge_slave_0: left promiscuous mode [ 194.054833][T10384] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.201480][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.201534][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.213307][T10386] netlink: 'syz.3.1046': attribute type 1 has an invalid length. [ 194.213328][T10386] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1046'. [ 194.213360][T10386] NCSI netlink: No device for ifindex 0 [ 194.513164][T10410] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 194.686955][T10425] netlink: 'syz.2.1055': attribute type 2 has an invalid length. [ 194.718708][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.733102][T10427] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 194.768067][T10423] syzkaller0: entered promiscuous mode [ 194.768089][T10423] syzkaller0: entered allmulticast mode [ 194.937462][T10437] ip_tables: iptables: counters copy to user failed while replacing table [ 195.145985][T10446] nbd: socks must be embedded in a SOCK_ITEM attr [ 195.146321][T10446] block nbd0: shutting down sockets [ 195.276073][T10450] netlink: 'syz.0.1064': attribute type 10 has an invalid length. [ 195.290994][T10450] geneve3: entered promiscuous mode [ 195.291015][T10450] geneve3: entered allmulticast mode [ 195.453363][T10462] __nla_validate_parse: 4 callbacks suppressed [ 195.453381][T10462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1066'. [ 195.704718][T10482] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1072'. [ 195.850739][T10489] netlink: 'syz.3.1075': attribute type 1 has an invalid length. [ 195.916724][T10489] 8021q: adding VLAN 0 to HW filter on device bond6 [ 195.950876][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1075'. [ 195.999034][T10489] bond6: (slave geneve4): making interface the new active one [ 196.001262][T10489] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 196.010522][ T43] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 196.010561][ T43] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 196.010592][ T43] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 196.010620][ T43] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 196.170991][T10498] syzkaller1: entered promiscuous mode [ 196.171004][T10498] syzkaller1: entered allmulticast mode [ 196.206733][T10498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.307449][T10500] x_tables: unsorted entry at hook 3 [ 198.355524][T10453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.302534][T10500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.330985][ T11] block nbd4: Possible stuck request ffff888027fa5080: control (read@0,1024B). Runtime 60 seconds [ 199.331023][ T11] block nbd4: Possible stuck request ffff888027fa5240: control (read@1024,1024B). Runtime 60 seconds [ 199.331043][ T11] block nbd4: Possible stuck request ffff888027fa5400: control (read@2048,1024B). Runtime 60 seconds [ 199.331063][ T11] block nbd4: Possible stuck request ffff888027fa55c0: control (read@3072,1024B). Runtime 60 seconds [ 199.397836][T10530] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1085'. [ 199.458099][T10530] vcan1: entered promiscuous mode [ 199.458115][T10530] vcan1: entered allmulticast mode [ 199.667979][T10549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1091'. [ 199.894099][T10562] xt_REDIRECT: bad MAP_IPS. [ 199.963597][T10560] tipc: Started in network mode [ 199.963627][T10560] tipc: Node identity aa090ba408fd, cluster identity 4711 [ 199.963905][T10560] tipc: Enabled bearer , priority 0 [ 200.006584][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1094'. [ 200.045074][T10560] tipc: Disabling bearer [ 200.221586][T10578] syzkaller1: entered promiscuous mode [ 200.221609][T10578] syzkaller1: entered allmulticast mode [ 200.228004][T10578] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 200.616036][T10590] rxe_eth0 speed is unknown, defaulting to 1000 [ 200.643871][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1110'. [ 200.645408][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1110'. [ 200.645708][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1110'. [ 200.646010][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1110'. [ 200.822173][T10623] netlink: 'syz.0.1114': attribute type 21 has an invalid length. [ 200.822198][T10623] IPv6: NLM_F_CREATE should be specified when creating new route [ 200.822499][T10623] netlink: 'syz.0.1114': attribute type 1 has an invalid length. [ 201.023244][T10634] tap0: tun_chr_ioctl cmd 2152240185 [ 201.178446][T10643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1118'. [ 201.178468][T10643] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1118'. [ 201.178485][T10643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1118'. [ 201.248375][T10646] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1117'. [ 201.248402][T10646] nbd: must specify a device to reconfigure [ 201.401176][ T4946] Bluetooth: hci3: command 0x0406 tx timeout [ 201.401213][ T4946] Bluetooth: hci2: command 0x0406 tx timeout [ 201.401232][ T4946] Bluetooth: hci1: command 0x0406 tx timeout [ 201.708053][ T30] audit: type=1800 audit(1792896803.541:11): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1124" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1143 res=0 errno=-22 [ 201.735028][T10661] nbd: socks must be embedded in a SOCK_ITEM attr [ 201.735284][T10661] block nbd0: shutting down sockets [ 201.794910][T10665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1123'. [ 201.794935][T10665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1123'. [ 202.416879][T10693] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.416949][T10693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.915003][T10722] xt_hashlimit: size too large, truncated to 1048576 [ 203.010130][T10725] xt_hashlimit: size too large, truncated to 1048576 [ 203.833670][T10763] veth0: entered promiscuous mode [ 203.904881][T10763] syz_tun: entered allmulticast mode [ 204.526875][T10796] FAULT_INJECTION: forcing a failure. [ 204.526875][T10796] name failslab, interval 1, probability 0, space 0, times 0 [ 204.526907][T10796] CPU: 1 UID: 0 PID: 10796 Comm: syz.0.1155 Not tainted syzkaller #0 PREEMPT(full) [ 204.526928][T10796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 204.526939][T10796] Call Trace: [ 204.526946][T10796] [ 204.526954][T10796] dump_stack_lvl+0xe8/0x150 [ 204.526985][T10796] should_fail_ex+0x410/0x560 [ 204.527018][T10796] should_failslab+0xa8/0x100 [ 204.527053][T10796] __kvmalloc_node_noprof+0x171/0x820 [ 204.527080][T10796] ? __kvmalloc_node_noprof+0x340/0x820 [ 204.527103][T10796] ? bpf_compute_scc+0xa26/0xb10 [ 204.527123][T10796] ? bpf_compute_scc+0xa26/0xb10 [ 204.527150][T10796] bpf_compute_scc+0xa26/0xb10 [ 204.527189][T10796] bpf_check+0x271e/0x2ef0 [ 204.527232][T10796] ? __pfx_bpf_check+0x10/0x10 [ 204.527258][T10796] ? bpf_obj_name_cpy+0x194/0x1e0 [ 204.527284][T10796] bpf_prog_load+0x14d1/0x1c20 [ 204.527321][T10796] ? __pfx_bpf_prog_load+0x10/0x10 [ 204.527369][T10796] __sys_bpf+0xd0d/0xd90 [ 204.527401][T10796] ? __pfx___sys_bpf+0x10/0x10 [ 204.527435][T10796] ? __fget_files+0x2a/0x420 [ 204.527472][T10796] ? ksys_write+0x242/0x270 [ 204.527496][T10796] ? __pfx_ksys_write+0x10/0x10 [ 204.527522][T10796] __x64_sys_bpf+0xba/0xd0 [ 204.527547][T10796] do_syscall_64+0x166/0x520 [ 204.527565][T10796] ? trace_irq_disable+0x3b/0x140 [ 204.527585][T10796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.527603][T10796] ? clear_bhb_loop+0x70/0xc0 [ 204.527625][T10796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.527643][T10796] RIP: 0033:0x7fe840b9f559 [ 204.527660][T10796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.527675][T10796] RSP: 002b:00007fe8419b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 204.527695][T10796] RAX: ffffffffffffffda RBX: 00007fe840e25fa0 RCX: 00007fe840b9f559 [ 204.527708][T10796] RDX: 0000000000000023 RSI: 000020000000e000 RDI: 0000000000000005 [ 204.527719][T10796] RBP: 00007fe8419b0090 R08: 0000000000000000 R09: 0000000000000000 [ 204.527731][T10796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.527741][T10796] R13: 00007fe840e26038 R14: 00007fe840e25fa0 R15: 00007fffd4afbdc8 [ 204.527771][T10796] [ 204.563079][T10762] syz_tun: left allmulticast mode [ 204.588120][T10762] veth0: left promiscuous mode [ 204.907692][T10806] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 205.329229][ T4996] udevd[4996]: worker [8166] /devices/virtual/block/nbd4 is taking a long time [ 205.455012][T10835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.455030][T10835] IPv6: NLM_F_CREATE should be set when creating new route [ 205.455076][T10835] IPv6: NLM_F_CREATE should be set when creating new route [ 205.498480][T10836] netlink: 'syz.2.1173': attribute type 1 has an invalid length. [ 205.610055][T10840] syz_tun (unregistering): left allmulticast mode [ 205.610081][T10840] syz_tun (unregistering): left promiscuous mode [ 205.610163][T10840] bridge0: port 3(syz_tun) entered disabled state [ 205.675308][T10847] __nla_validate_parse: 6 callbacks suppressed [ 205.675323][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'. [ 205.675330][T10847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1177'. [ 205.681639][ T53] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 205.727442][T10847] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 205.839696][T10856] xt_hashlimit: max too large, truncated to 1048576 [ 205.839894][T10856] xt_hashlimit: overflow, try lower: 137438953472/8 [ 205.866869][T10858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1178'. [ 205.943765][T10849] syzkaller1: entered promiscuous mode [ 205.943787][T10849] syzkaller1: entered allmulticast mode [ 206.119469][ T5632] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 206.126636][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1181'. [ 206.215739][T10870] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1182'. [ 206.758345][T10878] netlink: 'syz.2.1185': attribute type 1 has an invalid length. [ 207.028338][T10879] macvlan3: entered promiscuous mode [ 207.028360][T10879] macvlan3: entered allmulticast mode [ 207.029459][T10879] bond2: entered promiscuous mode [ 207.032751][T10879] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 207.076677][T10879] bond2: left promiscuous mode [ 207.127680][T10881] IPVS: Unknown mcast interface: v^h0_to_bond [ 207.127824][T10884] IPVS: Unknown mcast interface: v^h0_to_bond [ 207.130648][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 207.134995][T10893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1190'. [ 207.160481][T10893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1190'. [ 207.176172][T10895] IPVS: length: 208 != 24 [ 207.264724][T10899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1192'. [ 207.319623][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1193'. [ 207.557250][T10920] syzkaller0: entered promiscuous mode [ 207.557376][T10920] syzkaller0: entered allmulticast mode [ 208.337615][T10968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.337639][T10968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.340659][T10968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.340678][T10968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.202435][T11014] sctp: [Deprecated]: syz.1.1218 (pid 11014) Use of int in maxseg socket option. [ 209.202435][T11014] Use struct sctp_assoc_value instead [ 209.202476][T11014] sctp: [Deprecated]: syz.1.1218 (pid 11014) Use of int in maxseg socket option. [ 209.202476][T11014] Use struct sctp_assoc_value instead [ 209.202498][T11014] sctp: [Deprecated]: syz.1.1218 (pid 11014) Use of int in maxseg socket option. [ 209.202498][T11014] Use struct sctp_assoc_value instead [ 209.202519][T11014] sctp: [Deprecated]: syz.1.1218 (pid 11014) Use of int in maxseg socket option. [ 209.202519][T11014] Use struct sctp_assoc_value instead [ 209.202539][T11014] sctp: [Deprecated]: syz.1.1218 (pid 11014) Use of int in maxseg socket option. [ 209.202539][T11014] Use struct sctp_assoc_value instead [ 209.202584][T11014] sctp: [Deprecated]: syz.1.1218 (pid 11014) Use of int in maxseg socket option. [ 209.202584][T11014] Use struct sctp_assoc_value instead [ 209.202607][T11014] sctp: [Deprecated]: syz.1.1218 (pid 11014) Use of int in maxseg socket option. [ 209.202607][T11014] Use struct sctp_assoc_value instead [ 209.202628][T11014] sctp: [Deprecated]: syz.1.1218 (pid 11014) Use of int in maxseg socket option. [ 209.202628][T11014] Use struct sctp_assoc_value instead [ 209.202649][T11014] sctp: [Deprecated]: syz.1.1218 (pid 11014) Use of int in maxseg socket option. [ 209.202649][T11014] Use struct sctp_assoc_value instead [ 209.202670][T11014] sctp: [Deprecated]: syz.1.1218 (pid 11014) Use of int in maxseg socket option. [ 209.202670][T11014] Use struct sctp_assoc_value instead [ 209.517928][T11028] nbd: socks must be embedded in a SOCK_ITEM attr [ 209.543239][T11028] block nbd0: shutting down sockets [ 209.657592][T11040] pim6reg: entered allmulticast mode [ 209.783591][T11044] netlink: 'syz.0.1223': attribute type 4 has an invalid length. [ 210.005971][T11055] ip_tables: iptables: counters copy to user failed while replacing table [ 210.334937][T11071] No such timeout policy "syz1" [ 210.422147][T11087] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 210.477105][T10053] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 210.621525][T11095] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.621560][T11095] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 211.107588][T11071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.145144][T11126] lo speed is unknown, defaulting to 1000 [ 211.146112][T11126] lo speed is unknown, defaulting to 1000 [ 211.163603][T11126] lo speed is unknown, defaulting to 1000 [ 211.476220][T11141] x_tables: ip_tables: owner match: used from hooks INPUT, but only valid from OUTPUT/POSTROUTING [ 211.493813][T11141] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 211.579884][ T5769] lo speed is unknown, defaulting to 1000 [ 211.579951][T11126] infiniband syz0: set down [ 211.579964][T11126] infiniband syz0: added lo [ 211.583688][T11126] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 211.588307][T11126] infiniband syz0: Couldn't open port 1 [ 211.588639][T11126] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 211.588667][T11126] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 211.588702][T11126] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 211.701925][T11154] FAULT_INJECTION: forcing a failure. [ 211.701925][T11154] name failslab, interval 1, probability 0, space 0, times 0 [ 211.701958][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.3.1246 Not tainted syzkaller #0 PREEMPT(full) [ 211.701978][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 211.701989][T11154] Call Trace: [ 211.701996][T11154] [ 211.702004][T11154] dump_stack_lvl+0xe8/0x150 [ 211.702036][T11154] should_fail_ex+0x410/0x560 [ 211.702068][T11154] should_failslab+0xa8/0x100 [ 211.702098][T11154] __kvmalloc_node_noprof+0x171/0x820 [ 211.702130][T11154] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 211.702155][T11154] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 211.702195][T11154] bpf_compute_live_registers+0x14f/0x1ff0 [ 211.702221][T11154] ? kfree+0x1c5/0x650 [ 211.702246][T11154] ? bpf_compute_scc+0xab6/0xb10 [ 211.702273][T11154] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 211.702308][T11154] bpf_check+0x2744/0x2ef0 [ 211.702346][T11154] ? __pfx_bpf_check+0x10/0x10 [ 211.702370][T11154] ? bpf_obj_name_cpy+0x194/0x1e0 [ 211.702390][T11154] bpf_prog_load+0x14d1/0x1c20 [ 211.702423][T11154] ? __pfx_bpf_prog_load+0x10/0x10 [ 211.702467][T11154] __sys_bpf+0xd0d/0xd90 [ 211.702496][T11154] ? __pfx___sys_bpf+0x10/0x10 [ 211.702528][T11154] ? __fget_files+0x2a/0x420 [ 211.702563][T11154] ? ksys_write+0x242/0x270 [ 211.702581][T11154] ? __pfx_ksys_write+0x10/0x10 [ 211.702601][T11154] __x64_sys_bpf+0xba/0xd0 [ 211.702621][T11154] do_syscall_64+0x166/0x520 [ 211.702635][T11154] ? trace_irq_disable+0x3b/0x140 [ 211.702652][T11154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.702666][T11154] ? clear_bhb_loop+0x70/0xc0 [ 211.702684][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.702698][T11154] RIP: 0033:0x7f8a1679f559 [ 211.702714][T11154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.702728][T11154] RSP: 002b:00007f8a17616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.702746][T11154] RAX: ffffffffffffffda RBX: 00007f8a16a25fa0 RCX: 00007f8a1679f559 [ 211.702758][T11154] RDX: 0000000000000023 RSI: 000020000000e000 RDI: 0000000000000005 [ 211.702769][T11154] RBP: 00007f8a17616090 R08: 0000000000000000 R09: 0000000000000000 [ 211.702779][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.702789][T11154] R13: 00007f8a16a26038 R14: 00007f8a16a25fa0 R15: 00007fff88827188 [ 211.702817][T11154] [ 211.782886][T11126] RDS/IB: syz0: added [ 211.782940][T11126] smc: adding ib device syz0 with port count 1 [ 211.782958][T11126] smc: ib device syz0 port 1 has no pnetid [ 211.900963][T11147] bond3 (unregistering): Released all slaves [ 212.034163][ T5778] lo speed is unknown, defaulting to 1000 [ 212.034290][T11126] lo speed is unknown, defaulting to 1000 [ 212.238863][T11173] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001 [ 212.435760][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.621841][T11190] xt_hashlimit: max too large, truncated to 1048576 [ 212.621861][T11190] xt_hashlimit: overflow, try lower: 137438953472/8 [ 212.625923][T11190] __nla_validate_parse: 7 callbacks suppressed [ 212.625940][T11190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1254'. [ 212.907341][T11126] lo speed is unknown, defaulting to 1000 [ 213.550079][T11126] lo speed is unknown, defaulting to 1000 [ 213.942548][T11126] lo speed is unknown, defaulting to 1000 [ 213.944610][T11234] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 214.336497][T11126] lo speed is unknown, defaulting to 1000 [ 214.395397][T11251] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1274'. [ 214.517541][T11253] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1275'. [ 214.626349][T11261] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1278'. [ 214.811210][T11269] openvswitch: netlink: Key type 16131 is out of range max 32 [ 214.814711][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 214.829304][T11278] openvswitch: netlink: Key type 16131 is out of range max 32 [ 214.861037][T11282] FAULT_INJECTION: forcing a failure. [ 214.861037][T11282] name failslab, interval 1, probability 0, space 0, times 0 [ 214.861068][T11282] CPU: 1 UID: 0 PID: 11282 Comm: syz.4.1283 Not tainted syzkaller #0 PREEMPT(full) [ 214.861089][T11282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 214.861101][T11282] Call Trace: [ 214.861108][T11282] [ 214.861116][T11282] dump_stack_lvl+0xe8/0x150 [ 214.861151][T11282] should_fail_ex+0x410/0x560 [ 214.861183][T11282] should_failslab+0xa8/0x100 [ 214.861213][T11282] __kmalloc_cache_node_noprof+0xa5/0x620 [ 214.861236][T11282] ? kasan_save_track+0x4f/0x80 [ 214.861259][T11282] ? kasan_save_track+0x3e/0x80 [ 214.861280][T11282] ? __kasan_kmalloc+0x93/0xb0 [ 214.861310][T11282] ? __get_vm_area_node+0x155/0x2f0 [ 214.861328][T11282] ? __get_vm_area_node+0x155/0x2f0 [ 214.861348][T11282] ? __x64_sys_bpf+0xba/0xd0 [ 214.861372][T11282] __get_vm_area_node+0x155/0x2f0 [ 214.861398][T11282] __vmalloc_node_range_noprof+0x343/0x1540 [ 214.861420][T11282] ? bpf_check+0x115b/0x2ef0 [ 214.861472][T11282] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 214.861493][T11282] ? __kasan_kmalloc+0x93/0xb0 [ 214.861518][T11282] ? __kmalloc_cache_noprof+0x31c/0x600 [ 214.861541][T11282] ? __kmalloc_cache_noprof+0x148/0x600 [ 214.861562][T11282] ? bpf_diag_init+0x87/0x140 [ 214.861585][T11282] ? bpf_diag_init+0x87/0x140 [ 214.861611][T11282] ? bpf_check+0x115b/0x2ef0 [ 214.861632][T11282] __vmalloc_noprof+0xd2/0x120 [ 214.861652][T11282] ? bpf_check+0x115b/0x2ef0 [ 214.861677][T11282] bpf_check+0x115b/0x2ef0 [ 214.861719][T11282] ? __pfx_bpf_check+0x10/0x10 [ 214.861745][T11282] ? bpf_obj_name_cpy+0x194/0x1e0 [ 214.861767][T11282] bpf_prog_load+0x14d1/0x1c20 [ 214.861803][T11282] ? __pfx_bpf_prog_load+0x10/0x10 [ 214.861854][T11282] __sys_bpf+0xd0d/0xd90 [ 214.861886][T11282] ? __pfx___sys_bpf+0x10/0x10 [ 214.861921][T11282] ? __fget_files+0x2a/0x420 [ 214.861958][T11282] ? ksys_write+0x242/0x270 [ 214.861982][T11282] ? __pfx_ksys_write+0x10/0x10 [ 214.862008][T11282] __x64_sys_bpf+0xba/0xd0 [ 214.862032][T11282] do_syscall_64+0x166/0x520 [ 214.862050][T11282] ? trace_irq_disable+0x3b/0x140 [ 214.862071][T11282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.862089][T11282] ? clear_bhb_loop+0x70/0xc0 [ 214.862112][T11282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.862130][T11282] RIP: 0033:0x7f700df9f559 [ 214.862147][T11282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.862162][T11282] RSP: 002b:00007f700eecd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.862181][T11282] RAX: ffffffffffffffda RBX: 00007f700e225fa0 RCX: 00007f700df9f559 [ 214.862194][T11282] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 214.862206][T11282] RBP: 00007f700eecd090 R08: 0000000000000000 R09: 0000000000000000 [ 214.862217][T11282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.862228][T11282] R13: 00007f700e226038 R14: 00007f700e225fa0 R15: 00007ffd63aa8688 [ 214.862259][T11282] [ 214.865542][T11281] gretap1: entered allmulticast mode [ 214.868522][T11282] syz.4.1283: vmalloc error: size 1632, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 214.868642][T11282] CPU: 0 UID: 0 PID: 11282 Comm: syz.4.1283 Not tainted syzkaller #0 PREEMPT(full) [ 214.868663][T11282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 214.868674][T11282] Call Trace: [ 214.868682][T11282] [ 214.868690][T11282] dump_stack_lvl+0xe8/0x150 [ 214.868720][T11282] warn_alloc+0x24d/0x270 [ 214.868744][T11282] ? __kasan_kmalloc+0x22/0xb0 [ 214.868772][T11282] ? __pfx_warn_alloc+0x10/0x10 [ 214.868792][T11282] ? __kasan_kmalloc+0x93/0xb0 [ 214.868824][T11282] ? __get_vm_area_node+0x155/0x2f0 [ 214.868844][T11282] ? __x64_sys_bpf+0xba/0xd0 [ 214.868869][T11282] ? __get_vm_area_node+0x2a9/0x2f0 [ 214.868897][T11282] __vmalloc_node_range_noprof+0x36b/0x1540 [ 214.868943][T11282] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 214.868962][T11282] ? __kasan_kmalloc+0x93/0xb0 [ 214.868987][T11282] ? __kmalloc_cache_noprof+0x31c/0x600 [ 214.869008][T11282] ? __kmalloc_cache_noprof+0x148/0x600 [ 214.869028][T11282] ? bpf_diag_init+0x87/0x140 [ 214.869051][T11282] ? bpf_diag_init+0x87/0x140 [ 214.869077][T11282] ? bpf_check+0x115b/0x2ef0 [ 214.869098][T11282] __vmalloc_noprof+0xd2/0x120 [ 214.869118][T11282] ? bpf_check+0x115b/0x2ef0 [ 214.869144][T11282] bpf_check+0x115b/0x2ef0 [ 214.869185][T11282] ? __pfx_bpf_check+0x10/0x10 [ 214.869211][T11282] ? bpf_obj_name_cpy+0x194/0x1e0 [ 214.869233][T11282] bpf_prog_load+0x14d1/0x1c20 [ 214.869268][T11282] ? __pfx_bpf_prog_load+0x10/0x10 [ 214.869317][T11282] __sys_bpf+0xd0d/0xd90 [ 214.869348][T11282] ? __pfx___sys_bpf+0x10/0x10 [ 214.869382][T11282] ? __fget_files+0x2a/0x420 [ 214.869418][T11282] ? ksys_write+0x242/0x270 [ 214.869441][T11282] ? __pfx_ksys_write+0x10/0x10 [ 214.869467][T11282] __x64_sys_bpf+0xba/0xd0 [ 214.869492][T11282] do_syscall_64+0x166/0x520 [ 214.869510][T11282] ? trace_irq_disable+0x3b/0x140 [ 214.869530][T11282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.869549][T11282] ? clear_bhb_loop+0x70/0xc0 [ 214.869571][T11282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.869589][T11282] RIP: 0033:0x7f700df9f559 [ 214.869606][T11282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.869622][T11282] RSP: 002b:00007f700eecd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.869641][T11282] RAX: ffffffffffffffda RBX: 00007f700e225fa0 RCX: 00007f700df9f559 [ 214.869655][T11282] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 214.869667][T11282] RBP: 00007f700eecd090 R08: 0000000000000000 R09: 0000000000000000 [ 214.869678][T11282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.869688][T11282] R13: 00007f700e226038 R14: 00007f700e225fa0 R15: 00007ffd63aa8688 [ 214.869719][T11282] [ 214.869999][T11282] Mem-Info: [ 214.870008][T11282] active_anon:8572 inactive_anon:0 isolated_anon:0 [ 214.870008][T11282] active_file:0 inactive_file:43332 isolated_file:0 [ 214.870008][T11282] unevictable:0 dirty:146 writeback:0 [ 214.870008][T11282] slab_reclaimable:11771 slab_unreclaimable:106230 [ 214.870008][T11282] mapped:32350 shmem:3441 pagetables:1222 [ 214.870008][T11282] sec_pagetables:0 bounce:0 [ 214.870008][T11282] kernel_misc_reclaimable:0 [ 214.870008][T11282] free:1271165 free_pcp:13946 free_cma:0 [ 214.870055][T11282] Node 0 active_anon:34288kB inactive_anon:0kB active_file:0kB inactive_file:173128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129400kB dirty:580kB writeback:0kB shmem:13764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14512kB pagetables:4752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 214.870104][T11282] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 214.870150][T11282] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 214.971683][T11282] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 214.971723][T11282] Node 0 DMA32 free:1138032kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34388kB inactive_anon:0kB active_file:0kB inactive_file:173128kB unevictable:0kB writepending:580kB zspages:0kB present:3129332kB managed:2526416kB mlocked:0kB bounce:0kB free_pcp:55768kB local_pcp:31180kB free_cma:0kB [ 214.971878][T11282] lowmem_reserve[]: 0 0 0 0 0 [ 214.971910][T11282] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 214.971960][T11282] lowmem_reserve[]: 0 0 0 0 0 [ 214.971991][T11282] Node 1 Normal free:3931268kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 214.972043][T11282] lowmem_reserve[]: 0 0 0 0 0 [ 214.972073][T11282] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 214.972175][T11282] Node 0 DMA32: 268*4kB (UE) 297*8kB (UM) 362*16kB (UME) 380*32kB (UM) 142*64kB (UE) 64*128kB (UME) 42*256kB (UME) 12*512kB (UM) 13*1024kB (UM) 6*2048kB (UM) 258*4096kB (UM) = 1137944kB [ 214.972322][T11282] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 214.972408][T11282] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 9*16kB (UM) 6*32kB (UM) 6*64kB (UM) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 958*4096kB (UM) = 3931268kB [ 214.972546][T11282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 214.972560][T11282] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 214.972574][T11282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 214.972589][T11282] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 214.972603][T11282] 46769 total pagecache pages [ 214.972610][T11282] 0 pages in swap cache [ 214.972616][T11282] Free swap = 124996kB [ 214.972623][T11282] Total swap = 124996kB [ 214.972630][T11282] 2097051 pages RAM [ 214.972637][T11282] 0 pages HighMem/MovableOnly [ 214.972643][T11282] 433831 pages reserved [ 214.972649][T11282] 0 pages cma reserved [ 215.311393][T11297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.887291][T11309] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 215.887779][T11309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.352890][T11333] netlink: 'syz.3.1293': attribute type 11 has an invalid length. [ 216.442532][T11331] ip6gre4: entered promiscuous mode [ 216.442553][T11331] ip6gre4: entered allmulticast mode [ 216.558475][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 216.558505][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 216.636992][T11345] netlink: 266 bytes leftover after parsing attributes in process `syz.4.1298'. [ 219.536029][T11338] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.737071][T11397] nbd: socks must be embedded in a SOCK_ITEM attr [ 219.738285][T11397] block nbd0: shutting down sockets [ 219.848495][T11407] netlink: 'syz.4.1314': attribute type 10 has an invalid length. [ 219.884827][T11407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.898320][T11407] team0: Port device netdevsim1 added [ 220.265737][T11420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.688319][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'. [ 220.745238][T11453] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1323'. [ 220.745261][T11453] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1323'. [ 220.745274][T11453] netlink: 'syz.2.1323': attribute type 6 has an invalid length. [ 220.745286][T11453] netlink: 'syz.2.1323': attribute type 5 has an invalid length. [ 220.745297][T11453] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1323'. [ 220.745701][T11453] netlink: zone id is out of range [ 220.745711][T11453] netlink: zone id is out of range [ 220.745718][T11453] netlink: zone id is out of range [ 220.745725][T11453] netlink: zone id is out of range [ 220.745732][T11453] netlink: zone id is out of range [ 220.745738][T11453] netlink: zone id is out of range [ 220.745745][T11453] netlink: zone id is out of range [ 220.745751][T11453] netlink: zone id is out of range [ 220.745777][T11453] netlink: zone id is out of range [ 220.745785][T11453] netlink: set zone limit has 4 unknown bytes [ 220.765790][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'. [ 220.886183][T11451] netlink: 'syz.2.1323': attribute type 1 has an invalid length. [ 220.886204][T11451] netlink: 'syz.2.1323': attribute type 2 has an invalid length. [ 221.212099][T11469] nbd: socks must be embedded in a SOCK_ITEM attr [ 221.212344][T11469] block nbd0: shutting down sockets [ 221.922908][T11507] netlink: 'syz.4.1336': attribute type 2 has an invalid length. [ 222.073598][T11515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1340'. [ 222.201051][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 222.462992][T11539] FAULT_INJECTION: forcing a failure. [ 222.462992][T11539] name failslab, interval 1, probability 0, space 0, times 0 [ 222.463023][T11539] CPU: 1 UID: 0 PID: 11539 Comm: syz.4.1348 Not tainted syzkaller #0 PREEMPT(full) [ 222.463043][T11539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 222.463054][T11539] Call Trace: [ 222.463061][T11539] [ 222.463069][T11539] dump_stack_lvl+0xe8/0x150 [ 222.463100][T11539] should_fail_ex+0x410/0x560 [ 222.463130][T11539] should_failslab+0xa8/0x100 [ 222.463159][T11539] __kmalloc_cache_node_noprof+0xa5/0x620 [ 222.463179][T11539] ? unwind_get_return_address+0x4d/0x90 [ 222.463205][T11539] ? __get_vm_area_node+0x155/0x2f0 [ 222.463222][T11539] ? __get_vm_area_node+0x155/0x2f0 [ 222.463248][T11539] __get_vm_area_node+0x155/0x2f0 [ 222.463274][T11539] __vmalloc_node_range_noprof+0x343/0x1540 [ 222.463293][T11539] ? bpf_prog_calc_tag+0x51/0x370 [ 222.463317][T11539] ? format_decode+0xdc/0xda0 [ 222.463347][T11539] ? vsnprintf+0xe42/0xef0 [ 222.463392][T11539] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 222.463413][T11539] ? bpf_verifier_vlog+0x3d1/0x900 [ 222.463441][T11539] ? bpf_prog_calc_tag+0x51/0x370 [ 222.463461][T11539] __vmalloc_noprof+0xd2/0x120 [ 222.463480][T11539] ? bpf_prog_calc_tag+0x51/0x370 [ 222.463503][T11539] bpf_prog_calc_tag+0x51/0x370 [ 222.463529][T11539] check_and_resolve_insns+0xbb/0x21d0 [ 222.463557][T11539] ? add_subprog+0x2e2/0x3f0 [ 222.463583][T11539] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 222.463616][T11539] bpf_check+0x18f7/0x2ef0 [ 222.463657][T11539] ? __pfx_bpf_check+0x10/0x10 [ 222.463681][T11539] ? bpf_obj_name_cpy+0x194/0x1e0 [ 222.463706][T11539] bpf_prog_load+0x14d1/0x1c20 [ 222.463742][T11539] ? __pfx_bpf_prog_load+0x10/0x10 [ 222.463789][T11539] __sys_bpf+0xd0d/0xd90 [ 222.463820][T11539] ? __pfx___sys_bpf+0x10/0x10 [ 222.463855][T11539] ? __fget_files+0x2a/0x420 [ 222.463892][T11539] ? ksys_write+0x242/0x270 [ 222.463916][T11539] ? __pfx_ksys_write+0x10/0x10 [ 222.463942][T11539] __x64_sys_bpf+0xba/0xd0 [ 222.463966][T11539] do_syscall_64+0x166/0x520 [ 222.463983][T11539] ? trace_irq_disable+0x3b/0x140 [ 222.464003][T11539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.464022][T11539] ? clear_bhb_loop+0x70/0xc0 [ 222.464043][T11539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.464060][T11539] RIP: 0033:0x7f700df9f559 [ 222.464077][T11539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.464091][T11539] RSP: 002b:00007f700eecd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.464109][T11539] RAX: ffffffffffffffda RBX: 00007f700e225fa0 RCX: 00007f700df9f559 [ 222.464122][T11539] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 222.464133][T11539] RBP: 00007f700eecd090 R08: 0000000000000000 R09: 0000000000000000 [ 222.464143][T11539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.464152][T11539] R13: 00007f700e226038 R14: 00007f700e225fa0 R15: 00007ffd63aa8688 [ 222.464180][T11539] [ 222.514988][T11542] x_tables: duplicate underflow at hook 1 [ 222.541602][T11542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1349'. [ 222.566748][T11540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1347'. [ 222.628764][T11550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1351'. [ 222.677655][T11540] veth1_to_team: entered promiscuous mode [ 222.694691][T11540] veth1_to_team: left promiscuous mode [ 222.995314][T11563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1355'. [ 223.174779][T11575] syzkaller1: entered allmulticast mode [ 223.221280][T11574] 8021q: adding VLAN 0 to HW filter on device bond3 [ 223.292886][T11581] syzkaller1: entered promiscuous mode [ 223.292905][T11581] syzkaller1: entered allmulticast mode [ 223.379873][T11574] syzkaller0: entered promiscuous mode [ 223.379897][T11574] syzkaller0: entered allmulticast mode [ 223.476572][T11588] FAULT_INJECTION: forcing a failure. [ 223.476572][T11588] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 223.476604][T11588] CPU: 1 UID: 0 PID: 11588 Comm: syz.3.1362 Not tainted syzkaller #0 PREEMPT(full) [ 223.476625][T11588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 223.476636][T11588] Call Trace: [ 223.476644][T11588] [ 223.476652][T11588] dump_stack_lvl+0xe8/0x150 [ 223.476684][T11588] should_fail_ex+0x410/0x560 [ 223.476724][T11588] prepare_alloc_pages+0x21e/0x5f0 [ 223.476756][T11588] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 223.476786][T11588] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 223.476815][T11588] ? __pfx_policy_nodemask+0x10/0x10 [ 223.476841][T11588] ? __get_vm_area_node+0x155/0x2f0 [ 223.476859][T11588] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 223.476879][T11588] ? __vmalloc_noprof+0xd2/0x120 [ 223.476897][T11588] ? bpf_prog_calc_tag+0x51/0x370 [ 223.476919][T11588] ? check_and_resolve_insns+0xbb/0x21d0 [ 223.476943][T11588] ? bpf_prog_load+0x14d1/0x1c20 [ 223.476963][T11588] ? __sys_bpf+0xd0d/0xd90 [ 223.476982][T11588] ? __x64_sys_bpf+0xba/0xd0 [ 223.477001][T11588] ? do_syscall_64+0x166/0x520 [ 223.477019][T11588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.477041][T11588] alloc_pages_mpol+0x21e/0x390 [ 223.477074][T11588] alloc_pages_noprof+0xb1/0x2b0 [ 223.477097][T11588] get_free_pages_noprof+0xf/0x80 [ 223.477122][T11588] __kasan_populate_vmalloc+0x38/0x1c0 [ 223.477145][T11588] ? do_raw_spin_unlock+0xf5/0x200 [ 223.477175][T11588] alloc_vmap_area+0xd10/0x1410 [ 223.477208][T11588] ? __pfx_alloc_vmap_area+0x10/0x10 [ 223.477225][T11588] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 223.477249][T11588] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 223.477272][T11588] ? __get_vm_area_node+0x155/0x2f0 [ 223.477297][T11588] __get_vm_area_node+0x200/0x2f0 [ 223.477324][T11588] __vmalloc_node_range_noprof+0x343/0x1540 [ 223.477347][T11588] ? bpf_prog_calc_tag+0x51/0x370 [ 223.477373][T11588] ? format_decode+0xdc/0xda0 [ 223.477403][T11588] ? vsnprintf+0xe42/0xef0 [ 223.477441][T11588] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 223.477463][T11588] ? bpf_verifier_vlog+0x3d1/0x900 [ 223.477493][T11588] ? bpf_prog_calc_tag+0x51/0x370 [ 223.477515][T11588] __vmalloc_noprof+0xd2/0x120 [ 223.477536][T11588] ? bpf_prog_calc_tag+0x51/0x370 [ 223.477563][T11588] bpf_prog_calc_tag+0x51/0x370 [ 223.477592][T11588] check_and_resolve_insns+0xbb/0x21d0 [ 223.477621][T11588] ? add_subprog+0x2e2/0x3f0 [ 223.477649][T11588] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 223.477685][T11588] bpf_check+0x18f7/0x2ef0 [ 223.477733][T11588] ? __pfx_bpf_check+0x10/0x10 [ 223.477760][T11588] ? bpf_obj_name_cpy+0x194/0x1e0 [ 223.477783][T11588] bpf_prog_load+0x14d1/0x1c20 [ 223.477820][T11588] ? __pfx_bpf_prog_load+0x10/0x10 [ 223.477871][T11588] __sys_bpf+0xd0d/0xd90 [ 223.477904][T11588] ? __pfx___sys_bpf+0x10/0x10 [ 223.477940][T11588] ? __fget_files+0x2a/0x420 [ 223.477978][T11588] ? ksys_write+0x242/0x270 [ 223.478002][T11588] ? __pfx_ksys_write+0x10/0x10 [ 223.478030][T11588] __x64_sys_bpf+0xba/0xd0 [ 223.478055][T11588] do_syscall_64+0x166/0x520 [ 223.478072][T11588] ? trace_irq_disable+0x3b/0x140 [ 223.478093][T11588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.478111][T11588] ? clear_bhb_loop+0x70/0xc0 [ 223.478134][T11588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.478152][T11588] RIP: 0033:0x7f8a1679f559 [ 223.478170][T11588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.478184][T11588] RSP: 002b:00007f8a17616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 223.478204][T11588] RAX: ffffffffffffffda RBX: 00007f8a16a25fa0 RCX: 00007f8a1679f559 [ 223.478216][T11588] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 223.478227][T11588] RBP: 00007f8a17616090 R08: 0000000000000000 R09: 0000000000000000 [ 223.478238][T11588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.478249][T11588] R13: 00007f8a16a26038 R14: 00007f8a16a25fa0 R15: 00007fff88827188 [ 223.478279][T11588] [ 223.922018][T11603] netlink: 'syz.2.1364': attribute type 1 has an invalid length. [ 224.007397][T11603] 8021q: adding VLAN 0 to HW filter on device bond3 [ 224.685874][T11647] FAULT_INJECTION: forcing a failure. [ 224.685874][T11647] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 224.685906][T11647] CPU: 0 UID: 0 PID: 11647 Comm: syz.3.1375 Not tainted syzkaller #0 PREEMPT(full) [ 224.685927][T11647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 224.685937][T11647] Call Trace: [ 224.685944][T11647] [ 224.685952][T11647] dump_stack_lvl+0xe8/0x150 [ 224.685983][T11647] should_fail_ex+0x410/0x560 [ 224.686015][T11647] prepare_alloc_pages+0x21e/0x5f0 [ 224.686046][T11647] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 224.686079][T11647] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 224.686103][T11647] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 224.686131][T11647] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 224.686160][T11647] ? __pfx_policy_nodemask+0x10/0x10 [ 224.686184][T11647] ? __get_vm_area_node+0x155/0x2f0 [ 224.686202][T11647] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 224.686222][T11647] ? __vmalloc_noprof+0xd2/0x120 [ 224.686245][T11647] __alloc_pages_noprof+0x10/0x100 [ 224.686270][T11647] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 224.686302][T11647] ? alloc_pages_noprof+0x140/0x2b0 [ 224.686324][T11647] __kasan_populate_vmalloc+0xb7/0x1c0 [ 224.686353][T11647] alloc_vmap_area+0xd10/0x1410 [ 224.686388][T11647] ? __pfx_alloc_vmap_area+0x10/0x10 [ 224.686405][T11647] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 224.686430][T11647] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 224.686452][T11647] ? __get_vm_area_node+0x155/0x2f0 [ 224.686477][T11647] __get_vm_area_node+0x200/0x2f0 [ 224.686505][T11647] __vmalloc_node_range_noprof+0x343/0x1540 [ 224.686527][T11647] ? bpf_prog_calc_tag+0x51/0x370 [ 224.686553][T11647] ? format_decode+0xdc/0xda0 [ 224.686591][T11647] ? vsnprintf+0xe42/0xef0 [ 224.686628][T11647] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 224.686650][T11647] ? bpf_verifier_vlog+0x3d1/0x900 [ 224.686681][T11647] ? bpf_prog_calc_tag+0x51/0x370 [ 224.686703][T11647] __vmalloc_noprof+0xd2/0x120 [ 224.686724][T11647] ? bpf_prog_calc_tag+0x51/0x370 [ 224.686750][T11647] bpf_prog_calc_tag+0x51/0x370 [ 224.686777][T11647] check_and_resolve_insns+0xbb/0x21d0 [ 224.686805][T11647] ? add_subprog+0x2e2/0x3f0 [ 224.686831][T11647] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 224.686866][T11647] bpf_check+0x18f7/0x2ef0 [ 224.686907][T11647] ? __pfx_bpf_check+0x10/0x10 [ 224.686932][T11647] ? bpf_obj_name_cpy+0x194/0x1e0 [ 224.686956][T11647] bpf_prog_load+0x14d1/0x1c20 [ 224.686992][T11647] ? __pfx_bpf_prog_load+0x10/0x10 [ 224.687042][T11647] __sys_bpf+0xd0d/0xd90 [ 224.687096][T11647] ? __pfx___sys_bpf+0x10/0x10 [ 224.687131][T11647] ? __fget_files+0x2a/0x420 [ 224.687170][T11647] ? ksys_write+0x242/0x270 [ 224.687194][T11647] ? __pfx_ksys_write+0x10/0x10 [ 224.687222][T11647] __x64_sys_bpf+0xba/0xd0 [ 224.687247][T11647] do_syscall_64+0x166/0x520 [ 224.687265][T11647] ? trace_irq_disable+0x3b/0x140 [ 224.687285][T11647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.687303][T11647] ? clear_bhb_loop+0x70/0xc0 [ 224.687326][T11647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.687344][T11647] RIP: 0033:0x7f8a1679f559 [ 224.687361][T11647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.687376][T11647] RSP: 002b:00007f8a17616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.687396][T11647] RAX: ffffffffffffffda RBX: 00007f8a16a25fa0 RCX: 00007f8a1679f559 [ 224.687410][T11647] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 224.687422][T11647] RBP: 00007f8a17616090 R08: 0000000000000000 R09: 0000000000000000 [ 224.687434][T11647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.687446][T11647] R13: 00007f8a16a26038 R14: 00007f8a16a25fa0 R15: 00007fff88827188 [ 224.687478][T11647] [ 224.847115][ C1] vxcan1: j1939_session_tx_dat: 0xffff88807dcde000: queue data error: -100 [ 225.210905][T11669] pim6reg: entered allmulticast mode [ 225.237197][T11668] pim6reg: left allmulticast mode [ 225.348521][T11682] netlink: 'syz.1.1383': attribute type 28 has an invalid length. [ 225.348542][T11682] netlink: 'syz.1.1383': attribute type 3 has an invalid length. [ 225.881085][T11715] FAULT_INJECTION: forcing a failure. [ 225.881085][T11715] name failslab, interval 1, probability 0, space 0, times 0 [ 225.881117][T11715] CPU: 0 UID: 0 PID: 11715 Comm: syz.4.1390 Not tainted syzkaller #0 PREEMPT(full) [ 225.881138][T11715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 225.881149][T11715] Call Trace: [ 225.881156][T11715] [ 225.881164][T11715] dump_stack_lvl+0xe8/0x150 [ 225.881196][T11715] should_fail_ex+0x410/0x560 [ 225.881228][T11715] should_failslab+0xa8/0x100 [ 225.881257][T11715] __kmalloc_node_noprof+0xfb/0x720 [ 225.881279][T11715] ? __get_vm_area_node+0x200/0x2f0 [ 225.881298][T11715] ? __get_vm_area_node+0x283/0x2f0 [ 225.881316][T11715] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 225.881336][T11715] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 225.881364][T11715] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 225.881398][T11715] ? vsnprintf+0xe42/0xef0 [ 225.881442][T11715] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 225.881465][T11715] ? bpf_verifier_vlog+0x3d1/0x900 [ 225.881493][T11715] ? bpf_prog_calc_tag+0x51/0x370 [ 225.881515][T11715] __vmalloc_noprof+0xd2/0x120 [ 225.881536][T11715] ? bpf_prog_calc_tag+0x51/0x370 [ 225.881565][T11715] bpf_prog_calc_tag+0x51/0x370 [ 225.881594][T11715] check_and_resolve_insns+0xbb/0x21d0 [ 225.881624][T11715] ? add_subprog+0x2e2/0x3f0 [ 225.881651][T11715] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 225.881687][T11715] bpf_check+0x18f7/0x2ef0 [ 225.881730][T11715] ? __pfx_bpf_check+0x10/0x10 [ 225.881756][T11715] ? bpf_obj_name_cpy+0x194/0x1e0 [ 225.881780][T11715] bpf_prog_load+0x14d1/0x1c20 [ 225.881817][T11715] ? __pfx_bpf_prog_load+0x10/0x10 [ 225.881869][T11715] __sys_bpf+0xd0d/0xd90 [ 225.881901][T11715] ? __pfx___sys_bpf+0x10/0x10 [ 225.881936][T11715] ? __fget_files+0x2a/0x420 [ 225.881975][T11715] ? ksys_write+0x242/0x270 [ 225.881998][T11715] ? __pfx_ksys_write+0x10/0x10 [ 225.882024][T11715] __x64_sys_bpf+0xba/0xd0 [ 225.882047][T11715] do_syscall_64+0x166/0x520 [ 225.882064][T11715] ? trace_irq_disable+0x3b/0x140 [ 225.882084][T11715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.882102][T11715] ? clear_bhb_loop+0x70/0xc0 [ 225.882124][T11715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.882143][T11715] RIP: 0033:0x7f700df9f559 [ 225.882160][T11715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.882176][T11715] RSP: 002b:00007f700eecd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.882196][T11715] RAX: ffffffffffffffda RBX: 00007f700e225fa0 RCX: 00007f700df9f559 [ 225.882210][T11715] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 225.882222][T11715] RBP: 00007f700eecd090 R08: 0000000000000000 R09: 0000000000000000 [ 225.882234][T11715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.882246][T11715] R13: 00007f700e226038 R14: 00007f700e225fa0 R15: 00007ffd63aa8688 [ 225.882278][T11715] [ 225.883851][T11715] warn_alloc: 3 callbacks suppressed [ 225.883864][T11715] syz.4.1390: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 225.883920][T11715] CPU: 0 UID: 0 PID: 11715 Comm: syz.4.1390 Not tainted syzkaller #0 PREEMPT(full) [ 225.883940][T11715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 225.883950][T11715] Call Trace: [ 225.883958][T11715] [ 225.883965][T11715] dump_stack_lvl+0xe8/0x150 [ 225.883996][T11715] warn_alloc+0x24d/0x270 [ 225.884025][T11715] ? __pfx_warn_alloc+0x10/0x10 [ 225.884054][T11715] ? __kmalloc_node_noprof+0x4d2/0x720 [ 225.884075][T11715] ? __get_vm_area_node+0x200/0x2f0 [ 225.884096][T11715] ? __get_vm_area_node+0x283/0x2f0 [ 225.884114][T11715] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 225.884134][T11715] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 225.884163][T11715] __vmalloc_node_range_noprof+0x969/0x1540 [ 225.884213][T11715] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 225.884234][T11715] ? bpf_verifier_vlog+0x3d1/0x900 [ 225.884263][T11715] ? bpf_prog_calc_tag+0x51/0x370 [ 225.884286][T11715] __vmalloc_noprof+0xd2/0x120 [ 225.884307][T11715] ? bpf_prog_calc_tag+0x51/0x370 [ 225.884335][T11715] bpf_prog_calc_tag+0x51/0x370 [ 225.884365][T11715] check_and_resolve_insns+0xbb/0x21d0 [ 225.884394][T11715] ? add_subprog+0x2e2/0x3f0 [ 225.884421][T11715] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 225.884463][T11715] bpf_check+0x18f7/0x2ef0 [ 225.884504][T11715] ? __pfx_bpf_check+0x10/0x10 [ 225.884531][T11715] ? bpf_obj_name_cpy+0x194/0x1e0 [ 225.884554][T11715] bpf_prog_load+0x14d1/0x1c20 [ 225.884591][T11715] ? __pfx_bpf_prog_load+0x10/0x10 [ 225.884642][T11715] __sys_bpf+0xd0d/0xd90 [ 225.884673][T11715] ? __pfx___sys_bpf+0x10/0x10 [ 225.884708][T11715] ? __fget_files+0x2a/0x420 [ 225.884742][T11715] ? ksys_write+0x242/0x270 [ 225.884765][T11715] ? __pfx_ksys_write+0x10/0x10 [ 225.884789][T11715] __x64_sys_bpf+0xba/0xd0 [ 225.884814][T11715] do_syscall_64+0x166/0x520 [ 225.884831][T11715] ? trace_irq_disable+0x3b/0x140 [ 225.884851][T11715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.884870][T11715] ? clear_bhb_loop+0x70/0xc0 [ 225.884893][T11715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.884912][T11715] RIP: 0033:0x7f700df9f559 [ 225.884929][T11715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.884944][T11715] RSP: 002b:00007f700eecd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.884964][T11715] RAX: ffffffffffffffda RBX: 00007f700e225fa0 RCX: 00007f700df9f559 [ 225.884978][T11715] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 225.884991][T11715] RBP: 00007f700eecd090 R08: 0000000000000000 R09: 0000000000000000 [ 225.885002][T11715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.885013][T11715] R13: 00007f700e226038 R14: 00007f700e225fa0 R15: 00007ffd63aa8688 [ 225.885047][T11715] [ 225.886937][T11715] Mem-Info: [ 225.886949][T11715] active_anon:5748 inactive_anon:0 isolated_anon:0 [ 225.886949][T11715] active_file:0 inactive_file:43338 isolated_file:0 [ 225.886949][T11715] unevictable:0 dirty:194 writeback:0 [ 225.886949][T11715] slab_reclaimable:11639 slab_unreclaimable:106839 [ 225.886949][T11715] mapped:29547 shmem:532 pagetables:1253 [ 225.886949][T11715] sec_pagetables:0 bounce:0 [ 225.886949][T11715] kernel_misc_reclaimable:0 [ 225.886949][T11715] free:1277232 free_pcp:10606 free_cma:0 [ 225.886998][T11715] Node 0 active_anon:22992kB inactive_anon:0kB active_file:0kB inactive_file:173152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118188kB dirty:772kB writeback:0kB shmem:2128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14368kB pagetables:4876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 225.887050][T11715] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 225.887096][T11715] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 225.887174][T11715] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 225.887247][T11715] Node 0 DMA32 free:1162300kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22992kB inactive_anon:0kB active_file:0kB inactive_file:173152kB unevictable:0kB writepending:772kB zspages:0kB present:3129332kB managed:2526416kB mlocked:0kB bounce:0kB free_pcp:42424kB local_pcp:21516kB free_cma:0kB [ 225.887302][T11715] lowmem_reserve[]: 0 0 0 0 0 [ 225.887334][T11715] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 225.887381][T11715] lowmem_reserve[]: 0 0 0 0 0 [ 225.887411][T11715] Node 1 Normal free:3931268kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 225.887470][T11715] lowmem_reserve[]: 0 0 0 0 0 [ 225.887501][T11715] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 225.887621][T11715] Node 0 DMA32: 1162*4kB (UME) 305*8kB (UME) 555*16kB (UM) 558*32kB (UME) 282*64kB (UME) 82*128kB (UME) 42*256kB (UM) 13*512kB (UME) 11*1024kB (UM) 3*2048kB (M) 260*4096kB (UM) = 1162144kB [ 225.887769][T11715] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 225.887860][T11715] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 9*16kB (UM) 6*32kB (UM) 6*64kB (UM) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 958*4096kB (UM) = 3931268kB [ 225.888004][T11715] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 225.888019][T11715] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 225.888034][T11715] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 225.888049][T11715] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 225.888063][T11715] 43866 total pagecache pages [ 225.888070][T11715] 0 pages in swap cache [ 225.888077][T11715] Free swap = 124996kB [ 225.888084][T11715] Total swap = 124996kB [ 225.888091][T11715] 2097051 pages RAM [ 225.888098][T11715] 0 pages HighMem/MovableOnly [ 225.888105][T11715] 433831 pages reserved [ 225.888112][T11715] 0 pages cma reserved [ 226.037337][T11716] __nla_validate_parse: 12 callbacks suppressed [ 226.037355][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1387'. [ 226.278645][T11724] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 226.378339][T11725] netlink: 'syz.0.1392': attribute type 1 has an invalid length. [ 226.958645][T11745] netlink: 75 bytes leftover after parsing attributes in process `syz.4.1397'. [ 227.022495][T11745] net_ratelimit: 68 callbacks suppressed [ 227.022516][T11745] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 227.395988][T11774] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.397031][T11774] bridge0: port 1(bond3) entered blocking state [ 227.397213][T11774] bridge0: port 1(bond3) entered disabled state [ 227.397357][T11774] bond3: entered allmulticast mode [ 227.431957][T11774] bond3: entered promiscuous mode [ 227.479312][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 227.525306][T11782] netlink: 400 bytes leftover after parsing attributes in process `syz.1.1405'. [ 227.548627][T11781] ip6tnl2: entered allmulticast mode [ 227.551928][T11782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1405'. [ 227.551947][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'. [ 227.555750][ T8573] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 227.555964][ T8573] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 227.591324][ T948] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 227.669914][T11774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1402'. [ 227.699380][ T948] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 227.898131][T11796] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 227.917810][T11798] ip_tables: iptables: counters copy to user failed while replacing table [ 228.032961][T11798] netlink: 'syz.3.1409': attribute type 16 has an invalid length. [ 228.032975][T11798] netlink: 'syz.3.1409': attribute type 17 has an invalid length. [ 228.094416][T11798] bridge0: port 4(ip6gretap0) entered blocking state [ 228.094546][T11798] bridge0: port 4(ip6gretap0) entered listening state [ 228.115392][T11798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.117690][T11798] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.142016][T11798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.177720][T11798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.191645][T11798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.210858][T11798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.210881][T11798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.216334][T11798] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 228.252650][T11811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1411'. [ 228.277178][T10056] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.277250][T10056] bridge0: port 1(bridge_slave_0) entered listening state [ 228.281528][T10056] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.281641][T10056] bridge0: port 2(bridge_slave_1) entered listening state [ 228.300725][T11807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1410'. [ 228.470497][T11817] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1412'. [ 228.525740][ T5755] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 229.100181][T11863] nbd0: detected capacity change from 0 to 32 [ 229.101336][ T53] block nbd0: Receive control failed (result -22) [ 229.107901][ T1987] block nbd0: Dead connection, failed to find a fallback [ 229.107921][ T1987] block nbd0: shutting down sockets [ 229.107995][ T1987] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.108085][ T1987] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.108570][ T1987] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.108597][ T1987] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.108706][ T1987] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.108729][ T1987] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.110715][ T1987] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.110740][ T1987] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.110844][ T1987] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.110866][ T1987] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.110985][ T1987] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.111006][ T1987] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.111119][ T1987] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.111140][ T1987] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.112282][ T1987] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.112306][ T1987] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.112338][ T9839] ldm_validate_partition_table(): Disk read failed. [ 229.112445][ T1987] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.112466][ T1987] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.114812][ T1987] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.114836][ T1987] Buffer I/O error on dev nbd0, logical block 0, async page read [ 229.117848][ T9839] Dev nbd0: unable to read RDB block 0 [ 229.118342][ T9839] nbd0: unable to read partition table [ 229.145454][ T9839] ldm_validate_partition_table(): Disk read failed. [ 229.147422][ T9839] Dev nbd0: unable to read RDB block 0 [ 229.147872][ T9839] nbd0: unable to read partition table [ 229.333877][T11874] netlink: 'syz.1.1424': attribute type 1 has an invalid length. [ 229.399436][ T11] block nbd4: Possible stuck request ffff888027fa5080: control (read@0,1024B). Runtime 90 seconds [ 229.399476][ T11] block nbd4: Possible stuck request ffff888027fa5240: control (read@1024,1024B). Runtime 90 seconds [ 229.399501][ T11] block nbd4: Possible stuck request ffff888027fa5400: control (read@2048,1024B). Runtime 90 seconds [ 229.399525][ T11] block nbd4: Possible stuck request ffff888027fa55c0: control (read@3072,1024B). Runtime 90 seconds [ 229.427376][T11879] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 229.431289][T11881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1426'. [ 229.474107][T11874] 8021q: adding VLAN 0 to HW filter on device bond4 [ 229.510973][T11876] bond4: (slave veth9): Enslaving as an active interface with a down link [ 229.564155][T11884] bond4: (slave syz_tun): making interface the new active one [ 229.568818][T11884] syz_tun: entered promiscuous mode [ 229.583112][T11884] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 229.916255][T11897] bridge: RTM_NEWNEIGH with invalid ether address [ 229.922060][T11897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.957900][T11865] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 229.957925][T11865] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 230.060722][T11902] netlink: 'syz.2.1430': attribute type 21 has an invalid length. [ 230.065346][T11897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.066108][T11865] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 230.066125][T11865] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 230.117985][T11902] netlink: 'syz.2.1430': attribute type 6 has an invalid length. [ 230.121797][T11865] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 230.121817][T11865] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 230.154958][T11865] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 230.154980][T11865] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 230.324094][T11917] FAULT_INJECTION: forcing a failure. [ 230.324094][T11917] name failslab, interval 1, probability 0, space 0, times 0 [ 230.324126][T11917] CPU: 0 UID: 0 PID: 11917 Comm: syz.1.1435 Not tainted syzkaller #0 PREEMPT(full) [ 230.324161][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 230.324178][T11917] Call Trace: [ 230.324185][T11917] [ 230.324192][T11917] dump_stack_lvl+0xe8/0x150 [ 230.324225][T11917] should_fail_ex+0x410/0x560 [ 230.324258][T11917] should_failslab+0xa8/0x100 [ 230.324286][T11917] __kvmalloc_node_noprof+0x171/0x820 [ 230.324314][T11917] ? bpf_compute_postorder+0x83/0x970 [ 230.324335][T11917] ? bpf_compute_postorder+0x83/0x970 [ 230.324363][T11917] bpf_compute_postorder+0x83/0x970 [ 230.324384][T11917] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 230.324412][T11917] ? add_kfuncs+0x251/0x2e0 [ 230.324440][T11917] bpf_check+0x261d/0x2ef0 [ 230.324482][T11917] ? __pfx_bpf_check+0x10/0x10 [ 230.324507][T11917] ? bpf_obj_name_cpy+0x194/0x1e0 [ 230.324528][T11917] bpf_prog_load+0x14d1/0x1c20 [ 230.324564][T11917] ? __pfx_bpf_prog_load+0x10/0x10 [ 230.324610][T11917] __sys_bpf+0xd0d/0xd90 [ 230.324641][T11917] ? __pfx___sys_bpf+0x10/0x10 [ 230.324672][T11917] ? __fget_files+0x2a/0x420 [ 230.324706][T11917] ? ksys_write+0x242/0x270 [ 230.324729][T11917] ? __pfx_ksys_write+0x10/0x10 [ 230.324756][T11917] __x64_sys_bpf+0xba/0xd0 [ 230.324781][T11917] do_syscall_64+0x166/0x520 [ 230.324800][T11917] ? trace_irq_disable+0x3b/0x140 [ 230.324820][T11917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.324839][T11917] ? clear_bhb_loop+0x70/0xc0 [ 230.324863][T11917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.324888][T11917] RIP: 0033:0x7fc1f5b9f559 [ 230.324907][T11917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.324922][T11917] RSP: 002b:00007fc1f6b23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.324943][T11917] RAX: ffffffffffffffda RBX: 00007fc1f5e25fa0 RCX: 00007fc1f5b9f559 [ 230.324957][T11917] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 230.324969][T11917] RBP: 00007fc1f6b23090 R08: 0000000000000000 R09: 0000000000000000 [ 230.324981][T11917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.324992][T11917] R13: 00007fc1f5e26038 R14: 00007fc1f5e25fa0 R15: 00007fffb3fd4c88 [ 230.325024][T11917] [ 230.641440][T11934] erspan0: entered promiscuous mode [ 230.642744][T11934] gretap0: entered promiscuous mode [ 230.643861][T11934] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 230.868753][T11944] No such timeout policy "syz1" [ 230.948580][T11946] xt_hashlimit: size too large, truncated to 1048576 [ 231.031118][T11958] FAULT_INJECTION: forcing a failure. [ 231.031118][T11958] name failslab, interval 1, probability 0, space 0, times 0 [ 231.031148][T11958] CPU: 0 UID: 0 PID: 11958 Comm: syz.3.1449 Not tainted syzkaller #0 PREEMPT(full) [ 231.031168][T11958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.031179][T11958] Call Trace: [ 231.031185][T11958] [ 231.031193][T11958] dump_stack_lvl+0xe8/0x150 [ 231.031225][T11958] should_fail_ex+0x410/0x560 [ 231.031258][T11958] should_failslab+0xa8/0x100 [ 231.031286][T11958] __kvmalloc_node_noprof+0x171/0x820 [ 231.031315][T11958] ? bpf_compute_postorder+0x83/0x970 [ 231.031346][T11958] ? bpf_compute_postorder+0x83/0x970 [ 231.031374][T11958] bpf_compute_postorder+0x83/0x970 [ 231.031399][T11958] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 231.031426][T11958] ? add_kfuncs+0x251/0x2e0 [ 231.031453][T11958] bpf_check+0x261d/0x2ef0 [ 231.031493][T11958] ? __pfx_bpf_check+0x10/0x10 [ 231.031520][T11958] ? bpf_obj_name_cpy+0x194/0x1e0 [ 231.031542][T11958] bpf_prog_load+0x14d1/0x1c20 [ 231.031578][T11958] ? __pfx_bpf_prog_load+0x10/0x10 [ 231.031624][T11958] __sys_bpf+0xd0d/0xd90 [ 231.031656][T11958] ? __pfx___sys_bpf+0x10/0x10 [ 231.031688][T11958] ? __fget_files+0x2a/0x420 [ 231.031723][T11958] ? ksys_write+0x242/0x270 [ 231.031747][T11958] ? __pfx_ksys_write+0x10/0x10 [ 231.031770][T11958] __x64_sys_bpf+0xba/0xd0 [ 231.031792][T11958] do_syscall_64+0x166/0x520 [ 231.031809][T11958] ? trace_irq_disable+0x3b/0x140 [ 231.031827][T11958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.031843][T11958] ? clear_bhb_loop+0x70/0xc0 [ 231.031865][T11958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.031882][T11958] RIP: 0033:0x7f8a1679f559 [ 231.031900][T11958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.031915][T11958] RSP: 002b:00007f8a17616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.031934][T11958] RAX: ffffffffffffffda RBX: 00007f8a16a25fa0 RCX: 00007f8a1679f559 [ 231.031947][T11958] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 231.031957][T11958] RBP: 00007f8a17616090 R08: 0000000000000000 R09: 0000000000000000 [ 231.031968][T11958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 231.031978][T11958] R13: 00007f8a16a26038 R14: 00007f8a16a25fa0 R15: 00007fff88827188 [ 231.032008][T11958] [ 231.169192][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 231.276715][T11959] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 231.629983][T11986] __nla_validate_parse: 16 callbacks suppressed [ 231.630002][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'. [ 231.630025][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'. [ 231.723657][T11992] FAULT_INJECTION: forcing a failure. [ 231.723657][T11992] name failslab, interval 1, probability 0, space 0, times 0 [ 231.723688][T11992] CPU: 0 UID: 0 PID: 11992 Comm: syz.0.1461 Not tainted syzkaller #0 PREEMPT(full) [ 231.723709][T11992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.723720][T11992] Call Trace: [ 231.723727][T11992] [ 231.723736][T11992] dump_stack_lvl+0xe8/0x150 [ 231.723768][T11992] should_fail_ex+0x410/0x560 [ 231.723800][T11992] should_failslab+0xa8/0x100 [ 231.723829][T11992] __kvmalloc_node_noprof+0x171/0x820 [ 231.723864][T11992] ? __kvmalloc_node_noprof+0x340/0x820 [ 231.723887][T11992] ? bpf_compute_postorder+0xda/0x970 [ 231.723908][T11992] ? bpf_compute_postorder+0xda/0x970 [ 231.723937][T11992] bpf_compute_postorder+0xda/0x970 [ 231.723960][T11992] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 231.723989][T11992] ? add_kfuncs+0x251/0x2e0 [ 231.724016][T11992] bpf_check+0x261d/0x2ef0 [ 231.724058][T11992] ? __pfx_bpf_check+0x10/0x10 [ 231.724085][T11992] ? bpf_obj_name_cpy+0x194/0x1e0 [ 231.724108][T11992] bpf_prog_load+0x14d1/0x1c20 [ 231.724145][T11992] ? __pfx_bpf_prog_load+0x10/0x10 [ 231.724196][T11992] __sys_bpf+0xd0d/0xd90 [ 231.724228][T11992] ? __pfx___sys_bpf+0x10/0x10 [ 231.724263][T11992] ? __fget_files+0x2a/0x420 [ 231.724301][T11992] ? ksys_write+0x242/0x270 [ 231.724325][T11992] ? __pfx_ksys_write+0x10/0x10 [ 231.724351][T11992] __x64_sys_bpf+0xba/0xd0 [ 231.724377][T11992] do_syscall_64+0x166/0x520 [ 231.724396][T11992] ? trace_irq_disable+0x3b/0x140 [ 231.724417][T11992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.724436][T11992] ? clear_bhb_loop+0x70/0xc0 [ 231.724458][T11992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.724476][T11992] RIP: 0033:0x7fe840b9f559 [ 231.724494][T11992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.724509][T11992] RSP: 002b:00007fe8419b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.724529][T11992] RAX: ffffffffffffffda RBX: 00007fe840e25fa0 RCX: 00007fe840b9f559 [ 231.724543][T11992] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 231.724555][T11992] RBP: 00007fe8419b0090 R08: 0000000000000000 R09: 0000000000000000 [ 231.724567][T11992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 231.724577][T11992] R13: 00007fe840e26038 R14: 00007fe840e25fa0 R15: 00007fffd4afbdc8 [ 231.724608][T11992] [ 231.781123][T11988] sctp: [Deprecated]: syz.1.1458 (pid 11988) Use of int in max_burst socket option. [ 231.781123][T11988] Use struct sctp_assoc_value instead [ 231.788300][T11988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1458'. [ 231.968297][T12005] netlink: 'syz.4.1464': attribute type 4 has an invalid length. [ 232.010458][T12003] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1463'. [ 232.052383][T12000] SET target dimension over the limit! [ 232.208233][T12015] netlink: 'syz.4.1468': attribute type 4 has an invalid length. [ 232.345594][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1471'. [ 232.363277][T12023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.386994][T12025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1473'. [ 232.391650][T12026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1473'. [ 232.471698][T12028] syzkaller1: entered promiscuous mode [ 232.471720][T12028] syzkaller1: entered allmulticast mode [ 232.629153][T12041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.868422][T12038] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1477'. [ 232.892052][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'. [ 233.134895][T12058] macvlan2: entered promiscuous mode [ 233.135228][T12058] macvlan2: entered allmulticast mode [ 233.135243][T12058] batadv0: entered allmulticast mode [ 233.142245][T12058] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 233.143023][T12058] batadv0: left allmulticast mode [ 233.230480][T12070] FAULT_INJECTION: forcing a failure. [ 233.230480][T12070] name failslab, interval 1, probability 0, space 0, times 0 [ 233.230510][T12070] CPU: 0 UID: 0 PID: 12070 Comm: syz.2.1488 Not tainted syzkaller #0 PREEMPT(full) [ 233.230531][T12070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 233.230541][T12070] Call Trace: [ 233.230558][T12070] [ 233.230566][T12070] dump_stack_lvl+0xe8/0x150 [ 233.230597][T12070] should_fail_ex+0x410/0x560 [ 233.230626][T12070] should_failslab+0xa8/0x100 [ 233.230653][T12070] __kvmalloc_node_noprof+0x171/0x820 [ 233.230676][T12070] ? kasan_save_track+0x3e/0x80 [ 233.230699][T12070] ? __kvmalloc_node_noprof+0x50a/0x820 [ 233.230721][T12070] ? bpf_stack_liveness_init+0x29/0x90 [ 233.230743][T12070] ? bpf_check+0x263f/0x2ef0 [ 233.230763][T12070] ? bpf_compute_const_regs+0x18f/0x3450 [ 233.230785][T12070] ? bpf_compute_const_regs+0x18f/0x3450 [ 233.230818][T12070] bpf_compute_const_regs+0x18f/0x3450 [ 233.230865][T12070] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 233.230890][T12070] ? check_attach_btf_id+0x325/0x1af0 [ 233.230922][T12070] ? bpf_stack_liveness_init+0x29/0x90 [ 233.230944][T12070] ? trace_kmalloc+0x2a/0xf0 [ 233.230965][T12070] ? __pfx_check_attach_btf_id+0x10/0x10 [ 233.230989][T12070] ? bpf_stack_liveness_init+0x29/0x90 [ 233.231011][T12070] ? __kvmalloc_node_noprof+0x52a/0x820 [ 233.231044][T12070] ? __asan_memset+0x22/0x50 [ 233.231068][T12070] bpf_check+0x26ac/0x2ef0 [ 233.231107][T12070] ? __pfx_bpf_check+0x10/0x10 [ 233.231131][T12070] ? bpf_obj_name_cpy+0x194/0x1e0 [ 233.231150][T12070] bpf_prog_load+0x14d1/0x1c20 [ 233.231185][T12070] ? __pfx_bpf_prog_load+0x10/0x10 [ 233.231230][T12070] __sys_bpf+0xd0d/0xd90 [ 233.231261][T12070] ? __pfx___sys_bpf+0x10/0x10 [ 233.231294][T12070] ? __fget_files+0x2a/0x420 [ 233.231328][T12070] ? ksys_write+0x242/0x270 [ 233.231351][T12070] ? __pfx_ksys_write+0x10/0x10 [ 233.231377][T12070] __x64_sys_bpf+0xba/0xd0 [ 233.231401][T12070] do_syscall_64+0x166/0x520 [ 233.231419][T12070] ? trace_irq_disable+0x3b/0x140 [ 233.231440][T12070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.231459][T12070] ? clear_bhb_loop+0x70/0xc0 [ 233.231481][T12070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.231499][T12070] RIP: 0033:0x7f573939f559 [ 233.231517][T12070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.231532][T12070] RSP: 002b:00007f573a287028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.231559][T12070] RAX: ffffffffffffffda RBX: 00007f5739625fa0 RCX: 00007f573939f559 [ 233.231573][T12070] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 233.231585][T12070] RBP: 00007f573a287090 R08: 0000000000000000 R09: 0000000000000000 [ 233.231598][T12070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.231609][T12070] R13: 00007f5739626038 R14: 00007f5739625fa0 R15: 00007fffec430a48 [ 233.231640][T12070] [ 233.714439][T12084] bond_slave_0: entered promiscuous mode [ 233.714462][T12084] bond_slave_0: entered allmulticast mode [ 233.733475][T12084] bond0: (slave bond_slave_0): Releasing backup interface [ 233.738693][T12084] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 233.835386][T12093] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 233.896991][T12097] sctp: [Deprecated]: syz.3.1497 (pid 12097) Use of int in max_burst socket option deprecated. [ 233.896991][T12097] Use struct sctp_assoc_value instead [ 233.952210][T12095] gre3: entered promiscuous mode [ 233.952231][T12095] gre3: entered allmulticast mode [ 234.004009][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1494'. [ 234.056339][T12095] vlan3: entered allmulticast mode [ 234.067778][T12095] batman_adv: batadv0: Adding interface: vlan3 [ 234.067795][T12095] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.067821][T12095] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 234.938179][T12152] IPVS: lc: FWM 3 0x00000003 - no destination available [ 234.939242][T12150] IPVS: lc: FWM 3 0x00000003 - no destination available [ 235.059087][T12157] sctp: [Deprecated]: syz.3.1509 (pid 12157) Use of int in max_burst socket option. [ 235.059087][T12157] Use struct sctp_assoc_value instead [ 235.207270][T12161] ip6gretap1: entered allmulticast mode [ 235.217013][T12161] batman_adv: batadv0: Adding interface: ip6gretap1 [ 235.217028][T12161] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.217055][T12161] batman_adv: batadv0: Interface activated: ip6gretap1 [ 235.273585][T12175] netlink: 'syz.2.1515': attribute type 11 has an invalid length. [ 235.273607][T12175] netlink: 'syz.2.1515': attribute type 9 has an invalid length. [ 235.533680][T12187] netlink: 'syz.0.1519': attribute type 1 has an invalid length. [ 235.533701][T12187] nbd: error processing sock list [ 235.533950][T12187] block nbd1: shutting down sockets [ 236.388299][ T9839] udevd[9839]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 236.755593][T12255] netlink: 'syz.3.1535': attribute type 4 has an invalid length. [ 236.755614][T12255] __nla_validate_parse: 7 callbacks suppressed [ 236.755625][T12255] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1535'. [ 236.822253][ T30] audit: type=1800 audit(1792896838.661:12): pid=12258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1536" name="memory.events" dev="tmpfs" ino=1638 res=0 errno=-22 [ 236.951950][T12263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1538'. [ 237.241602][T12275] syzkaller1: entered promiscuous mode [ 237.241623][T12275] syzkaller1: entered allmulticast mode [ 237.280520][T12281] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.482316][T12294] netlink: 'syz.0.1546': attribute type 2 has an invalid length. [ 237.482340][T12294] netlink: 'syz.0.1546': attribute type 2 has an invalid length. [ 237.795414][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 237.871796][T12325] netlink: 'syz.0.1555': attribute type 3 has an invalid length. [ 237.916122][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 237.916600][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 237.916792][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 237.917703][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 237.917887][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 237.918056][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 237.918225][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 238.152590][T12343] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 238.238357][T12347] x_tables: duplicate underflow at hook 3 [ 238.359116][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 238.586417][T12366] netlink: 'syz.0.1566': attribute type 2 has an invalid length. [ 238.586438][T12366] netlink: 'syz.0.1566': attribute type 11 has an invalid length. [ 239.145444][T12397] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 239.642389][T12411] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 240.900160][ T8242] syz_tun: left promiscuous mode [ 241.077379][T12432] ip_tables: iptables: counters copy to user failed while replacing table [ 241.092177][T12432] netlink: 'syz.3.1581': attribute type 1 has an invalid length. [ 241.132353][T12432] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.134833][T12434] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 241.192410][T12432] bond7: (slave gretap3): making interface the new active one [ 241.211276][T12432] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 241.223390][T12440] ip_tables: iptables: counters copy to user failed while replacing table [ 241.233359][T12441] netlink: 'syz.3.1581': attribute type 1 has an invalid length. [ 241.266944][T12438] ipvlan2: entered allmulticast mode [ 241.266967][T12438] syz_tun: entered allmulticast mode [ 241.337528][T12432] syz.3.1581 (12432) used greatest stack depth: 17952 bytes left [ 241.424668][T12451] xt_CT: You must specify a L4 protocol and not use inversions on it [ 241.560328][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 241.808802][T12463] FAULT_INJECTION: forcing a failure. [ 241.808802][T12463] name failslab, interval 1, probability 0, space 0, times 0 [ 241.808832][T12463] CPU: 1 UID: 0 PID: 12463 Comm: syz.3.1589 Not tainted syzkaller #0 PREEMPT(full) [ 241.808854][T12463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 241.808880][T12463] Call Trace: [ 241.808887][T12463] [ 241.808895][T12463] dump_stack_lvl+0xe8/0x150 [ 241.808924][T12463] should_fail_ex+0x410/0x560 [ 241.808954][T12463] should_failslab+0xa8/0x100 [ 241.808982][T12463] __kvmalloc_node_noprof+0x171/0x820 [ 241.809007][T12463] ? __kvmalloc_node_noprof+0x340/0x820 [ 241.809028][T12463] ? bpf_compute_scc+0xd2/0xb10 [ 241.809047][T12463] ? bpf_compute_scc+0xd2/0xb10 [ 241.809075][T12463] bpf_compute_scc+0xd2/0xb10 [ 241.809111][T12463] bpf_check+0x271e/0x2ef0 [ 241.809153][T12463] ? __pfx_bpf_check+0x10/0x10 [ 241.809179][T12463] ? bpf_obj_name_cpy+0x194/0x1e0 [ 241.809202][T12463] bpf_prog_load+0x14d1/0x1c20 [ 241.809239][T12463] ? __pfx_bpf_prog_load+0x10/0x10 [ 241.809290][T12463] __sys_bpf+0xd0d/0xd90 [ 241.809322][T12463] ? __pfx___sys_bpf+0x10/0x10 [ 241.809357][T12463] ? __fget_files+0x2a/0x420 [ 241.809395][T12463] ? ksys_write+0x242/0x270 [ 241.809419][T12463] ? __pfx_ksys_write+0x10/0x10 [ 241.809446][T12463] __x64_sys_bpf+0xba/0xd0 [ 241.809471][T12463] do_syscall_64+0x166/0x520 [ 241.809489][T12463] ? trace_irq_disable+0x3b/0x140 [ 241.809509][T12463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.809528][T12463] ? clear_bhb_loop+0x70/0xc0 [ 241.809557][T12463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.809575][T12463] RIP: 0033:0x7f8a1679f559 [ 241.809593][T12463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.809608][T12463] RSP: 002b:00007f8a17616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 241.809629][T12463] RAX: ffffffffffffffda RBX: 00007f8a16a25fa0 RCX: 00007f8a1679f559 [ 241.809643][T12463] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 241.809655][T12463] RBP: 00007f8a17616090 R08: 0000000000000000 R09: 0000000000000000 [ 241.809666][T12463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.809677][T12463] R13: 00007f8a16a26038 R14: 00007f8a16a25fa0 R15: 00007fff88827188 [ 241.809709][T12463] [ 242.173370][T12480] ip_tables: iptables: counters copy to user failed while replacing table [ 242.184416][T12480] ip_tables: iptables: counters copy to user failed while replacing table [ 242.938983][T12499] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 242.957224][T12499] bond4: (slave lo): Enslaving as an active interface with an up link [ 242.979594][T12499] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 243.092129][T12504] netlink: 'syz.2.1599': attribute type 1 has an invalid length. [ 243.138114][T12504] netlink: 'syz.2.1599': attribute type 1 has an invalid length. [ 243.154495][T12510] __nla_validate_parse: 34 callbacks suppressed [ 243.154513][T12510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1599'. [ 243.174709][T12506] bond4: (slave veth7): Enslaving as an active interface with a down link [ 243.182857][T12504] netlink: 'syz.2.1599': attribute type 1 has an invalid length. [ 243.214336][T12505] bond4: (slave veth0_to_bond): making interface the new active one [ 243.215518][T12505] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 243.269777][T12504] netlink: 'syz.2.1599': attribute type 1 has an invalid length. [ 243.269998][T12504] netlink: 'syz.2.1599': attribute type 1 has an invalid length. [ 243.270225][T12504] netlink: 'syz.2.1599': attribute type 1 has an invalid length. [ 243.270424][T12504] netlink: 'syz.2.1599': attribute type 1 has an invalid length. [ 243.270655][T12504] netlink: 'syz.2.1599': attribute type 1 has an invalid length. [ 243.270848][T12504] netlink: 'syz.2.1599': attribute type 1 has an invalid length. [ 243.274518][T12504] netlink: 'syz.2.1599': attribute type 1 has an invalid length. [ 243.276157][T12509] syzkaller0: entered promiscuous mode [ 243.276175][T12509] syzkaller0: entered allmulticast mode [ 243.299599][T12509] tipc: Enabled bearer , priority 0 [ 243.322115][T12509] tipc: Resetting bearer [ 243.347332][T12508] tipc: Resetting bearer [ 243.385195][T12508] tipc: Disabling bearer [ 243.418660][T12515] FAULT_INJECTION: forcing a failure. [ 243.418660][T12515] name failslab, interval 1, probability 0, space 0, times 0 [ 243.418691][T12515] CPU: 1 UID: 0 PID: 12515 Comm: syz.0.1601 Not tainted syzkaller #0 PREEMPT(full) [ 243.418711][T12515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 243.418723][T12515] Call Trace: [ 243.418730][T12515] [ 243.418738][T12515] dump_stack_lvl+0xe8/0x150 [ 243.418770][T12515] should_fail_ex+0x410/0x560 [ 243.418801][T12515] should_failslab+0xa8/0x100 [ 243.418830][T12515] __kvmalloc_node_noprof+0x171/0x820 [ 243.418857][T12515] ? __kvmalloc_node_noprof+0x340/0x820 [ 243.418889][T12515] ? bpf_compute_scc+0xec/0xb10 [ 243.418908][T12515] ? bpf_compute_scc+0xec/0xb10 [ 243.418933][T12515] bpf_compute_scc+0xec/0xb10 [ 243.418970][T12515] bpf_check+0x271e/0x2ef0 [ 243.419011][T12515] ? __pfx_bpf_check+0x10/0x10 [ 243.419037][T12515] ? bpf_obj_name_cpy+0x194/0x1e0 [ 243.419060][T12515] bpf_prog_load+0x14d1/0x1c20 [ 243.419096][T12515] ? __pfx_bpf_prog_load+0x10/0x10 [ 243.419146][T12515] __sys_bpf+0xd0d/0xd90 [ 243.419178][T12515] ? __pfx___sys_bpf+0x10/0x10 [ 243.419213][T12515] ? __fget_files+0x2a/0x420 [ 243.419250][T12515] ? ksys_write+0x242/0x270 [ 243.419275][T12515] ? __pfx_ksys_write+0x10/0x10 [ 243.419301][T12515] __x64_sys_bpf+0xba/0xd0 [ 243.419326][T12515] do_syscall_64+0x166/0x520 [ 243.419344][T12515] ? trace_irq_disable+0x3b/0x140 [ 243.419365][T12515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.419383][T12515] ? clear_bhb_loop+0x70/0xc0 [ 243.419405][T12515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.419424][T12515] RIP: 0033:0x7fe840b9f559 [ 243.419442][T12515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.419456][T12515] RSP: 002b:00007fe8419b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 243.419476][T12515] RAX: ffffffffffffffda RBX: 00007fe840e25fa0 RCX: 00007fe840b9f559 [ 243.419490][T12515] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 243.419502][T12515] RBP: 00007fe8419b0090 R08: 0000000000000000 R09: 0000000000000000 [ 243.419514][T12515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.419525][T12515] R13: 00007fe840e26038 R14: 00007fe840e25fa0 R15: 00007fffd4afbdc8 [ 243.419556][T12515] [ 244.199717][T12531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1606'. [ 245.778423][T12609] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1628'. [ 245.794063][T12609] gretap0: entered promiscuous mode [ 245.869224][T12609] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1628'. [ 245.869581][T12609] 0{X: renamed from gretap0 [ 245.891987][T12609] 0{X: left promiscuous mode [ 245.892008][T12609] 0{X: entered allmulticast mode [ 245.898052][T12585] xt_TPROXY: Can be used only with -p tcp or -p udp [ 245.909399][T12609] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 246.066857][T12616] bond5: option ad_user_port_key: invalid value (65535) [ 246.066882][T12616] bond5: option ad_user_port_key: allowed values 0 - 1023 [ 246.091327][T12616] bond5 (unregistering): Released all slaves [ 246.243831][T12616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1629'. [ 246.469256][T12631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1633'. [ 246.603763][T12639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1632'. [ 246.603788][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1632'. [ 246.775901][T12643] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1637'. [ 246.776026][T12643] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1637'. [ 246.832674][T12646] macvlan1: entered promiscuous mode [ 246.832863][T12646] macvlan1: entered allmulticast mode [ 246.832875][T12646] veth1_vlan: entered allmulticast mode [ 247.121677][T12656] syzkaller1: entered promiscuous mode [ 247.121700][T12656] syzkaller1: entered allmulticast mode [ 247.456518][T12672] bond9: entered promiscuous mode [ 247.457833][T12672] 8021q: adding VLAN 0 to HW filter on device bond9 [ 247.566961][T12673] vlan3: entered allmulticast mode [ 247.566983][T12673] bond9: entered allmulticast mode [ 247.596729][T12675] bond9: (slave bridge5): making interface the new active one [ 247.596753][T12675] bridge5: entered promiscuous mode [ 247.597055][T12675] bridge5: entered allmulticast mode [ 247.598663][T12675] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 247.997104][T12714] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 248.435771][T12744] validate_nla: 124 callbacks suppressed [ 248.435793][T12744] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 248.632714][T12752] bridge0: port 2(syz_tun) entered blocking state [ 248.632917][T12752] bridge0: port 2(syz_tun) entered disabled state [ 248.633088][T12752] syz_tun: entered allmulticast mode [ 248.637873][T12752] syz_tun: entered promiscuous mode [ 248.808866][T12758] __nla_validate_parse: 7 callbacks suppressed [ 248.817159][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 248.876791][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 249.345243][T12773] bridge6: entered allmulticast mode [ 249.463293][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1673'. [ 249.705893][T12788] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 249.761049][T12788] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 250.049180][T12805] netlink: 'syz.3.1680': attribute type 3 has an invalid length. [ 250.049206][T12805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1680'. [ 250.067888][T12805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1680'. [ 250.176250][T12809] xt_nfacct: accounting object `' does not exist [ 250.186921][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1680'. [ 250.506830][T12816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1683'. [ 250.904009][T12832] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1687'. [ 251.033925][T12838] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 251.354871][T12860] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1695'. [ 251.671923][T12878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1697'. [ 251.799082][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 252.135704][T12899] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 252.168802][T12899] bond8: (slave lo): Enslaving as an active interface with an up link [ 252.180574][T12899] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 252.216876][T12898] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 252.234425][T12908] workqueue: name exceeds WQ_NAME_LEN. Truncating to: (h\E3~ϱoR!Fo?< [ 252.251699][T12909] netlink: 'syz.0.1702': attribute type 1 has an invalid length. [ 252.953938][T12929] sctp: [Deprecated]: syz.1.1707 (pid 12929) Use of int in max_burst socket option. [ 252.953938][T12929] Use struct sctp_assoc_value instead [ 253.024153][T12936] rxe_eth0 speed is unknown, defaulting to 1000 [ 253.570857][T12936] lo speed is unknown, defaulting to 1000 [ 253.643231][T12961] ip6tnl5: entered promiscuous mode [ 253.758794][T12963] 0XD: renamed from gretap0 (while UP) [ 253.787449][T12963] 0XD: entered allmulticast mode [ 253.825113][T12963] ip_tables: iptables: counters copy to user failed while replacing table [ 254.258814][T12985] __nla_validate_parse: 4 callbacks suppressed [ 254.258832][T12985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1725'. [ 254.258849][T12985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1725'. [ 254.344269][T12983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.392706][T12999] netlink: 'syz.4.1726': attribute type 1 has an invalid length. [ 254.541007][T13002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.654432][T13004] IPVS: set_ctl: invalid protocol: 4 172.30.1.1:20002 [ 254.875506][T13008] No such timeout policy "syz1" [ 255.057142][T13017] TC_ACT_REPEAT abuse ? [ 255.443562][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1732'. [ 255.586676][T13030] xt_LOG: prefix is not null-terminated [ 255.643410][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.643466][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.687442][T13032] bond9: option resend_igmp: invalid value (2878) [ 255.687466][T13032] bond9: option resend_igmp: allowed values 0 - 255 [ 255.696854][T13032] bond9 (unregistering): Released all slaves [ 255.914757][T13042] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 255.954690][T13047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1738'. [ 255.992505][T13043] bond11: entered promiscuous mode [ 255.993135][T13043] 8021q: adding VLAN 0 to HW filter on device bond11 [ 256.135733][T13063] netlink: 'syz.0.1741': attribute type 1 has an invalid length. [ 256.174534][T13063] 8021q: adding VLAN 0 to HW filter on device bond12 [ 256.228839][T13071] netlink: 'syz.3.1743': attribute type 1 has an invalid length. [ 256.316665][T13075] xt_IDLETIMER: timeout value is too big [ 256.540080][T13084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1747'. [ 256.997316][T13114] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 257.022385][T13117] xt_cgroup: invalid path, errno=-2 [ 257.022741][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1753'. [ 257.203142][T13121] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1758'. [ 257.228191][T13110] rxe_eth0 speed is unknown, defaulting to 1000 [ 257.340304][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1757'. [ 257.554371][T13150] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1762'. [ 257.735732][T13110] lo speed is unknown, defaulting to 1000 [ 257.765406][T13157] netlink: 'syz.0.1763': attribute type 1 has an invalid length. [ 257.818613][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1764'. [ 258.045093][T13166] tipc: Failed to remove unknown binding: 66,0,0/0:42857171/42857173 [ 258.045123][T13166] tipc: Failed to remove unknown binding: 66,0,0/0:42857171/42857172 [ 258.048710][T13166] tipc: Failed to remove unknown binding: 66,0,0/0:42857171/42857173 [ 258.048735][T13166] tipc: Failed to remove unknown binding: 66,0,0/0:42857171/42857172 [ 258.199974][ C0] bridge0: port 4(ip6gretap0) entered learning state [ 258.841943][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 258.842332][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 259.063192][T13197] tipc: New replicast peer: 127.0.0.1 [ 259.063785][T13197] tipc: Enabled bearer , priority 5 [ 259.063946][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.064151][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.064355][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.066725][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.066936][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.067138][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.067347][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.067562][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.067775][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.067976][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.088806][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.089152][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.089349][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.089562][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.089804][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.089997][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.096592][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.103448][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.103689][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.103892][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.104131][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.104326][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.104518][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.113495][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.113719][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.113922][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.114121][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.114343][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.114592][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.114785][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.123575][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.123845][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.124047][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.124244][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.132272][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.132991][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.133255][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.133452][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.137324][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.141631][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.141857][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.142059][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.147830][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.148042][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.148250][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.148510][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.148738][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.154935][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.169778][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.169986][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.170209][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.170421][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.170634][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.170832][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.171028][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.171237][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.188301][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.188504][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.188733][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.195922][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.196174][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.196369][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.204384][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.204613][T13197] tipc: Enabling of bearer rejected, already enabled [ 259.485484][ T11] block nbd4: Possible stuck request ffff888027fa5080: control (read@0,1024B). Runtime 120 seconds [ 259.485524][ T11] block nbd4: Possible stuck request ffff888027fa5240: control (read@1024,1024B). Runtime 120 seconds [ 259.485569][ T11] block nbd4: Possible stuck request ffff888027fa5400: control (read@2048,1024B). Runtime 120 seconds [ 259.485593][ T11] block nbd4: Possible stuck request ffff888027fa55c0: control (read@3072,1024B). Runtime 120 seconds [ 259.764730][T13215] FAULT_INJECTION: forcing a failure. [ 259.764730][T13215] name failslab, interval 1, probability 0, space 0, times 0 [ 259.764761][T13215] CPU: 1 UID: 0 PID: 13215 Comm: syz.2.1782 Not tainted syzkaller #0 PREEMPT(full) [ 259.764782][T13215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 259.764793][T13215] Call Trace: [ 259.764800][T13215] [ 259.764807][T13215] dump_stack_lvl+0xe8/0x150 [ 259.764836][T13215] should_fail_ex+0x410/0x560 [ 259.764874][T13215] should_failslab+0xa8/0x100 [ 259.764899][T13215] __kvmalloc_node_noprof+0x171/0x820 [ 259.764922][T13215] ? __kvmalloc_node_noprof+0x340/0x820 [ 259.764945][T13215] ? bpf_compute_scc+0xa26/0xb10 [ 259.764962][T13215] ? bpf_compute_scc+0xa26/0xb10 [ 259.764986][T13215] bpf_compute_scc+0xa26/0xb10 [ 259.765026][T13215] bpf_check+0x271e/0x2ef0 [ 259.765066][T13215] ? __pfx_bpf_check+0x10/0x10 [ 259.765092][T13215] ? bpf_obj_name_cpy+0x194/0x1e0 [ 259.765116][T13215] bpf_prog_load+0x14d1/0x1c20 [ 259.765151][T13215] ? __pfx_bpf_prog_load+0x10/0x10 [ 259.765195][T13215] __sys_bpf+0xd0d/0xd90 [ 259.765224][T13215] ? __pfx___sys_bpf+0x10/0x10 [ 259.765260][T13215] ? __fget_files+0x2a/0x420 [ 259.765296][T13215] ? ksys_write+0x242/0x270 [ 259.765317][T13215] ? __pfx_ksys_write+0x10/0x10 [ 259.765341][T13215] __x64_sys_bpf+0xba/0xd0 [ 259.765364][T13215] do_syscall_64+0x166/0x520 [ 259.765382][T13215] ? trace_irq_disable+0x3b/0x140 [ 259.765403][T13215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.765422][T13215] ? clear_bhb_loop+0x70/0xc0 [ 259.765445][T13215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.765464][T13215] RIP: 0033:0x7f573939f559 [ 259.765481][T13215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.765497][T13215] RSP: 002b:00007f573a287028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 259.765517][T13215] RAX: ffffffffffffffda RBX: 00007f5739625fa0 RCX: 00007f573939f559 [ 259.765531][T13215] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 259.765543][T13215] RBP: 00007f573a287090 R08: 0000000000000000 R09: 0000000000000000 [ 259.765554][T13215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.765565][T13215] R13: 00007f5739626038 R14: 00007f5739625fa0 R15: 00007fffec430a48 [ 259.765597][T13215] [ 260.090913][T13222] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3947446085/3947446086 [ 260.091831][T13223] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3947446085/3947446086 [ 260.113314][T13222] __nla_validate_parse: 3 callbacks suppressed [ 260.113331][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1786'. [ 260.113703][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1786'. [ 260.278136][T13226] tipc: Enabled bearer , priority 0 [ 260.313012][T13240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1789'. [ 260.313034][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1789'. [ 260.315406][T13233] tipc: Resetting bearer [ 260.375306][T13225] tipc: Disabling bearer [ 260.455877][T13243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1789'. [ 260.455900][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1789'. [ 260.712259][T13247] netlink: 'syz.2.1792': attribute type 1 has an invalid length. [ 260.842483][T13247] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.957469][T13280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1800'. [ 262.127945][T13282] nbd: socks must be embedded in a SOCK_ITEM attr [ 262.128375][T13282] block nbd1: shutting down sockets [ 263.592764][T13327] vcan0: tx address claim with dlc 6 [ 264.024861][T13336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1814'. [ 264.464041][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1815'. [ 264.775403][T13340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1815'. [ 264.912894][T13347] veth13: entered allmulticast mode [ 264.948328][T13347] bond13: (slave veth13): Enslaving as an active interface with an up link [ 266.382632][T13388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1823'. [ 266.382670][T13388] netlink: 'syz.1.1823': attribute type 7 has an invalid length. [ 266.382683][T13388] netlink: 'syz.1.1823': attribute type 8 has an invalid length. [ 266.382694][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1823'. [ 266.463458][T13388] ip6gretap0: entered promiscuous mode [ 266.478668][T13388] syz_tun: entered promiscuous mode [ 266.478823][T13388] syz_tun: left promiscuous mode [ 266.604311][T13388] ip6gretap0: left promiscuous mode [ 267.275844][T13395] xt_hashlimit: size too large, truncated to 1048576 [ 267.382251][T13396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1827'. [ 268.183605][T13404] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1829'. [ 268.377894][T13411] xt_TCPMSS: Only works on TCP SYN packets [ 268.395185][T13411] ip6gretap1: entered allmulticast mode [ 268.397807][T13411] batman_adv: batadv0: Adding interface: ip6gretap1 [ 268.397821][T13411] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.397858][T13411] batman_adv: batadv0: Interface activated: ip6gretap1 [ 268.453789][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 268.653953][T13415] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1833'. [ 269.106618][T13433] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1838'. [ 269.128116][T13433] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1838'. [ 269.189337][T13415] rxe_eth0 speed is unknown, defaulting to 1000 [ 269.902519][T13415] lo speed is unknown, defaulting to 1000 [ 275.328904][ C1] sched: DL replenish lagged too much [ 278.046259][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 288.281411][ C0] bridge0: port 4(ip6gretap0) entered forwarding state [ 288.281438][ C0] bridge0: topology change detected, propagating [ 288.934172][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.934198][ C1] bridge0: topology change detected, propagating [ 288.934378][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.934394][ C1] bridge0: topology change detected, propagating [ 301.251706][ T11] block nbd4: Possible stuck request ffff888027fa5080: control (read@0,1024B). Runtime 150 seconds [ 301.251764][ T11] block nbd4: Possible stuck request ffff888027fa5240: control (read@1024,1024B). Runtime 150 seconds [ 301.251790][ T11] block nbd4: Possible stuck request ffff888027fa5400: control (read@2048,1024B). Runtime 150 seconds [ 301.251813][ T11] block nbd4: Possible stuck request ffff888027fa55c0: control (read@3072,1024B). Runtime 150 seconds [ 319.091280][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.104804][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.202279][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 332.453963][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 381.839838][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.857215][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.769800][ T4996] udevd[4996]: worker [8166] /devices/virtual/block/nbd4 timeout; kill it [ 423.336122][ T4996] udevd[4996]: seq 11801 '/devices/virtual/block/nbd4' killed [ 424.608264][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 440.802684][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.820664][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.515387][ T32] INFO: task kworker/0:4:5629 blocked for more than 147 seconds. [ 446.515414][ T32] Not tainted syzkaller #0 [ 446.515424][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 446.515448][ T32] task:kworker/0:4 state:D stack:25160 pid:5629 tgid:5629 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 446.515505][ T32] Workqueue: events switchdev_deferred_process_work [ 446.515543][ T32] Call Trace: [ 446.515551][ T32] [ 446.515564][ T32] __schedule+0x17dd/0x5820 [ 446.515613][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 446.515648][ T32] ? __pfx___schedule+0x10/0x10 [ 446.515704][ T32] ? schedule+0x90/0x2b0 [ 446.515731][ T32] schedule+0x164/0x2b0 [ 446.515758][ T32] schedule_preempt_disabled+0x13/0x30 [ 446.515783][ T32] __mutex_lock+0x7c4/0x15a0 [ 446.515806][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 446.515830][ T32] ? switchdev_deferred_process_work+0xe/0x20 [ 446.515853][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 446.515873][ T32] ? lock_acquire+0x115/0x350 [ 446.515901][ T32] ? rcu_is_watching+0x16/0xb0 [ 446.515926][ T32] ? process_scheduled_works+0x97a/0x1630 [ 446.515951][ T32] switchdev_deferred_process_work+0xe/0x20 [ 446.515970][ T32] process_scheduled_works+0xc3d/0x1630 [ 446.516027][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 446.516059][ T32] ? assign_work+0x3cf/0x5d0 [ 446.516090][ T32] worker_thread+0xa47/0xfb0 [ 446.516143][ T32] kthread+0x38b/0x480 [ 446.516163][ T32] ? __pfx_worker_thread+0x10/0x10 [ 446.516185][ T32] ? __pfx_kthread+0x10/0x10 [ 446.516206][ T32] ret_from_fork+0x514/0xb70 [ 446.516230][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 446.516250][ T32] ? __switch_to+0xc78/0x1410 [ 446.516280][ T32] ? __pfx_kthread+0x10/0x10 [ 446.516299][ T32] ret_from_fork_asm+0x1a/0x30 [ 446.516335][ T32] [ 446.516389][ T32] INFO: task kworker/u8:31:8580 blocked for more than 147 seconds. [ 446.516404][ T32] Not tainted syzkaller #0 [ 446.516413][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 446.516422][ T32] task:kworker/u8:31 state:D stack:23752 pid:8580 tgid:8580 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 446.516472][ T32] Workqueue: ipv6_addrconf addrconf_verify_work [ 446.516495][ T32] Call Trace: [ 446.516501][ T32] [ 446.516513][ T32] __schedule+0x17dd/0x5820 [ 446.516566][ T32] ? __pfx___schedule+0x10/0x10 [ 446.516602][ T32] ? schedule+0x90/0x2b0 [ 446.516632][ T32] schedule+0x164/0x2b0 [ 446.516668][ T32] schedule_preempt_disabled+0x13/0x30 [ 446.516693][ T32] __mutex_lock+0x7c4/0x15a0 [ 446.516716][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 446.516739][ T32] ? addrconf_verify_work+0x19/0x30 [ 446.516763][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 446.516798][ T32] ? rcu_is_watching+0x16/0xb0 [ 446.516822][ T32] ? process_scheduled_works+0x97a/0x1630 [ 446.516847][ T32] addrconf_verify_work+0x19/0x30 [ 446.516869][ T32] process_scheduled_works+0xc3d/0x1630 [ 446.516926][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 446.516959][ T32] ? assign_work+0x3cf/0x5d0 [ 446.516988][ T32] worker_thread+0xa47/0xfb0 [ 446.517043][ T32] kthread+0x38b/0x480 [ 446.517062][ T32] ? __pfx_worker_thread+0x10/0x10 [ 446.517085][ T32] ? __pfx_kthread+0x10/0x10 [ 446.517105][ T32] ret_from_fork+0x514/0xb70 [ 446.517129][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 446.517149][ T32] ? __switch_to+0xc78/0x1410 [ 446.517177][ T32] ? __pfx_kthread+0x10/0x10 [ 446.517197][ T32] ret_from_fork_asm+0x1a/0x30 [ 446.517233][ T32] [ 446.517278][ T32] [ 446.517278][ T32] Showing all locks held in the system: [ 446.517287][ T32] locks held by kworker/0:0H/11: 2, on CPU#0: [ 446.517301][ T32] #0: ffff888021a9b148 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 446.517357][ T32] #1: ffffc90000107c40 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 446.517408][ T32] locks held by kworker/u8:0/12: 4, last CPU#1: [ 446.517421][ T32] #0: ffff88807d1b3148 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 446.517475][ T32] #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 446.517524][ T32] #2: ffff88807e591480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 446.517577][ T32] #3: ffff8880780baad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 446.517628][ T32] locks held by kworker/u8:1/13: 3, last CPU#1: [ 446.517641][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 446.517697][ T32] #1: ffffc90000127c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 446.517747][ T32] #2: ffff88802cabd258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 446.517808][ T32] locks held by kworker/1:1/29: 4, last CPU#1: [ 446.517820][ T32] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 446.517869][ T32] #1: ffffc90000a57c40 (drain_vmap_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 446.517918][ T32] #2: ffffffff8fe89840 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 446.517966][ T32] #3: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 446.518015][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 446.518027][ T32] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 446.518073][ T32] locks held by kworker/u8:2/43: 3, last CPU#1: [ 446.518086][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 446.518135][ T32] #1: ffffc90000b37c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 446.518185][ T32] #2: ffff8880332ab258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 446.518242][ T32] locks held by kworker/u8:3/51: 4, last CPU#1: [ 446.518255][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 446.518304][ T32] #1: ffffc90000bb7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 446.518351][ T32] #2: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 446.518398][ T32] #3: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 446.518446][ T32] locks held by kworker/u8:4/62: 4, last CPU#1: [ 446.518459][ T32] #0: ffff88805513a948 ((wq_completion)krds_cp_wq#1/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 446.518508][ T32] #1: ffffc9000204fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 446.518557][ T32] #2: ffff888055681280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 446.518610][ T32] #3: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 446.518657][ T32] locks held by kworker/u8:5/85: 4, last CPU#1: [ 446.518676][ T32] #0: ffff88807d1b7948 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 446.518729][ T32] #1: ffffc900024efc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 446.518782][ T32] #2: ffff8880765c1480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 447.945398][ T32] #3: ffff8880780bc888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 447.945454][ T32] locks held by kworker/u8:6/148: 4, last CPU#1: [ 447.945469][ T32] #0: ffff8880760df148 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.945523][ T32] #1: ffffc90002d87c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.945571][ T32] #2: ffff88807d339480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 447.945619][ T32] #3: ffff88803296b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 447.945678][ T32] locks held by kworker/1:2/948: 4, on CPU#1: [ 447.945691][ T32] #0: ffff88807e83c148 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.945745][ T32] #1: ffffc900049f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.945809][ T32] #2: ffff88807d339480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 447.945867][ T32] #3: ffff88803296b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 447.945918][ T32] locks held by kworker/u8:9/1030: 3, last CPU#1: [ 447.945932][ T32] #0: ffff8880363e7148 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.945985][ T32] #1: ffffc90004adfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.946035][ T32] #2: ffff888078ec18e0 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 447.946099][ T32] locks held by klogd/4985: 2, last CPU#1: [ 447.946112][ T32] #0: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 447.946159][ T32] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 447.946208][ T32] locks held by udevd/4996: 2, last CPU#1: [ 447.946221][ T32] #0: ffffffff904f5a78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 447.946265][ T32] #1: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 447.946313][ T32] locks held by dhcpcd/5290: 1, last CPU#1: [ 447.946326][ T32] #0: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 447.946372][ T32] locks held by dhcpcd/5291: 2, last CPU#1: [ 447.946385][ T32] #0: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 447.946432][ T32] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x2e/0x4a0 [ 447.946484][ T32] locks held by getty/5383: 2, on CPU#1: [ 447.946496][ T32] #0: ffff888036a400a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 447.946545][ T32] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 447.946590][ T32] locks held by syz-executor/5614: 1, last CPU#1: [ 447.946603][ T32] #0: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 447.946650][ T32] locks held by syz-executor/5625: 1, last CPU#1: [ 447.946663][ T32] #0: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 447.946710][ T32] locks held by syz-executor/5626: 3, last CPU#1: [ 447.946723][ T32] #0: ffffffff904f5a78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 447.946767][ T32] #1: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 447.946813][ T32] #2: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 447.946866][ T32] locks held by kworker/0:4/5629: 3, on CPU#0: [ 447.946879][ T32] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.946929][ T32] #1: ffffc90003b47c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.946977][ T32] #2: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 447.947024][ T32] locks held by syz-executor/5633: 3, last CPU#1: [ 447.947037][ T32] #0: ffffffff904f5a78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 447.947082][ T32] #1: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 447.947129][ T32] #2: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 447.947177][ T32] locks held by syz-executor/5635: 1, last CPU#1: [ 447.947190][ T32] #0: ffff88803648f180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 447.947236][ T32] locks held by syz-executor/5636: 2, last CPU#1: [ 447.947249][ T32] #0: ffffffff904f5a78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 447.947294][ T32] #1: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 447.947345][ T32] locks held by kworker/1:4/5755: 3, on CPU#1: [ 447.947358][ T32] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.947406][ T32] #1: ffffc900042e7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.947454][ T32] #2: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x209/0x780 [ 447.947501][ T32] locks held by kworker/0:7/5770: 2, last CPU#0: [ 447.947514][ T32] #0: ffff88801c069d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.947563][ T32] #1: ffffc900047e7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.947613][ T32] locks held by kworker/u8:10/6737: 5, last CPU#0: [ 447.947626][ T32] #0: ffff888036b73148 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.947680][ T32] #1: ffffc90002e37c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.947729][ T32] #2: ffff88807ce35480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 447.947779][ T32] #3: ffff8880780ba0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 447.947830][ T32] #4: ffffffff8fd59dc0 (rcu_callback){....}-{0:0}, at: rcu_core+0x8b0/0x1230 [ 447.947882][ T32] locks held by kworker/u8:11/6739: 3, last CPU#1: [ 447.947895][ T32] #0: ffff888055130948 ((wq_completion)krds_cp_wq#3/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.947944][ T32] #1: ffffc90004cdfc40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.947993][ T32] #2: ffff8880789c1020 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2d0 [ 447.948042][ T32] locks held by udevd/8166: 1, on CPU#1: [ 447.948054][ T32] #0: ffff888027d8e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 447.948100][ T32] locks held by kworker/u8:13/8242: 3, last CPU#1: [ 447.948113][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.948161][ T32] #1: ffffc9000d8e7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.948212][ T32] #2: ffff88802d55d258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 447.948268][ T32] locks held by kworker/u8:14/8560: 4, last CPU#1: [ 447.948281][ T32] #0: ffff8880760de948 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.948334][ T32] #1: ffffc90006b67c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.948382][ T32] #2: ffff888034da5480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 447.948432][ T32] #3: ffff888078ec4888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 447.948483][ T32] locks held by kworker/u8:15/8561: 2, last CPU#1: [ 447.948496][ T32] #0: ffff888036b71148 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.948549][ T32] #1: ffffc9000cc57c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.948599][ T32] locks held by kworker/u8:16/8562: 3, on CPU#0: [ 447.948612][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.948661][ T32] #1: ffffc9000b447c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.948705][ T32] #2: ffffffff8fd601f8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x175/0x610 [ 447.948756][ T32] locks held by kworker/u8:21/8567: 4, last CPU#1: [ 447.948769][ T32] #0: ffff888036b73148 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.505974][ T32] #1: ffffc9000a01fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.506026][ T32] #2: ffff88807ce35480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 449.506079][ T32] #3: ffff8880780b9700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 449.506133][ T32] locks held by kworker/u8:24/8570: 4, last CPU#1: [ 449.506147][ T32] #0: ffff88807e45d148 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.506200][ T32] #1: ffffc9000c447c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.506249][ T32] #2: ffff88807b7d9480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 449.506299][ T32] #3: ffff888078ec3ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 449.506350][ T32] locks held by kworker/u8:25/8571: 6, last CPU#1: [ 449.506363][ T32] #0: ffff888036131148 ((wq_completion)ext4-rsv-conversion){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.506412][ T32] #1: ffffc9001011fc40 ((work_completion)(&ei->i_rsv_conversion_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.506462][ T32] #2: ffff888035b88938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 449.506510][ T32] #3: ffff888076a6d3a8 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x77d/0x12c0 [ 449.506560][ T32] #4: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 449.506608][ T32] #5: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 [ 449.506658][ T32] locks held by kworker/u8:26/8572: 4, last CPU#1: [ 449.506679][ T32] #0: ffff8880760df148 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.506733][ T32] #1: ffffc90006307c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.506782][ T32] #2: ffff88807d339480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 449.506833][ T32] #3: ffff88803296bea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 449.506882][ T32] locks held by kworker/u8:27/8573: 3, last CPU#1: [ 449.506895][ T32] #0: ffff88802c6fe148 ((wq_completion)bond7#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.506948][ T32] #1: ffffc900062f7c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.506998][ T32] #2: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf0/0x1840 [ 449.507047][ T32] locks held by kworker/u8:28/8574: 3, last CPU#1: [ 449.507060][ T32] #0: ffff88807efd1948 ((wq_completion)bond1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.507113][ T32] #1: ffffc900062e7c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.507162][ T32] #2: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf0/0x1840 [ 449.507211][ T32] locks held by kworker/u8:29/8578: 4, last CPU#1: [ 449.507224][ T32] #0: ffff888036b72148 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.507277][ T32] #1: ffffc9000d3efc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.507325][ T32] #2: ffff88807b76d480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 449.507374][ T32] #3: ffff8880780b8d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 449.507425][ T32] locks held by kworker/u8:31/8580: 3, on CPU#1: [ 449.507438][ T32] #0: ffff88801e76a948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.507487][ T32] #1: ffffc900062bfc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.507536][ T32] #2: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 449.507584][ T32] locks held by kworker/u8:33/8583: 2, last CPU#1: [ 449.507596][ T32] #0: ffff88807d1b3148 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.507650][ T32] #1: ffffc9000617fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.507707][ T32] locks held by kworker/u8:34/8584: 4, last CPU#1: [ 449.507720][ T32] #0: ffff88807d1b3948 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.507773][ T32] #1: ffffc9000616fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.507822][ T32] #2: ffff88807e595480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 449.507873][ T32] #3: ffff8880780bbea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 449.507928][ T32] locks held by kworker/0:9/9371: 2, last CPU#0: [ 449.507940][ T32] #0: ffff88801c069d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.507990][ T32] #1: ffffc90003817c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.508038][ T32] locks held by kworker/0:11/9374: 2, last CPU#0: [ 449.508051][ T32] #0: ffff88807c0f3948 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.508105][ T32] #1: ffffc9000ffc7c40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.508155][ T32] locks held by kworker/u8:35/10053: 4, last CPU#1: [ 449.508168][ T32] #0: ffff888055136948 ((wq_completion)krds_cp_wq#3/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.508216][ T32] #1: ffffc900030b7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.508264][ T32] #2: ffff888054c2ed80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 449.508317][ T32] #3: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 449.508364][ T32] locks held by kworker/u8:36/10054: 5, last CPU#0: [ 449.508377][ T32] #0: ffff88802ccba948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.508425][ T32] #1: ffffc900100b7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.508474][ T32] #2: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 449.508523][ T32] #3: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 449.508569][ T32] #4: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 449.508617][ T32] locks held by kworker/u8:38/10056: 3, last CPU#1: [ 449.508630][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.508684][ T32] #1: ffffc900100d7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.508735][ T32] #2: ffff88802cabd258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 449.523053][ T32] locks held by kworker/u8:39/10057: 4, last CPU#1: [ 449.523074][ T32] #0: ffff88807d1b7948 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.523136][ T32] #1: ffffc900100e7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 449.523186][ T32] #2: ffff8880765c1480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 449.523238][ T32] #3: ffff88803296dc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 449.523292][ T32] locks held by syz.3.1833/13415: 5, last CPU#1: [ 449.523305][ T32] #0: ffffffff91268248 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 449.523354][ T32] #1: ffffffff90fcc448 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1fb/0x2f0 [ 449.523405][ T32] #2: ffffffff90fcc608 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x233/0x2f0 [ 449.523455][ T32] #3: ffff888035cb5020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x640 [ 449.523504][ T32] #4: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 449.523553][ T32] locks held by syz.2.1840/13445: 1, last CPU#1: [ 449.523565][ T32] #0: ffff888078834220 (sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_bind+0xa3/0x1d0 [ 449.523613][ T32] [ 449.523618][ T32] ============================================= [ 449.523618][ T32] [ 449.523646][ T32] NMI backtrace for cpu 1 [ 449.523671][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 449.523691][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 449.523703][ T32] Call Trace: [ 449.523710][ T32] [ 449.523719][ T32] dump_stack_lvl+0xe8/0x150 [ 449.523747][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 449.523773][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 449.523795][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 449.523823][ T32] sys_info+0x135/0x170 [ 449.523843][ T32] watchdog+0xfd2/0x1030 [ 449.523872][ T32] ? watchdog+0x1c7/0x1030 [ 449.523901][ T32] kthread+0x38b/0x480 [ 449.523919][ T32] ? __pfx_watchdog+0x10/0x10 [ 449.523938][ T32] ? __pfx_kthread+0x10/0x10 [ 449.523957][ T32] ret_from_fork+0x514/0xb70 [ 449.523980][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 449.523999][ T32] ? __switch_to+0xc78/0x1410 [ 449.524027][ T32] ? __pfx_kthread+0x10/0x10 [ 449.524047][ T32] ret_from_fork_asm+0x1a/0x30 [ 449.524081][ T32] [ 449.524088][ T32] Sending NMI from CPU 1 to CPUs 0: [ 449.524124][ C0] NMI backtrace for cpu 0 [ 449.524139][ C0] CPU: 0 UID: 0 PID: 10054 Comm: kworker/u8:36 Not tainted syzkaller #0 PREEMPT(full) [ 449.524180][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 449.524193][ C0] Workqueue: bat_events batadv_dat_purge [ 449.524220][ C0] RIP: 0010:arch_stack_walk+0xf3/0x150 [ 449.524244][ C0] Code: 78 ff ff ff 00 00 00 00 48 8d bd 78 ff ff ff 4c 89 e6 4c 89 fa e8 6d ba 09 00 83 bd 78 ff ff ff 00 74 38 4c 8d bd 78 ff ff ff <4c> 89 ff e8 e5 8e 09 00 48 85 c0 74 24 48 89 df 48 89 c6 4d 89 f3 [ 449.524261][ C0] RSP: 0018:ffffc90000006928 EFLAGS: 00000202 [ 449.524277][ C0] RAX: 00000000f254b501 RBX: ffffc900000069e0 RCX: 8000000000000101 [ 449.524292][ C0] RDX: ffffc90000006901 RSI: ffffffff8e70fdbb RDI: ffff888047515dc0 [ 449.524307][ C0] RBP: ffffc900000069b0 R08: ffffc90000007530 R09: 0000000000000000 [ 449.524322][ C0] R10: ffffc90000006978 R11: fffff52000000d31 R12: ffff888047515dc0 [ 449.524337][ C0] R13: ffff88804f44ed00 R14: ffffffff81b301f0 R15: ffffc90000006928 [ 449.524352][ C0] FS: 0000000000000000(0000) GS:ffff888123a6b000(0000) knlGS:0000000000000000 [ 449.524368][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 449.524381][ C0] CR2: 000055557ed964e8 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 449.524399][ C0] Call Trace: [ 449.524405][ C0] [ 449.524416][ C0] ? nft_synproxy_do_eval+0x389/0x5d0 [ 449.524442][ C0] stack_trace_save+0xa9/0x100 [ 449.524466][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 449.524488][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 449.524515][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 449.524534][ C0] kasan_save_track+0x3e/0x80 [ 449.524559][ C0] ? kasan_save_track+0x3e/0x80 [ 449.524583][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 449.524609][ C0] ? __kmalloc_cache_noprof+0x31c/0x600 [ 449.524633][ C0] ? ref_tracker_alloc+0x221/0x530 [ 449.524661][ C0] ? dst_init+0xbe/0x470 [ 449.524681][ C0] ? dst_alloc+0x12a/0x170 [ 449.524701][ C0] ? ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 449.524731][ C0] ? ip_route_output_key_hash+0x18d/0x2a0 [ 449.524759][ C0] ? ip_route_output_flow+0x2a/0x150 [ 449.524783][ C0] ? ip_route_me_harder+0x762/0xfe0 [ 449.524810][ C0] ? synproxy_send_tcp+0x332/0x670 [ 449.524827][ C0] ? synproxy_send_client_synack+0x89b/0xde0 [ 449.524846][ C0] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 449.524890][ C0] ? rcu_is_watching+0x16/0xb0 [ 449.524916][ C0] __kasan_kmalloc+0x93/0xb0 [ 449.524944][ C0] __kmalloc_cache_noprof+0x31c/0x600 [ 449.524968][ C0] ? __kmalloc_cache_noprof+0x148/0x600 [ 449.524991][ C0] ? ref_tracker_alloc+0x221/0x530 [ 449.525019][ C0] ? ref_tracker_alloc+0x221/0x530 [ 449.525051][ C0] ref_tracker_alloc+0x221/0x530 [ 449.525082][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 449.525118][ C0] ? dst_alloc+0x105/0x170 [ 449.525139][ C0] ? kmem_cache_alloc_noprof+0x31a/0x600 [ 449.525162][ C0] ? dst_alloc+0x105/0x170 [ 449.525187][ C0] ? kmem_cache_alloc_noprof+0x151/0x600 [ 449.525211][ C0] dst_init+0xbe/0x470 [ 449.525231][ C0] ? dst_alloc+0x112/0x170 [ 449.525254][ C0] dst_alloc+0x12a/0x170 [ 449.525278][ C0] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 449.525313][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 449.525343][ C0] ip_route_output_key_hash+0x18d/0x2a0 [ 449.525373][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 449.525403][ C0] ? lock_acquire+0x115/0x350 [ 449.525429][ C0] ip_route_output_flow+0x2a/0x150 [ 449.525454][ C0] ? ip_route_me_harder+0x74b/0xfe0 [ 449.525483][ C0] ip_route_me_harder+0x762/0xfe0 [ 449.525517][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 449.525548][ C0] ? __alloc_skb+0x27a/0x7a0 [ 449.525579][ C0] ? __cookie_v4_init_sequence+0x273/0x510 [ 449.525600][ C0] ? kmem_cache_alloc_node_noprof+0x3b9/0x600 [ 449.525627][ C0] synproxy_send_tcp+0x332/0x670 [ 449.525654][ C0] synproxy_send_client_synack+0x89b/0xde0 [ 449.525683][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 449.525703][ C0] ? nft_synproxy_do_init+0x1a4/0x4c0 [ 449.525725][ C0] ? synproxy_pernet+0x45/0x270 [ 449.525750][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 449.525776][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 449.525799][ C0] ? nf_ip_checksum+0x13c/0x510 [ 449.525823][ C0] nft_synproxy_do_eval+0x389/0x5d0 [ 449.525848][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 449.525871][ C0] ? __lock_acquire+0x747/0x2de0 [ 449.525899][ C0] nft_do_chain+0x48d/0x1b10 [ 449.525929][ C0] ? __lock_acquire+0x747/0x2de0 [ 449.525948][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 449.525975][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 449.525998][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 449.526031][ C0] nft_do_chain_ipv4+0x195/0x290 [ 449.526053][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 449.526073][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 449.526097][ C0] ? iptable_mangle_hook+0x18a/0x4c0 [ 449.526123][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 449.526146][ C0] nf_hook_slow+0xc5/0x220 [ 449.526184][ C0] NF_HOOK+0x21f/0x3c0 [ 449.526208][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 449.526230][ C0] ? NF_HOOK+0x9e/0x3c0 [ 449.526251][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 449.526274][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 449.526301][ C0] ? ip_local_deliver+0x113/0x190 [ 449.526325][ C0] NF_HOOK+0x336/0x3c0 [ 449.526347][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 449.526369][ C0] ? NF_HOOK+0x9e/0x3c0 [ 449.526390][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 449.526413][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 449.526435][ C0] ? ip_rcv_core+0x88d/0xd50 [ 449.526459][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 449.526480][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 449.526502][ C0] process_backlog+0xa6b/0x18b0 [ 449.526531][ C0] ? process_backlog+0x3de/0x18b0 [ 449.526566][ C0] __napi_poll+0xaa/0x330 [ 449.526592][ C0] net_rx_action+0x61d/0xf50 [ 449.526625][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 449.526650][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 449.526682][ C0] ? net_tx_action+0x5bb/0xc30 [ 449.526711][ C0] ? net_tx_action+0xbff/0xc30 [ 449.526740][ C0] handle_softirqs+0x265/0x8d0 [ 449.526769][ C0] ? batadv_dat_purge+0x2d7/0x3c0 [ 449.526793][ C0] do_softirq+0x77/0xd0 [ 449.526814][ C0] [ 449.526821][ C0] [ 449.526827][ C0] __local_bh_enable_ip+0x100/0x140 [ 449.526851][ C0] batadv_dat_purge+0x2d7/0x3c0 [ 449.526877][ C0] ? process_scheduled_works+0x97a/0x1630 [ 449.526904][ C0] process_scheduled_works+0xc3d/0x1630 [ 449.526947][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 449.526975][ C0] ? assign_work+0x3cf/0x5d0 [ 449.527002][ C0] worker_thread+0xa47/0xfb0 [ 449.527042][ C0] kthread+0x38b/0x480 [ 449.527060][ C0] ? __pfx_worker_thread+0x10/0x10 [ 449.527085][ C0] ? __pfx_kthread+0x10/0x10 [ 449.527104][ C0] ret_from_fork+0x514/0xb70 [ 449.527125][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 449.527144][ C0] ? __switch_to+0xc78/0x1410 [ 449.527177][ C0] ? __pfx_kthread+0x10/0x10 [ 449.527196][ C0] ret_from_fork_asm+0x1a/0x30 [ 449.527223][ C0] [ 449.528127][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 452.573140][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 452.582257][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 452.592308][ T32] Call Trace: [ 452.595591][ T32] [ 452.598519][ T32] vpanic+0x56d/0xa60 [ 452.602522][ T32] ? __pfx_vpanic+0x10/0x10 [ 452.607039][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 452.612603][ T32] panic+0xc5/0xd0 [ 452.616338][ T32] ? __pfx_panic+0x10/0x10 [ 452.620771][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 452.625807][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 452.631984][ T32] watchdog+0x102b/0x1030 [ 452.636329][ T32] ? watchdog+0x1c7/0x1030 [ 452.640763][ T32] kthread+0x38b/0x480 [ 452.644840][ T32] ? __pfx_watchdog+0x10/0x10 [ 452.649519][ T32] ? __pfx_kthread+0x10/0x10 [ 452.654112][ T32] ret_from_fork+0x514/0xb70 [ 452.658710][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 452.663831][ T32] ? __switch_to+0xc78/0x1410 [ 452.668525][ T32] ? __pfx_kthread+0x10/0x10 [ 452.673120][ T32] ret_from_fork_asm+0x1a/0x30 [ 452.677906][ T32] [ 452.681085][ T32] Kernel Offset: disabled [ 452.685431][ T32] Rebooting in 86400 seconds..