last executing test programs: 4.643812707s ago: executing program 2 (id=1564): unshare(0x26020480) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffe57) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@map_fd={0x18, 0x8, 0x1, 0x0, r1}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 4.479074013s ago: executing program 2 (id=1566): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0x8002}, {0x6, 0x36, 0x0, 0x8}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x2, 0x18, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev, 0x4d2, 0x2b}, @in6=@mcast1, {}, {0x0, 0x200000, 0x7}, {}, 0x0, 0xfffffffc, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@multicast2}]}, 0x104}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x10448) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r6, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c, 0x0}}], 0x1, 0x40000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0x8002}, {0x6, 0x36, 0x0, 0x8}]}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x2, 0x18, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev, 0x4d2, 0x2b}, @in6=@mcast1, {}, {0x0, 0x200000, 0x7}, {}, 0x0, 0xfffffffc, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@multicast2}]}, 0x104}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x10448) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) sendmmsg$inet6(r6, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c, 0x0}}], 0x1, 0x40000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) 4.420270819s ago: executing program 2 (id=1568): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x45, 0x3, 0x82, 0x5c6}]}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) (async) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000200)=""/106) (async) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88848b96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async, rerun: 64) socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x26, 0x3}, 0x10) (async, rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_getaddr={0x18, 0x16, 0x605, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x0, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) (rerun: 32) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async, rerun: 64) r9 = socket(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00'}) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) (rerun: 64) bind$nfc_llcp(r9, &(0x7f0000001500)={0x27, r10, 0x0, 0x6, 0x2, 0x3f, "7a6985e3c8450c232525af6c87275c6b00d8116626e55cbc1fe86e975bfba3d1ce4b4f96d543478eb8beabe21db68a0f5ab7958a7ce1a91b73cbbc9a10ab3b", 0x11}, 0x60) (async) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2) 4.070986586s ago: executing program 2 (id=1571): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000f76b000000000000000000008500000053000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x81, &(0x7f0000000300)="1a00000002000000", 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x2, 0x3, 0x67) sendmmsg$unix(r2, &(0x7f0000002100)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10000000000000000000000001"], 0x30, 0x6040}}], 0x1, 0xc0) 3.999556592s ago: executing program 2 (id=1572): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000100)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d00010003e1eb23b978532b5c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x547b, 0x0, 0x8, 0x10}, &(0x7f0000000280)=0x18) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000040000000000fe8000000000000000000000000000aa0a0101020000000000000000000000004e2300004e2600000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff080000000000000000000000000001000000000001000000000000000000000000ffffffffff000000800000000000000000000000000000000000000000000000000101000000000800"/109], 0xb8}}, 0x20004800) bind$bt_sco(r2, &(0x7f0000000400), 0x8) listen(r2, 0x0) shutdown(r2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYBLOB], 0x38}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2d4000, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000100)={'pim6reg1\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80801, 0x1) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, 0x3}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000540)="19", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x6, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="706fbde73fc9679d8eefaf25b6341c9efb7900ff4e7f1d23f7d234f5305f41ccd799c997d42791556e56a53cd9296b2ff1ec74503e92a555a66b899fe50e6dbca818", 0x42}], 0x1, 0x0, 0x0, 0x90}, 0x200040d0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x6, 0x1, [0xbf9]}, 0xa) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.227749467s ago: executing program 1 (id=1578): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000085000000230000009500000000800000293ba5b0b9460ab7cf65684a5502b2ff728f15ca76383d70891520c88cf2ba8262b933572d3f275c921033b3344d4a433d869ddec7794a7d671db2d80e3aa12512d024fdd7fef22a87fbcd452e8bf4346b2ec7619b6a04f2dd6d92ef74c6308bdbff7767f9be35be4dbe6b7330ca2a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x28, 0x803, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000009c0)="46afd46caf5d8eb00d94d49983e783138bdfb81d93e0673dde25002873ca9fd154243d45a29c67e0f3f7035e66e632a23f95c12cffafd7110640b4b4d5acef13b818f307a49817224f2f0defe453faa94875f8ff2f2aa18f987edad55a2ea647a61b8d6ca8196cefe9d8a3c4b7a507fc3a11ec6a02eb1f960c1e71cdc3e3514951c62fb078ad201ff7b020a4fb5fafae119ff63717ed4751772448253da7ed138f05c31cb016412a9e910cf081", 0xad}], 0x1}, 0xc4) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fdffffff00000000000000008500000053000000180100002020aea0d609536f752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702633f2678a9aa45e93d000008000000b7030000fcffffff85000000730000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000000100000000001a000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80001}, 0x20040004) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r6, 0x106, 0x1, 0x0, 0x0) unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x4000) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="00000000000000000200000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000001000000000000000000000000000000000000150000efffffffffffffff0000004d0ee4daafb6e87ee5f46cd10000001703fcffffff00000000"]}, 0x114) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x4c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40080c0) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000100)=0x2, 0x4) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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", 0xfc38, 0x24000880, 0x0, 0xfffffffffffffef0) 1.561365471s ago: executing program 3 (id=1595): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x40) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB="05"], 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000240)={{0x6, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x4, 'lc\x00', 0x2, 0x0, 0x5d}, {@multicast2, 0x4e21, 0x2000, 0x6, 0x5fad9776, 0x3}}, 0x44) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.427287366s ago: executing program 3 (id=1597): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88d0000300000000000006ff00000000017c00007025ddee19946c0d16d5c3e8653fd904898ff652523ee6167cb483dc073da594ec795843a4f86627f63b33797fb2c38ac85773b6f13c3f1f8938faa3aa7ed0a221388b5595c3e0346f6f26cf3fe5a7102a99"], 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x29, 0x4, 0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRESHEX=r7, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES16=r4, @ANYBLOB="08000100", @ANYBLOB="327fb456717c2dc91afff200ba1dfb9a2fa552e92723da27db5ada65457012c11d5026ff0dba10947488e772"], 0x90}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 1.306945014s ago: executing program 3 (id=1599): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0800000004000000040000000200010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000ffff0000000000000000000000000000000080010000000000"], 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3f8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x8, 0x4, 0x7, 0x3}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x968, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x93c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x920, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x91c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x804, 0x1, "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"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "4c5158ae560a528ff9f1050275f2f06dbb6a916939beed63d688644eed0a3e05a8082e9339ca9e1c93f83cc917ac819616d2a236b02726635cd21ef6909e53d804fd9352707430587910cdc1e59d251f7d0dce836510b6acf34cbdfbc2f451d36b70bd5029b0ca908e08a70aca9575daf94103c3b01688d3676d5bb9856ba4b231e191b2e1af34"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x9ec}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) listen(0xffffffffffffffff, 0xa596) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x108, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1112}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}]}, @CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}]}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x108}, 0x1, 0x0, 0x0, 0x10000}, 0x2000c000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @loopback}}}]}]}, 0x50}}, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0xfffffff9, 0x9df8, 0x5, 0xfffffffe}, {0x80000000, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x7ffe}, {0x9, 0x8001, 0x80, 0x7ff}, {0xc00, 0x23e, 0x10000, 0x2}]}}, @TCA_U32_LINK={0x8, 0x3, 0x5}, @TCA_U32_CLASSID={0x8, 0x1, {0xb}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0xffad) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f00000000c0)=0x7f, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) 1.101684167s ago: executing program 3 (id=1604): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x40010000, {{@in=@multicast2, @in=@remote, 0x1, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x12, 0x100000002, 0x0, 0xfff, 0xfffffffffffffffb, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000005, 0x2, 0xffffffffffffffff}, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4044094) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x10001}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x7, 0x10}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={0xffffffffffffffff, r1}, 0x39) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x9e09de68d32c759b, 0x0, 0x1}}, 0x20) sendmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000840)="c813ca7566fb2131cf1cb2fb67ada68d7d2f9a99b66588d8ba4d72d9e7823a4fdfca25c4771d016981ea4cb3a700059c00ba29a0ebd48c1c5af431b92d84509a1aa6a241a714311f1c3ade00c989e0d2f1b96054e373095cfc5eafb07adc0947cdd31624488e4b5215cbd2f205a98f8581cb812a2eee7700"/129, 0x81}], 0x1000026e}, 0x4) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/166, 0xa6}], 0x1, &(0x7f00000009c0)=""/201, 0xc9}, 0x40010103) 1.060180395s ago: executing program 1 (id=1606): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xff0a, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}, 0x108) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 963.130617ms ago: executing program 3 (id=1607): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x58, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x5, @local, 0x6}, @in6={0xa, 0x4e22, 0x5, @loopback, 0xf}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={r3, 0x1ef, 0x6, 0x9, 0x1, 0x3}, &(0x7f00000001c0)=0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000400)={"98f16fa4ed70083441681bf5c394e687", 0x0, 0x0, {0x101, 0xfffffff9}, {0x1, 0x5}, 0x1e, [0x5, 0x4, 0x80000001, 0x40d, 0x9, 0xf, 0x637810fa, 0xfffffffffffff909, 0x3, 0x100000000, 0x40, 0xfff, 0x2, 0x21, 0x8, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000500)={"83a3e12298f1ab0538c35cf1d2bf8fce", r5, r7, {0xc}, {0xb4, 0x7fff}, 0x80, [0x1, 0x5, 0x5, 0x100000000, 0xfffffffffffffff4, 0x3, 0x9, 0x2, 0x2, 0xd, 0x2, 0xd7, 0x5, 0x0, 0xcef, 0x4]}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000600)={r4, 0x7}, 0x8) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000640)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000680)={r4, 0xfffffffe}, 0x8) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000006c0)={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x1, [@remote]}, 0x14) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000700)={0x9, 0x6, 0x8004, 0x7, 0x3, 0x7, 0x5, 0xffffffff, r4}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000740), &(0x7f0000000780)=0x4) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000800)={{r11}, r6, 0x1a, @unused=[0x10001, 0x1, 0x0, 0x5], @subvolid=0xfffffffffffffffa}) bind$netlink(r10, &(0x7f0000001800)={0x10, 0x0, 0x25dfdbfe, 0x40}, 0xc) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001880)=@generic={&(0x7f0000001840)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000001a00)={'sit0\x00', &(0x7f0000001980)={'ip_vti0\x00', 0x0, 0x8, 0x10, 0x80000000, 0x5bb1, {{0x10, 0x4, 0x3, 0x1b, 0x40, 0x67, 0x0, 0x1c, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x18}, {[@rr={0x7, 0x1f, 0x39, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @remote, @multicast2, @loopback]}, @lsrr={0x83, 0xb, 0x2b, [@private=0xa010101, @private=0xa010101]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0x10, &(0x7f00000018c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@alu={0x4, 0x1, 0x1, 0x4, 0x7, 0xffffffffffffffc0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001940)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x2, '\x00', r13, 0x25, r11, 0x8, &(0x7f0000001a40)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0xe, 0xff, 0x4}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001ac0)=[{0x5, 0x5, 0x7, 0x8}, {0x4, 0x4, 0x1, 0xa}, {0x2, 0x4, 0x10, 0xc}], 0x10, 0x7}, 0x94) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c00), r11) sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x30, r14, 0x20, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000005e80)=0x0) sendmmsg(r1, &(0x7f0000006f80)=[{{&(0x7f0000001d00)=@phonet={0x23, 0x6, 0x1, 0x81}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001d80)="1448d1e6247d0de376c54336b503b9285fb86605f6fc089f251531c0b09c86ffca87eea1de086638196d70c47e", 0x2d}, {&(0x7f0000001dc0)="9e0e2825cd80aac57dc452feeb87d56d461c6b6359eabe2d8aea6369487021e6984e95694fa88b68acc13c0819a9898780dd66baf9cabded6dbc1afdb8b70ddcbae6d9f1d6cba616e485115738bedf0938d86e60c709bab713e3cb6f04a2fb25f188ef968ba523e8e8d9c6bf4c6010a447d0a46ad513", 0x76}, {&(0x7f0000001e40)="105d1a58128a9e4aecdce20571660c3d398363aa62b30da696459fbe583cd9556e624a2bc06c630432cf3187cd83c2093a5f9ccfdb3569b2b9fd9ed640efa40e105b3c17880d145bd2b5afbf8c0e2b9a5e3db40d33952d325ccbc82078e49315f83c9ed41a274e4ac5c7c160dc35239decec75b6446fb96ede9b71f7861ef35957b582bb17d470d5b0ffb0fa3da47ec6f9d65887ed57e53fe08dcd6888", 0x9d}, {&(0x7f0000001f00)="11b60cae2ab97732a86489c3db76be02460ce5d4ca99406da351cb1d4063c5e19cc1227bc080a7d56e2c01b5eda85318f79b32b6e7ba241ea91b0f017dfdd6205b39184585", 0x45}, {&(0x7f0000001f80)="4f660fd346c2fc3b7144026cf8732a9490578d4a5014e173d540908e28d62d4698b09335091b056a7e8ab9c0a543646d8ee8584cb4eb0ac3f3a99e646c1783071409c4dfb080b4fbe73938da150be730f032150cafb976e0c5501def0c69fa638c6d399b909873535f701b5d757cb9e5f6ac2e83da39b555cd21d5ad25", 0x7d}], 0x5, &(0x7f0000002080)=[{0x100, 0x29, 0x3, "9b842d59754835422cdc183d2fd0941785e13da8bbeefbd41f0218c8dc682e9921cd10782bb3b1b04315697219e56d180494c6f879c235d34dc8de1bcb909db078349f57cdc0038e8906d1bfed83467cc1e98ef2f8f9d3a948c725df89da135c71be02c04a2fc3100a091b25c1c088bb1a183a5e593247cfe98fab427a9b735924a01af2c094e9b2bffa91744de79edb8c728dde0c792afaa735d5b8c0a3b0de5a3a18af560aad53aa5ef2f688c1857b4271cd82fd4a467fbf24f3cbcf8fd54be25c44754f5b7674d0cd9a689397c6573edbd63bfd6f2086bebb2f98a14fa6849c7d00b1b1ca08f7424cace5"}, {0xb8, 0x109, 0x3, "c1d9b1a0e9e677eed831cb3761335db754a479fdcb40786eba9f175bf1905da71767caf960db476a2f30e66116a65a75eb99aa5ff2bdd6ecc36ab0aada24d4fe68606fcf24950d77222126382af32ad58dfdf3c6ad7131c3cd3c85925ceea29388c5ef653cf55cda70bb3205584760d79544a0cee61939e090961889927295fa2e740a47ad9aecbb97e043076f209d3ac0143771175a888c517f084f59922568f972769b70"}, {0x60, 0x117, 0x2, "b0cbf617e7999a9a5d65d25a1bbabf85c536ae089806450e805db7322a2bf2a0a76555803c22caeb2bc8ed9067d6bbf39ec18547179096a404dbc8c3364e01d08ec7add10ecf110b77903712"}, {0x60, 0xff, 0x4, "b40e6a3a6e714c81558d1a26658bf4aa6a987696384fe43b72c018832a7d7f3c60a7f2792d67d8c14dda2d737ab2d6bb0cbb4d20f3cb110ae7e224353bf76611355ddfc725279309cbaa96e44a08d9ea"}, {0x78, 0x8a, 0x5, "c1b2ebd136d8d5b4a207a26bc5f0f2f69c6fad14355cabb447b896c2816779b2632802be2547ab718a73bac7805ad39b7509ffe8e2d30d0edd158ce2ea263dc9b4a7a6275328f78279475a5ed3bd0fb46d3d4904c71f5914bd3dc72375aeb9d7915cdb05ee49d540"}], 0x2f0}}, {{&(0x7f0000002380)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @empty}, 0x1, 0x3, 0x2, 0x2}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002400)="eb712a75aa37a49d25fa1f41f072d53051db08f06f96c8d54c3f19305b8380b67ad3daae9f3fb1e791e61d93111602b7e6cd4f686548e1d498e8a3125426619157ca20a47cdb12de2471e1202eeac2af260db039ee39", 0x56}, {&(0x7f0000002480)="36ce317fc8c30c6530307f4d0357d30a30589b621c8424c7c4b24248794e3fa0ae02e2e9d6f420d957b316088921f556143a766dae45d22a5c3e4cd6bc8ea71a40ae08c83ea37bfad39ffd29be6fd001d48b87bda6b762c25c1095", 0x5b}, {&(0x7f0000002500)="eee6e7b53cb738437941b9c685aadb5d64f9e2a35701040644d16023cf71001dbddf8866bfaa839d777e7e3e8c26bfe5fcaec0fc860829b7de8d3ce73e7fff494fc71df029037072c78fbf461f620b46f1a0577c4161ed1b8eb0062ceafa706d53a5be00655070cf8c637b07fa9117fc1d558961e31b864c6d46e2aa96a13d00372fa977b43715f2cb7a1c1c5138f4108fa5a7b8b51dcbb799a41d1e4d9cc657ae0b70d89271e2f92dea947efcba43c6e6cbc0c2c2dcea603aa29d7f14bbbfc4705734add8d7c3c4779ef42c8b0496537bb21a61d99df6914140cc", 0xdb}, {&(0x7f0000002600)="f06b462a910ca187a30c249a5083d156a266248b654988f3a3d79b4b46c3ebff", 0x20}, {&(0x7f0000002640)="5d5cbe3851435620237447e1cc21909090ed8a2102a72b3a16b167daba068711acb27965d8697eb8a7fa62e1f4b8ab8e4852432d3f055739ed887e276ef9cdf4dac34cdf712f67819234e30e91a8f6cbc80f784efdc07f2634cd084ae681645baede1e9fb70fa7f21f0de132d94345ae0cca7cc96be7ac475bd0048c1f798d4b038209fe497a0b39fbf23c40e67e8f82b60835553379f55a06cb3277cc337d7f724c", 0xa2}, {&(0x7f0000002700)="d922a20acf92c98540637da82bb2c90546134a09f385ee9382181325e5f11d455ca0db0e7d4b1e546ca7555774c7bfeeda7aaa44ee5d92d4e66aec63562cb5ffff88e90c61719fa032ce90b70bb23a8c495332314a89710b2247c15b5996c951b7b03dcb7cc610ef562c", 0x6a}, {&(0x7f0000002780)="f72155d6681ee5d6b7905b1a60313e93cf74f7f6c70491c9c77063dcfbde26e729e6141e3ba814e546399e8260c6cff75b0b6ce281510c8c85a8e6decacec9664b0a8529912adda2ca2cc96c96dcb37e4c2f87413ac1e0fa52b22643e65e3d52351fa3bd54795242dc5333f60125377289274c095e2bc59a5c2a4b05763b0c0009122800589876e230bb402fcd579fa73238c5a54084194cea948213241dd6ef8ecf368567d3a837ba8c39f294093ba8900239d5d277", 0xb6}, {&(0x7f0000002840)="160590a06e9d87c80da392c9e7beb813ed5c55a3d6ffce29ffd4e1a5f5c7613f9586e47510931c0b4a81b7982d062bae0e66f7e0da00909e231d85773dc7b04743b4d20812821d1c72b3b1f153da4b9081d0b3c7838e808ecfe4194d07121261bc26ae96134c9f6c6d6a893808d1b58de760cf2226703288b08a2042d5f897b79ddb04a7ec2b187f4eaf447ecc97d07885003681282a879f9d4edc4ab59e2484974d5afc27ca3da04ed6b27b507348d50db8ae559311b7b80e882175fb73b524d10cde8449787aa0c92ca3424bb344c2cb2318fa51ff59e07a419082eacd59f1c16336fb966717f52ff945cc75", 0xed}], 0x8, &(0x7f00000029c0)=[{0xf0, 0x10c, 0x3, "de7886e08a6a93d07fa1a0d4b771fce9e61c2e47ca9c0d9093dba3f0a6861287afccc4d9faf9f96becd75adf34235c79c93bacc0fad80bc90464e85d02657623a359a3fc98f5334fca748805b359a36a31d080314c9fdac6cde52df7733b62ce548dffd02669e5ed77081ef7563f7da95ec491f570a436a2919bfa6979546c6df372456943552d1a2f5fd932236d15fadd5374208109c2bf23c50346c2e2d006608149485de067dc2d9053de22a8f473b7fa2f8b56b5dfb2ae8b3abb9ab198459eb60d193bb938e9b48c7c7a3a9ecd2cc4ca89e1baeec2546ca55440d3860d"}, {0x1010, 0x113, 0x3, "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"}, {0x1010, 0x11, 0xa1, "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"}, {0xb0, 0x1, 0x1, "15992d596aa006e6a71b1e9fa6616a78e931ada77e6f443ab6bc5c9a4f5ecb0026e40ef238bdc5689be83c5f8a0b400e18b6804a2a30470c86286343df4a1af2a7c297d2fb7c937a4873e6cea0d8832c38010dedf63fcd62ba1812e4598785c0cb99273e496f54330e3cd98b672b893e96a4df53a74f83b5fd504ab27fb7412c6b62a8198d94127fbc4ea4dd5403d5d08302a3bb6ee02e1b16eb8f2a"}, {0x30, 0xff, 0x6, "81ae56c0b296857698207fb2f0b95de34baa306070696246434842ca714e"}], 0x21f0}}, {{&(0x7f0000004bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x1, {0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00', 0x8}}}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004c40)="104b12453a67891b1f1b2089abb18b631ec2ce134130af99df591b6ee115d6a8c2aeecd0c7129a099cd2e6035681e8ec2716e8ec15276a324e2205f1691d88c0fb5db3c57a27e0010c69f92e73cb39e31d03801ca9f256a34403a1fb7a0a95783390900873cdc0c0e69c802099f4a8be91798dfe3a4bab3ad0730923a4e4cb7a3badd05f4ede877236c0c8077df6b5fa672867c1f52cabb9ce6a60d7c69453625d1f0e2c02f580621359c91a46391fe6bdcbfe6555acfe82a06a1e3958a2c065f5e22ad3", 0xc4}, {&(0x7f0000004d40)="143addcae3df5cea6808966f85182b23b035fbcf92218d69749cdae64a3a993b5b5e7f6bed476f2b386c7ff8bd0b5dc07ae29705fe2bfa053a0bc271e90c0dcae107e6139939916cc8570520e47c73b82995c14b762321f0d91c", 0x5a}, {&(0x7f0000004dc0)="10b56ba4e078b3436ac5b9bc0728b4687e78849701cc744c0f26a629bafa95cece78ce17ac2c0fb51484c014f61eb5e057eb4a968d80eda4e55c6fdfaef294e1122c8f6b3d715c0b9c81f03c945130366add46a9f19343fe8fde2e5f7bee14dc5d054cd21fde6542e0694d6662780c5a6b8fec9f28b70bf337c5023b22ca6b470c10", 0x82}, {&(0x7f0000004e80)="653c5c535a0f9bd544eeaf048522b9642046c059149cdaffcfaf57eddb6cca1bc8a968a9acd6cea1cf6d92fe38b4f0b8193072326212e7b85349ee3c5a578f13de155d27330d26c241b73b4d106abf5d023bdace758b4223fca9005861c4292165abec1dada85bfbbe58f760a52d4994f79f707c853c9c28c86e832b", 0x7c}], 0x4, &(0x7f0000004f40)=[{0x30, 0x84, 0x6, "61c84e316e73969067fa43f482e9bf33b226a828b4dab7b4d0c0f0"}, {0x40, 0x113, 0x0, "c357d7c50248d1600964ef48e0066ab2ae09995570bf8da27d05d512c2c66fc559df3e20722ab3ea8122"}, {0xe0, 0x29, 0x8001, "557563da2904c7389bf524d0cf5f692a48c4163d87814b90f90822e67ebe71a8203fa3e6153962b462561d60b767e8d3422c664d627cc4450856e441e0b502d32d548ccee9a399153d3d25eb4d4d7427117b712ebc7186aaebb18120ad69e85d791020143f1ae81325f974b5dbf17a966a46d16db930ce727d18271c8114ee5c480d2162ffad57e46594409f048fdd129e3e2691076dbab967265edb7ecd67ed4432974d87ae4f70f2f5c29a3018d74a046661659c628a8dccf2027eae6a6e2dee69b7f0be8469a29671bd"}, {0x38, 0x10a, 0x2, "e3e85897843d5d916931ca9fd680eee06300099c2bfd242dba4649dc5e2dff168b7d67a6e7"}, {0x100, 0x10e, 0x4, "a16fcd9ce8aef025a6bf25a286500a32a9a2d3dee4c704dae453207e206679f69472cce21e79f5c6cbdb2d515712d485f942c9cef1d4b328fc39582567935c9cb73fc26e379c99e2d1bfe3614e1c68692ceff06b351ca367ccb79adb8a8a88cb9a4c5e25d2a3bd7458736b2480447c672150383b8f8a35d1093600166bae3480723e5388d69e5fe77596b0c85c18bd794fda1a21002d3da949b165abb36dabb9903f22ab728156d10ee1df4fa6977c858ae105de84d00b1fc16425fd0c461e9cb3accc49eace2ddc4d24f6b150eb12b848204993c4fc1da9d0a96351922b033dfaca1132ec8f23aeda"}, {0x110, 0x11, 0xb, "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"}, {0x18, 0x112, 0x4, "ea008ab5"}, {0xb8, 0x3a, 0x1, "684c263a265d5c57d8d5c5e3ffb5fddd4e6c752ca7544c4bfc6cbb1911507b6b0a998eb9bccf8fc33978cbf54605b045d1b23bc85e18abcd3f7e166292f1b0496286761a20d32f351423af200ce7fef5239e94e6afd257c3b4580f54d935daf287ec118ae1e5a03541d20c536534d1c5e7b3024919975c8219c8fbd023ba5517611a729f38a824d36b51f66e45d5e726901771d79f6fb3d7bfa5bcf9779cb00080"}, {0xa0, 0x116, 0x604, "e54191996302aff036b4883cbcb11b68fa77a61bbf9ddc2ecd0cd8ae84b50dc98f1d1152653f785e2616210bf5e9c2fa6046a203dd577bec9ded7fc105dc64aee5d39e59706f3b724e4acc60f7faaf1c78845c90aa817d1040aeb74796e2fcde00cfc666596c58c311092422c09310dc0321d3ffbd603f5f9d6d948f31b737ba2025ce5b2bbabdfac959d56c"}], 0x508}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005480)="eb9fa5a20d62324ced3b7aba9c1b83b36b364b6eda1522772e0520e66f80c73e7be68ef975766521e85cacacd38a4adc14966247f4c136c068b2dbb47241d4b861d9922c1383d5d0fc4f5dc853b2d691b21d0e47b7e23fe0dca4e54122361e57899b265a8df3556ffe658fcc2caafefa8bbaaf6bf217c008be99b47f6074531b23733903c9bf3d1b91e06ab03a579bc393327fe2c96ecf5010734031a0fa0281265595383b0f5b5e9b7de9b0c80297d8af8020c63f220986ddd7202af5efa5a2ac1680950ba3", 0xc6}, {&(0x7f0000005580)="dabeeb9cb4566fc3b5f0712e39b0b3a3e21e8f68e3ef3cc957aa38202f9193286e84d27ec0ce3ea212bd30ae52c53c7243b63653", 0x34}, {&(0x7f00000055c0)="e1d0ebe477c8a57ede4ec5b0c5bb7120cbd5a03058da159b5eff2c39f908bcecff917071cb376dfa4cf3e8209c6d5e16aaf013354dc2c1618ea376bdfc4ef55575a24f1f168385703833a722b92287a56a9ca1f045bf50154e13b1efb904fb391729372e1be61754038bc4f229212b41f61d82d62de4b709c80db96902069d86e69c459150924c01dacbec1ab3313a3acf25bd529a254257e48cb08e6b8f6ffdde05d1b78aed413ba207e1850688209298982c34a7eee61b045776614d790218b1687ba51853b918da034b22b6db", 0xce}, {&(0x7f00000056c0)="10183086415826a1f08cd954962bfc8a8253cd9ffb45896128982c59f700018f2f9622964746b29e1e5746ccde0670427f6a391c4b3f45fe771f1be5", 0x3c}], 0x4, &(0x7f0000005740)=[{0x88, 0x108, 0x7b, "571d409889cce2f5e12918fad8835259fec835dc40921c0d87f9fd9f8e311568505295ea2f55f0bf5aad781d74c4b1a15c0c1ae0dd5adc9d8ec01799e97345103faf53770c3d50c9ce4e0a3cb7666f629812443d5d465a24713472f05fa6288417f84c92059f6674b98cf44de3b11c49e439528752"}, {0x28, 0x108, 0x8, "6152d1d570f63fa7425404414121221aed4c889a"}, {0x40, 0x103, 0x1000, "bef2b927fc5de5809323a30c4b748ed261d36dbdd95b77b18f83ab970af754aa7513e2f0c35de9060ba0c631ef5a"}, {0x110, 0x101, 0x9, "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"}, {0x100, 0x103, 0x7, "39c400c1f00a7cabef5dde2860c146ed10bf83590ebf190eaa38a7ea1b9a4c7c681e6c085efe143eab20674058f03bc017eac2d96d8c221acc37d976157c55203886d66f87829d7aad55472ddd420d09c6d1701f28673d790e8758e8ace5bf3b20b1af0cb54ae49f2519b8c2dbe634fe14a7d5c2dc9ae7313d91f1171c92bc556b2aa10381301235f5601ea61bc12f4a7b11f6a70a40894454b7c13c42ad30021c73e78e4e4fea63e5539c89a9d44fae54fab07883db9a32d428771bf0d26b5773657765a60e9c64d60e20a83d4bc0a3ea9be46361a5cdf878f61bd9eb63868d8f5adea9e2b3a47e6c9aacc6f2"}, {0xa0, 0x111, 0x7fffffff, "edc2fd06bfc66d5928cc389e1efe72c284cbbbdb4d77c3072711895bbad99a8a76a6e2e485a0f01ccfb23c810b1dfe8e3e5c4af6670eda4fcaf2d9c5385a8cf03ba412d762e7906b8cfea5ca31e90c20d8d8a0a804d7145042ecf3aaf6cef37650ae805438ba3460eb3942511b0d1fa997557932109c752c83f65a68dc1b01bc44bacdcc65c10fa8bd8f208cd0c52e"}, {0x20, 0x115, 0x1, "11275a737b3fe4f6e569b323f8d0"}, {0x108, 0x107, 0x8, "97c8f50d8c6247ef0ce633a9778cfc8c494a9015c0a543f07f844d423955da7777cb98798c20a159a50eef0f2107a15411e8ff0473779cca7047ad13dc7832bb3b297abc699024cb144363efa738c048cb63a2db15e5b05a0d0a0d1ca3dda7ebc6fb7feaed1ba40f7a63c9c4a443c51cb6d9c418c8b00f594379f90dd9ab442ef01809ccec76b8cd65d3db601143f0c83b82f4a139690567bc16d9cf1391cf8fe4dbefa9a7ae0ad255acadfd4c2b83d772e4f649f211d85003dcfd27a1be5154790f419b26cbf4e34547026b29b757508170137e8d0493988c55587d1bc622248513bd0826d9f96b96fcadafeb91665751675396617a"}, {0xd8, 0x10e, 0x1ff, "abc02dbfa29697cb7ddd49bf7a9edf44adb549ac13f6fcc23018499da5b44e2431c514d44d19b35c1f347477e7cc8e935e54cef74b425c263e01441667c0fa2da92e4fef8893717a883758312ff4f87dd7abbf86040b5a62934e538c8b5dd27537f28a69df61d390e5a84e78061e06b7cdeb4260801c74217266297b52e5c4f32484bcb24cf3bda41ec60552a15f07dc7b8f5a7cd1977647867fde7ddd9d8f2df581fe280d15b801c22c8ea37e918ceb9bb61601d6d60bf3cbab700faf4e934e326e"}], 0x5a0}}, {{&(0x7f0000005d00)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0x80, &(0x7f0000005e40)=[{&(0x7f0000005d80)="a620c7531f69b7f5b49a78d72258dcce8572528db20a0b01c6375d76a5989166f710602e96bb0b6a3ef8f96c2aaab1bc34a2288f78eb647943ac78fb65f58dabdbd8e8e68afcf356cf181155492b76300950659e4b1905e15f811b8af3d4bd91dc39402de462f25139a3cfd39f15a7065d69b799ba41290d4c29ad50a2ff74662ba9114b392a9e28c7bced8b630d067610f28d0b0bda4f19d5a863", 0x9b}], 0x1}}, {{&(0x7f0000005ec0)=@nfc={0x27, r15, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f0000006f40)=[{&(0x7f0000005f40)="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", 0x1000}], 0x1}}], 0x6, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000073c0)={&(0x7f0000007100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000007380)={&(0x7f0000007140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x154, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0xe9, 0x6, "b677e09bb12dac7d9d4afed1024ea15bae15667db697f47aa86f4b0b705488c7a496ef6ac8b99f1b2f4225c982b17ac3662dc6055571332408bc5727cb51b6b0cde4833daa8c94b6050dd065473957510d04875d99423d6b17a1948b76324ba73bdf0edfb6d6a164c1bb99814f822b0d94706644e1bb59b1a27222857682b7e93eda9bc9c46c10acdbdb6841eceb95f036bf9b2a59f87229cefe559ff59646059c50c9a76ec2f09ea6c582426b02601249640d2a84009da20775354137233b24b720c3f88bfd5bf58cd53f1f3164ba7c525645649ac8edefc3001e8edb8ba9ad1775d49c90"}, @NFTA_TABLE_USERDATA={0x16, 0x6, "d734ac36a332f325275a510d89fa3bc1bf57"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x78, 0x8, 0xa, 0x201, 0x0, 0x0, {0x8, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x3c, 0x7, 0x1, 0x0, "fec64d1a82636a0cf6247c435d98a392de261b0bbf8c005fa4064b1691312dc251e2881e1781e0d959f6af45e11246e9d6247d8a3182b994"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x22c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$netlink(r11, &(0x7f0000007400)={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc) sendmmsg(r10, &(0x7f0000007440), 0x0, 0x8c0) recvfrom$rxrpc(r10, &(0x7f0000007480)=""/194, 0xc2, 0x102, &(0x7f0000007580)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x9, @local, 0x7}}, 0x24) 870.139296ms ago: executing program 3 (id=1608): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='sched_process_fork\x00', r1}, 0x18) unshare(0x8040480) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r7 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r7, &(0x7f0000000040)={0x23, 0x7, 0x8, 0x6}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x1c, r6, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x13}, @void, @void}}}, 0x1c}}, 0x0) unshare(0x6a040000) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="28000000400007012bbd7000fedbdf008400"/32, @ANYRES32=r9, @ANYBLOB="04000800"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r10, &(0x7f0000000640)=[{&(0x7f00000011c0)="000000c3", 0x4}, {0x0, 0xfffffec3}, {&(0x7f0000000140)="df282030f97816377056", 0xa}], 0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0xfb, 0x53, 0x3, 0x0, @loopback, @mcast2={0xff, 0x5}, 0x8, 0x700, 0x7d, 0x3ff}}) ioctl$SIOCAX25OPTRT(r8, 0x89e7, &(0x7f00000001c0)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) 843.422508ms ago: executing program 2 (id=1609): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000001c0)=0x12, 0x180000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare(0x6a040000) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x40, &(0x7f0000000040)={'filter\x00', 0x0, [0x5, 0x3, 0x7, 0x9, 0xfffffffd]}, &(0x7f00000000c0)=0x54) socket$inet6(0xa, 0x80006, 0x7) 842.445365ms ago: executing program 4 (id=1610): socket$nl_netfilter(0x10, 0x3, 0xc) socket$qrtr(0x2a, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) socket$kcm(0x21, 0x2, 0x2) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) socket(0x10, 0x80002, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000440)='GPL\x00', 0x4, 0x54, &(0x7f0000000480)=""/84, 0x0, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r3], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) (async) socket$kcm(0x21, 0x2, 0x2) (async) pipe(&(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) pipe(&(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) (async) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040800) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) (async) socket(0x10, 0x80002, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000440)='GPL\x00', 0x4, 0x54, &(0x7f0000000480)=""/84, 0x0, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r3], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814) (async) 828.455871ms ago: executing program 1 (id=1611): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRESOCT=r0, @ANYBLOB="0000000008008322d5b32e4ecd669586744391e36bd8e3273aecf73ffd468a42c43f96aaeca095c672f0c34d918aca59cbb82d98bc8074c5599ab462289d775705089ec11efb5615b3a0fca864534081a41dfdb6e71e0ac4064b72bee219ccb5217f07c815e61fd062d53f125e3ff97af70d22448cb40b5b1da723d4c3b1201e8a6ff96a4faaade6ab10277c9ecdb0e70fb30889129cc190a0ce05f537becc99fb0b59f9dd3fd6f92ae573daa77890ff356ed30ce8a3f96da94d89a60ec07c7607ed235e29314e", @ANYRES32=r0], 0x24}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x9f) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@deltaction={0x74, 0x31, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0xfffffffffffffe32}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) sendmsg$netlink(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000d40)={0x10, 0x23, 0x100, 0x70bd26, 0x25dfdbfc}, 0x10}, {&(0x7f0000000f80)={0x10, 0x42, 0x800, 0x70bd2d, 0x25dfdbff}, 0x10}], 0x2, 0x0, 0x0, 0x10}, 0x40000090) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2f, &(0x7f0000000400), 0xa5e) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) unshare(0x22020400) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000580)="0f569b0cd7a7d4798cef21a3eb052defa33f5b2ad964e7b5dde3b3422204d909a7bd1c84f471f4c73133ba3473d865ae209547a1d4bb4407c13f5b19af460bca7d10060ddfdaac0754ac466d524cbe7c058e2a2ae2b9ea760e1e6feab62e15ca8d2b3e76cfe2eeb084522e1fbf565c86638bdbac293a540e063cbf3a0d61cd48fa7cb08fc5a7fbaff640df9de11c427c4414269db20e748fb26659fa901cea0cc1f4bca0a835a9f1c41f2d5eeb4d5e95f930477fe19b604ef827864cb666b7cf5974d2757a1700c466fe0168", 0xcc}, {&(0x7f0000000680)="c02c6b6af67042ac8a5533dfa2c259d05d2b4645a92d75396519e229fcfb020e18f3cd119d458de28194f19cd4b1f9f150a3af402b8788019690d499f1a48338f18a15d66436e140ff6f62741a638ea3c1de6981352377c52fa65b821c2feefea016629d270b0c1edb153c8487c596539f02bbba9597c14d8c3eaa740ddc5ce35d125808a9cce51791fbb652ef0c3d4c394cf086d013893a75d70580fcbb4ec8b0a513f7ddda701beeccc6724a023c460e4cf8b87965dd64ab3231326ff4e8ac486f30fe1563890cf440b066ebfc8e48a026419bd3b5980a320a728c857c70fefb0e0d81b5e83d6114", 0xe9}], 0x2}, 0x8100) bind$rose(r6, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000ffff29bd700005dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="117c010040440000400012800e0001006970366772657461700000002c000280140007000000000000000021fffffffffffffffe14000600ff010000000000000000000000000001"], 0x60}, 0x1, 0x0, 0x0, 0x24049810}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@local, 0xd, 0x2, 0x0, 0x8, 0xffff, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)=[0x8000000000000001, 0x7cc5, 0xd], 0x0, 0x101, 0x20000000000003bf}}, 0x40) ioctl$INCFS_IOC_FILL_BLOCKS(r8, 0x80106720, &(0x7f00000003c0)={0x3, &(0x7f0000000340)=[{0xc200, 0x60, &(0x7f0000000100)="cfd92f802d5b0cd2901260f42a900193eaab1a3c2b42eaa61b58e757ec8ff51075f19f8b1b35eec26921668adb5ddf0e63337543807f1d99186dd39fc7a90c3e86cd15cdca2c1a903c15426bc78bf9b6dec7c8d35f187104adff323493f48422", 0x1}, {0x4, 0xb0, &(0x7f00000001c0)="15b8ef5982c84bd478ae2c61200aa7552563be136e6244bbc0a427547e334208be68fee4da72e252db8cd5497041138dbe68c7777ec43aac91f08ede3ffbed574bdc6cb9b60b201eb217d2cf428225bd96afbe0680c82909992af5d684f9c0a39d93efc641daf89e6148f17d9f68eccbfac60cbbdf0b8617ace64e0a51cc91237b3a549b244ef5ed924737e834b2c2ac9c5147daf8a3bf063de5f362a6a99eeb007acfebf7a5e8a7808a60f7618cd097", 0x1, 0x1}, {0x7451, 0xb3, &(0x7f0000000280)="2956242bf5b0b9db4a7b26368265d3c465f990ba250b5ead2c5eaafd87ad18e6fbbe7ac0262c82e0e211024b8cf848952c6bd7332f614c1172ec5090f34b92a5e4d6355faf82bfe4c6076c0e45896196886d40d5370f03f576fe58d385f4e4529c24ed330422332efa2ce8418fc3a444c4edf8caf6c83b18f0603554c344c4b90c80c27723b5a217691b50ad2f428816399de05dc58dc35c6e57fb942c87ebe62ddf616f7f5012f52c616b364b225dd94498b9"}]}) 655.011295ms ago: executing program 4 (id=1612): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x8000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0xef}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000016}, 0x4048004) (async) sendto$packet(r2, &(0x7f0000000240)="4724b980ee941e0ad24e0ff3bcb135dcff9b75c36cd3785256093b492c8f7f336b7aa3e78775ef3f6fb84797d065419f30af6a95180042aa24f5055966ce39411c6f3d623ea80af2488e3388ecbefcf9323ced93c7c63e1d5ef169d411a70d8c8061c6d1c06fb9df817655389a0e9e94f3a69afb967a4938a33ed0bb3b3ec40d86e62df94a48ad6a1ea56fe8a317dab02b507b74e3aafdee025dd5f36e", 0x9d, 0x9100, &(0x7f0000000000)={0x11, 0x5, r3, 0x1, 0x81, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x14) (async) r4 = accept$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) unshare(0x20000400) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r8, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r9, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x83}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x9}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x50, r9, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040880}, 0x88000) r14 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r14, 0x0, 0x48f, &(0x7f0000000040)={0x0, @rand_addr, 0x0, 0x0, 'wrr\x00'}, 0x2c) (async) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) 654.497919ms ago: executing program 0 (id=1613): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000580)="aac6354efc0a7f516e24a40452449924", 0x10) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000480)={0xffffffff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x200, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000001}}}, 0x108) (async) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f00000009c0)) 643.844955ms ago: executing program 1 (id=1614): mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[], 0xfe33) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0xe4, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xe55}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}]}, @CTA_LABELS_MASK={0x14, 0x17, [0x8, 0x6, 0xe, 0x1]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}, @CTA_PROTOINFO={0x34, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x30, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xc6}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc}, @CTA_PROTOINFO_DCCP_STATE={0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x6}]}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xffff}]}}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x8d1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f00000027c0)=""/4096, &(0x7f0000000100)=0x1000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="0100", 0x2}], 0x1}, 0x240448c1) recvmsg(r6, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000380)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x59, r5}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000003c0)={0x0, @dev, @multicast2}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3ff}]}}]}, 0x48}}, 0x0) 577.414449ms ago: executing program 0 (id=1615): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x9, 0x4, 0x2, 0x2, 0x0, 0x70bd29, 0x25dfdbfe}, 0x10}}, 0x20000c04) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x98}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x200204) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1a}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0xfe, 0x1, 0x0, 0x0, "c6e83912ce2150c0"}}, 0x48}, 0x2}, 0x20000080) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800004, 0x4) bind$inet6(r5, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r5, 0x80000003) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000080)=0x3, 0x4) listen(r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500000000000071128d0009000a00180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000f7ffffffffffffff27527db50095000000000000002d1f5548dfa8fb720660224ee57d103727c37dca8e5c6c9dbf"], &(0x7f0000000040)='syzkaller\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x94) 527.531656ms ago: executing program 4 (id=1616): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNGETFILTER(r1, 0x801054db, 0x0) 448.275215ms ago: executing program 4 (id=1617): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x80000) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="4c366a4e8e80f6dc7f631e46acbb437b281a66", 0x13}], 0x1, &(0x7f0000000140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xe99}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x60}, 0x20004081) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10, 0xc0000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000280)={0x33, @multicast2, 0x4e24, 0x0, 'lblc\x00', 0x10, 0x10000, 0x3d}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x81}, {0x5, 0x12, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x226}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x607e}, {0x5, 0x12, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040041}, 0x4010) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x1, 0x4, 0xfffffffffffffffd, 0x2, 0x3]}, &(0x7f0000000540)=0x78) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@ptr={0x7}, @volatile={0x10, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x5f]}}, &(0x7f00000005c0)=""/14, 0x33, 0xe, 0x1, 0xfd, 0x10000, @value=r4}, 0x28) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x2, 0x18, 0x0, 0x2, 0x4, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0x7f, 0x0, 0x0, 0x70bd2c, 0x3507}]}, 0x20}}, 0x0) (async) r6 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000740), &(0x7f0000000780)=0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000008, 0x80010, r6, 0x92aee000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000840)=0x14) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4e23, 0x0, 0x4e24, 0x8001, 0x2, 0x80, 0x20, 0x3b, r9, 0xee01}, {0x40, 0x4, 0xfffffffffffffffa, 0x9, 0x600000000000000, 0x9, 0x5, 0x6}, {0x8, 0x1, 0x0, 0x6}, 0x7fff, 0x6e6bbe, 0x1, 0x0, 0x3, 0x3}, {{@in=@multicast2, 0x4d3, 0x32}, 0xa, @in=@multicast1, 0x34ff, 0x0, 0x3, 0x1, 0x6, 0x8, 0x7}}, 0xe8) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000009c0)={0x0}, &(0x7f0000000a00)=0xc) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x17}, @void, @val={0xc, 0x99, {0x0, 0x77}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7e}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_PID={0x8, 0x52, r10}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x73ae, 0x7d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x7d}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r8, 0x40047211, &(0x7f0000000b40)=0x20) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c00)={0x280, r11, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc190}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6839}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x319}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5f0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4647}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x22fb}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NODE={0xcc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "2c76bfe9f64ec905b5383f89bb37e9be3b1ee3c3be3a627244b0101eb9857fffeed077516b2f479d0fd264a7f7980c1b7f1923acb23657d6a42ea8094db49ef75b2f74c5f12c1794aa5b744b72720814c6ace4e955ac52598a089df62c61408cc4bb58f4ee8de8be82a55bf4d0db9227403e580c04645145b2b0fcc3473299228f9f0969b732b5219649f6a19ada05d854a2d22d65d516e7de6ee110d978681f21a8498111a54f6127ce14161b6f473833f4418e54"}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f00)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000f40), 0x104043, 0x0) (async) socket$inet6(0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000f80), r2) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x20, r12, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4094}, 0x4) 429.927972ms ago: executing program 1 (id=1618): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000440)=[{r6, 0x40}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) write(0xffffffffffffffff, 0x0, 0x0) close(r5) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRESOCT=r4, @ANYBLOB="000800000000000003000000000000000000000000000000fdffff"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x4c, 0x12, 0x0, 0x70bd29, 0x25dfdc00, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x7], [0x3, 0xd, 0x40000008, 0x9], 0x0, [0x0, 0x3]}, 0x104, 0xb}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_rxfh={0x47, 0x4085, 0x2, 0x7983, 0xf0, "260520", 0xdc, [0x8, 0x7ff]}}) 335.350302ms ago: executing program 0 (id=1619): socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'batadv0\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x1}}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @multicast2}, &(0x7f0000000340)=0xc) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x4) (async) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) (async) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000000)=0x6, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) (async) setsockopt$inet_int(r6, 0x0, 0x12, &(0x7f00000000c0)=0x3, 0x4) (async) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x540, 0x4) sendmmsg$inet(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000000000000000ed"], 0x10}}], 0x1, 0x0) (async) recvmsg(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40002100) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000440)={r5, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) (async) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="400096040a000200aaaaaaaaaa0c00000600050001000000d2ef654a7ee8871a5b3622855039c52d783adcf77bbb5eb1605b1d163afcc0b6adcbb6dab55559ad4eb211ba5dee4c5b2fb840dfe7d100b0c3110fd655c973dc618131ee539e5c7d7be4517c9dbdb6d07eb418316644ea063cc23c2fe49a179d2f2c5f6ef3a6f9ef7e6a1063fb89e7f187a9c6fc679fa1d5b6597155ac20c4091421ec53063bcfb8796e8d227ebdd1d6965f5f08268653baa32a230a00ab8466bc83a8759fabe8db2bfbce"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x40041) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf2505000000100001800c0002800800040002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) 309.714219ms ago: executing program 0 (id=1620): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x940}, 0x4004004) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) getsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @private0}, &(0x7f00000003c0)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000400)={0x6, 0x3, 0x4, 0x10}, &(0x7f0000000440)=0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000580)={0x0, @remote, @local}, &(0x7f00000005c0)=0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x890}, 0x4000000) 277.493552ms ago: executing program 4 (id=1621): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000080)="db0f2cad", &(0x7f00000000c0)=@tcp=r1, 0x1}, 0x20) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r6, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d6000/0x1000)=nil, 0x1000, 0x2000002, 0x13, r8, 0x12e9d000) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x2e36, 0x10000}) 186.102147ms ago: executing program 0 (id=1622): unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ppoll(&(0x7f0000000600)=[{r0, 0xc40c}], 0x1, &(0x7f0000000640)={0x0, 0x3938700}, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x2, 0x40, 0x7f, 0x6, 0xfe, @multicast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 87.249948ms ago: executing program 4 (id=1623): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x60, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) accept4$packet(r6, 0x0, 0x0, 0x80000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620d97ff00000000a369a8d4f9f028d2ccea71101e000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000001c0)=r9, 0x4) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000001c0)={'veth0_to_hsr\x00', &(0x7f0000000580)=@ethtool_coalesce={0xf, 0x5, 0xe, 0x5, 0xd3, 0x1, 0x5ea31d8f, 0xbde, 0x745afeb9, 0x3, 0x86, 0x2, 0x4d, 0x4, 0x4, 0xf, 0x8, 0x8, 0x1, 0x9, 0x3, 0x4b}}) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='caif0\x00', 0x10) bind$tipc(r11, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x2}, 0x2}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x3}, 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000400)=""/116, 0x301000, 0x0, 0xfffffe00, 0x2}, 0x20) (async) sendmsg$tipc(r11, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x4, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c001480080003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) sendmsg$nl_xfrm(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001900)=ANY=[@ANYBLOB="7802000016000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00$\x00\t\x00\b\x00'], 0x278}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="39488312eb481c1c863cc27548e6632ca02a24fe20b9cfe8a1f1c4cab5ea7c5912b1fdd2c7c40cb5dfff0fa10f78e1b55af87afb6d71c6c95a8a004a1ead202dbf39cd40995215c3c903ecc2aa832a50171c8fe35bf6c3c5a92dfaf7396db463325559e6e5ffa631fa88b8c866ca42272d1ee75e67db290d9f17c111afd95d122b141e3076b2c98a828032ccbee9a7e55d412f174dcc4358f93587"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280050002000000000008000340000000000800014000000013080004400000000008000540000040"], 0x94}}, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 4.528808ms ago: executing program 1 (id=1624): unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000100", @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000bbdabbbbbbbbaaaaaaaaaaaa08060001080006040001"], 0x2e) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0xa8, 0x19, 0x200, 0x70bd2c, 0x25dfdbfb, {0x11}, [@generic="8a0499d1e529ac4902826b85c271f408c20e6bb3e1194c4e0cc96b5538fb18863b6f79cbb58394310ab70170e8d7bd27e846325c529c54b7cd03b4067bae9a87c6206892a41a124d8369ce461589c41627358bf87eef9c2a2adc502500ecb49c7239a0f062eb764012e93eee95d10f209f55f18c122dd5d7f75bf45ab162626ecb2e4da743105f1dee91c74a1d9ee12dd9"]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c800}, 0x5) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000), 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 0s ago: executing program 0 (id=1625): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (fail_nth: 13) kernel console output (not intermixed with test programs): sion 307 out of range max 1 [ 135.777646][ T6100] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.794795][ T6100] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.266221][ T8387] syzkaller0: entered promiscuous mode [ 136.273502][ T8387] syzkaller0: entered allmulticast mode [ 137.158372][ T8416] openvswitch: netlink: Duplicate or invalid key (type 0). [ 137.172037][ T8416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.064006][ T130] tipc: Node number set to 4151914838 [ 138.347173][ T8443] __nla_validate_parse: 1 callbacks suppressed [ 138.347190][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.623'. [ 138.379227][ T8443] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 138.441469][ T8443] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.451368][ T8443] bond0: (slave team0): Enslaving as an active interface with an up link [ 138.460311][ T8445] tc_dump_action: action bad kind [ 138.918911][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 138.931893][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 138.951615][ T8482] netlink: 'syz.4.636': attribute type 13 has an invalid length. [ 139.030379][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.636'. [ 139.465352][ T8513] netlink: 96 bytes leftover after parsing attributes in process `syz.3.644'. [ 140.087111][ T8554] netlink: 268 bytes leftover after parsing attributes in process `syz.1.658'. [ 140.266044][ T8563] wg1 speed is unknown, defaulting to 1000 [ 140.289147][ T8563] lo speed is unknown, defaulting to 1000 [ 140.341313][ T8566] wg1 speed is unknown, defaulting to 1000 [ 140.400202][ T8566] lo speed is unknown, defaulting to 1000 [ 140.572617][ T8570] IPv6: Can't replace route, no match found [ 141.069276][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 141.081014][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 141.169924][ T8607] wg1 speed is unknown, defaulting to 1000 [ 141.192020][ T8607] lo speed is unknown, defaulting to 1000 [ 141.905137][ T8633] netlink: 'syz.3.682': attribute type 4 has an invalid length. [ 142.110292][ T8650] tipc: Enabling of bearer rejected, already enabled [ 142.121101][ T8649] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 142.130502][ T8648] netlink: 'syz.3.685': attribute type 16 has an invalid length. [ 142.220440][ T8655] tap0: tun_chr_ioctl cmd 2148553947 [ 142.227241][ T8654] tap0: tun_chr_ioctl cmd 2147767521 [ 142.235421][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'. [ 142.260652][ T8658] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.688'. [ 142.446415][ T8669] wg1 speed is unknown, defaulting to 1000 [ 142.478103][ T8669] lo speed is unknown, defaulting to 1000 [ 143.123426][ T8714] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 143.143941][ T8714] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 143.358474][ T8727] __nla_validate_parse: 2 callbacks suppressed [ 143.358495][ T8727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.701'. [ 143.700134][ T8735] syzkaller0: entered promiscuous mode [ 143.737646][ T8735] syzkaller0: entered allmulticast mode [ 143.881709][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.705'. [ 143.912898][ T8749] netlink: 408 bytes leftover after parsing attributes in process `syz.1.707'. [ 143.914221][ T8746] bridge_slave_1: left allmulticast mode [ 143.931093][ T8746] bridge_slave_1: left promiscuous mode [ 143.937242][ T8746] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.955617][ T8746] bridge_slave_0: left allmulticast mode [ 143.973513][ T8746] bridge_slave_0: left promiscuous mode [ 143.990288][ T8746] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.054479][ T8757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.708'. [ 144.395271][ T8775] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 144.495787][ T8779] xt_HMARK: proto mask must be zero with L3 mode [ 144.783892][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 144.801928][ T8799] macvlan2: entered promiscuous mode [ 144.823943][ T8799] tipc: Enabled bearer , priority 0 [ 144.841531][ T8799] syzkaller0: entered promiscuous mode [ 144.848592][ T8799] syzkaller0: entered allmulticast mode [ 144.883363][ T8799] tipc: Resetting bearer [ 144.897139][ T8798] tipc: Resetting bearer [ 144.930088][ T8798] tipc: Disabling bearer [ 144.949067][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 144.966898][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 144.995690][ T8807] syz.0.720 uses old SIOCAX25GETINFO [ 145.153503][ T8825] netlink: 136 bytes leftover after parsing attributes in process `syz.0.727'. [ 145.187252][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.203349][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.279924][ T8831] veth1_macvtap: entered promiscuous mode [ 145.286657][ T8831] macsec0: entered promiscuous mode [ 145.292312][ T8831] macsec0: entered allmulticast mode [ 145.300295][ T8831] veth1_macvtap: entered allmulticast mode [ 145.326740][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 145.335669][ T8831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.730'. [ 145.454789][ T8833] netlink: 'syz.1.731': attribute type 10 has an invalid length. [ 145.516483][ T8833] team0: Device ipvlan1 failed to register rx_handler [ 145.580500][ T8846] netlink: 'syz.0.735': attribute type 14 has an invalid length. [ 145.594025][ T8846] netlink: 'syz.0.735': attribute type 12 has an invalid length. [ 145.612289][ T8846] netlink: 'syz.0.735': attribute type 1 has an invalid length. [ 145.639533][ T8846] netlink: 'syz.0.735': attribute type 1 has an invalid length. [ 145.672246][ T8847] delete_channel: no stack [ 145.757232][ T8855] mac80211_hwsim hwsim8 wlan1: Device is already in use. [ 145.872264][ T8858] netlink: 'syz.0.739': attribute type 1 has an invalid length. [ 145.944484][ T8868] wg1 speed is unknown, defaulting to 1000 [ 145.952416][ T8868] lo speed is unknown, defaulting to 1000 [ 146.293975][ T8888] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 146.475777][ T8890] bond2: ARP target 9.0.0.0 is already present [ 146.482652][ T8890] bond2: option arp_ip_target: invalid value (9) [ 146.495759][ T8890] bond2 (unregistering): Released all slaves [ 146.567191][ T8898] wg1 speed is unknown, defaulting to 1000 [ 146.575432][ T8898] lo speed is unknown, defaulting to 1000 [ 147.259754][ T8932] xt_TPROXY: Can be used only with -p tcp or -p udp [ 147.461879][ T8945] netlink: 'syz.0.763': attribute type 1 has an invalid length. [ 147.515500][ T8945] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.581865][ T8945] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96 [ 147.627400][ T8945] tipc: Enabled bearer , priority 0 [ 147.649245][ T8945] syzkaller0: entered promiscuous mode [ 147.663673][ T8945] syzkaller0: entered allmulticast mode [ 147.702378][ T8942] tipc: Resetting bearer [ 147.740805][ T8942] tipc: Disabling bearer [ 147.763264][ T8963] nbd: socks must be embedded in a SOCK_ITEM attr [ 147.885838][ T8968] wg1 speed is unknown, defaulting to 1000 [ 147.901054][ T8968] lo speed is unknown, defaulting to 1000 [ 148.398820][ T8991] __nla_validate_parse: 13 callbacks suppressed [ 148.398838][ T8991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.775'. [ 148.526824][ T8995] wg1 speed is unknown, defaulting to 1000 [ 148.534706][ T8995] lo speed is unknown, defaulting to 1000 [ 148.683150][ T9005] netlink: 'syz.0.777': attribute type 4 has an invalid length. [ 148.766497][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'. [ 148.889665][ T9017] nbd: must specify a device to reconfigure [ 148.902898][ T9018] netlink: 'syz.2.783': attribute type 1 has an invalid length. [ 149.016041][ T9018] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.043367][ T9019] vlan3: entered promiscuous mode [ 149.049064][ T9019] bond3: entered promiscuous mode [ 149.054788][ T9019] vlan3: entered allmulticast mode [ 149.060663][ T9019] bond3: entered allmulticast mode [ 149.079171][ T9014] vxcan2: entered allmulticast mode [ 149.105589][ T9023] netlink: 'syz.0.784': attribute type 5 has an invalid length. [ 149.257912][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.786'. [ 149.415512][ T9040] netlink: 136 bytes leftover after parsing attributes in process `syz.2.787'. [ 149.790463][ T9060] syzkaller0: entered promiscuous mode [ 149.806228][ T9060] syzkaller0: entered allmulticast mode [ 149.847933][ T9067] siw: device registration error -23 [ 149.858870][ T9068] SET target dimension over the limit! [ 150.166380][ T9080] wg1 speed is unknown, defaulting to 1000 [ 150.219137][ T9080] lo speed is unknown, defaulting to 1000 [ 150.228670][ T9084] netlink: 124 bytes leftover after parsing attributes in process `syz.0.801'. [ 150.438709][ T9092] netlink: 36 bytes leftover after parsing attributes in process `syz.3.805'. [ 150.618689][ T9102] netlink: 32 bytes leftover after parsing attributes in process `syz.0.806'. [ 150.642644][ T9102] validate_nla: 1 callbacks suppressed [ 150.642660][ T9102] netlink: 'syz.0.806': attribute type 10 has an invalid length. [ 150.661786][ T9102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.806'. [ 150.679387][ T9102] dummy0: entered promiscuous mode [ 150.689943][ T9102] bridge0: port 3(dummy0) entered blocking state [ 150.706081][ T9102] bridge0: port 3(dummy0) entered disabled state [ 150.726233][ T9102] dummy0: entered allmulticast mode [ 150.736785][ T9102] bridge0: port 3(dummy0) entered blocking state [ 150.743607][ T9102] bridge0: port 3(dummy0) entered forwarding state [ 151.010644][ T9118] wg1 speed is unknown, defaulting to 1000 [ 151.045484][ T9118] lo speed is unknown, defaulting to 1000 [ 151.725407][ T9126] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 151.738873][ T9130] batadv_slave_0: Caught tx_queue_len zero misconfig [ 152.232628][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 152.252771][ T9171] netlink: 'syz.0.823': attribute type 1 has an invalid length. [ 152.260325][ T9172] wg1 speed is unknown, defaulting to 1000 [ 152.260638][ T9171] netlink: 224 bytes leftover after parsing attributes in process `syz.0.823'. [ 152.268320][ T9172] lo speed is unknown, defaulting to 1000 [ 152.721601][ T9198] x_tables: duplicate underflow at hook 1 [ 152.792144][ T9198] x_tables: duplicate underflow at hook 1 [ 153.354851][ T30] audit: type=1800 audit(1768645020.463:3): pid=9393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.836" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 153.358267][ T9393] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 153.387750][ T9393] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 153.397870][ T9393] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 153.426457][ T9393] syz.3.836 (9393) used greatest stack depth: 18144 bytes left [ 153.454732][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 153.466463][ T9407] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8 [ 153.521951][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 153.604298][ T9429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.839'. [ 153.615491][ T9429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.839'. [ 153.681876][ T9429] bond0: entered promiscuous mode [ 153.687186][ T9429] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 153.705255][ T9429] bond0: left promiscuous mode [ 153.710573][ T9429] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 154.168761][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 154.272379][ T9456] netlink: 'syz.1.847': attribute type 13 has an invalid length. [ 154.716438][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 154.823927][ T9456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.881246][ T9456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.278005][ T9484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.853'. [ 155.503538][ T5959] lo speed is unknown, defaulting to 1000 [ 155.516079][ T5959] syz2: Port: 1 Link DOWN [ 155.541621][ T796] wg1 speed is unknown, defaulting to 1000 [ 155.548004][ T796] syz0: Port: 1 Link DOWN [ 155.552513][ T5950] netdevsim netdevsim1 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.570877][ T5950] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.619360][ T5950] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.636514][ T5950] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.646686][ T5950] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.657058][ T5950] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.677407][ T5950] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.695030][ T5950] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.721671][ T9486] wg1 speed is unknown, defaulting to 1000 [ 155.753440][ T9486] lo speed is unknown, defaulting to 1000 [ 156.086455][ T9492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.855'. [ 156.665747][ T9551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.870'. [ 157.362173][ T9572] Bluetooth: MGMT ver 1.23 [ 157.584960][ T9583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.877'. [ 158.027017][ T9610] xt_hashlimit: overflow, try lower: 3/0 [ 158.067401][ T9610] gretap0: entered promiscuous mode [ 158.080714][ T9614] dummy0: left allmulticast mode [ 158.085865][ T9614] bridge0: port 3(dummy0) entered disabled state [ 158.101850][ T9614] bridge_slave_1: left allmulticast mode [ 158.111513][ T9614] bridge_slave_1: left promiscuous mode [ 158.120375][ T9614] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.136757][ T9614] bridge_slave_0: left allmulticast mode [ 158.143832][ T9614] bridge_slave_0: left promiscuous mode [ 158.149784][ T9614] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.229144][ T9625] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 158.473211][ T9630] __nla_validate_parse: 4 callbacks suppressed [ 158.473231][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 158.495865][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 158.661908][ T9630] xfrm0: entered promiscuous mode [ 158.667163][ T9630] xfrm0: entered allmulticast mode [ 158.853512][ T3457] tipc: Subscription rejected, illegal request [ 158.904523][ T9644] sctp: [Deprecated]: syz.0.890 (pid 9644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.904523][ T9644] Use struct sctp_sack_info instead [ 159.012828][ T9648] wg1 speed is unknown, defaulting to 1000 [ 159.023786][ T9648] lo speed is unknown, defaulting to 1000 [ 159.084741][ T9652] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.139966][ T9652] netlink: 'syz.3.891': attribute type 3 has an invalid length. [ 159.168078][ T9652] netlink: 'syz.3.891': attribute type 16 has an invalid length. [ 159.197673][ T9652] netlink: 132 bytes leftover after parsing attributes in process `syz.3.891'. [ 159.287122][ T9662] netlink: 'syz.2.894': attribute type 1 has an invalid length. [ 159.320978][ T9662] netlink: 1168 bytes leftover after parsing attributes in process `syz.2.894'. [ 159.426709][ T9665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.895'. [ 159.455225][ T9665] ip6tnl2: entered allmulticast mode [ 159.475679][ T9665] netlink: 14 bytes leftover after parsing attributes in process `syz.2.895'. [ 159.970291][ T9681] sit0: left promiscuous mode [ 159.982770][ T9681] netdevsim netdevsim1 : left allmulticast mode [ 160.014297][ T9681] geneve2: left promiscuous mode [ 160.032793][ T9679] netlink: 96 bytes leftover after parsing attributes in process `syz.2.897'. [ 160.101539][ T9682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.137239][ T9681] tipc: MTU too low for tipc bearer [ 160.149028][ T1110] tipc: Subscription rejected, illegal request [ 160.379734][ T9692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.499850][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.907'. [ 160.519254][ T9712] FAULT_INJECTION: forcing a failure. [ 160.519254][ T9712] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 160.549306][ T9709] bond2: Invalid ad_actor_system MAC address. [ 160.567167][ T9709] bond2: option ad_actor_system: invalid value (7) [ 160.577666][ T9712] CPU: 1 UID: 0 PID: 9712 Comm: syz.0.908 Not tainted syzkaller #0 PREEMPT(full) [ 160.577692][ T9712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.577709][ T9712] Call Trace: [ 160.577717][ T9712] [ 160.577725][ T9712] dump_stack_lvl+0xe8/0x150 [ 160.577749][ T9712] should_fail_ex+0x414/0x560 [ 160.577779][ T9712] _copy_from_user+0x2d/0xb0 [ 160.577799][ T9712] ___sys_sendmsg+0x158/0x2a0 [ 160.577822][ T9712] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.577871][ T9712] ? __fget_files+0x2a/0x420 [ 160.577889][ T9712] ? __fget_files+0x3a0/0x420 [ 160.577918][ T9712] __x64_sys_sendmsg+0x19b/0x260 [ 160.577942][ T9712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.577970][ T9712] ? __pfx_ksys_write+0x10/0x10 [ 160.577996][ T9712] do_syscall_64+0xec/0xf80 [ 160.578016][ T9712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.578031][ T9712] ? trace_irq_disable+0x37/0x100 [ 160.578058][ T9712] ? clear_bhb_loop+0x60/0xb0 [ 160.578077][ T9712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.578091][ T9712] RIP: 0033:0x7fc2cbb8f749 [ 160.578110][ T9712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.578123][ T9712] RSP: 002b:00007fc2cca8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.578143][ T9712] RAX: ffffffffffffffda RBX: 00007fc2cbde5fa0 RCX: 00007fc2cbb8f749 [ 160.578154][ T9712] RDX: 000000000000fdff RSI: 0000200000000100 RDI: 0000000000000003 [ 160.578164][ T9712] RBP: 00007fc2cca8d090 R08: 0000000000000000 R09: 0000000000000000 [ 160.578174][ T9712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.578184][ T9712] R13: 00007fc2cbde6038 R14: 00007fc2cbde5fa0 R15: 00007ffdff20c1e8 [ 160.578213][ T9712] [ 160.783918][ T9709] bond2 (unregistering): Released all slaves [ 161.018420][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.909'. [ 161.047700][ T9721] netlink: 'syz.0.909': attribute type 1 has an invalid length. [ 161.172687][ T9732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.909'. [ 161.206750][ T9732] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 161.290683][ T60] tipc: Subscription rejected, illegal request [ 161.543848][ T9755] FAULT_INJECTION: forcing a failure. [ 161.543848][ T9755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.577975][ T9755] CPU: 0 UID: 0 PID: 9755 Comm: syz.4.920 Not tainted syzkaller #0 PREEMPT(full) [ 161.578001][ T9755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.578011][ T9755] Call Trace: [ 161.578019][ T9755] [ 161.578027][ T9755] dump_stack_lvl+0xe8/0x150 [ 161.578053][ T9755] should_fail_ex+0x414/0x560 [ 161.578084][ T9755] _copy_from_user+0x2d/0xb0 [ 161.578105][ T9755] __copy_msghdr+0x3c5/0x5b0 [ 161.578130][ T9755] ___sys_sendmsg+0x1a5/0x2a0 [ 161.578153][ T9755] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.578215][ T9755] ? __fget_files+0x2a/0x420 [ 161.578235][ T9755] ? __fget_files+0x3a0/0x420 [ 161.578264][ T9755] __x64_sys_sendmsg+0x19b/0x260 [ 161.578288][ T9755] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.578317][ T9755] ? __pfx_ksys_write+0x10/0x10 [ 161.578345][ T9755] do_syscall_64+0xec/0xf80 [ 161.578365][ T9755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.578381][ T9755] ? trace_irq_disable+0x37/0x100 [ 161.578401][ T9755] ? clear_bhb_loop+0x60/0xb0 [ 161.578421][ T9755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.578437][ T9755] RIP: 0033:0x7f4df198f749 [ 161.578453][ T9755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.578467][ T9755] RSP: 002b:00007f4df2893038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.578487][ T9755] RAX: ffffffffffffffda RBX: 00007f4df1be5fa0 RCX: 00007f4df198f749 [ 161.578499][ T9755] RDX: 000000000000fdff RSI: 0000200000000100 RDI: 0000000000000003 [ 161.578511][ T9755] RBP: 00007f4df2893090 R08: 0000000000000000 R09: 0000000000000000 [ 161.578521][ T9755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.578531][ T9755] R13: 00007f4df1be6038 R14: 00007f4df1be5fa0 R15: 00007fffbaadca78 [ 161.578560][ T9755] [ 161.862076][ T30] audit: type=1800 audit(1768645028.953:4): pid=9762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.923" name="memory.events" dev="tmpfs" ino=1041 res=0 errno=0 [ 161.959148][ T9764] wg1 speed is unknown, defaulting to 1000 [ 162.011428][ T9764] lo speed is unknown, defaulting to 1000 [ 162.194440][ T9776] team_slave_0: entered promiscuous mode [ 162.200488][ T9776] team_slave_1: entered promiscuous mode [ 162.214946][ T9776] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.324709][ T5950] tipc: Subscription rejected, illegal request [ 162.574635][ T9793] syzkaller1: entered promiscuous mode [ 162.599380][ T9793] syzkaller1: entered allmulticast mode [ 162.606342][ T9801] FAULT_INJECTION: forcing a failure. [ 162.606342][ T9801] name failslab, interval 1, probability 0, space 0, times 1 [ 162.619217][ T9801] CPU: 1 UID: 0 PID: 9801 Comm: syz.4.933 Not tainted syzkaller #0 PREEMPT(full) [ 162.619240][ T9801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.619250][ T9801] Call Trace: [ 162.619256][ T9801] [ 162.619263][ T9801] dump_stack_lvl+0xe8/0x150 [ 162.619288][ T9801] should_fail_ex+0x414/0x560 [ 162.619319][ T9801] should_failslab+0xa8/0x100 [ 162.619340][ T9801] ? __pfx_ip6_dst_gc+0x10/0x10 [ 162.619359][ T9801] kmem_cache_alloc_noprof+0x88/0x710 [ 162.619381][ T9801] ? ip6_pol_route+0x161/0x11a0 [ 162.619399][ T9801] ? dst_alloc+0x105/0x170 [ 162.619419][ T9801] ? __pfx_ip6_dst_gc+0x10/0x10 [ 162.619435][ T9801] dst_alloc+0x105/0x170 [ 162.619462][ T9801] ip6_pol_route+0xa28/0x11a0 [ 162.619481][ T9801] ? ip6_pol_route+0x161/0x11a0 [ 162.619504][ T9801] ? __pfx_ip6_pol_route+0x10/0x10 [ 162.619520][ T9801] ? __lock_acquire+0x6b6/0x2cf0 [ 162.619542][ T9801] ? __pfx_ip6_compressed_string+0x10/0x10 [ 162.619561][ T9801] ? __lock_acquire+0x6b6/0x2cf0 [ 162.619582][ T9801] fib6_rule_lookup+0x348/0x6f0 [ 162.619606][ T9801] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 162.619626][ T9801] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 162.619679][ T9801] ? ip6_route_output_flags+0x2e/0x5d0 [ 162.619701][ T9801] ? ip6_route_output_flags+0x2e/0x5d0 [ 162.619731][ T9801] ip6_route_output_flags+0x364/0x5d0 [ 162.619751][ T9801] ? ip6_route_output_flags+0x2e/0x5d0 [ 162.619774][ T9801] ip6_dst_lookup_tail+0x1ae/0x1510 [ 162.619810][ T9801] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 162.619829][ T9801] ? sk_dst_check+0x25/0x480 [ 162.619850][ T9801] ? sk_dst_check+0x25/0x480 [ 162.619871][ T9801] ? sk_dst_check+0x25/0x480 [ 162.619884][ T9801] ? sk_dst_check+0x30e/0x480 [ 162.619902][ T9801] ip6_sk_dst_lookup_flow+0x73d/0x9b0 [ 162.619925][ T9801] ? udpv6_sendmsg+0x179a/0x2510 [ 162.619951][ T9801] udpv6_sendmsg+0x1997/0x2510 [ 162.619980][ T9801] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 162.620007][ T9801] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 162.620037][ T9801] ? ip6_datagram_release_cb+0x7c/0x550 [ 162.620084][ T9801] ? lockdep_hardirqs_on+0x7b/0x110 [ 162.620104][ T9801] ? inet_send_prepare+0x1b9/0x270 [ 162.620125][ T9801] ? __local_bh_enable_ip+0xd0/0x130 [ 162.620141][ T9801] ? inet_send_prepare+0x1b9/0x270 [ 162.620167][ T9801] ? inet6_sendmsg+0xe4/0x120 [ 162.620185][ T9801] __sock_sendmsg+0xe5/0x270 [ 162.620210][ T9801] ____sys_sendmsg+0x505/0x820 [ 162.620234][ T9801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.620261][ T9801] ? import_iovec+0x74/0xa0 [ 162.620283][ T9801] ___sys_sendmsg+0x21f/0x2a0 [ 162.620304][ T9801] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.620356][ T9801] ? __fget_files+0x2a/0x420 [ 162.620376][ T9801] ? __fget_files+0x3a0/0x420 [ 162.620406][ T9801] __x64_sys_sendmsg+0x19b/0x260 [ 162.620431][ T9801] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.620461][ T9801] ? __pfx_ksys_write+0x10/0x10 [ 162.620490][ T9801] do_syscall_64+0xec/0xf80 [ 162.620509][ T9801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.620525][ T9801] ? trace_irq_disable+0x37/0x100 [ 162.620544][ T9801] ? clear_bhb_loop+0x60/0xb0 [ 162.620565][ T9801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.620581][ T9801] RIP: 0033:0x7f4df198f749 [ 162.620598][ T9801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.620611][ T9801] RSP: 002b:00007f4df2893038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.620638][ T9801] RAX: ffffffffffffffda RBX: 00007f4df1be5fa0 RCX: 00007f4df198f749 [ 162.620650][ T9801] RDX: 000000000000fdff RSI: 0000200000000100 RDI: 0000000000000003 [ 162.620659][ T9801] RBP: 00007f4df2893090 R08: 0000000000000000 R09: 0000000000000000 [ 162.620670][ T9801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.620679][ T9801] R13: 00007f4df1be6038 R14: 00007f4df1be5fa0 R15: 00007fffbaadca78 [ 162.620708][ T9801] [ 163.074620][ T5821] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 163.086174][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 163.086199][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.086209][ T5821] Call Trace: [ 163.086217][ T5821] [ 163.086224][ T5821] dump_stack_lvl+0xe8/0x150 [ 163.086252][ T5821] dump_header+0xd4/0x4c0 [ 163.086274][ T5821] oom_kill_process+0x263/0x800 [ 163.086295][ T5821] out_of_memory+0xf0c/0x12b0 [ 163.086332][ T5821] ? __pfx_out_of_memory+0x10/0x10 [ 163.086366][ T5821] mem_cgroup_out_of_memory+0x145/0x240 [ 163.086390][ T5821] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 163.086422][ T5821] ? _raw_spin_unlock+0x28/0x50 [ 163.086440][ T5821] ? memcg1_oom_prepare+0x37f/0x450 [ 163.086459][ T5821] try_charge_memcg+0xde4/0x1280 [ 163.086494][ T5821] ? __pfx_try_charge_memcg+0x10/0x10 [ 163.086514][ T5821] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 163.086546][ T5821] charge_memcg+0x9f/0x180 [ 163.086573][ T5821] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 163.086590][ T5821] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 163.086612][ T5821] __read_swap_cache_async+0x212/0x480 [ 163.086642][ T5821] swap_cluster_readahead+0x336/0x630 [ 163.086671][ T5821] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 163.086707][ T5821] ? get_vma_policy+0x27c/0x3c0 [ 163.086731][ T5821] swapin_readahead+0x189/0xc60 [ 163.086752][ T5821] ? finish_task_switch+0x162/0x940 [ 163.086779][ T5821] ? swap_table_get+0x1e/0x260 [ 163.086805][ T5821] ? __pfx_swapin_readahead+0x10/0x10 [ 163.086828][ T5821] ? swap_table_get+0x1e/0x260 [ 163.086848][ T5821] ? swap_table_get+0x1e/0x260 [ 163.086866][ T5821] ? swap_table_get+0x1e/0x260 [ 163.086888][ T5821] ? swap_table_get+0x216/0x260 [ 163.086910][ T5821] ? swap_cache_get_folio+0x51c/0x530 [ 163.086939][ T5821] do_swap_page+0x837/0x5c70 [ 163.086967][ T5821] ? __lock_acquire+0x6b6/0x2cf0 [ 163.086992][ T5821] ? ___pte_offset_map+0x29/0x240 [ 163.087019][ T5821] ? do_swap_page+0x17d/0x5c70 [ 163.087039][ T5821] ? __pfx_do_swap_page+0x10/0x10 [ 163.087061][ T5821] ? __lock_acquire+0x6b6/0x2cf0 [ 163.087077][ T5821] ? __pfx_default_wake_function+0x10/0x10 [ 163.087103][ T5821] ? ___pte_offset_map+0x1ae/0x240 [ 163.087130][ T5821] ? pte_offset_map_rw_nolock+0xea/0x160 [ 163.087156][ T5821] handle_mm_fault+0x1277/0x32b0 [ 163.087194][ T5821] ? handle_mm_fault+0xdb/0x32b0 [ 163.087223][ T5821] ? __pfx_handle_mm_fault+0x10/0x10 [ 163.087241][ T5821] ? lock_vma_under_rcu+0x42c/0x4a0 [ 163.087289][ T5821] do_user_addr_fault+0xa7c/0x1380 [ 163.087314][ T5821] ? rcu_is_watching+0x15/0xb0 [ 163.087334][ T5821] ? trace_page_fault_user+0x84/0x1c0 [ 163.087350][ T5821] exc_page_fault+0x71/0xd0 [ 163.087368][ T5821] asm_exc_page_fault+0x26/0x30 [ 163.087383][ T5821] RIP: 0033:0x7f31105c2008 [ 163.087399][ T5821] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 163.087412][ T5821] RSP: 002b:00007ffefc82e7c0 EFLAGS: 00010293 [ 163.087427][ T5821] RAX: 0000000000000000 RBX: 0000000000000245 RCX: 00007f31105c2005 [ 163.087437][ T5821] RDX: 00007ffefc82e800 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.087447][ T5821] RBP: 00007ffefc82e86c R08: 0000000000000000 R09: 0000000000000000 [ 163.087456][ T5821] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 163.087464][ T5821] R13: 00000000000927c0 R14: 00000000000273f0 R15: 00007ffefc82e8c0 [ 163.087495][ T5821] [ 163.428836][ T5821] memory: usage 307200kB, limit 307200kB, failcnt 423 [ 163.435633][ T5821] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 163.443681][ T5821] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 163.451061][ T5821] Memory cgroup stats for /syz2: [ 163.451541][ T5821] cache 0 [ 163.459669][ T5821] rss 0 [ 163.462435][ T5821] rss_huge 0 [ 163.465635][ T5821] shmem 0 [ 163.468707][ T5821] mapped_file 0 [ 163.472247][ T5821] dirty 0 [ 163.475194][ T5821] writeback 0 [ 163.478614][ T5821] workingset_refault_anon 0 [ 163.483218][ T5821] workingset_refault_file 0 [ 163.487992][ T5821] swap 208896 [ 163.491287][ T5821] swapcached 20480 [ 163.495117][ T5821] pgpgin 14408 [ 163.498628][ T5821] pgpgout 14403 [ 163.502087][ T5821] pgfault 26966 [ 163.505654][ T5821] pgmajfault 3 [ 163.509101][ T5821] inactive_anon 20480 [ 163.513087][ T5821] active_anon 0 [ 163.516668][ T5821] inactive_file 0 [ 163.520384][ T5821] active_file 0 [ 163.523845][ T5821] unevictable 0 [ 163.527410][ T5821] hierarchical_memory_limit 314572800 [ 163.532837][ T5821] hierarchical_memsw_limit 9223372036854771712 [ 163.539146][ T5821] total_cache 0 [ 163.542699][ T5821] total_rss 0 [ 163.545993][ T5821] total_rss_huge 0 [ 163.550352][ T5821] total_shmem 0 [ 163.553839][ T5821] total_mapped_file 0 [ 163.558023][ T5821] total_dirty 0 [ 163.561682][ T5821] total_writeback 0 [ 163.565502][ T5821] total_workingset_refault_anon 0 [ 163.570902][ T5821] total_workingset_refault_file 0 [ 163.576045][ T5821] total_swap 208896 [ 163.580250][ T5821] total_swapcached 20480 [ 163.584597][ T5821] total_pgpgin 14408 [ 163.588580][ T5821] total_pgpgout 14403 [ 163.592913][ T5821] total_pgfault 26966 [ 163.596916][ T5821] total_pgmajfault 3 [ 163.600937][ T5821] total_inactive_anon 20480 [ 163.605465][ T5821] total_active_anon 0 [ 163.609513][ T5821] total_inactive_file 0 [ 163.613671][ T5821] total_active_file 0 [ 163.617711][ T5821] total_unevictable 0 [ 163.621967][ T5821] anon_cost 0 [ 163.625340][ T5821] file_cost 0 [ 163.628828][ T5821] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.897,pid=9670,uid=0 [ 163.644162][ T5821] Memory cgroup out of memory: Killed process 9671 (syz.2.897) total-vm:102224kB, anon-rss:1140kB, file-rss:23256kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 163.854519][ T9824] wg1 speed is unknown, defaulting to 1000 [ 163.861359][ T9830] __nla_validate_parse: 3 callbacks suppressed [ 163.861376][ T9830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.939'. [ 163.863432][ T9824] lo speed is unknown, defaulting to 1000 [ 163.878449][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.936'. [ 163.957880][ T1110] tipc: Subscription rejected, illegal request [ 164.212740][ T9848] netlink: 72 bytes leftover after parsing attributes in process `syz.1.942'. [ 164.237552][ T9848] netlink: 72 bytes leftover after parsing attributes in process `syz.1.942'. [ 164.532538][ T9868] netlink: 28 bytes leftover after parsing attributes in process `syz.4.947'. [ 164.593005][ T9870] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 164.623561][ T9871] veth1_to_team: Caught tx_queue_len zero misconfig [ 165.043201][ T6321] tipc: Subscription rejected, illegal request [ 165.616546][ T9894] xt_hashlimit: size too large, truncated to 1048576 [ 165.695677][ T9895] : renamed from veth1_to_team [ 165.718839][ T9900] netlink: 168 bytes leftover after parsing attributes in process `syz.0.959'. [ 165.762186][ T32] oom_reaper: reaped process 9671 (syz.2.897), now anon-rss:60kB, file-rss:22128kB, shmem-rss:0kB [ 165.908908][ T9909] netlink: 64 bytes leftover after parsing attributes in process `syz.3.961'. [ 165.946197][ T9909] nbd: couldn't find a device at index 0 [ 165.956318][ T9911] tipc: Enabling of bearer rejected, already enabled [ 166.001169][ T9911] tipc: Resetting bearer [ 166.039217][ T9911] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 166.080247][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.961'. [ 166.111711][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.961'. [ 166.160051][ T9915] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 166.174044][ T9915] bond3 (unregistering): Released all slaves [ 166.192818][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.966'. [ 166.582394][ T9930] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 166.605130][ T9930] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 166.614959][ T9930] tipc: Resetting bearer [ 166.962871][ T9946] syz.2.971 (9946) used greatest stack depth: 17688 bytes left [ 167.109120][ T9953] dummy0: left promiscuous mode [ 167.153613][ T9953] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 167.178108][ T9953] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 167.514842][ T9993] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 167.631146][ T60] tipc: Resetting bearer [ 167.841069][T10008] wg1 speed is unknown, defaulting to 1000 [ 167.876835][T10008] lo speed is unknown, defaulting to 1000 [ 167.905892][T10011] lo speed is unknown, defaulting to 1000 [ 167.938895][T10011] lo speed is unknown, defaulting to 1000 [ 167.999841][T10011] lo speed is unknown, defaulting to 1000 [ 168.038623][T10011] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 168.186590][T10011] lo speed is unknown, defaulting to 1000 [ 168.210198][T10011] lo speed is unknown, defaulting to 1000 [ 168.212339][T10012] wg1 speed is unknown, defaulting to 1000 [ 168.217784][T10011] lo speed is unknown, defaulting to 1000 [ 168.229602][T10011] lo speed is unknown, defaulting to 1000 [ 168.229714][T10012] lo speed is unknown, defaulting to 1000 [ 168.237196][T10011] lo speed is unknown, defaulting to 1000 [ 168.275601][T10011] lo speed is unknown, defaulting to 1000 [ 168.297967][T10012] lo speed is unknown, defaulting to 1000 [ 168.834410][T10039] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 168.841450][T10039] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 169.001119][T10046] __nla_validate_parse: 13 callbacks suppressed [ 169.001149][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.994'. [ 169.024628][T10048] openvswitch: netlink: IP tunnel dst address not specified [ 169.087909][T10046] nbd: must specify an index to disconnect [ 169.641508][T10069] netlink: 'syz.0.1000': attribute type 15 has an invalid length. [ 169.792933][T10076] FAULT_INJECTION: forcing a failure. [ 169.792933][T10076] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 169.828298][T10057] wg1 speed is unknown, defaulting to 1000 [ 169.835935][T10057] lo speed is unknown, defaulting to 1000 [ 169.848910][T10076] CPU: 1 UID: 0 PID: 10076 Comm: syz.3.1002 Not tainted syzkaller #0 PREEMPT(full) [ 169.848935][T10076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.848946][T10076] Call Trace: [ 169.848953][T10076] [ 169.848961][T10076] dump_stack_lvl+0xe8/0x150 [ 169.848988][T10076] should_fail_ex+0x414/0x560 [ 169.849026][T10076] prepare_alloc_pages+0x22b/0x650 [ 169.849051][T10076] __alloc_frozen_pages_noprof+0x123/0x370 [ 169.849072][T10076] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 169.849097][T10076] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 169.849120][T10076] ? policy_nodemask+0x27c/0x720 [ 169.849145][T10076] alloc_pages_mpol+0x232/0x4a0 [ 169.849169][T10076] vma_alloc_folio_noprof+0xe4/0x200 [ 169.849193][T10076] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 169.849225][T10076] folio_prealloc+0x30/0x180 [ 169.849244][T10076] do_wp_page+0x1231/0x5810 [ 169.849275][T10076] ? ___pte_offset_map+0x29/0x240 [ 169.849308][T10076] ? __pfx_do_wp_page+0x10/0x10 [ 169.849327][T10076] ? do_raw_spin_lock+0x121/0x290 [ 169.849352][T10076] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 169.849384][T10076] handle_mm_fault+0x14c5/0x32b0 [ 169.849420][T10076] ? handle_mm_fault+0xdb/0x32b0 [ 169.849451][T10076] ? __pfx_handle_mm_fault+0x10/0x10 [ 169.849485][T10076] ? __pfx___up_read+0x10/0x10 [ 169.849517][T10076] ? lock_mm_and_find_vma+0x9c/0x300 [ 169.849536][T10076] do_user_addr_fault+0x764/0x1380 [ 169.849570][T10076] exc_page_fault+0x71/0xd0 [ 169.849592][T10076] asm_exc_page_fault+0x26/0x30 [ 169.849608][T10076] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 169.849631][T10076] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 169.849645][T10076] RSP: 0018:ffffc9000bec7c78 EFLAGS: 00050202 [ 169.849661][T10076] RAX: ffffffff848e0501 RBX: 000000000014000e RCX: 000000000013a10e [ 169.849673][T10076] RDX: 0000000000000000 RSI: ffff888037805f00 RDI: 0000200000006000 [ 169.849684][T10076] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000006 [ 169.849695][T10076] R10: dffffc0000000000 R11: ffffed1006f28001 R12: 000020000014010e [ 169.849706][T10076] R13: 00007ffffffff000 R14: ffff888037800000 R15: 0000200000000100 [ 169.849725][T10076] ? _copy_from_user+0x81/0xb0 [ 169.849752][T10076] _copy_to_user+0x8a/0xb0 [ 169.849771][T10076] map_get_next_key+0x4c0/0x630 [ 169.849795][T10076] ? map_get_next_key+0x286/0x630 [ 169.849820][T10076] __sys_bpf+0x63d/0x860 [ 169.849845][T10076] ? __pfx___sys_bpf+0x10/0x10 [ 169.849861][T10057] lo speed is unknown, defaulting to 1000 [ 169.849879][T10076] ? ksys_write+0x22a/0x250 [ 169.849896][T10076] ? __pfx_ksys_write+0x10/0x10 [ 169.849915][T10076] __x64_sys_bpf+0x7c/0x90 [ 169.849938][T10076] do_syscall_64+0xec/0xf80 [ 169.849957][T10076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.849972][T10076] ? trace_irq_disable+0x37/0x100 [ 169.849992][T10076] ? clear_bhb_loop+0x60/0xb0 [ 169.850021][T10076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.850036][T10076] RIP: 0033:0x7f890738f749 [ 169.850050][T10076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.850063][T10076] RSP: 002b:00007f89082c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.850080][T10076] RAX: ffffffffffffffda RBX: 00007f89075e6090 RCX: 00007f890738f749 [ 169.850091][T10076] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 169.850102][T10076] RBP: 00007f89082c0090 R08: 0000000000000000 R09: 0000000000000000 [ 169.850112][T10076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.850122][T10076] R13: 00007f89075e6128 R14: 00007f89075e6090 R15: 00007ffee88c2618 [ 169.850150][T10076] [ 170.198357][T10075] wg1 speed is unknown, defaulting to 1000 [ 170.241180][T10081] sctp: [Deprecated]: syz.3.1005 (pid 10081) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.241180][T10081] Use struct sctp_sack_info instead [ 170.302126][T10075] lo speed is unknown, defaulting to 1000 [ 170.345557][T10088] gtp0: entered promiscuous mode [ 170.366840][T10088] gtp0: entered allmulticast mode [ 170.376726][T10092] IPVS: length: 227 != 24 [ 170.383409][T10092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1007'. [ 170.388870][T10091] netlink: 'syz.4.1006': attribute type 1 has an invalid length. [ 170.430378][T10075] lo speed is unknown, defaulting to 1000 [ 170.501867][T10098] netlink: 'syz.3.1008': attribute type 2 has an invalid length. [ 170.958216][T10116] wg1 speed is unknown, defaulting to 1000 [ 170.966181][T10116] lo speed is unknown, defaulting to 1000 [ 170.974135][T10116] lo speed is unknown, defaulting to 1000 [ 171.258426][T10126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1013'. [ 171.290412][T10123] pim6reg1: entered promiscuous mode [ 171.295751][T10123] pim6reg1: entered allmulticast mode [ 171.312720][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1013'. [ 171.421268][T10119] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 171.441714][T10119] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 171.784801][T10142] veth0: entered promiscuous mode [ 171.798807][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'. [ 171.825038][T10143] veth0 (unregistering): left promiscuous mode [ 172.114781][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 172.275661][T10164] netlink: 'syz.0.1024': attribute type 1 has an invalid length. [ 172.351531][T10165] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1022'. [ 172.420307][T10177] FAULT_INJECTION: forcing a failure. [ 172.420307][T10177] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.443634][T10172] 8021q: adding VLAN 0 to HW filter on device bond6 [ 172.470559][T10172] bond5: (slave bond6): making interface the new active one [ 172.480182][T10177] CPU: 0 UID: 0 PID: 10177 Comm: syz.1.1023 Not tainted syzkaller #0 PREEMPT(full) [ 172.480205][T10177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.480215][T10177] Call Trace: [ 172.480223][T10177] [ 172.480230][T10177] dump_stack_lvl+0xe8/0x150 [ 172.480257][T10177] should_fail_ex+0x414/0x560 [ 172.480287][T10177] prepare_alloc_pages+0x22b/0x650 [ 172.480314][T10177] __alloc_frozen_pages_noprof+0x123/0x370 [ 172.480338][T10177] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 172.480362][T10177] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 172.480386][T10177] ? policy_nodemask+0x27c/0x720 [ 172.480411][T10177] alloc_pages_mpol+0x232/0x4a0 [ 172.480436][T10177] vma_alloc_folio_noprof+0xe4/0x200 [ 172.480459][T10177] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 172.480491][T10177] folio_prealloc+0x30/0x180 [ 172.480510][T10177] do_wp_page+0x1231/0x5810 [ 172.480540][T10177] ? ___pte_offset_map+0x29/0x240 [ 172.480571][T10177] ? __pfx_do_wp_page+0x10/0x10 [ 172.480590][T10177] ? do_raw_spin_lock+0x121/0x290 [ 172.480616][T10177] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 172.480647][T10177] handle_mm_fault+0x14c5/0x32b0 [ 172.480683][T10177] ? handle_mm_fault+0xdb/0x32b0 [ 172.480714][T10177] ? __pfx_handle_mm_fault+0x10/0x10 [ 172.480749][T10177] ? __pfx___up_read+0x10/0x10 [ 172.480775][T10177] ? lock_mm_and_find_vma+0x9c/0x300 [ 172.480795][T10177] do_user_addr_fault+0x764/0x1380 [ 172.480835][T10177] exc_page_fault+0x71/0xd0 [ 172.480857][T10177] asm_exc_page_fault+0x26/0x30 [ 172.480873][T10177] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 172.480898][T10177] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 172.480911][T10177] RSP: 0018:ffffc9000542fc78 EFLAGS: 00050202 [ 172.480928][T10177] RAX: ffffffff848e0501 RBX: 000000000014000e RCX: 000000000013810e [ 172.480941][T10177] RDX: 0000000000000000 RSI: ffff88803a807f00 RDI: 0000200000008000 [ 172.480953][T10177] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000006 [ 172.480964][T10177] R10: dffffc0000000000 R11: ffffed1007528001 R12: 000020000014010e [ 172.480976][T10177] R13: 00007ffffffff000 R14: ffff88803a800000 R15: 0000200000000100 [ 172.480997][T10177] ? _copy_from_user+0x81/0xb0 [ 172.481024][T10177] _copy_to_user+0x8a/0xb0 [ 172.481046][T10177] map_get_next_key+0x4c0/0x630 [ 172.481072][T10177] ? map_get_next_key+0x286/0x630 [ 172.481097][T10177] __sys_bpf+0x63d/0x860 [ 172.481121][T10177] ? __pfx___sys_bpf+0x10/0x10 [ 172.481159][T10177] ? ksys_write+0x22a/0x250 [ 172.481179][T10177] ? __pfx_ksys_write+0x10/0x10 [ 172.481207][T10177] __x64_sys_bpf+0x7c/0x90 [ 172.481228][T10177] do_syscall_64+0xec/0xf80 [ 172.481248][T10177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.481263][T10177] ? trace_irq_disable+0x37/0x100 [ 172.481283][T10177] ? clear_bhb_loop+0x60/0xb0 [ 172.481304][T10177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.481320][T10177] RIP: 0033:0x7f4155b8f749 [ 172.481335][T10177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.481348][T10177] RSP: 002b:00007f4156a7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.481365][T10177] RAX: ffffffffffffffda RBX: 00007f4155de6090 RCX: 00007f4155b8f749 [ 172.481377][T10177] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 172.481388][T10177] RBP: 00007f4156a7d090 R08: 0000000000000000 R09: 0000000000000000 [ 172.481399][T10177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.481409][T10177] R13: 00007f4155de6128 R14: 00007f4155de6090 R15: 00007ffdfe6b0b98 [ 172.481440][T10177] [ 172.494593][T10172] bond5: (slave bond6): Enslaving as an active interface with an up link [ 172.678240][T10189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1024'. [ 172.891249][T10164] vlan1: entered promiscuous mode [ 172.896318][T10164] bond5: entered promiscuous mode [ 172.925978][T10164] bond6: entered promiscuous mode [ 172.946668][T10164] bond5: (slave vlan1): Opening slave failed [ 173.013178][T10195] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1029'. [ 173.036681][T10189] 8021q: adding VLAN 0 to HW filter on device bond5 [ 173.333052][T10227] openvswitch: netlink: Flow key attribute not present in set flow. [ 173.367206][T10223] wg1 speed is unknown, defaulting to 1000 [ 173.375632][T10227] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1038'. [ 173.387349][T10223] lo speed is unknown, defaulting to 1000 [ 173.408316][T10223] lo speed is unknown, defaulting to 1000 [ 173.678810][T10227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.708619][T10227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.751167][T10227] bond0 (unregistering): Released all slaves [ 173.808274][ T5959] IPVS: starting estimator thread 0... [ 173.848092][T10240] netlink: 'syz.2.1039': attribute type 2 has an invalid length. [ 173.901308][T10247] IPVS: using max 30 ests per chain, 72000 per kthread [ 174.024884][T10251] FAULT_INJECTION: forcing a failure. [ 174.024884][T10251] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 174.061393][T10251] CPU: 1 UID: 0 PID: 10251 Comm: syz.4.1041 Not tainted syzkaller #0 PREEMPT(full) [ 174.061427][T10251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.061436][T10251] Call Trace: [ 174.061444][T10251] [ 174.061452][T10251] dump_stack_lvl+0xe8/0x150 [ 174.061479][T10251] should_fail_ex+0x414/0x560 [ 174.061510][T10251] prepare_alloc_pages+0x22b/0x650 [ 174.061542][T10251] __alloc_frozen_pages_noprof+0x123/0x370 [ 174.061566][T10251] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 174.061590][T10251] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 174.061618][T10251] ? policy_nodemask+0x27c/0x720 [ 174.061642][T10251] alloc_pages_mpol+0x232/0x4a0 [ 174.061726][T10251] vma_alloc_folio_noprof+0xe4/0x200 [ 174.061755][T10251] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 174.061785][T10251] folio_prealloc+0x30/0x180 [ 174.061804][T10251] do_wp_page+0x1231/0x5810 [ 174.061834][T10251] ? ___pte_offset_map+0x29/0x240 [ 174.061865][T10251] ? __pfx_do_wp_page+0x10/0x10 [ 174.061883][T10251] ? do_raw_spin_lock+0x121/0x290 [ 174.061909][T10251] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 174.061940][T10251] handle_mm_fault+0x14c5/0x32b0 [ 174.061976][T10251] ? handle_mm_fault+0xdb/0x32b0 [ 174.062006][T10251] ? __pfx_handle_mm_fault+0x10/0x10 [ 174.062041][T10251] ? __pfx___up_read+0x10/0x10 [ 174.062067][T10251] ? lock_mm_and_find_vma+0x9c/0x300 [ 174.062086][T10251] do_user_addr_fault+0x764/0x1380 [ 174.062134][T10251] exc_page_fault+0x71/0xd0 [ 174.062157][T10251] asm_exc_page_fault+0x26/0x30 [ 174.062184][T10251] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 174.062208][T10251] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 174.062222][T10251] RSP: 0018:ffffc90005747c78 EFLAGS: 00050202 [ 174.062239][T10251] RAX: ffffffff848e0501 RBX: 000000000014000e RCX: 000000000013710e [ 174.062252][T10251] RDX: 0000000000000000 RSI: ffff88803a808f00 RDI: 0000200000009000 [ 174.062263][T10251] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000006 [ 174.062274][T10251] R10: dffffc0000000000 R11: ffffed1007528001 R12: 000020000014010e [ 174.062287][T10251] R13: 00007ffffffff000 R14: ffff88803a800000 R15: 0000200000000100 [ 174.062313][T10251] ? _copy_from_user+0x81/0xb0 [ 174.062348][T10251] _copy_to_user+0x8a/0xb0 [ 174.062371][T10251] map_get_next_key+0x4c0/0x630 [ 174.062397][T10251] ? map_get_next_key+0x286/0x630 [ 174.062423][T10251] __sys_bpf+0x63d/0x860 [ 174.062447][T10251] ? __pfx___sys_bpf+0x10/0x10 [ 174.062485][T10251] ? ksys_write+0x22a/0x250 [ 174.062506][T10251] ? __pfx_ksys_write+0x10/0x10 [ 174.062530][T10251] __x64_sys_bpf+0x7c/0x90 [ 174.062551][T10251] do_syscall_64+0xec/0xf80 [ 174.062571][T10251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.062587][T10251] ? trace_irq_disable+0x37/0x100 [ 174.062606][T10251] ? clear_bhb_loop+0x60/0xb0 [ 174.062626][T10251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.062642][T10251] RIP: 0033:0x7f4df198f749 [ 174.062658][T10251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.062670][T10251] RSP: 002b:00007f4df2872038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.062687][T10251] RAX: ffffffffffffffda RBX: 00007f4df1be6090 RCX: 00007f4df198f749 [ 174.062700][T10251] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 174.062710][T10251] RBP: 00007f4df2872090 R08: 0000000000000000 R09: 0000000000000000 [ 174.062721][T10251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.062730][T10251] R13: 00007f4df1be6128 R14: 00007f4df1be6090 R15: 00007fffbaadca78 [ 174.062762][T10251] [ 174.522706][T10258] netlink: 'syz.3.1045': attribute type 1 has an invalid length. [ 174.531146][T10258] __nla_validate_parse: 2 callbacks suppressed [ 174.531162][T10258] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1045'. [ 174.640403][T10259] netlink: 'syz.1.1043': attribute type 13 has an invalid length. [ 174.897779][T10259] tipc: Resetting bearer [ 175.179085][T10289] wg1 speed is unknown, defaulting to 1000 [ 175.202563][T10289] lo speed is unknown, defaulting to 1000 [ 175.285212][T10296] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 175.298104][T10289] lo speed is unknown, defaulting to 1000 [ 175.496506][T10292] wg1 speed is unknown, defaulting to 1000 [ 175.623588][T10292] lo speed is unknown, defaulting to 1000 [ 175.660977][T10311] netlink: 'syz.3.1053': attribute type 21 has an invalid length. [ 175.661975][T10294] wg1 speed is unknown, defaulting to 1000 [ 175.669535][T10292] lo speed is unknown, defaulting to 1000 [ 175.677852][T10294] lo speed is unknown, defaulting to 1000 [ 175.726765][T10311] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1053'. [ 175.808346][T10294] lo speed is unknown, defaulting to 1000 [ 175.925156][T10286] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 175.938643][T10286] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 176.123638][T10286] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 176.150207][T10286] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 176.183102][T10286] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.190245][T10286] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 176.241298][T10327] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 176.255240][T10286] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.286347][T10286] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 176.362067][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'. [ 176.680688][T10346] netlink: 'syz.3.1058': attribute type 4 has an invalid length. [ 176.698326][T10346] netlink: 'syz.3.1058': attribute type 4 has an invalid length. [ 176.720176][ T5957] lo speed is unknown, defaulting to 1000 [ 176.762889][ T5957] syz1: Port: 1 Link ACTIVE [ 176.907551][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 176.916456][T10286] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 176.938141][T10286] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 177.034159][T10366] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1063'. [ 177.037170][T10363] wg1 speed is unknown, defaulting to 1000 [ 177.089884][T10363] lo speed is unknown, defaulting to 1000 [ 177.144724][T10363] lo speed is unknown, defaulting to 1000 [ 177.484036][T10384] bond0: option arp_validate: invalid value (55553) [ 177.583090][T10384] bond0 (unregistering): Released all slaves [ 177.862022][T10410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1071'. [ 178.060597][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1071'. [ 178.085541][T10422] netlink: 'syz.3.1073': attribute type 10 has an invalid length. [ 178.457627][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'. [ 178.488708][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 178.491918][T10404] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1069'. [ 178.499499][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 178.925891][T10466] netlink: 'syz.0.1083': attribute type 23 has an invalid length. [ 179.162787][T10490] FAULT_INJECTION: forcing a failure. [ 179.162787][T10490] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 179.207541][T10490] CPU: 0 UID: 0 PID: 10490 Comm: syz.0.1088 Not tainted syzkaller #0 PREEMPT(full) [ 179.207567][T10490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.207578][T10490] Call Trace: [ 179.207585][T10490] [ 179.207593][T10490] dump_stack_lvl+0xe8/0x150 [ 179.207625][T10490] should_fail_ex+0x414/0x560 [ 179.207656][T10490] prepare_alloc_pages+0x22b/0x650 [ 179.207684][T10490] __alloc_frozen_pages_noprof+0x123/0x370 [ 179.207708][T10490] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 179.207733][T10490] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 179.207757][T10490] ? policy_nodemask+0x27c/0x720 [ 179.207783][T10490] alloc_pages_mpol+0x232/0x4a0 [ 179.207817][T10490] vma_alloc_folio_noprof+0xe4/0x200 [ 179.207840][T10490] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 179.207871][T10490] folio_prealloc+0x30/0x180 [ 179.207890][T10490] do_wp_page+0x1231/0x5810 [ 179.207922][T10490] ? ___pte_offset_map+0x29/0x240 [ 179.207955][T10490] ? __pfx_do_wp_page+0x10/0x10 [ 179.207974][T10490] ? do_raw_spin_lock+0x121/0x290 [ 179.207999][T10490] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 179.208032][T10490] handle_mm_fault+0x14c5/0x32b0 [ 179.208067][T10490] ? handle_mm_fault+0xdb/0x32b0 [ 179.208099][T10490] ? __pfx_handle_mm_fault+0x10/0x10 [ 179.208134][T10490] ? __pfx___up_read+0x10/0x10 [ 179.208161][T10490] ? lock_mm_and_find_vma+0x9c/0x300 [ 179.208186][T10490] do_user_addr_fault+0x764/0x1380 [ 179.208220][T10490] exc_page_fault+0x71/0xd0 [ 179.208242][T10490] asm_exc_page_fault+0x26/0x30 [ 179.208260][T10490] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 179.208284][T10490] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 179.208299][T10490] RSP: 0018:ffffc900034d7c78 EFLAGS: 00050202 [ 179.208316][T10490] RAX: ffffffff848e0501 RBX: 000000000014000e RCX: 000000000013310e [ 179.208329][T10490] RDX: 0000000000000000 RSI: ffff88803a80cf00 RDI: 000020000000d000 [ 179.208342][T10490] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000006 [ 179.208354][T10490] R10: dffffc0000000000 R11: ffffed1007528001 R12: 000020000014010e [ 179.208366][T10490] R13: 00007ffffffff000 R14: ffff88803a800000 R15: 0000200000000100 [ 179.208388][T10490] ? _copy_from_user+0x81/0xb0 [ 179.208415][T10490] _copy_to_user+0x8a/0xb0 [ 179.208438][T10490] map_get_next_key+0x4c0/0x630 [ 179.208462][T10490] ? map_get_next_key+0x286/0x630 [ 179.208485][T10490] __sys_bpf+0x63d/0x860 [ 179.208507][T10490] ? __pfx___sys_bpf+0x10/0x10 [ 179.208539][T10490] ? ksys_write+0x22a/0x250 [ 179.208555][T10490] ? __pfx_ksys_write+0x10/0x10 [ 179.208575][T10490] __x64_sys_bpf+0x7c/0x90 [ 179.208593][T10490] do_syscall_64+0xec/0xf80 [ 179.208609][T10490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.208622][T10490] ? trace_irq_disable+0x37/0x100 [ 179.208639][T10490] ? clear_bhb_loop+0x60/0xb0 [ 179.208657][T10490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.208671][T10490] RIP: 0033:0x7fc2cbb8f749 [ 179.208685][T10490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.208697][T10490] RSP: 002b:00007fc2cca6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.208713][T10490] RAX: ffffffffffffffda RBX: 00007fc2cbde6090 RCX: 00007fc2cbb8f749 [ 179.208725][T10490] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 179.208736][T10490] RBP: 00007fc2cca6c090 R08: 0000000000000000 R09: 0000000000000000 [ 179.208745][T10490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.208754][T10490] R13: 00007fc2cbde6128 R14: 00007fc2cbde6090 R15: 00007ffdff20c1e8 [ 179.208783][T10490] [ 179.793459][T10501] __nla_validate_parse: 6 callbacks suppressed [ 179.793475][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1089'. [ 179.813286][T10502] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1089'. [ 180.035401][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1097'. [ 180.074282][T10511] wg1 speed is unknown, defaulting to 1000 [ 180.086410][T10511] lo speed is unknown, defaulting to 1000 [ 180.106825][T10511] lo speed is unknown, defaulting to 1000 [ 180.127782][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1097'. [ 180.405010][T10539] FAULT_INJECTION: forcing a failure. [ 180.405010][T10539] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 180.494660][T10539] CPU: 1 UID: 0 PID: 10539 Comm: syz.2.1101 Not tainted syzkaller #0 PREEMPT(full) [ 180.494686][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.494696][T10539] Call Trace: [ 180.494703][T10539] [ 180.494712][T10539] dump_stack_lvl+0xe8/0x150 [ 180.494739][T10539] should_fail_ex+0x414/0x560 [ 180.494769][T10539] prepare_alloc_pages+0x22b/0x650 [ 180.494797][T10539] __alloc_frozen_pages_noprof+0x123/0x370 [ 180.494821][T10539] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 180.494845][T10539] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 180.494868][T10539] ? policy_nodemask+0x27c/0x720 [ 180.494896][T10539] alloc_pages_mpol+0x232/0x4a0 [ 180.494927][T10539] vma_alloc_folio_noprof+0xe4/0x200 [ 180.494949][T10539] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 180.494976][T10539] folio_prealloc+0x30/0x180 [ 180.494997][T10539] do_wp_page+0x1231/0x5810 [ 180.495026][T10539] ? ___pte_offset_map+0x29/0x240 [ 180.495058][T10539] ? __pfx_do_wp_page+0x10/0x10 [ 180.495076][T10539] ? do_raw_spin_lock+0x121/0x290 [ 180.495101][T10539] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 180.495130][T10539] handle_mm_fault+0x14c5/0x32b0 [ 180.495164][T10539] ? handle_mm_fault+0xdb/0x32b0 [ 180.495195][T10539] ? __pfx_handle_mm_fault+0x10/0x10 [ 180.495230][T10539] ? __pfx___up_read+0x10/0x10 [ 180.495256][T10539] ? lock_mm_and_find_vma+0x9c/0x300 [ 180.495273][T10539] do_user_addr_fault+0x764/0x1380 [ 180.495302][T10539] exc_page_fault+0x71/0xd0 [ 180.495323][T10539] asm_exc_page_fault+0x26/0x30 [ 180.495340][T10539] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 180.495364][T10539] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 180.495378][T10539] RSP: 0018:ffffc90003267c78 EFLAGS: 00050202 [ 180.495396][T10539] RAX: ffffffff848e0501 RBX: 000000000014000e RCX: 000000000013210e [ 180.495409][T10539] RDX: 0000000000000000 RSI: ffff88803820df00 RDI: 000020000000e000 [ 180.495421][T10539] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000006 [ 180.495433][T10539] R10: dffffc0000000000 R11: ffffed1007068001 R12: 000020000014010e [ 180.495445][T10539] R13: 00007ffffffff000 R14: ffff888038200000 R15: 0000200000000100 [ 180.495469][T10539] ? _copy_from_user+0x81/0xb0 [ 180.495496][T10539] _copy_to_user+0x8a/0xb0 [ 180.495518][T10539] map_get_next_key+0x4c0/0x630 [ 180.495543][T10539] ? map_get_next_key+0x286/0x630 [ 180.495566][T10539] __sys_bpf+0x63d/0x860 [ 180.495589][T10539] ? __pfx___sys_bpf+0x10/0x10 [ 180.495623][T10539] ? ksys_write+0x22a/0x250 [ 180.495642][T10539] ? __pfx_ksys_write+0x10/0x10 [ 180.495669][T10539] __x64_sys_bpf+0x7c/0x90 [ 180.495689][T10539] do_syscall_64+0xec/0xf80 [ 180.495708][T10539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.495724][T10539] ? trace_irq_disable+0x37/0x100 [ 180.495742][T10539] ? clear_bhb_loop+0x60/0xb0 [ 180.495762][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.495778][T10539] RIP: 0033:0x7f311058f749 [ 180.495794][T10539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.495808][T10539] RSP: 002b:00007f311145f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.495826][T10539] RAX: ffffffffffffffda RBX: 00007f31107e6090 RCX: 00007f311058f749 [ 180.495838][T10539] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 180.495849][T10539] RBP: 00007f311145f090 R08: 0000000000000000 R09: 0000000000000000 [ 180.495859][T10539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.495869][T10539] R13: 00007f31107e6128 R14: 00007f31107e6090 R15: 00007ffefc82e4a8 [ 180.495898][T10539] [ 181.058507][T10555] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1104'. [ 181.496922][T10575] sctp: [Deprecated]: syz.4.1110 (pid 10575) Use of int in max_burst socket option. [ 181.496922][T10575] Use struct sctp_assoc_value instead [ 181.545438][T10581] netlink: 'syz.0.1109': attribute type 13 has an invalid length. [ 181.569987][T10581] netlink: 'syz.0.1109': attribute type 17 has an invalid length. [ 181.702392][T10581] erspan0: left promiscuous mode [ 181.838612][T10581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.848133][T10581] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.879935][T10581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.965654][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'. [ 182.009156][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1115'. [ 182.056350][T10601] netlink: 'syz.4.1115': attribute type 14 has an invalid length. [ 182.112892][T10596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1115'. [ 182.117852][T10601] netlink: 'syz.4.1115': attribute type 12 has an invalid length. [ 182.133579][T10608] rdma_op ffff8880223ea1f0 conn xmit_rdma 0000000000000000 [ 182.156236][T10596] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1115'. [ 182.181289][T10609] FAULT_INJECTION: forcing a failure. [ 182.181289][T10609] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 182.198381][T10603] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1115'. [ 182.234650][T10609] CPU: 1 UID: 0 PID: 10609 Comm: syz.3.1117 Not tainted syzkaller #0 PREEMPT(full) [ 182.234684][T10609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.234695][T10609] Call Trace: [ 182.234703][T10609] [ 182.234711][T10609] dump_stack_lvl+0xe8/0x150 [ 182.234737][T10609] should_fail_ex+0x414/0x560 [ 182.234767][T10609] prepare_alloc_pages+0x22b/0x650 [ 182.234794][T10609] __alloc_frozen_pages_noprof+0x123/0x370 [ 182.234815][T10609] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 182.234837][T10609] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 182.234860][T10609] ? policy_nodemask+0x27c/0x720 [ 182.234883][T10609] alloc_pages_mpol+0x232/0x4a0 [ 182.234906][T10609] vma_alloc_folio_noprof+0xe4/0x200 [ 182.234930][T10609] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 182.234961][T10609] folio_prealloc+0x30/0x180 [ 182.234980][T10609] do_wp_page+0x1231/0x5810 [ 182.235012][T10609] ? ___pte_offset_map+0x29/0x240 [ 182.235045][T10609] ? __pfx_do_wp_page+0x10/0x10 [ 182.235064][T10609] ? do_raw_spin_lock+0x121/0x290 [ 182.235089][T10609] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 182.235121][T10609] handle_mm_fault+0x14c5/0x32b0 [ 182.235156][T10609] ? handle_mm_fault+0xdb/0x32b0 [ 182.235188][T10609] ? __pfx_handle_mm_fault+0x10/0x10 [ 182.235223][T10609] ? __pfx___up_read+0x10/0x10 [ 182.235250][T10609] ? lock_mm_and_find_vma+0x9c/0x300 [ 182.235270][T10609] do_user_addr_fault+0x764/0x1380 [ 182.235303][T10609] exc_page_fault+0x71/0xd0 [ 182.235325][T10609] asm_exc_page_fault+0x26/0x30 [ 182.235342][T10609] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 182.235367][T10609] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 182.235381][T10609] RSP: 0018:ffffc9000bc27c78 EFLAGS: 00050202 [ 182.235399][T10609] RAX: ffffffff848e0501 RBX: 000000000014000e RCX: 000000000013110e [ 182.235412][T10609] RDX: 0000000000000000 RSI: ffff88803a60ef00 RDI: 000020000000f000 [ 182.235424][T10609] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000006 [ 182.235436][T10609] R10: dffffc0000000000 R11: ffffed10074e8001 R12: 000020000014010e [ 182.235449][T10609] R13: 00007ffffffff000 R14: ffff88803a600000 R15: 0000200000000100 [ 182.235470][T10609] ? _copy_from_user+0x81/0xb0 [ 182.235505][T10609] _copy_to_user+0x8a/0xb0 [ 182.235527][T10609] map_get_next_key+0x4c0/0x630 [ 182.235552][T10609] ? map_get_next_key+0x286/0x630 [ 182.235578][T10609] __sys_bpf+0x63d/0x860 [ 182.235603][T10609] ? __pfx___sys_bpf+0x10/0x10 [ 182.235641][T10609] ? ksys_write+0x22a/0x250 [ 182.235661][T10609] ? __pfx_ksys_write+0x10/0x10 [ 182.235685][T10609] __x64_sys_bpf+0x7c/0x90 [ 182.235706][T10609] do_syscall_64+0xec/0xf80 [ 182.235735][T10609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.235751][T10609] ? trace_irq_disable+0x37/0x100 [ 182.235772][T10609] ? clear_bhb_loop+0x60/0xb0 [ 182.235792][T10609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.235809][T10609] RIP: 0033:0x7f890738f749 [ 182.235824][T10609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.235839][T10609] RSP: 002b:00007f89082c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.235854][T10609] RAX: ffffffffffffffda RBX: 00007f89075e6090 RCX: 00007f890738f749 [ 182.235866][T10609] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 182.235877][T10609] RBP: 00007f89082c0090 R08: 0000000000000000 R09: 0000000000000000 [ 182.235887][T10609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.235896][T10609] R13: 00007f89075e6128 R14: 00007f89075e6090 R15: 00007ffee88c2618 [ 182.235923][T10609] [ 182.794339][T10618] syzkaller0: entered promiscuous mode [ 182.802546][T10618] syzkaller0: entered allmulticast mode [ 182.877751][T10635] wg1 speed is unknown, defaulting to 1000 [ 182.885644][T10635] lo speed is unknown, defaulting to 1000 [ 182.895895][T10635] lo speed is unknown, defaulting to 1000 [ 183.060650][T10638] wg1 speed is unknown, defaulting to 1000 [ 183.080125][T10638] lo speed is unknown, defaulting to 1000 [ 183.103129][T10638] lo speed is unknown, defaulting to 1000 [ 183.262114][T10649] wg1 speed is unknown, defaulting to 1000 [ 183.273814][T10649] lo speed is unknown, defaulting to 1000 [ 183.289668][T10649] lo speed is unknown, defaulting to 1000 [ 183.466327][T10662] wg1 speed is unknown, defaulting to 1000 [ 183.491989][T10662] lo speed is unknown, defaulting to 1000 [ 183.500403][T10662] lo speed is unknown, defaulting to 1000 [ 183.721539][T10677] hsr_slave_1 (unregistering): left promiscuous mode [ 183.748108][T10665] netlink: 'syz.4.1129': attribute type 1 has an invalid length. [ 183.823179][T10665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.880606][T10690] netlink: 'syz.2.1137': attribute type 16 has an invalid length. [ 183.891985][T10690] netlink: 'syz.2.1137': attribute type 16 has an invalid length. [ 183.902216][T10690] netlink: 'syz.2.1137': attribute type 16 has an invalid length. [ 183.910693][T10690] netlink: 'syz.2.1137': attribute type 16 has an invalid length. [ 183.919798][T10690] netlink: 'syz.2.1137': attribute type 16 has an invalid length. [ 184.038142][T10690] vlan4: entered allmulticast mode [ 184.045557][T10690] bridge_slave_0: entered allmulticast mode [ 184.723900][T10737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.807018][T10748] __nla_validate_parse: 6 callbacks suppressed [ 184.807036][T10748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1151'. [ 184.916145][T10753] x9: renamed from bridge_slave_0 (while UP) [ 185.009239][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1151'. [ 185.210058][T10777] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1157'. [ 185.221136][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 185.239609][T10777] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1157'. [ 185.310276][ T30] audit: type=1804 audit(1768645052.423:5): pid=10779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1159" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=1350 res=1 errno=0 [ 185.388586][ T30] audit: type=1800 audit(1768645052.423:6): pid=10779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1159" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=1350 res=0 errno=0 [ 185.539251][T10795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1164'. [ 185.690942][ T60] tipc: Subscription rejected, illegal request [ 185.713486][T10807] can: request_module (can-proto-0) failed. [ 185.756430][T10810] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1167'. [ 185.795956][T10812] IPVS: Unknown mcast interface: bridge_slave_0 [ 185.884774][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1169'. [ 185.927005][T10816] xt_CT: No such helper "snmp" [ 185.968253][ T5957] lo speed is unknown, defaulting to 1000 [ 185.974997][ T60] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.987375][ T5957] syz1: Port: 1 Link DOWN [ 185.992161][ T60] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.001119][ T60] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.016378][ T60] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.103602][T10823] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1170'. [ 186.113571][T10823] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1170'. [ 186.130903][T10824] geneve3: entered promiscuous mode [ 186.156568][ T60] netdevsim netdevsim1 : set [1, 0] type 2 family 0 port 6081 - 0 [ 186.167485][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.198132][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.217660][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.233276][T10832] wg1 speed is unknown, defaulting to 1000 [ 186.241511][T10832] lo speed is unknown, defaulting to 1000 [ 186.367532][T10833] hsr_slave_1 (unregistering): left promiscuous mode [ 186.405726][T10832] lo speed is unknown, defaulting to 1000 [ 186.461212][T10840] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.631516][ T6058] tipc: Subscription rejected, illegal request [ 186.670088][T10855] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 186.688835][T10853] wg1 speed is unknown, defaulting to 1000 [ 186.699302][T10853] lo speed is unknown, defaulting to 1000 [ 186.711646][T10853] lo speed is unknown, defaulting to 1000 [ 187.467175][ T50] tipc: Subscription rejected, illegal request [ 187.514233][T10901] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.657009][T10901] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.730808][T10901] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.805996][T10901] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.166722][ T50] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.185833][T10925] validate_nla: 32 callbacks suppressed [ 188.185854][T10925] netlink: 'syz.3.1199': attribute type 14 has an invalid length. [ 188.236555][ T6058] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.343879][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.377773][T10930] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 188.389470][ T60] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.405923][ T6058] tipc: Subscription rejected, illegal request [ 188.438185][T10930] netlink: 'syz.2.1202': attribute type 13 has an invalid length. [ 188.457658][T10930] netlink: 'syz.2.1202': attribute type 17 has an invalid length. [ 188.621296][T10930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.640861][T10930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.662427][T10947] FAULT_INJECTION: forcing a failure. [ 188.662427][T10947] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 188.729699][T10947] CPU: 1 UID: 0 PID: 10947 Comm: syz.1.1206 Not tainted syzkaller #0 PREEMPT(full) [ 188.729725][T10947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.729737][T10947] Call Trace: [ 188.729745][T10947] [ 188.729753][T10947] dump_stack_lvl+0xe8/0x150 [ 188.729780][T10947] should_fail_ex+0x414/0x560 [ 188.729811][T10947] prepare_alloc_pages+0x22b/0x650 [ 188.729845][T10947] __alloc_frozen_pages_noprof+0x123/0x370 [ 188.729868][T10947] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 188.729891][T10947] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 188.729915][T10947] ? policy_nodemask+0x27c/0x720 [ 188.729941][T10947] alloc_pages_mpol+0x232/0x4a0 [ 188.729967][T10947] vma_alloc_folio_noprof+0xe4/0x200 [ 188.729989][T10947] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 188.730022][T10947] folio_prealloc+0x30/0x180 [ 188.730041][T10947] do_wp_page+0x1231/0x5810 [ 188.730071][T10947] ? ___pte_offset_map+0x29/0x240 [ 188.730102][T10947] ? __pfx_do_wp_page+0x10/0x10 [ 188.730121][T10947] ? do_raw_spin_lock+0x121/0x290 [ 188.730146][T10947] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 188.730178][T10947] handle_mm_fault+0x14c5/0x32b0 [ 188.730214][T10947] ? handle_mm_fault+0xdb/0x32b0 [ 188.730245][T10947] ? __pfx_handle_mm_fault+0x10/0x10 [ 188.730286][T10947] ? __pfx___up_read+0x10/0x10 [ 188.730313][T10947] ? lock_mm_and_find_vma+0x9c/0x300 [ 188.730333][T10947] do_user_addr_fault+0x764/0x1380 [ 188.730367][T10947] exc_page_fault+0x71/0xd0 [ 188.730390][T10947] asm_exc_page_fault+0x26/0x30 [ 188.730406][T10947] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 188.730430][T10947] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 188.730445][T10947] RSP: 0018:ffffc9001acffc78 EFLAGS: 00050202 [ 188.730463][T10947] RAX: ffffffff848e0501 RBX: 000000000014000e RCX: 000000000012e10e [ 188.730476][T10947] RDX: 0000000000000000 RSI: ffff888039211f00 RDI: 0000200000012000 [ 188.730488][T10947] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000006 [ 188.730499][T10947] R10: dffffc0000000000 R11: ffffed1007268001 R12: 000020000014010e [ 188.730513][T10947] R13: 00007ffffffff000 R14: ffff888039200000 R15: 0000200000000100 [ 188.730534][T10947] ? _copy_from_user+0x81/0xb0 [ 188.730562][T10947] _copy_to_user+0x8a/0xb0 [ 188.730584][T10947] map_get_next_key+0x4c0/0x630 [ 188.730610][T10947] ? map_get_next_key+0x286/0x630 [ 188.730635][T10947] __sys_bpf+0x63d/0x860 [ 188.730660][T10947] ? __pfx___sys_bpf+0x10/0x10 [ 188.730696][T10947] ? ksys_write+0x22a/0x250 [ 188.730714][T10947] ? __pfx_ksys_write+0x10/0x10 [ 188.730738][T10947] __x64_sys_bpf+0x7c/0x90 [ 188.730760][T10947] do_syscall_64+0xec/0xf80 [ 188.730780][T10947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.730795][T10947] ? trace_irq_disable+0x37/0x100 [ 188.730816][T10947] ? clear_bhb_loop+0x60/0xb0 [ 188.730887][T10947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.730903][T10947] RIP: 0033:0x7f4155b8f749 [ 188.730919][T10947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.730934][T10947] RSP: 002b:00007f4156a7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.730957][T10947] RAX: ffffffffffffffda RBX: 00007f4155de6090 RCX: 00007f4155b8f749 [ 188.730970][T10947] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 188.730981][T10947] RBP: 00007f4156a7d090 R08: 0000000000000000 R09: 0000000000000000 [ 188.730993][T10947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.731003][T10947] R13: 00007f4155de6128 R14: 00007f4155de6090 R15: 00007ffdfe6b0b98 [ 188.731035][T10947] [ 189.451435][ T6018] tipc: Subscription rejected, illegal request [ 189.514408][T10971] wg1 speed is unknown, defaulting to 1000 [ 189.519963][T10974] team_slave_0: left promiscuous mode [ 189.526172][T10974] team_slave_1: left promiscuous mode [ 189.877096][T10974] team0 (unregistering): Port device team_slave_0 removed [ 189.899000][T10974] team0 (unregistering): Port device team_slave_1 removed [ 189.929331][T10971] lo speed is unknown, defaulting to 1000 [ 189.944485][T10971] lo speed is unknown, defaulting to 1000 [ 190.085041][T10985] delete_channel: no stack [ 190.182415][T10997] FAULT_INJECTION: forcing a failure. [ 190.182415][T10997] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 190.268341][T10997] CPU: 0 UID: 0 PID: 10997 Comm: syz.2.1220 Not tainted syzkaller #0 PREEMPT(full) [ 190.268367][T10997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.268384][T10997] Call Trace: [ 190.268392][T10997] [ 190.268400][T10997] dump_stack_lvl+0xe8/0x150 [ 190.268426][T10997] should_fail_ex+0x414/0x560 [ 190.268457][T10997] prepare_alloc_pages+0x22b/0x650 [ 190.268485][T10997] __alloc_frozen_pages_noprof+0x123/0x370 [ 190.268508][T10997] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 190.268531][T10997] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 190.268556][T10997] ? policy_nodemask+0x27c/0x720 [ 190.268581][T10997] alloc_pages_mpol+0x232/0x4a0 [ 190.268605][T10997] vma_alloc_folio_noprof+0xe4/0x200 [ 190.268627][T10997] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 190.268657][T10997] folio_prealloc+0x30/0x180 [ 190.268675][T10997] do_wp_page+0x1231/0x5810 [ 190.268705][T10997] ? ___pte_offset_map+0x29/0x240 [ 190.268738][T10997] ? __pfx_do_wp_page+0x10/0x10 [ 190.268756][T10997] ? do_raw_spin_lock+0x121/0x290 [ 190.268782][T10997] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 190.268814][T10997] handle_mm_fault+0x14c5/0x32b0 [ 190.268850][T10997] ? handle_mm_fault+0xdb/0x32b0 [ 190.268887][T10997] ? __pfx_handle_mm_fault+0x10/0x10 [ 190.268922][T10997] ? __pfx___up_read+0x10/0x10 [ 190.268948][T10997] ? lock_mm_and_find_vma+0x9c/0x300 [ 190.268968][T10997] do_user_addr_fault+0x764/0x1380 [ 190.269001][T10997] exc_page_fault+0x71/0xd0 [ 190.269024][T10997] asm_exc_page_fault+0x26/0x30 [ 190.269040][T10997] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 190.269064][T10997] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 190.269079][T10997] RSP: 0018:ffffc9001acbfc78 EFLAGS: 00050202 [ 190.269095][T10997] RAX: ffffffff848e0501 RBX: 000000000014000e RCX: 000000000012d10e [ 190.269108][T10997] RDX: 0000000000000000 RSI: ffff888039212f00 RDI: 0000200000013000 [ 190.269120][T10997] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000006 [ 190.269131][T10997] R10: dffffc0000000000 R11: ffffed1007268001 R12: 000020000014010e [ 190.269143][T10997] R13: 00007ffffffff000 R14: ffff888039200000 R15: 0000200000000100 [ 190.269164][T10997] ? _copy_from_user+0x81/0xb0 [ 190.269192][T10997] _copy_to_user+0x8a/0xb0 [ 190.269213][T10997] map_get_next_key+0x4c0/0x630 [ 190.269239][T10997] ? map_get_next_key+0x286/0x630 [ 190.269263][T10997] __sys_bpf+0x63d/0x860 [ 190.269287][T10997] ? __pfx___sys_bpf+0x10/0x10 [ 190.269324][T10997] ? ksys_write+0x22a/0x250 [ 190.269344][T10997] ? __pfx_ksys_write+0x10/0x10 [ 190.269369][T10997] __x64_sys_bpf+0x7c/0x90 [ 190.269389][T10997] do_syscall_64+0xec/0xf80 [ 190.269410][T10997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.269425][T10997] ? trace_irq_disable+0x37/0x100 [ 190.269446][T10997] ? clear_bhb_loop+0x60/0xb0 [ 190.269466][T10997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.269487][T10997] RIP: 0033:0x7f311058f749 [ 190.269502][T10997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.269516][T10997] RSP: 002b:00007f311145f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 190.269533][T10997] RAX: ffffffffffffffda RBX: 00007f31107e6090 RCX: 00007f311058f749 [ 190.269546][T10997] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 190.269557][T10997] RBP: 00007f311145f090 R08: 0000000000000000 R09: 0000000000000000 [ 190.269568][T10997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.269579][T10997] R13: 00007f31107e6128 R14: 00007f31107e6090 R15: 00007ffefc82e4a8 [ 190.269609][T10997] [ 190.935614][ T6018] tipc: Subscription rejected, illegal request [ 190.950866][T11018] wg1 speed is unknown, defaulting to 1000 [ 190.958943][T11018] lo speed is unknown, defaulting to 1000 [ 190.969408][T11018] lo speed is unknown, defaulting to 1000 [ 191.191966][T11029] __nla_validate_parse: 15 callbacks suppressed [ 191.191988][T11029] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1229'. [ 191.573206][T11054] macvtap0: entered promiscuous mode [ 191.717198][T11059] batadv0: entered promiscuous mode [ 191.738612][T11059] batadv0: left promiscuous mode [ 191.775293][T11062] netlink: 'syz.3.1235': attribute type 1 has an invalid length. [ 191.813642][T11062] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.852700][T11062] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.865455][T11062] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 191.877393][T11062] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 191.891189][ T6018] tipc: Subscription rejected, illegal request [ 191.929923][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1239'. [ 191.962888][T11072] bond4: Invalid ad_actor_system MAC address. [ 191.969377][T11072] bond4: option ad_actor_system: invalid value (7) [ 191.978110][T11072] bond4 (unregistering): Released all slaves [ 192.102781][T11084] netlink: 'syz.2.1243': attribute type 21 has an invalid length. [ 192.113837][T11084] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1243'. [ 192.130879][T11084] netlink: 'syz.2.1243': attribute type 5 has an invalid length. [ 192.176653][T11089] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1243'. [ 192.186224][T11084] netlink: 'syz.2.1243': attribute type 6 has an invalid length. [ 192.196684][T11084] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1243'. [ 192.248811][T11089] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1243'. [ 192.299508][T11095] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1246'. [ 192.608678][T11105] bond7 (unregistering): Released all slaves [ 192.711482][T11108] bond7 (unregistering): Released all slaves [ 192.755843][ T1110] tipc: Subscription rejected, illegal request [ 192.934164][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1252'. [ 192.970638][T11117] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 192.979383][T11117] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 193.382320][T11132] wg1 speed is unknown, defaulting to 1000 [ 193.421245][T11132] lo speed is unknown, defaulting to 1000 [ 193.464577][T11132] lo speed is unknown, defaulting to 1000 [ 193.505996][T11139] bond0: (slave team0): Releasing backup interface [ 193.521126][T11139] bond0: (slave bond_slave_0): Releasing backup interface [ 193.542333][T11139] bond0: (slave bond_slave_1): Releasing backup interface [ 193.573201][T11139] team0: Port device team_slave_0 removed [ 193.591477][T11139] team0: Port device team_slave_1 removed [ 193.603440][T11139] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.820148][ T9810] tipc: Subscription rejected, illegal request [ 193.958568][T11160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1264'. [ 194.033111][T11166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 194.072707][T11166] hsr_slave_0: left promiscuous mode [ 194.272218][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.451431][T11189] FAULT_INJECTION: forcing a failure. [ 194.451431][T11189] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 194.467337][T11184] dvmrp6: entered allmulticast mode [ 194.592505][T11189] CPU: 0 UID: 0 PID: 11189 Comm: syz.4.1273 Not tainted syzkaller #0 PREEMPT(full) [ 194.592532][T11189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.592541][T11189] Call Trace: [ 194.592547][T11189] [ 194.592556][T11189] dump_stack_lvl+0xe8/0x150 [ 194.592582][T11189] should_fail_ex+0x414/0x560 [ 194.592613][T11189] prepare_alloc_pages+0x22b/0x650 [ 194.592640][T11189] __alloc_frozen_pages_noprof+0x123/0x370 [ 194.592662][T11189] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 194.592685][T11189] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 194.592709][T11189] ? policy_nodemask+0x27c/0x720 [ 194.592733][T11189] alloc_pages_mpol+0x232/0x4a0 [ 194.592757][T11189] vma_alloc_folio_noprof+0xe4/0x200 [ 194.592780][T11189] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 194.592811][T11189] folio_prealloc+0x30/0x180 [ 194.592830][T11189] do_wp_page+0x1231/0x5810 [ 194.592861][T11189] ? ___pte_offset_map+0x29/0x240 [ 194.592893][T11189] ? __pfx_do_wp_page+0x10/0x10 [ 194.592911][T11189] ? do_raw_spin_lock+0x121/0x290 [ 194.592936][T11189] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 194.592968][T11189] handle_mm_fault+0x14c5/0x32b0 [ 194.593004][T11189] ? handle_mm_fault+0xdb/0x32b0 [ 194.593034][T11189] ? __pfx_handle_mm_fault+0x10/0x10 [ 194.593069][T11189] ? __pfx___up_read+0x10/0x10 [ 194.593105][T11189] ? lock_mm_and_find_vma+0x9c/0x300 [ 194.593125][T11189] do_user_addr_fault+0x764/0x1380 [ 194.593158][T11189] exc_page_fault+0x71/0xd0 [ 194.593180][T11189] asm_exc_page_fault+0x26/0x30 [ 194.593196][T11189] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 194.593220][T11189] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 194.593235][T11189] RSP: 0018:ffffc9001ac7fc78 EFLAGS: 00050202 [ 194.593252][T11189] RAX: ffffffff848e0501 RBX: 000000000014000e RCX: 000000000012a10e [ 194.593264][T11189] RDX: 0000000000000000 RSI: ffff88803a815f00 RDI: 0000200000016000 [ 194.593276][T11189] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000006 [ 194.593288][T11189] R10: dffffc0000000000 R11: ffffed1007528001 R12: 000020000014010e [ 194.593300][T11189] R13: 00007ffffffff000 R14: ffff88803a800000 R15: 0000200000000100 [ 194.593322][T11189] ? _copy_from_user+0x81/0xb0 [ 194.593347][T11189] _copy_to_user+0x8a/0xb0 [ 194.593368][T11189] map_get_next_key+0x4c0/0x630 [ 194.593394][T11189] ? map_get_next_key+0x286/0x630 [ 194.593420][T11189] __sys_bpf+0x63d/0x860 [ 194.593443][T11189] ? __pfx___sys_bpf+0x10/0x10 [ 194.593481][T11189] ? ksys_write+0x22a/0x250 [ 194.593501][T11189] ? __pfx_ksys_write+0x10/0x10 [ 194.593529][T11189] __x64_sys_bpf+0x7c/0x90 [ 194.593550][T11189] do_syscall_64+0xec/0xf80 [ 194.593570][T11189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.593586][T11189] ? trace_irq_disable+0x37/0x100 [ 194.593606][T11189] ? clear_bhb_loop+0x60/0xb0 [ 194.593627][T11189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.593642][T11189] RIP: 0033:0x7f4df198f749 [ 194.593657][T11189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.593671][T11189] RSP: 002b:00007f4df2872038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.593689][T11189] RAX: ffffffffffffffda RBX: 00007f4df1be6090 RCX: 00007f4df198f749 [ 194.593702][T11189] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 194.593713][T11189] RBP: 00007f4df2872090 R08: 0000000000000000 R09: 0000000000000000 [ 194.593724][T11189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.593735][T11189] R13: 00007f4df1be6128 R14: 00007f4df1be6090 R15: 00007fffbaadca78 [ 194.593766][T11189] [ 194.620578][T11194] bond5: option arp_interval: invalid value (18446744073709551615) [ 194.982712][T11194] bond5: option arp_interval: allowed values 0 - 2147483647 [ 194.994264][T11194] bond5 (unregistering): Released all slaves [ 195.137852][T11203] wg1 speed is unknown, defaulting to 1000 [ 195.159168][T11203] lo speed is unknown, defaulting to 1000 [ 195.177327][T11203] lo speed is unknown, defaulting to 1000 [ 195.301591][T11227] ip6_vti0: entered promiscuous mode [ 195.633059][T11241] netlink: 'syz.1.1286': attribute type 1 has an invalid length. [ 195.709553][T11241] wg1 speed is unknown, defaulting to 1000 [ 195.717174][T11241] lo speed is unknown, defaulting to 1000 [ 195.724498][T11241] lo speed is unknown, defaulting to 1000 [ 195.773726][T11251] netlink: 'syz.2.1289': attribute type 16 has an invalid length. [ 195.952554][ T130] IPVS: starting estimator thread 0... [ 196.117995][T11262] IPVS: using max 28 ests per chain, 67200 per kthread [ 196.201344][T11281] netlink: 'syz.2.1298': attribute type 39 has an invalid length. [ 196.201389][T11279] __nla_validate_parse: 7 callbacks suppressed [ 196.201401][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1296'. [ 196.235663][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1296'. [ 196.292654][T11284] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 196.329015][T11288] dvmrp0: entered allmulticast mode [ 196.440192][T11297] netlink: 'syz.4.1301': attribute type 3 has an invalid length. [ 196.499046][T11304] tipc: Enabling of bearer rejected, failed to enable media [ 196.806352][T11337] wg1 speed is unknown, defaulting to 1000 [ 196.839150][T11337] lo speed is unknown, defaulting to 1000 [ 196.846459][T11337] lo speed is unknown, defaulting to 1000 [ 196.894354][T11343] sctp: [Deprecated]: syz.3.1314 (pid 11343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.894354][T11343] Use struct sctp_sack_info instead [ 197.263563][T11327] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1309'. [ 197.297208][T11361] xt_HMARK: spi-set and port-set can't be combined [ 197.364902][T11364] netlink: 'syz.2.1317': attribute type 8 has an invalid length. [ 197.388848][T11364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.508517][T11341] wg1 speed is unknown, defaulting to 1000 [ 197.521392][T11341] lo speed is unknown, defaulting to 1000 [ 197.548380][T11341] lo speed is unknown, defaulting to 1000 [ 197.761898][T11378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1321'. [ 197.864661][T11387] lo: Caught tx_queue_len zero misconfig [ 197.889149][T11385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1324'. [ 197.917884][T11385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1324'. [ 197.937802][T11385] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 197.988590][T11393] ip6t_srh: unknown srh invflags BA61 [ 198.159590][T11402] wg1 speed is unknown, defaulting to 1000 [ 198.167216][T11402] lo speed is unknown, defaulting to 1000 [ 198.175068][T11402] lo speed is unknown, defaulting to 1000 [ 198.184645][T11398] tunl0: Caught tx_queue_len zero misconfig [ 198.228892][T11383] infiniband !yz!: set down [ 198.255978][T11383] infiniband !yz!: added team_slave_0 [ 198.357034][T11383] RDS/IB: !yz!: added [ 198.361402][T11383] smc: adding ib device !yz! with port count 1 [ 198.367856][T11383] smc: ib device !yz! port 1 has no pnetid [ 198.687139][T11428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1334'. [ 199.085054][T11440] geneve4: entered promiscuous mode [ 199.098616][ T50] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.107150][ T50] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.134515][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.143306][ T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.358866][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1336'. [ 199.395590][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1336'. [ 199.408407][T11436] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1336'. [ 199.441858][T11436] netlink: 'syz.2.1336': attribute type 8 has an invalid length. [ 199.554923][T11462] netlink: 'syz.4.1345': attribute type 13 has an invalid length. [ 199.563417][T11462] netlink: 'syz.4.1345': attribute type 17 has an invalid length. [ 199.586420][T11462] gretap0: left promiscuous mode [ 199.664983][T11462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.718985][T11466] netlink: 'syz.3.1346': attribute type 30 has an invalid length. [ 199.752022][T11466] netlink: 'syz.3.1346': attribute type 30 has an invalid length. [ 199.760166][ T6018] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.768488][ T6018] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.776693][ T6018] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.794563][ T6018] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.373717][T11473] wg1 speed is unknown, defaulting to 1000 [ 200.384008][T11473] lo speed is unknown, defaulting to 1000 [ 200.408712][T11473] lo speed is unknown, defaulting to 1000 [ 200.702156][T11484] xt_bpf: check failed: parse error [ 201.453860][T11501] __nla_validate_parse: 3 callbacks suppressed [ 201.453880][T11501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1355'. [ 201.505806][T11501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1355'. [ 201.529782][T11508] bond0: option all_slaves_active: invalid value (7) [ 201.636391][T11512] wg1 speed is unknown, defaulting to 1000 [ 201.659270][T11512] lo speed is unknown, defaulting to 1000 [ 201.679878][T11512] lo speed is unknown, defaulting to 1000 [ 201.740999][T11517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1360'. [ 202.238078][T11537] tipc: Enabling of bearer rejected, media not registered [ 202.253349][T11537] netlink: 'syz.0.1364': attribute type 13 has an invalid length. [ 202.598020][T11558] netlink: 'syz.1.1369': attribute type 10 has an invalid length. [ 202.654175][T11560] netlink: 'syz.1.1369': attribute type 10 has an invalid length. [ 202.826142][T11564] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 202.852020][T11558] team0: Port device dummy0 added [ 202.921704][T11560] team0: Port device dummy0 removed [ 202.935862][T11560] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 203.291752][T11588] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 203.399518][T11594] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1375'. [ 203.402346][T11593] netlink: 'syz.0.1378': attribute type 3 has an invalid length. [ 203.585135][T11599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.635076][T11599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.663746][T11599] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 203.696525][T11599] bond0: (slave gre0): Error -95 calling set_mac_address [ 204.066335][T11620] wg1 speed is unknown, defaulting to 1000 [ 204.099627][T11620] lo speed is unknown, defaulting to 1000 [ 204.107070][T11620] lo speed is unknown, defaulting to 1000 [ 204.247173][T11633] netlink: 'syz.1.1388': attribute type 83 has an invalid length. [ 204.259327][T11634] netlink: 'syz.0.1387': attribute type 4 has an invalid length. [ 204.274683][T11634] netlink: 'syz.0.1387': attribute type 1 has an invalid length. [ 204.438249][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1387'. [ 204.449338][T11634] 8021q: adding VLAN 0 to HW filter on device bond7 [ 204.604346][T11638] bond7: (slave gretap2): making interface the new active one [ 204.642113][T11638] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 205.100589][T11673] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 205.199302][T11640] bond7 (unregistering): (slave gretap2): Releasing active interface [ 205.255597][T11640] bond7 (unregistering): Released all slaves [ 205.547138][T11672] wg1 speed is unknown, defaulting to 1000 [ 205.759265][T11672] lo speed is unknown, defaulting to 1000 [ 205.796815][T11672] lo speed is unknown, defaulting to 1000 [ 205.969871][T11675] netlink: 'syz.4.1394': attribute type 2 has an invalid length. [ 205.981120][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1402'. [ 206.060134][T11730] netlink: 'syz.1.1404': attribute type 2 has an invalid length. [ 206.412622][T11746] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1407'. [ 206.444575][T11746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1407'. [ 206.468538][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 206.606223][T11750] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 206.617914][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1410'. [ 206.788552][T11753] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1411'. [ 207.179155][T11771] netlink: 'syz.2.1417': attribute type 1 has an invalid length. [ 207.568646][T11788] netlink: 'syz.4.1420': attribute type 1 has an invalid length. [ 207.578492][T11788] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1420'. [ 207.992423][ T5058] tipc: Subscription rejected, illegal request [ 208.655149][ T50] tipc: Subscription rejected, illegal request [ 208.673745][T11826] FAULT_INJECTION: forcing a failure. [ 208.673745][T11826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.743990][T11826] CPU: 0 UID: 0 PID: 11826 Comm: syz.1.1432 Not tainted syzkaller #0 PREEMPT(full) [ 208.744018][T11826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 208.744029][T11826] Call Trace: [ 208.744036][T11826] [ 208.744044][T11826] dump_stack_lvl+0xe8/0x150 [ 208.744071][T11826] should_fail_ex+0x414/0x560 [ 208.744101][T11826] _copy_to_user+0x31/0xb0 [ 208.744124][T11826] simple_read_from_buffer+0xe1/0x170 [ 208.744149][T11826] proc_fail_nth_read+0x1b3/0x220 [ 208.744172][T11826] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.744193][T11826] ? rw_verify_area+0x2a6/0x4d0 [ 208.744216][T11826] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.744236][T11826] vfs_read+0x200/0xa30 [ 208.744252][T11826] ? fdget_pos+0x247/0x320 [ 208.744276][T11826] ? __pfx___mutex_lock+0x10/0x10 [ 208.744298][T11826] ? __pfx_vfs_read+0x10/0x10 [ 208.744317][T11826] ? __fget_files+0x2a/0x420 [ 208.744341][T11826] ? __fget_files+0x3a0/0x420 [ 208.744365][T11826] ? __fget_files+0x2a/0x420 [ 208.744392][T11826] ksys_read+0x145/0x250 [ 208.744412][T11826] ? __pfx_ksys_read+0x10/0x10 [ 208.744440][T11826] do_syscall_64+0xec/0xf80 [ 208.744461][T11826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.744477][T11826] ? trace_irq_disable+0x37/0x100 [ 208.744497][T11826] ? clear_bhb_loop+0x60/0xb0 [ 208.744518][T11826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.744535][T11826] RIP: 0033:0x7f4155b8e15c [ 208.744551][T11826] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 208.744566][T11826] RSP: 002b:00007f4156a9e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.744585][T11826] RAX: ffffffffffffffda RBX: 00007f4155de5fa0 RCX: 00007f4155b8e15c [ 208.744599][T11826] RDX: 000000000000000f RSI: 00007f4156a9e0a0 RDI: 0000000000000004 [ 208.744610][T11826] RBP: 00007f4156a9e090 R08: 0000000000000000 R09: 0000000000000000 [ 208.744620][T11826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.744631][T11826] R13: 00007f4155de6038 R14: 00007f4155de5fa0 R15: 00007ffdfe6b0b98 [ 208.744666][T11826] [ 208.902886][T11825] netlink: 'syz.0.1434': attribute type 39 has an invalid length. [ 209.134609][T11840] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1437'. [ 209.161171][T11839] tipc: Enabling of bearer rejected, already enabled [ 209.210622][T11843] wg1 speed is unknown, defaulting to 1000 [ 209.233448][T11843] lo speed is unknown, defaulting to 1000 [ 209.290954][T11843] lo speed is unknown, defaulting to 1000 [ 209.351893][T11859] netlink: 'syz.1.1444': attribute type 21 has an invalid length. [ 209.375474][T11854] wg1 speed is unknown, defaulting to 1000 [ 209.412556][T11854] lo speed is unknown, defaulting to 1000 [ 209.435488][T11854] lo speed is unknown, defaulting to 1000 [ 209.666973][T11874] syzkaller0: entered promiscuous mode [ 209.673524][T11874] syzkaller0: entered allmulticast mode [ 209.940264][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 210.162635][T11888] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1451'. [ 210.188503][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1451'. [ 210.658105][T11907] netlink: get zone limit has 8 unknown bytes [ 210.710600][T11910] FAULT_INJECTION: forcing a failure. [ 210.710600][T11910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.724217][T11910] CPU: 0 UID: 0 PID: 11910 Comm: syz.0.1457 Not tainted syzkaller #0 PREEMPT(full) [ 210.724243][T11910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.724253][T11910] Call Trace: [ 210.724260][T11910] [ 210.724269][T11910] dump_stack_lvl+0xe8/0x150 [ 210.724295][T11910] should_fail_ex+0x414/0x560 [ 210.724326][T11910] _copy_from_user+0x2d/0xb0 [ 210.724347][T11910] __sys_bpf+0x1e3/0x860 [ 210.724376][T11910] ? __pfx___sys_bpf+0x10/0x10 [ 210.724424][T11910] ? ksys_write+0x22a/0x250 [ 210.724443][T11910] ? __pfx_ksys_write+0x10/0x10 [ 210.724467][T11910] __x64_sys_bpf+0x7c/0x90 [ 210.724489][T11910] do_syscall_64+0xec/0xf80 [ 210.724509][T11910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.724525][T11910] ? trace_irq_disable+0x37/0x100 [ 210.724546][T11910] ? clear_bhb_loop+0x60/0xb0 [ 210.724566][T11910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.724583][T11910] RIP: 0033:0x7fc2cbb8f749 [ 210.724599][T11910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.724614][T11910] RSP: 002b:00007fc2cca8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.724634][T11910] RAX: ffffffffffffffda RBX: 00007fc2cbde5fa0 RCX: 00007fc2cbb8f749 [ 210.724646][T11910] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 210.724657][T11910] RBP: 00007fc2cca8d090 R08: 0000000000000000 R09: 0000000000000000 [ 210.724668][T11910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.724678][T11910] R13: 00007fc2cbde6038 R14: 00007fc2cbde5fa0 R15: 00007ffdff20c1e8 [ 210.724708][T11910] [ 211.137246][T11924] netlink: 'syz.3.1458': attribute type 12 has an invalid length. [ 211.173957][T11913] wg1 speed is unknown, defaulting to 1000 [ 211.208149][T11913] lo speed is unknown, defaulting to 1000 [ 211.225713][T11913] lo speed is unknown, defaulting to 1000 [ 211.603647][ T1110] tipc: Subscription rejected, illegal request [ 211.617976][T11938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1466'. [ 211.665141][T11938] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1466'. [ 212.219263][T11954] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1470'. [ 212.356889][T11959] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 212.402861][T11961] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 212.737663][T11971] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1474'. [ 212.740506][T11963] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.754539][T11963] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.981954][T11963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.002107][T11963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.220716][T11963] batman_adv: batadv0: Interface deactivated: gretap1 [ 213.252110][T11963] veth1_macvtap: left allmulticast mode [ 213.355091][ T36] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.364236][ T36] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.388845][T11968] syzkaller1: entered promiscuous mode [ 213.397597][T11968] syzkaller1: entered allmulticast mode [ 213.448366][ T36] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.538038][ T36] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.784693][T11996] netlink: 364 bytes leftover after parsing attributes in process `syz.4.1480'. [ 213.880166][T12013] netlink: 'syz.3.1484': attribute type 12 has an invalid length. [ 213.929538][T12014] netlink: 'syz.3.1484': attribute type 10 has an invalid length. [ 213.946255][T12014] bridge0: port 1(macsec0) entered blocking state [ 213.963718][T12013] netlink: 'syz.3.1484': attribute type 10 has an invalid length. [ 213.966117][T12022] netlink: 'syz.0.1486': attribute type 9 has an invalid length. [ 213.980725][T12022] netlink: 212396 bytes leftover after parsing attributes in process `syz.0.1486'. [ 213.982317][T12014] bridge0: port 1(macsec0) entered disabled state [ 213.997012][T12014] macsec0: entered allmulticast mode [ 214.002483][T12014] veth1_macvtap: entered allmulticast mode [ 214.010995][T12014] macsec0: entered promiscuous mode [ 214.521627][T12048] siw: device registration error -23 [ 214.539995][T12048] netlink: 'syz.0.1492': attribute type 10 has an invalid length. [ 215.104335][T12016] wg1 speed is unknown, defaulting to 1000 [ 215.123612][T12016] lo speed is unknown, defaulting to 1000 [ 215.141889][T12058] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1495'. [ 215.152442][T12016] lo speed is unknown, defaulting to 1000 [ 215.293935][T12060] sctp: [Deprecated]: syz.3.1496 (pid 12060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.293935][T12060] Use struct sctp_sack_info instead [ 215.821846][T12064] netlink: 'syz.3.1498': attribute type 1 has an invalid length. [ 215.832705][T12066] netlink: 'syz.0.1499': attribute type 1 has an invalid length. [ 215.848951][T12064] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1498'. [ 215.956137][T12071] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 215.969166][T12071] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 215.973712][T12066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1499'. [ 216.017223][T12066] 8021q: adding VLAN 0 to HW filter on device bond7 [ 216.142653][T12066] bond7: (slave bridge4): Enslaving as an active interface with a down link [ 216.313979][T12079] netlink: 'syz.3.1503': attribute type 10 has an invalid length. [ 216.330354][T12079] team0: Port device dummy0 added [ 216.339085][T12079] netlink: 'syz.3.1503': attribute type 10 has an invalid length. [ 216.372621][T12079] team0: Port device dummy0 removed [ 216.435085][T12079] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 216.620534][T12083] raw_sendmsg: syz.0.1504 forgot to set AF_INET. Fix it! [ 217.621954][T12101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1509'. [ 217.802999][T12109] netlink: 'syz.0.1513': attribute type 1 has an invalid length. [ 217.808343][T12105] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1510'. [ 217.853045][T12110] bond8: entered promiscuous mode [ 217.858691][T12110] 8021q: adding VLAN 0 to HW filter on device bond8 [ 217.892215][T12115] 8021q: adding VLAN 0 to HW filter on device bond8 [ 217.900176][T12115] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 217.910903][T12115] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 217.917931][T12110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.927634][T12110] IPv6: NLM_F_CREATE should be set when creating new route [ 217.934886][T12110] IPv6: NLM_F_CREATE should be set when creating new route [ 217.943764][T12110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.973284][T12115] bond8: (slave wireguard0): making interface the new active one [ 217.981269][T12115] wireguard0: entered promiscuous mode [ 217.988864][T12115] bond8: (slave wireguard0): Enslaving as an active interface with an up link [ 218.003717][T12122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1512'. [ 218.068844][T12119] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.079667][T12119] bond2: (slave bond3): making interface the new active one [ 218.090027][T12119] bond2: (slave bond3): Enslaving as an active interface with an up link [ 218.152340][T12120] bond2: (slave gretap4): Enslaving as a backup interface with an up link [ 218.175180][T12110] bond8: (slave wireguard1): The slave device specified does not support setting the MAC address [ 218.192370][T12110] bond8: (slave wireguard1): Enslaving as a backup interface with an up link [ 218.209973][T12122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.228950][T12113] vlan5: entered promiscuous mode [ 218.234154][T12113] bond2: entered promiscuous mode [ 218.240510][T12113] bond3: entered promiscuous mode [ 218.256822][T12129] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1516'. [ 218.296454][T12127] syzkaller1: entered promiscuous mode [ 218.325344][T12127] syzkaller1: entered allmulticast mode [ 218.353810][T12133] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1516'. [ 218.367716][T12133] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1516'. [ 218.387138][T12133] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1516'. [ 218.582471][T12151] syzkaller1: entered promiscuous mode [ 218.588606][T12151] syzkaller1: entered allmulticast mode [ 218.834566][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1525'. [ 218.852971][T12145] wg1 speed is unknown, defaulting to 1000 [ 218.893988][T12145] lo speed is unknown, defaulting to 1000 [ 218.919556][T12145] lo speed is unknown, defaulting to 1000 [ 219.066264][T12176] validate_nla: 3 callbacks suppressed [ 219.066283][T12176] netlink: 'syz.4.1528': attribute type 5 has an invalid length. [ 219.223363][T12186] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1531'. [ 219.356074][T12182] wg1 speed is unknown, defaulting to 1000 [ 219.376926][T12182] lo speed is unknown, defaulting to 1000 [ 219.403939][T12182] lo speed is unknown, defaulting to 1000 [ 219.783736][T12198] bridge0: port 1(gretap0) entered blocking state [ 219.801392][T12198] bridge0: port 1(gretap0) entered disabled state [ 219.827941][T12198] gretap0: entered allmulticast mode [ 219.843442][T12198] gretap0: entered promiscuous mode [ 220.343565][T12218] tipc: Started in network mode [ 220.350280][T12218] tipc: Node identity a6d72b9cdf5c, cluster identity 4711 [ 220.358809][T12218] tipc: Enabled bearer , priority 0 [ 220.367230][T12215] syzkaller0: entered promiscuous mode [ 220.374796][T12215] syzkaller0: entered allmulticast mode [ 220.385731][T12218] tipc: Resetting bearer [ 220.397995][T12214] tipc: Resetting bearer [ 220.453122][T12214] tipc: Disabling bearer [ 220.755907][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1544'. [ 220.900536][T12247] netlink: 'syz.3.1549': attribute type 1 has an invalid length. [ 220.958631][T12247] bond5: entered promiscuous mode [ 220.964084][T12247] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.229299][T12263] nftables ruleset with unbound chain [ 221.314269][T12273] tipc: Enabled bearer , priority 0 [ 221.323688][T12272] tipc: Enabling of bearer rejected, already enabled [ 221.375817][T12273] syzkaller0: entered promiscuous mode [ 221.382157][T12273] syzkaller0: entered allmulticast mode [ 221.388951][T12273] tipc: Resetting bearer [ 221.400299][T12271] tipc: Resetting bearer [ 222.875042][T12271] tipc: Disabling bearer [ 222.897570][T12284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.956818][ T6120] tipc: Node number set to 2039163804 [ 222.966559][T12298] netlink: 'syz.0.1561': attribute type 1 has an invalid length. [ 222.975394][T12298] __nla_validate_parse: 6 callbacks suppressed [ 222.975412][T12298] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1561'. [ 223.007615][T12298] NCSI netlink: No device for ifindex 0 [ 223.154789][T12306] wg1 speed is unknown, defaulting to 1000 [ 223.162576][T12306] lo speed is unknown, defaulting to 1000 [ 223.170179][T12306] lo speed is unknown, defaulting to 1000 [ 223.708437][T12344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1570'. [ 223.756927][T12319] wg1 speed is unknown, defaulting to 1000 [ 223.785851][T12319] lo speed is unknown, defaulting to 1000 [ 223.806129][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 223.831158][T12319] lo speed is unknown, defaulting to 1000 [ 224.093651][T12358] xt_l2tp: invalid flags combination: 8 [ 224.121852][T12336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.140593][T12358] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1575'. [ 224.190608][T12358] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1575'. [ 224.204565][T12360] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1575'. [ 224.224653][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1576'. [ 224.250528][T12358] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1575'. [ 224.296108][T12358] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1575'. [ 224.348776][T12358] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1575'. [ 224.371322][T12347] wg1 speed is unknown, defaulting to 1000 [ 224.421122][T12347] lo speed is unknown, defaulting to 1000 [ 224.604330][T12347] lo speed is unknown, defaulting to 1000 [ 224.720585][T12370] wg1 speed is unknown, defaulting to 1000 [ 224.806622][T12370] lo speed is unknown, defaulting to 1000 [ 224.834227][T12370] lo speed is unknown, defaulting to 1000 [ 225.305707][T12393] FAULT_INJECTION: forcing a failure. [ 225.305707][T12393] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 225.320817][T12393] CPU: 0 UID: 0 PID: 12393 Comm: syz.0.1586 Not tainted syzkaller #0 PREEMPT(full) [ 225.320841][T12393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.320852][T12393] Call Trace: [ 225.320859][T12393] [ 225.320867][T12393] dump_stack_lvl+0xe8/0x150 [ 225.320904][T12393] should_fail_ex+0x414/0x560 [ 225.320935][T12393] prepare_alloc_pages+0x22b/0x650 [ 225.320962][T12393] __alloc_frozen_pages_noprof+0x123/0x370 [ 225.320985][T12393] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 225.321009][T12393] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 225.321033][T12393] ? policy_nodemask+0x27c/0x720 [ 225.321058][T12393] alloc_pages_mpol+0x232/0x4a0 [ 225.321082][T12393] vma_alloc_folio_noprof+0xe4/0x200 [ 225.321105][T12393] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 225.321137][T12393] folio_prealloc+0x30/0x180 [ 225.321155][T12393] do_wp_page+0x1231/0x5810 [ 225.321186][T12393] ? ___pte_offset_map+0x29/0x240 [ 225.321217][T12393] ? __pfx_do_wp_page+0x10/0x10 [ 225.321236][T12393] ? do_raw_spin_lock+0x121/0x290 [ 225.321260][T12393] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 225.321292][T12393] handle_mm_fault+0x14c5/0x32b0 [ 225.321326][T12393] ? handle_mm_fault+0xdb/0x32b0 [ 225.321357][T12393] ? __pfx_handle_mm_fault+0x10/0x10 [ 225.321391][T12393] ? __pfx___up_read+0x10/0x10 [ 225.321417][T12393] ? lock_mm_and_find_vma+0x9c/0x300 [ 225.321436][T12393] do_user_addr_fault+0x764/0x1380 [ 225.321469][T12393] exc_page_fault+0x71/0xd0 [ 225.321490][T12393] asm_exc_page_fault+0x26/0x30 [ 225.321506][T12393] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 225.321531][T12393] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 225.321546][T12393] RSP: 0018:ffffc9000b9cfc78 EFLAGS: 00050202 [ 225.321562][T12393] RAX: ffffffff848e0501 RBX: 000000000014000e RCX: 000000000011710e [ 225.321574][T12393] RDX: 0000000000000000 RSI: ffff888046c28f00 RDI: 0000200000029000 [ 225.321587][T12393] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000006 [ 225.321598][T12393] R10: dffffc0000000000 R11: ffffed1008da8001 R12: 000020000014010e [ 225.321610][T12393] R13: 00007ffffffff000 R14: ffff888046c00000 R15: 0000200000000100 [ 225.321631][T12393] ? _copy_from_user+0x81/0xb0 [ 225.321658][T12393] _copy_to_user+0x8a/0xb0 [ 225.321680][T12393] map_get_next_key+0x4c0/0x630 [ 225.321705][T12393] ? map_get_next_key+0x286/0x630 [ 225.321729][T12393] __sys_bpf+0x63d/0x860 [ 225.321753][T12393] ? __pfx___sys_bpf+0x10/0x10 [ 225.321789][T12393] ? ksys_write+0x22a/0x250 [ 225.321809][T12393] ? __pfx_ksys_write+0x10/0x10 [ 225.321833][T12393] __x64_sys_bpf+0x7c/0x90 [ 225.321854][T12393] do_syscall_64+0xec/0xf80 [ 225.321872][T12393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.321887][T12393] ? trace_irq_disable+0x37/0x100 [ 225.321913][T12393] ? clear_bhb_loop+0x60/0xb0 [ 225.321933][T12393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.321950][T12393] RIP: 0033:0x7fc2cbb8f749 [ 225.321965][T12393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.321980][T12393] RSP: 002b:00007fc2cca6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.321997][T12393] RAX: ffffffffffffffda RBX: 00007fc2cbde6090 RCX: 00007fc2cbb8f749 [ 225.322009][T12393] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 225.322021][T12393] RBP: 00007fc2cca6c090 R08: 0000000000000000 R09: 0000000000000000 [ 225.322032][T12393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.322043][T12393] R13: 00007fc2cbde6128 R14: 00007fc2cbde6090 R15: 00007ffdff20c1e8 [ 225.322073][T12393] [ 226.007024][ T60] tipc: Subscription rejected, illegal request [ 226.680461][ T30] audit: type=1800 audit(1768645093.773:7): pid=12447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1603" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=1710 res=0 errno=0 [ 226.982651][T12460] wg1 speed is unknown, defaulting to 1000 [ 227.042241][T12460] lo speed is unknown, defaulting to 1000 [ 227.052477][T12460] lo speed is unknown, defaulting to 1000 [ 227.089807][T12471] netlink: 'syz.2.1609': attribute type 27 has an invalid length. [ 227.134985][T12471] wg1 speed is unknown, defaulting to 1000 [ 227.166802][T12471] lo speed is unknown, defaulting to 1000 [ 227.183003][T12471] lo speed is unknown, defaulting to 1000 [ 227.342949][T12495] tipc: Enabling of bearer rejected, already enabled [ 227.666601][T12513] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 227.710834][T12513] tipc: Can't bind to reserved service type 1 [ 227.717258][T12513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.746702][T12520] FAULT_INJECTION: forcing a failure. [ 227.746702][T12520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.748135][T12520] [ 227.748143][T12520] ====================================================== [ 227.748148][T12520] WARNING: possible circular locking dependency detected [ 227.748159][T12520] syzkaller #0 Not tainted [ 227.748166][T12520] ------------------------------------------------------ [ 227.748172][T12520] syz.0.1625/12520 is trying to acquire lock: [ 227.748179][T12520] ffffffff8df35920 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x11a/0xb00 [ 227.748219][T12520] [ 227.748219][T12520] but task is already holding lock: [ 227.748223][T12520] ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 227.748253][T12520] [ 227.748253][T12520] which lock already depends on the new lock. [ 227.748253][T12520] [ 227.748257][T12520] [ 227.748257][T12520] the existing dependency chain (in reverse order) is: [ 227.748260][T12520] [ 227.748260][T12520] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 227.748272][T12520] _raw_spin_lock_nested+0x32/0x50 [ 227.748284][T12520] raw_spin_rq_lock_nested+0x2a/0x140 [ 227.748292][T12520] task_rq_lock+0xbc/0x470 [ 227.748300][T12520] cgroup_move_task+0x92/0x2a0 [ 227.748310][T12520] css_set_move_task+0x658/0x9e0 [ 227.748319][T12520] cgroup_post_fork+0x1ef/0x7a0 [ 227.748326][T12520] copy_process+0x3614/0x3950 [ 227.748335][T12520] kernel_clone+0x21e/0x820 [ 227.748344][T12520] user_mode_thread+0xdd/0x140 [ 227.748353][T12520] rest_init+0x23/0x300 [ 227.748365][T12520] start_kernel+0x381/0x3d0 [ 227.748376][T12520] x86_64_start_reservations+0x24/0x30 [ 227.748385][T12520] x86_64_start_kernel+0x143/0x1c0 [ 227.748393][T12520] common_startup_64+0x13e/0x147 [ 227.748404][T12520] [ 227.748404][T12520] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 227.748416][T12520] _raw_spin_lock_irqsave+0x40/0x60 [ 227.748425][T12520] try_to_wake_up+0x67/0x12b0 [ 227.748436][T12520] create_worker+0x503/0x720 [ 227.748448][T12520] workqueue_init+0x3ea/0x690 [ 227.748457][T12520] kernel_init_freeable+0x275/0x3d0 [ 227.748472][T12520] kernel_init+0x1d/0x1d0 [ 227.748484][T12520] ret_from_fork+0x510/0xa50 [ 227.748492][T12520] ret_from_fork_asm+0x1a/0x30 [ 227.748504][T12520] [ 227.748504][T12520] -> #3 (&pool->lock){-.-.}-{2:2}: [ 227.748516][T12520] _raw_spin_lock+0x2e/0x40 [ 227.748524][T12520] __queue_work+0x7eb/0xf90 [ 227.748532][T12520] queue_work_on+0x106/0x1c0 [ 227.748540][T12520] rpm_suspend+0xe44/0x1700 [ 227.748549][T12520] __pm_runtime_idle+0x12f/0x1a0 [ 227.748557][T12520] __device_attach+0x342/0x430 [ 227.748566][T12520] device_initial_probe+0xa1/0xd0 [ 227.748575][T12520] bus_probe_device+0x12a/0x220 [ 227.748586][T12520] device_add+0x7b6/0xb80 [ 227.748593][T12520] serial_base_port_add+0x18f/0x260 [ 227.748606][T12520] serial_core_register_port+0x369/0x2800 [ 227.748618][T12520] serial8250_register_8250_port+0x1658/0x1fd0 [ 227.748630][T12520] serial_pnp_probe+0x527/0x7d0 [ 227.748642][T12520] pnp_device_probe+0x30b/0x4c0 [ 227.748653][T12520] really_probe+0x26d/0xad0 [ 227.748662][T12520] __driver_probe_device+0x18c/0x320 [ 227.748671][T12520] driver_probe_device+0x4f/0x240 [ 227.748680][T12520] __driver_attach+0x349/0x650 [ 227.748689][T12520] bus_for_each_dev+0x233/0x2b0 [ 227.748700][T12520] bus_add_driver+0x345/0x670 [ 227.748711][T12520] driver_register+0x23a/0x320 [ 227.748721][T12520] serial8250_init+0x8f/0x160 [ 227.748730][T12520] do_one_initcall+0x1f1/0x800 [ 227.748740][T12520] do_initcall_level+0x104/0x190 [ 227.748751][T12520] do_initcalls+0x59/0xa0 [ 227.748761][T12520] kernel_init_freeable+0x2a7/0x3d0 [ 227.748772][T12520] kernel_init+0x1d/0x1d0 [ 227.748783][T12520] ret_from_fork+0x510/0xa50 [ 227.748790][T12520] ret_from_fork_asm+0x1a/0x30 [ 227.748801][T12520] [ 227.748801][T12520] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 227.748813][T12520] _raw_spin_lock_irqsave+0x40/0x60 [ 227.748821][T12520] __pm_runtime_resume+0x10f/0x180 [ 227.748830][T12520] __uart_start+0x171/0x460 [ 227.748841][T12520] uart_write+0xdc/0x130 [ 227.748854][T12520] n_tty_write+0xd78/0x12a0 [ 227.748864][T12520] file_tty_write+0x559/0xa20 [ 227.748875][T12520] vfs_write+0x5c9/0xb30 [ 227.748883][T12520] ksys_write+0x145/0x250 [ 227.748890][T12520] do_syscall_64+0xec/0xf80 [ 227.748900][T12520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.748908][T12520] [ 227.748908][T12520] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 227.748920][T12520] _raw_spin_lock_irqsave+0x40/0x60 [ 227.748929][T12520] serial8250_console_write+0x155/0x1b60 [ 227.748938][T12520] console_flush_all+0x713/0xb00 [ 227.748948][T12520] console_unlock+0xbb/0x190 [ 227.748957][T12520] vprintk_emit+0x47b/0x550 [ 227.748967][T12520] _printk+0xcf/0x120 [ 227.748978][T12520] register_console+0xa8b/0xf90 [ 227.748988][T12520] univ8250_console_init+0x3a/0x70 [ 227.748997][T12520] console_init+0xfc/0x3f0 [ 227.749005][T12520] start_kernel+0x227/0x3d0 [ 227.749015][T12520] x86_64_start_reservations+0x24/0x30 [ 227.749023][T12520] x86_64_start_kernel+0x143/0x1c0 [ 227.749031][T12520] common_startup_64+0x13e/0x147 [ 227.749041][T12520] [ 227.749041][T12520] -> #0 (console_owner){-.-.}-{0:0}: [ 227.749053][T12520] __lock_acquire+0x15a6/0x2cf0 [ 227.749061][T12520] lock_acquire+0x107/0x340 [ 227.749069][T12520] console_flush_all+0x6bc/0xb00 [ 227.749079][T12520] console_unlock+0xbb/0x190 [ 227.749088][T12520] vprintk_emit+0x47b/0x550 [ 227.749097][T12520] _printk+0xcf/0x120 [ 227.749108][T12520] should_fail_ex+0x3f5/0x560 [ 227.749120][T12520] strncpy_from_user+0x36/0x2c0 [ 227.749132][T12520] strncpy_from_user_nofault+0x72/0x150 [ 227.749141][T12520] bpf_probe_read_user_str+0x2a/0x70 [ 227.749150][T12520] bpf_prog_4049cf28f0ebfcec+0x64/0x6c [ 227.749158][T12520] bpf_trace_run2+0x3ff/0x4c0 [ 227.749168][T12520] __bpf_trace_tlb_flush+0xf5/0x150 [ 227.749179][T12520] trace_tlb_flush+0xff/0x120 [ 227.749190][T12520] switch_mm_irqs_off+0x4cc/0x700 [ 227.749201][T12520] __schedule+0xfdb/0x4fd0 [ 227.749209][T12520] preempt_schedule_common+0x83/0xd0 [ 227.749218][T12520] preempt_schedule_thunk+0x16/0x30 [ 227.749226][T12520] _raw_spin_unlock+0x3f/0x50 [ 227.749234][T12520] __text_poke+0x7ad/0x990 [ 227.749244][T12520] smp_text_poke_batch_finish+0xd0f/0x1130 [ 227.749255][T12520] arch_jump_label_transform_apply+0x1c/0x30 [ 227.749267][T12520] static_key_enable_cpuslocked+0x128/0x240 [ 227.749279][T12520] static_key_enable+0x1a/0x20 [ 227.749290][T12520] tracepoint_add_func+0x994/0xa10 [ 227.749301][T12520] tracepoint_probe_register_prio_may_exist+0x5f/0xa0 [ 227.749313][T12520] bpf_raw_tp_link_attach+0x4f0/0x6c0 [ 227.749321][T12520] bpf_raw_tracepoint_open+0x1b2/0x220 [ 227.749333][T12520] __sys_bpf+0x73e/0x860 [ 227.749343][T12520] __x64_sys_bpf+0x7c/0x90 [ 227.749352][T12520] do_syscall_64+0xec/0xf80 [ 227.749362][T12520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.749370][T12520] [ 227.749370][T12520] other info that might help us debug this: [ 227.749370][T12520] [ 227.749373][T12520] Chain exists of: [ 227.749373][T12520] console_owner --> &p->pi_lock --> &rq->__lock [ 227.749373][T12520] [ 227.749387][T12520] Possible unsafe locking scenario: [ 227.749387][T12520] [ 227.749390][T12520] CPU0 CPU1 [ 227.749393][T12520] ---- ---- [ 227.749396][T12520] lock(&rq->__lock); [ 227.749402][T12520] lock(&p->pi_lock); [ 227.749409][T12520] lock(&rq->__lock); [ 227.749415][T12520] lock(console_owner); [ 227.749421][T12520] [ 227.749421][T12520] *** DEADLOCK *** [ 227.749421][T12520] [ 227.749423][T12520] 9 locks held by syz.0.1625/12520: [ 227.749429][T12520] #0: ffffffff8df999c8 (tracepoints_mutex){+.+.}-{4:4}, at: tracepoint_probe_register_prio_may_exist+0x43/0xa0 [ 227.749454][T12520] #1: ffffffff8ddd9330 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 227.749477][T12520] #2: ffffffff8e000ae8 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 227.749501][T12520] #3: ffffffff8ddecaa8 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 227.749526][T12520] #4: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x29/0x240 [ 227.749550][T12520] #5: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 227.749571][T12520] #6: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4c0 [ 227.749602][T12520] #7: ffffffff8df35980 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 227.749631][T12520] #8: ffffffff8de1d238 (console_srcu){....}-{0:0}, at: console_flush_all+0x11a/0xb00 [ 227.749655][T12520] [ 227.749655][T12520] stack backtrace: [ 227.749661][T12520] CPU: 1 UID: 0 PID: 12520 Comm: syz.0.1625 Not tainted syzkaller #0 PREEMPT(full) [ 227.749672][T12520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.749678][T12520] Call Trace: [ 227.749686][T12520] [ 227.749691][T12520] dump_stack_lvl+0xe8/0x150 [ 227.749706][T12520] print_circular_bug+0x2e2/0x300 [ 227.749719][T12520] check_noncircular+0x12e/0x150 [ 227.749731][T12520] __lock_acquire+0x15a6/0x2cf0 [ 227.749745][T12520] ? console_flush_all+0x11a/0xb00 [ 227.749756][T12520] lock_acquire+0x107/0x340 [ 227.749770][T12520] ? console_flush_all+0x11a/0xb00 [ 227.749788][T12520] ? do_raw_spin_unlock+0x122/0x240 [ 227.749800][T12520] ? console_flush_all+0x11a/0xb00 [ 227.749811][T12520] console_flush_all+0x6bc/0xb00 [ 227.749822][T12520] ? console_flush_all+0x11a/0xb00 [ 227.749834][T12520] ? console_flush_all+0x11a/0xb00 [ 227.749852][T12520] ? __pfx_console_flush_all+0x10/0x10 [ 227.749865][T12520] ? is_printk_cpu_sync_owner+0x32/0x40 [ 227.749878][T12520] console_unlock+0xbb/0x190 [ 227.749889][T12520] ? __pfx_console_unlock+0x10/0x10 [ 227.749899][T12520] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 227.749909][T12520] ? _printk+0xcf/0x120 [ 227.749922][T12520] vprintk_emit+0x47b/0x550 [ 227.749933][T12520] ? __pfx_vprintk_emit+0x10/0x10 [ 227.749945][T12520] _printk+0xcf/0x120 [ 227.749958][T12520] ? __pfx__printk+0x10/0x10 [ 227.749971][T12520] ? __pfx_css_rstat_updated+0x10/0x10 [ 227.749984][T12520] ? ___ratelimit+0x5a0/0x900 [ 227.749994][T12520] ? __lock_acquire+0x6b6/0x2cf0 [ 227.750003][T12520] should_fail_ex+0x3f5/0x560 [ 227.750017][T12520] strncpy_from_user+0x36/0x2c0 [ 227.750029][T12520] ? lock_acquire+0x107/0x340 [ 227.750038][T12520] strncpy_from_user_nofault+0x72/0x150 [ 227.750049][T12520] bpf_probe_read_user_str+0x2a/0x70 [ 227.750059][T12520] bpf_prog_4049cf28f0ebfcec+0x64/0x6c [ 227.750067][T12520] bpf_trace_run2+0x3ff/0x4c0 [ 227.750078][T12520] ? bpf_trace_run2+0x186/0x4c0 [ 227.750094][T12520] ? __pfx_bpf_trace_run2+0x10/0x10 [ 227.750107][T12520] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 227.750120][T12520] __bpf_trace_tlb_flush+0xf5/0x150 [ 227.750132][T12520] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 227.750144][T12520] ? psi_group_change+0xab8/0x1050 [ 227.750156][T12520] ? __schedule+0x249b/0x4fd0 [ 227.750171][T12520] trace_tlb_flush+0xff/0x120 [ 227.750183][T12520] switch_mm_irqs_off+0x4cc/0x700 [ 227.750196][T12520] __schedule+0xfdb/0x4fd0 [ 227.750208][T12520] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 227.750222][T12520] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 227.750234][T12520] ? __pfx___schedule+0x10/0x10 [ 227.750243][T12520] ? lockdep_hardirqs_on+0x7b/0x110 [ 227.750255][T12520] ? irqentry_exit+0x5e8/0x670 [ 227.750265][T12520] ? trace_irq_disable+0x37/0x100 [ 227.750278][T12520] ? preempt_schedule_thunk+0x16/0x30 [ 227.750287][T12520] preempt_schedule_common+0x83/0xd0 [ 227.750297][T12520] ? trace_tlb_flush+0x6/0x120 [ 227.750308][T12520] preempt_schedule_thunk+0x16/0x30 [ 227.750318][T12520] _raw_spin_unlock+0x3f/0x50 [ 227.750327][T12520] __text_poke+0x7ad/0x990 [ 227.750338][T12520] ? __pfx_text_poke_memcpy+0x10/0x10 [ 227.750349][T12520] ? rcu_is_watching+0x15/0xb0 [ 227.750360][T12520] ? trace_tlb_flush+0x6/0x120 [ 227.750372][T12520] ? __pfx___text_poke+0x10/0x10 [ 227.750384][T12520] smp_text_poke_batch_finish+0xd0f/0x1130 [ 227.750398][T12520] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 227.750411][T12520] ? arch_jump_label_transform_queue+0x97/0x110 [ 227.750424][T12520] ? __jump_label_update+0x35a/0x380 [ 227.750438][T12520] arch_jump_label_transform_apply+0x1c/0x30 [ 227.750450][T12520] static_key_enable_cpuslocked+0x128/0x240 [ 227.750463][T12520] static_key_enable+0x1a/0x20 [ 227.750474][T12520] tracepoint_add_func+0x994/0xa10 [ 227.750488][T12520] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 227.750499][T12520] tracepoint_probe_register_prio_may_exist+0x5f/0xa0 [ 227.750512][T12520] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 227.750524][T12520] bpf_raw_tp_link_attach+0x4f0/0x6c0 [ 227.750534][T12520] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 227.750546][T12520] ? __fget_files+0x2a/0x420 [ 227.750559][T12520] bpf_raw_tracepoint_open+0x1b2/0x220 [ 227.750573][T12520] __sys_bpf+0x73e/0x860 [ 227.750584][T12520] ? __pfx___sys_bpf+0x10/0x10 [ 227.750599][T12520] ? ksys_write+0x22a/0x250 [ 227.750608][T12520] ? __pfx_ksys_write+0x10/0x10 [ 227.750618][T12520] __x64_sys_bpf+0x7c/0x90 [ 227.750628][T12520] do_syscall_64+0xec/0xf80 [ 227.750639][T12520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.750648][T12520] ? trace_irq_disable+0x37/0x100 [ 227.750659][T12520] ? clear_bhb_loop+0x60/0xb0 [ 227.750669][T12520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.750678][T12520] RIP: 0033:0x7fc2cbb8f749 [ 227.750686][T12520] Code: Unable to access opcode bytes at 0x7fc2cbb8f71f. [ 227.750691][T12520] RSP: 002b:00007fc2cca8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.750700][T12520] RAX: ffffffffffffffda RBX: 00007fc2cbde5fa0 RCX: 00007fc2cbb8f749 [ 227.750708][T12520] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 227.750714][T12520] RBP: 00007fc2cca8d090 R08: 0000000000000000 R09: 0000000000000000 [ 227.750720][T12520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.750725][T12520] R13: 00007fc2cbde6038 R14: 00007fc2cbde5fa0 R15: 00007ffdff20c1e8 [ 227.750736][T12520] [ 229.139935][T12520] CPU: 1 UID: 0 PID: 12520 Comm: syz.0.1625 Not tainted syzkaller #0 PREEMPT(full) [ 229.139950][T12520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.139957][T12520] Call Trace: [ 229.139964][T12520] [ 229.139971][T12520] dump_stack_lvl+0xe8/0x150 [ 229.139987][T12520] should_fail_ex+0x414/0x560 [ 229.140003][T12520] strncpy_from_user+0x36/0x2c0 [ 229.140016][T12520] ? lock_acquire+0x107/0x340 [ 229.140026][T12520] strncpy_from_user_nofault+0x72/0x150 [ 229.140042][T12520] bpf_probe_read_user_str+0x2a/0x70 [ 229.140053][T12520] bpf_prog_4049cf28f0ebfcec+0x64/0x6c [ 229.140062][T12520] bpf_trace_run2+0x3ff/0x4c0 [ 229.140074][T12520] ? bpf_trace_run2+0x186/0x4c0 [ 229.140085][T12520] ? __pfx_bpf_trace_run2+0x10/0x10 [ 229.140098][T12520] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 229.140111][T12520] __bpf_trace_tlb_flush+0xf5/0x150 [ 229.140125][T12520] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 229.140136][T12520] ? psi_group_change+0xab8/0x1050 [ 229.140149][T12520] ? __schedule+0x249b/0x4fd0 [ 229.140160][T12520] trace_tlb_flush+0xff/0x120 [ 229.140174][T12520] switch_mm_irqs_off+0x4cc/0x700 [ 229.140187][T12520] __schedule+0xfdb/0x4fd0 [ 229.140199][T12520] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 229.140213][T12520] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 229.140226][T12520] ? __pfx___schedule+0x10/0x10 [ 229.140236][T12520] ? lockdep_hardirqs_on+0x7b/0x110 [ 229.140246][T12520] ? irqentry_exit+0x5e8/0x670 [ 229.140257][T12520] ? trace_irq_disable+0x37/0x100 [ 229.140270][T12520] ? preempt_schedule_thunk+0x16/0x30 [ 229.140279][T12520] preempt_schedule_common+0x83/0xd0 [ 229.140289][T12520] ? trace_tlb_flush+0x6/0x120 [ 229.140300][T12520] preempt_schedule_thunk+0x16/0x30 [ 229.140310][T12520] _raw_spin_unlock+0x3f/0x50 [ 229.140320][T12520] __text_poke+0x7ad/0x990 [ 229.140333][T12520] ? __pfx_text_poke_memcpy+0x10/0x10 [ 229.140343][T12520] ? rcu_is_watching+0x15/0xb0 [ 229.140355][T12520] ? trace_tlb_flush+0x6/0x120 [ 229.140366][T12520] ? __pfx___text_poke+0x10/0x10 [ 229.140379][T12520] smp_text_poke_batch_finish+0xd0f/0x1130 [ 229.140393][T12520] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 229.140406][T12520] ? arch_jump_label_transform_queue+0x97/0x110 [ 229.140420][T12520] ? __jump_label_update+0x35a/0x380 [ 229.140434][T12520] arch_jump_label_transform_apply+0x1c/0x30 [ 229.140452][T12520] static_key_enable_cpuslocked+0x128/0x240 [ 229.140465][T12520] static_key_enable+0x1a/0x20 [ 229.140476][T12520] tracepoint_add_func+0x994/0xa10 [ 229.140492][T12520] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 229.140504][T12520] tracepoint_probe_register_prio_may_exist+0x5f/0xa0 [ 229.140516][T12520] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 229.140529][T12520] bpf_raw_tp_link_attach+0x4f0/0x6c0 [ 229.140540][T12520] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 229.140552][T12520] ? __fget_files+0x2a/0x420 [ 229.140565][T12520] bpf_raw_tracepoint_open+0x1b2/0x220 [ 229.140579][T12520] __sys_bpf+0x73e/0x860 [ 229.140591][T12520] ? __pfx___sys_bpf+0x10/0x10 [ 229.140606][T12520] ? ksys_write+0x22a/0x250 [ 229.140615][T12520] ? __pfx_ksys_write+0x10/0x10 [ 229.140625][T12520] __x64_sys_bpf+0x7c/0x90 [ 229.140636][T12520] do_syscall_64+0xec/0xf80 [ 229.140647][T12520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.140656][T12520] ? trace_irq_disable+0x37/0x100 [ 229.140667][T12520] ? clear_bhb_loop+0x60/0xb0 [ 229.140677][T12520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.140686][T12520] RIP: 0033:0x7fc2cbb8f749 [ 229.140695][T12520] Code: Unable to access opcode bytes at 0x7fc2cbb8f71f. [ 229.140700][T12520] RSP: 002b:00007fc2cca8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.140712][T12520] RAX: ffffffffffffffda RBX: 00007fc2cbde5fa0 RCX: 00007fc2cbb8f749 [ 229.140719][T12520] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 229.140725][T12520] RBP: 00007fc2cca8d090 R08: 0000000000000000 R09: 0000000000000000 [ 229.140731][T12520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.140737][T12520] R13: 00007fc2cbde6038 R14: 00007fc2cbde5fa0 R15: 00007ffdff20c1e8 [ 229.140747][T12520] [ 229.606790][T12522] wg1 speed is unknown, defaulting to 1000 [ 229.615164][T12522] lo speed is unknown, defaulting to 1000 [ 229.623160][T12522] lo speed is unknown, defaulting to 1000