last executing test programs: 18.953638927s ago: executing program 1 (id=6256): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41) socket$inet6(0xa, 0x5, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000001) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="94000000070a0104000000000000000003000005340005800800014000000004080001400000430508000240000000010800024000000005080001400000003c08000240000000000900020073797a30000000000c000340000000000000000308000b400000000424000580080001"], 0x94}, 0x1, 0x0, 0x0, 0x48000}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x208, 0x228, 0x25a, 0x208, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050625bd700001dcdf251100000018000180140002d009edf3dc0000004d0000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x41840) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000040)=@ethtool_perm_addr}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="060000001000010000000000000ec63fffe5e5e022b9292530676c000000050000946d0000001100110000ffffffffff0a6cf6a1000a"], 0x28}}, 0x0) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000002c0)=0x8) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000206050000000000000000000700000505000400030000000900020073797a320000000014000780050015000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 13.604816194s ago: executing program 0 (id=6259): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001380)={'ip6_vti0\x00', &(0x7f0000001300)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x7, 0x5, 0x1, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x7800, 0x80, 0x7, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1f, 0x13, &(0x7f0000001640)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000ffff00007b8af0ff00000000bfa100005c9b21d407010000f8ffffffbfa40000000000cadc56c986a477bd10a93fbb57690007040000f0ffffffb70200000900000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000001847000001000000000000000000000018000000040000000000000005000000183100000100"/72], &(0x7f00000012c0)='syzkaller\x00', 0x9, 0x0, 0xffffffffffffffff, 0x41000, 0xd, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x0, 0x9, 0x0, 0x10000}, 0x10, 0x0, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000001440)=[{0x1, 0x3, 0x8, 0x5}, {0x0, 0x5, 0xd, 0xb}, {0x3, 0x3, 0xb, 0x7}, {0x1, 0x3, 0xd, 0x3}, {0x2, 0x4, 0xe, 0x5}, {0x4, 0x5, 0x9, 0x3}, {0x5, 0x2, 0x9}, {0x3, 0x5, 0xd, 0xb}, {0x3, 0x3, 0x10, 0x8}], 0x10, 0x8001}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x100000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c00000400428011000100686d6163287368613232340000000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101", 0x46}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r6) socket(0x2b, 0x1, 0x1) r8 = socket$inet6(0xa, 0x805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x2a, 0x6, 0x4, &(0x7f0000001080)={0xffffffffffffffff}) sendmsg$AUDIT_TTY_SET(r10, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x1, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x8040) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r11, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r8, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 11.337724484s ago: executing program 4 (id=6262): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000240), 0x4) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0x1a2, 0x40010000, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x2a}, 0x60) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r4, &(0x7f0000000a80)=[{&(0x7f0000000540)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8ced5b1a", 0xae}, {&(0x7f00000004c0)="7c2cbe025ee9322704f45bcead62e3a1a53117e0", 0x14}], 0x2, 0x4739, 0x1) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000200)=""/19, 0x13}], 0x2, 0x6, 0x1) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003c}, 0x60) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) epoll_create(0x400) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="d4000000400007012bbd7000fedbdf25"], 0xd4}, 0x1, 0x0, 0x0, 0x4805}, 0xc000) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 10.817074967s ago: executing program 1 (id=6264): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000600)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001700)={"3f94b8dd5df7d3c518f041d434864da8", r3, r4, {0xde06, 0x4}, {0x2, 0x80}, 0x3, [0x8, 0x0, 0x4, 0x2, 0x1, 0x5, 0x5, 0x89d, 0x4, 0x3, 0x29e1, 0x4, 0xa, 0x0, 0xfffffffffffff801, 0x8]}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000340)={0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}]}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, 0x0, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="310330bd7000fbdbdf250b00000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0xc0) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x200}]}]}, 0x58}}, 0x2) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r9, 0x8008f513, &(0x7f00000003c0)) r10 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r5, &(0x7f0000000300)={0x8000000c}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000700)={0x2, 0x2, @start={r11, 0x1, "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", "f608f59f0f8ee625fabf0914243273d02c1ef2c24146285e6822b12f25cd3c46d1607ce87e244098f9a0c5c5597e335cd2bbed25116a86f8b005094d9eec6bf0934b96205188b6a458c7e9e8794d343b13b50d668306712afefe116cb6c2eb039dad8d4dd602e1ff577f88866532ff4e8da6f18876cd5b413e28374740b683ae7de68a7fb20a2945c42362fdb8f1ad4fb7fa07273983cddaf483097663d3eee6efee0d1b8a8561c9503c1d1410fdba68840b221f283f74c7bea210663e3cc3f98867aeb2234dec6b4e1375f421053cada7b1d133a7f379616006035e4482775afc4ccb6c571396d27cfa259394362b9242c37f9f75c2158ef012d30023f34bdb914017bd421e7959aeac2909599241774fd6f9dd8fed9f288922108da2b10420c7b84f350a628c971b4bcd35b1c14a04de8dea5173647546215506008247b79e7583474c068bebd2052814c489e1410ee17d29f8d4468a530aede94adfa15a499b72525ce54ce20a3e54d988bb59db638804b6b1fb2da16db7264eb4ff1ecc0bff61aabefeb754124c2045613eafab7c18393732a44f7a8ab29e554b5d302cf1247a2886b223e8b15404d44e47fdc3ae6b6acd0d9cd00b7cad5c43ad42184ccfae6f686de43d01830a80a0d1ab01b2f66af722f6c3b525e68cf0332e79200ceafc94ee3562e2264e0a0efc1f72ee5590e9004ad269b8b5635ed06d6e3b6e73c2b6bfd7531402a87b8557de884c15c0bbafd11adade9b75cafe6bf9686829ff59049ed47ece1c98946232cc6899289aa52f42b71297cd951613247cba1ede61cbc54725543726b0b24caa7a34ca36f3bb4a3686afce84f7b6f1444143215f123817d61d3886bb6c851314020e7c527287688e3493a20eaa4a2df084fe55f79fadc404ec35d53bc69b0d7deba832327b9ec7ec87bc2885af0417566ee44eaa9f3ec8af5a89bb5af3d2519b86cf99926c40a732e0ac8c244ee7b065718b103301605cf9b8a4107dd063fb36e2a8e04167da759ff7de3b407f40ac42c8e0882eaf30dcf476d400edfbe90aefedec20266fc4e403bc27b930bd1ad1138560f261d4447ff71bd558ca8105a07ce47d6cf6d6f8cdd9dfff9289c9661d95bd1cc40f0e48225e843e28cb06c3dd73601b6da4d6a60bd6d17c71477df99b669111eb118396f1faae0f252da0111038b710f04971a38f44e79a174db5a1c420aa9e28151284fb62f4c9cd48dda6621a4e9bd663d6610e10b4ac2626e3f5a823a2a4bf8173393fb7c43ef62ea5c596fb2536c09ffc7e3aae56609a4a82e7f0137d6df0ead1f0220f398d471457b52d2c1af7c590b980bcf1a72fd045aefec03ae66571f4dc08b2fa8ec6f86f2e8c3c89ed2de4ec97896413aab3d2b2ea87894aeae1c7ac4d663c1f5ef6968f52cb61f2a3079034aac86a14261b237b78ad875f3a4b1d4d18943e"}, [0x0, 0x3, 0x3, 0x2, 0x2, 0xb859, 0x8, 0x5, 0x4, 0x5, 0x6, 0x3, 0x86, 0x0, 0x8, 0x37, 0x0, 0x5, 0x8, 0x3, 0x80000000, 0x0, 0x8, 0x9, 0xccfb, 0x6, 0xa8f3, 0x0, 0x100000001, 0x6, 0x0, 0xff, 0x3, 0x0, 0x9081, 0x400, 0x6, 0x7e, 0x3, 0x5, 0x40, 0xfffffffffffffffc, 0x100000001, 0x10000000, 0x5, 0x3, 0xd, 0x6375, 0x9, 0x4, 0x6f39, 0xfffffffffffffc00, 0x6, 0x7, 0x3, 0x7, 0x4, 0x3, 0x5, 0x6, 0x7, 0xe93, 0x100000000, 0xffffffffffffff9b]}) ioctl$BTRFS_IOC_DEV_INFO(r10, 0xd000941e, &(0x7f0000000740)={r11, "81dcd6030d800b0499d2aebbaee94030"}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000d80)={{r2}, r3, 0x8, @unused=[0x5ec4f821, 0x1, 0x7, 0x100000001], @devid=r11}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r12, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@delchain={0x3c0, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r12, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x394, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xe4}, @TCA_U32_HASH={0x8, 0x2, 0x7fff}, @TCA_U32_INDEV={0x14, 0x8, 'batadv_slave_0\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_SEL={0x364, 0x5, {0xc, 0x8, 0x1, 0xa, 0xdc30, 0xde54, 0xb06, 0x2, [{0x6, 0xc0000000, 0x7, 0xf13b}, {0x2, 0x0, 0x10001, 0x4}, {0x8, 0x8000, 0x2}, {0xfffff001, 0x80000001, 0xf, 0x7}, {0x8, 0x2, 0x7, 0x840}, {0x1ff, 0x3ff, 0x8, 0x99}, {0x4, 0x8, 0x3, 0x6}, {0x3, 0x0, 0x3, 0x3}, {0x0, 0x6, 0xfffffffe, 0xacb}, {0x9, 0x81, 0x6, 0x1000000}, {0xfffffffe, 0x8, 0x1b02, 0x6a}, {0x5, 0x101, 0x400, 0x5}, {0x5, 0x2, 0x1}, {0x7f, 0x7ff, 0xfffff6dd, 0x5}, {0x2c, 0x0, 0x7, 0x8}, {0x2, 0xffffff26, 0x6, 0x7}, {0x7b34, 0x0, 0x4608, 0x8}, {0x6, 0x6, 0x2a}, {0x8, 0xf, 0x4, 0x8}, {0x5, 0xfffff94c, 0x30, 0x81}, {0x8, 0x7ff, 0x8, 0x3}, {0x2, 0xfffffffc, 0x7077d285, 0x3b08a83c}, {0x26000000, 0x47f65e65, 0x1, 0x7}, {0x32, 0x2, 0x4, 0xfffffffc}, {0x1, 0x4, 0x5, 0xe}, {0x4, 0x400, 0x0, 0x5}, {0xb0da, 0xf9bb, 0xc, 0x6}, {0x0, 0x2d516a15, 0x7, 0x7}, {0xffffffff, 0x7, 0x4, 0x3ff}, {0x3, 0x1, 0xb21, 0x1}, {0x6, 0x19f667fb, 0x6, 0x5bee}, {0x7fffffff, 0x0, 0x3, 0x7ef}, {0x3, 0x7, 0x7fffffff, 0x8000}, {0x33bb, 0x799192c1, 0xff, 0x3ff}, {0x1, 0x5, 0x0, 0x2}, {0x1ff, 0x1c8, 0x6, 0x2}, {0x2c1, 0x2, 0xbc, 0x1}, {0x3, 0x88, 0x9, 0x2283}, {0x8, 0x9, 0x6, 0x10}, {0x8, 0x5, 0x1634, 0x200}, {0xe, 0x5, 0xb, 0x2}, {0x6, 0x8, 0x9, 0x7}, {0x0, 0x8, 0x1000, 0x7}, {0x3, 0x7, 0x8, 0x1}, {0x256f, 0x10001, 0x3, 0x9}, {0x0, 0x7fff, 0x5, 0x7}, {0x7, 0x9, 0x6, 0xfffffffa}, {0x5, 0x101, 0x1, 0x6}, {0x9, 0x8de8, 0x3, 0x9}, {0x5, 0x9, 0xf1, 0xfffff520}, {0x0, 0x20, 0x8, 0x9}, {0x44a, 0x6, 0x5, 0x1}, {0xfffffff7, 0x0, 0x2, 0x8000}]}}]}}]}, 0x3c0}}, 0x4040004) socket$nl_route(0x10, 0x3, 0x0) 10.572703266s ago: executing program 0 (id=6265): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = gettid() r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_newroute={0x58, 0x18, 0x100, 0x70bd2a, 0x25dfdbfc, {0xa, 0x14, 0x20, 0x2a, 0xff, 0x2, 0xc8, 0x4, 0x1600}, [@RTA_MARK={0x8, 0x10, 0x6}, @RTA_IIF={0x8, 0x3, r8}, @RTA_EXPIRES={0x8, 0x17, 0x3}, @RTA_ENCAP={0x1c, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x18, 0x1, [{0x9, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0x6}, {0x1ff, 0x0, 0x1}, {0xd}]}}, @RTA_UID={0x8, 0x19, 0xee00}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x20008000) r11 = getgid() r12 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r13 = gettid() syz_open_procfs$namespace(r13, &(0x7f0000000000)='ns/uts\x00') sendmsg$unix(r5, &(0x7f0000000e40)={&(0x7f0000000680)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000700)="3b1db7d911626748011fbcf57c4f748aba1be0b532efd0e967afeb84ebef35257ebbeb5ffa06b84c962c28943ba52b828a2e188b011ef73f26295b2c8d413573552289d4755f2cccbb19835c3ac682df4a13643aa7f86181faf7d09ebc32e7477a1fa909e871ffa92af267d3d9b9b0ecee9744051e3b00b4e25d65a585fe3922d700377279ab7dacc7bee99c31f301a8f386a9b7ddaa8c2509afe4967f21ec745d3be4186013f513d86e5b090f6a27c1b0bd5b8d5b969895129f3dacedc8138f4c74302a0e52a1b669985f381c231864118b700f4426afdbbb", 0xd9}, {&(0x7f0000000800)="90a1963ed43636866e0533eb5868438f834f26c12d38fc192b58ea25c1b09ebd3ce384c0e05edab9a053735d1831169e5928668b8cbaf9c8bd153fae8c519fd749256b6ef5564e6cd16f64f0a5bb160c78e2c3a9fac58fdcb83b7d5105a5e78e2cb3025a0f376ecee5045a9d9897daa4f133493728774952df039d20ed0e5e830273747829230f9afb7b75bc2503a4ff20b5575c76e8", 0x96}, {&(0x7f00000008c0)="adbdafcb7a35e613f03c5fdd8437ecc8a8011b8222740d4da71432c6bccf9829be6df1618e9ca5008e2c337129416d63b9bdfd41f4353e3b156f6ff1f546567e2b57616209798946fd264dbca18df983b247bbfc2924f01891606193b8cf684437be6761647b43f22efb8ec62bdea07c17bdde7e169c1b37d0a15fbcfaac983c84cfd042e1d8d7efec327c915e6e75bf2c07d4ee03c7aedfde3b62c23016d0f5874d5936738a28d161cc81c5b5fa274744e07aa20b3eec5dbc0b3d327b15ac193797bb8ebce65f1d378e7ee11c499e", 0xcf}, {&(0x7f00000009c0)="de1628875646f6e0dd5f050261b331c160e8db2de28da10d8454e0505bb4464b9f40aa04dad277fe2f940ad94189cc64dc6b118890ee56dad618614884b887f953dbf30e708c3e73c78ef50f380bc0e82745de4e024f821a69554f", 0x5b}, {&(0x7f0000000a40)="568b280ae5ead66b836e7746d563e966c53bb7f41292f270225de98f9aff2ec77ed58254cadd5242f7e915e501a7ab3583672a1861cfa9ef51b33762cb2b4814c1e385254b00ad37f4d7ef1570e3bb4a093cc78e63ad1b3c2444fe9ba0130cac3297a73e9deae84117ade339edecca0c57c21a732bb0b477f36e87d6f25a2422963eb6f196aca74beac5dd0d36c43e4ef61f9c9e7da2ce8ef4fadf73680284b14d22f024d24c6aaf44f8bbb6dd3575f664451d8eb4e6c33acab7c03c3abfa2b4268eda92fe79860af42c993f4ea80d71f4f4d8f0df824d003de5f385e276aab1eebc0a98821d0072b2ffd59ba73e01c035d8fff9c3823b24", 0xf8}, {&(0x7f0000000b40)="fefdc3f53d665d80bf20833f3698ba43e19fa26f48967679366968ed4adffb979b566f5f65db8160bb9912b3a7c87fd3d2194ccedb842da0fc8ab0f0437f57c79a1ded7054369fea4c8d6f1c5003847af43164540781b24513c2f0013b6427481856de477508067ebbc4a1e831ac9336f4e1f792370393fab1b82631e568646a85c7", 0x82}, {&(0x7f0000000c00)="5413be44971bc845d7540240a55b9f5ce0fda01a6dda9fd647788c08ebd641560bd59eb33a99da9e2f54b7da1f003e08811d65d1fda93c56e2c0891a2553f4a2fe3833215663c6a2752c7af1520ab42a0280c54d1d274be8d675f24f3975f052526f97e42fcce0090c7a176f9b8e8fe249aa4bc77fe13b370030e0f1", 0x7c}], 0x7, &(0x7f0000000d00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r4, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r4, r10, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r13, r10, r11}}}, @rights={{0x28, 0x1, 0x1, [r0, r6, r2, r9, r9, r12]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x1c, 0x1, 0x1, [r3, r9, r1]}}], 0xe0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a00000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x124}}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f00000004c0)=0xe8) r16 = getgid() sendmsg$netlink(r1, &(0x7f00000005c0)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc, &(0x7f0000000340)=[{&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0xa4}], 0x1, &(0x7f0000000500)=[@rights={{0x18, 0x1, 0x1, [r3, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, r10, r11}}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x10}}], 0x98, 0x4000000}, 0x20000085) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000380000000000019078ac1e0101ac14141e030490781200183f25000000000000ccbc0100007f000001e000000200186371ae9b1c03"], 0x0) r17 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r17, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 9.690595221s ago: executing program 1 (id=6267): r0 = socket(0x10, 0x3, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}}}, 0x10) r1 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da", 0x2}], 0x1}, 0x20000001) recvmmsg(r6, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/193, 0xc1}], 0x1}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) shutdown(r5, 0x1) write$cgroup_int(r4, &(0x7f0000000200)=0x10001, 0x12) sendfile(r4, r3, 0x0, 0xf03a0005) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a310000000005000100070000001800078008000140ff"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) write$cgroup_type(r9, &(0x7f00000000c0), 0x9) sendfile(r9, r8, 0x0, 0x10000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r11, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c"], 0x48}}, 0x0) 8.817490378s ago: executing program 0 (id=6269): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0xf679000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r6, 0x0) r7 = accept$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) getsockopt$packet_int(r7, 0x107, 0xb, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @remote}, 0x10) splice(r1, 0x0, r4, 0x0, 0xf3a, 0x0) close(r3) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r8, 0x6, 0x25, 0x0, &(0x7f0000000000)=0x41) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd1ea}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b0000000a000000050000000800100001000000", @ANYRES32, @ANYRES16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r10}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r10, &(0x7f0000000200)=')', 0x0}, 0x20) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x240000}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 8.793704127s ago: executing program 4 (id=6270): socket$kcm(0xa, 0x3, 0x3a) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000", 0xb, 0x1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x23, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000002900)=r7, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x4}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0x6}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x44, r13, 0x917, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x4) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 7.781832249s ago: executing program 1 (id=6273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000090601020000000000000000000000000900020073797a3100000000050001000700000004000780d2bbc6d9475b6787d27afb58638f452fad5917e6"], 0x2c}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$NFT_BATCH(r1, &(0x7f0000001940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001900)={&(0x7f0000001800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd1d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x898e}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}, 0x1, 0x0, 0x0, 0x8084}, 0x24008000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000900)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x5}}, @fwd={0x9}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000001980)=""/150, 0x40, 0x96, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a80)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x5, '\x00', 0x0, r6, 0x0, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r7 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r7, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}], 0x18, 0x4008000}, 0x28008841) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000000)=0x4ca68b28, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffdee}, 0xb}], 0x1, 0x40000021, 0x0) socket$kcm(0x2, 0xa, 0x2) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) 7.08466979s ago: executing program 3 (id=6275): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0xce, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r2}, 0x10) recvmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40000002, 0x0) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB="6000000003140100000000000000000009000280"], 0x60}}, 0x20000000) r6 = socket$inet(0x2, 0x1, 0x0) getsockopt(r6, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000140)=ANY=[@ANYBLOB='c 1:'], 0xa) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x20000040) listen(r7, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x2, 0xfff3}, {0x0, 0xfff3}, {0x4, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_HASH={0x8, 0x2, 0xc245}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) splice(r7, 0x0, r4, 0x0, 0xffffffffffffff00, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@canfd={{0x2}, 0x16, 0x2, 0x0, 0x0, "92a4883372f6632556a6b68da1aaeffa7b55af2ee640861c92a78cda69612182a805540d81b0fcce100e3170050b4b501f11cc0f78db10e2c75693ab90ec3b35"}, 0x48}}, 0xd209f6d814827b17) socket(0x1d, 0x1, 0x5) 6.756448153s ago: executing program 2 (id=6276): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000000000000000400000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, 0x0, 0x20048041) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x8c, 0x24, 0x4, 0x70bd24, 0x1, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x89, [0x8, 0xe, 0x4, 0x8, 0x1, 0xa, 0x8, 0x1, 0x6, 0x2, 0xe, 0x4a, 0x7, 0xe, 0xf, 0x2], 0x0, [0x3, 0x4, 0xd9, 0x1, 0x2, 0x1, 0xdc9, 0x4, 0x9a, 0x6, 0xa, 0x3ff, 0xa331, 0x100, 0x4, 0x3], [0xd, 0x9, 0x6, 0x6, 0xcbb, 0x7, 0xfff, 0x5, 0x1, 0x6, 0x6, 0x8, 0x9, 0x7291, 0xd, 0x573f]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000110700)={0x9, [], 0x7, "e81e98e4abedff"}) 5.567754778s ago: executing program 3 (id=6277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x114}}, 0x0) 4.270279534s ago: executing program 3 (id=6278): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711298000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) socket(0x40000000015, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) close(0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000c80)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x5}, 0x7, 0x10, 0x8, 0x208, 0xd, 'syz1\x00', "6ec7e000e393206dca7874e4e3b75b2eafd36c5196ee959bf36667958b7f0d8b", "9c78591af7cd5aabd9e8ec236823ee2365726f6f39fdd4e97575b1b6307bbc6b", [{0x5, 0x6, {0x2, 0x9}}, {0x1, 0x7, {0x0, 0x63}}, {0x200, 0x1, {0x1, 0xfa}}, {0x770, 0x2, {0x2, 0x1}}, {0x642, 0x2, {0x1, 0x1}}, {0x0, 0xa, {0x1, 0x5}}, {0x7, 0x935a, {0x3, 0xffffff23}}, {0x8, 0x7ad, {0x1}}, {0x3, 0x100, {0x3, 0x5}}, {0x0, 0x4, {0x1, 0x5}}, {0x3ff, 0x6, {0x1, 0x5}}, {0x2, 0x1, {0x1, 0xa}}, {0x1, 0xa1f0, {0x3, 0x1ff}}, {0x5, 0x9, {0x2}}, {0x7fff, 0x2, {0x0, 0x2}}, {0xe, 0x0, {0x3, 0x1000}}, {0x0, 0x76c2, {0x3, 0xc}}, {0x0, 0x2, {0x1, 0x2}}, {0xf, 0x7, {0x1, 0x400}}, {0x4, 0x400, {0x2, 0x6}}, {0x5, 0x7, {0x3, 0xd}}, {0x8, 0x9e, {0x1, 0x1000001}}, {0x9, 0x800, {0x1, 0xfc00000}}, {0x0, 0x7, {0x3, 0xd3a0}}, {0xb1, 0xa, {0x2, 0x3}}, {0x89, 0x0, {0x1, 0x7fffffff}}, {0x7886, 0xfe1a, {0x0, 0x80000001}}, {0x0, 0x1, {0x3, 0x2cd7a396}}, {0x3, 0x0, {0x1, 0x5}}, {0x8, 0x7e, {0x3, 0x8}}, {0xd, 0x2, {0x2, 0x200}}, {0x0, 0xff, {0x1, 0x80000001}}, {0x4, 0x0, {0x1, 0xaa95}}, {0x1000, 0x4, {0x3, 0x200}}, {0x2, 0x8, {0x1, 0x6}}, {0x5, 0xbe91, {0x0, 0x8e}}, {0x1, 0x5, {0x2, 0xffffff80}}, {0xff, 0x40, {0x1, 0x7ff}}, {0x1, 0x8, {0x2}}, {0x9, 0x5, {0x2, 0x3}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={0x0}}, 0x8010) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x8, 0xc6, 0x233, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, @loopback, 0x10, 0x1, 0xe, 0x7}}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000060000000800000005"], 0x50) 3.975215824s ago: executing program 0 (id=6279): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r3, 0x1) write$cgroup_int(r2, &(0x7f0000000200)=0x10001, 0x12) sendfile(r2, r1, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaadad1e048716e08004500001c030000000011907800002000089078747887715f5a170000d5ae0ffdd88d873f3f189a86f3ab513d811789e5e44d91f4499013f9786b06c127fab39b7215fe76a33b49f6b15411563a2189d21a942fb72f328215b399e2563b0c33f29c7e2a067ee952e4639ff585adda53d27fc7778fc1b5f01c9d392e3111a1464db2338543abd1000000000000000000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000"], 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022bbd7000fbdbdf255c00000008000300", @ANYRES32=r9], 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x4008040) 3.413446297s ago: executing program 4 (id=6280): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000700000000000000000000008500000027000000850000000700000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.176047501s ago: executing program 1 (id=6281): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000000000000000400000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r9, 0x0, 0x20048041) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x8c, 0x24, 0x4, 0x70bd24, 0x1, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x89, [0x8, 0xe, 0x4, 0x8, 0x1, 0xa, 0x8, 0x1, 0x6, 0x2, 0xe, 0x4a, 0x7, 0xe, 0xf, 0x2], 0x0, [0x3, 0x4, 0xd9, 0x1, 0x2, 0x1, 0xdc9, 0x4, 0x9a, 0x6, 0xa, 0x3ff, 0xa331, 0x100, 0x4, 0x3], [0xd, 0x9, 0x6, 0x6, 0xcbb, 0x7, 0xfff, 0x5, 0x1, 0x6, 0x6, 0x8, 0x9, 0x7291, 0xd, 0x573f]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010c300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "f35cdffa4c22ce"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000110700)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x7, "e81e98e4abedff"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, 0x0) 2.892487816s ago: executing program 4 (id=6282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_NAT_TYPE={0x8}]}}}]}]}], {0x14}}, 0xc8}}, 0x0) 2.841360521s ago: executing program 2 (id=6283): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e23, 0xa, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x2b}, 0x1c) 2.282795687s ago: executing program 4 (id=6284): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000240), 0x4) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0x1a2, 0x40010000, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x2a}, 0x60) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r4, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000004c0)="7c2cbe025ee9322704f45bcead62e3a1a531", 0x12}], 0x2, 0x4739, 0x1) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}, {0x0}], 0x2, 0x6, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003c}, 0x60) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) epoll_create(0x400) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="d4000000400007012bbd7000fedbdf25"], 0xd4}, 0x1, 0x0, 0x0, 0x4805}, 0xc000) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 2.225567026s ago: executing program 0 (id=6285): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000240), 0x4) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0x1a2, 0x40010000, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x2a}, 0x60) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x4000000) pwritev(r3, &(0x7f0000000a80)=[{&(0x7f0000000540)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8ced5b1a3131", 0xb0}, {&(0x7f00000004c0)="7c2cbe025ee9322704f45bcead62e3a1a53117e0", 0x14}], 0x2, 0x4739, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) epoll_create(0x400) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a", 0x23}], 0x1}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="d4000000400007012bbd7000fedbdf25"], 0xd4}, 0x1, 0x0, 0x0, 0x4805}, 0xc000) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 2.225269272s ago: executing program 2 (id=6286): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x79}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f086dd1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 1.732128861s ago: executing program 3 (id=6287): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9c010000100001002cbc700000000008fc000000000000000000000000000001fe8800000000000000000000000000010000ecdf000000000a0080ff2b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000000003200000000000000000000000000000000000000fefffffffffffffffeffffffffffffff050000000000000000000000000000000000000000000000fcffffffffffffff000000000000000009000000000000000100000000000000000840000000000009000000000000009202000000000000001000000000000000000000000000000735000002"], 0x19c}}, 0x44050) 1.514189646s ago: executing program 2 (id=6288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x4048800) 1.377160699s ago: executing program 3 (id=6289): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000006b80)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x0, 0x1c8, 0xffffffff, 0xd0, 0xd0, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x5}, {0x2, 0x6, 0x4}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"aa2a"}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private2, [0x0, 0xff000000, 0xff, 0xff000000], [0xff, 0xff, 0x0, 0xffffff00], 'netpci0\x00', 'pimreg\x00', {}, {}, 0x1, 0x4c, 0x5, 0x24}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1f, @ipv4=@multicast1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}, @port=0x4e20, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 1.148286623s ago: executing program 2 (id=6290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000180)) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r9, r8}) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r6, r5}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000300)={r10}) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x8, 0x6, {{0x9, 0x4, 0x2, 0x25, 0x24, 0x64, 0x0, 0x3, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0xf, "37cf010c80d952c1e7cef44021"}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@deltclass={0x70, 0x29, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x8, 0xa}, {0x4, 0x2}, {0xfff3, 0xc}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x80, 0x5}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000090}, 0x2004400d) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x70bd2a, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.116226381s ago: executing program 0 (id=6291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$inet6(0xa, 0x3, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$tipc(r3, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1, 0x900}}) r5 = socket(0x11, 0x80a, 0x0) sendto$x25(r5, 0x0, 0x0, 0x4080, &(0x7f0000000040), 0x12) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000000440)=""/225, 0x0, 0xe1, 0x1, 0x9e}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, r8, 0x0, 0x4, 0x1}, 0x50) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="89e7ee0c7cdad9b4b47380c988cafb3728496466192010785707ae3660b7", 0xffbf}], 0x1) 933.48815ms ago: executing program 4 (id=6292): r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r4, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000000}, 0x40044) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000141}, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r6) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) write$tun(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r12, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r12, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 858.840552ms ago: executing program 3 (id=6293): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000000000000000400000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, 0x0, 0x20048041) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x8c, 0x24, 0x4, 0x70bd24, 0x1, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x89, [0x8, 0xe, 0x4, 0x8, 0x1, 0xa, 0x8, 0x1, 0x6, 0x2, 0xe, 0x4a, 0x7, 0xe, 0xf, 0x2], 0x0, [0x3, 0x4, 0xd9, 0x1, 0x2, 0x1, 0xdc9, 0x4, 0x9a, 0x6, 0xa, 0x3ff, 0xa331, 0x100, 0x4, 0x3], [0xd, 0x9, 0x6, 0x6, 0xcbb, 0x7, 0xfff, 0x5, 0x1, 0x6, 0x6, 0x8, 0x9, 0x7291, 0xd, 0x573f]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000110700)={0x9, [], 0x7, "e81e98e4abedff"}) 709.685121ms ago: executing program 1 (id=6294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x1d0, 0x1d0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x4, {0x400002000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015", @ANYRES16=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x40, 0x1, 0x2, 0xc05, 0x0, 0x0, {0x2, 0x0, 0x83}, [@CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2008894}, 0x80) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x200080c0) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300090c01020000000000000300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030005006c00000002000000e00000010000000000000000010015004e2000000100140003000000000000260cc6a28a0f2740787fe524022763947689c2242619a2109c8d33bb188327358153b9d71bac2b5282716a630f2ed505bdd66c89f2d761bcbdc750e722c791c1140b496e25a66fedf1913c97e667a8f25e374a7cc647cf2e34f59ff1ddaa6e9f450c7a1a7db8423fcc709febd814a750073e4952c30a88d7bf91e3f97fdb2cfd0c5cbd28626bf71e2bcc5fefefc4"], 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @local}}, 0x5, 0x3, 0xeac3, 0x0, 0x8, 0x1ff, 0x6}, &(0x7f00000000c0)=0x9c) r12 = socket(0x40000000015, 0x5, 0x0) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x1409, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x84) bind$inet(r12, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)="38be19cfcc0523199f74b1436de407d1fc4271acc87361911c431d877b552bff2441a678c9803365f69c9c296507b2276c1a04ac745e0033282dd1bc128a9da2a9321193e263b3f0ae0943a808051a78d00d44d0959f4efe6eb8f45d9611847e04a2e6343e44bb9d0964e2007965bb5b2f88fc64c29b262a2485e553b3e5d301761849131f5896f8c7234d1be1a6297d45e8c016b222d96ad0b05dacbfe0330fa85e0faf8019656ae7ae0bce", 0xac}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) recvmmsg(r12, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}], 0x24}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000100)={r11, 0xfffffffd}, &(0x7f0000000140)=0x8) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e24, 0xe9d7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4}, 0x1c) 0s ago: executing program 2 (id=6295): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x1, 0x70bc2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MAP={0x24, 0xe, {0x400, 0x1ff, 0x7, 0x3, 0x5, 0xc6}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8091}, 0x40) kernel console output (not intermixed with test programs): :0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 980.166758][T25811] lowmem_reserve[]: 0 0 0 0 0 [ 980.178291][T25811] Node 1 Normal free:3941712kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 980.229035][T25811] lowmem_reserve[]: 0 0 0 0 0 [ 980.235629][T25811] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 980.249417][T25811] Node 0 DMA32: 1378*4kB (UME) 487*8kB (UME) 723*16kB (UME) 392*32kB (UME) 229*64kB (UME) 62*128kB (UM) 31*256kB (UM) 12*512kB (UME) 11*1024kB (UME) 3*2048kB (UM) 184*4096kB (UM) = 841264kB [ 980.270815][T25811] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 980.309341][T25811] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 4*16kB (UM) 10*32kB (UM) 9*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941712kB [ 980.364650][T25811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 980.389751][T25811] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 980.400380][T25811] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 980.410708][T25811] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 980.422181][T25811] 45316 total pagecache pages [ 980.443041][T25811] 0 pages in swap cache [ 980.452462][T25811] Free swap = 124996kB [ 980.462585][T25811] Total swap = 124996kB [ 980.472709][T25811] 2097051 pages RAM [ 980.480332][T25811] 0 pages HighMem/MovableOnly [ 980.495736][T25811] 427419 pages reserved [ 980.516195][T25811] 0 pages cma reserved [ 980.556924][T25830] netlink: 748 bytes leftover after parsing attributes in process `syz.4.5291'. [ 981.371820][T25853] syzkaller0 speed is unknown, defaulting to 1000 [ 981.392337][T25866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5302'. [ 981.436521][T25866] netlink: 'syz.4.5302': attribute type 30 has an invalid length. [ 981.453475][T25855] syzkaller0 speed is unknown, defaulting to 1000 [ 981.474520][T25866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5302'. [ 981.891693][T25877] tipc: Enabling of bearer rejected, failed to enable media [ 982.941027][T25900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5310'. [ 982.953308][T25903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5312'. [ 983.198520][T25909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5315'. [ 983.311970][T25915] blkio.reset_stats is deprecated [ 983.320997][T25913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5317'. [ 983.528348][T25918] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 983.553117][T25918] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 983.682753][T25923] syzkaller0 speed is unknown, defaulting to 1000 [ 983.769727][T25927] tipc: Enabling of bearer rejected, failed to enable media [ 984.283074][T25940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5326'. [ 984.311654][T25942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5327'. [ 984.641733][T25947] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5330'. [ 984.674211][T25947] bridge_slave_1: default FDB implementation only supports local addresses [ 984.708589][T25953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5332'. [ 984.836849][T25955] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 985.305783][T25971] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5337'. [ 985.494897][T25976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5340'. [ 986.183229][T25990] syzkaller0 speed is unknown, defaulting to 1000 [ 986.209220][T25993] netlink: 'syz.4.5346': attribute type 10 has an invalid length. [ 986.261159][T25997] netlink: 'syz.4.5346': attribute type 10 has an invalid length. [ 986.415989][T26003] ip6tnl5: left allmulticast mode [ 987.342452][T26026] macsec2: entered promiscuous mode [ 987.381915][T26026] erspan0: entered promiscuous mode [ 987.441178][T26036] tipc: Enabling of bearer rejected, failed to enable media [ 987.484092][T26039] block nbd8: Unsupported socket: should be TCP or UNIX. [ 988.663331][T26077] netlink: 'syz.0.5378': attribute type 1 has an invalid length. [ 988.687650][T26077] netlink: 'syz.0.5378': attribute type 2 has an invalid length. [ 989.092369][T26074] sctp: [Deprecated]: syz.4.5373 (pid 26074) Use of int in max_burst socket option. [ 989.092369][T26074] Use struct sctp_assoc_value instead [ 989.265614][T26095] __nla_validate_parse: 4 callbacks suppressed [ 989.265674][T26095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5381'. [ 990.083549][T26124] netlink: 'syz.0.5394': attribute type 1 has an invalid length. [ 990.124117][T26124] netlink: 'syz.0.5394': attribute type 2 has an invalid length. [ 990.217579][T26128] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 990.257405][T26135] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5397'. [ 990.258341][T26128] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 990.305563][T26128] macsec1: left promiscuous mode [ 990.333028][T26128] erspan0: left promiscuous mode [ 990.342864][T26128] macsec2: left promiscuous mode [ 990.770796][T26153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5399'. [ 993.049054][T26129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 993.304335][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 994.060678][T26183] erspan0: left promiscuous mode [ 994.088256][T26183] erspan0: left allmulticast mode [ 994.459715][T26183] tipc: Resetting bearer [ 994.479463][T26183] veth0_vlan: left promiscuous mode [ 994.502728][T26183] macvlan0: left promiscuous mode [ 994.613049][T26176] syzkaller0 speed is unknown, defaulting to 1000 [ 994.638489][ T3369] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.676978][ T3369] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.398185][ T3369] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.436740][ T3369] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.827341][T26298] warn_alloc: 1 callbacks suppressed [ 998.827363][T26298] syz.0.5440: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 998.923060][T26298] CPU: 1 UID: 0 PID: 26298 Comm: syz.0.5440 Not tainted syzkaller #0 PREEMPT(full) [ 998.923091][T26298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 998.923103][T26298] Call Trace: [ 998.923112][T26298] [ 998.923121][T26298] dump_stack_lvl+0xe8/0x150 [ 998.923155][T26298] warn_alloc+0x24c/0x270 [ 998.923191][T26298] ? stack_depot_save_flags+0x33/0x800 [ 998.923224][T26298] ? __pfx_warn_alloc+0x10/0x10 [ 998.923257][T26298] ? kasan_save_track+0x3e/0x80 [ 998.923277][T26298] ? __kasan_kmalloc+0x93/0xb0 [ 998.923299][T26298] ? xsk_setsockopt+0x52a/0x960 [ 998.923326][T26298] ? do_sock_setsockopt+0x17c/0x1b0 [ 998.923347][T26298] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 998.923366][T26298] ? do_syscall_64+0x174/0x580 [ 998.923385][T26298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.923427][T26298] __vmalloc_node_range_noprof+0x12c/0x1730 [ 998.923492][T26298] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 998.923529][T26298] ? __kasan_kmalloc+0x93/0xb0 [ 998.923552][T26298] ? __kmalloc_cache_noprof+0x32d/0x660 [ 998.923583][T26298] ? __kmalloc_cache_noprof+0x150/0x660 [ 998.923618][T26298] vmalloc_user_noprof+0xad/0xe0 [ 998.923652][T26298] ? xskq_create+0xbf/0x170 [ 998.923681][T26298] xskq_create+0xbf/0x170 [ 998.923713][T26298] xsk_init_queue+0x8a/0xe0 [ 998.923744][T26298] xsk_setsockopt+0x52a/0x960 [ 998.923770][T26298] ? __fget_files+0x2a/0x420 [ 998.923793][T26298] ? __pfx_xsk_setsockopt+0x10/0x10 [ 998.923821][T26298] ? __pfx_aa_sk_perm+0x10/0x10 [ 998.923850][T26298] ? aa_sock_opt_perm+0xff/0x1a0 [ 998.923878][T26298] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 998.923904][T26298] ? __pfx_xsk_setsockopt+0x10/0x10 [ 998.923932][T26298] do_sock_setsockopt+0x17c/0x1b0 [ 998.923960][T26298] __x64_sys_setsockopt+0x13d/0x1b0 [ 998.923984][T26298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.924007][T26298] do_syscall_64+0x174/0x580 [ 998.924024][T26298] ? trace_irq_disable+0x3b/0x140 [ 998.924044][T26298] ? clear_bhb_loop+0x40/0x90 [ 998.924070][T26298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.924090][T26298] RIP: 0033:0x7f4df659de59 [ 998.924111][T26298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.924128][T26298] RSP: 002b:00007f4df73ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 998.924150][T26298] RAX: ffffffffffffffda RBX: 00007f4df6825fa0 RCX: 00007f4df659de59 [ 998.924166][T26298] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 998.924179][T26298] RBP: 00007f4df6633e6f R08: 0000000000000004 R09: 0000000000000000 [ 998.924192][T26298] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 998.924205][T26298] R13: 00007f4df6826038 R14: 00007f4df6825fa0 R15: 00007ffd39fc7278 [ 998.924241][T26298] [ 999.280899][T26298] Mem-Info: [ 999.295086][T26298] active_anon:10307 inactive_anon:0 isolated_anon:0 [ 999.295086][T26298] active_file:0 inactive_file:43910 isolated_file:0 [ 999.295086][T26298] unevictable:768 dirty:281 writeback:3 [ 999.295086][T26298] slab_reclaimable:11439 slab_unreclaimable:214005 [ 999.295086][T26298] mapped:29604 shmem:1436 pagetables:1275 [ 999.295086][T26298] sec_pagetables:0 bounce:0 [ 999.295086][T26298] kernel_misc_reclaimable:0 [ 999.295086][T26298] free:1198733 free_pcp:10947 free_cma:0 [ 999.422630][T26298] Node 0 active_anon:41156kB inactive_anon:0kB active_file:0kB inactive_file:175432kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118556kB dirty:1136kB writeback:0kB shmem:4136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15812kB pagetables:4724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 999.503499][T26304] netlink: 'syz.0.5440': attribute type 10 has an invalid length. [ 999.548674][T26298] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 999.652013][T26320] tipc: Enabling of bearer rejected, already enabled [ 999.667733][T26321] netlink: 'syz.0.5440': attribute type 10 has an invalid length. [ 999.698996][T26298] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 999.740034][T26320] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 999.784959][T26298] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 999.792703][T26320] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 999.822993][T26298] Node 0 DMA32 free:840044kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41256kB inactive_anon:0kB active_file:0kB inactive_file:175432kB unevictable:1536kB writepending:1136kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:42024kB local_pcp:18884kB free_cma:0kB [ 999.862238][T26323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5447'. [ 999.882027][T26304] bond0: (slave dummy0): Releasing backup interface [ 999.918098][T26321] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 999.955085][T26298] lowmem_reserve[]: 0 0 0 0 0 [ 999.960487][T26298] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1000.020224][T26298] lowmem_reserve[]: 0 0 0 0 0 [ 1000.026040][T26298] Node 1 Normal free:3941712kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1000.064766][T26298] lowmem_reserve[]: 0 0 0 0 0 [ 1000.069755][T26298] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1000.084346][T26298] Node 0 DMA32: 1748*4kB (UME) 1197*8kB (UME) 685*16kB (UME) 334*32kB (UME) 173*64kB (UME) 46*128kB (UME) 32*256kB (UM) 11*512kB (UME) 9*1024kB (UME) 2*2048kB (U) 185*4096kB (UM) = 840072kB [ 1000.106670][T26298] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1000.121281][T26298] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 4*16kB (UM) 10*32kB (UM) 9*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941712kB [ 1000.139369][T26298] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1000.160355][T26298] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1000.177900][T26298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1000.187777][T26298] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1000.200769][T26298] 45324 total pagecache pages [ 1000.207795][T26298] 0 pages in swap cache [ 1000.212177][T26298] Free swap = 124996kB [ 1000.216576][T26298] Total swap = 124996kB [ 1000.221128][T26298] 2097051 pages RAM [ 1000.225581][T26298] 0 pages HighMem/MovableOnly [ 1000.230404][T26298] 427419 pages reserved [ 1000.235448][T26298] 0 pages cma reserved [ 1000.658269][T26354] xt_hashlimit: size too large, truncated to 1048576 [ 1000.999305][T26362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5458'. [ 1001.531147][T26372] netlink: 'syz.2.5462': attribute type 10 has an invalid length. [ 1001.555132][T26372] netlink: 'syz.2.5462': attribute type 10 has an invalid length. [ 1001.590052][T26379] tipc: Enabling of bearer rejected, already enabled [ 1001.643023][T26379] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 1001.676313][T26379] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 1002.598300][T26404] syzkaller0 speed is unknown, defaulting to 1000 [ 1003.002232][T26419] syzkaller0 speed is unknown, defaulting to 1000 [ 1003.035214][T26421] netlink: 'syz.1.5480': attribute type 10 has an invalid length. [ 1003.091528][T26427] netlink: 'syz.1.5480': attribute type 10 has an invalid length. [ 1003.196875][T26430] block nbd8: Unsupported socket: should be TCP or UNIX. [ 1006.550715][T26450] tipc: Enabling of bearer rejected, already enabled [ 1009.185142][T26518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5513'. [ 1009.609374][T26535] tipc: Enabling of bearer rejected, already enabled [ 1010.132016][T26546] netlink: 'syz.2.5519': attribute type 40 has an invalid length. [ 1010.340849][T26553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5523'. [ 1010.404555][T26555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5524'. [ 1010.578387][T26561] warn_alloc: 2 callbacks suppressed [ 1010.578417][T26561] syz.1.5526: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1010.635952][T26561] CPU: 1 UID: 0 PID: 26561 Comm: syz.1.5526 Not tainted syzkaller #0 PREEMPT(full) [ 1010.635985][T26561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1010.635997][T26561] Call Trace: [ 1010.636006][T26561] [ 1010.636015][T26561] dump_stack_lvl+0xe8/0x150 [ 1010.636049][T26561] warn_alloc+0x24c/0x270 [ 1010.636084][T26561] ? stack_depot_save_flags+0x33/0x800 [ 1010.636117][T26561] ? __pfx_warn_alloc+0x10/0x10 [ 1010.636155][T26561] ? kasan_save_track+0x3e/0x80 [ 1010.636174][T26561] ? __kasan_kmalloc+0x93/0xb0 [ 1010.636196][T26561] ? xsk_setsockopt+0x52a/0x960 [ 1010.636222][T26561] ? do_sock_setsockopt+0x17c/0x1b0 [ 1010.636243][T26561] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1010.636263][T26561] ? do_syscall_64+0x174/0x580 [ 1010.636282][T26561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.636315][T26561] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1010.636380][T26561] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1010.636432][T26561] ? __kasan_kmalloc+0x93/0xb0 [ 1010.636455][T26561] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1010.636487][T26561] ? __kmalloc_cache_noprof+0x150/0x660 [ 1010.636522][T26561] vmalloc_user_noprof+0xad/0xe0 [ 1010.636554][T26561] ? xskq_create+0xbf/0x170 [ 1010.636584][T26561] xskq_create+0xbf/0x170 [ 1010.636617][T26561] xsk_init_queue+0x8a/0xe0 [ 1010.636649][T26561] xsk_setsockopt+0x52a/0x960 [ 1010.636676][T26561] ? __fget_files+0x2a/0x420 [ 1010.636698][T26561] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1010.636727][T26561] ? __pfx_aa_sk_perm+0x10/0x10 [ 1010.636756][T26561] ? aa_sock_opt_perm+0xff/0x1a0 [ 1010.636785][T26561] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1010.636812][T26561] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1010.636841][T26561] do_sock_setsockopt+0x17c/0x1b0 [ 1010.636869][T26561] __x64_sys_setsockopt+0x13d/0x1b0 [ 1010.636894][T26561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.636916][T26561] do_syscall_64+0x174/0x580 [ 1010.636933][T26561] ? trace_irq_disable+0x3b/0x140 [ 1010.636954][T26561] ? clear_bhb_loop+0x40/0x90 [ 1010.636980][T26561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.637000][T26561] RIP: 0033:0x7fd9a259de59 [ 1010.637021][T26561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.637038][T26561] RSP: 002b:00007fd9a07f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1010.637062][T26561] RAX: ffffffffffffffda RBX: 00007fd9a2825fa0 RCX: 00007fd9a259de59 [ 1010.637077][T26561] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1010.637091][T26561] RBP: 00007fd9a2633e6f R08: 0000000000000004 R09: 0000000000000000 [ 1010.637104][T26561] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1010.637117][T26561] R13: 00007fd9a2826038 R14: 00007fd9a2825fa0 R15: 00007ffdfd8e2ac8 [ 1010.637151][T26561] [ 1010.637170][T26561] Mem-Info: [ 1010.976354][T26561] active_anon:13142 inactive_anon:0 isolated_anon:0 [ 1010.976354][T26561] active_file:0 inactive_file:43914 isolated_file:0 [ 1010.976354][T26561] unevictable:768 dirty:295 writeback:0 [ 1010.976354][T26561] slab_reclaimable:11498 slab_unreclaimable:214180 [ 1010.976354][T26561] mapped:33724 shmem:3496 pagetables:1208 [ 1010.976354][T26561] sec_pagetables:0 bounce:0 [ 1010.976354][T26561] kernel_misc_reclaimable:0 [ 1010.976354][T26561] free:1196434 free_pcp:10704 free_cma:0 [ 1010.991705][T26569] netlink: 'syz.1.5526': attribute type 10 has an invalid length. [ 1011.070134][T26561] Node 0 active_anon:50168kB inactive_anon:0kB active_file:0kB inactive_file:175448kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134896kB dirty:1180kB writeback:0kB shmem:9848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15976kB pagetables:4792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1011.204031][T26561] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1011.236527][T26569] netlink: 'syz.1.5526': attribute type 10 has an invalid length. [ 1011.278259][T26561] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1011.360166][T26561] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 1011.380034][T26561] Node 0 DMA32 free:838432kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40852kB inactive_anon:0kB active_file:0kB inactive_file:175448kB unevictable:1536kB writepending:1196kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:45616kB local_pcp:28716kB free_cma:0kB [ 1011.495802][T26561] lowmem_reserve[]: 0 0 0 0 0 [ 1011.515962][T26561] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1011.585718][T26561] lowmem_reserve[]: 0 0 0 0 0 [ 1011.597698][T26561] Node 1 Normal free:3941712kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1011.605570][T26583] mac80211_hwsim hwsim3 syzkaller1: entered promiscuous mode [ 1011.644576][T26583] mac80211_hwsim hwsim3 syzkaller1: entered allmulticast mode [ 1011.665050][T26561] lowmem_reserve[]: 0 0 0 0 0 [ 1011.726326][T26561] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1011.754416][T26561] Node 0 DMA32: 1797*4kB (UME) 1065*8kB (UM) 779*16kB (UME) 549*32kB (UME) 233*64kB (UME) 47*128kB (UME) 6*256kB (U) 2*512kB (UE) 7*1024kB (UME) 2*2048kB (U) 185*4096kB (UM) = 838252kB [ 1011.799053][T26561] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1011.842672][T26561] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 4*16kB (UM) 10*32kB (UM) 9*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941712kB [ 1011.884719][T26561] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1011.901639][T26561] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1011.913433][T26561] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1011.926389][T26561] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1011.939878][T26561] 45334 total pagecache pages [ 1011.948468][T26561] 0 pages in swap cache [ 1011.953510][T26561] Free swap = 124996kB [ 1011.959504][T26561] Total swap = 124996kB [ 1011.970320][T26561] 2097051 pages RAM [ 1011.976846][T26561] 0 pages HighMem/MovableOnly [ 1011.982355][T26561] 427419 pages reserved [ 1011.989555][T26561] 0 pages cma reserved [ 1012.155092][T26591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5535'. [ 1013.272927][T26615] netlink: 'syz.3.5541': attribute type 40 has an invalid length. [ 1013.915392][T26635] netlink: 'syz.1.5546': attribute type 10 has an invalid length. [ 1013.941390][T26635] netlink: 'syz.1.5546': attribute type 10 has an invalid length. [ 1014.482837][T26646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5551'. [ 1014.830818][T26658] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5555'. [ 1015.927413][T26673] netlink: 'syz.3.5561': attribute type 1 has an invalid length. [ 1017.028081][T26681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5564'. [ 1017.845269][T26673] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1017.867749][T26674] bond19: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 1017.913930][T26674] bond19: option resend_igmp: invalid value (3398) [ 1017.942978][T26674] bond19: option resend_igmp: allowed values 0 - 255 [ 1017.979468][T26681] netlink: 'syz.1.5564': attribute type 1 has an invalid length. [ 1018.010046][T26681] netlink: 'syz.1.5564': attribute type 2 has an invalid length. [ 1018.253226][T26697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5570'. [ 1018.482419][T26704] syzkaller0 speed is unknown, defaulting to 1000 [ 1018.853151][T26720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5575'. [ 1019.158536][T26725] IPv6: NLM_F_CREATE should be specified when creating new route [ 1019.444994][T26732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5581'. [ 1019.665962][T26738] netlink: 'syz.2.5584': attribute type 10 has an invalid length. [ 1019.677532][T26738] netlink: 'syz.2.5584': attribute type 10 has an invalid length. [ 1020.394587][T26750] syzkaller0 speed is unknown, defaulting to 1000 [ 1020.562749][T26762] tls_set_device_offload_rx: netdev not found [ 1021.205186][T26774] syzkaller0 speed is unknown, defaulting to 1000 [ 1021.765116][T26798] netlink: 'syz.3.5608': attribute type 1 has an invalid length. [ 1021.806825][T26798] netlink: 'syz.3.5608': attribute type 2 has an invalid length. [ 1022.315009][T26809] syzkaller0 speed is unknown, defaulting to 1000 [ 1022.819838][T26824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5614'. [ 1023.370686][T26841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5620'. [ 1024.251972][T26871] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5627'. [ 1024.486327][T26873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5628'. [ 1025.707037][T26903] A link change request failed with some changes committed already. Interface gre6 may have been left with an inconsistent configuration, please check. [ 1026.384151][T26921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5646'. [ 1027.523125][T26938] syzkaller1: entered promiscuous mode [ 1027.552573][T26938] syzkaller1: entered allmulticast mode [ 1028.110862][T26956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5654'. [ 1028.355892][T26967] tipc: Enabling of bearer rejected, already enabled [ 1028.420148][T26970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5660'. [ 1030.614449][T27005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5671'. [ 1030.946455][T27016] tipc: Enabling of bearer rejected, already enabled [ 1031.314836][T27026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5677'. [ 1031.851832][T27044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5684'. [ 1034.640609][T27047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5686'. [ 1034.683134][T27047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5686'. [ 1034.921302][T27054] netlink: 'syz.4.5688': attribute type 40 has an invalid length. [ 1034.939603][T27057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5691'. [ 1035.203447][T27065] mac80211_hwsim hwsim3 syzkaller1: left promiscuous mode [ 1035.231611][T27065] mac80211_hwsim hwsim3 syzkaller1: left allmulticast mode [ 1035.252629][T27068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5694'. [ 1035.263748][T27063] syzkaller0 speed is unknown, defaulting to 1000 [ 1035.353262][T27068] macvtap2: entered promiscuous mode [ 1035.391882][T27068] erspan0: entered promiscuous mode [ 1035.403294][T27071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5689'. [ 1035.420439][T27068] macvtap2: entered allmulticast mode [ 1035.444369][T27068] erspan0: entered allmulticast mode [ 1035.518900][T27069] erspan0: left allmulticast mode [ 1035.534329][T27069] erspan0: left promiscuous mode [ 1035.539910][T27069] macvtap2: left promiscuous mode [ 1035.551229][T27069] macvtap2: left allmulticast mode [ 1035.862600][T27084] warn_alloc: 2 callbacks suppressed [ 1035.862622][T27084] syz.3.5697: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1035.883494][T27084] CPU: 1 UID: 0 PID: 27084 Comm: syz.3.5697 Not tainted syzkaller #0 PREEMPT(full) [ 1035.883524][T27084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1035.883536][T27084] Call Trace: [ 1035.883546][T27084] [ 1035.883555][T27084] dump_stack_lvl+0xe8/0x150 [ 1035.883588][T27084] warn_alloc+0x24c/0x270 [ 1035.883622][T27084] ? stack_depot_save_flags+0x33/0x800 [ 1035.883660][T27084] ? __pfx_warn_alloc+0x10/0x10 [ 1035.883693][T27084] ? kasan_save_track+0x3e/0x80 [ 1035.883712][T27084] ? __kasan_kmalloc+0x93/0xb0 [ 1035.883733][T27084] ? xsk_setsockopt+0x52a/0x960 [ 1035.883760][T27084] ? do_sock_setsockopt+0x17c/0x1b0 [ 1035.883780][T27084] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1035.883799][T27084] ? do_syscall_64+0x174/0x580 [ 1035.883817][T27084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.883849][T27084] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1035.883912][T27084] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1035.883947][T27084] ? __kasan_kmalloc+0x93/0xb0 [ 1035.883979][T27084] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1035.884011][T27084] ? __kmalloc_cache_noprof+0x150/0x660 [ 1035.884046][T27084] vmalloc_user_noprof+0xad/0xe0 [ 1035.884077][T27084] ? xskq_create+0xbf/0x170 [ 1035.884107][T27084] xskq_create+0xbf/0x170 [ 1035.884139][T27084] xsk_init_queue+0x8a/0xe0 [ 1035.884170][T27084] xsk_setsockopt+0x52a/0x960 [ 1035.884198][T27084] ? __fget_files+0x2a/0x420 [ 1035.884220][T27084] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1035.884247][T27084] ? __pfx_aa_sk_perm+0x10/0x10 [ 1035.884275][T27084] ? aa_sock_opt_perm+0xff/0x1a0 [ 1035.884304][T27084] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1035.884331][T27084] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1035.884360][T27084] do_sock_setsockopt+0x17c/0x1b0 [ 1035.884387][T27084] __x64_sys_setsockopt+0x13d/0x1b0 [ 1035.884412][T27084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.884434][T27084] do_syscall_64+0x174/0x580 [ 1035.884452][T27084] ? trace_irq_disable+0x3b/0x140 [ 1035.884471][T27084] ? clear_bhb_loop+0x40/0x90 [ 1035.884497][T27084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.884518][T27084] RIP: 0033:0x7fe45a99de59 [ 1035.884539][T27084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.884556][T27084] RSP: 002b:00007fe45b890028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1035.884580][T27084] RAX: ffffffffffffffda RBX: 00007fe45ac25fa0 RCX: 00007fe45a99de59 [ 1035.884594][T27084] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1035.884607][T27084] RBP: 00007fe45aa33e6f R08: 0000000000000004 R09: 0000000000000000 [ 1035.884620][T27084] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.884633][T27084] R13: 00007fe45ac26038 R14: 00007fe45ac25fa0 R15: 00007ffd623ed1d8 [ 1035.884668][T27084] [ 1036.280449][T27086] netlink: 'syz.3.5697': attribute type 10 has an invalid length. [ 1036.289536][T27084] Mem-Info: [ 1036.292696][T27084] active_anon:10223 inactive_anon:0 isolated_anon:0 [ 1036.292696][T27084] active_file:0 inactive_file:43924 isolated_file:0 [ 1036.292696][T27084] unevictable:768 dirty:283 writeback:0 [ 1036.292696][T27084] slab_reclaimable:11567 slab_unreclaimable:216589 [ 1036.292696][T27084] mapped:32709 shmem:1418 pagetables:1284 [ 1036.292696][T27084] sec_pagetables:0 bounce:0 [ 1036.292696][T27084] kernel_misc_reclaimable:0 [ 1036.292696][T27084] free:1185490 free_pcp:17956 free_cma:0 [ 1036.339884][T27084] Node 0 active_anon:40892kB inactive_anon:0kB active_file:0kB inactive_file:175488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130836kB dirty:1132kB writeback:0kB shmem:4136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15744kB pagetables:4996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1036.376495][T27084] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1036.378831][T27088] netlink: 'syz.3.5697': attribute type 10 has an invalid length. [ 1036.409875][T27084] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1036.409950][T27084] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 1036.410011][T27084] Node 0 DMA32 free:784888kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40892kB inactive_anon:0kB active_file:0kB inactive_file:175488kB unevictable:1536kB writepending:1132kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:71800kB local_pcp:32232kB free_cma:0kB [ 1036.410079][T27084] lowmem_reserve[]: 0 0 0 0 0 [ 1036.410129][T27084] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1036.410191][T27084] lowmem_reserve[]: 0 0 0 0 0 [ 1036.410240][T27084] Node 1 Normal free:3941712kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1036.410305][T27084] lowmem_reserve[]: 0 0 0 0 0 [ 1036.410354][T27084] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1036.410505][T27084] Node 0 DMA32: 968*4kB (UME) 406*8kB (UME) 170*16kB (UME) 217*32kB (UME) 91*64kB (M) 32*128kB (M) 6*256kB (UME) 2*512kB (U) 8*1024kB (UME) 1*2048kB (M) 182*4096kB (UM) = 784976kB [ 1036.410715][T27084] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1036.410841][T27084] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 4*16kB (UM) 10*32kB (UM) 9*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941712kB [ 1036.411056][T27084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1036.411075][T27084] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1036.411094][T27084] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1036.411113][T27084] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1036.411132][T27084] 45338 total pagecache pages [ 1036.411142][T27084] 0 pages in swap cache [ 1036.411152][T27084] Free swap = 124996kB [ 1036.411163][T27084] Total swap = 124996kB [ 1036.411173][T27084] 2097051 pages RAM [ 1036.411183][T27084] 0 pages HighMem/MovableOnly [ 1036.411193][T27084] 427419 pages reserved [ 1036.411203][T27084] 0 pages cma reserved [ 1036.865623][T27086] bond0: (slave dummy0): Releasing backup interface [ 1037.547563][T27093] tipc: Enabled bearer , priority 0 [ 1037.650260][T27097] syzkaller0: entered promiscuous mode [ 1037.655895][T27097] syzkaller0: entered allmulticast mode [ 1037.662161][T27097] tipc: Resetting bearer [ 1037.696630][T27088] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1037.931552][T27080] tipc: Resetting bearer [ 1042.559413][T27080] tipc: Disabling bearer [ 1043.149577][T27158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5713'. [ 1044.104554][T27191] tipc: Enabling of bearer rejected, already enabled [ 1044.323143][T27194] syzkaller0 speed is unknown, defaulting to 1000 [ 1044.899812][T27207] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5728'. [ 1045.358268][T27223] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5734'. [ 1045.531327][T27227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5736'. [ 1045.668608][T27229] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5737'. [ 1045.718622][T27229] syzkaller1: entered promiscuous mode [ 1045.724612][T27229] syzkaller1: entered allmulticast mode [ 1045.870789][T27234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5738'. [ 1046.391084][T27245] tipc: Enabled bearer , priority 0 [ 1046.434760][T27250] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5743'. [ 1046.464696][T27251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5744'. [ 1046.587395][T27245] syzkaller0: entered promiscuous mode [ 1046.601134][T27245] syzkaller0: entered allmulticast mode [ 1046.616912][T27245] tipc: Resetting bearer [ 1046.982113][T27244] tipc: Resetting bearer [ 1047.857724][T27267] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1048.089073][T27282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5751'. [ 1051.216972][T27244] tipc: Disabling bearer [ 1051.510690][T27291] syzkaller1: entered promiscuous mode [ 1051.527636][T27291] syzkaller1: entered allmulticast mode [ 1051.660667][T27298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5756'. [ 1051.770133][T27294] tipc: Enabled bearer , priority 0 [ 1052.043516][T27294] syzkaller0: entered promiscuous mode [ 1052.059841][T27294] syzkaller0: entered allmulticast mode [ 1052.070678][T27294] tipc: Resetting bearer [ 1052.117727][T27309] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5760'. [ 1052.480473][ T3369] tipc: Resetting bearer [ 1052.489203][T27293] tipc: Resetting bearer [ 1054.738716][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1056.324331][T27293] tipc: Disabling bearer [ 1056.405706][T27338] tipc: Enabling of bearer rejected, already enabled [ 1056.455047][T27317] syzkaller0 speed is unknown, defaulting to 1000 [ 1057.810318][T27382] tipc: Enabling of bearer rejected, already enabled [ 1057.917880][T27384] xt_CT: No such helper "syz1" [ 1058.375583][T27394] tipc: Enabling of bearer rejected, already enabled [ 1058.758658][T27405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5787'. [ 1058.833479][T27404] netlink: 'syz.1.5786': attribute type 1 has an invalid length. [ 1058.854056][T27404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5786'. [ 1058.945697][T27402] syzkaller0: entered promiscuous mode [ 1058.951339][T27402] syzkaller0: entered allmulticast mode [ 1063.338633][T27443] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5794'. [ 1063.477831][T27453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5795'. [ 1064.387804][T27479] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 1064.419826][T27479] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 1064.687114][T27486] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5807'. [ 1064.985602][T27489] syzkaller0 speed is unknown, defaulting to 1000 [ 1065.308994][T27495] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 1065.340122][T27495] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 1066.106498][T27504] syzkaller1: entered promiscuous mode [ 1066.129604][T27504] syzkaller1: entered allmulticast mode [ 1066.301570][T27506] tipc: Enabled bearer , priority 0 [ 1066.628065][T27506] syzkaller0: entered promiscuous mode [ 1066.648098][T27506] syzkaller0: entered allmulticast mode [ 1066.667020][T27506] tipc: Resetting bearer [ 1066.794630][T27505] tipc: Resetting bearer [ 1067.928613][T27524] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5818'. [ 1071.988153][T27505] tipc: Disabling bearer [ 1072.276068][T27544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5823'. [ 1072.349754][T27550] syzkaller0: entered promiscuous mode [ 1072.364983][T27550] syzkaller0: entered allmulticast mode [ 1072.770464][T27564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5829'. [ 1072.946236][T27569] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5831'. [ 1073.000272][T27570] tipc: Enabled bearer , priority 0 [ 1073.070524][T27572] netlink: 272 bytes leftover after parsing attributes in process `syz.2.5832'. [ 1073.142632][T27570] syzkaller0: entered promiscuous mode [ 1073.148321][T27570] syzkaller0: entered allmulticast mode [ 1073.156278][T27570] tipc: Resetting bearer [ 1073.216274][T27579] netlink: 'syz.1.5833': attribute type 10 has an invalid length. [ 1073.257161][ T6072] tipc: Resetting bearer [ 1073.279141][T27575] netlink: 'syz.1.5833': attribute type 10 has an invalid length. [ 1073.733000][T27566] tipc: Resetting bearer [ 1073.847039][T27598] netlink: zone id is out of range [ 1073.856073][T27598] netlink: 'syz.4.5841': attribute type 3 has an invalid length. [ 1073.870510][T27598] atomic_op ffff88807e62c998 conn xmit_atomic 0000000000000000 [ 1074.698435][T27624] netlink: 'syz.1.5844': attribute type 10 has an invalid length. [ 1074.792933][T27625] netlink: 'syz.1.5844': attribute type 10 has an invalid length. [ 1074.977443][T27627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5845'. [ 1078.197653][T27566] tipc: Disabling bearer [ 1078.222296][T27607] tipc: Enabling of bearer rejected, already enabled [ 1078.574463][T27639] netlink: 'syz.3.5847': attribute type 11 has an invalid length. [ 1078.920767][T27651] netlink: 'syz.0.5852': attribute type 8 has an invalid length. [ 1079.216838][T27655] syzkaller0: entered promiscuous mode [ 1079.233195][T27655] syzkaller0: entered allmulticast mode [ 1079.723257][T27673] netlink: 'syz.1.5859': attribute type 10 has an invalid length. [ 1079.758495][T27673] netlink: 'syz.1.5859': attribute type 10 has an invalid length. [ 1079.839085][T27677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5860'. [ 1080.226698][T27682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5864'. [ 1080.266694][T27685] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5863'. [ 1080.283234][T27685] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5863'. [ 1080.436836][T27691] netlink: 'syz.1.5866': attribute type 1 has an invalid length. [ 1080.447729][T27691] netlink: 'syz.1.5866': attribute type 2 has an invalid length. [ 1080.472291][T27689] syzkaller0: entered promiscuous mode [ 1080.484652][T27689] syzkaller0: entered allmulticast mode [ 1081.231527][T27706] syzkaller0: entered promiscuous mode [ 1081.258671][T27706] syzkaller0: entered allmulticast mode [ 1081.342115][T27723] netlink: 'syz.1.5871': attribute type 10 has an invalid length. [ 1081.393283][T27727] netlink: 'syz.1.5871': attribute type 10 has an invalid length. [ 1081.422303][T27705] syzkaller0 speed is unknown, defaulting to 1000 [ 1081.447180][T27730] (: renamed from veth0_to_hsr [ 1082.496286][T27745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5876'. [ 1082.628635][T27748] syzkaller0: entered promiscuous mode [ 1082.635054][T27748] syzkaller0: entered allmulticast mode [ 1083.908461][T27709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1084.191030][T27761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5882'. [ 1084.355743][T27766] netlink: 'syz.0.5884': attribute type 10 has an invalid length. [ 1084.389958][T27766] bond0: (slave dummy0): Releasing backup interface [ 1084.423076][T27772] netlink: 'syz.0.5884': attribute type 10 has an invalid length. [ 1084.549499][T27772] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1084.657329][T27777] syzkaller0 speed is unknown, defaulting to 1000 [ 1084.799245][T27785] tipc: Enabled bearer , priority 0 [ 1084.947427][T27785] syzkaller0: entered promiscuous mode [ 1084.963919][T27785] syzkaller0: entered allmulticast mode [ 1084.973287][T27785] tipc: Resetting bearer [ 1085.631664][T27797] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5892'. [ 1087.835277][T27784] tipc: Resetting bearer [ 1091.960480][T27784] tipc: Disabling bearer [ 1092.492014][T27819] netlink: 'syz.0.5895': attribute type 2 has an invalid length. [ 1092.539957][T27818] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004 [ 1092.698732][T27819] : entered promiscuous mode [ 1092.953924][T27829] syz.2.5900: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1092.993855][T27829] CPU: 1 UID: 0 PID: 27829 Comm: syz.2.5900 Not tainted syzkaller #0 PREEMPT(full) [ 1092.993887][T27829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1092.993900][T27829] Call Trace: [ 1092.993910][T27829] [ 1092.993918][T27829] dump_stack_lvl+0xe8/0x150 [ 1092.993955][T27829] warn_alloc+0x24c/0x270 [ 1092.993992][T27829] ? stack_depot_save_flags+0x33/0x800 [ 1092.994027][T27829] ? __pfx_warn_alloc+0x10/0x10 [ 1092.994060][T27829] ? kasan_save_track+0x3e/0x80 [ 1092.994079][T27829] ? __kasan_kmalloc+0x93/0xb0 [ 1092.994102][T27829] ? xsk_setsockopt+0x52a/0x960 [ 1092.994137][T27829] ? do_sock_setsockopt+0x17c/0x1b0 [ 1092.994161][T27829] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1092.994181][T27829] ? do_syscall_64+0x174/0x580 [ 1092.994201][T27829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.994235][T27829] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1092.994297][T27829] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1092.994349][T27829] ? __kasan_kmalloc+0x93/0xb0 [ 1092.994372][T27829] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1092.994404][T27829] ? __kmalloc_cache_noprof+0x150/0x660 [ 1092.994440][T27829] vmalloc_user_noprof+0xad/0xe0 [ 1092.994472][T27829] ? xskq_create+0xbf/0x170 [ 1092.994502][T27829] xskq_create+0xbf/0x170 [ 1092.994535][T27829] xsk_init_queue+0x8a/0xe0 [ 1092.994567][T27829] xsk_setsockopt+0x52a/0x960 [ 1092.994592][T27829] ? __fget_files+0x2a/0x420 [ 1092.994616][T27829] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1092.994643][T27829] ? __pfx_aa_sk_perm+0x10/0x10 [ 1092.994673][T27829] ? aa_sock_opt_perm+0xff/0x1a0 [ 1092.994702][T27829] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1092.994730][T27829] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1092.994759][T27829] do_sock_setsockopt+0x17c/0x1b0 [ 1092.994796][T27829] __x64_sys_setsockopt+0x13d/0x1b0 [ 1092.994821][T27829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.994844][T27829] do_syscall_64+0x174/0x580 [ 1092.994865][T27829] ? clear_bhb_loop+0x40/0x90 [ 1092.994891][T27829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.994912][T27829] RIP: 0033:0x7ff08e79de59 [ 1092.994931][T27829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.994950][T27829] RSP: 002b:00007ff08f5a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1092.994973][T27829] RAX: ffffffffffffffda RBX: 00007ff08ea25fa0 RCX: 00007ff08e79de59 [ 1092.994989][T27829] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1092.995001][T27829] RBP: 00007ff08e833e6f R08: 0000000000000004 R09: 0000000000000000 [ 1092.995014][T27829] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1092.995027][T27829] R13: 00007ff08ea26038 R14: 00007ff08ea25fa0 R15: 00007fffd5f3d858 [ 1092.995062][T27829] [ 1092.996300][T27829] Mem-Info: [ 1093.119282][T27831] netlink: 'syz.0.5901': attribute type 10 has an invalid length. [ 1093.137052][T27835] netlink: 'syz.2.5900': attribute type 10 has an invalid length. [ 1093.146028][T27829] active_anon:10004 inactive_anon:0 isolated_anon:0 [ 1093.146028][T27829] active_file:0 inactive_file:43946 isolated_file:0 [ 1093.146028][T27829] unevictable:768 dirty:269 writeback:0 [ 1093.146028][T27829] slab_reclaimable:11444 slab_unreclaimable:218599 [ 1093.146028][T27829] mapped:29617 shmem:1421 pagetables:1239 [ 1093.146028][T27829] sec_pagetables:0 bounce:0 [ 1093.146028][T27829] kernel_misc_reclaimable:0 [ 1093.146028][T27829] free:1190677 free_pcp:11289 free_cma:0 [ 1093.172027][T27832] netlink: 'syz.0.5901': attribute type 10 has an invalid length. [ 1093.177997][T27829] Node 0 active_anon:40016kB inactive_anon:0kB active_file:0kB inactive_file:175576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118468kB dirty:1076kB writeback:0kB shmem:4148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15016kB pagetables:4816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1093.210443][T27837] netlink: 'syz.4.5902': attribute type 2 has an invalid length. [ 1093.214548][T27829] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1093.219846][T27831] bond0: (slave dummy0): Releasing backup interface [ 1093.245964][T27829] Node 0 [ 1093.284213][T27836] netlink: 'syz.2.5900': attribute type 10 has an invalid length. [ 1093.478659][T27829] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1093.481369][T27834] netdevsim netdevsim4 €Â: renamed from netdevsim0 [ 1093.511650][T27829] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 1093.524182][T27829] Node 0 DMA32 free:806600kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40072kB inactive_anon:0kB active_file:0kB inactive_file:175576kB unevictable:1536kB writepending:1092kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:44836kB local_pcp:21076kB free_cma:0kB [ 1093.561695][T27829] lowmem_reserve[]: 0 0 0 0 0 [ 1093.567324][T27829] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1093.572223][T27832] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1093.616360][T27829] lowmem_reserve[]: 0 0 0 0 0 [ 1093.631098][T27837] : entered promiscuous mode [ 1093.641121][T27829] Node 1 Normal free:3941712kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1093.684044][T27829] lowmem_reserve[]: 0 0 0 0 0 [ 1093.689116][T27829] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1093.703043][T27829] Node 0 DMA32: 982*4kB (UME) 1684*8kB (UME) 169*16kB (UME) 533*32kB (UME) 152*64kB (UME) 57*128kB (UME) 19*256kB (UME) 8*512kB (UM) 7*1024kB (ME) 2*2048kB (M) 179*4096kB (UM) = 807592kB [ 1093.724701][T27829] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1093.737045][T27829] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 4*16kB (UM) 10*32kB (UM) 9*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941712kB [ 1093.755501][T27829] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1093.765621][T27829] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1093.785695][T27829] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1093.805731][T27829] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1093.844411][T27829] 45360 total pagecache pages [ 1093.858887][T27829] 0 pages in swap cache [ 1093.863296][T27829] Free swap = 124996kB [ 1093.868601][T27829] Total swap = 124996kB [ 1093.872881][T27829] 2097051 pages RAM [ 1093.878279][T27829] 0 pages HighMem/MovableOnly [ 1093.883110][T27829] 427419 pages reserved [ 1093.887640][T27829] 0 pages cma reserved [ 1093.929556][T27843] syzkaller0: entered promiscuous mode [ 1093.941575][T27843] syzkaller0: entered allmulticast mode [ 1095.158670][T27802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1095.418239][T27857] nbd: couldn't find device at index 4 [ 1095.461105][T27853] syzkaller0: entered promiscuous mode [ 1095.480698][T27853] syzkaller0: entered allmulticast mode [ 1095.900022][T27868] netlink: 'syz.3.5914': attribute type 10 has an invalid length. [ 1095.961387][T27874] netlink: 'syz.3.5914': attribute type 10 has an invalid length. [ 1095.991595][T27868] bond0: (slave dummy0): Releasing backup interface [ 1096.042016][T27874] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1096.177081][T27877] syzkaller0 speed is unknown, defaulting to 1000 [ 1096.220646][T27883] netlink: 'syz.2.5911': attribute type 10 has an invalid length. [ 1096.279097][T27885] netlink: 'syz.2.5911': attribute type 10 has an invalid length. [ 1099.559041][T27893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1099.893366][T27929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5930'. [ 1100.115873][T27934] syzkaller0: entered promiscuous mode [ 1100.121425][T27934] syzkaller0: entered allmulticast mode [ 1100.432937][T27943] netlink: 'syz.4.5931': attribute type 4 has an invalid length. [ 1100.497679][T27945] netlink: 'syz.4.5931': attribute type 4 has an invalid length. [ 1101.936976][T27974] syzkaller0: entered promiscuous mode [ 1101.942944][T27974] syzkaller0: entered allmulticast mode [ 1102.376680][T27978] tipc: Enabling of bearer rejected, already enabled [ 1102.426210][T27981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5949'. [ 1103.071187][T27995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5952'. [ 1103.627758][T28011] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.5957'. [ 1103.697104][T28013] netlink: 170676 bytes leftover after parsing attributes in process `syz.3.5958'. [ 1103.733290][T28013] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 1103.746492][T28013] openvswitch: netlink: Message has 512 unknown bytes. [ 1105.038851][T28044] syzkaller0: entered promiscuous mode [ 1105.057499][T28044] syzkaller0: entered allmulticast mode [ 1105.403822][T28050] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5968'. [ 1105.422755][T28050] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5968'. [ 1105.700313][T28063] tipc: Enabled bearer , priority 0 [ 1105.726047][T28062] tipc: Disabling bearer [ 1105.962780][T28069] tipc: Enabling of bearer rejected, already enabled [ 1106.814721][T28087] syzkaller0 speed is unknown, defaulting to 1000 [ 1107.180276][T28095] syzkaller0: entered promiscuous mode [ 1107.194458][T28095] syzkaller0: entered allmulticast mode [ 1107.352658][T28097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5981'. [ 1107.582824][T28103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1107.804695][T28087] dvmrp0: entered allmulticast mode [ 1107.958156][ T6074] dvmrp0: left allmulticast mode [ 1108.288516][T28109] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 1109.162576][T28075] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1109.558462][T28123] tipc: Enabling of bearer rejected, already enabled [ 1109.700783][T28128] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) ! [ 1110.510641][T28141] syzkaller0 speed is unknown, defaulting to 1000 [ 1111.894443][T28164] syzkaller0: entered promiscuous mode [ 1111.905171][T28164] syzkaller0: entered allmulticast mode [ 1112.403389][T28176] syzkaller0: entered promiscuous mode [ 1112.424849][T28176] syzkaller0: entered allmulticast mode [ 1116.181316][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1117.486051][T28213] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 1117.643127][T28224] vlan0: entered promiscuous mode [ 1117.661190][T28224] bond0: entered promiscuous mode [ 1117.692878][T28224] dummy0: entered promiscuous mode [ 1117.776085][T28233] warn_alloc: 1 callbacks suppressed [ 1117.776107][T28233] syz.3.6017: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1117.824521][T28233] CPU: 1 UID: 0 PID: 28233 Comm: syz.3.6017 Not tainted syzkaller #0 PREEMPT(full) [ 1117.824554][T28233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1117.824567][T28233] Call Trace: [ 1117.824576][T28233] [ 1117.824586][T28233] dump_stack_lvl+0xe8/0x150 [ 1117.824628][T28233] warn_alloc+0x24c/0x270 [ 1117.824664][T28233] ? stack_depot_save_flags+0x33/0x800 [ 1117.824695][T28233] ? __pfx_warn_alloc+0x10/0x10 [ 1117.824728][T28233] ? kasan_save_track+0x3e/0x80 [ 1117.824745][T28233] ? __kasan_kmalloc+0x93/0xb0 [ 1117.824766][T28233] ? xsk_setsockopt+0x52a/0x960 [ 1117.824792][T28233] ? do_sock_setsockopt+0x17c/0x1b0 [ 1117.824812][T28233] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1117.824831][T28233] ? do_syscall_64+0x174/0x580 [ 1117.824850][T28233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.824883][T28233] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1117.824945][T28233] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1117.824979][T28233] ? __kasan_kmalloc+0x93/0xb0 [ 1117.825002][T28233] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1117.825032][T28233] ? __kmalloc_cache_noprof+0x150/0x660 [ 1117.825067][T28233] vmalloc_user_noprof+0xad/0xe0 [ 1117.825097][T28233] ? xskq_create+0xbf/0x170 [ 1117.825125][T28233] xskq_create+0xbf/0x170 [ 1117.825161][T28233] xsk_init_queue+0x8a/0xe0 [ 1117.825191][T28233] xsk_setsockopt+0x52a/0x960 [ 1117.825217][T28233] ? __fget_files+0x2a/0x420 [ 1117.825241][T28233] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1117.825269][T28233] ? __pfx_aa_sk_perm+0x10/0x10 [ 1117.825300][T28233] ? aa_sock_opt_perm+0xff/0x1a0 [ 1117.825329][T28233] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1117.825355][T28233] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1117.825384][T28233] do_sock_setsockopt+0x17c/0x1b0 [ 1117.825411][T28233] __x64_sys_setsockopt+0x13d/0x1b0 [ 1117.825436][T28233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.825459][T28233] do_syscall_64+0x174/0x580 [ 1117.825477][T28233] ? trace_irq_disable+0x3b/0x140 [ 1117.825497][T28233] ? clear_bhb_loop+0x40/0x90 [ 1117.825522][T28233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.825542][T28233] RIP: 0033:0x7fe45a99de59 [ 1117.825564][T28233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.825582][T28233] RSP: 002b:00007fe45b890028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1117.825614][T28233] RAX: ffffffffffffffda RBX: 00007fe45ac25fa0 RCX: 00007fe45a99de59 [ 1117.825630][T28233] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1117.825643][T28233] RBP: 00007fe45aa33e6f R08: 0000000000000004 R09: 0000000000000000 [ 1117.825657][T28233] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.825670][T28233] R13: 00007fe45ac26038 R14: 00007fe45ac25fa0 R15: 00007ffd623ed1d8 [ 1117.825706][T28233] [ 1117.825789][T28233] Mem-Info: [ 1118.032875][T28237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6018'. [ 1118.035369][T28233] active_anon:10021 inactive_anon:0 isolated_anon:0 [ 1118.035369][T28233] active_file:0 inactive_file:43954 isolated_file:0 [ 1118.035369][T28233] unevictable:768 dirty:273 writeback:0 [ 1118.035369][T28233] slab_reclaimable:11548 slab_unreclaimable:204772 [ 1118.035369][T28233] mapped:29604 shmem:1418 pagetables:1235 [ 1118.035369][T28233] sec_pagetables:0 bounce:0 [ 1118.035369][T28233] kernel_misc_reclaimable:0 [ 1118.035369][T28233] free:1200779 free_pcp:14076 free_cma:0 [ 1118.035431][T28233] Node 0 active_anon:40084kB inactive_anon:0kB active_file:0kB inactive_file:175608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118416kB dirty:1092kB writeback:0kB shmem:4136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14708kB pagetables:4800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1118.035491][T28233] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1118.035547][T28233] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.035621][T28233] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 1118.035670][T28233] Node 0 DMA32 free:846044kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40084kB inactive_anon:0kB active_file:0kB inactive_file:175608kB unevictable:1536kB writepending:1092kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:56304kB local_pcp:37056kB free_cma:0kB [ 1118.035733][T28233] lowmem_reserve[]: 0 0 0 0 0 [ 1118.035776][T28233] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.035836][T28233] lowmem_reserve[]: 0 0 0 0 0 [ 1118.035880][T28233] Node 1 Normal free:3941712kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.035943][T28233] lowmem_reserve[]: 0 0 0 0 0 [ 1118.035987][T28233] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1118.036129][T28233] Node 0 DMA32: 2836*4kB (UME) 1378*8kB (UME) 581*16kB (UME) 488*32kB (UME) 181*64kB (UME) 75*128kB (UME) 25*256kB (UME) 6*512kB (UM) 12*1024kB (UME) 7*2048kB (UM) 181*4096kB (UM) = 845936kB [ 1118.036323][T28233] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1118.036440][T28233] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 4*16kB (UM) 10*32kB (UM) 9*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941712kB [ 1118.036659][T28233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.036680][T28233] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1118.036699][T28233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.036719][T28233] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1118.036738][T28233] 45370 total pagecache pages [ 1118.036748][T28233] 0 pages in swap cache [ 1118.036785][T28233] Free swap = 124996kB [ 1118.036795][T28233] Total swap = 124996kB [ 1118.036805][T28233] 2097051 pages RAM [ 1118.036815][T28233] 0 pages HighMem/MovableOnly [ 1118.036823][T28233] 427419 pages reserved [ 1118.036833][T28233] 0 pages cma reserved [ 1118.085742][T28233] netlink: 'syz.3.6017': attribute type 10 has an invalid length. [ 1118.118994][T28237] netlink: 'syz.2.6018': attribute type 7 has an invalid length. [ 1118.185596][T28245] netlink: 'syz.3.6017': attribute type 10 has an invalid length. [ 1118.295851][T28237] netlink: 'syz.2.6018': attribute type 8 has an invalid length. [ 1118.593392][T28237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6018'. [ 1118.605502][T28233] bond0: (slave dummy0): Releasing backup interface [ 1118.636217][T28247] tipc: Enabling of bearer rejected, already enabled [ 1118.667678][T28245] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1118.726644][T28237] team0: entered promiscuous mode [ 1118.733996][T28237] bond0: entered promiscuous mode [ 1118.747698][T28237] erspan0: entered promiscuous mode [ 1118.759931][T28237] debugfs: 'hsr0' already exists in 'hsr' [ 1118.767923][T28237] Cannot create hsr debugfs directory [ 1118.776371][T28237] hsr0: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 1118.807838][T28237] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 1118.820485][T28237] hsr0: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 1118.835365][T28237] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1118.872893][T28251] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6020'. [ 1119.360217][T28269] netlink: 'syz.3.6025': attribute type 1 has an invalid length. [ 1119.390258][T28271] tipc: Enabling of bearer rejected, already enabled [ 1119.400444][T28269] netlink: 'syz.3.6025': attribute type 2 has an invalid length. [ 1119.736609][T28275] syzkaller0: entered promiscuous mode [ 1119.757230][T28275] syzkaller0: entered allmulticast mode [ 1119.792236][T28275] tipc: Enabled bearer , priority 0 [ 1120.115531][T28272] tipc: Resetting bearer [ 1120.151723][T28272] tipc: Disabling bearer [ 1120.502319][T28282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6028'. [ 1120.735910][T28295] netlink: 'syz.1.6029': attribute type 10 has an invalid length. [ 1120.838922][T28304] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6031'. [ 1120.849220][T28305] netlink: 'syz.1.6029': attribute type 10 has an invalid length. [ 1121.080997][T28298] tipc: Enabling of bearer rejected, already enabled [ 1121.465923][T28313] syzkaller0: entered promiscuous mode [ 1121.481140][T28318] netlink: 'syz.3.6035': attribute type 10 has an invalid length. [ 1121.507673][T28313] syzkaller0: entered allmulticast mode [ 1121.534977][T28325] netlink: 'syz.3.6035': attribute type 10 has an invalid length. [ 1121.592912][T28318] bond0: (slave dummy0): Releasing backup interface [ 1121.620389][T28325] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1121.642602][T28322] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1122.302245][T28343] syzkaller0: entered promiscuous mode [ 1122.337839][T28343] syzkaller0: entered allmulticast mode [ 1122.389268][T28343] tipc: Enabled bearer , priority 0 [ 1122.445485][T28350] netlink: 200 bytes leftover after parsing attributes in process `syz.4.6045'. [ 1122.447336][T28343] tipc: Resetting bearer [ 1122.502016][T28350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6045'. [ 1122.554279][T28341] tipc: Resetting bearer [ 1122.612727][T28341] tipc: Disabling bearer [ 1123.152855][T28359] validate_nla: 2 callbacks suppressed [ 1123.152876][T28359] netlink: 'syz.2.6049': attribute type 10 has an invalid length. [ 1123.186114][T28359] netlink: 'syz.2.6049': attribute type 10 has an invalid length. [ 1123.203948][T28360] bond11: (slave veth0_to_bond): Releasing backup interface [ 1123.232110][T28360] team0: Port device team_slave_0 removed [ 1123.256593][T28360] team0: Port device team_slave_1 removed [ 1123.278844][T28360] bond2: (slave geneve2): Releasing active interface [ 1123.304293][T28360] bond4: (slave gre1): Releasing backup interface [ 1123.325949][T28360] bond0: (slave ip6gre1): Releasing backup interface [ 1123.372726][T28360] bond6: (slave veth13): Releasing backup interface [ 1123.394474][T28360] bond8: (slave geneve3): Releasing active interface [ 1123.419651][T28360] bond12: (slave veth19): Releasing active interface [ 1123.433039][T28360] bond12: (slave veth19): the permanent HWaddr of slave - 82:ae:52:49:bb:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1123.475222][T28360] bond12: (slave veth21): making interface the new active one [ 1123.512796][T28360] bond12: (slave veth21): Releasing active interface [ 1123.555859][T28360] team0: Port device macvlan4 removed [ 1123.565353][T28360] bond13: (slave ip6gretap2): Releasing active interface [ 1123.591693][T28360] bond15: (slave gretap2): Releasing active interface [ 1123.638417][T28360] bond16: (slave bridge6): Releasing backup interface [ 1123.647724][T28360] bond17: left allmulticast mode [ 1123.663780][T28360] bond17: left promiscuous mode [ 1123.680898][T28360] bridge0: port 1(bond17) entered disabled state [ 1123.714800][T28360] bond18: (slave bridge7): Releasing backup interface [ 1123.728131][T28360] bond19: (slave gretap3): Releasing active interface [ 1123.743235][T28360] team0: Port device bridge9 removed [ 1123.759297][T28360] bond22: (slave veth25): Releasing active interface [ 1123.777816][T28360] bond22: (slave veth25): the permanent HWaddr of slave - 56:fa:1b:b2:7d:40 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1123.836126][T28360] vlan5: entered promiscuous mode [ 1123.857707][T28360] bond22: (slave vlan5): Releasing active interface [ 1123.882792][T28360] vlan5: left promiscuous mode [ 1123.920373][T28360] team0: Port device macvlan5 removed [ 1123.959788][T28360] bond25: (slave veth27): Removing an active aggregator [ 1124.014489][T28360] bond25: (slave veth27): Releasing backup interface [ 1124.091731][T28360] vlan6: left allmulticast mode [ 1124.136626][T28360] geneve0: left allmulticast mode [ 1124.167201][T28360] vlan6: left promiscuous mode [ 1124.196157][T28360] geneve0: left promiscuous mode [ 1124.218182][T28360] bridge0: port 2(vlan6) entered disabled state [ 1124.276761][T28361] team0: Port device xfrm0 added [ 1124.520086][T28391] netlink: 'syz.3.6054': attribute type 1 has an invalid length. [ 1124.553797][T28391] netlink: 'syz.3.6054': attribute type 8 has an invalid length. [ 1124.896382][T28402] syzkaller0 speed is unknown, defaulting to 1000 [ 1124.909622][T28409] netlink: 'syz.1.6059': attribute type 10 has an invalid length. [ 1124.965302][T28413] netlink: 'syz.1.6059': attribute type 10 has an invalid length. [ 1125.105348][T28415] syzkaller0: entered promiscuous mode [ 1125.114600][T28415] syzkaller0: entered allmulticast mode [ 1126.912009][T28449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6066'. [ 1127.098723][T28451] netlink: 'syz.2.6065': attribute type 10 has an invalid length. [ 1127.179817][T28451] netlink: 'syz.2.6065': attribute type 10 has an invalid length. [ 1127.237282][ T30] audit: type=1800 audit(1782881410.053:10): pid=28454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6068" name="memory.events" dev="tmpfs" ino=6351 res=0 errno=0 [ 1127.362062][T28463] netlink: 'syz.1.6070': attribute type 10 has an invalid length. [ 1127.409391][T28463] netlink: 'syz.1.6070': attribute type 10 has an invalid length. [ 1127.882912][T28474] syzkaller0: entered promiscuous mode [ 1127.891534][T28474] syzkaller0: entered allmulticast mode [ 1128.435764][T28493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6078'. [ 1129.683361][T28523] warn_alloc: 3 callbacks suppressed [ 1129.683382][T28523] syz.0.6082: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1129.767340][T28523] CPU: 1 UID: 0 PID: 28523 Comm: syz.0.6082 Not tainted syzkaller #0 PREEMPT(full) [ 1129.767370][T28523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1129.767384][T28523] Call Trace: [ 1129.767393][T28523] [ 1129.767401][T28523] dump_stack_lvl+0xe8/0x150 [ 1129.767434][T28523] warn_alloc+0x24c/0x270 [ 1129.767467][T28523] ? stack_depot_save_flags+0x33/0x800 [ 1129.767497][T28523] ? __pfx_warn_alloc+0x10/0x10 [ 1129.767527][T28523] ? kasan_save_track+0x3e/0x80 [ 1129.767545][T28523] ? __kasan_kmalloc+0x93/0xb0 [ 1129.767565][T28523] ? xsk_setsockopt+0x52a/0x960 [ 1129.767590][T28523] ? do_sock_setsockopt+0x17c/0x1b0 [ 1129.767609][T28523] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1129.767628][T28523] ? do_syscall_64+0x174/0x580 [ 1129.767646][T28523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.767677][T28523] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1129.767738][T28523] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1129.767772][T28523] ? __kasan_kmalloc+0x93/0xb0 [ 1129.767792][T28523] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1129.767823][T28523] ? __kmalloc_cache_noprof+0x150/0x660 [ 1129.767855][T28523] vmalloc_user_noprof+0xad/0xe0 [ 1129.767884][T28523] ? xskq_create+0xbf/0x170 [ 1129.767912][T28523] xskq_create+0xbf/0x170 [ 1129.767943][T28523] xsk_init_queue+0x8a/0xe0 [ 1129.767973][T28523] xsk_setsockopt+0x52a/0x960 [ 1129.767998][T28523] ? __fget_files+0x2a/0x420 [ 1129.768018][T28523] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1129.768045][T28523] ? __pfx_aa_sk_perm+0x10/0x10 [ 1129.768072][T28523] ? aa_sock_opt_perm+0xff/0x1a0 [ 1129.768110][T28523] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1129.768136][T28523] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1129.768164][T28523] do_sock_setsockopt+0x17c/0x1b0 [ 1129.768194][T28523] __x64_sys_setsockopt+0x13d/0x1b0 [ 1129.768218][T28523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.768241][T28523] do_syscall_64+0x174/0x580 [ 1129.768259][T28523] ? trace_irq_disable+0x3b/0x140 [ 1129.768280][T28523] ? clear_bhb_loop+0x40/0x90 [ 1129.768305][T28523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.768325][T28523] RIP: 0033:0x7f4df659de59 [ 1129.768347][T28523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.768363][T28523] RSP: 002b:00007f4df73ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1129.768386][T28523] RAX: ffffffffffffffda RBX: 00007f4df6825fa0 RCX: 00007f4df659de59 [ 1129.768401][T28523] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1129.768412][T28523] RBP: 00007f4df6633e6f R08: 0000000000000004 R09: 0000000000000000 [ 1129.768424][T28523] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.768437][T28523] R13: 00007f4df6826038 R14: 00007f4df6825fa0 R15: 00007ffd39fc7278 [ 1129.768472][T28523] [ 1129.768609][T28523] Mem-Info: [ 1130.079359][T28523] active_anon:10061 inactive_anon:0 isolated_anon:0 [ 1130.079359][T28523] active_file:0 inactive_file:43960 isolated_file:0 [ 1130.079359][T28523] unevictable:768 dirty:381 writeback:0 [ 1130.079359][T28523] slab_reclaimable:11761 slab_unreclaimable:205187 [ 1130.079359][T28523] mapped:30534 shmem:1418 pagetables:1276 [ 1130.079359][T28523] sec_pagetables:0 bounce:0 [ 1130.079359][T28523] kernel_misc_reclaimable:0 [ 1130.079359][T28523] free:1200966 free_pcp:13008 free_cma:0 [ 1130.182810][T28523] Node 0 active_anon:40080kB inactive_anon:0kB active_file:0kB inactive_file:175632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122556kB dirty:1536kB writeback:0kB shmem:4136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14688kB pagetables:4920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1130.248958][T28527] netlink: 'syz.0.6082': attribute type 10 has an invalid length. [ 1130.371292][T28523] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1130.373497][T28525] netlink: 'syz.0.6082': attribute type 10 has an invalid length. [ 1130.502714][T28535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6083'. [ 1130.505350][T28523] Node 0 [ 1130.546568][T28527] bond0: (slave dummy0): Releasing backup interface [ 1130.553771][T28523] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1130.588382][T28523] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 1130.599799][T28527] dummy0: left promiscuous mode [ 1130.606737][T28523] Node 0 DMA32 free:851164kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39980kB inactive_anon:0kB active_file:0kB inactive_file:175632kB unevictable:1536kB writepending:1536kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:48036kB local_pcp:21064kB free_cma:0kB [ 1130.649484][T28547] netlink: 'syz.2.6084': attribute type 10 has an invalid length. [ 1130.651621][T28523] lowmem_reserve[]: 0 0 0 0 0 [ 1130.665722][T28523] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1130.693864][T28525] dummy0: entered promiscuous mode [ 1130.699925][T28523] lowmem_reserve[]: 0 0 0 0 0 [ 1130.711762][T28523] Node 1 Normal free:3941712kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1130.723504][T28525] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1130.748695][T28523] lowmem_reserve[]: 0 0 0 0 0 [ 1130.761612][T28549] netlink: 'syz.2.6084': attribute type 10 has an invalid length. [ 1130.850893][T28523] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1130.868167][T28523] Node 0 DMA32: 2540*4kB (UM) 1045*8kB (UME) 911*16kB (UME) 239*32kB (UME) 192*64kB (UM) 93*128kB (UM) 31*256kB (UME) 10*512kB (UME) 11*1024kB (UM) 6*2048kB (M) 183*4096kB (UM) = 851112kB [ 1130.894150][T28523] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1130.909957][T28523] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 4*16kB (UM) 10*32kB (UM) 9*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941712kB [ 1130.928684][T28523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1130.940025][T28523] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1130.952575][T28523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1130.965088][T28523] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1130.976145][T28523] 45374 total pagecache pages [ 1130.981191][T28523] 0 pages in swap cache [ 1130.986590][T28523] Free swap = 124996kB [ 1130.991078][T28523] Total swap = 124996kB [ 1130.996783][T28523] 2097051 pages RAM [ 1131.000722][T28523] 0 pages HighMem/MovableOnly [ 1131.006784][T28523] 427419 pages reserved [ 1131.011006][T28523] 0 pages cma reserved [ 1131.296278][T28561] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6089'. [ 1131.451261][T28559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.688140][T28575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6094'. [ 1131.974293][T28579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6095'. [ 1132.486243][ T36] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1133.125603][T28597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6098'. [ 1133.192098][T28590] RDS: rds_bind could not find a transport for ::fcff:ffff:8000:0:20:0, load rds_tcp or rds_rdma? [ 1133.437532][T28600] netlink: 'syz.3.6101': attribute type 10 has an invalid length. [ 1133.506362][T28600] bond0: (slave dummy0): Releasing backup interface [ 1133.532812][T28605] netlink: 'syz.3.6101': attribute type 10 has an invalid length. [ 1133.549905][T28609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6105'. [ 1133.578642][T28605] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1133.598142][T28612] netlink: 'syz.2.6102': attribute type 1 has an invalid length. [ 1133.642817][T28612] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6102'. [ 1133.719790][T28612] netlink: 'syz.2.6102': attribute type 1 has an invalid length. [ 1133.804245][T28607] bond16: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1133.826581][T28621] ksmbd: Unknown IPC event: 4, ignore. [ 1133.947465][T28607] bond16 (unregistering): Released all slaves [ 1134.381742][T28631] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1134.431919][T28631] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1134.439002][T28631] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1134.446009][T28631] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1134.452933][T28631] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1134.459903][T28631] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1134.465410][T28627] syzkaller0: entered promiscuous mode [ 1134.467061][T28631] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1134.479441][T28631] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1134.484683][T28627] syzkaller0: entered allmulticast mode [ 1134.486401][T28631] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1134.521512][T28633] tipc: Enabling of bearer rejected, already enabled [ 1134.544690][T28635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6109'. [ 1134.555019][T28633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6108'. [ 1134.576581][T28633] netlink: 'syz.1.6108': attribute type 1 has an invalid length. [ 1134.696161][T28633] bond16: entered promiscuous mode [ 1134.710924][T28633] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1134.879798][T28637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6108'. [ 1134.891070][T28637] bond16: entered allmulticast mode [ 1134.996046][T28641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6110'. [ 1135.032318][T28637] bond16: (slave bridge14): making interface the new active one [ 1135.043103][T28637] bridge14: entered promiscuous mode [ 1135.051332][T28637] bridge14: entered allmulticast mode [ 1135.061029][T28637] bond16: (slave bridge14): Enslaving as an active interface with an up link [ 1135.997989][T28659] netlink: 'syz.4.6115': attribute type 1 has an invalid length. [ 1136.071035][T28659] netlink: 'syz.4.6115': attribute type 2 has an invalid length. [ 1136.115115][T28656] syzkaller0: entered promiscuous mode [ 1136.131482][T28656] syzkaller0: entered allmulticast mode [ 1136.263968][T28666] netlink: 'syz.3.6117': attribute type 10 has an invalid length. [ 1136.266146][T28657] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.335710][T28669] netlink: 'syz.3.6117': attribute type 10 has an invalid length. [ 1136.467854][T28657] veth0_to_bond: left promiscuous mode [ 1136.662645][T28657] veth1_vlan: left promiscuous mode [ 1136.701070][T28657] veth0_vlan: entered promiscuous mode [ 1136.730079][T28657] tipc: Resetting bearer [ 1136.740849][T28657] veth1_vlan: entered promiscuous mode [ 1136.761329][T28657] veth0_macvtap: left promiscuous mode [ 1136.781948][T28657] veth0_macvtap: entered promiscuous mode [ 1136.822003][T28657] 8021q: adding VLAN 0 to HW filter on device €Â [ 1136.834904][T28657] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1136.844386][T28657] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1136.854417][T28657] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1136.941344][T28666] bond0: (slave dummy0): Releasing backup interface [ 1137.215993][T28669] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1142.041676][T28667] syzkaller0: entered promiscuous mode [ 1142.048739][T28667] syzkaller0: entered allmulticast mode [ 1142.070542][ T6074] netdevsim netdevsim4 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.086830][ T6074] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.617424][T28705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6123'. [ 1146.797163][ T6074] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.807965][ T6074] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.268399][T28716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6126'. [ 1147.400145][T28724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6127'. [ 1147.412230][T28722] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1147.468640][T28727] syz.4.6125: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1147.491989][T28727] CPU: 1 UID: 0 PID: 28727 Comm: syz.4.6125 Not tainted syzkaller #0 PREEMPT(full) [ 1147.492020][T28727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1147.492034][T28727] Call Trace: [ 1147.492044][T28727] [ 1147.492054][T28727] dump_stack_lvl+0xe8/0x150 [ 1147.492087][T28727] warn_alloc+0x24c/0x270 [ 1147.492122][T28727] ? stack_depot_save_flags+0x33/0x800 [ 1147.492154][T28727] ? __pfx_warn_alloc+0x10/0x10 [ 1147.492187][T28727] ? kasan_save_track+0x3e/0x80 [ 1147.492205][T28727] ? __kasan_kmalloc+0x93/0xb0 [ 1147.492228][T28727] ? xsk_setsockopt+0x52a/0x960 [ 1147.492254][T28727] ? do_sock_setsockopt+0x17c/0x1b0 [ 1147.492274][T28727] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1147.492293][T28727] ? do_syscall_64+0x174/0x580 [ 1147.492311][T28727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.492343][T28727] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1147.492407][T28727] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1147.492444][T28727] ? __kasan_kmalloc+0x93/0xb0 [ 1147.492476][T28727] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1147.492507][T28727] ? __kmalloc_cache_noprof+0x150/0x660 [ 1147.492543][T28727] vmalloc_user_noprof+0xad/0xe0 [ 1147.492575][T28727] ? xskq_create+0xbf/0x170 [ 1147.492606][T28727] xskq_create+0xbf/0x170 [ 1147.492640][T28727] xsk_init_queue+0x8a/0xe0 [ 1147.492672][T28727] xsk_setsockopt+0x52a/0x960 [ 1147.492697][T28727] ? __fget_files+0x2a/0x420 [ 1147.492720][T28727] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1147.492747][T28727] ? __pfx_aa_sk_perm+0x10/0x10 [ 1147.492776][T28727] ? aa_sock_opt_perm+0xff/0x1a0 [ 1147.492805][T28727] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1147.492831][T28727] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1147.492862][T28727] do_sock_setsockopt+0x17c/0x1b0 [ 1147.492894][T28727] __x64_sys_setsockopt+0x13d/0x1b0 [ 1147.492918][T28727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.492941][T28727] do_syscall_64+0x174/0x580 [ 1147.492958][T28727] ? trace_irq_disable+0x3b/0x140 [ 1147.492978][T28727] ? clear_bhb_loop+0x40/0x90 [ 1147.493004][T28727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.493023][T28727] RIP: 0033:0x7ff178b9de59 [ 1147.493045][T28727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1147.493062][T28727] RSP: 002b:00007ff1799b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1147.493085][T28727] RAX: ffffffffffffffda RBX: 00007ff178e25fa0 RCX: 00007ff178b9de59 [ 1147.493100][T28727] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1147.493114][T28727] RBP: 00007ff178c33e6f R08: 0000000000000004 R09: 0000000000000000 [ 1147.493127][T28727] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1147.493140][T28727] R13: 00007ff178e26038 R14: 00007ff178e25fa0 R15: 00007ffd3c7404d8 [ 1147.493175][T28727] [ 1147.493261][T28727] Mem-Info: [ 1147.720212][T28729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6129'. [ 1147.813372][T28727] active_anon:10023 inactive_anon:0 isolated_anon:0 [ 1147.813372][T28727] active_file:0 inactive_file:43966 isolated_file:0 [ 1147.813372][T28727] unevictable:768 dirty:131 writeback:0 [ 1147.813372][T28727] slab_reclaimable:11586 slab_unreclaimable:206475 [ 1147.813372][T28727] mapped:29629 shmem:1419 pagetables:1254 [ 1147.813372][T28727] sec_pagetables:0 bounce:0 [ 1147.813372][T28727] kernel_misc_reclaimable:0 [ 1147.813372][T28727] free:1203333 free_pcp:10390 free_cma:0 [ 1147.816845][T28729] batadv1: left allmulticast mode [ 1147.865314][T28729] batadv1: left promiscuous mode [ 1147.872388][T28729] bridge0: port 1(batadv1) entered disabled state [ 1147.893260][T28727] Node 0 active_anon:40092kB inactive_anon:0kB active_file:0kB inactive_file:175656kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118416kB dirty:524kB writeback:0kB shmem:4140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14764kB pagetables:4876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1147.931241][T28727] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1148.027399][T28727] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1148.077401][T28727] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 1148.093573][T28727] Node 0 DMA32 free:856900kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40092kB inactive_anon:0kB active_file:0kB inactive_file:175656kB unevictable:1536kB writepending:524kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:42224kB local_pcp:21548kB free_cma:0kB [ 1148.138542][T28727] lowmem_reserve[]: 0 0 0 0 0 [ 1148.154674][T28727] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1148.272357][T28732] netlink: 'syz.4.6125': attribute type 10 has an invalid length. [ 1148.310330][T28732] netlink: 'syz.4.6125': attribute type 10 has an invalid length. [ 1148.345243][T28727] lowmem_reserve[]: 0 0 0 0 0 [ 1148.361820][T28727] Node 1 Normal free:3941712kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1148.534323][T28727] lowmem_reserve[]: 0 0 0 0 0 [ 1148.571202][T28727] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1148.621356][T28727] Node 0 DMA32: 2116*4kB (UME) 1480*8kB (UME) 1120*16kB (UME) 366*32kB (UME) 122*64kB (UME) 80*128kB (UME) 37*256kB (UME) 11*512kB (UME) 12*1024kB (UM) 6*2048kB (M) 183*4096kB (UM) = 857232kB [ 1148.643103][T28727] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1148.656873][T28727] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 4*16kB (UM) 10*32kB (UM) 9*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941712kB [ 1148.676837][T28727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1148.687141][T28727] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1148.698932][T28727] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1148.709220][T28727] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1148.719892][T28727] 45857 total pagecache pages [ 1148.724998][T28727] 0 pages in swap cache [ 1148.729254][T28727] Free swap = 124996kB [ 1148.755257][T28727] Total swap = 124996kB [ 1148.764771][T28727] 2097051 pages RAM [ 1148.773198][T28727] 0 pages HighMem/MovableOnly [ 1148.782907][T28727] 427419 pages reserved [ 1148.789389][T28727] 0 pages cma reserved [ 1148.830888][T28750] syzkaller0 speed is unknown, defaulting to 1000 [ 1149.206113][T28758] syzkaller0: entered promiscuous mode [ 1149.242436][T28758] syzkaller0: entered allmulticast mode [ 1149.787519][T28773] netlink: 'syz.4.6138': attribute type 1 has an invalid length. [ 1149.816893][T28773] netlink: 'syz.4.6138': attribute type 2 has an invalid length. [ 1150.171718][T28759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6136'. [ 1155.278940][T28798] syzkaller0: entered promiscuous mode [ 1155.300366][T28798] syzkaller0: entered allmulticast mode [ 1155.942461][T28821] netlink: 'syz.0.6147': attribute type 10 has an invalid length. [ 1155.998579][T28814] netlink: 'syz.0.6147': attribute type 10 has an invalid length. [ 1156.019219][T28821] bond0: (slave dummy0): Releasing backup interface [ 1156.040069][T28821] dummy0: left promiscuous mode [ 1156.055835][T28814] dummy0: entered promiscuous mode [ 1156.072746][T28814] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1156.452455][T28828] netlink: 'syz.0.6150': attribute type 10 has an invalid length. [ 1156.482538][T28828] bond0: (slave dummy0): Releasing backup interface [ 1156.498094][T28828] dummy0: left promiscuous mode [ 1156.526240][T28832] netlink: 'syz.0.6150': attribute type 10 has an invalid length. [ 1156.582297][T28832] dummy0: entered promiscuous mode [ 1156.608704][T28832] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1157.076732][T28841] can: request_module (can-proto-0) failed. [ 1157.721862][T28854] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6154'. [ 1157.838742][T28865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6158'. [ 1157.858397][T28864] syzkaller0 speed is unknown, defaulting to 1000 [ 1157.982021][T28869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.077574][T28869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1158.109875][T28869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1158.146181][T28869] veth1_vlan: left promiscuous mode [ 1158.170620][T28869] veth0_vlan: left promiscuous mode [ 1158.189236][T28869] veth0_vlan: entered promiscuous mode [ 1158.218147][T28869] veth1_vlan: entered promiscuous mode [ 1158.255998][T28869] veth0_macvtap: left promiscuous mode [ 1158.273231][T28869] veth0_macvtap: entered promiscuous mode [ 1158.308558][T28869] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1158.319248][T28869] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1158.328930][T28869] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1158.341226][T28869] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1158.351550][T28869] net_ratelimit: 1849 callbacks suppressed [ 1158.351568][T28869] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1158.663116][T28386] batman_adv: batadv0: Interface activated: vlan2 [ 1158.785024][ T6072] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.806786][ T6072] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.069977][ T6072] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.167658][T28901] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1159.352193][ T6072] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.403302][T28907] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6162'. [ 1159.603155][T28911] xt_hashlimit: size too large, truncated to 1048576 [ 1159.708611][T28915] netlink: 'syz.1.6163': attribute type 11 has an invalid length. [ 1159.751871][T28913] netlink: 'syz.4.6164': attribute type 30 has an invalid length. [ 1159.774756][T28913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6164'. [ 1159.808722][T28915] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6163'. [ 1159.824721][T28919] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6163'. [ 1159.918777][T28913] bond0: option arp_missed_max: invalid value (0) [ 1159.961204][T28913] bond0: option arp_missed_max: allowed values 1 - 255 [ 1160.398658][T28931] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6167'. [ 1160.432721][T28931] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6167'. [ 1160.483438][T28934] netlink: 'syz.4.6166': attribute type 14 has an invalid length. [ 1162.112524][T28978] macsec1: entered promiscuous mode [ 1162.911643][T28999] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 1163.903146][T29030] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6180'. [ 1164.128347][T29015] syzkaller0 speed is unknown, defaulting to 1000 [ 1164.436213][T29029] nbd0: detected capacity change from 0 to 63 [ 1164.460217][T29034] block nbd0: NBD_DISCONNECT [ 1164.489612][T29034] block nbd0: Disconnected due to user request. [ 1164.568711][T29034] block nbd0: shutting down sockets [ 1164.586670][ C0] blk_print_req_error: 117 callbacks suppressed [ 1164.586726][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1164.604433][ C0] buffer_io_error: 138 callbacks suppressed [ 1164.604455][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1164.627492][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1164.638035][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1164.650506][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1164.661181][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1164.678642][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1164.689035][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1164.697941][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1164.710112][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1164.720992][ T10] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1164.731927][ T10] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1164.743403][ T10] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1164.753873][ T10] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1164.763060][ T10] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1164.774327][ T10] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1164.777016][T29040] bond20: option updelay: invalid value (18446744073709518847) [ 1164.784586][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1164.802486][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1164.812024][ T10] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1164.823354][ T10] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1164.842918][T28874] ldm_validate_partition_table(): Disk read failed. [ 1164.862745][T28874] Dev nbd0: unable to read RDB block 0 [ 1164.867017][T29040] bond20: option updelay: allowed values 0 - 2147483647 [ 1164.878832][T28874] nbd0: unable to read partition table [ 1164.947781][T29040] bond20 (unregistering): Released all slaves [ 1164.966331][T28874] ldm_validate_partition_table(): Disk read failed. [ 1165.010337][T28874] Dev nbd0: unable to read RDB block 0 [ 1165.064198][T28874] nbd0: unable to read partition table [ 1165.368575][T29053] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1165.435329][T29064] netlink: 160 bytes leftover after parsing attributes in process `syz.2.6186'. [ 1165.448704][T29064] netlink: 'syz.2.6186': attribute type 11 has an invalid length. [ 1165.631507][T29053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1165.752455][T29073] warn_alloc: 2 callbacks suppressed [ 1165.752478][T29073] syz.1.6187: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1165.882258][T29073] CPU: 1 UID: 0 PID: 29073 Comm: syz.1.6187 Not tainted syzkaller #0 PREEMPT(full) [ 1165.882289][T29073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1165.882303][T29073] Call Trace: [ 1165.882312][T29073] [ 1165.882321][T29073] dump_stack_lvl+0xe8/0x150 [ 1165.882359][T29073] warn_alloc+0x24c/0x270 [ 1165.882396][T29073] ? stack_depot_save_flags+0x33/0x800 [ 1165.882431][T29073] ? __pfx_warn_alloc+0x10/0x10 [ 1165.882464][T29073] ? kasan_save_track+0x3e/0x80 [ 1165.882484][T29073] ? __kasan_kmalloc+0x93/0xb0 [ 1165.882506][T29073] ? xsk_setsockopt+0x52a/0x960 [ 1165.882538][T29073] ? do_sock_setsockopt+0x17c/0x1b0 [ 1165.882561][T29073] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1165.882581][T29073] ? do_syscall_64+0x174/0x580 [ 1165.882601][T29073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.882635][T29073] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1165.882698][T29073] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1165.882734][T29073] ? __kasan_kmalloc+0x93/0xb0 [ 1165.882756][T29073] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1165.882787][T29073] ? __kmalloc_cache_noprof+0x150/0x660 [ 1165.882821][T29073] vmalloc_user_noprof+0xad/0xe0 [ 1165.882853][T29073] ? xskq_create+0xbf/0x170 [ 1165.882886][T29073] xskq_create+0xbf/0x170 [ 1165.882917][T29073] xsk_init_queue+0x8a/0xe0 [ 1165.882948][T29073] xsk_setsockopt+0x52a/0x960 [ 1165.882975][T29073] ? __fget_files+0x2a/0x420 [ 1165.882998][T29073] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1165.883026][T29073] ? __pfx_aa_sk_perm+0x10/0x10 [ 1165.883066][T29073] ? aa_sock_opt_perm+0xff/0x1a0 [ 1165.883096][T29073] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1165.883125][T29073] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1165.883155][T29073] do_sock_setsockopt+0x17c/0x1b0 [ 1165.883183][T29073] __x64_sys_setsockopt+0x13d/0x1b0 [ 1165.883208][T29073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.883230][T29073] do_syscall_64+0x174/0x580 [ 1165.883247][T29073] ? trace_irq_disable+0x3b/0x140 [ 1165.883269][T29073] ? clear_bhb_loop+0x40/0x90 [ 1165.883295][T29073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.883316][T29073] RIP: 0033:0x7fd9a259de59 [ 1165.883337][T29073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.883353][T29073] RSP: 002b:00007fd9a07f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1165.883378][T29073] RAX: ffffffffffffffda RBX: 00007fd9a2825fa0 RCX: 00007fd9a259de59 [ 1165.883393][T29073] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1165.883407][T29073] RBP: 00007fd9a2633e6f R08: 0000000000000004 R09: 0000000000000000 [ 1165.883420][T29073] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1165.883434][T29073] R13: 00007fd9a2826038 R14: 00007fd9a2825fa0 R15: 00007ffdfd8e2ac8 [ 1165.883469][T29073] [ 1166.182714][T29080] netlink: 'syz.1.6187': attribute type 10 has an invalid length. [ 1166.218132][T29073] Mem-Info: [ 1166.238944][T29073] active_anon:11095 inactive_anon:0 isolated_anon:0 [ 1166.238944][T29073] active_file:0 inactive_file:43974 isolated_file:0 [ 1166.238944][T29073] unevictable:768 dirty:427 writeback:0 [ 1166.238944][T29073] slab_reclaimable:11421 slab_unreclaimable:165691 [ 1166.238944][T29073] mapped:31682 shmem:1419 pagetables:1346 [ 1166.238944][T29073] sec_pagetables:0 bounce:0 [ 1166.238944][T29073] kernel_misc_reclaimable:0 [ 1166.238944][T29073] free:1239069 free_pcp:11244 free_cma:0 [ 1166.405581][T29073] Node 0 active_anon:44280kB inactive_anon:0kB active_file:0kB inactive_file:175688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122728kB dirty:1708kB writeback:0kB shmem:4140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15372kB pagetables:5244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1166.440277][T29073] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1166.523916][T29073] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1166.577639][T29073] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 1166.593808][T29073] Node 0 DMA32 free:996920kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44280kB inactive_anon:0kB active_file:0kB inactive_file:175688kB unevictable:1536kB writepending:1608kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:48072kB local_pcp:25696kB free_cma:0kB [ 1166.634642][T29073] lowmem_reserve[]: 0 0 0 0 0 [ 1166.644723][T29073] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1166.691544][T29073] lowmem_reserve[]: 0 0 0 0 0 [ 1166.707894][T29073] Node 1 Normal free:3941712kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1166.742556][T29073] lowmem_reserve[]: 0 0 0 0 0 [ 1166.749273][T29073] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1166.803495][T29073] Node 0 DMA32: 1440*4kB (UME) 994*8kB (UME) 1027*16kB (UME) 254*32kB (UME) 121*64kB (UME) 49*128kB (UME) 30*256kB (UME) 10*512kB (ME) 12*1024kB (UM) 8*2048kB (UM) 221*4096kB (UM) = 998976kB [ 1166.842399][T29073] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1166.855500][T29073] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 4*16kB (UM) 10*32kB (UM) 9*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941712kB [ 1166.876554][T29073] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1166.903745][T29073] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1166.924988][T29073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1166.936377][T29073] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1166.947456][T29073] 45389 total pagecache pages [ 1166.979480][T29073] 0 pages in swap cache [ 1166.996053][T29073] Free swap = 124996kB [ 1167.003379][T29073] Total swap = 124996kB [ 1167.013950][T29073] 2097051 pages RAM [ 1167.022204][T29073] 0 pages HighMem/MovableOnly [ 1167.034650][T29073] 427419 pages reserved [ 1167.042401][T29073] 0 pages cma reserved [ 1167.086293][T29093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6190'. [ 1167.377699][T29097] netlink: 'syz.1.6192': attribute type 10 has an invalid length. [ 1167.512678][T29095] block nbd0: not configured, cannot reconfigure [ 1167.621734][T29100] netlink: 'syz.2.6193': attribute type 29 has an invalid length. [ 1167.635768][T29104] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6195'. [ 1167.673881][T29100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6193'. [ 1167.775645][T29100] hsr0: entered promiscuous mode [ 1167.970487][T29114] netlink: 'syz.3.6196': attribute type 4 has an invalid length. [ 1168.047824][T29098] hsr0: left promiscuous mode [ 1168.155644][T29127] netlink: 'syz.1.6199': attribute type 2 has an invalid length. [ 1168.200358][T29127] netlink: 'syz.1.6199': attribute type 2 has an invalid length. [ 1168.237137][T29127] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.6199'. [ 1168.309786][T29127] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1168.670006][T29131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6199'. [ 1168.768006][T29127] xt_CT: No such helper "netbios-ns" [ 1168.811992][T29139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6200'. [ 1168.875667][T29141] siw: device registration error -23 [ 1168.895799][T29141] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6201'. [ 1169.130546][T29150] TCP: TCP_TX_DELAY enabled [ 1169.184079][T29147] netlink: 'syz.4.6202': attribute type 1 has an invalid length. [ 1169.218925][T29147] netlink: 'syz.4.6202': attribute type 2 has an invalid length. [ 1169.254902][T29150] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6202'. [ 1169.715341][T29157] syzkaller0 speed is unknown, defaulting to 1000 [ 1170.824610][T29166] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6205'. [ 1171.112773][T29159] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6204'. [ 1171.158090][T29172] xt_hashlimit: max too large, truncated to 1048576 [ 1171.196275][T29172] xt_hashlimit: overflow, try lower: 2/0 [ 1171.250017][T29172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6207'. [ 1171.606251][T29187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1171.908540][T29194] x_tables: unsorted entry at hook 2 [ 1172.041378][T29194] xt_hashlimit: size too large, truncated to 1048576 [ 1172.112563][T29185] syzkaller0: entered promiscuous mode [ 1172.159750][T29185] syzkaller0: entered allmulticast mode [ 1172.741768][T29217] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6211'. [ 1177.627674][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1177.904632][T29253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6218'. [ 1178.814444][T29276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6220'. [ 1178.856460][T29273] netlink: 'syz.2.6221': attribute type 1 has an invalid length. [ 1178.868913][T29272] syzkaller0 speed is unknown, defaulting to 1000 [ 1179.041122][T29273] bond22: (slave gretap2): making interface the new active one [ 1179.057008][T29273] bond22: (slave gretap2): Enslaving as an active interface with an up link [ 1179.274336][T29291] netlink: 'syz.3.6225': attribute type 32 has an invalid length. [ 1179.352870][T29292] nbd: nbd1 already in use [ 1179.385934][T29292] block nbd1: NBD_DISCONNECT [ 1179.439184][T29295] netlink: 'syz.0.6226': attribute type 1 has an invalid length. [ 1179.455613][T29292] block nbd1: Send disconnect failed -104 [ 1179.483702][T29292] block nbd1: shutting down sockets [ 1180.052152][T29305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6227'. [ 1180.063950][T29305] nbd: must specify a size in bytes for the device [ 1181.156275][T29318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6231'. [ 1181.192690][T29318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6231'. [ 1181.266797][T29317] RDS: rds_bind could not find a transport for ::fcff:ffff:8000:0:20:0, load rds_tcp or rds_rdma? [ 1182.060108][T29330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6233'. [ 1182.145465][T29331] xt_hashlimit: size too large, truncated to 1048576 [ 1182.154388][T29328] xt_hashlimit: size too large, truncated to 1048576 [ 1182.218015][T29336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6232'. [ 1182.268035][T29333] syzkaller0 speed is unknown, defaulting to 1000 [ 1182.454747][T29331] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1184.194219][T29361] netlink: 'syz.4.6238': attribute type 1 has an invalid length. [ 1184.257196][T29361] netlink: 'syz.4.6238': attribute type 2 has an invalid length. [ 1184.442087][T29355] syzkaller0 speed is unknown, defaulting to 1000 [ 1184.838615][T29373] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1185.169913][T29369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6240'. [ 1185.986720][T29383] bond2: left allmulticast mode [ 1186.010116][T29383] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6242'. [ 1186.033181][T29360] tipc: Failed to remove unknown binding: 66,0,0/1109264428:1607937771/1607937773 [ 1186.054906][T29360] tipc: Failed to remove unknown binding: 66,0,0/1109264428:1607937771/1607937772 [ 1186.121434][T29360] tipc: Failed to remove unknown binding: 66,0,0/1109264428:1607937771/1607937773 [ 1186.141098][T29360] tipc: Failed to remove unknown binding: 66,0,0/1109264428:1607937771/1607937772 [ 1186.269289][T29389] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6245'. [ 1186.685940][T29392] netlink: 'syz.3.6245': attribute type 3 has an invalid length. [ 1187.320387][T29404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6247'. [ 1187.914880][T29402] syzkaller0 speed is unknown, defaulting to 1000 [ 1188.691239][T29421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6251'. [ 1189.225959][T29421] ip6gre2: entered promiscuous mode [ 1189.263296][T29421] ip6gre2: entered allmulticast mode [ 1189.352029][ T30] audit: type=1800 audit(1782881472.163:11): pid=29405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6248" name="memory.events" dev="tmpfs" ino=6286 res=0 errno=0 [ 1190.409736][T29446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6254'. [ 1190.563526][T29432] syzkaller0: entered promiscuous mode [ 1190.622024][T29432] syzkaller0: entered allmulticast mode [ 1192.439217][T29458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6256'. [ 1192.578327][T29458] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6256'. [ 1196.878637][T29453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1199.460894][T29505] warn_alloc: 1 callbacks suppressed [ 1199.460959][T29505] syz.4.6262: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1199.534907][T29505] CPU: 0 UID: 0 PID: 29505 Comm: syz.4.6262 Not tainted syzkaller #0 PREEMPT(full) [ 1199.534941][T29505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1199.534954][T29505] Call Trace: [ 1199.534963][T29505] [ 1199.534972][T29505] dump_stack_lvl+0xe8/0x150 [ 1199.535007][T29505] warn_alloc+0x24c/0x270 [ 1199.535041][T29505] ? stack_depot_save_flags+0x33/0x800 [ 1199.535075][T29505] ? __pfx_warn_alloc+0x10/0x10 [ 1199.535107][T29505] ? kasan_save_track+0x3e/0x80 [ 1199.535127][T29505] ? __kasan_kmalloc+0x93/0xb0 [ 1199.535149][T29505] ? xsk_setsockopt+0x52a/0x960 [ 1199.535177][T29505] ? do_sock_setsockopt+0x17c/0x1b0 [ 1199.535197][T29505] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1199.535217][T29505] ? do_syscall_64+0x174/0x580 [ 1199.535235][T29505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.535268][T29505] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1199.535332][T29505] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1199.535369][T29505] ? __kasan_kmalloc+0x93/0xb0 [ 1199.535391][T29505] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1199.535425][T29505] ? __kmalloc_cache_noprof+0x150/0x660 [ 1199.535460][T29505] vmalloc_user_noprof+0xad/0xe0 [ 1199.535501][T29505] ? xskq_create+0xbf/0x170 [ 1199.535531][T29505] xskq_create+0xbf/0x170 [ 1199.535564][T29505] xsk_init_queue+0x8a/0xe0 [ 1199.535596][T29505] xsk_setsockopt+0x52a/0x960 [ 1199.535623][T29505] ? __fget_files+0x2a/0x420 [ 1199.535647][T29505] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1199.535675][T29505] ? __pfx_aa_sk_perm+0x10/0x10 [ 1199.535703][T29505] ? aa_sock_opt_perm+0xff/0x1a0 [ 1199.535733][T29505] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1199.535760][T29505] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1199.535791][T29505] do_sock_setsockopt+0x17c/0x1b0 [ 1199.535819][T29505] __x64_sys_setsockopt+0x13d/0x1b0 [ 1199.535844][T29505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.535866][T29505] do_syscall_64+0x174/0x580 [ 1199.535888][T29505] ? clear_bhb_loop+0x40/0x90 [ 1199.535914][T29505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.535935][T29505] RIP: 0033:0x7ff178b9de59 [ 1199.535957][T29505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1199.535974][T29505] RSP: 002b:00007ff1799b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1199.535998][T29505] RAX: ffffffffffffffda RBX: 00007ff178e25fa0 RCX: 00007ff178b9de59 [ 1199.536013][T29505] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1199.536026][T29505] RBP: 00007ff178c33e6f R08: 0000000000000004 R09: 0000000000000000 [ 1199.536039][T29505] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1199.536053][T29505] R13: 00007ff178e26038 R14: 00007ff178e25fa0 R15: 00007ffd3c7404d8 [ 1199.536089][T29505] [ 1199.536463][T29505] Mem-Info: [ 1199.940007][T29506] netlink: 'syz.4.6262': attribute type 10 has an invalid length. [ 1200.019317][T29505] active_anon:9733 inactive_anon:0 isolated_anon:0 [ 1200.019317][T29505] active_file:0 inactive_file:43986 isolated_file:0 [ 1200.019317][T29505] unevictable:768 dirty:423 writeback:0 [ 1200.019317][T29505] slab_reclaimable:11423 slab_unreclaimable:166616 [ 1200.019317][T29505] mapped:30637 shmem:1438 pagetables:1275 [ 1200.019317][T29505] sec_pagetables:0 bounce:0 [ 1200.019317][T29505] kernel_misc_reclaimable:0 [ 1200.019317][T29505] free:1244643 free_pcp:9498 free_cma:0 [ 1200.024529][T29506] netlink: 'syz.4.6262': attribute type 10 has an invalid length. [ 1200.101660][T29505] Node 0 active_anon:39032kB inactive_anon:0kB active_file:0kB inactive_file:175736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122548kB dirty:1692kB writeback:0kB shmem:4216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15608kB pagetables:5060kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1200.160586][T29515] netlink: 'syz.2.6263': attribute type 3 has an invalid length. [ 1200.174836][T29505] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1200.243426][T29516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6265'. [ 1200.260554][T29515] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6263'. [ 1200.368175][T29505] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1200.434404][T29505] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 1200.459661][T29505] Node 0 DMA32 free:1021532kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39052kB inactive_anon:0kB active_file:0kB inactive_file:175744kB unevictable:1536kB writepending:1748kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:37460kB local_pcp:17604kB free_cma:0kB [ 1200.501781][T29505] lowmem_reserve[]: 0 0 0 0 0 [ 1200.607712][T29505] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1200.729446][T29505] lowmem_reserve[]: 0 0 0 0 0 [ 1200.752520][T29505] Node 1 Normal free:3941712kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1200.856130][T29505] lowmem_reserve[]: 0 0 0 0 0 [ 1200.879137][T29505] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1200.955883][T29505] Node 0 DMA32: 3147*4kB (UM) 658*8kB (UM) 718*16kB (UME) 508*32kB (UME) 189*64kB (UME) 60*128kB (UME) 31*256kB (UME) 12*512kB (UME) 12*1024kB (M) 6*2048kB (M) 224*4096kB (UM) = 1021532kB [ 1201.010667][T29505] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1201.025187][T29505] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 4*16kB (UM) 10*32kB (UM) 9*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941712kB [ 1201.059498][T29505] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1201.078633][T29505] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1201.091585][T29505] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1201.110426][T29505] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1201.146969][T29505] 45436 total pagecache pages [ 1201.161212][T29505] 0 pages in swap cache [ 1201.177729][T29505] Free swap = 124996kB [ 1201.196145][T29505] Total swap = 124996kB [ 1201.211508][T29530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6267'. [ 1201.223082][T29505] 2097051 pages RAM [ 1201.226958][T29505] 0 pages HighMem/MovableOnly [ 1201.235765][T29505] 427419 pages reserved [ 1201.241901][T29505] 0 pages cma reserved [ 1201.243758][T29537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6268'. [ 1201.354288][T29526] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6266'. [ 1202.557922][T29561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6270'. [ 1204.464527][T29589] can: request_module (can-proto-5) failed. [ 1204.604782][T29588] syzkaller0 speed is unknown, defaulting to 1000 [ 1207.201583][T29606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6279'. [ 1208.051681][T29615] syzkaller0 speed is unknown, defaulting to 1000 [ 1208.602463][T29628] netlink: 'syz.0.6285': attribute type 10 has an invalid length. [ 1208.640270][T29624] netlink: 'syz.4.6284': attribute type 10 has an invalid length. [ 1208.745492][T29624] netlink: 'syz.4.6284': attribute type 10 has an invalid length. [ 1208.880836][T29631] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6287'. [ 1210.177905][T29639] syzkaller0: entered promiscuous mode [ 1210.186674][T29639] syzkaller0: entered allmulticast mode [ 1210.368516][T29649] syzkaller0 speed is unknown, defaulting to 1000 [ 1210.431481][T29645] [ 1210.433881][T29645] ====================================================== [ 1210.441048][T29645] WARNING: possible circular locking dependency detected [ 1210.448094][T29645] syzkaller #0 Not tainted [ 1210.452521][T29645] ------------------------------------------------------ [ 1210.459540][T29645] syz.4.6292/29645 is trying to acquire lock: [ 1210.465609][T29645] ffff8880554d6798 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 1210.474546][T29645] [ 1210.474546][T29645] but task is already holding lock: [ 1210.481915][T29645] ffff88802a0f46b8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1210.491431][T29645] [ 1210.491431][T29645] which lock already depends on the new lock. [ 1210.491431][T29645] [ 1210.501838][T29645] [ 1210.501838][T29645] the existing dependency chain (in reverse order) is: [ 1210.510876][T29645] [ 1210.510876][T29645] -> #7 (&q->elevator_lock){+.+.}-{4:4}: [ 1210.518709][T29645] __mutex_lock+0x19d/0x1550 [ 1210.523876][T29645] elevator_change+0x1af/0x480 [ 1210.529180][T29645] elevator_set_none+0xb5/0x140 [ 1210.534575][T29645] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1210.540963][T29645] nbd_start_device+0x189/0xb30 [ 1210.546415][T29645] nbd_genl_connect+0x1597/0x1c10 [ 1210.551968][T29645] genl_family_rcv_msg_doit+0x233/0x340 [ 1210.558115][T29645] genl_rcv_msg+0x614/0x7a0 [ 1210.563155][T29645] netlink_rcv_skb+0x226/0x4a0 [ 1210.568448][T29645] genl_rcv+0x28/0x40 [ 1210.572969][T29645] netlink_unicast+0x7bb/0x940 [ 1210.578265][T29645] netlink_sendmsg+0x813/0xb40 [ 1210.583570][T29645] sock_sendmsg_nosec+0x13a/0x180 [ 1210.589173][T29645] ____sys_sendmsg+0x54e/0x850 [ 1210.594471][T29645] ___sys_sendmsg+0x2a5/0x360 [ 1210.599683][T29645] __x64_sys_sendmsg+0x1b1/0x290 [ 1210.605151][T29645] do_syscall_64+0x174/0x580 [ 1210.610269][T29645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.616690][T29645] [ 1210.616690][T29645] -> #6 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1210.625317][T29645] blk_alloc_queue+0x544/0x690 [ 1210.630631][T29645] __blk_mq_alloc_disk+0x194/0x390 [ 1210.636302][T29645] nbd_dev_add+0x494/0xb60 [ 1210.641259][T29645] nbd_init+0x15f/0x1e0 [ 1210.646053][T29645] do_one_initcall+0x250/0x870 [ 1210.651351][T29645] do_initcall_level+0x10a/0x1a0 [ 1210.656863][T29645] do_initcalls+0x59/0xa0 [ 1210.661808][T29645] kernel_init_freeable+0x29d/0x3e0 [ 1210.667546][T29645] kernel_init+0x1d/0x1d0 [ 1210.672464][T29645] ret_from_fork+0x514/0xb70 [ 1210.677606][T29645] ret_from_fork_asm+0x1a/0x30 [ 1210.682903][T29645] [ 1210.682903][T29645] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 1210.690141][T29645] fs_reclaim_acquire+0x71/0x100 [ 1210.695612][T29645] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 1210.701952][T29645] __alloc_skb+0x1d7/0x7a0 [ 1210.706941][T29645] __ip6_append_data+0x2ec4/0x40c0 [ 1210.712644][T29645] ip6_append_data+0x108/0x270 [ 1210.717960][T29645] rawv6_sendmsg+0x1298/0x18c0 [ 1210.723330][T29645] sock_sendmsg_nosec+0x10e/0x180 [ 1210.728896][T29645] ____sys_sendmsg+0x54e/0x850 [ 1210.734302][T29645] ___sys_sendmsg+0x2a5/0x360 [ 1210.739508][T29645] __x64_sys_sendmsg+0x1b1/0x290 [ 1210.744973][T29645] do_syscall_64+0x174/0x580 [ 1210.750127][T29645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.756561][T29645] [ 1210.756561][T29645] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1210.764309][T29645] lock_sock_nested+0x41/0x100 [ 1210.769610][T29645] tls_sw_sendmsg+0x161/0x2860 [ 1210.774979][T29645] sock_sendmsg_nosec+0x90/0x180 [ 1210.780452][T29645] __sys_sendto+0x408/0x5a0 [ 1210.785482][T29645] __x64_sys_sendto+0xde/0x100 [ 1210.790777][T29645] do_syscall_64+0x174/0x580 [ 1210.795894][T29645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.802334][T29645] [ 1210.802334][T29645] -> #3 (&ctx->tx_lock){+.+.}-{4:4}: [ 1210.809842][T29645] __mutex_lock+0x19d/0x1550 [ 1210.814978][T29645] tls_sw_sendmsg+0x13c/0x2860 [ 1210.820283][T29645] sock_sendmsg_nosec+0x90/0x180 [ 1210.825761][T29645] sock_sendmsg+0x1ca/0x2d0 [ 1210.830799][T29645] __sock_xmit+0x245/0x4f0 [ 1210.835745][T29645] nbd_disconnect+0x3ad/0x560 [ 1210.840994][T29645] nbd_disconnect_and_put+0x32/0x280 [ 1210.846857][T29645] nbd_genl_disconnect+0x4af/0x590 [ 1210.852502][T29645] genl_family_rcv_msg_doit+0x233/0x340 [ 1210.858587][T29645] genl_rcv_msg+0x614/0x7a0 [ 1210.863623][T29645] netlink_rcv_skb+0x226/0x4a0 [ 1210.868920][T29645] genl_rcv+0x28/0x40 [ 1210.873442][T29645] netlink_unicast+0x7bb/0x940 [ 1210.878735][T29645] netlink_sendmsg+0x813/0xb40 [ 1210.884037][T29645] sock_sendmsg_nosec+0x13a/0x180 [ 1210.889605][T29645] ____sys_sendmsg+0x54e/0x850 [ 1210.894902][T29645] ___sys_sendmsg+0x2a5/0x360 [ 1210.900109][T29645] __x64_sys_sendmsg+0x1b1/0x290 [ 1210.905574][T29645] do_syscall_64+0x174/0x580 [ 1210.910693][T29645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.917116][T29645] [ 1210.917116][T29645] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 1210.924860][T29645] __mutex_lock+0x19d/0x1550 [ 1210.929979][T29645] nbd_queue_rq+0x373/0x1150 [ 1210.935107][T29645] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1210.941245][T29645] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1210.948156][T29645] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1210.954669][T29645] blk_mq_run_work_fn+0x16c/0x300 [ 1210.960229][T29645] process_scheduled_works+0xa8e/0x14e0 [ 1210.966332][T29645] worker_thread+0xa47/0xfb0 [ 1210.971455][T29645] kthread+0x388/0x470 [ 1210.976088][T29645] ret_from_fork+0x514/0xb70 [ 1210.981213][T29645] ret_from_fork_asm+0x1a/0x30 [ 1210.986516][T29645] [ 1210.986516][T29645] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 1210.993743][T29645] __mutex_lock+0x19d/0x1550 [ 1210.998877][T29645] nbd_queue_rq+0xc1/0x1150 [ 1211.003942][T29645] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1211.010041][T29645] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1211.016906][T29645] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1211.023420][T29645] blk_mq_run_work_fn+0x16c/0x300 [ 1211.028975][T29645] process_scheduled_works+0xa8e/0x14e0 [ 1211.035060][T29645] worker_thread+0xa47/0xfb0 [ 1211.040183][T29645] kthread+0x388/0x470 [ 1211.044785][T29645] ret_from_fork+0x514/0xb70 [ 1211.049903][T29645] ret_from_fork_asm+0x1a/0x30 [ 1211.055200][T29645] [ 1211.055200][T29645] -> #0 (set->srcu){.+.+}-{0:0}: [ 1211.062335][T29645] __lock_acquire+0x1520/0x2cf0 [ 1211.067744][T29645] lock_sync+0x9d/0x120 [ 1211.072428][T29645] __synchronize_srcu+0xc9/0x2f0 [ 1211.077893][T29645] elevator_switch+0x1e8/0x7b0 [ 1211.083193][T29645] elevator_change+0x2fa/0x480 [ 1211.088496][T29645] elevator_set_default+0x375/0x440 [ 1211.094230][T29645] blk_register_queue+0x3f3/0x4e0 [ 1211.099842][T29645] __add_disk+0x6cb/0xe30 [ 1211.104701][T29645] add_disk_fwnode+0xfb/0x4b0 [ 1211.109917][T29645] nbd_dev_add+0x733/0xb60 [ 1211.114861][T29645] nbd_genl_connect+0x992/0x1c10 [ 1211.120332][T29645] genl_family_rcv_msg_doit+0x233/0x340 [ 1211.126428][T29645] genl_rcv_msg+0x614/0x7a0 [ 1211.131468][T29645] netlink_rcv_skb+0x226/0x4a0 [ 1211.136760][T29645] genl_rcv+0x28/0x40 [ 1211.141290][T29645] netlink_unicast+0x7bb/0x940 [ 1211.146612][T29645] netlink_sendmsg+0x813/0xb40 [ 1211.151926][T29645] sock_sendmsg_nosec+0x13a/0x180 [ 1211.157490][T29645] ____sys_sendmsg+0x54e/0x850 [ 1211.162788][T29645] ___sys_sendmsg+0x2a5/0x360 [ 1211.168000][T29645] __x64_sys_sendmsg+0x1b1/0x290 [ 1211.173469][T29645] do_syscall_64+0x174/0x580 [ 1211.178585][T29645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.185032][T29645] [ 1211.185032][T29645] other info that might help us debug this: [ 1211.185032][T29645] [ 1211.195267][T29645] Chain exists of: [ 1211.195267][T29645] set->srcu --> &q->q_usage_counter(io)#51 --> &q->elevator_lock [ 1211.195267][T29645] [ 1211.208935][T29645] Possible unsafe locking scenario: [ 1211.208935][T29645] [ 1211.216389][T29645] CPU0 CPU1 [ 1211.221755][T29645] ---- ---- [ 1211.227215][T29645] lock(&q->elevator_lock); [ 1211.231828][T29645] lock(&q->q_usage_counter(io)#51); [ 1211.239757][T29645] lock(&q->elevator_lock); [ 1211.246880][T29645] sync(set->srcu); [ 1211.250792][T29645] [ 1211.250792][T29645] *** DEADLOCK *** [ 1211.250792][T29645] [ 1211.258945][T29645] 6 locks held by syz.4.6292/29645: [ 1211.264150][T29645] #0: ffffffff8fe5b2a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1211.272355][T29645] #1: ffffffff8fe5b0e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1211.281345][T29645] #2: ffff8880517269c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x4b0 [ 1211.291750][T29645] #3: ffff88802a0f4740 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 1211.301629][T29645] #4: ffff88802a0f41c8 (&q->q_usage_counter(queue)#54){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 1211.312535][T29645] #5: ffff88802a0f46b8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1211.322478][T29645] [ 1211.322478][T29645] stack backtrace: [ 1211.328372][T29645] CPU: 0 UID: 0 PID: 29645 Comm: syz.4.6292 Not tainted syzkaller #0 PREEMPT(full) [ 1211.328393][T29645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1211.328405][T29645] Call Trace: [ 1211.328415][T29645] [ 1211.328423][T29645] dump_stack_lvl+0xe8/0x150 [ 1211.328446][T29645] print_circular_bug+0x2e1/0x300 [ 1211.328471][T29645] check_noncircular+0x12e/0x150 [ 1211.328495][T29645] __lock_acquire+0x1520/0x2cf0 [ 1211.328514][T29645] ? check_noncircular+0xda/0x150 [ 1211.328538][T29645] ? lockdep_unlock+0x5d/0xd0 [ 1211.328551][T29645] ? __lock_acquire+0x13e8/0x2cf0 [ 1211.328573][T29645] ? __synchronize_srcu+0xb5/0x2f0 [ 1211.328589][T29645] lock_sync+0x9d/0x120 [ 1211.328606][T29645] ? __synchronize_srcu+0xb5/0x2f0 [ 1211.328625][T29645] __synchronize_srcu+0xc9/0x2f0 [ 1211.328643][T29645] ? __pfx___synchronize_srcu+0x10/0x10 [ 1211.328666][T29645] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1211.328693][T29645] ? synchronize_srcu+0x20a/0x260 [ 1211.328710][T29645] elevator_switch+0x1e8/0x7b0 [ 1211.328736][T29645] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1211.328756][T29645] elevator_change+0x2fa/0x480 [ 1211.328781][T29645] ? do_raw_spin_unlock+0xf5/0x210 [ 1211.328806][T29645] elevator_set_default+0x375/0x440 [ 1211.328833][T29645] ? __pfx_elevator_set_default+0x10/0x10 [ 1211.328863][T29645] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 1211.328954][T29645] ? blk_crypto_sysfs_register+0x11c/0x170 [ 1211.329016][T29645] blk_register_queue+0x3f3/0x4e0 [ 1211.329038][T29645] __add_disk+0x6cb/0xe30 [ 1211.329062][T29645] add_disk_fwnode+0xfb/0x4b0 [ 1211.329084][T29645] nbd_dev_add+0x733/0xb60 [ 1211.329106][T29645] ? __pfx_nbd_dev_add+0x10/0x10 [ 1211.329134][T29645] ? bpf_lsm_capable+0x9/0x20 [ 1211.329151][T29645] ? security_capable+0x7e/0x2c0 [ 1211.329206][T29645] ? radix_tree_lookup+0x240/0x290 [ 1211.329274][T29645] nbd_genl_connect+0x992/0x1c10 [ 1211.329297][T29645] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1211.329317][T29645] ? rcu_is_watching+0x15/0xb0 [ 1211.329336][T29645] ? trace_kmalloc+0x2a/0xf0 [ 1211.329363][T29645] ? __kmalloc_noprof+0x396/0x720 [ 1211.329391][T29645] ? __nla_parse+0x40/0x60 [ 1211.329437][T29645] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1211.329464][T29645] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1211.329493][T29645] genl_family_rcv_msg_doit+0x233/0x340 [ 1211.329521][T29645] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1211.329550][T29645] ? __lock_acquire+0x683/0x2cf0 [ 1211.329570][T29645] genl_rcv_msg+0x614/0x7a0 [ 1211.329597][T29645] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1211.329621][T29645] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1211.329645][T29645] netlink_rcv_skb+0x226/0x4a0 [ 1211.329663][T29645] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1211.329687][T29645] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1211.329712][T29645] ? down_read+0x2be/0x330 [ 1211.329731][T29645] genl_rcv+0x28/0x40 [ 1211.329754][T29645] netlink_unicast+0x7bb/0x940 [ 1211.329775][T29645] netlink_sendmsg+0x813/0xb40 [ 1211.329797][T29645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1211.329819][T29645] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1211.329842][T29645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1211.329859][T29645] sock_sendmsg_nosec+0x13a/0x180 [ 1211.329891][T29645] ____sys_sendmsg+0x54e/0x850 [ 1211.329913][T29645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1211.329934][T29645] ? import_iovec+0x73/0xa0 [ 1211.329989][T29645] ___sys_sendmsg+0x2a5/0x360 [ 1211.330007][T29645] ? __lock_acquire+0x683/0x2cf0 [ 1211.330025][T29645] ? __pfx____sys_sendmsg+0x10/0x10 [ 1211.330046][T29645] ? futex_wake+0x51b/0x5f0 [ 1211.330087][T29645] ? lockdep_hardirqs_on+0x7a/0x110 [ 1211.330119][T29645] ? __x64_sys_sendmsg+0x196/0x290 [ 1211.330141][T29645] __x64_sys_sendmsg+0x1b1/0x290 [ 1211.330159][T29645] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1211.330184][T29645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.330203][T29645] do_syscall_64+0x174/0x580 [ 1211.330219][T29645] ? trace_irq_disable+0x3b/0x140 [ 1211.330235][T29645] ? clear_bhb_loop+0x40/0x90 [ 1211.330253][T29645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.330271][T29645] RIP: 0033:0x7ff178b9de59 [ 1211.330287][T29645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1211.330303][T29645] RSP: 002b:00007ff1799b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1211.330320][T29645] RAX: ffffffffffffffda RBX: 00007ff178e25fa0 RCX: 00007ff178b9de59 [ 1211.330335][T29645] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000010 [ 1211.330346][T29645] RBP: 00007ff178c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1211.330356][T29645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1211.330368][T29645] R13: 00007ff178e26038 R14: 00007ff178e25fa0 R15: 00007ffd3c7404d8 [ 1211.330387][T29645] [ 1212.019647][ T5633] block nbd4: Receive control failed (result -32) [ 1212.080049][T29645] nbd4: detected capacity change from 0 to 63 [ 1212.086494][T29656] block nbd4: NBD_DISCONNECT [ 1212.092936][ T10] block nbd4: Dead connection, failed to find a fallback [ 1212.100013][ T10] block nbd4: shutting down sockets [ 1212.100220][T29656] block nbd4: Send disconnect failed -32 [ 1212.105231][ T10] blk_print_req_error: 93 callbacks suppressed [ 1212.105247][ T10] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1212.105312][ T10] buffer_io_error: 138 callbacks suppressed [ 1212.105324][ T10] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1212.146566][ T10] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1212.155674][ T10] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1212.163429][ T10] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 1212.172538][ T10] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1212.192662][ T10] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1212.227561][ T8128] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1212.237821][ T8128] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1212.246997][ T8128] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1212.255880][ T8128] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1212.264257][ T8128] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1212.272425][T29664] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1212.281518][T29664] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1212.300136][T29664] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1212.310757][T29664] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1212.320230][ T8128] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1212.331438][ T8128] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1212.344487][ T8128] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1212.355127][ T8128] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1212.369331][T29462] ldm_validate_partition_table(): Disk read failed. [ 1212.380690][T29462] Dev nbd4: unable to read RDB block 0 [ 1212.390200][T29462] nbd4: unable to read partition table [ 1212.412606][T29462] ldm_validate_partition_table(): Disk read failed. [ 1212.427350][T29462] Dev nbd4: unable to read RDB block 0 [ 1212.438459][T29462] nbd4: unable to read partition table