last executing test programs: 4.636153177s ago: executing program 0 (id=7241): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000400)="4c00000014000103010000000000000002060000ffffffff000000010000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000004000200", 0x4c) 4.482493169s ago: executing program 2 (id=7243): r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="170000000000000004000000ff00000084000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00fe041d3b4aebe6cb00000002000000eeae29fa245a6ca7391c1a5d"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000002000), 0x400, 0x0) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f00000032c0)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x12, &(0x7f0000000680)=ANY=[@ANYBLOB="180000008b000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000400048500000086000000bf09000000000000550901000000010395000000000000001daa0600000000002500f4ff9a456adf45000200060000000700000003000000b702000003000000850000002a000000b70000000040000095"], &(0x7f0000000740)='syzkaller\x00', 0x2, 0xff2, &(0x7f00000022c0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x38, 0x2e, 0x1, 0x7fff9, 0x4, {0x1}, [@nested={0x4, 0x48}, @generic="f5cf617745b086b6d467ac", @typed={0x14, 0x52, 0x0, 0x0, @ipv6=@local}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c001}, 0x200080c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'tunl0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x80, 0x1, 0xc3d, 0x6, {{0x44, 0x4, 0x2, 0x19, 0x110, 0x66, 0x0, 0xce, 0x29, 0x0, @multicast2, @remote, {[@cipso={0x86, 0xc, 0x2, [{0x0, 0x6, "cbd5ff3c"}]}, @rr={0x7, 0x7, 0x5b, [@remote]}, @cipso={0x86, 0x28, 0x0, [{0x0, 0x9, "88725cf672e6c4"}, {0x0, 0x9, "81bb2fb8269ca8"}, {0x5, 0x10, "01bfbb1ab45d83204a3a42e45c56"}]}, @end, @timestamp_addr={0x44, 0x24, 0x16, 0x1, 0xb, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x78}, {@remote, 0x2}, {@rand_addr=0x64010101, 0x5}]}, @timestamp_prespec={0x44, 0x54, 0xde, 0x3, 0x3, [{@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x1}, {@multicast1, 0x6}, {@multicast2, 0x5}, {@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0x40}, {@private=0xa010102, 0x9}, {@private=0xa010100, 0x7f}, {@broadcast, 0xffffff8e}]}, @timestamp_prespec={0x44, 0x44, 0x10, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x80000000}, {@multicast1, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x6}, {@multicast1}, {@remote, 0x8}, {@remote, 0xfffffff9}, {@remote, 0x4}]}, @ra={0x94, 0x4}]}}}}}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000a80)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x40000) recvmmsg$unix(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x26022, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000004400), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRES64=r3], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000044c0)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4095}, 0x4040800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000004500)=@newtfilter={0x2dd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x8}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x2da4, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0xd}}, @TCA_BASIC_ACT={0x17a0, 0x3, [@m_xt={0x26c, 0x1e, 0x0, 0x0, {{0x7}, {0x150, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x63}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TARG={0xc7, 0x6, {0x3, 'security\x00', 0x3, 0xf, "3b5035f6d0119df5fd776bec1bcbe2226b0796b05daad948337f7dfbf8ef4f75e8d24256bddf8b8ecbb656d7843a8f5cbe5059bbf21d4265f9132640a54927ac52400aa3abcae261e235eebe470f9f463b3bdc17c1fd29d519c7f22e9fd3431effc6c89258fd9b6dc12ebe3c9703ddf3f0669dba9dc22a96ca71c6af1855ce151578f882ef7fb1af7dbc97ea174dd35d4b3f3719c7bce660a1f85ea73a"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x47, 0x6, {0x2, 'raw\x00', 0x5, 0x2, "18af7ba4439e4771a21d03b4defd9cdb1ccc17208e581688f29469efce"}}]}, {0xf8, 0x6, "e036c45bb31c0de60ae38954d16ca16e1455e7f12cd06b238860efaca34f7c2f3fb112e0037699e414d2773cfd68d17f514024632d4b73eefd249feeb96c283c5f8ebc96171541aeabecbcfac7a85e3e474f21cedeb3f4c893c59aeca99fc60761a9ce0b5cf623c275ecbfeeb4b0e9628bbedabf032043d8acbd45fe548a2c4e3831540813d76afb70094969b45d49331047e3aa7e2a245f4229e872b45b3f627ee398dbac46c0dd361a77d72de05fd50c5431f6ae937d95dd0e5da2309c6a44a248922f75e22e62d8f0a309e91d6776f388f0bfd716acca5fc0cc2ab9c636155911bf56e68418fd5f23fdd246a427755c858c35"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x130, 0x1, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="7bdafbd68d0c"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6f7, 0x5, 0xffffffffffffffff, 0xf, 0x4}, 0x9}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfbff}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0xa8, 0x6, "8fdfb106eb3a89f9117a888791d263eac07f323cf7b306129cd5ae61d501a899d286a7c30e173180c14991efd38666275ec6c91738840ba0eeb6132c9d51c4a57c5499de0cb32c42cc1dabf76810cd361c0ea3cfb2b0bf738ef6b1ed955344cd3db4bd905680d4d884a88ac7ad3430522e39124a3f2717f40e3409f2bc4964d226b9715114595bd68c06cc55cae2e6ce83af7dc3cc9af2484ae8242445e09b1b9958bd5a"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0xa0, 0x18, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x49, 0x6, "30e42aba0868442ff2d1ebd90115c78e480887641069f8fa988ce123aa5d0a83437e981d2f289a17b6a8929dc93f7d50a6ba46da9a36fb56346ab362559d956e34be30468a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xc4, 0x11, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}]}, {0x8e, 0x6, "e307b63c0152e871cc5ab7363ca35a9dc7128819ba4cbaa0d094826d10b087544d2cfa9ff74adf019bd58767b59c6b37e8568c3a2eb7d589ba05216aa57be507a1195ed53ecae784ee70c27ff5c091efca8cb36f7cda12a6a9e07f698c497075cb31752a4b882761f8f3a213bb2c48879db9ebb0013b55840bfc90cf26e77c2239307d2f1475e432081d"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x104c, 0x16, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8b0, 0x7, 0x8, 0xd4}, 0x5b}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xbc, 0x10, 0x0, 0x0, {{0x9}, {0x80, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0xffffffff, 0x5, 0x81, 0x1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5ec}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x666}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8001, 0x80, 0xffffffffdffffffb, 0x9, 0x8001}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x2, 0x4, 0x620001}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7f7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x12, 0x6, "9460668e074b9ab34b347bc26e60"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x194, 0x12, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0xe5, 0x2, 0x2, 0x1}, 0xa}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x200, 0x8, 0x1004000, 0xff}, 0xa}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0xec, 0x6, "0a629a277c79bda386b3b310a59b83d7b27eb50557144ad3d82f3f7896aae2b594feba922f5e00e1ec8860597b61df3b8c1826f360295d5259b173d4c4e1bae532eade9a517645e6ba35f7ef5b122ce24af57d551f144da6c284c3cbf86744c9027e67bc1dcce76c5be151b4ba4f568b108beb50b0dcc9b27a2a353c28dba735f2cb81cbca7b0df29ed295d2a6ec6ddcb7e136976b82ece15bf7e93e6f94eb0025755811f53bd40001355c83644a5d9d3d83d1113d26442849be9f86e2e603e1ac71b87a62ac370006e271d5a7dbf0790b83e63a891e96e351b28064284f8de78565783f40b27d12"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BASIC_EMATCHES={0x1148, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xa, 0x3, 0x26e8}, {0xc41, 0xc7}}}]}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x4, 0x8, 0xa}, {0x3, 0x3}}}, @TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x35bf, 0x0, 0x6}, '\"'}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfffd, 0x3, 0xc38}, {0x10000, 0x2, 0xffffffff, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x10d4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x8eb8}, {0x8, 0x80000000, 0x57b, 0x0, 0x8, 0x1, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x4}, {0xffffffffffffffff, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x24, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x9}, "c50bbb7cf3656425a77a33923143bf32a6499b2a50081b"}}, @TCF_EM_META={0x50, 0x3, 0x0, 0x0, {{0x50, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1}, {0x1, 0x4}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7fff, 0xf, 0x1}, {0x7, 0x18, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xfd, 0x2}, {0x3, 0x6, 0x1}}}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="1fd6", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="ac74fd", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_CONTAINER={0x100c, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x100}, "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"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7ff, 0x1, 0x7fff}, {0x5, 0x7fffffff, 0x7, 0x0, 0x1, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0xffff}, {0x4, 0x3, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_BASIC_EMATCHES={0x410, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x2, 0x0, 0x0, {{0xf, 0x4, 0xd}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="e51009806f3c714a", @TCF_META_TYPE_VAR="3dbe", @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x5}, {{}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xb0, 0x1, 0x0, 0x0, {{0xff}, "336677770856170faec11551a48ec9b48072eb7b19119045eb4a11c81dfa8cc834770c9c8571c24db26cbc0c64c0b53bd9d619325376a4a638882440ba168c8f6d905e70f2fe389dd13f4aeef1267c00abe102f3008323782f39a524303eb3fad0bc464135b5fca5bbc32612e284a326739dc1516798ffa6a205e92e1667df12770f58bf6b71ce1f147434c8a27c90b00b72e097112d9610071379e726320d044f274ecd"}}]}, @TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x800}, {0x9, 0x9, 0x2, "63836cdddcde0b2b02"}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xfff, 0x2, 0x5}, {0x5, 0x4, 0x2, "169928ff"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0x8}, {0x0, 0x4, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xfff6}, {0x5, 0x81, 0x5, 0x4, 0xf, 0x0, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xeb, 0x3, 0x3}, {0x101, 0x8, 0x9, 0xd29}}}, @TCF_EM_META={0xac, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xfa}, {0x4, 0x6, 0x2}}}, @TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR="548cc1", @TCF_META_TYPE_VAR='W%', @TCF_META_TYPE_VAR="10"]}, @TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR="6e676bdf6345"]}, @TCA_EM_META_LVALUE={0x39, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="119692c7f5b1572c0b8c", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="c691decc06748f446025", @TCF_META_TYPE_VAR="8aec8aaa02a0", @TCF_META_TYPE_VAR="9525386590881d", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x4a}, {0x3, 0x3, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc21, 0x7}, {0xce24, 0x5}}}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="ce", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x3, 0x2}, {0x0, 0x5, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xaf}}, @TCA_EMATCH_TREE_LIST={0x1c8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x38, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x3ff}, "d2a6afd158f60fa74029eebcfef9d312e8ed8bcac5530c7f6a0cf7020314439bb41f6a644aa4447a50"}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x7fff, 0x2, 0xffff}, {0x38, 0x6, 0x1, "16a2ad961f9b"}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x919, 0x2, 0x8}, {0x67, 0x5, 0x0, "ab8a3c9d85"}}}, @TCF_EM_META={0x60, 0x1, 0x0, 0x0, {{0xabfe, 0x4, 0x43a}, [@TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="2d492426bea6", @TCF_META_TYPE_VAR="06a732e39a4f", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="c679cfb19992b253"]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_VAR="a41ad1494765d25f10", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff, 0xc0}, {0x100, 0x9, 0x1}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}]}}, @TCF_EM_CONTAINER={0xe4, 0x3, 0x0, 0x0, {{0xb, 0x0, 0x6}, "ecb71499b36e7c8b02d641bbf24824e2adcc1bde1f1f2c9920c99d816825ec9581766d98322069614e6d524592ad7f5e9e1db0b99dc1e2aeb674062979e2f862afab6549d0d0bdd8c788afdf1f671c672e8866713224995d2a04e1935dde535ec66c2248b9a617d1108e2612ddbef063e22417b53dcb4b4b00944187584991ca7a037295ec1082a8ac3975edfd1f74b46f2d385d39dc880674d5a270ff792a59f2f58624a9c524f0798c09f45191bc8d2c6c3d37f0860c221fd33cf7d6d6229d4dcce52bb379e20670b806af4fe60451e7b30acfa0"}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x3, 0x2, 0x1}, {0xff, 0x6, 0x2, "152493f5bb4b"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8c8}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0x3}}, @TCA_BASIC_ACT={0x98, 0x3, [@m_skbedit={0x94, 0x13, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x2, 0x10000000, 0x3, 0x101}}]}, {0x48, 0x6, "583cf49767fd9e6c543eab3debf2a932c55ef5b8cecf287e5be7520d3898b7910129f0e2d43379fc26d18bc294369f343fbdc948ffad130cd959590cc6da51e6363fd6b9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x2dd4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xc, &(0x7f0000000980)=ANY=[], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r9 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000d00)={'filter\x00', 0x6002, 0x4, 0x410, 0x218, 0x110, 0x0, 0x328, 0x110, 0x328, 0x4, 0x0, {[{{@arp={@remote, @dev={0xac, 0x14, 0x14, 0xa}, 0xffffff00, 0x0, 0x0, 0xf, {@mac=@remote, {[0x0, 0xff, 0x0, 0x181, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x18, 0x3ff, 0x1, 0x4, 0x1, 0x8, 'syzkaller1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x37c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f06cc6001e11", @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb4, 'syz1\x00', {0x93bf}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@random="1b00be002004", @local, @local, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) socket$kcm(0x10, 0x2, 0x0) 4.22814962s ago: executing program 0 (id=7246): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x10, &(0x7f00000008c0)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000940)=r5, 0x4) sendmsg$unix(r4, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000001080)={0x2, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2b}}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000000000002004e20e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e20ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac14142800"/528], 0x210) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 4.05601996s ago: executing program 4 (id=7247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000200)="03", 0x1}], 0x1}], 0x1, 0x0) syz_emit_ethernet(0x41, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @remote, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0xc, 0x33, 0x67, 0x0, 0x10, 0x21, 0x0, @local, @loopback, {[@noop]}}, {{0x4e24, 0x4e23, 0x4, 0x1, 0x8, 0x0, 0x0, 0x5, 0x6, "6d9895", 0x5, "ba5805"}, "da71bfd77d65473ad6e64d"}}}}}, &(0x7f0000000380)={0x1, 0x4, [0x11f, 0x94b, 0xb20, 0x916]}) sendmmsg$inet_sctp(r1, &(0x7f0000000240)=[{&(0x7f0000000280)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x20c, 0x0, 0x0, 0x400000}}], 0x30, 0x8080}], 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4.030487318s ago: executing program 3 (id=7248): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000440)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'veth0_macvtap\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r3, 0x25, 0x4, @void}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000006c0)={r4, r5, 0x4, r2}, 0x10) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) connect$packet(r6, &(0x7f0000000140)={0x11, 0x11, r8, 0x1, 0x3, 0x6, @local}, 0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) 3.833169315s ago: executing program 4 (id=7249): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 3.694270302s ago: executing program 0 (id=7250): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x24, &(0x7f0000001080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.499978519s ago: executing program 0 (id=7251): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e1f, 0xfffffff9, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@delqdisc={0x24, 0x26, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc}, {0xffff, 0xffff}, {0xf, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 3.415099253s ago: executing program 1 (id=7252): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000b40)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 3.365968278s ago: executing program 4 (id=7253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0xcde, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000310009002abd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x80000010}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000400)={0xa000001c}) (fail_nth: 58) 3.147946252s ago: executing program 1 (id=7254): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x9b71, 0x49a41}}, 0x20}}, 0x0) sendto$packet(r0, &(0x7f0000000240)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x5cc, 0x40880, &(0x7f0000000280)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000730133000000000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x21, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xffffffff}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x32600) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000007c0), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bcbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000ff1f00fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r9 = socket(0x2b, 0x1, 0x1) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000680)="190004000800aaaaaa0103000000", 0xe) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0xff000000, 'dummy0\x00', 'ipvlan0\x00', {0xff}, {}, 0x73, 0x3, 0x40}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xedd47732473098dc}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x80000001, 0x4, 0x1, 0x0, 0x0, "b130473c3113287a14b2984e26e5ff46eb81427191a1f41c9bfcf29a4cb60b90def126cff9aa7aff33caf874d1d1fca2b4b4520019e6d9b145f05d68d0304287"}}}, {{@ip={@rand_addr=0x64010100, @multicast2, 0x0, 0xff000000, 'batadv_slave_1\x00', '\x00', {0xff}, {}, 0x62, 0x3, 0x5c}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x5, 0x3, 0x0, 0x0, 0x3, 0x4], 0x0, 0x2}, {0x0, [0x4, 0x4, 0x0, 0x1, 0x1, 0x2], 0x6, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00f\x00', @ANYRES32, @ANYRES64, @ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) 3.147664357s ago: executing program 0 (id=7255): socket$igmp6(0xa, 0x3, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="63e73686", 0x4}], 0x1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x22020600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) getsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000040), &(0x7f00000000c0)=0x38) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 2.551016434s ago: executing program 3 (id=7256): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000400)="4c00000014000103010000000000000002060000ffffffff00000001000000000000000000000000000000000000000000000000000000000000000000000300000000000000000004000200", 0x4c) 2.332367543s ago: executing program 2 (id=7257): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0xc, 0x10, &(0x7f0000002600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040102f0ffffffb70200000200004018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000002680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.111753124s ago: executing program 3 (id=7258): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1808000000000000000000000300000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000900), &(0x7f0000000940)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0xff10, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000b00)=r5, 0x4) sendmsg$inet(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 2.111499058s ago: executing program 4 (id=7259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x11, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet6(r2, 0x0, 0x0, 0x20000808, &(0x7f0000000380)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f00000003c0)={{0xff51c2649434b5a5, @local, 0x4e22, 0x2, 'ovf\x00', 0x0, 0x2, 0x1}, {@empty, 0x4e23, 0x10000, 0x8, 0x90, 0x3}}, 0x44) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x541042, 0x0) write$ppp(r5, &(0x7f0000000480)="60f4fe46fb6d3a468df366328a7af8046ebe17440444d73e9ff627a71bbada84fd2a8069c496ef87fbaabd3f44a16229dbc0d31314fd2e30c3365b7501be3a4c3f277cdbb0ea5ace86dedbf897b493d69fa31a7d58df5b2f65ea6c36b65d681c2161947cddcb2563954ce4b56f60a50754094a57ecef295c9f4e0bb8531263d6c9e23abb854ee7e11c9e7715562167095399", 0x92) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000400000000000000000186600000900000000000000050000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 1.95571379s ago: executing program 2 (id=7260): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006a80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000006b00)={0x0, 0x0, &(0x7f0000006b40)={&(0x7f0000006b80)={0x1c, r0, 0x303, 0x0, 0xdfffffff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20040890) 1.865397634s ago: executing program 1 (id=7261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r3) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000a40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000780)={0x274, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5aa2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fc8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fffffff}, @TIPC_NLA_NODE_ID={0xbb, 0x3, "2e9f5b489332d63341216606cac50064e727915ed21bd12bd4135e091b093b2a53ca9f90f77e006509420ebd1754e2c64e340bba3e9496fb915c60a953f0276fb273346fbef41373a1d97f2c6eee9f23e90ac0c19f1e9204c25800caecbda3e1dfe29d3da8bcb517df0bb2785e02418bc9940533e26faee23ff95b5e1da0ef3fcffa8f6e964dbd795915ac66dcfca04151c04ae78607b778e9c55ab0f90b03b0db9e4b0c1f8c7e151ddcf2a5ba5b462ab68d67ddd3947b"}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x274}, 0x1, 0x0, 0x0, 0x2bdb72f25a069f48}, 0x20000800) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x10, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000340)={@local, @random="152f18a66094", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0xa, 0x14, 0x68, 0x0, 0xc, 0x1, 0x0, @remote, @rand_addr=0x64010101}}}}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) getsockopt$SO_COOKIE(r7, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000140)=0x8) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x4070bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0xffe0}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0xffffffff}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 1.815532544s ago: executing program 3 (id=7262): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000004c0)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e20, @private=0xa010100}}, @sadb_address={0x5, 0x6, 0xff, 0x0, 0x0, @in6={0xa, 0x4e22, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}]}, 0x50}, 0x1, 0x7}, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000140)=@hci, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x49, &(0x7f00000003c0), 0x4) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xe8001, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_rxnfc={0x2f, 0xa, 0x101, {0x8, @esp_ip4_spec={@remote, @rand_addr=0x64010100, 0xc6, 0xd}, {0x0, @multicast, 0x5, 0x40, [0x0, 0xa]}, @ah_ip4_spec={@dev={0xac, 0x14, 0x14, 0x3c}, @remote, 0xfd3, 0x3}, {0x0, @random="06bd38f385d3", 0x4f5c, 0x80, [0x6, 0x1]}}}}) unshare(0x22020600) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r5}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x1}]}, &(0x7f0000000940)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[r5, r5], 0x0, 0x10, 0x4}, 0x94) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000680)={0x0, @in6={{0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x41}, 0x2}}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000640)=0xe, 0x4) 1.601802972s ago: executing program 2 (id=7263): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="b49ca6d3635eca62ffffffffffffffff0039e77afe100000d7bbd818c020e98099c0e957390916d6a3f707000095d8628c4167a6731fc743762ca4a81dd5ba9f22a7e23e75b6772cb8fc54103e0af84add2934db0b6c067e40e32c3b4728931c91441631878e95d5a8b1b8615cb7610078eca86551ace28081acd9b7a69669af"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x13}, 0x94) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4100, 0x0, @loopback}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000fc0)={'ip_vti0\x00', &(0x7f0000000f40)={'syztnl1\x00', 0x0, 0x8, 0x40, 0x4, 0x8, {{0xd, 0x4, 0x2, 0xf, 0x34, 0x65, 0x0, 0xfd, 0x29, 0x0, @local, @remote, {[@rr={0x7, 0x13, 0xd2, [@dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x34}, @remote, @remote]}, @timestamp_addr={0x44, 0xc, 0xd6, 0x1, 0xf, [{@loopback, 0x10001}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000010c0)={'syztnl2\x00', &(0x7f0000001000)={'syztnl0\x00', 0x0, 0x7, 0x700, 0xf, 0x0, {{0x23, 0x4, 0x2, 0x9, 0x8c, 0x68, 0x0, 0x1, 0x0, 0x0, @multicast2, @private=0xa010102, {[@timestamp_addr={0x44, 0x24, 0x34, 0x1, 0xf, [{@remote, 0x400}, {@loopback, 0x800}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x7fff}]}, @cipso={0x86, 0x45, 0x0, [{0x7, 0xa, "a8a2eddd2f6b52c8"}, {0x6, 0x2}, {0x5, 0xe, "684f55f44a4939db20bd5782"}, {0x6, 0xd, "651e3acb57b3e20fb19a49"}, {0x0, 0x12, "cb58920773b925deef8d1bb0987423c0"}, {0x5, 0x6, "cee2ed4f"}]}, @lsrr={0x83, 0xf, 0x67, [@local, @multicast2, @loopback]}]}}}}}) r4 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000080)={@private0, r5}, 0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f00000019c0)=ANY=[@ANYBLOB="04080000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="bc0102805c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c0004009400031000000000a303020400080000020006f8020000000400f8f70200000009001d08020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400070000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001002a90673f6efa3dbd188e366c386e6f696e74657276616c0000000000000000000000050003000300fdff07000400ff0f000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030a6f6f9100080004000000010008000100", @ANYRES32=0x0, @ANYBLOB="a801028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400f7ffffff400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000008000100", @ANYRES32=0x0, @ANYBLOB="f80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f7374617473000000000000000000", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000008000100", @ANYRES32=0x0, @ANYBLOB="e801028038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040003000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000d02508000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000180000008000100", @ANYRES32=0x0, @ANYBLOB="7c0002803c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="00010280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff07000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB], 0x804}, 0x1, 0x0, 0x0, 0x4050}, 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000002030300000000000000000000000010080001000100000077f442ac"], 0x1c}}, 0x0) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x1, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r8 = socket$packet(0x11, 0x3, 0x300) write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb1", 0x1a) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window], 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000004c0)='dctcp', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b19, &(0x7f0000000040)={'wlan0\x00'}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b700000001000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r7], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x9, 0x0, &(0x7f0000000800)="000000000000000002", 0x0}, 0x50) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000080)="11c9064268", 0x5}], 0x2}, 0x40) 1.171634143s ago: executing program 1 (id=7264): socket$igmp6(0xa, 0x3, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newsa={0x144, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d8, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff4, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x5609c29893963bef}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40841, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000010000000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010031000000001c000380180000800c00018006000100000000000800034000000001140000001100010000000000000000000100000a00"], 0x70}, 0x1, 0x0, 0x0, 0x24000800}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) 880.667192ms ago: executing program 4 (id=7265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000180)='GPL\x00', 0x2, 0x8d, &(0x7f0000000340)=""/141}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000e3ffff5b2bcf66ffffffff0920000000000a07400000000000000000020000000900010073797a300000000098000000030a01020000000000000000020000060900010073797a300000000078000300fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc4978345407669db4999bf4d277be1203e812a25bea54f1839749e2fcf0c6c1bb457b5bfa52e41edd07d452fbea5fa0e0d5083a5cd380140000001100010000000000000000000000000a"], 0xe0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000540)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000007c0)=@ccm_128={{0x303}, "aacdd9b520789f41", "fdd5fe03b855d22432017b3c02bc5b0a", "3246c11e", "1e7b4407f750d686"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x20000) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r4, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x108}}, 0x0) 362.709227ms ago: executing program 3 (id=7266): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0x9, 0xd, 0x1, 0x7, 0x1, 0x156, 0x100}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfd, 0x0, 0x0, 0x0, 0x0, 0x2}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x0) 362.484813ms ago: executing program 0 (id=7267): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x0, 0x44}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000340)='GPL\x00', 0x5, 0xa1, &(0x7f0000000380)=""/161, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x800}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x65, 0x0, 0x1, 0x84, 0x0, @private=0xa010102, @empty}}}}}}, 0x2a) 361.069085ms ago: executing program 2 (id=7268): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000400)="4c00000014000103010000000000000002060000ffffffff00000001000000000000000000000000000000000000000000000000000000000000000000000000010000000000000004000200", 0x4c) 360.692374ms ago: executing program 1 (id=7269): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xb5, 0x0, &(0x7f0000000000)="aa0029911e5701000861127e9740aa751ecd4b506f53835329b827e6d05ce22df6104ff1df5872f237d79a75796e2d547d80adab7052cb19d34a2be2d5cd1cdc9d3aa4984fbe6a87ded1e75158263e02539bf63ce93a3fbd7a4b1892ecb332f59055cb7e0dcf32c6710e3b881b02e3234c8fa776c86eb5476367b2688137a6dc60ec496fa5d566a8bf3340ee8cb6d41d5cf7ec3a85a986d7ef60f3314df789ddbdeeb679833c77d48212ff85254125ab2f06084483", 0x0, 0x4, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000004c0)={0x1f, 0xfffc, 0x3}, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000002c0)='hybla', 0xfd30) connect$unix(r6, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)={0x14, 0x19, 0x1, 0x70bd28, 0x25dfdbfd, "", [@generic='-']}, 0x14}], 0x1, 0x0, 0x0, 0x4004}, 0x20000044) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x40800}}], 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@rand_addr=0x64010100, @in6=@remote, 0x4e24, 0x2, 0x4e24, 0x1, 0xa, 0x0, 0x20, 0x0, 0x0, r4}, {0xfffffffffffffffb, 0x8000000000000000, 0x3, 0x6, 0x0, 0x8, 0x2}, {0x8, 0x0, 0xc, 0x7}, 0x7fff, 0x6e6bb0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@mcast2, 0x4d5, 0x33}, 0x0, @in=@private=0xa010101, 0x3505, 0x1, 0x3, 0x3d, 0x7, 0x101, 0xd}}, 0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) 325.310287ms ago: executing program 4 (id=7270): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000200)="0c7b88460bb4ba7f3ba45207408d73a9e4d7e9a51f2bace73f851609ba0e7f29f303a8060b7ebded9adde95c2dc072ed61a55ac3e13a17044750d9297a272383ffe842e1fe3e70a8e1ba5bcf864d7423ebe4a79e266ead13aca1da8d833f95aefec6c776441d7367425c99f3f948351958179b98b5e3caecdb601514318db501ff422b5187ef65d91c6ba8c130c62f851263", 0x92}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r1, 0x6}, 0x8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_netdev_private(r2, 0x89fc, &(0x7f00000001c0)="4749c2368bb8dd2c7f17323cf53a") mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 306.106381ms ago: executing program 3 (id=7271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000400)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r3) close(0x3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x24, r4, 0x1, 0x123, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x0) ioctl$sock_proto_private(r0, 0x8929, &(0x7f0000000300)="0668d6b7addc33bef9b33a") unshare(0x20400) sendto$x25(0xffffffffffffffff, 0x0, 0x0, 0x4080, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000540)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000580)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000005c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000600)=@gcm_256={{0x303, 0x3a}, "56db77c931091000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r5, &(0x7f0000000640)="442e2717bdbd39f5d2185ec9050d681a1038f428", 0x4000, 0x40, 0x0, 0x0) pipe(0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000240), 0x9) r8 = openat$cgroup_procs(r6, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000002c0), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000380)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f00000003c0)=0x1, 0x12) socket(0x11, 0x5, 0x6) 142.148016ms ago: executing program 1 (id=7272): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000040)=0xc) close(r1) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = accept(r1, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000340)=0x80) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) bind$bt_sco(r3, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r4 = accept4$alg(r3, 0x0, 0x0, 0x1800) shutdown(r4, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r3) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000001800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000540)={0x1260, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}, @TIPC_NLA_NODE={0x1024, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3000000}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x84f}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "1d5963d9758c81f235ba3f682e8a93b6890252b2ab4320"}}, @TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x1260}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000001840), &(0x7f0000001880)=0x30) openat$rfkill(0xffffffffffffff9c, &(0x7f00000018c0), 0x200, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000001900)=""/146, &(0x7f00000019c0)=0x92) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000001d40)={{&(0x7f0000001a00)=[{0x818, 0x1, 0xb, {0x8, 0xffffffffffffadcb}, 0xfffffffffffeffff, 0x2727, 0xd59}, {0x101, 0x7f, 0xff, {0x5, 0x1ff}, 0xce4, 0x4, 0xffffff00}, {0x7, 0xfffffffffffffffc, 0xe, {0x3, 0x6b}, 0xfffffffffffffff9, 0x8}, {0x5, 0xfffffffffffffff1, 0x800, {0x6, 0xffffffffffffffff}, 0x2, 0x3}, {0xaf, 0x1a52830, 0x10000000, {0xfffffffffffffff9, 0x3e5c00000000000}, 0x0, 0x80000001, 0xb}, {0x7, 0x7, 0x1, {0x8, 0x1}, 0xfffffffffffffffd, 0x100000001, 0x800}, {0x3, 0x12000000000, 0xfffffffffffffffa, {0x7fffffff, 0x6}, 0x9, 0xfffffffffffffff9, 0x4}], 0x7, 0x40, 0x7f, 0x6}, {&(0x7f0000001bc0)=[{0x8, 0x1}, {0xffffffff00000000, 0x6}, {0x3}, {0x8f9b, 0x401}, {0xac2, 0x401}, {0x8, 0x7}, {0x0, 0x5}, {0x8000000000000000, 0xffff}, {0x4, 0x7ff}, {0x8000000000000000, 0x6}], 0xa, 0x10, 0x400, 0x5}, {&(0x7f0000001c80)=[0x5, 0x8000000000000001, 0xad, 0xed37, 0x9, 0x400000000], 0x6, 0x8, 0x81, 0xb6}, {&(0x7f0000001cc0)=[{0x3, 0x3ff, 0x9, 0x4, 0xb}], 0x1, 0x28, 0x0, 0x400}, {&(0x7f0000001d00)=[0xfffffffffffffffa, 0x7fffffffffffffff], 0x2, 0x8, 0x8, 0x5}}) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000001dc0)={0x7fff, 0x7f, 0x4}, 0xc) sendmsg$802154_raw(r3, &(0x7f0000001f40)={&(0x7f0000001e00)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14, &(0x7f0000001f00)={&(0x7f0000001e40)="7b604b324158082eec84b6b744bcdab43d30e6b41ae4f7f93343ac9fd0672adeeff8eefdbe7c9143e45f8712fa63293d8514afdf4a9a50264e785453a88aa1c86b2bb83da0e029931cc86f44222b7616f23c5be1deab493b18883550c56b222e023dcd03aa8431fa4c14a900948c13534eb4e3317ca85f14a661df9722240047a081b7df0eca0b5c12821e0c711124bf99821c0194", 0x95}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r3, 0x84, 0x25, &(0x7f0000001f80)={r0, @in={{0x2, 0x4e24, @empty}}, 0x10, 0xc, 0x10}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000002040)={r1}) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000002280)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002240)={&(0x7f00000020c0)={0x14c, r5, 0x10, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xda}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x47, 0x9, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffeaa}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xba7}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40}, 0x24048881) getsockopt$inet_sctp_SCTP_REUSE_PORT(r1, 0x84, 0x24, &(0x7f00000022c0), &(0x7f0000002300)=0x4) socket(0x29, 0x3, 0x7fffffff) socket$key(0xf, 0x3, 0x2) ioctl$OCFS2_IOC_INFO(r4, 0x80106f05, &(0x7f0000006740)={&(0x7f0000006580)=[&(0x7f0000002340)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000002380)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f00000023c0)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000002440)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000002480)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, &(0x7f00000024c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000002500)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000002540)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000002580)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f00000025c0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000002600)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000002640)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000002680)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f00000026c0)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000002700)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000001}, {}, 0x80000001}, &(0x7f0000002840)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000002880)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000001}}, &(0x7f0000002900)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000002940)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000002980)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000001}}, &(0x7f00000029c0)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000002a00)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000002a40)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x9}, &(0x7f0000002b80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x180000001}}, &(0x7f0000002bc0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000000}}, &(0x7f0000002c00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000001}, {}, 0x7f}, &(0x7f0000002d40)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f0000002d80)=@features={{0x4f32494e, 0x6, 0x10, 0x3}}, &(0x7f0000002dc0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000002e00)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000002e40)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000002e80)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000002ec0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x5, 0x7fffffffffffffff}, {0x100000000, 0x8}, {0x1ff, 0xb5b}, {0x6, 0x9bb}, {0x7fffffffffffffff, 0x2}, {0x9, 0x7}, {}, {0x6, 0x2}, {0x4, 0x4}, {0x4, 0x8}, {0x3, 0x1}, {0x7fffffff, 0x900000}, {0x4, 0x1}, {0x1, 0x1}, {0x6000000, 0x4}, {0xb96, 0x100}, {0x8, 0xde1}, {0x9, 0x6}, {0x8, 0x8}, {0x2, 0xfffffffffffff800}, {0x7, 0x42e}, {0xfffffffffffffffa, 0xd9ff}, {0x6, 0x2}, {0xd, 0x8000}, {0x9, 0x6}, {0x0, 0x60d0}, {0x7, 0x8}, {0x100, 0x7}, {0x6, 0x7}, {0x9, 0x7fffffff}, {0x8, 0x5}, {0x0, 0x524}, {0x7, 0x9}, {0x7fffffff, 0x6}, {0x2, 0xffffffff}, {0x1, 0x75}, {0x7, 0xaf}, {0xfff, 0xae79}, {0x7, 0x7}, {0x9, 0x3}, {0x0, 0x3d9d}, {0x3, 0xfff}, {0xffffffff80000000, 0x4}, {0x8, 0x5ecf}, {0xffffffffffff1bd6, 0x3}, {0xe63, 0x6d}, {0xffffffffffff2f93, 0x5}, {0xffffffff00000000}, {0x5, 0xcc}, {0x9b, 0x8}, {0xe000000000000, 0x9}, {0x8001, 0xffff}, {0x9, 0x7}, {0x3}, {0x6a712988, 0xb9f4}, {0x43f2, 0x2}, {0x6, 0x3}, {0x4, 0x5}, {0xfffffffffffffffc, 0x34a}, {0x40, 0x1}, {0x5, 0x401}, {0xcff, 0x1}, {0x0, 0xffffffffffffffff}, {0x8, 0x7fffffffffffffff}, {0x2, 0x3}, {0x3, 0xffff}, {0x834, 0x5}, {0x2d73c088, 0x3}, {0x8000000000000000, 0x8}, {0x4, 0x1e9}, {0x3c42, 0x427}, {0x5, 0x6}, {0xccd, 0x2}, {0x2, 0x4}, {0x3, 0x4}, {0x0, 0xb80e}, {0xfffffffffffffff8, 0xfff}, {0x2, 0x81}, {0x6, 0x10}, {0x8, 0x512c}, {0x971, 0x4}, {0x100000001, 0xa2}, {0x9, 0x4}, {0x7, 0x4}, {0x4, 0x9}, {0x9, 0x2}, {0x69be, 0x4}, {0x7, 0x3}, {0x8, 0xa4f1}, {0x2, 0xe959}, {0x2de0, 0x5}, {0x1, 0x1}, {0x4, 0x2}, {0x8, 0x3}, {0x1, 0x7fffffff}, {0x5, 0x400}, {0x7fffffff, 0xe}, {0x8, 0xffffffff}, {}, {0xf00, 0xe15}, {0xffffffffffffffff, 0x300000000000}, {0x8, 0xffff}, {0x9, 0x4}, {0x8}, {0x9, 0x7}, {0x9, 0x5}, {0x3, 0x7fff}, {0xcd3f, 0x6}, {0x6e3, 0xffffffff}, {0xb, 0x9e87}, {0x50, 0xffff}, {0x7, 0x1}, {0x7, 0x1}, {0x6, 0x8000}, {0xfe8}, {0x6, 0xfffffffffffffff7}, {0x10001, 0x561c6944}, {0x1a48, 0x7}, {0x6, 0x6}, {0xec, 0x200}, {0x0, 0x8}, {0xfffffffffffffffa, 0x40}, {0xffffffffffffffff, 0x2}, {0x9, 0x10001}, {0x10001, 0x3}, {0xffffffffffffffff, 0x850}, {0x4, 0x400}, {0x3, 0xfffffffffffffff4}, {0xb, 0x3}, {0x200, 0x8}, {0x16f0, 0x7fff}, {0x5, 0x5}, {0x6, 0x2}, {0x0, 0x7ef1}, {0x100000001, 0x6}, {0x3, 0x1}, {0x4f, 0x8}, {0x400, 0x6}, {0x24b67283, 0x4}, {0x5, 0x101}, {0x9}, {0x80, 0x8}, {0x2, 0x6}, {0x7, 0x7fffffffffffffff}, {0x9, 0xfffffffffffffffd}, {0x5, 0xfffffffffffffff6}, {0x3, 0xf71}, {0x5d92, 0x4}, {0x8, 0x6}, {0x28, 0x2}, {0x10001, 0x7}, {0x4, 0x5}, {0xe8, 0x3f}, {0xffffffffffffffff, 0x8000000000000000}, {0x7f, 0x8000000000000001}, {0x2, 0x6}, {0xa, 0xfff}, {0xc, 0x1}, {0x80000001, 0x1ff}, {0xf1, 0x7}, {0x10001, 0x5}, {0x3, 0xfffffffffffffffe}, {0x3fa3, 0x3}, {0xe96, 0x1}, {0x9f, 0x8}, {0x10001, 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0x7}, {0x1, 0x1}, {0x100, 0x2}, {0x800, 0x4}, {0x4, 0x100000001}, {0x2, 0x56}, {0x400, 0x2}, {0x4, 0x7fffffff}, {0x6, 0x3}, {0x80, 0x8}, {}, {0x8, 0x3}, {0x1, 0xb}, {0x6, 0x7f}, {0x0, 0x101}, {0x10, 0x99}, {0x5, 0x7f}, {0x8}, {0x6f, 0x80}, {0x10000, 0x1}, {0x8000000000000001}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x4}, {0x3a, 0x7}, {0x1, 0x200}, {0x5, 0x13a}, {0x7}, {0x7, 0x7fffffff}, {0x6, 0x7}, {0x6, 0x147}, {0x9ddf, 0x384c}, {0x3cc24000000, 0x7}, {0xf4, 0x5}, {0x8, 0x80000001}, {0xff, 0x3}, {0x8, 0x2}, {0xffff, 0x2}, {0x8000, 0x3a2e}, {0x0, 0x7}, {0x9}, {0x3, 0x1cf}, {0x8, 0x200}, {0x2718, 0x100000001}, {0x10000, 0x7fffffff}, {0x6, 0x837c}, {0x3, 0x8000000000000001}, {0x7fffffffffffffff, 0x65b}, {0x7, 0x7}, {0x6, 0xffffffffffffffff}, {0x100, 0x7}, {0x8, 0x6}, {0x5, 0x21f}, {0x8, 0x1}, {0x5, 0x1000000}, {0x7, 0x237c000000000}, {0x1, 0x8}, {0x4, 0x9}, {0x80000000, 0x1000}, {0x7, 0x7ff}, {0xfff, 0x3}, {0xfc, 0x10}, {0x5, 0xf0ab}, {0x3, 0x7fff}, {0x58, 0x83a}, {0xff, 0x7}, {0x487, 0x7fff}, {0xfff, 0xab68}, {0x2, 0xe4}, {0x7b, 0x9}, {0x8b}, {0x81, 0x2}, {0x7f, 0x800}, {0x81, 0x54}, {0x101}, {0x3ff, 0x8001}, {0x2, 0x4}, {0x0, 0x4}, {0x7fffffff, 0x9}, {0x3, 0x3}, {0x6, 0x9a7a}, {0x10001, 0x7}, {0x35c, 0x6}, {0x5, 0x8}, {0x7f, 0x800}, {0x6, 0x9}, {0x9, 0x2}]}, &(0x7f0000003f00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f0000003f40)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000001}}, &(0x7f0000003f80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x1}, &(0x7f00000040c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000000}}, &(0x7f0000004100)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f0000004140)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x8}, &(0x7f0000004280)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f00000042c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x9, 0xf38}, {0x40, 0x401}, {0x1647, 0xffffffffffffff00}, {0xb9, 0x6}, {0x81, 0x8000000000000000}, {0x5, 0x8}, {0x2, 0x8}, {0x1, 0xfff}, {0x6, 0x70}, {0x1, 0x2}, {0x0, 0x9}, {0xc00000000000, 0x6}, {0x8, 0x4}, {0x18, 0x5}, {0x6, 0x8000}, {0x537c4714, 0x4}, {0x8001, 0xfffffffffffffffa}, {0x5, 0x7}, {0xb4d7, 0x309f}, {0x3, 0xfc37}, {0x7ff, 0x6}, {0x401, 0xa}, {0x8, 0xb}, {0xffffffffffffffff, 0x9}, {0x7, 0x9}, {0x2, 0x7}, {0xf24, 0xffffffffffff8000}, {0xa, 0x5}, {0xb, 0xaed}, {0x83, 0xdb}, {0xa, 0xffffffffffff8001}, {0x2, 0x10001}, {0x7, 0x9}, {0x4000000000000000, 0x5}, {0xd9b, 0x7fff}, {0x9, 0x7}, {0x3, 0x3}, {0x7, 0x8f3}, {0x7, 0x585}, {0x4, 0x5}, {0x7428, 0xaf8d}, {0x9, 0x2}, {0x1, 0x8}, {0x4, 0x97}, {0x4, 0x7}, {0x80, 0x4}, {0x4a, 0x9}, {0x3, 0x3}, {0x8000, 0x2}, {0x3, 0x5}, {0x8001, 0x4}, {0x8000000000000001, 0xf7a}, {0xfffffffffffffffd, 0x7}, {0x9, 0x2}, {0x9, 0x80000001}, {0x218, 0x33a2ff57}, {0x7f, 0xfffffffffffffff7}, {0x5806, 0x1}, {0x9, 0x3}, {0xc, 0x7}, {0xf, 0x4}, {0x2, 0x4}, {0x1, 0x3860}, {0xfffffffffffffffd}, {0x9, 0xcb}, {0x3, 0x8a}, {0xffffffffffffff80, 0xe}, {0x0, 0x4}, {0x8c3, 0xfff}, {0x1, 0x7d}, {0x6, 0x1}, {0xf5, 0x8}, {0xff, 0x100}, {0x6}, {0x6}, {0x7fffffff}, {0x81, 0x9}, {0x5, 0xfff}, {0x6, 0x4}, {0x2, 0xffffffffffffa1ab}, {0x9, 0xe}, {0xb, 0x7}, {0x3, 0x9}, {0x8, 0x7}, {0x6eff, 0x3}, {0x6, 0x3}, {0x7fffffff, 0x3}, {0x0, 0x4}, {0x80000000, 0x7}, {0x2, 0x8001}, {0x101, 0x9}, {0x1, 0x3f58}, {0x1ff, 0xfffffffffffffffc}, {0x5, 0x3}, {0xfffffffffffffffd, 0x7}, {0x8, 0x7}, {0x5a, 0x7f}, {0x0, 0x520}, {0x7f, 0x7f}, {0x7, 0x2}, {0x3, 0x6}, {0x8, 0x1}, {0x2, 0x2}, {0xbc, 0x9}, {0x9, 0xfffffffffffff96f}, {0x6, 0x3ff}, {0x10000, 0x9}, {0x3, 0x9}, {0x796, 0x8000000000000000}, {0x4, 0x3}, {0x400000, 0xe7a}, {0x8001, 0xe}, {0x55}, {0xd, 0xcd6}, {0x3, 0xfff}, {0x2, 0x8}, {0xb, 0x70ae}, {0x2, 0x7d7ec820}, {0x5, 0x10001}, {0x5, 0x2}, {0x3, 0xf900}, {0x1, 0xfff}, {0x8e, 0x5}, {0x0, 0x9}, {0x9, 0x4}, {0x4, 0x5}, {0x6, 0x2}, {0x274, 0x3}, {0xe, 0x7}, {0x2, 0x53}, {0x4, 0x7}, {0x8, 0x980}, {0x10000, 0x8}, {0xfffffffffffffffd, 0x3}, {0x1, 0xd}, {0xffff, 0x90}, {0x5, 0xc92}, {0x4}, {0xf435, 0x9}, {0x9, 0xffffffffffffffe3}, {0x100, 0x8}, {0x400, 0x48e9}, {0xd, 0x4}, {0x3, 0x8}, {0x0, 0x3}, {0x4, 0xfffffffffffffffc}, {0x8, 0x4}, {0x6, 0x2}, {0x2, 0x7fffffff}, {0x3, 0x7}, {0x1, 0xd3}, {0x200, 0x4}, {0x10, 0xc0f6}, {0x8, 0x8537}, {0x743f, 0x9}, {0x1000, 0x6}, {0x80000001, 0x7}, {0x9, 0x4}, {0xfd2e, 0x1}, {0x3, 0x7}, {0x117b, 0x8}, {0x8, 0x5}, {0x10, 0x6}, {0x7, 0x8}, {0x8, 0x5}, {0x10001}, {0x1, 0xffffffffffffffff}, {0x7}, {0x5, 0x3}, {0x3, 0x7ff}, {0x5, 0x7}, {0x61525119, 0xee02}, {0x8000, 0x6}, {0xa4, 0xaeb}, {0x8000000000000000, 0x1}, {0xdb, 0x6}, {0xd7, 0x4}, {0x5, 0xb}, {0x40, 0x401}, {0x3, 0x7}, {0xa20, 0xba}, {0x1, 0xb}, {0xf, 0xff}, {0x800, 0x9}, {0x3, 0x3a}, {0x7, 0x2}, {0x4, 0x8}, {0x0, 0x5}, {0x4, 0x18c}, {0x5800000000000000, 0x8}, {0x8, 0xffff}, {0x3, 0x6}, {0x9, 0x401}, {0x3488, 0x7f}, {0x8, 0x3}, {0x9, 0x2}, {0x8, 0x4}, {0x4, 0x1}, {0x3, 0x4}, {0xd9, 0x10001}, {0x2, 0x3}, {0x6, 0x9e}, {0x7, 0xffffffffffffffa9}, {0x10, 0x3}, {0xdc, 0x3}, {0x7, 0x8}, {0x100000001, 0x1}, {0x8, 0x7}, {0x6, 0x4}, {0xe, 0x200}, {0x0, 0x100}, {0x6, 0x7}, {0x5, 0x1}, {0x2, 0x8}, {0x0, 0x6}, {0x7fffffffffffffff, 0x2}, {0xfc}, {0x6}, {0x1, 0x7}, {0x8000}, {0x3, 0x6}, {0x5, 0x8}, {0x6, 0x815}, {0x8, 0x2107}, {0xfffc000000000000, 0xfffffffffffffff1}, {0x9, 0xc14}, {0x3, 0x55}, {0x3, 0x5}, {0x4, 0x8}, {0xa7b, 0x5a}, {0x40, 0x101}, {0x6, 0x1ff}, {0x1, 0x1}, {0xfffffffffffffff9, 0x9}, {0x7}, {0x8, 0x8}, {0x5e, 0x1}, {0x9, 0x3c36}, {0x100000001}, {0x32, 0x1}, {0xc00a, 0x3}, {0xb2}, {0x4, 0x5}, {0xfffffffffffffffa, 0x200}, {0xd, 0x6}, {0x3, 0xfffffffffffffffa}, {0x3, 0xfff}, {0x7, 0x3}, {0x100, 0x3d}, {0x81, 0x3}, {0x200, 0x2}, {0xfff, 0x2}, {0x2, 0x100}, {0x6ded, 0x5}, {0x1, 0x3}]}, &(0x7f0000005300)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000005340)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000005380)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x8, 0x2}, {0xd0}, {0x3, 0x401}, {0x1, 0x400}, {0x6, 0x3}, {0x5, 0x5}, {0x7, 0x7}, {0xc00000000000, 0x8}, {0x9f0, 0x40}, {0x5, 0x8000}, {0x6, 0x9}, {0x1, 0x5}, {0x8, 0x4}, {0x8, 0x1}, {0x5, 0x1}, {0x7f, 0x1}, {0x7fffffff, 0x5}, {0x80, 0x7}, {0xe5, 0x8}, {0x3, 0x7}, {0x7f, 0x900000000000}, {0x2, 0x3ff}, {0x8000000000000000, 0xfffffffffffffffd}, {0x81000000, 0x5}, {0x1, 0xb7}, {0xb, 0x9}, {0x101, 0x2}, {0xddc, 0x9}, {0x0, 0x6}, {0x3c59, 0x9e5}, {0xe6a, 0x1000}, {0x4, 0xae}, {0x5, 0x8}, {0x3, 0x3}, {0x2}, {0x9, 0x3}, {0x8, 0x8000000000000000}, {0x5, 0x50}, {0x1, 0x3}, {0x8, 0x80000000}, {0x6, 0x8000000000000001}, {0x72e}, {0x401, 0x5}, {0x5, 0x60f3}, {0xb, 0x800}, {0x1, 0x6}, {0x8, 0x7f}, {0xfffffffffffffffc, 0x6}, {0x4c78, 0x100000000000000}, {0x40, 0x5}, {0x9, 0x1}, {0x3, 0x4}, {0x7, 0xffffffff}, {0xffff, 0xe6}, {0x101}, {0x2, 0x3}, {0x0, 0xfffffffffffffff9}, {0x80, 0x11}, {0x3, 0x9}, {0x87c}, {0xfff, 0x7}, {0x6, 0x8}, {0x80000000}, {0x2, 0x7fff}, {0x7, 0x5}, {0x6, 0x200}, {0x7, 0x3}, {0x6, 0x6}, {0xb17, 0x77c}, {0x0, 0x400}, {0x3ff, 0x80}, {0x4, 0x80}, {0x2, 0x7}, {0x1ff, 0x6}, {0x7, 0x4}, {0xc9, 0x4}, {0x4, 0x9}, {0x7, 0x9}, {0x0, 0xd}, {0x2, 0x45}, {0x3, 0x8}, {0x1, 0xfffffffffffffd6b}, {0x5}, {0x4eb7a84c, 0x9}, {0x81, 0x2}, {0x8, 0x100}, {0x6, 0x4}, {0x2, 0x8}, {0x9}, {0x18, 0x6}, {0xc87, 0x2}, {0x2, 0x66}, {0x3, 0x9}, {0x10, 0x4}, {0x400, 0x8}, {0x94}, {0x100000000000000, 0x7}, {0x7, 0x5}, {0x3, 0x7ff}, {0xffffffffffff0001}, {0x7fff, 0x6}, {0x100, 0x9}, {0x7, 0xe5}, {0x0, 0xffffffffffff8331}, {0x2}, {0x1bc3, 0x3}, {0x1a, 0x6}, {0x8, 0xf}, {0x7, 0x7fffffff}, {0x525, 0x5}, {0x8704, 0x81}, {0x979, 0x2}, {0xc0000, 0xfffffffffffffffa}, {0xe, 0x3ff}, {0x2a2, 0x8001}, {0x9, 0x8}, {0xfff, 0xff}, {0x1, 0xb3e}, {0x10, 0x4}, {0xb, 0xc}, {0x7, 0x2}, {0x3, 0xd7}, {0x1, 0x8}, {0x9, 0xfffffffffffffffe}, {0xee1, 0x40}, {0x7, 0x8}, {0x100000001, 0xcc2d}, {0x2, 0x9}, {0x7}, {0x200, 0x8}, {0x2, 0x7}, {0x7, 0xfffffffffffffbff}, {0x6, 0x8}, {0x806, 0xc}, {0x63, 0x7}, {0xea1, 0xa}, {0x8, 0x1}, {0xa, 0x7}, {0x6b, 0x5}, {0xfa, 0x1}, {0x7, 0xe2}, {0x6, 0x7fffffffffffffff}, {0x6, 0x2}, {0x8, 0x3}, {0x20000000}, {0x2, 0x6}, {0x7, 0x7}, {0x0, 0x3}, {0xffffffff, 0x34ece765}, {0x6, 0x10001}, {0xd49, 0x7f}, {0xe8d, 0x8000000000000001}, {0x3, 0x9}, {0xc56, 0x6}, {0x6, 0x3}, {0x7a1, 0xc87e}, {0x1, 0x3ff}, {0x2, 0x9b2}, {0x7fffffffffffffff, 0x8}, {0xfd5, 0x8}, {0x4, 0x60b894be}, {0xffffffff00000000, 0x4}, {0xc16, 0x3}, {0x9, 0x3}, {0x800}, {0x7, 0x9}, {0x2, 0x5e}, {0x7}, {}, {0x4, 0x1b}, {0xdb, 0xb16f}, {0x6000000000000000, 0x6}, {0x79, 0x81}, {0xffffffff7fffffff, 0x5}, {0x7}, {0x7fffffffffffffff, 0x93d}, {0x100, 0x9}, {0x5, 0xfffffffffffffffa}, {0x9, 0x8}, {0x7}, {0x9, 0x4}, {0x10001}, {0x81, 0x10}, {0x3, 0x6}, {0x2, 0x7}, {0x80, 0x80000001}, {0x4, 0xa}, {0x95e6, 0x2}, {0x1c843fc, 0x9}, {0x1, 0x2}, {0x101, 0x6}, {0x4, 0xa9}, {0xf, 0x7}, {0x81, 0x6}, {0x6, 0x73ed5cf9}, {0xffffffffffff1d80, 0x8}, {0xfffffffffffffff4, 0x9}, {0xfffffffffffffff7, 0x800}, {0xffffffffffffffff, 0x3}, {0x401}, {0x6, 0x5}, {0x2, 0x8}, {0x6, 0x40}, {0x4, 0xabc}, {0x3, 0x9}, {0x8, 0x3}, {0x9}, {0x8, 0x1c47}, {0x10001, 0x9}, {0xfffffffffffffffe, 0x6}, {0xffffffffcfad8069, 0x5}, {0x3, 0xe}, {0x2, 0x7}, {0x5, 0x4}, {0x9, 0x6}, {0x7, 0x53}, {0xc, 0xc}, {0x1fc00000000}, {0x8, 0x8}, {0x80, 0x3}, {0xfff, 0x448}, {0x8, 0xfffffffffffffffc}, {0x7, 0x100000001}, {0xa3f, 0x7}, {0x3ff, 0x10000}, {0xf, 0x9a}, {0x6, 0x9}, {0x175, 0x8}, {0x9b6, 0xc}, {0x0, 0x3ce9}, {0xa75, 0x5}, {0x50, 0x6b00000}, {0x1, 0x2}, {0x7fffffffffffffff, 0xcd}, {0x3, 0x8}, {0x2, 0x7}, {0x100000001}, {0x9}, {0xb6, 0x4}, {0x5}, {0x4, 0xcc96}, {0x101, 0x3}, {0x0, 0xfffffffffffffffc}, {0x8, 0x2}, {0x3}, {0x2, 0xd}, {0xdca, 0x5}, {0xd, 0x6}, {0x100000000, 0x3ff}, {0xfffffffffffffffa, 0x2}, {}, {0x6, 0x2}, {0x2, 0x5}, {0x1000, 0x8}, {0x5, 0x6}]}, &(0x7f00000063c0)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000006440)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000006480)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000000}}, &(0x7f00000064c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, &(0x7f0000006500)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000006540)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}], 0x32}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000067c0), r6) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000006880)={&(0x7f0000006780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000006840)={&(0x7f0000006800)={0x3c, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044}, 0x20000000) close(r3) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000068c0)={r0, 0x473fa411, 0x0, 0x7f, 0x4f59, 0x9, 0xef13, 0xb912, {r0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x58000, 0x7fffffff, 0x5b96, 0x4, 0x1e680}}, &(0x7f0000006980)=0xb0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000069c0)) 0s ago: executing program 2 (id=7273): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="1802000000000080000000000300000085000000410000001800000003000000000000000400000095"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000b40)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) kernel console output (not intermixed with test programs): ailed -512 [ 1018.184364][ T686] veth1_vlan: entered promiscuous mode [ 1018.455030][ T686] veth0_macvtap: entered promiscuous mode [ 1018.459312][ T686] veth1_macvtap: entered promiscuous mode [ 1018.548579][ T686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1018.618858][ T686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1018.855707][T11532] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.855769][T11532] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.855802][T11532] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.855833][T11532] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.177264][T26139] IPVS: starting estimator thread 0... [ 1019.275458][ T1228] IPVS: using max 37 ests per chain, 88800 per kthread [ 1019.417094][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.417117][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.547856][T26139] IPVS: starting estimator thread 0... [ 1019.635866][ T1240] IPVS: using max 29 ests per chain, 69600 per kthread [ 1019.832242][T26139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.832264][T26139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.939523][ T1246] netlink: 'syz.1.6385': attribute type 10 has an invalid length. [ 1020.684942][ T1268] Cannot find del_set index 0 as target [ 1020.858547][ T1266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1020.864181][ T1277] netlink: 'syz.3.6395': attribute type 1 has an invalid length. [ 1020.931262][ T1266] team0: Port device bond1 added [ 1021.034039][ T1285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1021.047588][ T1285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1021.048621][ T1285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1021.051582][ T1285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1021.054175][ T1285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1021.303417][ T1277] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1021.900947][ T1316] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6400'. [ 1022.176262][ T5625] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1022.887407][ T1337] Cannot find del_set index 0 as target [ 1023.134722][ T5625] Bluetooth: hci3: command tx timeout [ 1023.190248][ T1284] dummy0 speed is unknown, defaulting to 1000 [ 1023.192054][ T1284] wg0 speed is unknown, defaulting to 1000 [ 1023.260321][ T1345] netlink: 'syz.0.6406': attribute type 11 has an invalid length. [ 1023.260343][ T1345] netlink: 'syz.0.6406': attribute type 9 has an invalid length. [ 1023.260356][ T1345] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6406'. [ 1023.833727][ T1361] netlink: 'syz.3.6408': attribute type 1 has an invalid length. [ 1024.110285][ T1361] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1024.661383][ T1284] dummy0 speed is unknown, defaulting to 1000 [ 1024.830706][ T1382] Cannot find del_set index 0 as target [ 1025.215678][ T5625] Bluetooth: hci3: command tx timeout [ 1025.563409][ T1395] netlink: 'syz.4.6419': attribute type 11 has an invalid length. [ 1025.563430][ T1395] netlink: 'syz.4.6419': attribute type 9 has an invalid length. [ 1025.563441][ T1395] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6419'. [ 1026.092459][ T1415] netlink: 'syz.3.6421': attribute type 1 has an invalid length. [ 1026.279942][ T1415] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1026.408755][ T1422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6423'. [ 1026.466326][ T1284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.466618][ T1284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.467126][ T1284] bridge_slave_0: entered allmulticast mode [ 1026.474798][ T1284] bridge_slave_0: entered promiscuous mode [ 1026.484461][ T1284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.484857][ T1284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.485428][ T1284] bridge_slave_1: entered allmulticast mode [ 1026.487717][ T1284] bridge_slave_1: entered promiscuous mode [ 1026.813859][ T1284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.832417][ T1284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.958525][ T1436] Cannot find del_set index 0 as target [ 1027.092400][ T1284] team0: Port device team_slave_0 added [ 1027.103283][ T1284] team0: Port device team_slave_1 added [ 1027.172365][ T1450] netlink: 'syz.3.6426': attribute type 10 has an invalid length. [ 1027.286037][ T1447] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1027.288691][ T1447] batman_adv: batadv0: Adding interface: gretap1 [ 1027.288705][ T1447] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.288731][ T1447] batman_adv: batadv0: Interface activated: gretap1 [ 1027.293447][ T1450] dummy0: left promiscuous mode [ 1027.303498][ T5625] Bluetooth: hci3: command tx timeout [ 1027.508831][ T1284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.508848][ T1284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.508871][ T1284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.521064][ T1284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.521081][ T1284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.521103][ T1284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.069374][ T1284] hsr_slave_0: entered promiscuous mode [ 1028.079241][ T1284] hsr_slave_1: entered promiscuous mode [ 1028.086331][ T1284] debugfs: 'hsr0' already exists in 'hsr' [ 1028.086352][ T1284] Cannot create hsr debugfs directory [ 1028.156889][ T1470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6434'. [ 1028.331452][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802aaff000: rx timeout, send abort [ 1028.539089][ T1487] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1028.597454][ T1488] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6435'. [ 1029.062028][ T1496] Cannot find del_set index 0 as target [ 1029.274375][ T1498] bridge4: port 1(dummy0) entered blocking state [ 1029.274482][ T1498] bridge4: port 1(dummy0) entered disabled state [ 1029.275705][ T1498] dummy0: entered allmulticast mode [ 1029.303395][ T1498] dummy0: entered promiscuous mode [ 1029.342065][ T1503] netlink: 'syz.4.6440': attribute type 10 has an invalid length. [ 1029.342087][ T1503] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6440'. [ 1029.387016][ T5625] Bluetooth: hci3: command tx timeout [ 1029.463420][ T1503] dummy0: left allmulticast mode [ 1029.464688][ T1503] bridge4: port 1(dummy0) entered disabled state [ 1029.895446][ T1518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6447'. [ 1029.983885][ T1524] Bluetooth: MGMT ver 1.23 [ 1030.002360][ T1284] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.002393][ T1284] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.002418][ T1284] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 59522 - 0 [ 1030.049405][ T1518] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6447'. [ 1030.702403][ T1537] tipc: Started in network mode [ 1030.702430][ T1537] tipc: Node identity e0000002, cluster identity 4711 [ 1030.702479][ T1537] tipc: Enabling of bearer rejected, failed to enable media [ 1031.124150][ T1284] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1031.124185][ T1284] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.124208][ T1284] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 59522 - 0 [ 1031.386425][ T1560] netlink: 'syz.4.6452': attribute type 1 has an invalid length. [ 1031.757186][ T1284] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1031.757222][ T1284] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.757246][ T1284] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 59522 - 0 [ 1031.810376][ T1572] netlink: 'syz.0.6453': attribute type 1 has an invalid length. [ 1031.964239][ T1560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.992678][ T1565] bond14: (slave veth0_to_bond): Releasing active interface [ 1031.992707][ T1565] veth0_to_bond: left promiscuous mode [ 1031.992869][ T1565] veth0_to_bond: left allmulticast mode [ 1032.077606][ T1565] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1032.121479][ T1567] bond0: entered promiscuous mode [ 1032.121506][ T1567] bond0: entered allmulticast mode [ 1032.190132][ T1568] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1032.314198][ T1572] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1032.430971][ T1573] bond3: (slave veth0_to_bond): making interface the new active one [ 1032.444857][ T1573] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1032.455531][ T1584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6454'. [ 1032.489802][ T1576] bond3: entered promiscuous mode [ 1032.489825][ T1576] veth0_to_bond: entered promiscuous mode [ 1032.490822][ T1576] bond3: entered allmulticast mode [ 1032.490836][ T1576] veth0_to_bond: entered allmulticast mode [ 1032.638079][ T1577] macvlan2: entered promiscuous mode [ 1032.652579][ T1577] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1032.679466][ T1577] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 1033.085415][ T1284] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1033.085450][ T1284] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.085475][ T1284] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 59522 - 0 [ 1033.715568][ T1605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6457'. [ 1033.715605][ T1605] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6457'. [ 1033.870327][ T1605] geneve2: entered promiscuous mode [ 1033.876678][ T1605] geneve2: entered allmulticast mode [ 1034.035852][ T1555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1034.369112][ T1284] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1034.434166][ T1284] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1034.458532][ T1284] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1034.513130][ T1284] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1034.514000][ T1284] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1034.566082][ T1284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1034.573591][ T1284] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1034.627682][ T1284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1034.772766][ T1613] syz_tun: entered allmulticast mode [ 1034.877539][ T1626] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6462'. [ 1034.904534][ T1626] netlink: zone id is out of range [ 1034.904550][ T1626] netlink: zone id is out of range [ 1034.904721][ T1626] netlink: zone id is out of range [ 1034.904732][ T1626] netlink: zone id is out of range [ 1034.904741][ T1626] netlink: zone id is out of range [ 1034.904748][ T1626] netlink: zone id is out of range [ 1034.904757][ T1626] netlink: zone id is out of range [ 1034.904764][ T1626] netlink: zone id is out of range [ 1034.904773][ T1626] netlink: zone id is out of range [ 1034.904781][ T1626] netlink: set zone limit has 4 unknown bytes [ 1035.434067][ T1633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6464'. [ 1035.704062][ T1284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.794067][ T1284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.834105][T26141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.834208][T26141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.858718][T26141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.858819][T26141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.443384][ T1660] netlink: 'syz.2.6471': attribute type 1 has an invalid length. [ 1036.566035][ T1667] vlan0: entered promiscuous mode [ 1036.566213][ T1667] vlan0: entered allmulticast mode [ 1036.566227][ T1667] veth0_vlan: entered allmulticast mode [ 1036.700511][ T1665] lo: entered promiscuous mode [ 1036.719603][ T1665] tunl0: entered promiscuous mode [ 1036.739431][ T1665] gre0: entered promiscuous mode [ 1036.765089][ T1665] gretap0: entered promiscuous mode [ 1036.888986][ T1665] erspan0: entered promiscuous mode [ 1036.909847][ T1665] ip_vti0: entered promiscuous mode [ 1036.935248][ T1665] ip6_vti0: entered promiscuous mode [ 1036.938639][ T1665] sit0: entered promiscuous mode [ 1036.962653][ T1665] ip6tnl0: entered promiscuous mode [ 1036.973022][ T1665] ip6gre0: entered promiscuous mode [ 1037.253203][ T1665] syz_tun: entered promiscuous mode [ 1037.393313][ T1665] ip6gretap0: entered promiscuous mode [ 1037.425091][ T1665] bridge0: port 3(bond0) entered disabled state [ 1037.426174][ T1665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.426745][ T1665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.471456][ T1665] bridge0: entered promiscuous mode [ 1037.488792][ T1665] vcan0: entered promiscuous mode [ 1037.544038][ T1665] team0: entered promiscuous mode [ 1037.544061][ T1665] team_slave_0: entered promiscuous mode [ 1037.544255][ T1665] team_slave_1: entered promiscuous mode [ 1037.544408][ T1665] dummy0: entered promiscuous mode [ 1037.575794][ T1665] bond1: entered promiscuous mode [ 1037.626022][ T1665] nlmon0: entered promiscuous mode [ 1037.711437][ T1665] batadv0: entered promiscuous mode [ 1037.786945][ T1665] vxcan0: entered promiscuous mode [ 1037.791026][ T1665] vxcan1: entered promiscuous mode [ 1037.792726][ T1665] veth0: entered promiscuous mode [ 1037.824125][ T1665] veth1: entered promiscuous mode [ 1037.835310][ T1687] netlink: 'syz.3.6478': attribute type 10 has an invalid length. [ 1037.870901][ T1665] wg0: entered promiscuous mode [ 1037.898718][ T1665] wg2: entered promiscuous mode [ 1037.902189][ T1665] veth0_to_bridge: entered promiscuous mode [ 1037.928650][ T1665] veth1_to_bridge: entered promiscuous mode [ 1037.953690][ T1665] veth1_to_bond: entered promiscuous mode [ 1037.970238][ T1665] veth0_to_team: entered promiscuous mode [ 1037.992052][ T1665] veth1_to_team: entered promiscuous mode [ 1038.012021][ T1665] veth0_to_batadv: entered promiscuous mode [ 1038.026461][ T1665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.027457][ T1665] batadv_slave_0: entered promiscuous mode [ 1038.097802][ T1665] veth1_to_batadv: entered promiscuous mode [ 1038.212946][ T1665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.213025][ T1665] batadv_slave_1: entered promiscuous mode [ 1038.236407][ T1665] xfrm0: entered promiscuous mode [ 1038.241093][ T1665] veth0_to_hsr: entered promiscuous mode [ 1038.279443][ T1665] veth1_to_hsr: entered promiscuous mode [ 1038.307155][ T1665] hsr0: entered promiscuous mode [ 1038.326502][ T1665] veth1_virt_wifi: entered promiscuous mode [ 1038.346250][ T1665] veth0_virt_wifi: entered promiscuous mode [ 1038.395448][ T1665] vlan0: entered promiscuous mode [ 1038.401813][ T1665] vlan1: entered promiscuous mode [ 1038.436043][ T1665] macvlan0: entered promiscuous mode [ 1038.453110][ T1665] macvlan1: entered promiscuous mode [ 1038.472056][ T1665] ipvlan0: entered promiscuous mode [ 1038.472254][ T1665] ipvlan1: entered promiscuous mode [ 1038.613196][ T1665] macvtap0: entered promiscuous mode [ 1038.679462][ T1665] macsec0: entered promiscuous mode [ 1038.736186][ T1665] geneve0: entered promiscuous mode [ 1038.789907][ T1665] geneve1: entered promiscuous mode [ 1038.855330][ T1665] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1038.923642][ T1665] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 1038.975032][ T1665] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 1039.055150][ T1665] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 1039.111570][ T1665] mac80211_hwsim hwsim100 wlan0: entered promiscuous mode [ 1039.112583][ T1665] mac80211_hwsim hwsim101 wlan1: entered promiscuous mode [ 1039.113531][ T1665] bridge1: entered promiscuous mode [ 1039.114520][ T1665] bridge2: entered promiscuous mode [ 1039.115373][ T1665] bridge3: entered promiscuous mode [ 1039.116314][ T1665] bridge4: entered promiscuous mode [ 1039.117230][ T1665] vxcan2: entered promiscuous mode [ 1039.118126][ T1665] vxcan3: entered promiscuous mode [ 1039.119056][ T1665] vxcan4: entered promiscuous mode [ 1039.119970][ T1665] vxcan5: entered promiscuous mode [ 1039.122506][ T1665] : entered promiscuous mode [ 1039.183884][ T1665] syztnl2: entered promiscuous mode [ 1039.258620][ T1665] batman_adv: batadv0: Interface deactivated: gretap1 [ 1039.261538][ T1665] gretap1: entered promiscuous mode [ 1039.337723][ T1665] bond2: entered promiscuous mode [ 1039.399566][ T1665] veth2: entered promiscuous mode [ 1039.400536][ T1665] veth3: entered promiscuous mode [ 1039.778620][T26137] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.778656][T26137] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.778703][T26137] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.778727][T26137] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.778761][T26137] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.778791][T26137] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.778840][T26137] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.778863][T26137] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.211859][ T1709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6482'. [ 1040.211922][ T1709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6482'. [ 1040.368816][ T1711] IPVS: Error connecting to the multicast addr [ 1040.616746][ T1720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6483'. [ 1040.655645][ T1718] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 1041.212634][ T1730] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6486'. [ 1041.459167][ T1284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.694158][ T1751] netlink: 'syz.0.6490': attribute type 10 has an invalid length. [ 1041.919951][ T1284] veth0_vlan: entered promiscuous mode [ 1041.999127][ T1284] veth1_vlan: entered promiscuous mode [ 1042.253383][ T1284] veth0_macvtap: entered promiscuous mode [ 1042.308326][ T1284] veth1_macvtap: entered promiscuous mode [ 1042.443953][ T1284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.503758][ T1284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.596729][ T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.597603][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.598051][T26132] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.045300][ T1772] syzkaller1: entered promiscuous mode [ 1043.045495][ T1772] syzkaller1: entered allmulticast mode [ 1043.070499][T26137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.143335][ T1775] syzkaller1: left promiscuous mode [ 1043.143356][ T1775] syzkaller1: left allmulticast mode [ 1043.553822][ T1783] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1043.682808][ T1797] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1043.789763][T26139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.789786][T26139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.181352][T26137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.181373][T26137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.382694][ T1809] netlink: 'syz.3.6507': attribute type 10 has an invalid length. [ 1045.817052][T30075] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1045.820894][T30075] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1045.836576][T30075] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1045.855533][T30075] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1045.858916][T30075] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1046.338616][T20573] syz_tun (unregistering): left allmulticast mode [ 1046.933351][ T1857] dummy0 speed is unknown, defaulting to 1000 [ 1046.941194][ T1857] wg0 speed is unknown, defaulting to 1000 [ 1047.483733][ T1857] dummy0 speed is unknown, defaulting to 1000 [ 1047.935658][ T5625] Bluetooth: hci2: command tx timeout [ 1048.218405][ T1857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.218519][ T1857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.218649][ T1857] bridge_slave_0: entered allmulticast mode [ 1048.249095][ T1857] bridge_slave_0: entered promiscuous mode [ 1048.259034][ T1857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.259135][ T1857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.259268][ T1857] bridge_slave_1: entered allmulticast mode [ 1048.288011][ T1842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1048.288178][ T1853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6518'. [ 1048.288542][ T1857] bridge_slave_1: entered promiscuous mode [ 1048.712814][ T1857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.753273][ T1857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.012575][ T1857] team0: Port device team_slave_0 added [ 1049.061160][ T1857] team0: Port device team_slave_1 added [ 1049.197172][ T1857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.197191][ T1857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.197215][ T1857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.202482][ T1857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.202498][ T1857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.204228][ T1857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.553719][ T1857] hsr_slave_0: entered promiscuous mode [ 1049.560560][ T1857] hsr_slave_1: entered promiscuous mode [ 1049.567968][ T1857] debugfs: 'hsr0' already exists in 'hsr' [ 1049.567989][ T1857] Cannot create hsr debugfs directory [ 1049.831932][ T1913] FAULT_INJECTION: forcing a failure. [ 1049.831932][ T1913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1049.831989][ T1913] CPU: 1 UID: 0 PID: 1913 Comm: syz.1.6530 Not tainted syzkaller #0 PREEMPT(full) [ 1049.832011][ T1913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1049.832022][ T1913] Call Trace: [ 1049.832030][ T1913] [ 1049.832039][ T1913] dump_stack_lvl+0xe8/0x150 [ 1049.832074][ T1913] should_fail_ex+0x410/0x560 [ 1049.832104][ T1913] _copy_from_user+0x2d/0xb0 [ 1049.832133][ T1913] __sys_bpf+0x2e7/0xd90 [ 1049.832165][ T1913] ? __pfx___sys_bpf+0x10/0x10 [ 1049.832207][ T1913] ? __fget_files+0x2a/0x420 [ 1049.832252][ T1913] ? ksys_write+0x242/0x270 [ 1049.832274][ T1913] ? __pfx_ksys_write+0x10/0x10 [ 1049.832299][ T1913] __x64_sys_bpf+0xba/0xd0 [ 1049.832323][ T1913] do_syscall_64+0x166/0x520 [ 1049.832347][ T1913] ? trace_irq_disable+0x3b/0x140 [ 1049.832367][ T1913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.832387][ T1913] ? clear_bhb_loop+0x70/0xc0 [ 1049.832411][ T1913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.832430][ T1913] RIP: 0033:0x7f6dc459e1d9 [ 1049.832449][ T1913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1049.832465][ T1913] RSP: 002b:00007f6dc54b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1049.832487][ T1913] RAX: ffffffffffffffda RBX: 00007f6dc4825fa0 RCX: 00007f6dc459e1d9 [ 1049.832501][ T1913] RDX: 0000000000000094 RSI: 0000200000000d80 RDI: 0000000000000005 [ 1049.832514][ T1913] RBP: 00007f6dc54b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.832526][ T1913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1049.832537][ T1913] R13: 00007f6dc4826038 R14: 00007f6dc4825fa0 R15: 00007fff864faae8 [ 1049.832568][ T1913] [ 1050.035019][ T5625] Bluetooth: hci2: command tx timeout [ 1050.285705][ T1915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6531'. [ 1050.456584][ T1915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6531'. [ 1050.692241][ T1923] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6533'. [ 1050.741030][ T1923] netlink: zone id is out of range [ 1050.741047][ T1923] netlink: zone id is out of range [ 1050.741057][ T1923] netlink: zone id is out of range [ 1050.741064][ T1923] netlink: zone id is out of range [ 1050.741073][ T1923] netlink: zone id is out of range [ 1050.741080][ T1923] netlink: zone id is out of range [ 1050.741088][ T1923] netlink: zone id is out of range [ 1050.741096][ T1923] netlink: zone id is out of range [ 1050.741104][ T1923] netlink: zone id is out of range [ 1050.741111][ T1923] netlink: set zone limit has 4 unknown bytes [ 1050.835837][ T1925] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6532'. [ 1051.309443][ T1932] netlink: 'syz.1.6536': attribute type 1 has an invalid length. [ 1051.525568][ T1932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1051.696787][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 10 > 9 [ 1051.818768][ T1940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6537'. [ 1052.085526][ T1857] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 1052.085589][ T1857] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 1052.096872][ T5625] Bluetooth: hci2: command tx timeout [ 1052.133216][ T1857] team0: Port device netdevsim1 removed [ 1052.568585][ T1956] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6544'. [ 1052.846050][ T1964] Cannot find del_set index 0 as target [ 1052.851556][ T1964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6545'. [ 1053.221512][ T1981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6548'. [ 1053.285293][ T1982] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6549'. [ 1053.543993][ T1981] geneve3: entered promiscuous mode [ 1053.567114][T26132] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.567805][T26132] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.567882][T26132] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.567916][T26132] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.783601][ T1857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1053.915812][ T1857] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1053.916716][ T1857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1053.982796][ T1857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1054.009630][ T1857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1054.036847][ T1857] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1054.077791][ T1857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1054.113022][ T1857] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1054.183259][ T5625] Bluetooth: hci2: command tx timeout [ 1054.279149][ T2001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6553'. [ 1054.574426][ T2008] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6556'. [ 1054.762298][ T2011] Cannot find del_set index 0 as target [ 1054.765227][ T2011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6557'. [ 1054.844473][ T2013] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1054.909367][ T2013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6558'. [ 1056.639976][ T1987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1057.137596][ T2059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6564'. [ 1057.177578][ T2059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6564'. [ 1057.268654][ T1857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.311822][ T1857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.469155][T26132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.469259][T26132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.542775][T25277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.542879][T25277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.680033][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 10 > 9 [ 1057.743850][ T2074] netlink: 'syz.3.6567': attribute type 1 has an invalid length. [ 1057.865405][ T2079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6568'. [ 1057.938619][ T2074] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1058.022437][ T2066] dummy0 speed is unknown, defaulting to 1000 [ 1058.024351][ T2066] wg0 speed is unknown, defaulting to 1000 [ 1058.341048][ T2091] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1058.615351][ T2096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6573'. [ 1058.723505][ T2099] FAULT_INJECTION: forcing a failure. [ 1058.723505][ T2099] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.723537][ T2099] CPU: 0 UID: 0 PID: 2099 Comm: syz.2.6573 Not tainted syzkaller #0 PREEMPT(full) [ 1058.723558][ T2099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1058.723569][ T2099] Call Trace: [ 1058.723578][ T2099] [ 1058.723586][ T2099] dump_stack_lvl+0xe8/0x150 [ 1058.723618][ T2099] should_fail_ex+0x410/0x560 [ 1058.723657][ T2099] should_failslab+0xa8/0x100 [ 1058.723683][ T2099] ? ep_insert+0x2b1/0x1af0 [ 1058.723703][ T2099] kmem_cache_alloc_noprof+0xa1/0x600 [ 1058.723725][ T2099] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1058.723749][ T2099] ? ep_insert+0x2b1/0x1af0 [ 1058.723776][ T2099] ep_insert+0x2b1/0x1af0 [ 1058.723806][ T2099] ? do_epoll_ctl_file+0x99b/0xee0 [ 1058.723831][ T2099] ? __pfx_ep_insert+0x10/0x10 [ 1058.723852][ T2099] ? __pfx___mutex_lock+0x10/0x10 [ 1058.723888][ T2099] ? bpf_lsm_capable+0x9/0x20 [ 1058.723908][ T2099] ? security_capable+0x7e/0x2c0 [ 1058.723940][ T2099] do_epoll_ctl_file+0x8c2/0xee0 [ 1058.723970][ T2099] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1058.723995][ T2099] ? __fget_files+0x3a2/0x420 [ 1058.724021][ T2099] ? __fget_files+0x2a/0x420 [ 1058.724057][ T2099] __se_sys_epoll_ctl+0x162/0x230 [ 1058.724080][ T2099] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1058.724109][ T2099] do_syscall_64+0x166/0x520 [ 1058.724130][ T2099] ? trace_irq_disable+0x3b/0x140 [ 1058.724149][ T2099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.724169][ T2099] ? clear_bhb_loop+0x70/0xc0 [ 1058.724196][ T2099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.724217][ T2099] RIP: 0033:0x7f420339e1d9 [ 1058.724237][ T2099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.724255][ T2099] RSP: 002b:00007f42041de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1058.724278][ T2099] RAX: ffffffffffffffda RBX: 00007f4203626090 RCX: 00007f420339e1d9 [ 1058.724293][ T2099] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000007 [ 1058.724305][ T2099] RBP: 00007f42041de090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.724318][ T2099] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 1058.724332][ T2099] R13: 00007f4203626128 R14: 00007f4203626090 R15: 00007ffdd24f3ba8 [ 1058.724363][ T2099] [ 1059.675718][ T2097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.678920][ T2097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.231674][ T2097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.256281][ T2097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.536620][T26137] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.538083][T26137] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.600014][ T2066] dummy0 speed is unknown, defaulting to 1000 [ 1060.755316][T26139] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.755377][T26139] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.392304][ T2132] block nbd2: server does not support multiple connections per device. [ 1061.393696][ T2132] block nbd2: shutting down sockets [ 1062.144371][ T1857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.959758][ T2162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6586'. [ 1063.055797][ T2162] IPVS: Unknown mcast interface: vcan0 [ 1063.548007][ T2173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6588'. [ 1063.550524][ T1857] veth0_vlan: entered promiscuous mode [ 1063.595622][ T1857] veth1_vlan: entered promiscuous mode [ 1063.777554][ T1857] veth0_macvtap: entered promiscuous mode [ 1063.801253][ T1857] veth1_macvtap: entered promiscuous mode [ 1063.957645][ T1857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.961630][ T1857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1063.983411][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.994984][T26132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.995169][T26132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.995310][T26132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.194816][ T2190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6594'. [ 1064.540839][T26139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.540861][T26139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.843854][T26141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.843876][T26141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.517532][ T2214] netlink: 'syz.1.6599': attribute type 1 has an invalid length. [ 1065.826027][ T2220] FAULT_INJECTION: forcing a failure. [ 1065.826027][ T2220] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.826065][ T2220] CPU: 1 UID: 0 PID: 2220 Comm: syz.4.6602 Not tainted syzkaller #0 PREEMPT(full) [ 1065.826086][ T2220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1065.826098][ T2220] Call Trace: [ 1065.826110][ T2220] [ 1065.826118][ T2220] dump_stack_lvl+0xe8/0x150 [ 1065.826149][ T2220] should_fail_ex+0x410/0x560 [ 1065.826177][ T2220] should_failslab+0xa8/0x100 [ 1065.826203][ T2220] __kmalloc_cache_noprof+0xa3/0x600 [ 1065.826224][ T2220] ? __mutex_unlock_slowpath+0x731/0x900 [ 1065.826250][ T2220] ? __xdp_reg_mem_model+0x1e9/0x5a0 [ 1065.826270][ T2220] ? __xdp_reg_mem_model+0x1e9/0x5a0 [ 1065.826298][ T2220] __xdp_reg_mem_model+0x1e9/0x5a0 [ 1065.826326][ T2220] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 1065.826366][ T2220] xdp_reg_mem_model+0x22/0x40 [ 1065.826388][ T2220] bpf_test_run_xdp_live+0x292/0x1c20 [ 1065.826417][ T2220] ? __pfx_stack_trace_save+0x10/0x10 [ 1065.826441][ T2220] ? stack_depot_save_flags+0x33/0x7f0 [ 1065.826465][ T2220] ? lock_acquire+0x115/0x350 [ 1065.826487][ T2220] ? kasan_save_track+0x4f/0x80 [ 1065.826508][ T2220] ? kasan_save_track+0x3e/0x80 [ 1065.826526][ T2220] ? __kasan_kmalloc+0x93/0xb0 [ 1065.826546][ T2220] ? __kmalloc_noprof+0x36b/0x720 [ 1065.826568][ T2220] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1065.826592][ T2220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.826643][ T2220] ? lock_acquire+0x115/0x350 [ 1065.826674][ T2220] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1065.826706][ T2220] ? _copy_from_user+0x94/0xb0 [ 1065.826734][ T2220] ? bpf_test_init+0x113/0x150 [ 1065.826755][ T2220] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1065.826781][ T2220] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1065.826820][ T2220] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1065.826850][ T2220] ? __fget_files+0x2a/0x420 [ 1065.826881][ T2220] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1065.826907][ T2220] bpf_prog_test_run+0x2c5/0x340 [ 1065.826934][ T2220] __sys_bpf+0xa22/0xd90 [ 1065.826965][ T2220] ? __pfx___sys_bpf+0x10/0x10 [ 1065.826996][ T2220] ? __fget_files+0x2a/0x420 [ 1065.827038][ T2220] ? ksys_write+0x242/0x270 [ 1065.827059][ T2220] ? __pfx_ksys_write+0x10/0x10 [ 1065.827082][ T2220] __x64_sys_bpf+0xba/0xd0 [ 1065.827105][ T2220] do_syscall_64+0x166/0x520 [ 1065.827128][ T2220] ? trace_irq_disable+0x3b/0x140 [ 1065.827147][ T2220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.827166][ T2220] ? clear_bhb_loop+0x70/0xc0 [ 1065.827188][ T2220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.827206][ T2220] RIP: 0033:0x7fdd2639e1d9 [ 1065.827223][ T2220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.827239][ T2220] RSP: 002b:00007fdd2723e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1065.827259][ T2220] RAX: ffffffffffffffda RBX: 00007fdd26625fa0 RCX: 00007fdd2639e1d9 [ 1065.827273][ T2220] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 1065.827285][ T2220] RBP: 00007fdd2723e090 R08: 0000000000000000 R09: 0000000000000000 [ 1065.827297][ T2220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1065.827308][ T2220] R13: 00007fdd26626038 R14: 00007fdd26625fa0 R15: 00007ffd0765f108 [ 1065.827335][ T2220] [ 1066.632000][ T2228] netlink: 'syz.4.6605': attribute type 1 has an invalid length. [ 1066.691354][ T2233] Cannot find del_set index 0 as target [ 1066.694150][ T2233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6607'. [ 1066.963423][ T2234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6606'. [ 1067.316344][ T2242] netlink: 'syz.1.6609': attribute type 10 has an invalid length. [ 1067.351526][ T2242] team0: Port device dummy0 added [ 1067.493075][ T2244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6613'. [ 1067.849240][ T2252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6616'. [ 1068.216045][ T2262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6618'. [ 1068.333739][ T2266] netlink: 'syz.1.6620': attribute type 11 has an invalid length. [ 1068.333763][ T2266] netlink: 'syz.1.6620': attribute type 9 has an invalid length. [ 1068.333776][ T2266] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6620'. [ 1068.532088][ T2259] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6617'. [ 1068.603062][ T2275] Cannot find del_set index 0 as target [ 1068.789612][ T2279] netlink: 'syz.0.6624': attribute type 1 has an invalid length. [ 1069.121211][ T2292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6624'. [ 1069.748395][ T2297] syzkaller1: entered promiscuous mode [ 1069.748583][ T2297] syzkaller1: entered allmulticast mode [ 1069.972105][ T2323] xt_TCPMSS: Only works on TCP SYN packets [ 1070.141710][ T2325] Cannot find del_set index 0 as target [ 1070.163731][ T2325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6631'. [ 1070.774880][ T2323] bond0: left allmulticast mode [ 1070.774906][ T2323] bond_slave_0: left allmulticast mode [ 1070.774923][ T2323] bond_slave_1: left allmulticast mode [ 1070.775262][ T2323] bridge0: port 3(bond0) entered disabled state [ 1070.816598][ T2323] bridge_slave_1: left allmulticast mode [ 1070.823488][ T2323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.870777][ T2323] bridge_slave_0: left allmulticast mode [ 1070.884567][ T2323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.020933][ T2337] netlink: 'syz.4.6633': attribute type 1 has an invalid length. [ 1071.477513][ T2348] Cannot find set identified by id 0 to match [ 1071.924141][ T2364] netlink: 'syz.4.6638': attribute type 10 has an invalid length. [ 1072.022801][ T2356] bond1: option updelay: invalid value (18446744073709551615) [ 1072.022826][ T2356] bond1: option updelay: allowed values 0 - 2147483647 [ 1072.147767][ T2356] bond1 (unregistering): Released all slaves [ 1072.451685][ T2364] team0: Port device dummy0 added [ 1072.608701][ T2368] vxcan6: entered allmulticast mode [ 1073.653396][ T2395] netlink: 'syz.2.6648': attribute type 10 has an invalid length. [ 1073.929782][ T2411] netlink: 'syz.3.6653': attribute type 4 has an invalid length. [ 1074.303043][ T2431] FAULT_INJECTION: forcing a failure. [ 1074.303043][ T2431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1074.303074][ T2431] CPU: 0 UID: 0 PID: 2431 Comm: syz.2.6658 Not tainted syzkaller #0 PREEMPT(full) [ 1074.303094][ T2431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1074.303103][ T2431] Call Trace: [ 1074.303111][ T2431] [ 1074.303119][ T2431] dump_stack_lvl+0xe8/0x150 [ 1074.303149][ T2431] should_fail_ex+0x410/0x560 [ 1074.303179][ T2431] _copy_to_user+0x31/0xb0 [ 1074.303209][ T2431] simple_read_from_buffer+0xe1/0x170 [ 1074.303243][ T2431] proc_fail_nth_read+0x1bb/0x230 [ 1074.303263][ T2431] ? common_file_perm+0x20e/0x2b0 [ 1074.303291][ T2431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1074.303315][ T2431] ? rw_verify_area+0x24a/0x4c0 [ 1074.303336][ T2431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1074.303356][ T2431] vfs_read+0x213/0xa80 [ 1074.303380][ T2431] ? __pfx___mutex_lock+0x10/0x10 [ 1074.303406][ T2431] ? __pfx_vfs_read+0x10/0x10 [ 1074.303427][ T2431] ? __fget_files+0x2a/0x420 [ 1074.303467][ T2431] ? __fget_files+0x3a2/0x420 [ 1074.303493][ T2431] ? __fget_files+0x2a/0x420 [ 1074.303528][ T2431] ksys_read+0x150/0x270 [ 1074.303549][ T2431] ? __pfx_ksys_read+0x10/0x10 [ 1074.303580][ T2431] do_syscall_64+0x166/0x520 [ 1074.303604][ T2431] ? trace_irq_disable+0x3b/0x140 [ 1074.303623][ T2431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.303643][ T2431] ? clear_bhb_loop+0x70/0xc0 [ 1074.303666][ T2431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.303686][ T2431] RIP: 0033:0x7f420335ea0e [ 1074.303704][ T2431] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1074.303718][ T2431] RSP: 002b:00007f42041fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1074.303739][ T2431] RAX: ffffffffffffffda RBX: 00007f42041ff6c0 RCX: 00007f420335ea0e [ 1074.303753][ T2431] RDX: 000000000000000f RSI: 00007f42041ff0a0 RDI: 0000000000000005 [ 1074.303765][ T2431] RBP: 00007f42041ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.303776][ T2431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1074.303787][ T2431] R13: 00007f4203626038 R14: 00007f4203625fa0 R15: 00007ffdd24f3ba8 [ 1074.303819][ T2431] [ 1074.322526][ T2427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6657'. [ 1074.880165][ T2432] ip6gre1: entered promiscuous mode [ 1074.880189][ T2432] ip6gre1: entered allmulticast mode [ 1074.920606][T11532] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1074.920811][T11532] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1074.945024][T32671] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1075.004890][T32671] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1075.583770][ T2445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6661'. [ 1075.583813][ T2445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6661'. [ 1075.776379][ T2445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6661'. [ 1075.938577][T22768] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1076.220687][ T2484] udevd[2484]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1076.227753][ T2500] FAULT_INJECTION: forcing a failure. [ 1076.227753][ T2500] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.227781][ T2500] CPU: 0 UID: 0 PID: 2500 Comm: syz.4.6672 Not tainted syzkaller #0 PREEMPT(full) [ 1076.227801][ T2500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1076.227813][ T2500] Call Trace: [ 1076.227820][ T2500] [ 1076.227828][ T2500] dump_stack_lvl+0xe8/0x150 [ 1076.227856][ T2500] should_fail_ex+0x410/0x560 [ 1076.227884][ T2500] should_failslab+0xa8/0x100 [ 1076.227910][ T2500] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1076.227933][ T2500] ? __css_rstat_updated+0x237/0x540 [ 1076.227953][ T2500] ? __get_vm_area_node+0x155/0x2f0 [ 1076.227978][ T2500] ? __get_vm_area_node+0x155/0x2f0 [ 1076.228010][ T2500] __get_vm_area_node+0x155/0x2f0 [ 1076.228042][ T2500] __vmalloc_node_range_noprof+0x343/0x1540 [ 1076.228061][ T2500] ? bpf_check+0x115b/0x2ef0 [ 1076.228093][ T2500] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1076.228120][ T2500] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1076.228157][ T2500] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1076.228177][ T2500] ? apparmor_capable+0x126/0x170 [ 1076.228199][ T2500] ? bpf_lsm_capable+0x9/0x20 [ 1076.228216][ T2500] ? security_capable+0x7e/0x2c0 [ 1076.228242][ T2500] ? bpf_check+0x115b/0x2ef0 [ 1076.228260][ T2500] __vmalloc_noprof+0xd2/0x120 [ 1076.228278][ T2500] ? bpf_check+0x115b/0x2ef0 [ 1076.228301][ T2500] bpf_check+0x115b/0x2ef0 [ 1076.228337][ T2500] ? __pfx_bpf_check+0x10/0x10 [ 1076.228368][ T2500] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1076.228397][ T2500] bpf_prog_load+0x14d6/0x1c20 [ 1076.228430][ T2500] ? __pfx_bpf_prog_load+0x10/0x10 [ 1076.228475][ T2500] __sys_bpf+0xd0d/0xd90 [ 1076.228504][ T2500] ? __pfx___sys_bpf+0x10/0x10 [ 1076.228535][ T2500] ? __fget_files+0x2a/0x420 [ 1076.228578][ T2500] ? ksys_write+0x242/0x270 [ 1076.228598][ T2500] ? __pfx_ksys_write+0x10/0x10 [ 1076.228621][ T2500] __x64_sys_bpf+0xba/0xd0 [ 1076.228643][ T2500] do_syscall_64+0x166/0x520 [ 1076.228666][ T2500] ? trace_irq_disable+0x3b/0x140 [ 1076.228685][ T2500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.228704][ T2500] ? clear_bhb_loop+0x70/0xc0 [ 1076.228730][ T2500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.228748][ T2500] RIP: 0033:0x7fdd2639e1d9 [ 1076.228766][ T2500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.228782][ T2500] RSP: 002b:00007fdd2723e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1076.228802][ T2500] RAX: ffffffffffffffda RBX: 00007fdd26625fa0 RCX: 00007fdd2639e1d9 [ 1076.228815][ T2500] RDX: 0000000000000094 RSI: 0000200000000d80 RDI: 0000000000000005 [ 1076.228827][ T2500] RBP: 00007fdd2723e090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.228838][ T2500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1076.228849][ T2500] R13: 00007fdd26626038 R14: 00007fdd26625fa0 R15: 00007ffd0765f108 [ 1076.228878][ T2500] [ 1076.230773][ T2500] syz.4.6672: vmalloc error: size 2040, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1076.230827][ T2500] CPU: 0 UID: 0 PID: 2500 Comm: syz.4.6672 Not tainted syzkaller #0 PREEMPT(full) [ 1076.230847][ T2500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1076.230858][ T2500] Call Trace: [ 1076.230865][ T2500] [ 1076.230873][ T2500] dump_stack_lvl+0xe8/0x150 [ 1076.230901][ T2500] warn_alloc+0x24d/0x270 [ 1076.230921][ T2500] ? __kasan_kmalloc+0x22/0xb0 [ 1076.230947][ T2500] ? __pfx_warn_alloc+0x10/0x10 [ 1076.230965][ T2500] ? __css_rstat_updated+0x237/0x540 [ 1076.230985][ T2500] ? __get_vm_area_node+0x155/0x2f0 [ 1076.231017][ T2500] ? __get_vm_area_node+0x2a9/0x2f0 [ 1076.231051][ T2500] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1076.231082][ T2500] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1076.231109][ T2500] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1076.231146][ T2500] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1076.231166][ T2500] ? apparmor_capable+0x126/0x170 [ 1076.231187][ T2500] ? bpf_lsm_capable+0x9/0x20 [ 1076.231205][ T2500] ? security_capable+0x7e/0x2c0 [ 1076.231229][ T2500] ? bpf_check+0x115b/0x2ef0 [ 1076.231247][ T2500] __vmalloc_noprof+0xd2/0x120 [ 1076.231265][ T2500] ? bpf_check+0x115b/0x2ef0 [ 1076.231288][ T2500] bpf_check+0x115b/0x2ef0 [ 1076.231324][ T2500] ? __pfx_bpf_check+0x10/0x10 [ 1076.231353][ T2500] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1076.231383][ T2500] bpf_prog_load+0x14d6/0x1c20 [ 1076.231420][ T2500] ? __pfx_bpf_prog_load+0x10/0x10 [ 1076.231466][ T2500] __sys_bpf+0xd0d/0xd90 [ 1076.231498][ T2500] ? __pfx___sys_bpf+0x10/0x10 [ 1076.231529][ T2500] ? __fget_files+0x2a/0x420 [ 1076.231571][ T2500] ? ksys_write+0x242/0x270 [ 1076.231591][ T2500] ? __pfx_ksys_write+0x10/0x10 [ 1076.231614][ T2500] __x64_sys_bpf+0xba/0xd0 [ 1076.231635][ T2500] do_syscall_64+0x166/0x520 [ 1076.231658][ T2500] ? trace_irq_disable+0x3b/0x140 [ 1076.231676][ T2500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.231694][ T2500] ? clear_bhb_loop+0x70/0xc0 [ 1076.231716][ T2500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.231733][ T2500] RIP: 0033:0x7fdd2639e1d9 [ 1076.231750][ T2500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.231764][ T2500] RSP: 002b:00007fdd2723e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1076.231781][ T2500] RAX: ffffffffffffffda RBX: 00007fdd26625fa0 RCX: 00007fdd2639e1d9 [ 1076.231794][ T2500] RDX: 0000000000000094 RSI: 0000200000000d80 RDI: 0000000000000005 [ 1076.231806][ T2500] RBP: 00007fdd2723e090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.231818][ T2500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1076.231829][ T2500] R13: 00007fdd26626038 R14: 00007fdd26625fa0 R15: 00007ffd0765f108 [ 1076.231857][ T2500] [ 1076.231865][ T2500] Mem-Info: [ 1076.231874][ T2500] active_anon:7660 inactive_anon:129 isolated_anon:0 [ 1076.231874][ T2500] active_file:50 inactive_file:44246 isolated_file:0 [ 1076.231874][ T2500] unevictable:6 dirty:206 writeback:0 [ 1076.231874][ T2500] slab_reclaimable:15327 slab_unreclaimable:152867 [ 1076.231874][ T2500] mapped:30343 shmem:770 pagetables:3540 [ 1076.231874][ T2500] sec_pagetables:0 bounce:0 [ 1076.231874][ T2500] kernel_misc_reclaimable:0 [ 1076.231874][ T2500] free:1248388 free_pcp:9653 free_cma:0 [ 1076.231920][ T2500] Node 0 active_anon:30640kB inactive_anon:516kB active_file:200kB inactive_file:176780kB unevictable:24kB isolated(anon):0kB isolated(file):0kB mapped:121372kB dirty:824kB writeback:0kB shmem:3080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19276kB pagetables:14004kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1076.231968][ T2500] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1076.232013][ T2500] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1076.232062][ T2500] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 1076.232094][ T2500] Node 0 DMA32 free:1035468kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30640kB inactive_anon:516kB active_file:200kB inactive_file:176780kB unevictable:24kB writepending:824kB zspages:0kB present:3129332kB managed:2527708kB mlocked:0kB bounce:0kB free_pcp:38368kB local_pcp:20920kB free_cma:0kB [ 1076.232146][ T2500] lowmem_reserve[]: 0 0 0 0 0 [ 1076.232176][ T2500] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1076.232223][ T2500] lowmem_reserve[]: 0 0 0 0 0 [ 1076.232252][ T2500] Node 1 Normal free:3942724kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:244kB local_pcp:0kB free_cma:0kB [ 1076.232302][ T2500] lowmem_reserve[]: 0 0 0 0 0 [ 1076.232333][ T2500] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1076.232439][ T2500] Node 0 DMA32: 1341*4kB (UME) 353*8kB (UM) 3*16kB (M) 925*32kB (UME) 939*64kB (UME) 624*128kB (UM) 332*256kB (UM) 207*512kB (UME) 99*1024kB (U) 4*2048kB (UE) 136*4096kB (UM) = 1035404kB [ 1076.238901][ T2500] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1076.238987][ T2500] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 11*16kB (UM) 8*32kB (UM) 10*64kB (UM) 6*128kB (UM) 2*256kB (M) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (UM) = 3942724kB [ 1076.239295][ T2500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1076.239310][ T2500] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1076.239324][ T2500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1076.239337][ T2500] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1076.239357][ T2500] 45062 total pagecache pages [ 1076.239365][ T2500] 0 pages in swap cache [ 1076.239371][ T2500] Free swap = 124996kB [ 1076.239378][ T2500] Total swap = 124996kB [ 1076.239386][ T2500] 2097051 pages RAM [ 1076.239392][ T2500] 0 pages HighMem/MovableOnly [ 1076.239399][ T2500] 433508 pages reserved [ 1076.239406][ T2500] 0 pages cma reserved [ 1076.305803][ T2483] udevd[2483]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1077.881409][ T2531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6679'. [ 1079.297226][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1088.254745][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1105.535225][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1107.616889][T30075] Bluetooth: hci5: command 0x0406 tx timeout [ 1122.986838][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 1136.073822][ T2602] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6690'. [ 1136.974188][ T2638] netlink: 'syz.4.6699': attribute type 1 has an invalid length. [ 1136.974228][ T2638] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6699'. [ 1137.307262][ T2648] netlink: 'syz.0.6702': attribute type 1 has an invalid length. [ 1137.352608][ T2650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6703'. [ 1137.446890][ T2648] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1137.479697][ T2659] bond3: (slave veth0_to_bond): Releasing active interface [ 1137.479739][ T2659] veth0_to_bond: left promiscuous mode [ 1137.480992][ T2659] veth0_to_bond: left allmulticast mode [ 1137.539395][ T2659] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1137.934625][ T2655] bond2 (unregistering): Released all slaves [ 1138.132950][ T2685] netlink: 'syz.4.6708': attribute type 1 has an invalid length. [ 1138.186970][ T2648] bond6: entered promiscuous mode [ 1138.186997][ T2648] bond6: entered allmulticast mode [ 1138.228530][ T2662] macvlan2: entered promiscuous mode [ 1138.228553][ T2662] macvlan2: entered allmulticast mode [ 1138.228862][ T2662] bond6: (slave macvlan2): Error -98 calling set_mac_address [ 1138.501068][ T2685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1138.878718][ T2687] bond1: (slave geneve2): making interface the new active one [ 1138.896663][ T2687] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1139.378980][ T2711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1139.393229][ T2711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1139.408957][ T2711] batman_adv: batadv0: Removing interface: gretap1 [ 1139.446653][ T2718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6712'. [ 1139.547403][ T2724] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6716'. [ 1139.802001][ T2735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6713'. [ 1139.833750][ T2735] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6713'. [ 1141.331722][ T2773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6722'. [ 1141.425605][ T2771] netlink: 'syz.2.6721': attribute type 6 has an invalid length. [ 1141.716471][ T2716] net_ratelimit: 21 callbacks suppressed [ 1141.716490][ T2716] ip_tables: iptables: counters copy to user failed while replacing table [ 1141.859395][ T2788] netlink: 'syz.0.6726': attribute type 10 has an invalid length. [ 1141.926024][ T2793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6728'. [ 1143.031108][ T2793] netlink: 'syz.1.6728': attribute type 4 has an invalid length. [ 1143.387186][ T2846] netlink: 'syz.3.6739': attribute type 10 has an invalid length. [ 1143.820724][ T2847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.821333][ T2847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.414288][ T2872] netlink: zone id is out of range [ 1144.414305][ T2872] netlink: zone id is out of range [ 1144.414313][ T2872] netlink: zone id is out of range [ 1144.414320][ T2872] netlink: zone id is out of range [ 1144.414328][ T2872] netlink: zone id is out of range [ 1144.414335][ T2872] netlink: zone id is out of range [ 1144.414343][ T2872] netlink: zone id is out of range [ 1144.414350][ T2872] netlink: zone id is out of range [ 1144.414358][ T2872] netlink: zone id is out of range [ 1144.518581][ T2877] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6745'. [ 1144.518605][ T2877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6745'. [ 1144.919752][ T2847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1144.960305][ T2847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1145.493836][ T2878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.782715][ T2898] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6749'. [ 1145.794819][T26138] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.794878][T26138] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.794913][T26138] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.794947][T26138] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.022597][ T2904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6749'. [ 1146.273430][ T2909] netlink: 'syz.0.6752': attribute type 10 has an invalid length. [ 1146.787846][ T2922] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6759'. [ 1147.045340][ T2935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6764'. [ 1147.320450][ T2934] netlink: 'syz.3.6763': attribute type 1 has an invalid length. [ 1147.320473][ T2934] netlink: 'syz.3.6763': attribute type 2 has an invalid length. [ 1147.320575][ T2943] netlink: 'syz.0.6766': attribute type 11 has an invalid length. [ 1147.320590][ T2943] netlink: 'syz.0.6766': attribute type 9 has an invalid length. [ 1147.320602][ T2943] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6766'. [ 1148.092730][ T2958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6773'. [ 1148.092804][ T2958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6773'. [ 1148.095768][ T2958] netlink: 'syz.4.6773': attribute type 8 has an invalid length. [ 1148.095787][ T2958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6773'. [ 1148.914084][ T2970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6776'. [ 1149.141197][ T2993] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6780'. [ 1149.141223][ T2993] netlink: 'syz.1.6780': attribute type 1 has an invalid length. [ 1150.628256][ T3029] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6788'. [ 1150.732269][ T3027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6787'. [ 1151.813945][ T3046] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1152.229130][ T3077] __nla_validate_parse: 1 callbacks suppressed [ 1152.229152][ T3077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6793'. [ 1152.286579][ T3081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6793'. [ 1161.976615][ T3112] xt_hashlimit: size too large, truncated to 1048576 [ 1162.233112][ T3101] dummy0 speed is unknown, defaulting to 1000 [ 1162.242304][ T3101] wg0 speed is unknown, defaulting to 1000 [ 1162.434395][ T3127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6804'. [ 1162.641899][ T3133] net_ratelimit: 1 callbacks suppressed [ 1162.641942][ T3133] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1162.738614][ T3127] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1162.798721][ T3131] bond3: (slave batadv1): Opening slave failed [ 1163.117449][ T3139] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6807'. [ 1163.134323][ T3139] netlink: zone id is out of range [ 1163.134336][ T3139] netlink: zone id is out of range [ 1163.134344][ T3139] netlink: zone id is out of range [ 1163.134351][ T3139] netlink: zone id is out of range [ 1163.134357][ T3139] netlink: zone id is out of range [ 1163.134364][ T3139] netlink: zone id is out of range [ 1163.134372][ T3139] netlink: zone id is out of range [ 1163.134378][ T3139] netlink: zone id is out of range [ 1163.134386][ T3139] netlink: zone id is out of range [ 1163.330188][ T3143] netlink: 'syz.1.6808': attribute type 29 has an invalid length. [ 1163.447244][ T3101] dummy0 speed is unknown, defaulting to 1000 [ 1164.586047][ T3171] gtp0: entered promiscuous mode [ 1164.586070][ T3171] gtp0: entered allmulticast mode [ 1165.219868][ T3184] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6820'. [ 1165.441873][ T3187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6819'. [ 1165.441896][ T3187] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6819'. [ 1166.458952][ T3219] netlink: 'syz.3.6824': attribute type 1 has an invalid length. [ 1166.582345][ T3219] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1166.603776][ T3228] netlink: 'syz.4.6825': attribute type 1 has an invalid length. [ 1166.615633][ T3222] bond1: (slave veth0_to_bond): Releasing active interface [ 1166.650116][ T3222] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1166.795775][ T3228] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1166.857490][ T3219] bridge2: entered promiscuous mode [ 1166.881564][ T3219] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 1166.936344][ T3223] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1167.011509][ T3231] bond3: entered promiscuous mode [ 1167.011535][ T3231] bond3: entered allmulticast mode [ 1167.574494][ T3244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6831'. [ 1167.726154][ T3244] net_ratelimit: 13 callbacks suppressed [ 1167.726177][ T3244] netlink: zone id is out of range [ 1167.726187][ T3244] netlink: zone id is out of range [ 1167.726195][ T3244] netlink: zone id is out of range [ 1167.726203][ T3244] netlink: zone id is out of range [ 1167.726211][ T3244] netlink: zone id is out of range [ 1167.726218][ T3244] netlink: zone id is out of range [ 1167.726226][ T3244] netlink: zone id is out of range [ 1167.726234][ T3244] netlink: zone id is out of range [ 1167.726242][ T3244] netlink: zone id is out of range [ 1167.726250][ T3244] netlink: set zone limit has 4 unknown bytes [ 1167.834137][ T3250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6834'. [ 1168.130086][ T3265] IPVS: Error connecting to the multicast addr [ 1168.219948][ T3270] netlink: 'syz.1.6840': attribute type 1 has an invalid length. [ 1168.297658][ T3270] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1168.391191][ T3275] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1168.411447][ T3278] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1168.431894][ T3270] bond4: entered promiscuous mode [ 1168.431942][ T3270] bond4: entered allmulticast mode [ 1168.853117][ T3287] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6847'. [ 1169.055458][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 1169.427514][ T3313] netlink: 'syz.2.6854': attribute type 1 has an invalid length. [ 1169.517052][ T3313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1169.622500][ T3313] bond1: (slave veth0_to_bond): making interface the new active one [ 1169.636166][ T3313] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1169.655698][ T3316] bond1: entered promiscuous mode [ 1169.655719][ T3316] veth0_to_bond: entered promiscuous mode [ 1169.655941][ T3316] bond1: entered allmulticast mode [ 1169.655955][ T3316] veth0_to_bond: entered allmulticast mode [ 1169.731570][ T3323] netlink: 'syz.0.6855': attribute type 4 has an invalid length. [ 1170.094842][ T3339] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6859'. [ 1170.176133][ T3334] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1170.407685][ T3340] IPVS: Scheduler module ip_vs_sip not found [ 1170.588095][ T3334] bond4 (unregistering): Released all slaves [ 1171.421469][ T3359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6863'. [ 1171.421497][ T3359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6863'. [ 1171.739627][ T3373] netlink: 'syz.0.6868': attribute type 1 has an invalid length. [ 1171.826555][ T3378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6871'. [ 1171.948678][ T3363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1171.970196][ T3363] 8021q: adding VLAN 0 to HW filter on device team0 [ 1171.989436][ T3387] netlink: 'syz.3.6870': attribute type 10 has an invalid length. [ 1172.028991][ T3363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.273243][ T3363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1172.281688][ T3363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1172.300624][ T3363] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1172.379952][ T3373] bond7: entered promiscuous mode [ 1172.391078][ T3373] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1172.648482][ T3377] vlan1: entered allmulticast mode [ 1172.648505][ T3377] bond7: entered allmulticast mode [ 1172.708958][ T3381] bridge1: entered promiscuous mode [ 1172.708980][ T3381] bridge1: entered allmulticast mode [ 1172.716665][ T3381] team0: Port device bridge1 added [ 1172.772834][ T3384] bond7: (slave bridge0): making interface the new active one [ 1172.772857][ T3384] bridge0: entered promiscuous mode [ 1172.773965][ T3384] bridge0: entered allmulticast mode [ 1172.799679][ T3384] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 1172.836667][ T3382] bridge2: entered promiscuous mode [ 1172.836691][ T3382] bridge2: entered allmulticast mode [ 1172.848939][ T3382] team0: Port device bridge2 added [ 1172.860844][T26136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.860957][T26136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.867334][T26136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.867426][T26136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1173.288774][ T3406] netlink: 'syz.3.6877': attribute type 11 has an invalid length. [ 1173.307852][ T3406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6877'. [ 1173.524119][ T3420] batadv_slave_1: entered promiscuous mode [ 1173.526948][ T3419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6882'. [ 1173.530984][ T3419] net_ratelimit: 31 callbacks suppressed [ 1173.531001][ T3419] netlink: zone id is out of range [ 1173.531009][ T3419] netlink: zone id is out of range [ 1173.531017][ T3419] netlink: zone id is out of range [ 1173.531025][ T3419] netlink: zone id is out of range [ 1173.531033][ T3419] netlink: zone id is out of range [ 1173.531041][ T3419] netlink: zone id is out of range [ 1173.531048][ T3419] netlink: zone id is out of range [ 1173.531056][ T3419] netlink: zone id is out of range [ 1173.531071][ T3419] netlink: zone id is out of range [ 1173.531079][ T3419] netlink: set zone limit has 4 unknown bytes [ 1173.822745][ T3426] xt_CT: No such helper "syz0" [ 1174.377786][ T3418] batadv_slave_1: left promiscuous mode [ 1174.473262][ T3443] netlink: 'syz.4.6887': attribute type 10 has an invalid length. [ 1174.847713][ T3448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6889'. [ 1175.271911][ T3466] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6894'. [ 1175.569966][ T3469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6896'. [ 1176.288583][ T3494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.301464][ T3494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.578633][ T3505] netlink: 'syz.1.6905': attribute type 10 has an invalid length. [ 1176.675095][ T3508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6906'. [ 1176.716221][ T3508] ip6gre1: entered promiscuous mode [ 1176.716242][ T3508] ip6gre1: entered allmulticast mode [ 1176.737514][ T3509] sctp: [Deprecated]: syz.0.6904 (pid 3509) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1176.737514][ T3509] Use struct sctp_sack_info instead [ 1176.800446][ T3514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6906'. [ 1176.952191][ T3519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6909'. [ 1176.991707][ T3518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6907'. [ 1177.613586][ T3539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6914'. [ 1178.551400][ T3575] netlink: 'syz.4.6918': attribute type 10 has an invalid length. [ 1178.678582][ T3578] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6921'. [ 1178.680084][ T3578] net_ratelimit: 23 callbacks suppressed [ 1178.680101][ T3578] netlink: zone id is out of range [ 1178.680110][ T3578] netlink: zone id is out of range [ 1178.680118][ T3578] netlink: zone id is out of range [ 1178.680125][ T3578] netlink: zone id is out of range [ 1178.680133][ T3578] netlink: zone id is out of range [ 1178.680140][ T3578] netlink: zone id is out of range [ 1178.680148][ T3578] netlink: zone id is out of range [ 1178.680156][ T3578] netlink: zone id is out of range [ 1178.680164][ T3578] netlink: zone id is out of range [ 1178.680171][ T3578] netlink: set zone limit has 4 unknown bytes [ 1179.277376][ T3579] ip6gretap1: entered promiscuous mode [ 1179.277399][ T3579] ip6gretap1: entered allmulticast mode [ 1179.329153][ T3579] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1179.339532][ T3598] netlink: 'syz.0.6922': attribute type 10 has an invalid length. [ 1179.404067][ T3604] netlink: 'syz.0.6922': attribute type 10 has an invalid length. [ 1179.728604][ T3612] netlink: 'syz.4.6925': attribute type 21 has an invalid length. [ 1179.728628][ T3612] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6925'. [ 1179.960448][ T3616] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6926'. [ 1180.109376][ T3612] netlink: 'syz.4.6925': attribute type 4 has an invalid length. [ 1180.109397][ T3612] netlink: 'syz.4.6925': attribute type 3 has an invalid length. [ 1180.109408][ T3612] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6925'. [ 1180.277412][ T3616] ip6gre2: entered allmulticast mode [ 1180.468037][ T3627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6928'. [ 1180.917657][ T3636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6930'. [ 1181.098599][ T3648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6931'. [ 1181.098632][ T3648] netlink: 'syz.2.6931': attribute type 5 has an invalid length. [ 1181.098644][ T3648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6931'. [ 1181.160667][ T3649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6931'. [ 1181.160699][ T3649] netlink: 'syz.2.6931': attribute type 5 has an invalid length. [ 1181.160712][ T3649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6931'. [ 1181.402150][ T3628] veth1_vlan: left promiscuous mode [ 1181.410784][ T3628] veth0_vlan: left promiscuous mode [ 1181.422076][ T3628] veth0_vlan: entered promiscuous mode [ 1181.439497][ T3628] veth1_vlan: entered promiscuous mode [ 1181.490862][ T3628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1181.494077][ T3628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1181.529356][ T3628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1181.550006][ T3628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1181.579568][ T3628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1181.600487][ T3628] bond3: left promiscuous mode [ 1181.602407][ T3628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1181.689863][ T3067] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.711383][ T3067] bond3: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 1181.711676][ T3067] bond3: (slave veth0_to_bond): making interface the new active one [ 1181.711695][ T3067] veth0_to_bond: entered allmulticast mode [ 1181.753718][ T3067] bond3: active interface up! [ 1181.897787][ T3064] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1181.996346][ T3067] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.997244][ T3067] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.045654][ T3064] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1182.046348][ T3064] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.046499][ T3064] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1182.046642][ T3064] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1182.046811][ T3064] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1182.354435][ T3667] netlink: 'syz.4.6933': attribute type 10 has an invalid length. [ 1183.985236][ T3701] __nla_validate_parse: 3 callbacks suppressed [ 1183.985257][ T3701] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6947'. [ 1183.986985][ T3701] net_ratelimit: 13 callbacks suppressed [ 1183.987002][ T3701] netlink: zone id is out of range [ 1183.987010][ T3701] netlink: zone id is out of range [ 1183.987018][ T3701] netlink: zone id is out of range [ 1183.987026][ T3701] netlink: zone id is out of range [ 1183.987034][ T3701] netlink: zone id is out of range [ 1183.987041][ T3701] netlink: zone id is out of range [ 1183.987049][ T3701] netlink: zone id is out of range [ 1183.987056][ T3701] netlink: zone id is out of range [ 1183.987065][ T3701] netlink: zone id is out of range [ 1183.987072][ T3701] netlink: set zone limit has 4 unknown bytes [ 1184.009131][ T3704] netlink: 'syz.0.6948': attribute type 8 has an invalid length. [ 1184.105681][ T3705] netlink: 'syz.0.6948': attribute type 8 has an invalid length. [ 1184.119232][ T3700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6946'. [ 1184.417243][T30075] Bluetooth: hci2: command 0x0405 tx timeout [ 1184.668918][ T3722] netlink: 'syz.4.6953': attribute type 10 has an invalid length. [ 1185.790393][ T3761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6965'. [ 1186.094742][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1186.654562][ T3787] netlink: 'syz.0.6975': attribute type 10 has an invalid length. [ 1186.662019][ T3790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6976'. [ 1186.673469][ T3793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6976'. [ 1187.310718][ T3820] gre1: entered promiscuous mode [ 1187.310741][ T3820] gre1: entered allmulticast mode [ 1187.394265][ T3825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6983'. [ 1187.581969][ T3830] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6986'. [ 1187.600570][ T3830] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6986'. [ 1187.983193][ T3843] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6989'. [ 1188.007671][ T3843] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6989'. [ 1188.192951][ T3849] netlink: 'syz.3.6992': attribute type 10 has an invalid length. [ 1188.243980][ T3847] batman_adv: batadv0: Adding interface: syzkaller0 [ 1188.244005][ T3847] batman_adv: batadv0: Interface activated: syzkaller0 [ 1188.830210][ T3855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1188.965287][ T3844] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1189.153926][ T3844] batman_adv: batadv0: Removing interface: syzkaller0 [ 1189.212960][ T3873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6996'. [ 1189.950004][ T3894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7001'. [ 1190.076340][ T3901] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7004'. [ 1190.076366][ T3901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7004'. [ 1190.076382][ T3901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7004'. [ 1190.265220][T26136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.265241][T26136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.724179][ T3901] dummy0: entered promiscuous mode [ 1190.866484][ T3901] veth0_to_bond: entered promiscuous mode [ 1191.037544][ T3913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7009'. [ 1191.146457][ T3915] FAULT_INJECTION: forcing a failure. [ 1191.146457][ T3915] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.146492][ T3915] CPU: 1 UID: 0 PID: 3915 Comm: syz.0.7009 Not tainted syzkaller #0 PREEMPT(full) [ 1191.146513][ T3915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1191.146529][ T3915] Call Trace: [ 1191.146537][ T3915] [ 1191.146546][ T3915] dump_stack_lvl+0xe8/0x150 [ 1191.146578][ T3915] should_fail_ex+0x410/0x560 [ 1191.146609][ T3915] should_failslab+0xa8/0x100 [ 1191.146637][ T3915] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 1191.146661][ T3915] ? __lock_acquire+0x747/0x2de0 [ 1191.146681][ T3915] ? __kernfs_new_node+0xa9/0x980 [ 1191.146701][ T3915] ? __kernfs_new_node+0xa9/0x980 [ 1191.146728][ T3915] kstrdup+0x42/0x100 [ 1191.146753][ T3915] __kernfs_new_node+0xa9/0x980 [ 1191.146784][ T3915] ? __pfx___kernfs_new_node+0x10/0x10 [ 1191.146806][ T3915] ? kernfs_root+0x1c/0x230 [ 1191.146833][ T3915] ? kernfs_root+0x1c/0x230 [ 1191.146852][ T3915] ? kernfs_root+0x1c/0x230 [ 1191.146870][ T3915] ? kernfs_root+0x1c/0x230 [ 1191.146895][ T3915] kernfs_create_dir_ns+0xfe/0x230 [ 1191.146923][ T3915] sysfs_create_dir_ns+0x12f/0x2a0 [ 1191.146947][ T3915] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1191.146971][ T3915] ? do_raw_spin_unlock+0xf5/0x200 [ 1191.147003][ T3915] kobject_add_internal+0x622/0xcd0 [ 1191.147030][ T3915] kobject_add+0x163/0x240 [ 1191.147058][ T3915] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1191.147088][ T3915] ? __pfx_kobject_add+0x10/0x10 [ 1191.147123][ T3915] ? get_device_parent+0x366/0x3a0 [ 1191.147153][ T3915] device_add+0x3fa/0xb80 [ 1191.147179][ T3915] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1191.147217][ T3915] wakeup_source_register+0x17f/0x380 [ 1191.147246][ T3915] ep_insert+0x107d/0x1af0 [ 1191.147283][ T3915] ? __pfx_ep_insert+0x10/0x10 [ 1191.147317][ T3915] ? bpf_lsm_capable+0x9/0x20 [ 1191.147337][ T3915] ? security_capable+0x7e/0x2c0 [ 1191.147370][ T3915] do_epoll_ctl_file+0x8c2/0xee0 [ 1191.147402][ T3915] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1191.147427][ T3915] ? __fget_files+0x3a2/0x420 [ 1191.147454][ T3915] ? __fget_files+0x2a/0x420 [ 1191.147490][ T3915] __se_sys_epoll_ctl+0x162/0x230 [ 1191.147516][ T3915] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1191.147551][ T3915] do_syscall_64+0x166/0x520 [ 1191.147575][ T3915] ? trace_irq_disable+0x3b/0x140 [ 1191.147594][ T3915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.147614][ T3915] ? clear_bhb_loop+0x70/0xc0 [ 1191.147638][ T3915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.147658][ T3915] RIP: 0033:0x7fd6df79e1d9 [ 1191.147676][ T3915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.147693][ T3915] RSP: 002b:00007fd6dd9d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1191.147712][ T3915] RAX: ffffffffffffffda RBX: 00007fd6dfa26090 RCX: 00007fd6df79e1d9 [ 1191.147725][ T3915] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000007 [ 1191.147736][ T3915] RBP: 00007fd6dd9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.147748][ T3915] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000002 [ 1191.147761][ T3915] R13: 00007fd6dfa26128 R14: 00007fd6dfa26090 R15: 00007fff47324248 [ 1191.147793][ T3915] [ 1191.482382][ T3915] kobject: kobject_add_internal failed for wakeup14 (error: -12 parent: wakeup) [ 1191.735632][ T3901] bond1: entered promiscuous mode [ 1191.735782][ T3901] syztnl2: entered promiscuous mode [ 1191.735993][ T3901] gre0: entered promiscuous mode [ 1191.788948][ T3901] 8: entered promiscuous mode [ 1191.789087][ T3901] geneve2: entered promiscuous mode [ 1191.898002][ T3901] bond2: entered promiscuous mode [ 1191.901303][ T3901] bond3: entered promiscuous mode [ 1191.903861][ T3901] bond4: entered promiscuous mode [ 1191.948691][ T3901] bridge1: entered promiscuous mode [ 1191.949367][ T3901] bond5: entered promiscuous mode [ 1191.950147][ T3901] syztnl1: entered promiscuous mode [ 1191.950294][ T3901] syztnl0: entered promiscuous mode [ 1191.978301][ T3901] vrf0: entered promiscuous mode [ 1191.980697][ T3901] bond6: entered promiscuous mode [ 1192.002860][ T3901] bridge0.257: entered promiscuous mode [ 1192.045004][ T3067] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.046500][ T3067] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.170351][T26136] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.220332][ T3066] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.328822][ T3931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7016'. [ 1192.403801][ T3926] netlink: 'syz.4.7014': attribute type 1 has an invalid length. [ 1192.525540][ T3928] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1192.703652][ T3947] netlink: 4184 bytes leftover after parsing attributes in process `syz.0.7018'. [ 1192.941830][ T3954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7017'. [ 1192.985741][ T3937] bond4: (slave gretap1): making interface the new active one [ 1192.986261][ T3937] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1193.098470][ T3947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7018'. [ 1193.480182][ T3970] net_ratelimit: 5 callbacks suppressed [ 1193.480203][ T3970] netlink: Conntrack attr has 8 unknown bytes [ 1193.480229][ T3970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1194.052235][ T3986] syzkaller0: entered promiscuous mode [ 1194.052257][ T3986] syzkaller0: entered allmulticast mode [ 1194.429282][ T3992] __nla_validate_parse: 1 callbacks suppressed [ 1194.429303][ T3992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7028'. [ 1194.495310][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1194.660995][ T4001] syzkaller0: entered promiscuous mode [ 1194.661020][ T4001] syzkaller0: entered allmulticast mode [ 1194.709494][ T4001] tipc: Enabled bearer , priority 0 [ 1195.137044][ T4020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7034'. [ 1195.974335][ T4001] tipc: Resetting bearer [ 1195.997348][ T4021] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1196.007163][ T3999] tipc: Resetting bearer [ 1196.150392][ T3999] tipc: Disabling bearer [ 1196.227987][ T988] tipc: Node number set to 3758096386 [ 1196.711477][ T4052] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20001 [ 1196.735698][ T4054] netlink: 'syz.4.7043': attribute type 10 has an invalid length. [ 1197.209288][ T4073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7050'. [ 1198.440369][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 10 > 9 [ 1198.440403][ T5625] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 1198.542773][ T4098] ip6tnl1: entered allmulticast mode [ 1198.602346][ T4097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7052'. [ 1198.904130][ T4106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7056'. [ 1199.143018][ T4106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7056'. [ 1199.410506][ T4119] netlink: 'syz.0.7061': attribute type 10 has an invalid length. [ 1199.412108][ T4124] netlink: 'syz.1.7063': attribute type 1 has an invalid length. [ 1199.707985][ T4138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7062'. [ 1199.727639][ T4124] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1199.816186][ T4131] bond5: (slave syz_tun): making interface the new active one [ 1199.848679][ T4131] bond5: (slave syz_tun): Enslaving as an active interface with an up link [ 1200.001756][ T4124] bond5: (slave bridge3): Enslaving as an active interface with a down link [ 1200.168678][ T4130] bond5: (slave veth3): Enslaving as an active interface with a down link [ 1200.268704][ T4151] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1200.647101][ T4152] syzkaller0: entered promiscuous mode [ 1200.647282][ T4152] syzkaller0: entered allmulticast mode [ 1200.861353][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 10 > 9 [ 1200.861385][ T5625] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 1200.909614][ T4168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7068'. [ 1201.465495][ T4183] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1201.683181][ T4188] netlink: 'syz.4.7075': attribute type 10 has an invalid length. [ 1201.877880][ T4192] ip6gretap1: entered promiscuous mode [ 1201.878066][ T4192] ip6gretap1: entered allmulticast mode [ 1201.944281][ T4202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7078'. [ 1202.182793][ T4205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7083'. [ 1202.342177][ T4205] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1202.460461][ T4205] macvtap1: entered allmulticast mode [ 1202.520779][ T4205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7083'. [ 1202.553868][ T4207] bond7: (slave sit1): refused to change device type [ 1202.743029][ T4215] bond7: (slave sit1): refused to change device type [ 1202.815288][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1202.916165][ T4210] macvtap2: entered allmulticast mode [ 1203.000793][ T4221] FAULT_INJECTION: forcing a failure. [ 1203.000793][ T4221] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.000828][ T4221] CPU: 1 UID: 0 PID: 4221 Comm: syz.2.7086 Not tainted syzkaller #0 PREEMPT(full) [ 1203.000849][ T4221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1203.000862][ T4221] Call Trace: [ 1203.000869][ T4221] [ 1203.000878][ T4221] dump_stack_lvl+0xe8/0x150 [ 1203.000913][ T4221] should_fail_ex+0x410/0x560 [ 1203.000943][ T4221] ? __alloc_skb+0x1db/0x7a0 [ 1203.000971][ T4221] should_failslab+0xa8/0x100 [ 1203.000996][ T4221] ? __alloc_skb+0x1db/0x7a0 [ 1203.001021][ T4221] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1203.001042][ T4221] ? __alloc_skb+0x18d/0x7a0 [ 1203.001069][ T4221] ? __alloc_skb+0x1db/0x7a0 [ 1203.001103][ T4221] __alloc_skb+0x1db/0x7a0 [ 1203.001134][ T4221] create_monitor_ctrl_event+0x38/0x470 [ 1203.001167][ T4221] mgmt_cmd_status+0x1cd/0x570 [ 1203.001198][ T4221] hci_sock_sendmsg+0x6e8/0xfb0 [ 1203.001234][ T4221] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1203.001266][ T4221] ? apparmor_socket_sendmsg+0x98/0x360 [ 1203.001290][ T4221] ? lock_acquire+0x115/0x350 [ 1203.001312][ T4221] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1203.001337][ T4221] sock_sendmsg_nosec+0x14e/0x190 [ 1203.001365][ T4221] sock_write_iter+0x2de/0x3e0 [ 1203.001390][ T4221] ? __pfx_sock_write_iter+0x10/0x10 [ 1203.001421][ T4221] ? bpf_lsm_file_permission+0x9/0x20 [ 1203.001448][ T4221] ? security_file_permission+0x75/0x260 [ 1203.001486][ T4221] vfs_write+0x612/0xba0 [ 1203.001514][ T4221] ? __pfx_vfs_write+0x10/0x10 [ 1203.001545][ T4221] ? __fget_files+0x2a/0x420 [ 1203.001582][ T4221] ksys_write+0x150/0x270 [ 1203.001604][ T4221] ? __pfx_ksys_write+0x10/0x10 [ 1203.001636][ T4221] do_syscall_64+0x166/0x520 [ 1203.001661][ T4221] ? trace_irq_disable+0x3b/0x140 [ 1203.001680][ T4221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.001701][ T4221] ? clear_bhb_loop+0x70/0xc0 [ 1203.001739][ T4221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.001759][ T4221] RIP: 0033:0x7f420339e1d9 [ 1203.001777][ T4221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.001793][ T4221] RSP: 002b:00007f42041ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1203.001814][ T4221] RAX: ffffffffffffffda RBX: 00007f4203625fa0 RCX: 00007f420339e1d9 [ 1203.001844][ T4221] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000005 [ 1203.001855][ T4221] RBP: 00007f42041ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.001868][ T4221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.001879][ T4221] R13: 00007f4203626038 R14: 00007f4203625fa0 R15: 00007ffdd24f3ba8 [ 1203.001911][ T4221] [ 1203.517095][ T4228] netlink: 'syz.4.7089': attribute type 1 has an invalid length. [ 1203.720294][ T4228] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1203.770210][ T4231] bond3: (slave veth0_to_bond): Releasing active interface [ 1203.770239][ T4231] veth0_to_bond: left allmulticast mode [ 1203.881171][ T4228] netlink: 'syz.4.7089': attribute type 5 has an invalid length. [ 1203.896052][ T4234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7088'. [ 1204.378201][ T4257] dummy0 speed is unknown, defaulting to 1000 [ 1204.402456][ T4257] wg0 speed is unknown, defaulting to 1000 [ 1205.316162][ T4278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7100'. [ 1205.423162][ T4277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7097'. [ 1205.631537][ T4283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7100'. [ 1205.865072][ T4278] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1205.946358][ T4278] bond8 (unregistering): Released all slaves [ 1206.350526][ T4294] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1206.507398][ T4294] bond8 (unregistering): Released all slaves [ 1206.693374][ T4308] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7104'. [ 1206.743607][ T4257] dummy0 speed is unknown, defaulting to 1000 [ 1206.990276][ T4312] syzkaller1: entered promiscuous mode [ 1206.990300][ T4312] syzkaller1: entered allmulticast mode [ 1208.296763][ T4347] netlink: 'syz.4.7115': attribute type 17 has an invalid length. [ 1208.301329][ T30] audit: type=1800 audit(1791880525.463:21): pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7115" name="memory.events" dev="tmpfs" ino=541 res=0 errno=0 [ 1208.302334][ T30] audit: type=1804 audit(1791880525.463:22): pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7115" name="/newroot/104/memory.events" dev="tmpfs" ino=541 res=1 errno=0 [ 1208.588084][ T4352] netlink: 'syz.2.7116': attribute type 21 has an invalid length. [ 1208.588106][ T4352] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7116'. [ 1208.615378][ T4353] netlink: 'syz.3.7117': attribute type 11 has an invalid length. [ 1208.615407][ T4353] netlink: 'syz.3.7117': attribute type 9 has an invalid length. [ 1208.615418][ T4353] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7117'. [ 1208.892568][ T4352] netlink: 'syz.2.7116': attribute type 4 has an invalid length. [ 1208.892590][ T4352] netlink: 'syz.2.7116': attribute type 5 has an invalid length. [ 1208.892603][ T4352] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7116'. [ 1208.990308][ T4352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7116'. [ 1209.615687][ T4375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7124'. [ 1209.615712][ T4375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7124'. [ 1210.088917][ T4384] netlink: 'syz.2.7128': attribute type 10 has an invalid length. [ 1210.089088][ T4384] dummy0: entered promiscuous mode [ 1210.307671][ T4393] netlink: 'syz.3.7130': attribute type 1 has an invalid length. [ 1210.394445][ T4393] netlink: 'syz.3.7130': attribute type 10 has an invalid length. [ 1210.413083][ T4393] bond6: (slave veth0_to_bond): Releasing backup interface [ 1210.413105][ T4393] bond6: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1210.459254][ T4393] veth0_to_bond: left promiscuous mode [ 1210.553961][ T4393] veth0_to_bond: entered promiscuous mode [ 1210.555223][ T4402] __nla_validate_parse: 4 callbacks suppressed [ 1210.555239][ T4402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7131'. [ 1210.577456][ T4393] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1211.134962][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1211.701030][ T4403] dummy0 speed is unknown, defaulting to 1000 [ 1211.799338][ T4403] wg0 speed is unknown, defaulting to 1000 [ 1212.792031][ T4429] bond8 (unregistering): Released all slaves [ 1213.082260][ T4403] dummy0 speed is unknown, defaulting to 1000 [ 1213.257107][ T4454] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7142'. [ 1213.628398][ T4472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7144'. [ 1214.024773][ T3065] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.024826][ T3065] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.024856][ T3065] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.024909][ T3065] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.426126][ T4486] syzkaller0: entered promiscuous mode [ 1214.426149][ T4486] syzkaller0: entered allmulticast mode [ 1214.832259][ T4497] netlink: 'syz.0.7150': attribute type 11 has an invalid length. [ 1215.400950][ T4512] FAULT_INJECTION: forcing a failure. [ 1215.400950][ T4512] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1215.400983][ T4512] CPU: 0 UID: 0 PID: 4512 Comm: syz.3.7155 Not tainted syzkaller #0 PREEMPT(full) [ 1215.401004][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1215.401015][ T4512] Call Trace: [ 1215.401023][ T4512] [ 1215.401031][ T4512] dump_stack_lvl+0xe8/0x150 [ 1215.401062][ T4512] should_fail_ex+0x410/0x560 [ 1215.401091][ T4512] prepare_alloc_pages+0x223/0x600 [ 1215.401119][ T4512] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1215.401144][ T4512] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1215.401165][ T4512] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 1215.401189][ T4512] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1215.401214][ T4512] ? __pfx_policy_nodemask+0x10/0x10 [ 1215.401238][ T4512] ? __get_vm_area_node+0x155/0x2f0 [ 1215.401263][ T4512] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 1215.401281][ T4512] ? __vmalloc_noprof+0xd2/0x120 [ 1215.401301][ T4512] __alloc_pages_noprof+0x10/0x100 [ 1215.401325][ T4512] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 1215.401355][ T4512] ? alloc_pages_noprof+0x140/0x2b0 [ 1215.401383][ T4512] __kasan_populate_vmalloc+0xb7/0x1c0 [ 1215.401414][ T4512] alloc_vmap_area+0xd1a/0x1420 [ 1215.401456][ T4512] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1215.401481][ T4512] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 1215.401504][ T4512] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 1215.401525][ T4512] ? __get_vm_area_node+0x155/0x2f0 [ 1215.401556][ T4512] __get_vm_area_node+0x200/0x2f0 [ 1215.401589][ T4512] __vmalloc_node_range_noprof+0x343/0x1540 [ 1215.401609][ T4512] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1215.401633][ T4512] ? __lock_acquire+0x747/0x2de0 [ 1215.401686][ T4512] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1215.401714][ T4512] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1215.401735][ T4512] __vmalloc_noprof+0xd2/0x120 [ 1215.401755][ T4512] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1215.401781][ T4512] bpf_prog_alloc_no_stats+0x47/0x560 [ 1215.401803][ T4512] ? bpf_prog_alloc+0x2a/0x1a0 [ 1215.401826][ T4512] bpf_prog_alloc+0x3c/0x1a0 [ 1215.401851][ T4512] bpf_prog_load+0x7f8/0x1c20 [ 1215.401884][ T4512] ? __pfx_bpf_prog_load+0x10/0x10 [ 1215.401931][ T4512] __sys_bpf+0xd0d/0xd90 [ 1215.401962][ T4512] ? __pfx___sys_bpf+0x10/0x10 [ 1215.401995][ T4512] ? __fget_files+0x2a/0x420 [ 1215.402035][ T4512] ? ksys_write+0x242/0x270 [ 1215.402055][ T4512] ? __pfx_ksys_write+0x10/0x10 [ 1215.402078][ T4512] __x64_sys_bpf+0xba/0xd0 [ 1215.402102][ T4512] do_syscall_64+0x166/0x520 [ 1215.402126][ T4512] ? trace_irq_disable+0x3b/0x140 [ 1215.402146][ T4512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.402165][ T4512] ? clear_bhb_loop+0x70/0xc0 [ 1215.402187][ T4512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.402205][ T4512] RIP: 0033:0x7f71b6f9e1d9 [ 1215.402224][ T4512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1215.402240][ T4512] RSP: 002b:00007f71b7de2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1215.402261][ T4512] RAX: ffffffffffffffda RBX: 00007f71b7225fa0 RCX: 00007f71b6f9e1d9 [ 1215.402276][ T4512] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1215.402289][ T4512] RBP: 00007f71b7de2090 R08: 0000000000000000 R09: 0000000000000000 [ 1215.402301][ T4512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1215.402313][ T4512] R13: 00007f71b7226038 R14: 00007f71b7225fa0 R15: 00007ffc881ae7d8 [ 1215.402344][ T4512] [ 1215.424352][ T4512] syz.3.7155: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1215.424416][ T4512] CPU: 0 UID: 0 PID: 4512 Comm: syz.3.7155 Not tainted syzkaller #0 PREEMPT(full) [ 1215.424436][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1215.424447][ T4512] Call Trace: [ 1215.424455][ T4512] [ 1215.424462][ T4512] dump_stack_lvl+0xe8/0x150 [ 1215.424495][ T4512] warn_alloc+0x24d/0x270 [ 1215.424517][ T4512] ? lockdep_hardirqs_on+0x7b/0x110 [ 1215.424543][ T4512] ? __pfx_warn_alloc+0x10/0x10 [ 1215.424560][ T4512] ? kfree+0x1c5/0x650 [ 1215.424583][ T4512] ? __get_vm_area_node+0x219/0x2f0 [ 1215.424617][ T4512] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1215.424636][ T4512] ? __lock_acquire+0x747/0x2de0 [ 1215.424685][ T4512] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1215.424713][ T4512] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1215.424733][ T4512] __vmalloc_noprof+0xd2/0x120 [ 1215.424751][ T4512] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1215.424774][ T4512] bpf_prog_alloc_no_stats+0x47/0x560 [ 1215.424795][ T4512] ? bpf_prog_alloc+0x2a/0x1a0 [ 1215.424818][ T4512] bpf_prog_alloc+0x3c/0x1a0 [ 1215.424841][ T4512] bpf_prog_load+0x7f8/0x1c20 [ 1215.424873][ T4512] ? __pfx_bpf_prog_load+0x10/0x10 [ 1215.424919][ T4512] __sys_bpf+0xd0d/0xd90 [ 1215.424947][ T4512] ? __pfx___sys_bpf+0x10/0x10 [ 1215.424977][ T4512] ? __fget_files+0x2a/0x420 [ 1215.425020][ T4512] ? ksys_write+0x242/0x270 [ 1215.425039][ T4512] ? __pfx_ksys_write+0x10/0x10 [ 1215.425061][ T4512] __x64_sys_bpf+0xba/0xd0 [ 1215.425083][ T4512] do_syscall_64+0x166/0x520 [ 1215.425106][ T4512] ? trace_irq_disable+0x3b/0x140 [ 1215.425125][ T4512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.425143][ T4512] ? clear_bhb_loop+0x70/0xc0 [ 1215.425165][ T4512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.425183][ T4512] RIP: 0033:0x7f71b6f9e1d9 [ 1215.425200][ T4512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1215.425215][ T4512] RSP: 002b:00007f71b7de2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1215.425233][ T4512] RAX: ffffffffffffffda RBX: 00007f71b7225fa0 RCX: 00007f71b6f9e1d9 [ 1215.425247][ T4512] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1215.425259][ T4512] RBP: 00007f71b7de2090 R08: 0000000000000000 R09: 0000000000000000 [ 1215.425270][ T4512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1215.425280][ T4512] R13: 00007f71b7226038 R14: 00007f71b7225fa0 R15: 00007ffc881ae7d8 [ 1215.425310][ T4512] [ 1215.427711][ T4512] Mem-Info: [ 1215.427721][ T4512] active_anon:7681 inactive_anon:129 isolated_anon:0 [ 1215.427721][ T4512] active_file:50 inactive_file:44296 isolated_file:0 [ 1215.427721][ T4512] unevictable:0 dirty:238 writeback:0 [ 1215.427721][ T4512] slab_reclaimable:15586 slab_unreclaimable:155923 [ 1215.427721][ T4512] mapped:30394 shmem:774 pagetables:3542 [ 1215.427721][ T4512] sec_pagetables:0 bounce:0 [ 1215.427721][ T4512] kernel_misc_reclaimable:0 [ 1215.427721][ T4512] free:1245866 free_pcp:9801 free_cma:0 [ 1215.427770][ T4512] Node 0 active_anon:30724kB inactive_anon:516kB active_file:200kB inactive_file:176980kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121576kB dirty:952kB writeback:0kB shmem:3096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:20188kB pagetables:14012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1215.427818][ T4512] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1215.427861][ T4512] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1215.427910][ T4512] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 1215.427943][ T4512] Node 0 DMA32 free:1025136kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30724kB inactive_anon:516kB active_file:200kB inactive_file:176980kB unevictable:0kB writepending:952kB zspages:0kB present:3129332kB managed:2527708kB mlocked:0kB bounce:0kB free_pcp:39204kB local_pcp:16852kB free_cma:0kB [ 1215.427993][ T4512] lowmem_reserve[]: 0 0 0 0 0 [ 1215.428023][ T4512] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1215.428070][ T4512] lowmem_reserve[]: 0 0 0 0 0 [ 1215.428098][ T4512] Node 1 Normal free:3942968kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1215.428146][ T4512] lowmem_reserve[]: 0 0 0 0 0 [ 1215.428175][ T4512] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1215.435741][ T4512] Node 0 DMA32: 2184*4kB (UME) 1154*8kB (UME) 589*16kB (UME) 296*32kB (UME) 776*64kB (UME) 623*128kB (UME) 335*256kB (UM) 202*512kB (UM) 100*1024kB (UE) 9*2048kB (UM) 134*4096kB (UM) = 1025152kB [ 1215.435879][ T4512] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1215.435964][ T4512] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 12*16kB (UM) 7*32kB (UM) 10*64kB (UM) 6*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (UM) = 3942968kB [ 1215.436097][ T4512] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1215.436112][ T4512] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1215.436125][ T4512] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1215.436139][ T4512] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1215.436153][ T4512] 45116 total pagecache pages [ 1215.436160][ T4512] 0 pages in swap cache [ 1215.436166][ T4512] Free swap = 124996kB [ 1215.436173][ T4512] Total swap = 124996kB [ 1215.436181][ T4512] 2097051 pages RAM [ 1215.436187][ T4512] 0 pages HighMem/MovableOnly [ 1215.436193][ T4512] 433508 pages reserved [ 1215.436200][ T4512] 0 pages cma reserved [ 1215.965445][ T4514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7157'. [ 1215.992261][ T4518] netlink: 'syz.4.7158': attribute type 11 has an invalid length. [ 1215.992282][ T4518] netlink: 'syz.4.7158': attribute type 9 has an invalid length. [ 1215.992294][ T4518] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7158'. [ 1217.139957][ T4527] netlink: 'syz.3.7162': attribute type 1 has an invalid length. [ 1217.330618][ T4533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7162'. [ 1217.397493][ T4533] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1217.563038][ T4547] FAULT_INJECTION: forcing a failure. [ 1217.563038][ T4547] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.563068][ T4547] CPU: 1 UID: 0 PID: 4547 Comm: syz.4.7167 Not tainted syzkaller #0 PREEMPT(full) [ 1217.563091][ T4547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1217.563101][ T4547] Call Trace: [ 1217.563108][ T4547] [ 1217.563117][ T4547] dump_stack_lvl+0xe8/0x150 [ 1217.563147][ T4547] should_fail_ex+0x410/0x560 [ 1217.563176][ T4547] should_failslab+0xa8/0x100 [ 1217.563202][ T4547] __kmalloc_node_noprof+0x100/0x720 [ 1217.563221][ T4547] ? __get_vm_area_node+0x200/0x2f0 [ 1217.563248][ T4547] ? __get_vm_area_node+0x283/0x2f0 [ 1217.563272][ T4547] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1217.563291][ T4547] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1217.563316][ T4547] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1217.563336][ T4547] ? __lock_acquire+0x747/0x2de0 [ 1217.563380][ T4547] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1217.563409][ T4547] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1217.563432][ T4547] __vmalloc_noprof+0xd2/0x120 [ 1217.563450][ T4547] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1217.563474][ T4547] bpf_prog_alloc_no_stats+0x47/0x560 [ 1217.563493][ T4547] ? bpf_prog_alloc+0x2a/0x1a0 [ 1217.563528][ T4547] bpf_prog_alloc+0x3c/0x1a0 [ 1217.563554][ T4547] bpf_prog_load+0x7f8/0x1c20 [ 1217.563591][ T4547] ? __pfx_bpf_prog_load+0x10/0x10 [ 1217.563639][ T4547] __sys_bpf+0xd0d/0xd90 [ 1217.563668][ T4547] ? __pfx___sys_bpf+0x10/0x10 [ 1217.563701][ T4547] ? __fget_files+0x2a/0x420 [ 1217.563746][ T4547] ? ksys_write+0x242/0x270 [ 1217.563767][ T4547] ? __pfx_ksys_write+0x10/0x10 [ 1217.563794][ T4547] __x64_sys_bpf+0xba/0xd0 [ 1217.563818][ T4547] do_syscall_64+0x166/0x520 [ 1217.563847][ T4547] ? trace_irq_disable+0x3b/0x140 [ 1217.563867][ T4547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.563887][ T4547] ? clear_bhb_loop+0x70/0xc0 [ 1217.563911][ T4547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.563930][ T4547] RIP: 0033:0x7fdd2639e1d9 [ 1217.563949][ T4547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.563965][ T4547] RSP: 002b:00007fdd2723e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1217.563986][ T4547] RAX: ffffffffffffffda RBX: 00007fdd26625fa0 RCX: 00007fdd2639e1d9 [ 1217.564000][ T4547] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1217.564013][ T4547] RBP: 00007fdd2723e090 R08: 0000000000000000 R09: 0000000000000000 [ 1217.564024][ T4547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1217.564035][ T4547] R13: 00007fdd26626038 R14: 00007fdd26625fa0 R15: 00007ffd0765f108 [ 1217.564064][ T4547] [ 1217.681456][ T4527] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1217.920819][ T4527] bond8: (slave geneve4): making interface the new active one [ 1217.956138][ T4527] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 1217.959103][T26129] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1217.960533][T26129] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1217.960592][T26129] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1217.960627][T26129] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1218.828347][ T4563] siw: device registration error -23 [ 1218.950067][ T4564] macvlan2: entered promiscuous mode [ 1218.950092][ T4564] batadv0: entered promiscuous mode [ 1218.978451][ T4564] macvlan2: entered allmulticast mode [ 1218.978473][ T4564] batadv0: entered allmulticast mode [ 1218.979588][ T4564] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1218.998692][ T4570] netlink: 'syz.4.7173': attribute type 11 has an invalid length. [ 1218.998713][ T4570] netlink: 'syz.4.7173': attribute type 9 has an invalid length. [ 1218.998726][ T4570] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7173'. [ 1219.027311][ T4564] batadv0: left allmulticast mode [ 1219.027639][ T4564] batadv0: left promiscuous mode [ 1219.769173][ T4580] netlink: 'syz.1.7175': attribute type 10 has an invalid length. [ 1221.305662][ T4624] netlink: 'syz.1.7189': attribute type 10 has an invalid length. [ 1221.309252][ T4628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7190'. [ 1222.860899][ T4672] netlink: 'syz.1.7203': attribute type 10 has an invalid length. [ 1222.988868][ T4675] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7205'. [ 1223.210175][ T4686] netlink: 'syz.2.7206': attribute type 1 has an invalid length. [ 1223.429065][ T4686] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1223.577165][ T4690] bond3: (slave geneve0): making interface the new active one [ 1223.593083][ T4690] bond3: (slave geneve0): Enslaving as an active interface with an up link [ 1223.692064][ T4663] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7201'. [ 1223.724280][ T4696] ip6gretap1: entered promiscuous mode [ 1223.724302][ T4696] ip6gretap1: entered allmulticast mode [ 1224.176898][ T4721] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7216'. [ 1224.202525][ T4720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7216'. [ 1224.209981][ T4706] block nbd0: reconnected socket [ 1224.293895][ T4723] TC_ACT_REPEAT abuse ? [ 1224.389476][ T5625] block nbd0: Receive control failed (result -32) [ 1224.580420][ T4730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7219'. [ 1224.718964][ T4733] FAULT_INJECTION: forcing a failure. [ 1224.718964][ T4733] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.718996][ T4733] CPU: 1 UID: 0 PID: 4733 Comm: syz.2.7219 Not tainted syzkaller #0 PREEMPT(full) [ 1224.719017][ T4733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1224.719029][ T4733] Call Trace: [ 1224.719037][ T4733] [ 1224.719046][ T4733] dump_stack_lvl+0xe8/0x150 [ 1224.719078][ T4733] should_fail_ex+0x410/0x560 [ 1224.719109][ T4733] should_failslab+0xa8/0x100 [ 1224.719137][ T4733] __kmalloc_noprof+0xfe/0x720 [ 1224.719160][ T4733] ? kobject_get_path+0xc5/0x2f0 [ 1224.719189][ T4733] ? kobject_get_path+0xc5/0x2f0 [ 1224.719231][ T4733] kobject_get_path+0xc5/0x2f0 [ 1224.719264][ T4733] kobject_uevent_env+0x29e/0x9e0 [ 1224.719289][ T4733] device_add+0x544/0xb80 [ 1224.719310][ T4733] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1224.719339][ T4733] wakeup_source_register+0x17f/0x380 [ 1224.719366][ T4733] ep_insert+0x107d/0x1af0 [ 1224.719404][ T4733] ? __pfx_ep_insert+0x10/0x10 [ 1224.719450][ T4733] ? bpf_lsm_capable+0x9/0x20 [ 1224.719470][ T4733] ? security_capable+0x7e/0x2c0 [ 1224.719503][ T4733] do_epoll_ctl_file+0x8c2/0xee0 [ 1224.719534][ T4733] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1224.719556][ T4733] ? __fget_files+0x3a2/0x420 [ 1224.719579][ T4733] ? __fget_files+0x2a/0x420 [ 1224.719611][ T4733] __se_sys_epoll_ctl+0x162/0x230 [ 1224.719633][ T4733] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1224.719664][ T4733] do_syscall_64+0x166/0x520 [ 1224.719686][ T4733] ? trace_irq_disable+0x3b/0x140 [ 1224.719704][ T4733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.719722][ T4733] ? clear_bhb_loop+0x70/0xc0 [ 1224.719745][ T4733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.719763][ T4733] RIP: 0033:0x7f420339e1d9 [ 1224.719781][ T4733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.719796][ T4733] RSP: 002b:00007f42041de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1224.719815][ T4733] RAX: ffffffffffffffda RBX: 00007f4203626090 RCX: 00007f420339e1d9 [ 1224.719829][ T4733] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000007 [ 1224.719847][ T4733] RBP: 00007f42041de090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.719859][ T4733] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000002 [ 1224.719871][ T4733] R13: 00007f4203626128 R14: 00007f4203626090 R15: 00007ffdd24f3ba8 [ 1224.719903][ T4733] [ 1224.978757][ T4736] ip6_vti0: left promiscuous mode [ 1225.007361][ T4739] ip6tnl0: left promiscuous mode [ 1225.176490][ T4736] netlink: 248 bytes leftover after parsing attributes in process `syz.3.7217'. [ 1225.176515][ T4736] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7217'. [ 1225.211214][ T4745] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7222'. [ 1225.665376][ T4759] ip6gretap1: entered promiscuous mode [ 1225.665540][ T4759] ip6gretap1: entered allmulticast mode [ 1226.107789][ T4773] block nbd2: server does not support multiple connections per device. [ 1226.108153][ T4773] block nbd2: shutting down sockets [ 1226.159562][ T4772] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7230'. [ 1226.568043][ T4793] __nla_validate_parse: 2 callbacks suppressed [ 1226.568062][ T4793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7233'. [ 1226.590988][ T4791] netlink: 'syz.0.7232': attribute type 1 has an invalid length. [ 1226.759297][ T4796] FAULT_INJECTION: forcing a failure. [ 1226.759297][ T4796] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.759330][ T4796] CPU: 1 UID: 0 PID: 4796 Comm: syz.2.7233 Not tainted syzkaller #0 PREEMPT(full) [ 1226.759352][ T4796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1226.759364][ T4796] Call Trace: [ 1226.759372][ T4796] [ 1226.759381][ T4796] dump_stack_lvl+0xe8/0x150 [ 1226.759413][ T4796] should_fail_ex+0x410/0x560 [ 1226.759441][ T4796] ? __alloc_skb+0x1db/0x7a0 [ 1226.759467][ T4796] should_failslab+0xa8/0x100 [ 1226.759502][ T4796] ? __alloc_skb+0x1db/0x7a0 [ 1226.759527][ T4796] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1226.759548][ T4796] ? __alloc_skb+0x18d/0x7a0 [ 1226.759575][ T4796] ? __alloc_skb+0x1db/0x7a0 [ 1226.759611][ T4796] __alloc_skb+0x1db/0x7a0 [ 1226.759644][ T4796] alloc_uevent_skb+0x7d/0x230 [ 1226.759671][ T4796] kobject_uevent_net_broadcast+0x2fa/0x560 [ 1226.759699][ T4796] kobject_uevent_env+0x566/0x9e0 [ 1226.759728][ T4796] device_add+0x544/0xb80 [ 1226.759757][ T4796] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1226.759789][ T4796] wakeup_source_register+0x17f/0x380 [ 1226.759818][ T4796] ep_insert+0x107d/0x1af0 [ 1226.759856][ T4796] ? __pfx_ep_insert+0x10/0x10 [ 1226.759890][ T4796] ? bpf_lsm_capable+0x9/0x20 [ 1226.759909][ T4796] ? security_capable+0x7e/0x2c0 [ 1226.759942][ T4796] do_epoll_ctl_file+0x8c2/0xee0 [ 1226.759973][ T4796] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1226.759998][ T4796] ? __fget_files+0x3a2/0x420 [ 1226.760025][ T4796] ? __fget_files+0x2a/0x420 [ 1226.760062][ T4796] __se_sys_epoll_ctl+0x162/0x230 [ 1226.760087][ T4796] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1226.760122][ T4796] do_syscall_64+0x166/0x520 [ 1226.760145][ T4796] ? trace_irq_disable+0x3b/0x140 [ 1226.760166][ T4796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.760185][ T4796] ? clear_bhb_loop+0x70/0xc0 [ 1226.760209][ T4796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.760229][ T4796] RIP: 0033:0x7f420339e1d9 [ 1226.760247][ T4796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.760263][ T4796] RSP: 002b:00007f42041de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1226.760284][ T4796] RAX: ffffffffffffffda RBX: 00007f4203626090 RCX: 00007f420339e1d9 [ 1226.760297][ T4796] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000007 [ 1226.760307][ T4796] RBP: 00007f42041de090 R08: 0000000000000000 R09: 0000000000000000 [ 1226.760318][ T4796] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000002 [ 1226.760330][ T4796] R13: 00007f4203626128 R14: 00007f4203626090 R15: 00007ffdd24f3ba8 [ 1226.760363][ T4796] [ 1227.084345][ T4791] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1227.141589][ T4797] bond6: (slave veth0_to_bond): Releasing active interface [ 1227.207392][ T4797] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1227.235839][ T4799] bond8: entered promiscuous mode [ 1227.235863][ T4799] bond8: entered allmulticast mode [ 1227.242976][ T4783] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1227.291424][ T4783] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1227.331442][ T4801] macvlan2: entered promiscuous mode [ 1227.331464][ T4801] macvlan2: entered allmulticast mode [ 1227.405146][ T4801] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1227.489651][ T4783] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1227.489674][ T4783] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1227.524364][ T4783] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1227.524386][ T4783] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1227.707461][ T4783] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1227.707486][ T4783] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1227.862371][ T4783] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1227.862395][ T4783] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1228.142054][ T4813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7237'. [ 1229.075798][ T4836] netlink: 'syz.0.7246': attribute type 10 has an invalid length. [ 1229.088406][ T4836] bond8: (slave veth0_to_bond): Releasing active interface [ 1229.114184][ T4836] veth0_to_bond: entered promiscuous mode [ 1229.771837][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7253'. [ 1230.051315][ T4862] FAULT_INJECTION: forcing a failure. [ 1230.051315][ T4862] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.051347][ T4862] CPU: 1 UID: 0 PID: 4862 Comm: syz.4.7253 Not tainted syzkaller #0 PREEMPT(full) [ 1230.051368][ T4862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1230.051416][ T4862] Call Trace: [ 1230.051425][ T4862] [ 1230.051435][ T4862] dump_stack_lvl+0xe8/0x150 [ 1230.051467][ T4862] should_fail_ex+0x410/0x560 [ 1230.051496][ T4862] ? __alloc_skb+0x1db/0x7a0 [ 1230.051523][ T4862] should_failslab+0xa8/0x100 [ 1230.051551][ T4862] ? __alloc_skb+0x1db/0x7a0 [ 1230.051576][ T4862] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1230.051596][ T4862] ? __alloc_skb+0x18d/0x7a0 [ 1230.051624][ T4862] ? __alloc_skb+0x1db/0x7a0 [ 1230.051658][ T4862] __alloc_skb+0x1db/0x7a0 [ 1230.051693][ T4862] alloc_uevent_skb+0x7d/0x230 [ 1230.051719][ T4862] kobject_uevent_net_broadcast+0x2fa/0x560 [ 1230.051747][ T4862] kobject_uevent_env+0x566/0x9e0 [ 1230.051777][ T4862] device_add+0x544/0xb80 [ 1230.051805][ T4862] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1230.051844][ T4862] wakeup_source_register+0x17f/0x380 [ 1230.051873][ T4862] ep_insert+0x107d/0x1af0 [ 1230.051911][ T4862] ? __pfx_ep_insert+0x10/0x10 [ 1230.051946][ T4862] ? bpf_lsm_capable+0x9/0x20 [ 1230.051966][ T4862] ? security_capable+0x7e/0x2c0 [ 1230.051998][ T4862] do_epoll_ctl_file+0x8c2/0xee0 [ 1230.052031][ T4862] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1230.052057][ T4862] ? __fget_files+0x3a2/0x420 [ 1230.052083][ T4862] ? __fget_files+0x2a/0x420 [ 1230.052119][ T4862] __se_sys_epoll_ctl+0x162/0x230 [ 1230.052145][ T4862] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1230.052181][ T4862] do_syscall_64+0x166/0x520 [ 1230.052204][ T4862] ? trace_irq_disable+0x3b/0x140 [ 1230.052224][ T4862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.052244][ T4862] ? clear_bhb_loop+0x70/0xc0 [ 1230.052268][ T4862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.052287][ T4862] RIP: 0033:0x7fdd2639e1d9 [ 1230.052306][ T4862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1230.052321][ T4862] RSP: 002b:00007fdd2721d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1230.052342][ T4862] RAX: ffffffffffffffda RBX: 00007fdd26626090 RCX: 00007fdd2639e1d9 [ 1230.052356][ T4862] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000007 [ 1230.052367][ T4862] RBP: 00007fdd2721d090 R08: 0000000000000000 R09: 0000000000000000 [ 1230.052379][ T4862] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000002 [ 1230.052392][ T4862] R13: 00007fdd26626128 R14: 00007fdd26626090 R15: 00007ffd0765f108 [ 1230.052426][ T4862] [ 1230.664291][ T4869] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7254'. [ 1230.664317][ T4869] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7254'. [ 1230.664357][ T4869] netlink: 13 bytes leftover after parsing attributes in process `syz.1.7254'. [ 1231.143860][ T4883] IPVS: set_ctl: invalid protocol: 46501 172.20.20.170:20002 [ 1231.750325][ T4901] netlink: 'syz.2.7263': attribute type 10 has an invalid length. [ 1231.756654][ T4901] dummy0: left promiscuous mode [ 1231.902299][ T4901] team0: Port device dummy0 added [ 1232.223005][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7264'. [ 1232.223028][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7264'. [ 1232.524398][ T4918] netlink: NAT attribute has 8 unknown bytes [ 1232.524435][ T4918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1233.027121][ T4937] [ 1233.029494][ T4937] ====================================================== [ 1233.036512][ T4937] WARNING: possible circular locking dependency detected [ 1233.043546][ T4937] syzkaller #0 Not tainted [ 1233.047976][ T4937] ------------------------------------------------------ [ 1233.054992][ T4937] syz.3.7271/4937 is trying to acquire lock: [ 1233.060974][ T4937] ffff88801d2f7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 1233.071514][ T4937] [ 1233.071514][ T4937] but task is already holding lock: [ 1233.078882][ T4937] ffffffff8fbe9970 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 1233.089026][ T4937] [ 1233.089026][ T4937] which lock already depends on the new lock. [ 1233.089026][ T4937] [ 1233.099432][ T4937] [ 1233.099432][ T4937] the existing dependency chain (in reverse order) is: [ 1233.108440][ T4937] [ 1233.108440][ T4937] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1233.116167][ T4937] cpus_read_lock+0x42/0x160 [ 1233.121289][ T4937] static_key_slow_inc+0x12/0x30 [ 1233.126758][ T4937] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1233.133009][ T4937] nbd_genl_foreach_sock+0x265/0x450 [ 1233.138834][ T4937] nbd_genl_reconfigure+0xbbb/0x1040 [ 1233.144660][ T4937] genl_family_rcv_msg_doit+0x233/0x340 [ 1233.150721][ T4937] genl_rcv_msg+0x614/0x7a0 [ 1233.155745][ T4937] netlink_rcv_skb+0x226/0x4a0 [ 1233.161023][ T4937] genl_rcv+0x28/0x40 [ 1233.165523][ T4937] netlink_unicast+0x7bd/0x940 [ 1233.170798][ T4937] netlink_sendmsg+0x813/0xb40 [ 1233.176076][ T4937] sock_sendmsg_nosec+0x14e/0x190 [ 1233.181628][ T4937] ____sys_sendmsg+0x54e/0x850 [ 1233.186915][ T4937] ___sys_sendmsg+0x2a5/0x360 [ 1233.192124][ T4937] __x64_sys_sendmsg+0x1b1/0x290 [ 1233.197586][ T4937] do_syscall_64+0x166/0x520 [ 1233.202711][ T4937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.209129][ T4937] [ 1233.209129][ T4937] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1233.216766][ T4937] __mutex_lock+0x19d/0x1550 [ 1233.221888][ T4937] nbd_queue_rq+0x373/0xff0 [ 1233.226918][ T4937] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1233.232989][ T4937] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1233.239852][ T4937] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1233.246368][ T4937] blk_mq_run_work_fn+0x16c/0x300 [ 1233.251922][ T4937] process_scheduled_works+0xc3d/0x1630 [ 1233.257994][ T4937] worker_thread+0xa47/0xfb0 [ 1233.263111][ T4937] kthread+0x38b/0x480 [ 1233.267702][ T4937] ret_from_fork+0x514/0xb70 [ 1233.272821][ T4937] ret_from_fork_asm+0x1a/0x30 [ 1233.278115][ T4937] [ 1233.278115][ T4937] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1233.285339][ T4937] __mutex_lock+0x19d/0x1550 [ 1233.290465][ T4937] nbd_queue_rq+0xc1/0xff0 [ 1233.295418][ T4937] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1233.301517][ T4937] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1233.308376][ T4937] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1233.314885][ T4937] blk_mq_run_work_fn+0x16c/0x300 [ 1233.320442][ T4937] process_scheduled_works+0xc3d/0x1630 [ 1233.326514][ T4937] worker_thread+0xa47/0xfb0 [ 1233.331636][ T4937] kthread+0x38b/0x480 [ 1233.336220][ T4937] ret_from_fork+0x514/0xb70 [ 1233.341341][ T4937] ret_from_fork_asm+0x1a/0x30 [ 1233.346633][ T4937] [ 1233.346633][ T4937] -> #4 (set->srcu){.+.+}-{0:0}: [ 1233.353755][ T4937] __synchronize_srcu+0xc9/0x2f0 [ 1233.359211][ T4937] elevator_switch+0x1e8/0x7b0 [ 1233.364496][ T4937] elevator_change+0x2fa/0x480 [ 1233.369788][ T4937] elevator_set_default+0x375/0x440 [ 1233.375511][ T4937] blk_register_queue+0x3f3/0x4e0 [ 1233.381052][ T4937] __add_disk+0x6b8/0xdb0 [ 1233.385918][ T4937] add_disk_fwnode+0x100/0x3a0 [ 1233.391213][ T4937] nbd_dev_add+0x733/0xb60 [ 1233.396146][ T4937] nbd_init+0x168/0x1f0 [ 1233.400817][ T4937] do_one_initcall+0x250/0x870 [ 1233.406108][ T4937] do_initcall_level+0x10a/0x1a0 [ 1233.411571][ T4937] do_initcalls+0x59/0xa0 [ 1233.416427][ T4937] kernel_init_freeable+0x29d/0x3e0 [ 1233.422146][ T4937] kernel_init+0x22/0x1d0 [ 1233.426988][ T4937] ret_from_fork+0x514/0xb70 [ 1233.432117][ T4937] ret_from_fork_asm+0x1a/0x30 [ 1233.437409][ T4937] [ 1233.437409][ T4937] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1233.445290][ T4937] __mutex_lock+0x19d/0x1550 [ 1233.450408][ T4937] elevator_change+0x1af/0x480 [ 1233.455690][ T4937] elevator_set_none+0xb5/0x140 [ 1233.461062][ T4937] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1233.467379][ T4937] nbd_start_device+0x189/0xb30 [ 1233.472741][ T4937] nbd_genl_connect+0x167d/0x1cd0 [ 1233.478285][ T4937] genl_family_rcv_msg_doit+0x233/0x340 [ 1233.484349][ T4937] genl_rcv_msg+0x614/0x7a0 [ 1233.489360][ T4937] netlink_rcv_skb+0x226/0x4a0 [ 1233.494637][ T4937] genl_rcv+0x28/0x40 [ 1233.499121][ T4937] netlink_unicast+0x7bd/0x940 [ 1233.504394][ T4937] netlink_sendmsg+0x813/0xb40 [ 1233.509666][ T4937] sock_sendmsg_nosec+0x14e/0x190 [ 1233.515199][ T4937] ____sys_sendmsg+0x54e/0x850 [ 1233.520466][ T4937] ___sys_sendmsg+0x2a5/0x360 [ 1233.525649][ T4937] __x64_sys_sendmsg+0x1b1/0x290 [ 1233.531090][ T4937] do_syscall_64+0x166/0x520 [ 1233.536192][ T4937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.542590][ T4937] [ 1233.542590][ T4937] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1233.551180][ T4937] blk_alloc_queue+0x544/0x690 [ 1233.556452][ T4937] __blk_mq_alloc_disk+0x194/0x390 [ 1233.562072][ T4937] nbd_dev_add+0x494/0xb60 [ 1233.566996][ T4937] nbd_init+0x168/0x1f0 [ 1233.571661][ T4937] do_one_initcall+0x250/0x870 [ 1233.576933][ T4937] do_initcall_level+0x10a/0x1a0 [ 1233.582376][ T4937] do_initcalls+0x59/0xa0 [ 1233.587213][ T4937] kernel_init_freeable+0x29d/0x3e0 [ 1233.592921][ T4937] kernel_init+0x22/0x1d0 [ 1233.597753][ T4937] ret_from_fork+0x514/0xb70 [ 1233.602859][ T4937] ret_from_fork_asm+0x1a/0x30 [ 1233.608155][ T4937] [ 1233.608155][ T4937] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1233.615349][ T4937] fs_reclaim_acquire+0x71/0x100 [ 1233.620811][ T4937] kmem_cache_alloc_noprof+0x5f/0x600 [ 1233.626691][ T4937] __kernfs_iattrs+0xdd/0x380 [ 1233.631883][ T4937] kernfs_iop_setattr+0xe6/0x3f0 [ 1233.637322][ T4937] notify_change+0xbba/0xea0 [ 1233.642420][ T4937] do_truncate+0x1c2/0x250 [ 1233.647339][ T4937] path_openat+0x15b5/0x1d60 [ 1233.652432][ T4937] do_file_open+0x23e/0x4a0 [ 1233.657440][ T4937] do_sys_openat2+0x115/0x200 [ 1233.662625][ T4937] __x64_sys_openat+0x138/0x170 [ 1233.667985][ T4937] do_syscall_64+0x166/0x520 [ 1233.673085][ T4937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.679482][ T4937] [ 1233.679482][ T4937] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1233.687981][ T4937] __lock_acquire+0x164c/0x2de0 [ 1233.693336][ T4937] lock_acquire+0x115/0x350 [ 1233.698342][ T4937] down_read+0x4a/0x330 [ 1233.703007][ T4937] kernfs_iop_permission+0x7f/0x430 [ 1233.708710][ T4937] inode_permission+0x3de/0x5f0 [ 1233.714071][ T4937] cgroup_attach_permissions+0x28e/0x9f0 [ 1233.720209][ T4937] __cgroup_procs_write+0x24b/0x320 [ 1233.725911][ T4937] cgroup_threads_write+0x24/0x50 [ 1233.731441][ T4937] cgroup_file_write+0x331/0x8f0 [ 1233.736888][ T4937] kernfs_fop_write_iter+0x3a4/0x540 [ 1233.742681][ T4937] vfs_write+0x612/0xba0 [ 1233.747430][ T4937] ksys_write+0x150/0x270 [ 1233.752266][ T4937] do_syscall_64+0x166/0x520 [ 1233.757364][ T4937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.763763][ T4937] [ 1233.763763][ T4937] other info that might help us debug this: [ 1233.763763][ T4937] [ 1233.773968][ T4937] Chain exists of: [ 1233.773968][ T4937] &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock [ 1233.773968][ T4937] [ 1233.787941][ T4937] Possible unsafe locking scenario: [ 1233.787941][ T4937] [ 1233.795369][ T4937] CPU0 CPU1 [ 1233.800716][ T4937] ---- ---- [ 1233.806063][ T4937] rlock(cpu_hotplug_lock); [ 1233.810636][ T4937] lock(&nsock->tx_lock); [ 1233.817551][ T4937] lock(cpu_hotplug_lock); [ 1233.824555][ T4937] rlock(&root->kernfs_iattr_rwsem); [ 1233.829911][ T4937] [ 1233.829911][ T4937] *** DEADLOCK *** [ 1233.829911][ T4937] [ 1233.838034][ T4937] locks held by syz.3.7271/4937: 4, last CPU#1: [ 1233.844259][ T4937] #0: ffff8880365aa460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1233.853121][ T4937] #1: ffff88804a5c3080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1233.862849][ T4937] #2: ffffffff8fd9c7a0 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230 [ 1233.872572][ T4937] #3: ffffffff8fbe9970 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 1233.883167][ T4937] [ 1233.883167][ T4937] stack backtrace: [ 1233.889386][ T4937] CPU: 1 UID: 0 PID: 4937 Comm: syz.3.7271 Not tainted syzkaller #0 PREEMPT(full) [ 1233.898657][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1233.908698][ T4937] Call Trace: [ 1233.911964][ T4937] [ 1233.914881][ T4937] dump_stack_lvl+0xe8/0x150 [ 1233.919463][ T4937] print_circular_bug+0x2e2/0x300 [ 1233.924481][ T4937] check_noncircular+0x12f/0x150 [ 1233.929423][ T4937] __lock_acquire+0x164c/0x2de0 [ 1233.934285][ T4937] ? __lock_acquire+0x747/0x2de0 [ 1233.939215][ T4937] lock_acquire+0x115/0x350 [ 1233.943711][ T4937] ? kernfs_iop_permission+0x7f/0x430 [ 1233.949076][ T4937] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 1233.954867][ T4937] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 1233.960657][ T4937] down_read+0x4a/0x330 [ 1233.964804][ T4937] ? kernfs_iop_permission+0x7f/0x430 [ 1233.970160][ T4937] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 1233.975952][ T4937] kernfs_iop_permission+0x7f/0x430 [ 1233.981135][ T4937] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 1233.986926][ T4937] inode_permission+0x3de/0x5f0 [ 1233.991770][ T4937] cgroup_attach_permissions+0x28e/0x9f0 [ 1233.997391][ T4937] __cgroup_procs_write+0x24b/0x320 [ 1234.002580][ T4937] cgroup_threads_write+0x24/0x50 [ 1234.007588][ T4937] ? __pfx_cgroup_threads_write+0x10/0x10 [ 1234.013290][ T4937] cgroup_file_write+0x331/0x8f0 [ 1234.018226][ T4937] ? __pfx_cgroup_file_write+0x10/0x10 [ 1234.023677][ T4937] ? __kmalloc_noprof+0x38c/0x720 [ 1234.028696][ T4937] ? __pfx_cgroup_file_write+0x10/0x10 [ 1234.034148][ T4937] kernfs_fop_write_iter+0x3a4/0x540 [ 1234.039425][ T4937] vfs_write+0x612/0xba0 [ 1234.043658][ T4937] ? __pfx_vfs_write+0x10/0x10 [ 1234.048406][ T4937] ? __pfx_do_futex+0x10/0x10 [ 1234.053072][ T4937] ? kmem_cache_free+0x182/0x650 [ 1234.058000][ T4937] ksys_write+0x150/0x270 [ 1234.062312][ T4937] ? __pfx_ksys_write+0x10/0x10 [ 1234.067148][ T4937] do_syscall_64+0x166/0x520 [ 1234.071725][ T4937] ? trace_irq_disable+0x3b/0x140 [ 1234.076747][ T4937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.082815][ T4937] ? clear_bhb_loop+0x70/0xc0 [ 1234.087486][ T4937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.093370][ T4937] RIP: 0033:0x7f71b6f9e1d9 [ 1234.097770][ T4937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1234.117359][ T4937] RSP: 002b:00007f71b7de2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1234.125755][ T4937] RAX: ffffffffffffffda RBX: 00007f71b7225fa0 RCX: 00007f71b6f9e1d9 [ 1234.133715][ T4937] RDX: 0000000000000012 RSI: 00002000000002c0 RDI: 0000000000000009 [ 1234.141670][ T4937] RBP: 00007f71b7035888 R08: 0000000000000000 R09: 0000000000000000 [ 1234.149635][ T4937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1234.157589][ T4937] R13: 00007f71b7226038 R14: 00007f71b7225fa0 R15: 00007ffc881ae7d8 [ 1234.165552][ T4937] [ 1242.494633][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!