last executing test programs: 4m54.140771962s ago: executing program 4 (id=1977): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x7000000}, 0x10) 4m54.035155715s ago: executing program 4 (id=1980): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0xb) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100, 0x2402}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd7}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x1}}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8}, 0x0) 4m53.809133416s ago: executing program 4 (id=1982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}]}]}, 0x78}}, 0x0) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000000)=0x3, 0x4) (async) r2 = socket$inet6(0xa, 0x3, 0x88) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/43, 0x2b, 0x0, &(0x7f0000000400)=""/6, 0x6}, &(0x7f0000000540)=0x40) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, r7, 0x4, r7}, 0x5) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x200000008}]}}]}, 0x40}}, 0x0) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e) (async) ioctl$PPPIOCGCHAN(r11, 0x80047437, &(0x7f0000000040)) (async) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r12, 0x40047438, &(0x7f0000000040)) (async) write$cgroup_type(r12, &(0x7f0000000180), 0x9) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="a77b15669ff1b0e87e98feffffd1000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r13, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r14}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b700000000b7080000020000571152f0d68a0007010000f8ffffffbfa400000000000007040000f0ff0100b70200"/92, @ANYRES32=r14, @ANYBLOB="0000000000000000b70300000800000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 4m53.348416756s ago: executing program 4 (id=1987): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x31, 0x0, 0x0) (async, rerun: 32) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000280), 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x2}}, 0x26) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000240)=0x2) (async) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 4m52.93520753s ago: executing program 4 (id=1992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000fedbdf251800000008000300", @ANYRES32=r3], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x32, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000400)="1c0000000700aaaaaaaaaa1101", 0xd) r6 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x2000a0c0}, 0x6584f2c77c205b5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="c39203100400000000008900000008000300", @ANYRES32=r8, @ANYBLOB="18001d0800bb000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7aa, 0x7f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}]}, 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x80801) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x1a4, r4, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xcd50, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="a64a623d7221"}, @NL80211_ATTR_KEYS={0xf8, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "3b3fabcbfa"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "339f49e097b2eb364ec8f4fa10"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_SEQ={0x10, 0x4, "29b13aae48746aad4ed9096f"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4ec8a36275c809174c9e8124e5"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_IE={0x28, 0x2a, [@ht={0x2d, 0x1a, {0x4000, 0x1, 0x3, 0x0, {0x100, 0x9, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x10000, 0x4}}, @mesh_id={0x72, 0x6}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbc99}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x17}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="50ff739f61a3"}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x20000841}, 0x4001004) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r11, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r10, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r10, 0xffffe000) 4m52.235373294s ago: executing program 4 (id=1998): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x133, &(0x7f0000000580)={@local, @local, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x3, 0x6, "bb7a4e", 0xf9, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, {[], {0x4e22, 0x4e22, 0xf9, 0x0, @opaque="24ebe114f6ff9df4140f23e2ad086a28ace6c099bec259e8e5f080d1c010f41f47c8d635763c513854126120383901cb1a944721cd27bd55e1025c025ae142fb077377a065d1fba82cd9d817eae33cb59002610b1e239a86aa11d1531f2a2e66315b2a7d5987debcf1f67c44db62356268c247f167e36beec9129f5147a87086c04f880c8ffe13a7743fe00200a3b493d5a7227fb45c46ecc3bb9e792868d39377ef2bed0779a281f3393c8ccc6f8c522542014cb75e344dd0d8b672e09b08ceb4b9f7be493bdbe2000000000000000000000021fe805a4c5783b7e0b68b05627399a05f704cc1456872217224fb874f8d"}}}}}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) 4m37.200976447s ago: executing program 32 (id=1998): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x133, &(0x7f0000000580)={@local, @local, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x3, 0x6, "bb7a4e", 0xf9, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, {[], {0x4e22, 0x4e22, 0xf9, 0x0, @opaque="24ebe114f6ff9df4140f23e2ad086a28ace6c099bec259e8e5f080d1c010f41f47c8d635763c513854126120383901cb1a944721cd27bd55e1025c025ae142fb077377a065d1fba82cd9d817eae33cb59002610b1e239a86aa11d1531f2a2e66315b2a7d5987debcf1f67c44db62356268c247f167e36beec9129f5147a87086c04f880c8ffe13a7743fe00200a3b493d5a7227fb45c46ecc3bb9e792868d39377ef2bed0779a281f3393c8ccc6f8c522542014cb75e344dd0d8b672e09b08ceb4b9f7be493bdbe2000000000000000000000021fe805a4c5783b7e0b68b05627399a05f704cc1456872217224fb874f8d"}}}}}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) 2m26.934342143s ago: executing program 2 (id=2992): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x6, 0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRESDEC, @ANYBLOB="00001000b70800000400e7ff7a8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000660000009500000000000000705d452dc742c1acfa07bbcd9de5688b3aa84d51c8"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', 0x0, 0x10}, 0x18) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150000000000aa00000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040)}, 0x4005) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xa7, 0x9, 0x1, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x7, 0x80, 0x1, 0x7}}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="00082da97000012a173e59ba8ad8"], 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000004) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)) syz_emit_ethernet(0x46, &(0x7f0000000880)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030090781200183f2500000000000000000100007f0000017f00000100186371ae9b1c0370c3ae4f3fa776d142680065d7f599c4d462ae4c7a7ad7897ee9a3f4d88cd76705ce186d94ce0c90928bf99fbde822510892a6c9eff8b417c39779021e64dd3f4ce4632b872b3bda06d8b79d4cde75d0f9b09ecc2238d0589b9a38de4b51ee1c08f2ec52ed5c223a7bc7c1cbb86e2f0bd12c6418821e773c828c93c142ecf8138de54f8d0db703abbf8a8f97c9ec5bd2cd348e19204e43f5c3e424c7405d792b401c390e6176da521a93cc99d3b359205c9a6ac309173357309722565ac57d32b4c8ffad"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x11d, 0x0, &(0x7f00000009c0)="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", 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$pppl2tp(0x18, 0x1, 0x1) socket(0xa, 0x3, 0x3a) 2m26.663072523s ago: executing program 2 (id=2994): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x6, @remote, 0x9}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1d, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2m26.469652049s ago: executing program 2 (id=2995): r0 = socket$inet(0x2, 0x80000, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0xfffffeb9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x2000c000) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000280)=0x200048, 0x100000071) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r5, &(0x7f00000003c0)={0x2c, 0x2, r7, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r5, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x8001, 0x3, 0x0, 0x0, 0x0, 0x9c2a}, 0x0, &(0x7f0000000200)={0x3ff, 0x4000000000002, 0x8000000000000, 0x9, 0x0, 0xfffffffffffffffe, 0x7, 0x9}, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) 2m25.891358818s ago: executing program 2 (id=3001): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700400000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r1], 0x20) 2m25.494085225s ago: executing program 2 (id=3004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newsa={0x15c, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87}, {@in=@broadcast, 0x0, 0x33}, @in=@private=0xa010101, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff}, {0x0, 0x1}, {0x81, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xac}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x4}}, @algo_auth={0x48, 0x1, {{'tgr128-generic\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000930000480080001000000"], 0xb0}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000400)=0x2, 0x4) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) (async, rerun: 32) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) ioctl$OCFS2_IOC_GROUP_ADD64(r2, 0x40186f03, &(0x7f0000000040)={0x46c4, 0x2, 0x3, 0xd980}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1417d1de, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pI4 \x00'}, 0x20) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000440)={0x0, r4, r2, 0xd, 0x3, '\x00', {0x0, 0x9, 0x10, 0x7, 0x2, 0x7fffffff, 0x1ff, 0x2, {0x5, 0x9}, {0x100000001, 0x8b}, {0x6, 0x401}, 0x4, 0xd, 0xa0, 0x4, 0x7ff, 0x5, 0x7, 0x4, 0x4, 0x1, '\x00', 0x2, 0x3, 0x7f, 0x2b7}}) 2m24.817863386s ago: executing program 2 (id=3005): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="00000000000000000000d938ecbf000000000000000000", @ANYRESOCT=0x0, @ANYRESDEC=r0], 0x48) r3 = socket(0x1, 0x1, 0x9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'syztnl1\x00', r1, 0x7886, 0x7800, 0x8, 0x2, {{0xf, 0x4, 0x2, 0x31, 0x3c, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xf7, 0x1, 0x6, [{@private=0xa010102, 0x4}]}, @end, @rr={0x7, 0x17, 0x16, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010100, @broadcast]}, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES8=r2, @ANYRESOCT, @ANYBLOB="08bd907f5e07afbe552506d5e325f09ea4da888a0c2bb663fcdd5ae438d9421265cc7145dc8fc626f8408a3a5ddfb99f9399cccb95d6b20bad3437bfbcbeb0e78f59aef42549fa9f9da479fad18e368c8500"/93, @ANYRES32, @ANYRES8], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140010002700019414576a00000000a51300"], 0x14}, 0x1, 0x0, 0x0, 0x4044908}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r5) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="8000000014000300020000000000000000000000000000001400010000000000000000000002"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[], 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x3e, 0x0, 0x1, 0xffffffff}, 0x28) writev(r6, &(0x7f0000000480)=[{&(0x7f00000003c0)}, {&(0x7f00000004c0)="4be6f2ea9dfa48a484c700825ef11448a50952ad318acb278c187f22b6f14ef26df957ae21daa8", 0x27}], 0x2) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x7ff, 0x8, 0x0, 0x3ff}, 0x42) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000180010002bbd7000fbdbdf2580a01402fe02fe0b00200000240016802000010000000000000002000000000000050c0000000300000000000000000008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x24004040}, 0x8804) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001200010d42fae3c1"], 0x24}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xfffffd35, &(0x7f00000003c0)}, 0xfffffffffffffd25) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2m8.855982786s ago: executing program 33 (id=3005): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="00000000000000000000d938ecbf000000000000000000", @ANYRESOCT=0x0, @ANYRESDEC=r0], 0x48) r3 = socket(0x1, 0x1, 0x9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'syztnl1\x00', r1, 0x7886, 0x7800, 0x8, 0x2, {{0xf, 0x4, 0x2, 0x31, 0x3c, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xf7, 0x1, 0x6, [{@private=0xa010102, 0x4}]}, @end, @rr={0x7, 0x17, 0x16, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010100, @broadcast]}, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="e4c44a73a256e278ac2d0830043725427119c58c7de6ea95721bd5f27551f658896bc446e52987c8ba08edf20331488eb8bdec7e5d6388419bc651f4b145db17b807b3c1f1825ff37c6fef6914ec0bdbc7080925c9d1a33eb0a444062bf3592c0717daac14c7442d14e121d54befd99faeceb27bbd945afb595240f637703db11e786433c1213a154d544c4d87641f5a241eed7f86c834203b178d74750e0048ac752e6d0f8af5b3e1a99942939c1ef4ccb45274d251a41f6b93e53db28c9f3efea15904aebb8bcb00b9689e87e67256a4e2b5cef0b6cd494fc667b94b49a1a576004052f832af25f08b4799eb2eb4fc5a123c48783c3e225a3a088871627bca036cb06bd8ba5dea9cfcffb6089ee08bb0cda5c1f27ae5cba88575997da33390703775b319154fbc26f967a07e44fe1ab399efa5e4e32f22289f1002735a4665605f05a6b9ed19cf9e80d9a5646857944b651dece8e6ced87a6c1a2e9071af5fa8655a327ed650e94ce603d5e3e496776642bc227e24cde8bcc191063fc10c106bf772cd406d54ed654e0ff3a95a26da6c8873f8bcdff60e6f8d420fc88a355fbf4eb97274abba4d8dae5c963205980d7463d82a4b6a6fa18264be7a36edc2d14ecdd59eacac93b68538042b194153c6363e2b93e4675a1e64cc85fe753a98208adba1728ca19d5ca3fdbb8d02d8ce732d9b139fcba0bb24180dde757a9b4c61f57050d0bd757016de09dbe4e6a56c39477e14130655c3ecfb76d90d6a88fce83b6e23cac8c75d0a70830d85d3750509810ebd9107a1bb4a5bc49ee19a4fd3340ee04dee29a3142e9a830903f4119b7e7f1b2585885a5693f860bb7fc3001c3c5896d8bf43cb5f7b05839d1f65b5b420796df2d818686bc20422d87827d93c1fe22b88a14b05ec87f1aab394388850c5ce5875d030c9aef0b3b742c0398471dee12049647a1bd3737e5ff656fcd465fd68c974834418e96bf1d1b587898b31a0244e10edf290978383a33a0969108d719f0048923206a7ed09c52e3c9b57f3713e9a72edb41e7ca872b11a0c639494bc3e775b283ac1c1d9743072309b03217ae95c082329c1549dcdb14f7111998f181548e423216195dba9c4468d7186e36bdba082c2ce9220c4a5641560f4dcdea1caf03d14819511add1d73c59ce751b7c09c160b5c3b7c7acd5a35d890f4e4b2d474a28c62a68c56e68a30b7b666fdc9eea3087fd40e544f38ff817c31da38bcc09fe57cb39289608007b1d1bc298462458ef210bed672592bc6cc257bd25f3f0b9d1d16c857b28152702ad27ef7fedb025d3fe2fbd49994c708c5da7299018bd44ff0d324b49f44de0988d86c8ab340e62c3fbf25995013551f5a7986b1f0298e2e0708f11bf79544415aa7acb7620f86812ce890087f30d3b19b9d896c1315ffab1932eccab2dec35b4c1e39798f4540bf7eacfd3f50e4e88d0c7a435341095dec187548e9863d7018b2c865ed46bdde6ebe691cfb5181a13aeef60cec54c1aa90633662a29b085902a638a9b8cfd697d6c62cab51ff2b5aa8c643f319ce949171d602c557fdbdfbab318d8245cb0419d971ae63c9b7fa4784388f221d2a9231dff448e5303d140696805824c1a8bc73b2dc920939733078b0e00f090c8a2c733158028ada9b180565a4d5da6915a02d107c0fa1099a9c3983105a1398bfd6dcc4a59868a14dd92ad2b0c20a746cc71531cbe50fdabc4f9d17db7f23c7ccbad7c549b135bc55806572a6ece71a83fe5c46a82bc94fd476afef8aae2021b3cee51dee2fe53ae78a7c57ddaf35d08a0138043160e4aa01fab4b2c0bbdb7fd955d1d7f7a2fe7bc60001f3d58502f66d535e3eeae79e5251ce67b3c959596eb450bde2f7e199777a222e042ea8ab7c1378ab41bf3e885a7d22336ab37c61e30493be0d8959d8b76f866e51dbc00435317d2a520418aedaa1ca8910a242a72b475c58982bb3c48d1772868bed0fa78053d84c3a0c1132073c776a57ec9f95e2abc56b879414ab6a54405dec867ce65ac44ac8994ca43e074558723b4e45dabf1bea14dfaceeb62d6081266a4ac6b10152ae89d5348996ccf076c8ac5ef2ac43313d66fabe8f87994b4c575ee997a8b83a1249c9d60887b805714721a812bf46598f9b695d70837bc126f6cab1f9961f0cc61c2500e9f48ecfbe9342225048475c5e4128d7662573eeeff44d8b3d368eb0bf7201872d4c4e9f2b2f5c6d6c47032ffb716547dc0395e7a60fb25b6600bb7e4ae1dacb87ea18b85de3b9a1a804ce821313b474ac094b29308d7f78ece5e13845533cba868929ac58137acc1f13454e8f5942c75cf2351811e34bd9082fedd925bb170138bf260eb8bd7571e9fbfc41fe78af606ec3cd0f858a1080865865c9439c31a43f769a85aef914308996a4ef55ccaeac020c2bb53103a3c8d08b95b325c3968e00a86e17a8055ee96cd3db93847e7e1e19b9d3d0f70d590473b4450fa4e0438cc7b90ad9c3fd375de2a422e4ad5391dc60d322d00ae6ebf7727bc4e686900778fe7a1e180aba0724d59255f5d98ac1cd798b4257fa8154043cc4a51e71901d1de740d1c38bf7dfccbef503499874cbb2ccd991def49dc6395486db017c322981012bd81c97959a508b97b48a6368d00ab0c2c19324a5c168d7788edfca17551559460b35dde34e3b445ccf470a1d4adfb9025f39ae4be90fdf1580989cce443a65af53f37fc5ac952276e44e8708a2f89ab029483cccdc1e2d661f64fd3037ddf8c930ff32f04d8ce2795d097751258b8cf6d620e400c4e434bec82209a7c0b75aecadf64e41a5e66ffbd2e21bcdef5a428dbfd0ae33f26e90ed27b3dfbe7a9f4020f65b4b5ef9e8aa66600a6b2c845838220d5b27a083a4344d686dad4690361a68187b42463531c23197befb563ce62f2bdaaf4e64f4cdd5d6e4f47fbecf5b54367bb920a6d046a07005d2856c5e9ca5809c1e2adad17765772f2583525ac44a74ef13161645e8f89ad06aace58f9a048cfd0f03525783f69a947a968869ba0f3f92703666d811a12ed4ed10f2febb3add34fb3a2b7e7b61d31d7ec90ba4682bf7918a590ab95546e2357c19f216203e0b86fa0332211295ede53f3061d43ad2a368773bf66e8422fbf82278a1b4d3e733e2717cb2792a72d3b1925cb40bac14b6a33e346edce3f789fd578b4c6f1db98ff4cfd98a1abe165dc4f8ad22cf2809689c788e13a5ec6a8d3f162c8f2ee9531d207be55bdf8031102fa3a69cd0c3ded2a7ac444be10d4ae92cbe2a4bf29242361d598ef60f05bd57f4cd7291d44d8e8d3382b4ad5e5191b17a6972eddce905381772c679ab540af57fbac2c8f91645a05a501b5228c41b985bdc79252ebb976d54fa0a020db864bd71570aa45e7e1422a4f7b90a872d164c807df56855d34541978d018a7b04d6463d468d3e00d5fc1ca0b0e309e82d70752ca5f384ce6141bdc686282f340ddc11f3b1ae3383275c16181e9f9d92acaa5a684898006c84fd94469d2cfd5f460cb1cbb249ddc71e29e269b054caedbd87322abbbf9783b4ae63e0417a2d6ebbf988128a15cf86d4cd0d837485762f4d250a9c5c01402b59d822b0d9355a31d35279f22c56646d27a2841c637c22e8c2099e19a6f4dc186dcaa4f39bbd193025bc130b3655fb034d8ee03c6bab24ec7ef1804a108b61ec16db4e5de1b6b70bef4ec9755a27fd8d2d09fb8352d1b06255ba7b0fdae74721213852fb8200af066d017405f923095b4923bfe897303f33dfe9fc6c7cbd479a8da9eed1e36cbdc85cf40b41003cc4b3aa19c0fab823e1d12b74ec28b2b2dbcaa656883acb9bc4715d94af9ab0084e5908e620c0ec9c6e182ca8bc7c90a73ddd97b449151b70e72199474ec50ed0f1ca6bb490147d03f50ef074e19eeca53888f1fb6eed93ebd3365f90a4b0e3c7540fafbc3ffe495c3372a59e3ef43c8c3bffb4d0540786a6b688c52b1a39dcbdd58afe0d40a9eccfa3ee54cf4aac7ade1b38445b94f58915e54d6b95bb20665b00883d146dd337fa89fd37afb96a8682c518bcdd73a005e5b5e302ccc688e7435a89e58f77b6dc056c93767c7ddfa1d956d6d04a2a7768bea130a365ea2eb677c81af003e00f4fcde1ac51463e222045259b9d7f4109679d4f34f137eec9ef1e8185290add718680cb0f6a1e7e74b3fe09adc8e22143b121df35dc10e496eb7bbbf21056b0e8562dc4889ce5f08c03d53709f0763b2acaeeaa167cea1a03774505bbe1ca5940de16081447e5d7bcca7726d50fad5c1d15f77ef9e536a2382c1ab61e851e9c2fc0adc400b6c4bd4ab47885c5516d82c6167880414ec791f0a2701f534bcae862a7144953331f9352d1dd2a5a888253ddd6ea1ef9eb069b0ce64895296236c5455a4403a2d49dc066e00deec536a104bf5d555935f6bfc243805609a9d5ca50f8358c1503080d69228a376eb462184040fc36373fe5e06eaa3606367e8964569df38b97734a317f9123829025d5a4f77bbc58fe0768645164882b58632a8dbbacb49c79ce268171ff4540faa8606758cf283d9cba5e3383c89ca17b36a7b4657415618424f05720cf8e329ced3a634232e8f534219a00ebf9bf0d30703db05ed25b0a228a00795696b0bedf8355d09c4cbd9bee55184326d7f98f2ad0eed0980430f7c8aa7ed15f64faf7d55c751d4967bb852f1195665f7d5302d19eab823e6f527480bce9fb443297e04db70794e003e38e35d29a71d4a223d397861f18a6c0e1cbe90f6edca577a22ed19714c11469213d8a5333795ea43e441d9e71769f4e0b90d7fed435b3fecfbc45be7a29d1d79efc04da3e124735d05fb25cb1a2c22d0090149c0f309ce978414e8aca1e69efa3d8d8f318f551e5ec240acd3a33883f76365625b711ced7f75d3415409e3db1927a7f7c8afd0a5932afdae037d81e34c494d11326dc032591f3885b70d23bde32c6a2279ada75d747464d8ce11a728200caa18577c8331c3ed4a8ddff8ec9c66faa3f13b1ff3335a54244088e334222dd789b586386b7dac5f32ce3b300145936103da4bb63684ae0a6e9f5b335f59f95701dbc0785f253429a1cc214e6ad095e0c9b0da7040ecb879d9c3f7160e5be29eba28db8623e9f195aa8a7236b35bcc850c5de461104c182684d56a5b0e0e516f53e4127f0c4032cb4096f0c043ca5c69bd226c67626666eef1f9189629c78fbd84f47f9c1752912faba4aef058099072f9a0fa29a3d73220d6aa0b19f63c423b77bad90d96c41e3dae9316e4ef2d594cf7c5ce579555f3df0f719ef9196733db77d8789f41f949091543d0878190a6afbc4c6f39576492bd86211cfd7602f69ca39ec690a6b9959e76c1321e8962eeb0ed209e9c92ccb379747c35bab2b7e62e968659533ee88869feaa46fe6f27a607a22e98bf74f548c4139d4a8288439caba352dfbec22e68d7d841458f578de94c9a1a7cce37fa160830a4a7273b908037086ab76fd9acf8a6710f2001dbd934a1840bac0df4a282e342b9777cb6f76b4910b34afa585ffc957c4c263ff18ac6a3616d3a7877e1705fe52a4f13a639f2a5748cc220aa8be46bc9617366966800731bae9b9ce63a8fcba80c95385d66264f03f08dc4801efa1f3948f71d5f894f1be1abf16ff8d9a8601796aa80d8cfe766cce40829978250b83bf7133b179256f4281aba9d139ffe452fe05efdaa529aa8f87d3f7907efe8a6a633c3029b7140832cd42e1baf057cd64b4a656aa180c653134892bb8a124187bac8861996ccde8d265f352af8d2128518", @ANYRES8=r2, @ANYRESOCT, @ANYBLOB="08bd907f5e07afbe552506d5e325f09ea4da888a0c2bb663fcdd5ae438d9421265cc7145dc8fc626f8408a3a5ddfb99f9399cccb95d6b20bad3437bfbcbeb0e78f59aef42549fa9f9da479fad18e368c8500"/93, @ANYRES32, @ANYRES8], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140010002700019414576a00000000a51300"], 0x14}, 0x1, 0x0, 0x0, 0x4044908}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r5) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="8000000014000300020000000000000000000000000000001400010000000000000000000002"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[], 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x3e, 0x0, 0x1, 0xffffffff}, 0x28) writev(r6, &(0x7f0000000480)=[{&(0x7f00000003c0)}, {&(0x7f00000004c0)="4be6f2ea9dfa48a484c700825ef11448a50952ad318acb278c187f22b6f14ef26df957ae21daa8", 0x27}], 0x2) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x7ff, 0x8, 0x0, 0x3ff}, 0x42) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000180010002bbd7000fbdbdf2580a01402fe02fe0b00200000240016802000010000000000000002000000000000050c0000000300000000000000000008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x24004040}, 0x8804) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001200010d42fae3c1"], 0x24}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xfffffd35, &(0x7f00000003c0)}, 0xfffffffffffffd25) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 47.227045723s ago: executing program 6 (id=3624): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000008000000bca30000000000002403000020feffff620af0fff8ffff"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f00000002c0), 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x5, 0x0, 0x1, r4}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000000100112233445586dd6000000000003b4020010db8000000000000000000000001ff0e"], 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f0000000400)="feee24b22680bb56d0513e09abd0391542bcf607e52866") r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r5, 0x0, 0x0) write(r5, 0x0, 0x0) close(0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000004e08000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$FS_IOC_GETFSSYSFSPATH(r6, 0x80811501, &(0x7f0000000300)={0x80}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x20, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffe0}, {0x2, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6c}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c63}, 0x4c840) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r8, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {0x0, 0xfff3}, {0x10, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4, 0x3}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r10, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/82, 0x52}], 0x1, 0x4, 0x6c8) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 46.903276323s ago: executing program 6 (id=3628): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x8}]}, {0x0, [0x0, 0x30, 0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x2c, 0x0, 0x8}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (fail_nth: 10) 46.642233551s ago: executing program 6 (id=3631): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000000000490000000e000100696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300062000800030035587f4c0002000000000000000000"], 0x64}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB='\b\x00\t'], 0x24}}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYBLOB="a801090039b4cbf2230b57d8fbd26acc6559a9c10e839aaa27187db9910847632c8253467bbfdab45da0833abad6dd787ce261ca885dc146c365a20d5d56545a29c8ff87acbbe2c968411022a0d808d50eb0dfcb89b1fc03940a5c509b0189c587cc934f9664c1a457769d24693564f14361c8234baf3aac1d550a2ec268891a50579dd3b261ca570a", @ANYRES16=r3, @ANYRES32=0x0], 0xa8}, 0x1, 0x0, 0x0, 0x44014}, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000001800018014000200776c616e31000000000000000000000008000600000000000800070000deff"], 0x3c}}, 0x24008080) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0xfffffffc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0xfff8}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r9, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000025bd7000fcdbdf250700000005002f000100000008000600", @ANYRES32=r9, @ANYBLOB="0000000006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c080) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="0600000005ffffff000900020073797a3200000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r12, 0x89f6, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x8, 0x7800, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x29, 0x0, @empty, @empty, {[@timestamp={0x44, 0x8, 0x84, 0x0, 0x8, [0x7fff]}]}}}}}) (async) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c1300001800010041bd7000fedbdf251d01050005000d008100000000fd807c8f0bebfa47a9f2e7814044aa4635283baae485dd0d0e144614e2d5bf701754c8addfe8b8be04f455b9f6ba9bd5"], 0x1c}}, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x1fec8000) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x1d, 0xffef, 0x7, 0x4, 0x100000001, 0x4, 0x3ff}, &(0x7f0000000040)={0x10000, 0xffffffff00000001, 0x3, 0x9, 0xffff, 0x6, 0x7, 0x7}, &(0x7f0000000100)={0x960, 0x0, 0x0, 0x1, 0xb428, 0x5, 0x9, 0x9}, &(0x7f0000000180)={r13, r14+10000000}, &(0x7f0000000240)={&(0x7f00000001c0)={[0x3]}, 0x8}) 46.550386393s ago: executing program 6 (id=3632): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000780)=[{0x10, 0x29, 0x43}], 0x10}}], 0x1, 0x4000000) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f00000023c0)=[{0x0}, {&(0x7f0000002340)=""/68, 0x44}], 0x2}, 0x8}], 0x1, 0x60, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000003c0)={'broute\x00', 0x0, 0x4, 0x7a, [0x401, 0xfffffffffffff046, 0xfe39, 0xffffffff, 0x9fab, 0x5], 0x3, &(0x7f0000000300)=[{}, {}, {}], &(0x7f0000000340)=""/122}, &(0x7f0000000440)=0x78) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @random="b0af59cbce10", @mcast1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x15}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x16}, {0xfffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0xc}]}}, @common=@hl={{0x28}, {0x0, 0xfc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @mcast1, [0x0, 0xff000000, 0xffff00, 0xffffff00], [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], 'bridge_slave_1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x3a, 0xb, 0x1, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x8, 0xfdb2) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @empty, 0x23}, 0x1c) socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x23, 0x80805, 0x0) listen(r5, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYRES16=r7, @ANYRES32=r7, @ANYBLOB="05000a0001000000cb7297f58e93d0030cf93b62b98455e1c862d0be82d1ed1b17861492a4a313c5b952100e36be335e33d9860690bf6854947ec56b690568dcd302dcfa9a6d83cee404f6722f8c3c5b4117584f065cdafdcd2a0f9cabfeb21b94f8aac3d804cfed23420d043477ef0bd946f8c43233af390f359654c6eac0d2cacb87e1efd94bd82d4b9136032597fb8933ab26779077fe5b2120dc69ceabdc5bc40b89587441b82b9caebdc1951c25fc9fb205b9bdc0e13243bd754e37907e3a5404"], 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 45.951548807s ago: executing program 6 (id=3634): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 45.742212262s ago: executing program 6 (id=3638): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d300900"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000000}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bb", @ANYRES8=r7], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map, 0xffffffffffffffff, 0x3d}, 0x20) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "bb7a4e", 0x4d, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {0x4e22, 0x4e22, 0x4d, 0x0, @opaque="64ebe114f6ff9df4140f23e2ade56a28ace6c0b8bec259e8e5f080d1c010f41f47c8d635763c513854126120383901cb1a9402e67ce9cafd6b9ed54721cd27bd55e1025c02"}}}}}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0xc4, "218fd0c175cd6ccf346d0d8255c028e21c7a2b8c2afdf643f22c8131768756ed06a77a28d44e6fe58f9fea79553543aedbfedb170e00ce618b78ea4d636816eb4c8a2173858767522f4113784753765e83f5eb8f73ceb1203b8c1906ef8191f872b6601cccd7fabf3d0036662f0c74a5a0ff00d27f46b6c94023d77b7272119ba993d4380bcf2edbb683124327e73ba5b1653df92d4791629836d814ca67088461c68b61917aa610c8a65ab48dd66fd38606a3199c21e109e9cb5af7d0c8a72b704cf4bc"}, &(0x7f0000000440)=0xcc) setsockopt$inet_sctp_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000480)={r10, 0x4, 0xff, 0x951}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xb72}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r13 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r13, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10, 0x80800) 36.997223455s ago: executing program 1 (id=3717): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0b062dbd70000000000030000000c014ec4be258a4bc9197eb86987151469a95bfbf7fb314a9f5a2d8c8c861d440238a46b71346fd873d9192795c68129873afdf94ec8a3abedb4539d488f1f9c71383d84f982ed65d89a774a4e3433b9f67ca7e8d42b344b52fd69051a052403dc28f1daf"], 0x14}}, 0x20040004) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x40, 0x8000, 0xffffffff, 0x9, {{0xe, 0x4, 0x0, 0x3c, 0x38, 0x68, 0x0, 0xe, 0x29, 0x0, @broadcast, @rand_addr=0x64010101, {[@ssrr={0x89, 0x13, 0x3f, [@loopback, @rand_addr=0x64010101, @private=0xa010103, @dev={0xac, 0x14, 0x14, 0x37}]}, @cipso={0x86, 0xf, 0xffffffffffffffff, [{0x1, 0x9, "df32d6a743bfaf"}]}]}}}}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001180)={@map, 0xffffffffffffffff, 0x32, 0x8}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff3}, {}, {0xfff3, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x3100, 0x0, &(0x7f0000000140), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, 0x0) 36.404100883s ago: executing program 3 (id=3724): r0 = socket(0x10, 0x803, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x9) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$netlink(r2, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000001400)=ANY=[], 0x131c}, {0x0}], 0x2, 0x0, 0x0, 0x80}, 0x4040000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x18) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x7, 0x7, 0x5, 0x10001, {{0x7, 0x4, 0x1, 0x6, 0x1c, 0x66, 0x0, 0x6, 0x4, 0x0, @multicast1, @private=0xa010101, {[@end, @generic={0x82, 0x6, "60ed8047"}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0xfffffe01, 0x10, 0x437, 0x800000, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x504c3, 0x26492}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) 36.298776152s ago: executing program 1 (id=3725): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010800000000000000000300fffd140007800800df590000000005001500010000000500010006000000050005000a00000005000400000000000900020073797a3000000000150003006861730a3a69702c55"], 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1a, 0x2, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x2, 0x4, 0x3, 0x6, 0x6}, &(0x7f0000000480)=0x98) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x41) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000280)={r4, 0x5, 0xffff, 0x8}) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x29) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}}, 0x40000) 35.402490271s ago: executing program 3 (id=3728): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204", @ANYRES32], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e23, 0xdcf5, @empty, 0x9}}, 0x3, 0x6}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r6, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0xe, 0xf9}, &(0x7f0000000000)=0x9c) close(0x3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, 0x0, 0x40) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000540)={r1, &(0x7f0000000280)='\x00', 0xc041, &(0x7f00000002c0)={@_ha_fsid={[0x388c4, 0x4]}, {0x3, 0xb, 0x2c7}}, 0x81, &(0x7f00000003c0), &(0x7f0000000500)=0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0xcc, 0xc, 0x11010, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r8}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x7048, 0x73219}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x26, 0x100, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800001b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 4.063655555s ago: executing program 1 (id=3729): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766574000000cc15306121475e5373", @ANYRESOCT=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001f40)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, 0x0}}], 0x5, 0x8040) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) 4.062171691s ago: executing program 3 (id=3731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x80000000}, 0x1, 0x5, 0x9, 0xff, 0x12, 'syz1\x00', "83536fbebb759c421376cc71fc07dd45365540742570280cc97680299f52a2d3", "5d606f739128a0826de95fedb865085504ce24b573cf03e6bb5bcc31c9eff265", [{0x800, 0x7, {0x0, 0x8}}, {0x1, 0xd, {0x0, 0x2}}, {0x74, 0x4, {0x2, 0x10001}}, {0x20, 0x8000, {0x0, 0x4}}, {0x64a, 0x8, {0x2, 0x2}}, {0x9, 0x9, {0x2, 0xf2a8}}, {0x8000, 0x80, {0x2, 0x4c}}, {0x3, 0xe, {0x0, 0x8000}}, {0x7, 0x2, {0x2, 0x9}}, {0x4, 0x1, {0x3, 0x2}}, {0x38, 0x3, {0x0, 0x4}}, {0xd, 0x6, {0x1, 0x2a}}, {0x0, 0x2, {0x0, 0xb}}, {0x9, 0x50d, {0x0, 0x7}}, {0x8, 0x9, {0x2, 0x9}}, {0x9230, 0x3, {0x3, 0xe000000}}, {0x9, 0xa2bc, {0x3, 0x3}}, {0x1, 0x2, {0x1, 0x85}}, {0x4e, 0x2, {0x3, 0x6}}, {0x2, 0xf, {0x0, 0x5}}, {0x1, 0x4, {0x2}}, {0x6, 0x0, {0x2, 0x5}}, {0x5, 0x7, {0x2, 0x3}}, {0x7, 0x9, {0x2, 0x6}}, {0x2, 0x9, {0x0, 0x10000}}, {0x7, 0x5, {0x2, 0x1}}, {0xfa4, 0x3d, {0x0, 0xfad}}, {0x2, 0xb, {0x0, 0x7}}, {0x6, 0x9, {0x2, 0x9}}, {0x7, 0xff, {0x3, 0x7}}, {0x4, 0x7, {0x1, 0x81}}, {0x7, 0x40, {0x1}}, {0x4, 0x800, {0x2, 0x8}}, {0x8001, 0xe, {0x0, 0xffff}}, {0x6d, 0x5, {0x3, 0x3}}, {0x5bd5, 0x2, {0x1, 0x6}}, {0x1, 0xa0e8, {0x2, 0x2}}, {0x5, 0x7, {0x0, 0x524}}, {0x2, 0x1b3, {0x3}}, {0xe6cb, 0x7, {0x1, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x800) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000200100000c000280080002006c6f000018000380040001000800020003000000080004"], 0x38}}, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x50}}, 0x0) (async, rerun: 32) close(0x3) (rerun: 32) 4.055079287s ago: executing program 0 (id=3736): r0 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4048805) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xea5d}, 0x50) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000300)=0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r3}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f00000000c0)=0x1051, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000480)={r6, &(0x7f00000001c0)='GPL\x00', 0x200080, &(0x7f0000000300)={@_ha_fsid={[0x6]}, {0x8, 0x9, 0x0, 0x6}}, 0x5, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x1}) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@gettaction={0x94, 0x32, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xf}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x95}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000060c000000000000fcbfffff81162800000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000100005ff00130000000000000000004a", @ANYBLOB="00000000000000001400128009000100626f6e6400000000040002800a0001"], 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x20004000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c"], 0x15c}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) 4.054845649s ago: executing program 5 (id=3737): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x8}]}, {0x0, [0x0, 0x30, 0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x2c, 0x0, 0x8}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (fail_nth: 19) 4.037659555s ago: executing program 34 (id=3638): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d300900"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000000}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bb", @ANYRES8=r7], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map, 0xffffffffffffffff, 0x3d}, 0x20) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "bb7a4e", 0x4d, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {0x4e22, 0x4e22, 0x4d, 0x0, @opaque="64ebe114f6ff9df4140f23e2ade56a28ace6c0b8bec259e8e5f080d1c010f41f47c8d635763c513854126120383901cb1a9402e67ce9cafd6b9ed54721cd27bd55e1025c02"}}}}}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0xc4, "218fd0c175cd6ccf346d0d8255c028e21c7a2b8c2afdf643f22c8131768756ed06a77a28d44e6fe58f9fea79553543aedbfedb170e00ce618b78ea4d636816eb4c8a2173858767522f4113784753765e83f5eb8f73ceb1203b8c1906ef8191f872b6601cccd7fabf3d0036662f0c74a5a0ff00d27f46b6c94023d77b7272119ba993d4380bcf2edbb683124327e73ba5b1653df92d4791629836d814ca67088461c68b61917aa610c8a65ab48dd66fd38606a3199c21e109e9cb5af7d0c8a72b704cf4bc"}, &(0x7f0000000440)=0xcc) setsockopt$inet_sctp_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000480)={r10, 0x4, 0xff, 0x951}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xb72}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r13 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r13, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10, 0x80800) 4.036994023s ago: executing program 0 (id=3738): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001000a7aadf991fd2e9ba10000c0a9000000000000000000000100000000120002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x4, 0x4}, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000110fc0)={0x673, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "3d59af4435a7b6"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000d6440)={0xfffffffffffffffa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x6, "a40579d04810f6"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000d7440)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000d8440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {r5}], 0xfc, "93576908509b40"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000d9440)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {r12, r13}], 0xfb, "f153e84e229a09"}) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0f3cdeea", @ANYRES16=r14, @ANYBLOB="01002abf7001ffdbdf251400000018000180140002006e657464657673696d3000000000000008000400080000000800020003000000080010000d0000000800030007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) read(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910790000000000620040000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r15}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r17, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000012d1b9e90300000000000008050000000000000000000084260100000100000000000012050000000400000000000012030000000300000000000010080000000030305f5f00"], 0x0, 0x5a, 0x0, 0x1}, 0x28) sendmmsg(r16, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="07aa16c201", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000001280)="e70dd1e8fc0ceb80ac180deeff3477dde795d79b99804bb7a03055733f22c06ddbf727a7a41bf359dfa7ef10c46c233b4412840e83d3f50b7cfba9b130657a2a7f1b4763ae2ab733307cb979a08d07b6e1df5e2d5d6e5959551ed34c68e7310cf6bc09c020e3958277eb47ba936090f9061129dacf3b1b2a8114", 0x7a}, {&(0x7f0000001300)="1f5913541b76ac75afa67453834bd308ec1c87d5ec4087e41fd9eac38e6634c077e328f49776b9b4c69c43cc03b7b5b88207b06129c3661f45bc9b9b2224b540fc5ce992d8497185aa55cd429930617050cd4061f3df87427a656a3d1d8f552af7acc195161614fe1435a61ed1c6121b332b84761141ec7425b4f92f887c776ed285f4baea0a49e85a9c2ead37f29743e4297f1f8d11b74c686637a06fd8fe97e6beeb62d89725e6338c0eb6e9de686860a07d21a9355f2a5051f7f9cb5ca8c80770dc83432572964790c7a4a6bba94e15bb4f71ab546dc94fe35b40", 0xdc}, {&(0x7f00000023c0)="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", 0xc91}], 0x3}}], 0x2, 0x40840) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r18, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) setsockopt$inet6_tcp_int(r18, 0x6, 0x2000000000000022, &(0x7f00000000c0)=0x1, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r18, &(0x7f0000001b00)="a6", 0x1, 0x20000075, &(0x7f0000000140)={0xa, 0x4001, 0xfff8, @loopback, 0x5c2c}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/26, 0x1a, 0x1, &(0x7f0000000040)=""/205, 0xcd}, &(0x7f00000001c0)=0x40) ioctl$OCFS2_IOC_RESVSP64(r18, 0x4030582a, &(0x7f0000000200)={0x1, 0x1, 0x5, 0x1, 0x7, 0x9}) 4.036430625s ago: executing program 1 (id=3739): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="060010000300000008001400000000000800070006000000080014000080000014000300"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x1}, {}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x130}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x702, 0xe98, 0x0, &(0x7f0000000380)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.036250284s ago: executing program 3 (id=3741): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/'], 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 4.035893017s ago: executing program 5 (id=3742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)={0x168, r1, 0x7, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}]}, @ETHTOOL_A_LINKMODES_OURS={0x148, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x31556c3d}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1de9}, @ETHTOOL_A_BITSET_MASK={0x3f, 0x5, "98a813b4c0b31bbf6139d5b4619b00000000c9e15f1f07454f19acc0a73d369c4a2f4f5bd0be8d4a89d5f237d811cd497080da24ba60661d1d231f"}, @ETHTOOL_A_BITSET_MASK={0x25, 0x5, "4603196daa63de14a1fc8a80ffe8f0d2b107a7bed1639b54ec73b729d16f9a7219"}, @ETHTOOL_A_BITSET_MASK={0xb5, 0x5, "02bf85055cec54f8d8c5bd183153d9b6e5683d48400f80d8eaf031a80b83f065c49133e01617e3f46272ce8c1a37bc079f6477b326a0b0c4288a3810b0af4a66cbcabad9c8f0e03998e89bfb17d6fdec775e8fd6e9561cd20f3c18021f749c35d5e4f9cca930465fa3e0f2423bf8be3df48b4e91ae82af8a798a318c8d1803b91b7509199454c603caf2f359e726cd693d6bfbff93f4ee5cd6ae2d3e1c5f0579c48ff171736abf6fa16fa315d2c21b409e"}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x8800}, 0x4000080) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="4c00000011000f14001100020000180002000000200000", 0x17) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000141401"], 0x18}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r7, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r6], 0x68}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) socketpair(0x21, 0x2, 0x67279979, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000041}, 0x48084) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000100001042dbd74000000000000000000", @ANYRES32=0x0, @ANYBLOB="4b02060025210000240012800b0001006970766c616e0000140002800600020001000000060001000200000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x54}, 0x1, 0x0, 0x0, 0x20005841}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000001ada04006b1166000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @local}, &(0x7f0000000140)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x3, 0x80000000, 0x21, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x10, 0x7800, 0xdf, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x1a, 0x0, 0x44, @rand_addr=' \x01\x00', @private2, 0x7, 0x1, 0xe, 0x5}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x1ac, r1, 0x91b, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40801}, 0x1) 3.770366304s ago: executing program 0 (id=3743): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000140)=@newtaction={0x98, 0x30, 0x8, 0x70bd29, 0x25dfdbfe, {}, [{0x84, 0x1, [@m_csum={0x44, 0xe, 0x0, 0x0, {{0x9}, {0x4}, {0x15, 0x6, "4846850850d5129d1fdebede60f081422e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0x3c, 0xa, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xea7, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x240580c5}, 0x4) writev(r5, &(0x7f0000019880)=[{&(0x7f0000000080)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x1000000000000105) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000080000000000800008081115e000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004001f"], 0x38}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_j1939(r9, &(0x7f0000000080)={0x1d, r10, 0x0, {0x1, 0x0, 0x2}, 0xfe}, 0x18) r11 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000000)={0x1d, r13, 0x3, {0xfa557890da8f3a1f, 0xf0, 0x4}, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xac, r3, 0xa00, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4008080}, 0x14) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r4) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x18, r14, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c085}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="78000000f1f746f8bd5c8ec4a95c08e9c79c07ac17c2996253614a490c561328b3380ddf5d192ba9ae0bbe", @ANYRES16=r14, @ANYBLOB="100025bd7000fbdbdf25010000003400038014000600ff01000000000000000000000000000114000600ff010000000000000000000000000001080001000000000014000180060002006c000000060002000200000008000600080000001400028008000600090000000800050002000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000880}, 0x1) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="ff000000260001f37b4d8b80330f6b9a45dcf7d71b1e7a1a0530a100"/42], 0x118}], 0x1000000000000040}, 0x0) 852.544839ms ago: executing program 0 (id=3744): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700400000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa2000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r1], 0x20) 776.979286ms ago: executing program 5 (id=3745): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000280)={r2, 0x8}, &(0x7f0000000300)=0x8) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x2c, &(0x7f0000000040)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e20, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x18d0a42e}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r3, 0xfffffff8}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f6", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="2000000000000000840000000200000004004900bc0400000200000066a192ae1e002c697cdbd8991c4c3941e4023b5394b7493a3ff487c83cf58437958b715e939e3ebef4c603d17143a72d9214ef6abd234e1749c9f39cb3142db8baf72de164b22e3f0b990ffd8074ce3c818b806b248257bbb20b005d52c0eb7ca762737befba1ec381a5c8419511bafba6", @ANYRES32=0x0], 0x20, 0x40801}, 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8) 698.179483ms ago: executing program 5 (id=3746): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x44845) (async) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x3, {0x2, 0xff, 0x2}, 0xfe}, 0x18) (async) socketpair(0x15, 0x80000, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r3, &(0x7f0000000140)={0x1, @io_capability_reply={{0x42b, 0x9}, {@none, 0xd4, 0x1, 0x2}}}, 0xd) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x7, 0xfffa}, {0x7, 0xffff}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 695.803234ms ago: executing program 3 (id=3747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x2014, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb27}, 0xffffffffffffff55) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) shutdown(r5, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000002800128009000100766c616e00000000180002800c0002001e0000001f00000006000100fc0f000008000500", @ANYRES32=r7, @ANYBLOB="00000000c427f1b60c556f06a6928bd4627f168365dd5e16ddd591beff82b1a98c05329391718a6dda48a9a27391e207a0a3e822f77d433e0fc68a4d0ffc58fd84b0a80971ee561892dfedc29c6bc2fafa1ad1be0c407f110d24e0cc4150e1fe8834adabd7257ab09b9a22773347fcb4", @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x8000) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)=0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="2400000645350d0027bd7000fbdbdf250a3f20ab0202c8050070000008001900", @ANYRES32=r10, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4048005}, 0x10) r13 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b80)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002b00)=[{&(0x7f00000003c0)="b7b04caf830a2c714f2fbe99d0489cdd533a6711033ff98f9864af536366e25a1965afd4a132f1e99f0fcd4d0cdac6efd944e02b0af002e2ce79f96c2cf4356bf5b442aff2465c5b87a1e28f241bd880c60d5023a037969106fda61a8205be4952", 0x61}, {&(0x7f0000000440)="60ce411cd29c66eaf0ad9f241ee512d04393208816e01a8dac82962be6bbe1e0ef334bb6a15dff2df0", 0x29}, {&(0x7f0000001b00)="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", 0x1000}], 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=r13, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB='\x00 \x00\x00'], 0x58, 0x20004840}}], 0x1, 0x4000000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001cc0)={0x0}, &(0x7f0000001d00)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001d40)={0x0, 0x0}, &(0x7f0000001d80)=0xc) sendmsg$netlink(r4, &(0x7f0000001e40)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40}, 0xc, &(0x7f0000001a80)=[{&(0x7f00000007c0)={0x12b0, 0x1c, 0x100, 0x70bd29, 0x25dfdbfc, "", [@typed={0x8, 0xe4, 0x0, 0x0, @uid}, @generic="d1a5e952012b229ebc0d728055b0af86bc107fbbe2c1434cef4432408e524779425da2c637226e8f2144d78432b431df2b928b5e6d94c5ed0da7105d19256790f00d0e9ca730f20effddcd551eb6e3fe6c79a96a18e475af014f5736e5de2b3aecc177a1a292948aa15ab8c7634752cee86446016ad88b799a885ada60a5d2ae996411d418af86df07ff32ae1a285e65f38bb16418cf136fb2f9fd9f074540ffcbb551220f0e006554ff85d7d50b714a4cddfb16d3392d309d74070f532133a6852409354372225a2fc3a78befda32ed7866fef33c0253e999bdcbd48299244f819b830852229b95e43e5f761a44028033", @nested={0x100c, 0x11c, 0x0, 0x1, [@typed={0x8, 0x7f, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="367672009f41c17ad9b0d3a2c1c6323fef8f023e8032ff645ec5af2ac165314b7178ed61c58b4ba1ad3a55f45e09ba67870e31bd9cbf51fed35c5a3ff6bf88019452d16fe9255e2cb1acf1afece2b8eac430f59b2c2cae4d91fcde7f7dbb0a3079d681c4dd79154a1af37e777b7f68b6f1d86535cab7ddb3695448f665ba24a38b3992887ffc160e8c6e4cad8647f10eaaa712fa42bd9ee6ea6e4d604d78c3e378788612731cdfebd53e0156fca7db3ce8f53bdc927812ef12603a57a8266a8278e25e9eaa0aa40e55bb74f84bed718c909ffcfa2bbaea6237db9e0797d5879389adef16db9c77c758d57f66c122dd596eef7cf47179799ab99400c22237f182bb75535fcb55a4fd41ea24823418ec2619e04206cc4c50ccf7f6cbf3a13a2cfb139a1a5cd1aca65e488c16efe78411cb556c0991b6f367a2df717a88d468087f41ec705f8bd89b78d84afc4c119ba8db02c0756f2bf697df81625b786bfd6174cd8573428a715eeedce44458c1db5ed0679b4411e52250997dce245da20d0bc623859d534371c73acd8ebcd8e772c9c04abc2ba0885cca6c2c43514a1900f05c268f1cc1fc9214d5ccc89a874c0ef064850b0c10b4ced4a64e1d90cf3e61eddca7c080b5771ad2ec50b732e9f10c383f9a28693ea5a93d53287e1ad9ecd79ed6a55fb36cac25b88a697c1c9dd24c27a9a397ae556ada224e9c6446cab39f1df32ca81dac91e68089eedbc7a647464027c52e97ad8f8ffc30ec1b1d12fb9a17e0631b342ca08917244f901b1a743dbe354d3535af41100c1d798c8e9722a0ad0825d09fa9e44574317ab0e3651612743eef0ae1f9fab7b9d8431205fe018b06df5275c015b0ec71718f55041c3e9d3d5104cfc4f47489d5bdb48c0f05bdf327d04955fd099d31c3fed4d2c383675d7593d45543391395709a9628ceb2976f745e131c2b14c5e7897c181ef23e2dd1eab48c1c2a48eeaae0a6d1ab471843563e6a3b07cfea89c919ef99cd940b4fa617dfb50df64a6c54ce3c4198ad97a315afc4782db1e83abcb8cac2752ba021dde5497db75af6294b0ca2f9b6dc691696309f2129a922714ac5f78c9eba42718edb06e96884b025a3d593e9293270cdb2c9b90a24cc42b8349d52eb611369006c26a77f5f1560e78bec4f00ed97b2f0fbd047e33d4c104cb8d865f2f8f350b900f91bf8a1c511235ddf2ec57a73059c079430b4436aac4e9fb4fac368943917eeb21fc0957c8d6100b968685b48a6576b9850ec1e2c96a01be81d49cb7bf68acebf7c3c53e6b3fc05d3a26f4f5b97eb70dcb68044b5cf12ae0d48e49374df4d404b761e888b570b5dc60ade74975d3b8e46b73a005eb5b94d99bd8b150309f4a227a6067f19b50cd96396bebe2a37195a6c3b6553613abb338f9ccafd70940a6cd6fa81a4ce39450528e40d13c044a011390cd8997956883e20d86b943e287807fbb6aa2e395ef046f013151c6df9a35e6b83c7691dfccbf890254a1b12247c06f164e2736272ecf587c6d0053a00409f42cb0732ccc285a01655cb1d8b6aff18a573de9192b7eb6e0775c939c3a6efd6f426c4164d56f7a4e6cd098d21ba4cdd2f5a5e4cf1f93c4bcfa116e17a8fd32ece153af5c21c17792509f88375bce316a0e68622ce6ea7ad3961aad7629e9637d7e44ddcfccaf871364d5352b471a95faeccc1613daf86cb87515be992766b531f9eebdf9d3b447cce565fe390d5fb78e04a87fff4d33e8f0a4e499a1bc1fd1b7270fb0388b6e6cfd73768814192948eee4090a88c74cf2bcd26c498b008047ecae916acb99320ce814002ff51ed168bc6c62903e2670169e5f284b3ac827fb77136bd7a18c327093689e0a928bd9fba3d2091beb389519934d2bef8b2b5392cca6991935c9d2ea4bf4a3cfca65bdd26e8c0836129f60d9143100ca887a10030b8c79d88b30401b0669313847b3434cbdddd8f48c673facd37d0f63cfdef6d1597397e2b8fa92dd99ebb022a4a7afcfad64e745055a9a803c825f6903666b8b45d8323d2331a277f122c5a9d281b9e9053d08512ed1f28d89ffcc8c65851793e9063102b0e8c4e3bc64bb9ef23a9641d73df33686cff3cfee436b1a88ae84094c9cc68b49594ee27ad5319c590a590bc97afc4e1b685bbba724787c3182d0271446e8545779f23dd74b2b93978fd4850f4e971a204c4f1e7d960b49a5d8d7c5c4300c687b89cb59b26700788bca024a65e78b5d630249c8b9ff4480be141180cf6a273f2f86fbde036ffcf2e8dbc220f274c0e5fcca1a25789cc5dfc41476d1733c159fdb8b1342d6aaea44ad100a8fce662f5d6e6a44bf1c47bb0817d1f939f4fa546ac45916b8bf382eb09607af65e7979ace19e7c9fb5a06fc13d2a8b193fc6dd814112db4abf58944381fa367e5d283c14b58a1e892ef4db651d4318f292b617e6d369e5c40fa5a98aea81a52fa898eeaf01254ad71edcdc2c347ff7d83332add4f58583786107ddba27656efee17a4fee37223c412789572b7c6327dd68a1e58cc0acaff7f108c6993b35c28db13d06cfc2f5fd6aab2fcf9c4cb0e45168eee0c80fdd4841c03d3943456f59065ca7ca00ba5bf72cbfe9700a2349babb9717597b3e8c17f474c308768a9e75cf064d864b0067c89a8b07fa988037913becf83ef8c7f3ed7023978cccafea58d233de5cc43c65b91b1a1fee6151cc50b71a32a3dd0e990ead817ba525d83e1dd9d1c0e063fa36962b9f5db17a9dbe99a7c1c80b0c087ecd215effdc6b679807b202ff4a3faa371f6c8dcf653cca23fb663625c5c5c8ba8bceefc20760e05278e4d06f4660ac4664b2fbdf9ce587daefbbc7e2171a3fab532475d9df0677ae7bf2ae81a7fe2a9f2d874187fe6df18d1e225b649d22215149bb5353e3f4539801b7313826f77ae0d48797edd08df28dae001d144d32de4e443930f6e8bfbff51401c4472148350f1a4626f7eee1ce2db0edd0290f7e954f491ed91203359ac9da775347db3b32c448d167bc4acb8eb7a0e61474d2ccc29f8ba50f3dc034107d7fe12fd66ae0fd8ce4d44a834c262a3d66b41534a4e47cd91a54418a27761ef1f1f71692e77a0d33369a4d75c3b10619562acf7333d35b69f477619f2de0075ae0a9ce0dd66ad9aa2124aa2b5dd8adae061fe5c35947f75b6c4dd63b73b00dcaccf74d991a9cab6c057d936b7288deffe5173375b6f3a53eb2efa57dcaa54502d04e35408ef8b9bb4a09c4e49a1c3002c8bbb88b02e81105e9eddfd5ca8068270c7b4b987953ac40da78b02fb901386c8b946e481efa615fa4e42d4077bb0f98bd57990cc44f58282662160d221d3fb7ce4834721c17ceb9877b4e03b115473c2c9168201746a1d29071a7313d7f99c2a7421839d39ce8e2bc3ad92d568601514552241a4495c2c00a36d5dfd90ce4f5cfe7d0109e7abe45cda41184c792968344c35be0345e3f7405d93eb1944bc0d8ad880f6f0e26072527ab5d55eb4d4f7ce95c7756bf343a23047f7e5c37ad179995cda10d059e5dc61a45bc37f80dc2058139fd418895adb176866dc59dc47c5e82e72af0762936ba1a86f839904bc7fcd9b6d814d8b0293c69524c56f86864dfa99116404d977786dca909a05002b538b5caba02cbac20307176bc441295a3648e42a1115d410d380eca3ab7909953b0505b04b4a9cb41c511a0c3ca26ff95fe538439b02704faab4c9b3bf51399cbbba97cc9db7146b6fb40c9034c71a3a3655f87f606423998eb8de4c58b2691189b79d87b3e304d7cbd695328aabb4814af526266714d22e406f93b2cbd9f9802f9f6942ff159d489d88cf39b006695c0477114ec6b5fcaae8993dfec42e72f149a5001d0ebab40ea4ff68f67a7217a05f063fdd14a2381d4c6c913bc3f90482b977bc5a30ced022a419b65c8095d224a29ba976ea225056fc705b811953bbbb66e559879126b845c6d5468fbbcea97651d26a92a0ce733191eb3cbf17a3600c34588789eedaa264198aa87d46678fdb1bb579a8d134ac2088d7e48b230f41f5f705cdbdcbbad09ae12b5a236ad406e9939c883d0baa74e09f3b4b71e8e6f6c02654c88c5c8a9e0bf45b51080d612439c93766108ccc4824ba0e8209fcdccdacaafe1aa206f59ef7973633e147e8d5efea32fe8209a3992ad21a19794a065cae0d107eb6f2bc0a54a0a680f484fdbde4fd1412b074b09278e1154dbf74d16add1ecd8da3404b2019c3efa3b102ac180f1bcdd683aa3879322a68ad0bcbd2d22cb4a42871815e0e541defc9ef2954c753dfa7f4bd64286ac48f8e6ade9909bf3a68eed1678a201657974a1446aa5e0fc9464f76408883872a98319b2bee70a3a134e7a9e00e94022571d9d322728274e9958132a85a48c08ed5cdd66becc743b0232f555dc16a9f7737f14ec0d4ff5717ee25786cc53e4e4c4c999aedbc6f8076a73efa098a96ad18b7345010d17f6d44babf663c8125f20669ceebeb0d1d9c87b515e3164d378e5b3bd17a565b163703e59f282bc7db16728883d9df5a418e10e4efe339dca657a57bec26461ba9ffac83456409c962fbb5196a6a4055be8a69af94d0a067892bf23cfda572768f0b9123074cfe0773e4bec2a23c0c736bbda1b6b9459a76bf104508cfab27a780642d21eada9f96537c4eb3b19285c922e4f6e348fae3d2f171084d5ec82ad4f255c3a18a2da81d86dafee0c538d8651d5f597e465c750b3c823c2a0128059df620f2a764b4be9236a14e821315971b77053e5141eb73773a7b64a88c1a6701befbf65bdc963f7021b18be79372581490babe0d37ad19837d740511831956ac65e5d25911d1aac7fdd84ef3f3e367c4417b919d42494517339a1b91123c22529ce8a84d3ecec44ae9680723205c9d55ad1c2e09a35ce3e6987607add2b734a3613b21ad7d2cfed44186f6e0c75e0f3d126a25f15bc1c084577ef0006a7277a189f853a105a56d6cbfadd600cef7925f442bb68f3db943e3a66b7be4f68383e5494b97d4b54b5f3e0fd9e26f2238e52df42e713d9091cd4ba0b81ce534b627737707e20af5f96fa4657a521d8b0e3cfc3fcf74813f2d7de34d909ede94764b748d2c7b1744ca06bd747ebca4c70cf3e87022e596dfe6460c908acf3e5bf24efbd2cae4d6460f4fabe1fefaf3035ab370b0f964d52d34206f867948d5fbda1cb6245a00fd7388259d1aa81c46acbef7c750071ab9f2f1d03eda234a18d71655fa393b0122dffa938dd7b26fd9778e18f9964d1bc7a29c802eea509ff871e1319cacc4fa537200121224e4b2a138c063a433d7d250a776a785816a4e2b30e83f7e9a5724e5578842e6866de8befc457f853e11ad79841bf2a4fb1ae9b77b1552b886481155b769712f0a18e40fbed5edc5736a3087c7ef17f595b545de8578449f2da0b1b6a1aa6b304765c1874f851bd60de0b776dba660f8c067a74fb30d84cbf7d0f28bce2d34e1c7fc53311a90e9a7322ee3346cef40b5ddc9877c5feeb4745c9d54c0716f7c9988df3e80c0d1cb61d0d9be2dd139d2411cea3c59bb2e3fa5d674aaef02c551a73a755a1e1ed44f3a158dc85759f883622f46c21d7eb24cfde842be8f7eb18406e028b56d3e6e21dd0f678c530e4361ddf94c5aebf3ee8fd7e58ca8e86de21ca1d06648337aca05d2476ac231f08b938f863a0645ba8f7cc99a1630f422424ea56dc06e321ea8ac80ea3bf4772eacaf8670920efafb1e981c7de65eec385866dc0d023e0a04087affc4b441b4a29b4019a501c6c6b6f3894ef09507ada4b6c3698c9"]}, @nested={0xa2, 0xe4, 0x0, 0x1, [@generic="62bf9c72695ce6191bd2c49131096a6686647555cc8f7be6030351210db4d43e159b49e8632f2c9f3987fbc2d408fc028a9b5351cb8a2cddae5523ebb2d4195c47336f8554279c2d4a41730ee47bb7f07c767e82a6f754b05ea1c70b89f37d953ee945a48cc5680a51d2150a607e0dbfb992a72aacd2", @typed={0x8, 0x3f, 0x0, 0x0, @u32=0x9}, @typed={0x14, 0x61, 0x0, 0x0, @ipv6=@local}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x7fff}]}, @nested={0x8, 0x15b, 0x0, 0x1, [@nested={0x4, 0x128}]}, @generic="461c23a8738e07b868914183e6999adf188b877413cad0abfeb45a517b4cf07c3c4b4ad64fe57a2ff871aa7bd26d2f5bf244c4c54d3cac7c6f56c133fce2e38f995db58b52087f66261794c64b77bdb25d91eee0e2b805de38b9a0dd30109041799a6311af43143a02f9263f99d3351bb8797a1b2f5d59eae2209c43a5954848c9fcd6ef283032d13f842ce63232139b05a7839aeaf52cecac4ecb4224067c6c4174162709b9b0a7e8f8df17aeb49c501fc621673c168584b87eef6f76a759e5afdf25e46f3d03027d32adf4ade56122f1c349f0c3e095dea9c764d25c58c39649b7e358c2875375b185cc195b"]}, 0x12b0}], 0x1, &(0x7f0000001dc0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r13}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15}}}], 0x78, 0x40000}, 0x1) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:watchdog_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48010}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r18 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r18, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r18, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r17, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff0806ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) 624.84861ms ago: executing program 1 (id=3748): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000140)="6e33b0f435") (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x3, 0x492, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff010000000900000000000000892f64766d7270310000000000000000000076657468305f766972745f776966690070696d3672656731000000000000000076657468305f766c616e0000000000000180c200000eff000000ff0096e1b24bdae880ff00ffffffa6000000a6000000d6000000636c757374657200000000000000000000000000000000000000000000000000100000000000000002000000e77800000100000000000000434c4153534946590000000000000000000000000000000000000000000000000800000000000000da9aa3610000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff02000000090000006100000088b5726f7365300000000000000000000000697036746e6c3000000000000000000074756e6c300000000000000000000000626f6e645f736c6176655f3100000000ffffffffffff00000000ffffaaaaaaaaaabbffffff00ffffde0000000e0100003e0200007374700000000000000000000000000000000000000000000000000000000000480000000000000002000000ae000600f9ffaaaaaaaaaa2aff000000ff00000003000000060000000900fbdbbbbbbbbbbbbb00a0ff2000004e234e22f9ffa100090004000300b600ee14dd002000050000000000000000000000000000000000000000000000000000000000000000000800000000000000feffffff000000005345434d41524b000800000000000000000000000000000000000000000000000801000000000000010000008800000073797374656d5f753a6f626a6563745f723a78656e5f6465766963655f743a7330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000c0a000000888473797a5f74756e00000000000000000076657468315f746f5f627269646765007866726d300000000000000000000000776c616e300000000000000000000000000000000000ffff00ffff00aaaaaaaaaaaa000000ff00ff6e0000006e000000be0000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a300000000000000000000000000000000000000000000000010d0000000400000000000000"]}, 0x50a) 574.360011ms ago: executing program 0 (id=3749): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x8}]}, {0x0, [0x0, 0x30, 0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x2c, 0x0, 0x8}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (fail_nth: 20) 543.313409ms ago: executing program 5 (id=3750): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000900)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="4c00000011000f140003000200001e0002000000200000", 0x17) sendmsg$nl_route(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) 402.704137ms ago: executing program 1 (id=3751): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000005000000000000008510000002000000850000000800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x5b4, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0x10}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x588, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_POLICE={0x5c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x41c, 0xffffffffffffffff, 0x190, 0x1, 0x8, {0x1, 0x1, 0x4800, 0xf801, 0x1, 0x3ff}, {0x8, 0x2, 0x6, 0x0, 0x2, 0xfffffffc}, 0x4d0, 0x7ff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe351}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]}, @TCA_FW_POLICE={0x428, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x0, 0x5d, 0xb0c, 0x7, 0x7, 0x2, 0xfffffffd, 0x7, 0x3, 0x8, 0x8, 0x5, 0x7, 0x6, 0x0, 0xfffffffb, 0x2, 0x100, 0x8, 0x3, 0x10000, 0x3, 0x0, 0x8001, 0x9, 0xfffffff3, 0x7f, 0xff, 0xffffffff, 0x3b38, 0x3, 0x7, 0x5, 0x0, 0x6, 0x80, 0x3, 0x4, 0xf6, 0x9, 0x0, 0x6d, 0x1, 0x2, 0x100, 0x9, 0x4, 0x2, 0x9, 0x3, 0x7, 0x4, 0xc, 0x8, 0x4, 0x6, 0x4, 0x9, 0xfffffff7, 0x6, 0x400, 0xfffffff9, 0x4938, 0x2c, 0x1, 0x75, 0xffffff01, 0x7, 0xd8d7, 0x0, 0x8, 0x5, 0x1, 0xfffffffd, 0x4, 0x4, 0x9, 0x7, 0x8, 0x8, 0x77ac, 0x6, 0xb64, 0xff, 0xa9f, 0x9, 0x9, 0x10, 0xfff, 0x5, 0xfffffffc, 0x367, 0x10001, 0x5, 0x6, 0x1, 0x8, 0x4, 0xe3, 0x7, 0x6, 0x0, 0x3, 0x7, 0xd367, 0x323, 0x2a, 0x80000001, 0x7, 0xe, 0x80, 0x3, 0x6, 0x32, 0xc, 0xfffffff7, 0x7ff1, 0x0, 0x4, 0xf, 0xd, 0xfffffffe, 0x101, 0x6, 0x9c, 0x4, 0x5, 0x10, 0xffff, 0x33, 0x80000000, 0x2, 0x6, 0x0, 0x20, 0xf310, 0x8, 0x80000000, 0xcd0, 0x1, 0x1000, 0x8, 0x8001, 0x0, 0x100, 0x8, 0xf6, 0x1, 0x6, 0x6, 0x0, 0x2, 0xb4, 0x81, 0x7, 0x5, 0x400, 0x66c, 0xfffffff7, 0x5, 0xfff, 0x5, 0x85, 0x75ce, 0xa47, 0x4c5, 0x2, 0x9, 0x5, 0x8, 0xdd, 0x6, 0x7, 0xb482, 0x4, 0xf, 0x7fffffff, 0xffff8f93, 0x0, 0xffffffff, 0x2, 0x3, 0x5, 0x3, 0x63, 0x94000000, 0x5, 0x401, 0x2, 0x77, 0x4, 0x8, 0x8, 0x4, 0x1000, 0x1000, 0x4d7, 0x7, 0x8, 0x8, 0x5, 0x730, 0x4, 0x0, 0x1, 0x200, 0x8001, 0x2, 0x800, 0x6, 0x8001, 0x9, 0x3, 0xf5, 0x6e26bef, 0x6621, 0x7, 0x1, 0x101, 0x4, 0x101, 0x182, 0x3, 0x7, 0x6c, 0x2, 0xfff, 0x0, 0x340, 0xa84, 0xeb9, 0x44, 0x8, 0x2c, 0x2e9a, 0xb2e4, 0x638, 0x7, 0x1, 0x101, 0x6, 0x4, 0x6642, 0x9, 0x8000, 0xfffffc00, 0x80000000, 0x100, 0xfffffffb, 0x2, 0xfd, 0x6, 0x3, 0xffff, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc5}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x47b8}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0xfff1}}, @TCA_FW_ACT={0xf0, 0x4, [@m_sample={0x50, 0xe, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffff4c}]}, {0x19, 0x6, "0bede91c4faaba5e2a72653a4593d757b75484ee31"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x9c, 0x2, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x5, 0x6, "db"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x5b4}}, 0x0) unshare(0x22020600) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c000000060a010400000000000000000a0000030900010073797a310000000018000480140001800a0001006c696d6974000000040002800900020073797a3200000000050007403f000000140000001100010000000000000000709f7abb750d241d99b21b7e000000000a0724dd33cf78b8a699bd10d475dd565aa9107c3e8130fefabc79008db7f33b0e8a30fff798bbbb4f37d88764117fd146159b7c3186176c53f403fb1762bdccbaf5f917a7af15afd4a7"], 0x74}, 0x1, 0x0, 0x0, 0x400c091}, 0x8010) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, &(0x7f0000000300)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x2100, {0x3, 0x1, 0x2}}]}}, 0x0, 0x32, 0x0, 0x8, 0xdd6}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b28, &(0x7f0000000040)={'wlan1\x00'}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@multicast1, @remote, r1}, 0xc) 158.792404ms ago: executing program 0 (id=3752): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (async) r0 = socket(0x23, 0x80805, 0x0) listen(r0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) 59.279916ms ago: executing program 5 (id=3753): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) unshare(0x2c060000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002abd70000000000008000000", @ANYRES32=r5, @ANYBLOB="0c0000030800090064010101"], 0x24}], 0x1}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004000)=ANY=[@ANYRES64=r5, @ANYRES8=r4, @ANYBLOB="2501258036c2ed9c50c23cfb682aadbe37c035f8650e1276686e9b00b73943979521ce8a4262e8c38bcc198dc3ad252c95c1739ee6d486cba1e060d9dd889de41383e6b7943f79e8f51515b785b3d61b0254a1f9db15c52f0660b0b4edbc238fd34a521a51525f676b8dd2f8d9f544916fbec565fe78fa43b0c9efc15297ab9e0a4ba145a42ed98abd4535b369cbe4834f7d1d1f278fcce0a3d82a150b8e62ad06299d6f92997d759d5ac2149345a2f6aaf0e15d24603ab097190df7413ea9088b71005ec424b831bf2cc168a704c10b1fe1490f2f4ad7fcb0fde67e70c8377228dbc02f5c09e93bad648b7753525b3007b6879b8db79e2f70af94d9061864324692d68828998a9e0b79749490b2637e65e2bb4b74cccccb7ba1ca72aab2835aa3b726cc0400000068865b2dc2d52b4a2e924f7daea3e812d76ea5a13d851387448f0db9bc4ba22206780eacf0e55721743a83b9c66579ac469be5679656d31b1be7db85bf2a1e7a1dcf022080c66f4524e431926e499a4688694071cdaa9a60c5bc82c44ed5869fb94cdde827b6b888b04e151ba0598cfc5f8bc208ce24b686079009a15013555f2c0e55f00f98200cc3a36c435cff7659fac885eef469a5a1253c0345c813311be28c97654b3a123ca23e24fd96ba5c11d4eb8dbb554a99ca3e2445025daf8619e9d312c21288edc87d52ebdc338ec8b5ddd6bbbee802ff907ce01e275df5d6ae0cd449c82e2108e56e33c7a4d53f511da26d1b6fa8b4194b872ff81c49e93f8b555c84b8c3b42eb1878cb6fb4798e5fcf88785eabf90d089f96e8f000d72121f3dbb4b7c54c6ed97df095fc4490dd20e431da5eb8acf0f86c7d16079945af85e51556b1b140900000000000000609f9a42de2fc1247b740482dbf44ff229d0e8d7761c32065535bd2d12efae6e736047925942c961c8a169f901b36bfc9c97ad7b86a33c6f20b970099b605673bc1acdc77d806e1a959046892bc3ab5c3a34b20722fb82686a0abbc854bec21a8844e9d9580328c13eaf13c3382e6ef495c6ecc532f7429c8e156a8170362d190f5a94cd3182de71f261520caecbca1500875a480c4fe56cd62f255a71e5968dea9f91f7ed98ced127c74e5a96eae6b49b2752a13f12d7a8feb86e2522dd253ab914b3106620d913132541d594cf35aecb6bc4d2a7480c24c7a3dc81c9703ed5f5c71387e035"], 0x12b8}, 0x1, 0x0, 0x0, 0x2004c044}, 0x4040) close(r3) r6 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) connect$inet6(r6, 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f00000001c0), 0x37) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000000), 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r3) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="24000000190001002cbd7000000000001c140000fe020001000005"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, 0x0, 0x0) unshare(0x22020400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 0s ago: executing program 3 (id=3754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r1, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/47, 0x2f}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c00180001ac0f000dac0f"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) recvmmsg(r1, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/47, 0x2f}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c00180001ac0f000dac0f"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) (async) kernel console output (not intermixed with test programs): 98316][T20157] bond2 (unregistering): Released all slaves [ 527.777346][T20177] netlink: 'syz.5.3208': attribute type 1 has an invalid length. [ 527.874744][T20179] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3208'. [ 528.026666][T20187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3209'. [ 528.084736][T20177] bond4: entered promiscuous mode [ 528.085337][T20177] 8021q: adding VLAN 0 to HW filter on device bond4 [ 529.546088][T19856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 529.583666][T19856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 529.614131][T19856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 529.654109][T19856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 529.669416][T19856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 529.721037][T19856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 529.721992][T19856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 529.759942][T19856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 529.840335][T20234] netlink: 'syz.6.3219': attribute type 10 has an invalid length. [ 529.888082][T20234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 529.915207][T20235] netlink: 'syz.6.3219': attribute type 10 has an invalid length. [ 529.943808][T20234] team0: Port device netdevsim1 added [ 529.983564][T20246] netlink: 'syz.5.3220': attribute type 14 has an invalid length. [ 530.076541][T20235] team0: Port device netdevsim1 removed [ 530.108725][T20235] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.131094][T20235] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 530.310120][T20260] netlink: 'syz.3.3222': attribute type 1 has an invalid length. [ 530.313742][T20261] netlink: 'syz.3.3222': attribute type 1 has an invalid length. [ 530.487573][T20260] __nla_validate_parse: 1 callbacks suppressed [ 530.487595][T20260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3222'. [ 530.557455][T20265] bond3: (slave geneve2): making interface the new active one [ 530.558629][T20265] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 530.559076][ T9367] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 530.559290][ T9367] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 530.559364][ T9367] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 530.560658][T20260] bond3: entered promiscuous mode [ 530.560675][T20260] geneve2: entered promiscuous mode [ 530.562425][T20260] 8021q: adding VLAN 0 to HW filter on device bond3 [ 530.563045][T20272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3224'. [ 530.599396][ T79] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 530.860703][T20287] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3226'. [ 531.012467][T20289] xt_CT: You must specify a L4 protocol and not use inversions on it [ 531.029885][T20287] xt_CT: You must specify a L4 protocol and not use inversions on it [ 531.175556][T20299] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3228'. [ 531.548731][T19856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.724837][T20313] team0 (unregistering): Port device team_slave_0 removed [ 531.748717][T20313] team0 (unregistering): Port device team_slave_1 removed [ 531.759320][T20322] netlink: 'syz.3.3235': attribute type 1 has an invalid length. [ 531.800900][T20318] Cannot find set identified by id 0 to match [ 531.865474][T20322] 8021q: adding VLAN 0 to HW filter on device bond4 [ 531.869616][T20321] netlink: 'syz.1.3234': attribute type 11 has an invalid length. [ 531.960320][T20322] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 531.981354][ T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 531.999881][T19856] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.097348][T18139] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 532.100204][T20341] netlink: 'syz.3.3235': attribute type 1 has an invalid length. [ 532.174941][T20325] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 532.218447][T20342] netlink: 'syz.1.3237': attribute type 83 has an invalid length. [ 532.252195][T20326] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 532.260373][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.260490][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.394131][T20358] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3238'. [ 532.534234][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.534361][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.759531][T20365] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3238'. [ 532.765410][T20365] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3238'. [ 532.789609][T18144] bond4: (slave dummy0): link status definitely down, disabling slave [ 533.258339][T20392] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3244'. [ 533.318049][T20396] netlink: 'syz.6.3247': attribute type 12 has an invalid length. [ 533.318077][T20396] netlink: 248 bytes leftover after parsing attributes in process `syz.6.3247'. [ 533.702099][T20399] 8021q: adding VLAN 0 to HW filter on device bond5 [ 534.306256][T20439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3253'. [ 534.883200][T20457] tc action pedit unable to extract header offset for header type (0x4) [ 534.883227][T20457] tc action pedit unable to extract header offset for header type (0x4) [ 534.883241][T20457] tc action pedit unable to extract header offset for header type (0x4) [ 534.883254][T20457] tc action pedit unable to extract header offset for header type (0x4) [ 534.883267][T20457] tc action pedit unable to extract header offset for header type (0x4) [ 534.883280][T20457] tc action pedit unable to extract header offset for header type (0x4) [ 534.883293][T20457] tc action pedit unable to extract header offset for header type (0x4) [ 534.883307][T20457] tc action pedit unable to extract header offset for header type (0x4) [ 534.883320][T20457] tc action pedit unable to extract header offset for header type (0x4) [ 534.883332][T20457] tc action pedit unable to extract header offset for header type (0x4) [ 534.883357][T20457] 0: reclassify loop, rule prio 0, protocol 800 [ 535.216376][T19856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.476836][T19856] veth0_vlan: entered promiscuous mode [ 535.531619][T19856] veth1_vlan: entered promiscuous mode [ 535.624092][T20486] __nla_validate_parse: 2 callbacks suppressed [ 535.624116][T20486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3260'. [ 535.677712][T20486] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3260'. [ 535.733087][T19856] veth0_macvtap: entered promiscuous mode [ 535.790017][T19856] veth1_macvtap: entered promiscuous mode [ 535.881222][T19856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.894149][T19856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.958543][ T7435] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.958592][ T7435] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.958626][ T7435] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.958659][ T7435] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.493965][T18134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.493990][T18134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.695085][T20514] validate_nla: 1 callbacks suppressed [ 536.695108][T20514] netlink: 'syz.1.3265': attribute type 2 has an invalid length. [ 536.705599][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.705621][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.759553][T20527] netlink: 'syz.5.3267': attribute type 1 has an invalid length. [ 536.759580][T20527] netlink: 'syz.5.3267': attribute type 1 has an invalid length. [ 536.759594][T20527] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3267'. [ 536.759610][T20527] netlink: 'syz.5.3267': attribute type 1 has an invalid length. [ 537.422570][T20546] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3271'. [ 537.495535][T20548] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 537.499706][ T7435] IPVS: starting estimator thread 0... [ 537.538765][T20544] x_tables: duplicate underflow at hook 1 [ 537.587396][T20552] IPVS: using max 29 ests per chain, 69600 per kthread [ 537.651832][T20557] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3275'. [ 537.651863][T20557] openvswitch: netlink: Message has 512 unknown bytes. [ 537.824768][T20560] x_tables: duplicate underflow at hook 1 [ 538.296301][T20580] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3283'. [ 538.297638][T20573] netlink: 'syz.1.3281': attribute type 21 has an invalid length. [ 538.668755][T20596] netlink: 'syz.6.3289': attribute type 1 has an invalid length. [ 538.668781][T20596] netlink: 228 bytes leftover after parsing attributes in process `syz.6.3289'. [ 538.722140][T20597] veth0_to_bridge: entered promiscuous mode [ 538.722587][T20597] macvtap1: entered allmulticast mode [ 538.722603][T20597] veth0_to_bridge: entered allmulticast mode [ 538.726384][T20597] veth0_to_bridge: left allmulticast mode [ 538.726410][T20597] veth0_to_bridge: left promiscuous mode [ 538.963418][T20616] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3294'. [ 539.244371][T20628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3297'. [ 540.249984][ T26] block nbd0: Possible stuck request ffff888027490000: control (read@0,1024B). Runtime 120 seconds [ 540.250031][ T26] block nbd0: Possible stuck request ffff8880274901c0: control (read@1024,1024B). Runtime 120 seconds [ 540.250058][ T26] block nbd0: Possible stuck request ffff888027490380: control (read@2048,1024B). Runtime 120 seconds [ 540.250084][ T26] block nbd0: Possible stuck request ffff888027490540: control (read@3072,1024B). Runtime 120 seconds [ 540.393662][T20670] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3305'. [ 540.830961][T20685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3310'. [ 540.937703][T20695] netlink: 'syz.1.3313': attribute type 23 has an invalid length. [ 541.077944][T20704] netlink: 'syz.3.3315': attribute type 1 has an invalid length. [ 541.077971][T20704] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3315'. [ 541.078682][T20700] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3311'. [ 541.116299][T20698] netlink: 'syz.5.3311': attribute type 11 has an invalid length. [ 541.119649][T20700] netlink: 'syz.5.3311': attribute type 11 has an invalid length. [ 541.416578][T20717] FAULT_INJECTION: forcing a failure. [ 541.416578][T20717] name failslab, interval 1, probability 0, space 0, times 0 [ 541.416613][T20717] CPU: 0 UID: 0 PID: 20717 Comm: syz.1.3316 Not tainted syzkaller #0 PREEMPT(full) [ 541.416635][T20717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 541.416646][T20717] Call Trace: [ 541.416654][T20717] [ 541.416662][T20717] dump_stack_lvl+0xe8/0x150 [ 541.416758][T20717] should_fail_ex+0x410/0x560 [ 541.416815][T20717] ? __alloc_skb+0x1db/0x7a0 [ 541.416877][T20717] should_failslab+0xa8/0x100 [ 541.416924][T20717] ? __alloc_skb+0x1db/0x7a0 [ 541.416943][T20717] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 541.416976][T20717] ? __alloc_skb+0x18d/0x7a0 [ 541.416997][T20717] ? __alloc_skb+0x1db/0x7a0 [ 541.417025][T20717] __alloc_skb+0x1db/0x7a0 [ 541.417052][T20717] netlink_sendmsg+0x5d4/0xb40 [ 541.417098][T20717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.417126][T20717] ? apparmor_socket_sendmsg+0x98/0x360 [ 541.417165][T20717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.417184][T20717] sock_sendmsg_nosec+0x14e/0x190 [ 541.417209][T20717] ____sys_sendmsg+0x54e/0x850 [ 541.417248][T20717] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.417284][T20717] ? import_iovec+0x73/0xa0 [ 541.417332][T20717] ___sys_sendmsg+0x2a5/0x360 [ 541.417358][T20717] ? __lock_acquire+0x747/0x2de0 [ 541.417408][T20717] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.417476][T20717] ? __fget_files+0x2a/0x420 [ 541.417517][T20717] ? __fget_files+0x3a2/0x420 [ 541.417557][T20717] __x64_sys_sendmsg+0x1b1/0x290 [ 541.417587][T20717] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 541.417639][T20717] do_syscall_64+0x166/0x520 [ 541.417704][T20717] ? trace_irq_disable+0x3b/0x140 [ 541.417735][T20717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.417774][T20717] ? clear_bhb_loop+0x70/0xc0 [ 541.417798][T20717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.417818][T20717] RIP: 0033:0x7fb42419e159 [ 541.417838][T20717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.417857][T20717] RSP: 002b:00007fb425079028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.417880][T20717] RAX: ffffffffffffffda RBX: 00007fb424425fa0 RCX: 00007fb42419e159 [ 541.417895][T20717] RDX: 000000004400c090 RSI: 0000200000000140 RDI: 0000000000000004 [ 541.417909][T20717] RBP: 00007fb425079090 R08: 0000000000000000 R09: 0000000000000000 [ 541.417923][T20717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.417935][T20717] R13: 00007fb424426038 R14: 00007fb424425fa0 R15: 00007ffdafa3ff98 [ 541.417970][T20717] [ 541.715906][T20688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.763124][T20719] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3317'. [ 541.780201][T20721] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3317'. [ 542.921332][T20740] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3324'. [ 542.989118][T20742] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3325'. [ 542.989147][T20742] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3325'. [ 543.029929][T20744] Bluetooth: MGMT ver 1.23 [ 543.496729][T20749] FAULT_INJECTION: forcing a failure. [ 543.496729][T20749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.496766][T20749] CPU: 1 UID: 0 PID: 20749 Comm: syz.6.3328 Not tainted syzkaller #0 PREEMPT(full) [ 543.496789][T20749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 543.496801][T20749] Call Trace: [ 543.496809][T20749] [ 543.496818][T20749] dump_stack_lvl+0xe8/0x150 [ 543.496854][T20749] should_fail_ex+0x410/0x560 [ 543.496882][T20749] _copy_from_iter+0x1d3/0x1660 [ 543.496906][T20749] ? __alloc_skb+0x27a/0x7a0 [ 543.496942][T20749] ? __alloc_skb+0x27a/0x7a0 [ 543.496966][T20749] ? __alloc_skb+0x27a/0x7a0 [ 543.496989][T20749] ? __pfx__copy_from_iter+0x10/0x10 [ 543.497010][T20749] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 543.497038][T20749] ? __alloc_skb+0x27a/0x7a0 [ 543.497057][T20749] ? __alloc_skb+0x27a/0x7a0 [ 543.497085][T20749] ? netlink_sendmsg+0x650/0xb40 [ 543.497103][T20749] ? skb_put+0x112/0x210 [ 543.497132][T20749] netlink_sendmsg+0x6c0/0xb40 [ 543.497163][T20749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.497193][T20749] ? apparmor_socket_sendmsg+0x98/0x360 [ 543.497216][T20749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.497231][T20749] sock_sendmsg_nosec+0x14e/0x190 [ 543.497250][T20749] ____sys_sendmsg+0x54e/0x850 [ 543.497276][T20749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.497304][T20749] ? import_iovec+0x73/0xa0 [ 543.497327][T20749] ___sys_sendmsg+0x2a5/0x360 [ 543.497346][T20749] ? __lock_acquire+0x747/0x2de0 [ 543.497366][T20749] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.497418][T20749] ? __fget_files+0x2a/0x420 [ 543.497438][T20749] ? __fget_files+0x3a2/0x420 [ 543.497467][T20749] __x64_sys_sendmsg+0x1b1/0x290 [ 543.497490][T20749] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 543.497529][T20749] do_syscall_64+0x166/0x520 [ 543.497553][T20749] ? trace_irq_disable+0x3b/0x140 [ 543.497569][T20749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.497584][T20749] ? clear_bhb_loop+0x70/0xc0 [ 543.497604][T20749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.497618][T20749] RIP: 0033:0x7f5e75f9e159 [ 543.497634][T20749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.497648][T20749] RSP: 002b:00007f5e76f51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.497666][T20749] RAX: ffffffffffffffda RBX: 00007f5e76225fa0 RCX: 00007f5e75f9e159 [ 543.497678][T20749] RDX: 000000004400c090 RSI: 0000200000000140 RDI: 0000000000000004 [ 543.497688][T20749] RBP: 00007f5e76f51090 R08: 0000000000000000 R09: 0000000000000000 [ 543.497698][T20749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.497707][T20749] R13: 00007f5e76226038 R14: 00007f5e76225fa0 R15: 00007ffea8df09b8 [ 543.497733][T20749] [ 544.151347][T20766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3333'. [ 544.151375][T20766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.152351][T20766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.580191][T20770] netlink: 292 bytes leftover after parsing attributes in process `syz.6.3335'. [ 545.058645][T20785] FAULT_INJECTION: forcing a failure. [ 545.058645][T20785] name failslab, interval 1, probability 0, space 0, times 0 [ 545.058680][T20785] CPU: 1 UID: 0 PID: 20785 Comm: syz.3.3341 Not tainted syzkaller #0 PREEMPT(full) [ 545.058703][T20785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 545.058716][T20785] Call Trace: [ 545.058724][T20785] [ 545.058733][T20785] dump_stack_lvl+0xe8/0x150 [ 545.058767][T20785] should_fail_ex+0x410/0x560 [ 545.058802][T20785] should_failslab+0xa8/0x100 [ 545.058828][T20785] ? skb_clone+0x212/0x3a0 [ 545.058857][T20785] kmem_cache_alloc_noprof+0xa1/0x600 [ 545.058892][T20785] ? skb_clone+0x212/0x3a0 [ 545.058928][T20785] skb_clone+0x212/0x3a0 [ 545.058961][T20785] __netlink_deliver_tap+0x355/0x6e0 [ 545.058996][T20785] ? netlink_deliver_tap+0x2e/0x1b0 [ 545.059019][T20785] netlink_deliver_tap+0x19c/0x1b0 [ 545.059042][T20785] netlink_unicast+0x781/0x940 [ 545.059087][T20785] netlink_sendmsg+0x813/0xb40 [ 545.059119][T20785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.059149][T20785] ? apparmor_socket_sendmsg+0x98/0x360 [ 545.059177][T20785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.059195][T20785] sock_sendmsg_nosec+0x14e/0x190 [ 545.059220][T20785] ____sys_sendmsg+0x54e/0x850 [ 545.059264][T20785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 545.059302][T20785] ? import_iovec+0x73/0xa0 [ 545.059334][T20785] ___sys_sendmsg+0x2a5/0x360 [ 545.059360][T20785] ? __lock_acquire+0x747/0x2de0 [ 545.059387][T20785] ? __pfx____sys_sendmsg+0x10/0x10 [ 545.059458][T20785] ? __fget_files+0x2a/0x420 [ 545.059485][T20785] ? __fget_files+0x3a2/0x420 [ 545.059526][T20785] __x64_sys_sendmsg+0x1b1/0x290 [ 545.059557][T20785] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 545.059611][T20785] do_syscall_64+0x166/0x520 [ 545.059641][T20785] ? trace_irq_disable+0x3b/0x140 [ 545.059662][T20785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.059683][T20785] ? clear_bhb_loop+0x70/0xc0 [ 545.059709][T20785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.059730][T20785] RIP: 0033:0x7fbc7df9e159 [ 545.059750][T20785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.059766][T20785] RSP: 002b:00007fbc7ee2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.059790][T20785] RAX: ffffffffffffffda RBX: 00007fbc7e225fa0 RCX: 00007fbc7df9e159 [ 545.059805][T20785] RDX: 000000004400c090 RSI: 0000200000000140 RDI: 0000000000000004 [ 545.059818][T20785] RBP: 00007fbc7ee2e090 R08: 0000000000000000 R09: 0000000000000000 [ 545.059832][T20785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.059844][T20785] R13: 00007fbc7e226038 R14: 00007fbc7e225fa0 R15: 00007fff95691d28 [ 545.059881][T20785] [ 545.180821][T20782] 8021q: adding VLAN 0 to HW filter on device bond5 [ 545.997678][T20814] netlink: 'syz.5.3347': attribute type 1 has an invalid length. [ 545.997701][T20814] __nla_validate_parse: 1 callbacks suppressed [ 545.997713][T20814] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3347'. [ 546.144888][T20823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3349'. [ 546.473625][T20829] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 546.497307][T20829] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3351'. [ 546.497338][T20829] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3351'. [ 546.746290][T20838] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3357'. [ 546.757534][T20838] openvswitch: netlink: Key 6 has unexpected len 20 expected 2 [ 546.777720][T20838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3357'. [ 546.936656][ T13] IPVS: starting estimator thread 0... [ 547.027267][T20848] IPVS: using max 24 ests per chain, 57600 per kthread [ 548.150629][T20883] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3367'. [ 548.280657][T20890] netlink: 'syz.0.3370': attribute type 1 has an invalid length. [ 548.301769][T20890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3370'. [ 548.415680][T20898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3369'. [ 548.503489][T20898] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 548.517479][T20898] gretap0: entered promiscuous mode [ 548.522797][T20898] debugfs: 'hsr1' already exists in 'hsr' [ 548.522823][T20898] Cannot create hsr debugfs directory [ 548.524868][T20898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3369'. [ 548.746260][T20881] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.899478][T20909] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 548.901956][T18144] IPVS: starting estimator thread 0... [ 548.915478][T20907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.988176][T20918] IPVS: using max 27 ests per chain, 64800 per kthread [ 549.169179][T20919] macvtap0: entered promiscuous mode [ 549.176505][T20922] netlink: 'syz.3.3374': attribute type 3 has an invalid length. [ 549.218190][T20930] netlink: 'syz.1.3377': attribute type 1 has an invalid length. [ 549.282060][T20933] netlink: 'syz.5.3376': attribute type 1 has an invalid length. [ 549.503695][T20933] 8021q: adding VLAN 0 to HW filter on device bond6 [ 549.525129][T20926] dummy0: left promiscuous mode [ 549.553722][T20942] netlink: 'syz.5.3376': attribute type 10 has an invalid length. [ 549.555123][T20926] bond6: (slave dummy0): Enslaving as an active interface with a down link [ 549.561154][T20942] dummy0: entered promiscuous mode [ 549.587849][T20942] bond6: (slave dummy0): Releasing active interface [ 549.841132][T20955] vlan2: entered allmulticast mode [ 549.841157][T20955] bond0: entered allmulticast mode [ 549.841171][T20955] bond_slave_0: entered allmulticast mode [ 549.841188][T20955] bond_slave_1: entered allmulticast mode [ 549.890415][T20955] netlink: 'syz.0.3382': attribute type 2 has an invalid length. [ 549.917867][T20963] sctp: [Deprecated]: syz.5.3384 (pid 20963) Use of int in max_burst socket option. [ 549.917867][T20963] Use struct sctp_assoc_value instead [ 551.933883][T20968] __nla_validate_parse: 8 callbacks suppressed [ 551.933907][T20968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3385'. [ 552.379154][T20999] netlink: 'syz.0.3392': attribute type 1 has an invalid length. [ 552.665710][T21017] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3400'. [ 552.665890][T21017] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3400'. [ 552.778819][T21018] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3398'. [ 552.778852][T21018] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 552.794268][T21018] sctp: [Deprecated]: syz.6.3398 (pid 21018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 552.794268][T21018] Use struct sctp_sack_info instead [ 552.884557][T21028] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3402'. [ 553.518638][T21061] netlink: 'syz.1.3408': attribute type 1 has an invalid length. [ 553.777575][T21061] 8021q: adding VLAN 0 to HW filter on device bond2 [ 553.826817][T21051] bond2: (slave macvlan0): Enslaving as a backup interface with an up link [ 553.851699][T21077] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3412'. [ 554.006143][ T4933] Bluetooth: hci6: SCO packet too small [ 554.164586][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3415'. [ 554.164614][T21093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3415'. [ 554.306165][T21087] bond1 (unregistering): Released all slaves [ 554.386281][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3415'. [ 554.386308][T21093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3415'. [ 554.418254][T21101] netlink: 'syz.5.3418': attribute type 6 has an invalid length. [ 554.418292][T21101] netlink: 'syz.5.3418': attribute type 5 has an invalid length. [ 554.418458][T21101] netlink: 'syz.5.3418': attribute type 6 has an invalid length. [ 554.418473][T21101] netlink: 'syz.5.3418': attribute type 5 has an invalid length. [ 554.418600][T21101] netlink: 'syz.5.3418': attribute type 6 has an invalid length. [ 554.418613][T21101] netlink: 'syz.5.3418': attribute type 5 has an invalid length. [ 554.418736][T21101] netlink: 'syz.5.3418': attribute type 6 has an invalid length. [ 554.418758][T21101] netlink: 'syz.5.3418': attribute type 5 has an invalid length. [ 554.879055][T21113] ip6erspan0: entered allmulticast mode [ 554.881491][ T59] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.881543][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.881580][ T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.881617][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.953307][T21121] x_tables: duplicate entry at hook 2 [ 555.128817][ T4933] Bluetooth: hci5: command 0x0406 tx timeout [ 555.228527][T21124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 555.571516][T21153] bond7: entered promiscuous mode [ 555.572093][T21153] 8021q: adding VLAN 0 to HW filter on device bond7 [ 555.605208][T21147] 8021q: adding VLAN 0 to HW filter on device bond7 [ 555.616338][T21147] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 555.616364][T21147] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 555.637426][T21147] bond7: (slave xfrm1): making interface the new active one [ 555.637451][T21147] xfrm1: entered promiscuous mode [ 555.650671][T21147] bond7: (slave xfrm1): Enslaving as an active interface with an up link [ 555.951411][T21169] 8021q: adding VLAN 0 to HW filter on device bond8 [ 556.041778][T21170] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 556.068317][T21169] bond8 (unregistering): (slave geneve2): Releasing backup interface [ 556.072804][T21169] bond8 (unregistering): Released all slaves [ 556.317985][T21184] hsr_slave_0: left promiscuous mode [ 556.324872][T21184] hsr_slave_1: left promiscuous mode [ 556.768414][T21203] FAULT_INJECTION: forcing a failure. [ 556.768414][T21203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.768468][T21203] CPU: 0 UID: 0 PID: 21203 Comm: syz.5.3446 Not tainted syzkaller #0 PREEMPT(full) [ 556.768490][T21203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 556.768511][T21203] Call Trace: [ 556.768520][T21203] [ 556.768529][T21203] dump_stack_lvl+0xe8/0x150 [ 556.768565][T21203] should_fail_ex+0x410/0x560 [ 556.768597][T21203] _copy_to_user+0x31/0xb0 [ 556.768640][T21203] simple_read_from_buffer+0xe1/0x170 [ 556.768675][T21203] proc_fail_nth_read+0x1bb/0x230 [ 556.768732][T21203] ? common_file_perm+0x20e/0x2b0 [ 556.768760][T21203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 556.768784][T21203] ? rw_verify_area+0x24a/0x4c0 [ 556.768825][T21203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 556.768845][T21203] vfs_read+0x213/0xa80 [ 556.768880][T21203] ? __pfx___mutex_lock+0x10/0x10 [ 556.768978][T21203] ? __pfx_vfs_read+0x10/0x10 [ 556.769010][T21203] ? __fget_files+0x2a/0x420 [ 556.769044][T21203] ? __fget_files+0x3a2/0x420 [ 556.769069][T21203] ? __fget_files+0x2a/0x420 [ 556.769104][T21203] ksys_read+0x150/0x270 [ 556.769135][T21203] ? __pfx_ksys_read+0x10/0x10 [ 556.769179][T21203] do_syscall_64+0x166/0x520 [ 556.769206][T21203] ? trace_irq_disable+0x3b/0x140 [ 556.769226][T21203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.769247][T21203] ? clear_bhb_loop+0x70/0xc0 [ 556.769272][T21203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.769293][T21203] RIP: 0033:0x7f83a895e98e [ 556.769312][T21203] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 556.769334][T21203] RSP: 002b:00007f83a985afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 556.769357][T21203] RAX: ffffffffffffffda RBX: 00007f83a985b6c0 RCX: 00007f83a895e98e [ 556.769372][T21203] RDX: 000000000000000f RSI: 00007f83a985b0a0 RDI: 0000000000000007 [ 556.769385][T21203] RBP: 00007f83a985b090 R08: 0000000000000000 R09: 0000000000000000 [ 556.769398][T21203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 556.769410][T21203] R13: 00007f83a8c26038 R14: 00007f83a8c25fa0 R15: 00007ffdf8b5d5b8 [ 556.769445][T21203] [ 557.192516][T21221] xt_CT: No such helper "netbios-ns" [ 557.228279][T21227] __nla_validate_parse: 48 callbacks suppressed [ 557.228301][T21227] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3451'. [ 557.232521][T21227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3451'. [ 557.858188][T21259] x_tables: duplicate underflow at hook 2 [ 557.939886][T21261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3461'. [ 557.940218][T21261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3461'. [ 558.056271][T21269] validate_nla: 25 callbacks suppressed [ 558.056296][T21269] netlink: 'syz.0.3464': attribute type 2 has an invalid length. [ 558.056312][T21269] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3464'. [ 558.245171][T21276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.632390][T21295] netlink: 'syz.0.3470': attribute type 1 has an invalid length. [ 558.632415][T21295] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3470'. [ 558.634288][T21295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3470'. [ 558.724005][T21295] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.724276][T21295] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.099229][T21309] netlink: 'syz.5.3474': attribute type 1 has an invalid length. [ 559.235041][T21318] FAULT_INJECTION: forcing a failure. [ 559.235041][T21318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.235078][T21318] CPU: 1 UID: 0 PID: 21318 Comm: syz.3.3473 Not tainted syzkaller #0 PREEMPT(full) [ 559.235101][T21318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 559.235113][T21318] Call Trace: [ 559.235121][T21318] [ 559.235129][T21318] dump_stack_lvl+0xe8/0x150 [ 559.235163][T21318] should_fail_ex+0x410/0x560 [ 559.235192][T21318] _copy_from_iter+0x1d3/0x1660 [ 559.235226][T21318] ? __lock_acquire+0x747/0x2de0 [ 559.235248][T21318] ? __pfx__copy_from_iter+0x10/0x10 [ 559.235288][T21318] tun_get_user+0x26b/0x44d0 [ 559.235441][T21318] ? aa_file_perm+0x18b/0x15f0 [ 559.235475][T21318] ? aa_file_perm+0x4ed/0x15f0 [ 559.235501][T21318] ? __pfx_tun_get_user+0x10/0x10 [ 559.235525][T21318] ? __lock_acquire+0x747/0x2de0 [ 559.235547][T21318] ? kstrtoull+0x137/0x1d0 [ 559.235576][T21318] ? ref_tracker_alloc+0x172/0x530 [ 559.235630][T21318] ? lock_acquire+0x115/0x350 [ 559.235652][T21318] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 559.235679][T21318] ? lock_acquire+0x115/0x350 [ 559.235699][T21318] ? tun_get+0x1c/0x2f0 [ 559.235724][T21318] ? tun_get+0x1c/0x2f0 [ 559.235756][T21318] ? tun_get+0x1c/0x2f0 [ 559.235780][T21318] tun_chr_write_iter+0x113/0x200 [ 559.235804][T21318] vfs_write+0x612/0xba0 [ 559.235842][T21318] ? __pfx_vfs_write+0x10/0x10 [ 559.235887][T21318] ? __fget_files+0x2a/0x420 [ 559.235925][T21318] ksys_write+0x150/0x270 [ 559.235957][T21318] ? __pfx_ksys_write+0x10/0x10 [ 559.235996][T21318] do_syscall_64+0x166/0x520 [ 559.236024][T21318] ? trace_irq_disable+0x3b/0x140 [ 559.236044][T21318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.236064][T21318] ? clear_bhb_loop+0x70/0xc0 [ 559.236089][T21318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.236109][T21318] RIP: 0033:0x7fbc7df9e159 [ 559.236129][T21318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.236145][T21318] RSP: 002b:00007fbc7ee0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 559.236168][T21318] RAX: ffffffffffffffda RBX: 00007fbc7e226090 RCX: 00007fbc7df9e159 [ 559.236184][T21318] RDX: 0000000000000fce RSI: 0000200000001280 RDI: 0000000000000003 [ 559.236197][T21318] RBP: 00007fbc7ee0d090 R08: 0000000000000000 R09: 0000000000000000 [ 559.236210][T21318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.236221][T21318] R13: 00007fbc7e226128 R14: 00007fbc7e226090 R15: 00007fff95691d28 [ 559.236254][T21318] [ 559.240810][T21317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3475'. [ 559.343986][T21309] bond8: entered promiscuous mode [ 559.345041][T21309] 8021q: adding VLAN 0 to HW filter on device bond8 [ 559.599675][T21324] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3475'. [ 560.150592][T21344] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3478'. [ 560.182662][T21348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.252659][T21348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.024193][T21378] nbd2: detected capacity change from 0 to 63 [ 561.024386][T21376] gretap0: entered promiscuous mode [ 561.078339][T21376] syzkaller0: entered promiscuous mode [ 561.078364][T21376] syzkaller0: entered allmulticast mode [ 561.247631][ T5632] block nbd2: Receive control failed (result -104) [ 561.723920][T21400] syzkaller1: entered promiscuous mode [ 561.723946][T21400] syzkaller1: entered allmulticast mode [ 561.761546][T21400] xt_hashlimit: overflow, try lower: 0/0 [ 561.775146][T21400] netlink: 'syz.0.3498': attribute type 12 has an invalid length. [ 561.775173][T21400] netlink: 'syz.0.3498': attribute type 29 has an invalid length. [ 562.378324][T21437] wg2 speed is unknown, defaulting to 1000 [ 562.659926][T21444] __nla_validate_parse: 10 callbacks suppressed [ 562.659951][T21444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3510'. [ 564.292611][T21476] netlink: 'syz.5.3521': attribute type 46 has an invalid length. [ 564.315757][T21476] netlink: 'syz.5.3521': attribute type 21 has an invalid length. [ 564.315784][T21476] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3521'. [ 564.315870][T21476] netlink: 'syz.5.3521': attribute type 4 has an invalid length. [ 564.315885][T21476] netlink: 'syz.5.3521': attribute type 3 has an invalid length. [ 564.315898][T21476] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3521'. [ 564.638323][T21486] netlink: 'syz.3.3526': attribute type 1 has an invalid length. [ 564.638350][T21486] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3526'. [ 564.638366][T21486] NCSI netlink: No device for ifindex 0 [ 564.857108][T21478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3523'. [ 565.016025][T21497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3530'. [ 565.033713][T21497] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3530'. [ 565.088932][T21503] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3530'. [ 565.218940][T21518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3532'. [ 565.221515][T21518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3532'. [ 565.399984][T21524] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 565.552383][T21530] nbd: couldn't find device at index 1 [ 566.023564][T21559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.770460][ T4933] Bluetooth: hci0: command 0x0c24 tx timeout [ 567.770667][ T5632] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 567.783986][ T26] block nbd2: Connection timed out, retrying (0/1 alive) [ 567.784808][ T26] block nbd2: Connection timed out, retrying (0/1 alive) [ 567.784864][ T26] block nbd2: Connection timed out, retrying (0/1 alive) [ 567.786299][ T26] block nbd2: Connection timed out, retrying (0/1 alive) [ 567.786617][ T26] block nbd2: Dead connection, failed to find a fallback [ 567.786636][ T26] block nbd2: shutting down sockets [ 567.786716][ T26] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.786806][ T26] Buffer I/O error on dev nbd2, logical block 3, async page read [ 567.805915][ T26] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.805955][ T26] Buffer I/O error on dev nbd2, logical block 2, async page read [ 567.805981][ T26] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.806005][ T26] Buffer I/O error on dev nbd2, logical block 1, async page read [ 567.806027][ T26] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.806050][ T26] Buffer I/O error on dev nbd2, logical block 0, async page read [ 567.828829][ T26] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.828883][ T26] Buffer I/O error on dev nbd2, logical block 0, async page read [ 567.831031][ T1970] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.831059][ T1970] Buffer I/O error on dev nbd2, logical block 1, async page read [ 567.831214][ T1970] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.831237][ T1970] Buffer I/O error on dev nbd2, logical block 2, async page read [ 567.831330][ T1970] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.831352][ T1970] Buffer I/O error on dev nbd2, logical block 3, async page read [ 567.831739][ T1970] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.831763][ T1970] Buffer I/O error on dev nbd2, logical block 0, async page read [ 567.831875][ T1970] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.831898][ T1970] Buffer I/O error on dev nbd2, logical block 1, async page read [ 567.833789][T17034] ldm_validate_partition_table(): Disk read failed. [ 567.835218][T17034] Dev nbd2: unable to read RDB block 0 [ 567.842804][T17034] nbd2: unable to read partition table [ 567.975842][T17034] ldm_validate_partition_table(): Disk read failed. [ 567.978963][T17034] Dev nbd2: unable to read RDB block 0 [ 567.982191][T17034] nbd2: unable to read partition table [ 568.251126][T21546] tipc: Enabling of bearer rejected, failed to enable media [ 568.415438][T21581] veth0: entered promiscuous mode [ 568.461002][T21584] __nla_validate_parse: 2 callbacks suppressed [ 568.461026][T21584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3542'. [ 568.579731][T21578] veth0: left promiscuous mode [ 568.633962][T21590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3543'. [ 568.676149][T21601] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 568.939710][T21615] FAULT_INJECTION: forcing a failure. [ 568.939710][T21615] name failslab, interval 1, probability 0, space 0, times 0 [ 568.939746][T21615] CPU: 0 UID: 0 PID: 21615 Comm: syz.6.3549 Not tainted syzkaller #0 PREEMPT(full) [ 568.939769][T21615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 568.939781][T21615] Call Trace: [ 568.939789][T21615] [ 568.939798][T21615] dump_stack_lvl+0xe8/0x150 [ 568.939834][T21615] should_fail_ex+0x410/0x560 [ 568.939864][T21615] should_failslab+0xa8/0x100 [ 568.939892][T21615] __kmalloc_cache_node_noprof+0xaa/0x620 [ 568.939916][T21615] ? __get_vm_area_node+0x155/0x2f0 [ 568.939972][T21615] ? __get_vm_area_node+0x155/0x2f0 [ 568.940010][T21615] __get_vm_area_node+0x155/0x2f0 [ 568.940042][T21615] __vmalloc_node_range_noprof+0x343/0x1540 [ 568.940070][T21615] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 568.940104][T21615] ? __lock_acquire+0x747/0x2de0 [ 568.940150][T21615] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 568.940190][T21615] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 568.940210][T21615] __vmalloc_noprof+0xd2/0x120 [ 568.940248][T21615] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 568.940275][T21615] bpf_prog_alloc_no_stats+0x47/0x560 [ 568.940296][T21615] ? bpf_prog_alloc+0x2a/0x1a0 [ 568.940321][T21615] bpf_prog_alloc+0x3c/0x1a0 [ 568.940347][T21615] bpf_prog_load+0x7f8/0x1c20 [ 568.940397][T21615] ? __pfx_bpf_prog_load+0x10/0x10 [ 568.940446][T21615] __sys_bpf+0xd0d/0xd90 [ 568.940478][T21615] ? __pfx___sys_bpf+0x10/0x10 [ 568.940514][T21615] ? __fget_files+0x2a/0x420 [ 568.940563][T21615] ? ksys_write+0x242/0x270 [ 568.940596][T21615] ? __pfx_ksys_write+0x10/0x10 [ 568.940633][T21615] __x64_sys_bpf+0xba/0xd0 [ 568.940658][T21615] do_syscall_64+0x166/0x520 [ 568.940687][T21615] ? trace_irq_disable+0x3b/0x140 [ 568.940707][T21615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.940729][T21615] ? clear_bhb_loop+0x70/0xc0 [ 568.940753][T21615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.940773][T21615] RIP: 0033:0x7f5e75f9e159 [ 568.940793][T21615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.940811][T21615] RSP: 002b:00007f5e76f51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 568.940835][T21615] RAX: ffffffffffffffda RBX: 00007f5e76225fa0 RCX: 00007f5e75f9e159 [ 568.940850][T21615] RDX: 0000000000000094 RSI: 0000200000000cc0 RDI: 0000000000000005 [ 568.940864][T21615] RBP: 00007f5e76f51090 R08: 0000000000000000 R09: 0000000000000000 [ 568.940877][T21615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.940889][T21615] R13: 00007f5e76226038 R14: 00007f5e76225fa0 R15: 00007ffea8df09b8 [ 568.940923][T21615] [ 568.941215][T21615] syz.6.3549: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 568.941303][T21615] CPU: 0 UID: 0 PID: 21615 Comm: syz.6.3549 Not tainted syzkaller #0 PREEMPT(full) [ 568.941325][T21615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 568.941337][T21615] Call Trace: [ 568.941345][T21615] [ 568.941354][T21615] dump_stack_lvl+0xe8/0x150 [ 568.941385][T21615] warn_alloc+0x24d/0x270 [ 568.941406][T21615] ? __kasan_kmalloc+0x22/0xb0 [ 568.941433][T21615] ? __pfx_warn_alloc+0x10/0x10 [ 568.941453][T21615] ? __get_vm_area_node+0x155/0x2f0 [ 568.941489][T21615] ? __get_vm_area_node+0x2a9/0x2f0 [ 568.941527][T21615] __vmalloc_node_range_noprof+0x36b/0x1540 [ 568.941558][T21615] ? __lock_acquire+0x747/0x2de0 [ 568.941608][T21615] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 568.941649][T21615] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 568.941672][T21615] __vmalloc_noprof+0xd2/0x120 [ 568.941701][T21615] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 568.941728][T21615] bpf_prog_alloc_no_stats+0x47/0x560 [ 568.941748][T21615] ? bpf_prog_alloc+0x2a/0x1a0 [ 568.941774][T21615] bpf_prog_alloc+0x3c/0x1a0 [ 568.941801][T21615] bpf_prog_load+0x7f8/0x1c20 [ 568.941840][T21615] ? __pfx_bpf_prog_load+0x10/0x10 [ 568.941892][T21615] __sys_bpf+0xd0d/0xd90 [ 568.941923][T21615] ? __pfx___sys_bpf+0x10/0x10 [ 568.941955][T21615] ? __fget_files+0x2a/0x420 [ 568.941999][T21615] ? ksys_write+0x242/0x270 [ 568.942030][T21615] ? __pfx_ksys_write+0x10/0x10 [ 568.942067][T21615] __x64_sys_bpf+0xba/0xd0 [ 568.942091][T21615] do_syscall_64+0x166/0x520 [ 568.942117][T21615] ? trace_irq_disable+0x3b/0x140 [ 568.942136][T21615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.942155][T21615] ? clear_bhb_loop+0x70/0xc0 [ 568.942178][T21615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.942198][T21615] RIP: 0033:0x7f5e75f9e159 [ 568.942216][T21615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.942231][T21615] RSP: 002b:00007f5e76f51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 568.942261][T21615] RAX: ffffffffffffffda RBX: 00007f5e76225fa0 RCX: 00007f5e75f9e159 [ 568.942275][T21615] RDX: 0000000000000094 RSI: 0000200000000cc0 RDI: 0000000000000005 [ 568.942288][T21615] RBP: 00007f5e76f51090 R08: 0000000000000000 R09: 0000000000000000 [ 568.942299][T21615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.942311][T21615] R13: 00007f5e76226038 R14: 00007f5e76225fa0 R15: 00007ffea8df09b8 [ 568.942345][T21615] [ 568.942458][T21615] Mem-Info: [ 568.942469][T21615] active_anon:7781 inactive_anon:0 isolated_anon:0 [ 568.942469][T21615] active_file:41 inactive_file:43660 isolated_file:0 [ 568.942469][T21615] unevictable:0 dirty:247 writeback:0 [ 568.942469][T21615] slab_reclaimable:12890 slab_unreclaimable:118365 [ 568.942469][T21615] mapped:41418 shmem:2079 pagetables:3514 [ 568.942469][T21615] sec_pagetables:0 bounce:0 [ 568.942469][T21615] kernel_misc_reclaimable:0 [ 568.942469][T21615] free:1278311 free_pcp:6458 free_cma:0 [ 568.942520][T21615] Node 0 active_anon:31124kB inactive_anon:0kB active_file:164kB inactive_file:174436kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165672kB dirty:988kB writeback:0kB shmem:8316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17340kB pagetables:13984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 568.942575][T21615] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:72kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 568.942626][T21615] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 568.942700][T21615] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 568.942739][T21615] Node 0 DMA32 free:1147244kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31124kB inactive_anon:0kB active_file:164kB inactive_file:174436kB unevictable:0kB writepending:988kB zspages:0kB present:3129332kB managed:2547104kB mlocked:0kB bounce:0kB free_pcp:25832kB local_pcp:10084kB free_cma:0kB [ 568.942798][T21615] lowmem_reserve[]: 0 0 0 0 0 [ 568.942835][T21615] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 568.942889][T21615] lowmem_reserve[]: 0 0 0 0 0 [ 568.942926][T21615] Node 1 Normal free:3950640kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 568.942984][T21615] lowmem_reserve[]: 0 0 0 0 0 [ 568.943021][T21615] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 568.943144][T21615] Node 0 DMA32: 1620*4kB (UME) 1008*8kB (UM) 481*16kB (UME) 280*32kB (UME) 219*64kB (UME) 244*128kB (UME) 327*256kB (UME) 240*512kB (UME) 190*1024kB (UM) 7*2048kB (UME) 160*4096kB (UM) = 1147296kB [ 568.943325][T21615] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 568.943582][T21615] Node 1 Normal: 4*4kB (UM) 2*8kB (UM) 5*16kB (UM) 8*32kB (UM) 11*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 963*4096kB (UM) = 3950640kB [ 568.943744][T21615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 568.943761][T21615] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 568.943777][T21615] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 568.943793][T21615] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 568.943809][T21615] 45776 total pagecache pages [ 568.943818][T21615] 0 pages in swap cache [ 568.943825][T21615] Free swap = 124996kB [ 568.943833][T21615] Total swap = 124996kB [ 568.943842][T21615] 2097051 pages RAM [ 568.943849][T21615] 0 pages HighMem/MovableOnly [ 568.943857][T21615] 428659 pages reserved [ 568.943864][T21615] 0 pages cma reserved [ 570.000315][T21630] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3552'. [ 570.122852][T21632] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 570.329745][ T26] block nbd0: Possible stuck request ffff888027490000: control (read@0,1024B). Runtime 150 seconds [ 570.329812][ T26] block nbd0: Possible stuck request ffff8880274901c0: control (read@1024,1024B). Runtime 150 seconds [ 570.329842][ T26] block nbd0: Possible stuck request ffff888027490380: control (read@2048,1024B). Runtime 150 seconds [ 570.329865][ T26] block nbd0: Possible stuck request ffff888027490540: control (read@3072,1024B). Runtime 150 seconds [ 570.464877][T21635] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3553'. [ 570.465204][T21635] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3553'. [ 570.465440][T21635] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3553'. [ 570.465657][T21635] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3553'. [ 570.465866][T21635] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3553'. [ 570.466101][T21635] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3553'. [ 570.467785][T21634] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3553'. [ 570.678894][T21643] netlink: 'syz.1.3556': attribute type 10 has an invalid length. [ 570.791526][T21651] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 570.914192][T21654] netlink: 'syz.3.3557': attribute type 1 has an invalid length. [ 570.993745][T21654] 8021q: adding VLAN 0 to HW filter on device bond6 [ 571.265319][T21667] FAULT_INJECTION: forcing a failure. [ 571.265319][T21667] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 571.265354][T21667] CPU: 0 UID: 0 PID: 21667 Comm: syz.0.3561 Not tainted syzkaller #0 PREEMPT(full) [ 571.265378][T21667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 571.265390][T21667] Call Trace: [ 571.265399][T21667] [ 571.265408][T21667] dump_stack_lvl+0xe8/0x150 [ 571.265443][T21667] should_fail_ex+0x410/0x560 [ 571.265474][T21667] prepare_alloc_pages+0x223/0x600 [ 571.265505][T21667] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 571.265534][T21667] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 571.265562][T21667] ? __pfx_policy_nodemask+0x10/0x10 [ 571.265585][T21667] ? __get_vm_area_node+0x155/0x2f0 [ 571.265610][T21667] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 571.265637][T21667] ? __vmalloc_noprof+0xd2/0x120 [ 571.265663][T21667] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 571.265686][T21667] ? bpf_prog_alloc+0x3c/0x1a0 [ 571.265708][T21667] ? __sys_bpf+0xd0d/0xd90 [ 571.265727][T21667] ? __x64_sys_bpf+0xba/0xd0 [ 571.265745][T21667] ? do_syscall_64+0x166/0x520 [ 571.265773][T21667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.265800][T21667] alloc_pages_mpol+0x21e/0x390 [ 571.265833][T21667] alloc_pages_noprof+0xb1/0x2b0 [ 571.265863][T21667] get_free_pages_noprof+0xf/0x80 [ 571.265896][T21667] __kasan_populate_vmalloc+0x38/0x1c0 [ 571.265917][T21667] ? do_raw_spin_unlock+0xf5/0x200 [ 571.265951][T21667] alloc_vmap_area+0xd1a/0x1420 [ 571.265998][T21667] ? __pfx_alloc_vmap_area+0x10/0x10 [ 571.266024][T21667] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 571.266047][T21667] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 571.266067][T21667] ? __get_vm_area_node+0x155/0x2f0 [ 571.266103][T21667] __get_vm_area_node+0x200/0x2f0 [ 571.266139][T21667] __vmalloc_node_range_noprof+0x343/0x1540 [ 571.266169][T21667] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 571.266192][T21667] ? __lock_acquire+0x747/0x2de0 [ 571.266246][T21667] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 571.266287][T21667] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 571.266305][T21667] __vmalloc_noprof+0xd2/0x120 [ 571.266334][T21667] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 571.266360][T21667] bpf_prog_alloc_no_stats+0x47/0x560 [ 571.266380][T21667] ? bpf_prog_alloc+0x2a/0x1a0 [ 571.266405][T21667] bpf_prog_alloc+0x3c/0x1a0 [ 571.266431][T21667] bpf_prog_load+0x7f8/0x1c20 [ 571.266468][T21667] ? __pfx_bpf_prog_load+0x10/0x10 [ 571.266521][T21667] __sys_bpf+0xd0d/0xd90 [ 571.266554][T21667] ? __pfx___sys_bpf+0x10/0x10 [ 571.266588][T21667] ? __fget_files+0x2a/0x420 [ 571.266635][T21667] ? ksys_write+0x242/0x270 [ 571.266667][T21667] ? __pfx_ksys_write+0x10/0x10 [ 571.266701][T21667] __x64_sys_bpf+0xba/0xd0 [ 571.266724][T21667] do_syscall_64+0x166/0x520 [ 571.266748][T21667] ? trace_irq_disable+0x3b/0x140 [ 571.266767][T21667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.266788][T21667] ? clear_bhb_loop+0x70/0xc0 [ 571.266813][T21667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.266868][T21667] RIP: 0033:0x7fc342b9e159 [ 571.266888][T21667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.266906][T21667] RSP: 002b:00007fc3439b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 571.266927][T21667] RAX: ffffffffffffffda RBX: 00007fc342e25fa0 RCX: 00007fc342b9e159 [ 571.266941][T21667] RDX: 0000000000000094 RSI: 0000200000000cc0 RDI: 0000000000000005 [ 571.266953][T21667] RBP: 00007fc3439b8090 R08: 0000000000000000 R09: 0000000000000000 [ 571.266965][T21667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.266977][T21667] R13: 00007fc342e26038 R14: 00007fc342e25fa0 R15: 00007ffd13289cf8 [ 571.267008][T21667] [ 572.039069][T21700] netlink: 'syz.0.3570': attribute type 1 has an invalid length. [ 572.142746][T21700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 572.181800][T21704] openvswitch: netlink: Invalid VLAN frame [ 572.298066][T21709] hsr_slave_0: left promiscuous mode [ 572.304176][T21709] hsr_slave_1: left promiscuous mode [ 572.349915][T21713] FAULT_INJECTION: forcing a failure. [ 572.349915][T21713] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 572.349951][T21713] CPU: 0 UID: 0 PID: 21713 Comm: syz.3.3575 Not tainted syzkaller #0 PREEMPT(full) [ 572.349975][T21713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 572.349987][T21713] Call Trace: [ 572.349995][T21713] [ 572.350004][T21713] dump_stack_lvl+0xe8/0x150 [ 572.350040][T21713] should_fail_ex+0x410/0x560 [ 572.350069][T21713] prepare_alloc_pages+0x223/0x600 [ 572.350100][T21713] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 572.350127][T21713] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 572.350149][T21713] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 572.350175][T21713] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 572.350201][T21713] ? __pfx_policy_nodemask+0x10/0x10 [ 572.350225][T21713] ? __get_vm_area_node+0x155/0x2f0 [ 572.350249][T21713] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 572.350276][T21713] ? __vmalloc_noprof+0xd2/0x120 [ 572.350314][T21713] __alloc_pages_noprof+0x10/0x100 [ 572.350337][T21713] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 572.350369][T21713] ? alloc_pages_noprof+0x140/0x2b0 [ 572.350400][T21713] __kasan_populate_vmalloc+0xb7/0x1c0 [ 572.350428][T21713] alloc_vmap_area+0xd1a/0x1420 [ 572.350474][T21713] ? __pfx_alloc_vmap_area+0x10/0x10 [ 572.350497][T21713] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 572.350520][T21713] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 572.350540][T21713] ? __get_vm_area_node+0x155/0x2f0 [ 572.350574][T21713] __get_vm_area_node+0x200/0x2f0 [ 572.350608][T21713] __vmalloc_node_range_noprof+0x343/0x1540 [ 572.350635][T21713] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 572.350656][T21713] ? __lock_acquire+0x747/0x2de0 [ 572.350703][T21713] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 572.350740][T21713] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 572.350765][T21713] __vmalloc_noprof+0xd2/0x120 [ 572.350790][T21713] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 572.350815][T21713] bpf_prog_alloc_no_stats+0x47/0x560 [ 572.350835][T21713] ? bpf_prog_alloc+0x2a/0x1a0 [ 572.350857][T21713] bpf_prog_alloc+0x3c/0x1a0 [ 572.350881][T21713] bpf_prog_load+0x7f8/0x1c20 [ 572.350918][T21713] ? __pfx_bpf_prog_load+0x10/0x10 [ 572.350966][T21713] __sys_bpf+0xd0d/0xd90 [ 572.350997][T21713] ? __pfx___sys_bpf+0x10/0x10 [ 572.351032][T21713] ? __fget_files+0x2a/0x420 [ 572.351076][T21713] ? ksys_write+0x242/0x270 [ 572.351105][T21713] ? __pfx_ksys_write+0x10/0x10 [ 572.351137][T21713] __x64_sys_bpf+0xba/0xd0 [ 572.351161][T21713] do_syscall_64+0x166/0x520 [ 572.351188][T21713] ? trace_irq_disable+0x3b/0x140 [ 572.351207][T21713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.351226][T21713] ? clear_bhb_loop+0x70/0xc0 [ 572.351251][T21713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.351270][T21713] RIP: 0033:0x7fbc7df9e159 [ 572.351299][T21713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.351315][T21713] RSP: 002b:00007fbc7ee2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 572.351339][T21713] RAX: ffffffffffffffda RBX: 00007fbc7e225fa0 RCX: 00007fbc7df9e159 [ 572.351353][T21713] RDX: 0000000000000094 RSI: 0000200000000cc0 RDI: 0000000000000005 [ 572.351365][T21713] RBP: 00007fbc7ee2e090 R08: 0000000000000000 R09: 0000000000000000 [ 572.351378][T21713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.351390][T21713] R13: 00007fbc7e226038 R14: 00007fbc7e225fa0 R15: 00007fff95691d28 [ 572.351423][T21713] [ 572.796280][T21730] netlink: 'syz.5.3579': attribute type 10 has an invalid length. [ 572.924296][ T5632] Bluetooth: hci7: link tx timeout [ 572.924319][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.934255][ T5632] Bluetooth: hci7: link tx timeout [ 572.934275][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.936415][ T5632] Bluetooth: hci7: link tx timeout [ 572.936431][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.936447][ T5632] Bluetooth: hci7: link tx timeout [ 572.936456][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.936683][ T5632] Bluetooth: hci7: link tx timeout [ 572.936694][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.936707][ T5632] Bluetooth: hci7: link tx timeout [ 572.936716][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.937467][ T5632] Bluetooth: hci7: link tx timeout [ 572.937479][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.937493][ T5632] Bluetooth: hci7: link tx timeout [ 572.937502][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.937919][ T5632] Bluetooth: hci7: link tx timeout [ 572.937930][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.937943][ T5632] Bluetooth: hci7: link tx timeout [ 572.937952][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.938775][ T5632] Bluetooth: hci7: link tx timeout [ 572.938786][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.938799][ T5632] Bluetooth: hci7: link tx timeout [ 572.938808][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.938904][ T5632] Bluetooth: hci7: link tx timeout [ 572.938914][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.938927][ T5632] Bluetooth: hci7: link tx timeout [ 572.938936][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.939029][ T5632] Bluetooth: hci7: link tx timeout [ 572.939039][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.939052][ T5632] Bluetooth: hci7: link tx timeout [ 572.939060][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.939155][ T5632] Bluetooth: hci7: link tx timeout [ 572.939165][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.939178][ T5632] Bluetooth: hci7: link tx timeout [ 572.939187][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.941357][ T5632] Bluetooth: hci7: link tx timeout [ 572.941373][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.941388][ T5632] Bluetooth: hci7: link tx timeout [ 572.941396][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.942630][ T5632] Bluetooth: hci7: link tx timeout [ 572.942645][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.942660][ T5632] Bluetooth: hci7: link tx timeout [ 572.942678][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.942789][ T5632] Bluetooth: hci7: link tx timeout [ 572.942801][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.942814][ T5632] Bluetooth: hci7: link tx timeout [ 572.942824][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.942933][ T5632] Bluetooth: hci7: link tx timeout [ 572.942945][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.942959][ T5632] Bluetooth: hci7: link tx timeout [ 572.942968][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.943112][ T5632] Bluetooth: hci7: link tx timeout [ 572.943124][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.943137][ T5632] Bluetooth: hci7: link tx timeout [ 572.943147][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.943259][ T5632] Bluetooth: hci7: link tx timeout [ 572.943270][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.943284][ T5632] Bluetooth: hci7: link tx timeout [ 572.943293][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.943414][ T5632] Bluetooth: hci7: link tx timeout [ 572.943425][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.943437][ T5632] Bluetooth: hci7: link tx timeout [ 572.943446][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.943553][ T5632] Bluetooth: hci7: link tx timeout [ 572.943564][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.943579][ T5632] Bluetooth: hci7: link tx timeout [ 572.943588][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.943720][ T5632] Bluetooth: hci7: link tx timeout [ 572.943731][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.943745][ T5632] Bluetooth: hci7: link tx timeout [ 572.943755][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.944976][ T5632] Bluetooth: hci7: link tx timeout [ 572.945001][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.945015][ T5632] Bluetooth: hci7: link tx timeout [ 572.945024][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.945186][ T5632] Bluetooth: hci7: link tx timeout [ 572.945223][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.945236][ T5632] Bluetooth: hci7: link tx timeout [ 572.945246][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.945346][ T5632] Bluetooth: hci7: link tx timeout [ 572.945356][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.945369][ T5632] Bluetooth: hci7: link tx timeout [ 572.945378][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.945474][ T5632] Bluetooth: hci7: link tx timeout [ 572.945485][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.945497][ T5632] Bluetooth: hci7: link tx timeout [ 572.945506][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.945598][ T5632] Bluetooth: hci7: link tx timeout [ 572.945608][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.945620][ T5632] Bluetooth: hci7: link tx timeout [ 572.945629][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.945730][ T5632] Bluetooth: hci7: link tx timeout [ 572.945740][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.945752][ T5632] Bluetooth: hci7: link tx timeout [ 572.945761][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.946260][ T5632] Bluetooth: hci7: link tx timeout [ 572.946271][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.946284][ T5632] Bluetooth: hci7: link tx timeout [ 572.946293][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.947053][ T5632] Bluetooth: hci7: link tx timeout [ 572.947064][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.947077][ T5632] Bluetooth: hci7: link tx timeout [ 572.947085][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.947183][ T5632] Bluetooth: hci7: link tx timeout [ 572.947193][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.947206][ T5632] Bluetooth: hci7: link tx timeout [ 572.947215][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.947409][ T5632] Bluetooth: hci7: link tx timeout [ 572.947420][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.947433][ T5632] Bluetooth: hci7: link tx timeout [ 572.947442][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.948175][ T5632] Bluetooth: hci7: link tx timeout [ 572.948186][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.948198][ T5632] Bluetooth: hci7: link tx timeout [ 572.948207][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.948318][ T5632] Bluetooth: hci7: link tx timeout [ 572.948394][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.948408][ T5632] Bluetooth: hci7: link tx timeout [ 572.948416][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.948976][ T5632] Bluetooth: hci7: link tx timeout [ 572.948987][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.949000][ T5632] Bluetooth: hci7: link tx timeout [ 572.949009][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.949108][ T5632] Bluetooth: hci7: link tx timeout [ 572.949119][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.949131][ T5632] Bluetooth: hci7: link tx timeout [ 572.949139][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.949594][ T5632] Bluetooth: hci7: link tx timeout [ 572.949607][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.949620][ T5632] Bluetooth: hci7: link tx timeout [ 572.949630][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.950697][ T5632] Bluetooth: hci7: link tx timeout [ 572.950710][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.950723][ T5632] Bluetooth: hci7: link tx timeout [ 572.950732][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.950861][ T5632] Bluetooth: hci7: link tx timeout [ 572.950872][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.950885][ T5632] Bluetooth: hci7: link tx timeout [ 572.950893][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.950991][ T5632] Bluetooth: hci7: link tx timeout [ 572.951000][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.951013][ T5632] Bluetooth: hci7: link tx timeout [ 572.951022][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.951740][ T5632] Bluetooth: hci7: link tx timeout [ 572.951751][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.951764][ T5632] Bluetooth: hci7: link tx timeout [ 572.951773][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.951952][ T5632] Bluetooth: hci7: link tx timeout [ 572.951963][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.951975][ T5632] Bluetooth: hci7: link tx timeout [ 572.951984][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.953318][ T5632] Bluetooth: hci7: link tx timeout [ 572.953329][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.953342][ T5632] Bluetooth: hci7: link tx timeout [ 572.953351][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.954985][ T5632] Bluetooth: hci7: link tx timeout [ 572.954997][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.955010][ T5632] Bluetooth: hci7: link tx timeout [ 572.955019][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.960370][ T5632] Bluetooth: hci7: link tx timeout [ 572.960386][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.960400][ T5632] Bluetooth: hci7: link tx timeout [ 572.960409][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.960989][ T5632] Bluetooth: hci7: link tx timeout [ 572.961001][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.961014][ T5632] Bluetooth: hci7: link tx timeout [ 572.961023][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.963030][ T5632] Bluetooth: hci7: link tx timeout [ 572.963041][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.963054][ T5632] Bluetooth: hci7: link tx timeout [ 572.963063][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.964652][ T5632] Bluetooth: hci7: link tx timeout [ 572.964674][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.964687][ T5632] Bluetooth: hci7: link tx timeout [ 572.964696][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.964800][ T5632] Bluetooth: hci7: link tx timeout [ 572.964810][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.964823][ T5632] Bluetooth: hci7: link tx timeout [ 572.964832][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.964927][ T5632] Bluetooth: hci7: link tx timeout [ 572.964938][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.964950][ T5632] Bluetooth: hci7: link tx timeout [ 572.964959][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.965167][ T5632] Bluetooth: hci7: link tx timeout [ 572.965178][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.965191][ T5632] Bluetooth: hci7: link tx timeout [ 572.965200][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.965298][ T5632] Bluetooth: hci7: link tx timeout [ 572.965308][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.965321][ T5632] Bluetooth: hci7: link tx timeout [ 572.965329][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.965429][ T5632] Bluetooth: hci7: link tx timeout [ 572.965439][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.965451][ T5632] Bluetooth: hci7: link tx timeout [ 572.965460][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.965960][ T5632] Bluetooth: hci7: link tx timeout [ 572.965971][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.965984][ T5632] Bluetooth: hci7: link tx timeout [ 572.965993][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.969064][ T5632] Bluetooth: hci7: link tx timeout [ 572.969076][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.969089][ T5632] Bluetooth: hci7: link tx timeout [ 572.969098][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.975887][ T5632] Bluetooth: hci7: link tx timeout [ 572.975903][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 572.975918][ T5632] Bluetooth: hci7: link tx timeout [ 572.975927][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 573.012604][ T5632] Bluetooth: hci7: link tx timeout [ 573.012625][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 573.012642][ T5632] Bluetooth: hci7: link tx timeout [ 573.012652][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 573.035077][ T5632] Bluetooth: hci7: link tx timeout [ 573.035097][ T5632] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 573.035113][ T5632] Bluetooth: hci7: link tx timeout [ 573.035122][ T5632] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 574.069468][T21735] syzkaller0: entered promiscuous mode [ 574.069492][T21735] syzkaller0: entered allmulticast mode [ 574.465553][T21761] __nla_validate_parse: 22 callbacks suppressed [ 574.465575][T21761] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3585'. [ 574.972937][ T5632] Bluetooth: hci7: command 0x0406 tx timeout [ 577.048406][ T5632] Bluetooth: hci7: command 0x0406 tx timeout [ 578.635503][T21768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3587'. [ 578.635535][T21768] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 578.879632][T21782] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3589'. [ 579.191209][T21798] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 579.191253][T21798] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 579.191290][T21798] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 579.551020][T21812] ip6t_rt: unknown flags 1F [ 579.697648][T21791] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 579.742086][T21824] syzkaller1: entered promiscuous mode [ 579.742114][T21824] syzkaller1: entered allmulticast mode [ 579.802521][T21823] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3602'. [ 580.083515][T21832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3606'. [ 580.116328][T21832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3606'. [ 580.492512][T21851] IPVS: set_ctl: invalid protocol: 103 100.1.1.1:20004 [ 581.025896][T21882] netlink: 'syz.0.3618': attribute type 32 has an invalid length. [ 581.120833][T21887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3621'. [ 581.120860][T21887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3621'. [ 581.127240][ T4933] Bluetooth: hci0: command 0x0c24 tx timeout [ 581.485977][T21908] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3626'. [ 581.770153][ T30] audit: type=1107 audit(1790986718.632:17): pid=21916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='V±ü‡©aÍ (À’Ë4Áö(¡‚â;Ý| ÇEK#>åteY³£º’' [ 582.515563][T21932] batadv_slave_1: entered promiscuous mode [ 582.516561][T21932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3633'. [ 582.605289][T21932] batadv_slave_1 (unregistering): left promiscuous mode [ 583.001063][T21952] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3642'. [ 583.056118][T21949] syzkaller0: entered promiscuous mode [ 583.056145][T21949] syzkaller0: entered allmulticast mode [ 583.104889][T21954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3643'. [ 583.131548][T21954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3643'. [ 583.473728][T21973] v: renamed from erspan0 (while UP) [ 583.483926][T21973] v: entered allmulticast mode [ 583.484502][T21973] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 583.521078][T21974] netlink: 'syz.3.3650': attribute type 29 has an invalid length. [ 583.522661][T21974] netlink: 'syz.3.3650': attribute type 29 has an invalid length. [ 583.920852][T21981] tipc: Enabling of bearer rejected, failed to enable media [ 584.047050][T21989] netlink: 'syz.1.3656': attribute type 1 has an invalid length. [ 584.081690][T21989] bond4: entered promiscuous mode [ 584.082155][T21989] 8021q: adding VLAN 0 to HW filter on device bond4 [ 584.125920][T21989] 8021q: adding VLAN 0 to HW filter on device bond4 [ 584.126324][T21989] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 584.126345][T21989] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 584.182608][T21989] bond4: (slave xfrm1): making interface the new active one [ 584.182632][T21989] xfrm1: entered promiscuous mode [ 584.184263][T21989] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 584.213977][T22003] netlink: 'syz.5.3657': attribute type 4 has an invalid length. [ 584.396169][T22010] ip_tables: iptables: counters copy to user failed while replacing table [ 584.549265][T22018] tls_set_device_offload_rx: netdev not found [ 584.630187][T22018] netlink: 'syz.1.3662': attribute type 29 has an invalid length. [ 586.031431][T22057] syzkaller0: entered promiscuous mode [ 586.031528][T22057] syzkaller0: entered allmulticast mode [ 586.336585][T22062] __nla_validate_parse: 14 callbacks suppressed [ 586.336610][T22062] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3669'. [ 586.444760][T22064] macvtap1: entered allmulticast mode [ 586.444783][T22064] veth0_to_bridge: entered allmulticast mode [ 586.451069][T22064] veth0_to_bridge: left allmulticast mode [ 586.693314][T22081] x_tables: duplicate underflow at hook 2 [ 586.794188][T22088] openvswitch: netlink: Geneve opt len 65 is not a multiple of 4. [ 586.851006][T22085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3677'. [ 586.928827][T22081] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 586.929321][T22081] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 586.929865][T22081] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 586.930328][T22081] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 586.930958][T22081] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 586.931457][T22081] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 586.931983][T22081] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 587.066490][T22092] xt_l2tp: missing protocol rule (udp|l2tpip) [ 587.087614][T22094] FAULT_INJECTION: forcing a failure. [ 587.087614][T22094] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 587.087648][T22094] CPU: 0 UID: 0 PID: 22094 Comm: syz.5.3679 Not tainted syzkaller #0 PREEMPT(full) [ 587.087664][T22094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 587.087676][T22094] Call Trace: [ 587.087683][T22094] [ 587.087692][T22094] dump_stack_lvl+0xe8/0x150 [ 587.087726][T22094] should_fail_ex+0x410/0x560 [ 587.087756][T22094] prepare_alloc_pages+0x223/0x600 [ 587.087780][T22094] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 587.087796][T22094] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 587.087808][T22094] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 587.087823][T22094] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 587.087838][T22094] ? __pfx_policy_nodemask+0x10/0x10 [ 587.087852][T22094] ? __get_vm_area_node+0x155/0x2f0 [ 587.087867][T22094] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 587.087887][T22094] ? __vmalloc_noprof+0xd2/0x120 [ 587.087906][T22094] __alloc_pages_noprof+0x10/0x100 [ 587.087919][T22094] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 587.087937][T22094] ? alloc_pages_noprof+0x140/0x2b0 [ 587.087955][T22094] __kasan_populate_vmalloc+0xb7/0x1c0 [ 587.087971][T22094] alloc_vmap_area+0xd1a/0x1420 [ 587.087996][T22094] ? __pfx_alloc_vmap_area+0x10/0x10 [ 587.088011][T22094] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 587.088024][T22094] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 587.088035][T22094] ? __get_vm_area_node+0x155/0x2f0 [ 587.088055][T22094] __get_vm_area_node+0x200/0x2f0 [ 587.088076][T22094] __vmalloc_node_range_noprof+0x343/0x1540 [ 587.088093][T22094] ? bpf_check+0x115d/0x2ef0 [ 587.088124][T22094] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 587.088144][T22094] ? __kasan_kmalloc+0x93/0xb0 [ 587.088158][T22094] ? __kmalloc_cache_noprof+0x321/0x600 [ 587.088170][T22094] ? __kmalloc_cache_noprof+0x14d/0x600 [ 587.088181][T22094] ? bpf_diag_init+0x87/0x140 [ 587.088193][T22094] ? bpf_diag_init+0x87/0x140 [ 587.088208][T22094] ? bpf_check+0x115d/0x2ef0 [ 587.088219][T22094] __vmalloc_noprof+0xd2/0x120 [ 587.088236][T22094] ? bpf_check+0x115d/0x2ef0 [ 587.088251][T22094] bpf_check+0x115d/0x2ef0 [ 587.088274][T22094] ? __pfx_bpf_check+0x10/0x10 [ 587.088289][T22094] ? bpf_obj_name_cpy+0x194/0x1e0 [ 587.088309][T22094] bpf_prog_load+0x14d6/0x1c20 [ 587.088330][T22094] ? __pfx_bpf_prog_load+0x10/0x10 [ 587.088359][T22094] __sys_bpf+0xd0d/0xd90 [ 587.088377][T22094] ? __pfx___sys_bpf+0x10/0x10 [ 587.088398][T22094] ? __fget_files+0x2a/0x420 [ 587.088431][T22094] ? ksys_write+0x242/0x270 [ 587.088463][T22094] ? __pfx_ksys_write+0x10/0x10 [ 587.088498][T22094] __x64_sys_bpf+0xba/0xd0 [ 587.088517][T22094] do_syscall_64+0x166/0x520 [ 587.088535][T22094] ? trace_irq_disable+0x3b/0x140 [ 587.088546][T22094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.088558][T22094] ? clear_bhb_loop+0x70/0xc0 [ 587.088572][T22094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.088584][T22094] RIP: 0033:0x7f83a899e159 [ 587.088596][T22094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.088607][T22094] RSP: 002b:00007f83a985b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 587.088621][T22094] RAX: ffffffffffffffda RBX: 00007f83a8c25fa0 RCX: 00007f83a899e159 [ 587.088636][T22094] RDX: 0000000000000094 RSI: 0000200000000cc0 RDI: 0000000000000005 [ 587.088645][T22094] RBP: 00007f83a985b090 R08: 0000000000000000 R09: 0000000000000000 [ 587.088652][T22094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.088660][T22094] R13: 00007f83a8c26038 R14: 00007f83a8c25fa0 R15: 00007ffdf8b5d5b8 [ 587.088679][T22094] [ 587.088719][T22094] warn_alloc: 2 callbacks suppressed [ 587.088727][T22094] syz.5.3679: vmalloc error: size 408, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 587.088778][T22094] CPU: 0 UID: 0 PID: 22094 Comm: syz.5.3679 Not tainted syzkaller #0 PREEMPT(full) [ 587.088798][T22094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 587.088810][T22094] Call Trace: [ 587.088817][T22094] [ 587.088825][T22094] dump_stack_lvl+0xe8/0x150 [ 587.088853][T22094] warn_alloc+0x24d/0x270 [ 587.088870][T22094] ? lockdep_hardirqs_on+0x7b/0x110 [ 587.088889][T22094] ? __pfx_warn_alloc+0x10/0x10 [ 587.088900][T22094] ? kfree+0x1c5/0x650 [ 587.088920][T22094] ? __get_vm_area_node+0x219/0x2f0 [ 587.088945][T22094] __vmalloc_node_range_noprof+0x36b/0x1540 [ 587.088979][T22094] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 587.088996][T22094] ? __kasan_kmalloc+0x93/0xb0 [ 587.089010][T22094] ? __kmalloc_cache_noprof+0x321/0x600 [ 587.089022][T22094] ? __kmalloc_cache_noprof+0x14d/0x600 [ 587.089033][T22094] ? bpf_diag_init+0x87/0x140 [ 587.089045][T22094] ? bpf_diag_init+0x87/0x140 [ 587.089060][T22094] ? bpf_check+0x115d/0x2ef0 [ 587.089071][T22094] __vmalloc_noprof+0xd2/0x120 [ 587.089088][T22094] ? bpf_check+0x115d/0x2ef0 [ 587.089102][T22094] bpf_check+0x115d/0x2ef0 [ 587.089126][T22094] ? __pfx_bpf_check+0x10/0x10 [ 587.089143][T22094] ? bpf_obj_name_cpy+0x194/0x1e0 [ 587.089161][T22094] bpf_prog_load+0x14d6/0x1c20 [ 587.089183][T22094] ? __pfx_bpf_prog_load+0x10/0x10 [ 587.089211][T22094] __sys_bpf+0xd0d/0xd90 [ 587.089230][T22094] ? __pfx___sys_bpf+0x10/0x10 [ 587.089250][T22094] ? __fget_files+0x2a/0x420 [ 587.089276][T22094] ? ksys_write+0x242/0x270 [ 587.089294][T22094] ? __pfx_ksys_write+0x10/0x10 [ 587.089315][T22094] __x64_sys_bpf+0xba/0xd0 [ 587.089329][T22094] do_syscall_64+0x166/0x520 [ 587.089344][T22094] ? trace_irq_disable+0x3b/0x140 [ 587.089356][T22094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.089367][T22094] ? clear_bhb_loop+0x70/0xc0 [ 587.089381][T22094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.089392][T22094] RIP: 0033:0x7f83a899e159 [ 587.089403][T22094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.089413][T22094] RSP: 002b:00007f83a985b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 587.089425][T22094] RAX: ffffffffffffffda RBX: 00007f83a8c25fa0 RCX: 00007f83a899e159 [ 587.089434][T22094] RDX: 0000000000000094 RSI: 0000200000000cc0 RDI: 0000000000000005 [ 587.089441][T22094] RBP: 00007f83a985b090 R08: 0000000000000000 R09: 0000000000000000 [ 587.089448][T22094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.089455][T22094] R13: 00007f83a8c26038 R14: 00007f83a8c25fa0 R15: 00007ffdf8b5d5b8 [ 587.089474][T22094] [ 587.089498][T22094] Mem-Info: [ 587.089504][T22094] active_anon:6410 inactive_anon:0 isolated_anon:0 [ 587.089504][T22094] active_file:41 inactive_file:43668 isolated_file:0 [ 587.089504][T22094] unevictable:0 dirty:218 writeback:0 [ 587.089504][T22094] slab_reclaimable:12813 slab_unreclaimable:120546 [ 587.089504][T22094] mapped:40072 shmem:629 pagetables:3504 [ 587.089504][T22094] sec_pagetables:0 bounce:0 [ 587.089504][T22094] kernel_misc_reclaimable:0 [ 587.089504][T22094] free:1273095 free_pcp:11799 free_cma:0 [ 587.089540][T22094] Node 0 active_anon:25640kB inactive_anon:0kB active_file:164kB inactive_file:174468kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160288kB dirty:872kB writeback:0kB shmem:2516kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17436kB pagetables:13944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 587.089592][T22094] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:72kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 587.089629][T22094] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 587.089680][T22094] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 587.089703][T22094] Node 0 DMA32 free:1126380kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25640kB inactive_anon:0kB active_file:164kB inactive_file:174468kB unevictable:0kB writepending:872kB zspages:0kB present:3129332kB managed:2547104kB mlocked:0kB bounce:0kB free_pcp:47196kB local_pcp:22028kB free_cma:0kB [ 587.089738][T22094] lowmem_reserve[]: 0 0 0 0 0 [ 587.089759][T22094] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 587.089790][T22094] lowmem_reserve[]: 0 0 0 0 0 [ 587.089811][T22094] Node 1 Normal free:3950640kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 587.089844][T22094] lowmem_reserve[]: 0 0 0 0 0 [ 587.089865][T22094] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 587.089968][T22094] Node 0 DMA32: 2007*4kB (UME) 744*8kB (UM) 199*16kB (UME) 273*32kB (UME) 198*64kB (UME) 248*128kB (UME) 327*256kB (UME) 239*512kB (UME) 190*1024kB (UM) 4*2048kB (UME) 158*4096kB (UM) = 1126316kB [ 587.090068][T22094] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 587.090127][T22094] Node 1 Normal: 4*4kB (UM) 2*8kB (UM) 5*16kB (UM) 8*32kB (UM) 11*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 963*4096kB (UM) = 3950640kB [ 587.090222][T22094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 587.090232][T22094] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 587.090242][T22094] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 587.090251][T22094] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 587.090261][T22094] 44334 total pagecache pages [ 587.090265][T22094] 0 pages in swap cache [ 587.090270][T22094] Free swap = 124996kB [ 587.090274][T22094] Total swap = 124996kB [ 587.090279][T22094] 2097051 pages RAM [ 587.090284][T22094] 0 pages HighMem/MovableOnly [ 587.090288][T22094] 428659 pages reserved [ 587.090292][T22094] 0 pages cma reserved [ 587.493245][T22101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3680'. [ 587.521733][T22104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3683'. [ 587.521760][T22104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3683'. [ 587.803609][T22111] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3682'. [ 587.836709][T22101] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.159278][T22101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.181862][T22101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.439373][T22102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.458576][ T9373] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.458894][ T59] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.458934][ T59] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.458971][ T59] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.745172][T22127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3689'. [ 588.745199][T22127] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3689'. [ 588.898529][T22127] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3689'. [ 588.898555][T22127] net_ratelimit: 10 callbacks suppressed [ 588.898566][T22127] openvswitch: netlink: Flow key attr not present in new flow. [ 588.944428][T22134] nbd1: detected capacity change from 0 to 63 [ 588.953250][T22134] block nbd1: NBD_DISCONNECT [ 588.964338][T22134] block nbd1: Disconnected due to user request. [ 588.965339][T22134] block nbd1: shutting down sockets [ 588.976744][ T1970] blk_print_req_error: 138 callbacks suppressed [ 588.976766][ T1970] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.976798][ T1970] buffer_io_error: 138 callbacks suppressed [ 588.976809][ T1970] Buffer I/O error on dev nbd1, logical block 3, async page read [ 589.026352][T22138] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3690'. [ 589.046054][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 589.046171][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 589.066963][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 589.067054][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 589.067126][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 589.067194][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 589.067602][ T1970] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 589.067632][ T1970] Buffer I/O error on dev nbd1, logical block 0, async page read [ 589.067649][ T1970] Buffer I/O error on dev nbd1, logical block 1, async page read [ 589.067665][ T1970] Buffer I/O error on dev nbd1, logical block 2, async page read [ 589.067681][ T1970] Buffer I/O error on dev nbd1, logical block 3, async page read [ 589.069534][ T1970] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 589.069566][ T1970] Buffer I/O error on dev nbd1, logical block 0, async page read [ 589.069584][ T1970] Buffer I/O error on dev nbd1, logical block 1, async page read [ 589.069760][ T1970] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 589.069937][ T1970] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 589.070144][ T1970] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 589.070340][ T1970] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 589.070554][T17034] ldm_validate_partition_table(): Disk read failed. [ 589.071199][T17034] Dev nbd1: unable to read RDB block 0 [ 589.072038][T17034] nbd1: unable to read partition table [ 589.127597][T17034] ldm_validate_partition_table(): Disk read failed. [ 589.130855][T17034] Dev nbd1: unable to read RDB block 0 [ 589.169322][T17034] nbd1: unable to read partition table [ 589.292095][T22146] batman_adv: batadv0: Adding interface: syzkaller0 [ 589.292117][T22146] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.292276][T22146] batman_adv: batadv0: Interface activated: syzkaller0 [ 589.330924][T22145] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 589.394605][T22145] batman_adv: batadv0: Removing interface: syzkaller0 [ 589.432934][ T4933] Bluetooth: hci4: unexpected event 0x0e length: 257 > 255 [ 589.433067][ T4933] Bluetooth: hci4: unexpected event 0x0e length: 257 > 255 [ 589.433172][ T4933] Bluetooth: hci4: unexpected event 0x0e length: 257 > 255 [ 589.433315][ T4933] Bluetooth: hci4: unexpected event 0x0e length: 257 > 255 [ 589.433422][ T4933] Bluetooth: hci4: unexpected event 0x0e length: 257 > 255 [ 589.433527][ T4933] Bluetooth: hci4: unexpected event 0x0e length: 257 > 255 [ 589.433628][ T4933] Bluetooth: hci4: unexpected event 0x0e length: 257 > 255 [ 589.433738][ T4933] Bluetooth: hci4: unexpected event 0x0e length: 257 > 255 [ 589.433838][ T4933] Bluetooth: hci4: unexpected event 0x0e length: 257 > 255 [ 589.433943][ T4933] Bluetooth: hci4: unexpected event 0x0e length: 257 > 255 [ 589.740323][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.255580][T22185] IPVS: Unknown mcast interface: pimreg0 [ 590.467329][T22193] netlink: zone id is out of range [ 590.467383][T22193] netlink: zone id is out of range [ 590.467509][T22193] netlink: zone id is out of range [ 590.467553][T22193] netlink: zone id is out of range [ 590.467563][T22193] netlink: zone id is out of range [ 590.467570][T22193] netlink: zone id is out of range [ 590.467579][T22193] netlink: zone id is out of range [ 590.467587][T22193] netlink: zone id is out of range [ 590.467596][T22193] netlink: zone id is out of range [ 590.592296][T22197] erspan0: entered promiscuous mode [ 590.592870][T22197] erspan0: left promiscuous mode [ 590.979734][ T4933] Bluetooth: hci6: command 0x0406 tx timeout [ 591.093634][T22219] syzkaller0: entered promiscuous mode [ 591.093661][T22219] syzkaller0: entered allmulticast mode [ 591.399173][T22228] __nla_validate_parse: 4 callbacks suppressed [ 591.399198][T22228] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3715'. [ 592.233326][T22257] syzkaller0: entered promiscuous mode [ 592.233354][T22257] syzkaller0: entered allmulticast mode [ 592.268811][T22268] netlink: 'syz.1.3725': attribute type 1 has an invalid length. [ 592.330305][T22257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3723'. [ 592.416748][T22268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3725'. [ 592.796621][T22282] netlink: 'syz.0.3727': attribute type 1 has an invalid length. [ 596.522983][T22276] bond5: (slave geneve2): making interface the new active one [ 596.523672][T22276] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 596.524724][T22282] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 596.558122][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 596.559251][T18144] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 596.559292][T18144] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 596.559362][T18144] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 596.631043][T22289] netlink: 'syz.1.3729': attribute type 1 has an invalid length. [ 596.684347][T22290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3729'. [ 596.684371][T22290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3729'. [ 596.723534][T22289] 8021q: adding VLAN 0 to HW filter on device bond6 [ 596.795152][T22298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3732'. [ 596.842330][T22290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3729'. [ 596.842354][T22290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3729'. [ 596.971549][T22290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3729'. [ 596.971576][T22290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3729'. [ 597.116217][T22290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3729'. [ 597.116242][T22290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3729'. [ 597.274005][T22329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3736'. [ 597.549108][T22333] FAULT_INJECTION: forcing a failure. [ 597.549108][T22333] name failslab, interval 1, probability 0, space 0, times 0 [ 597.549146][T22333] CPU: 0 UID: 0 PID: 22333 Comm: syz.5.3737 Not tainted syzkaller #0 PREEMPT(full) [ 597.549169][T22333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 597.549181][T22333] Call Trace: [ 597.549190][T22333] [ 597.549199][T22333] dump_stack_lvl+0xe8/0x150 [ 597.549231][T22333] should_fail_ex+0x410/0x560 [ 597.549262][T22333] should_failslab+0xa8/0x100 [ 597.549289][T22333] __kmalloc_cache_node_noprof+0xaa/0x620 [ 597.549311][T22333] ? trace_sched_exit_tp+0x3a/0x130 [ 597.549335][T22333] ? __get_vm_area_node+0x155/0x2f0 [ 597.549361][T22333] ? __get_vm_area_node+0x155/0x2f0 [ 597.549396][T22333] __get_vm_area_node+0x155/0x2f0 [ 597.549427][T22333] __vmalloc_node_range_noprof+0x343/0x1540 [ 597.549456][T22333] ? bpf_prog_calc_tag+0x51/0x370 [ 597.549481][T22333] ? __x64_sys_bpf+0xba/0xd0 [ 597.549511][T22333] ? do_syscall_64+0x166/0x520 [ 597.549567][T22333] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 597.549593][T22333] ? irqentry_exit+0x218/0x910 [ 597.549615][T22333] ? trace_irq_disable+0x3b/0x140 [ 597.549644][T22333] ? bpf_prog_calc_tag+0x51/0x370 [ 597.549663][T22333] __vmalloc_noprof+0xd2/0x120 [ 597.549690][T22333] ? bpf_prog_calc_tag+0x51/0x370 [ 597.549716][T22333] bpf_prog_calc_tag+0x51/0x370 [ 597.549745][T22333] check_and_resolve_insns+0xbb/0x21d0 [ 597.549774][T22333] ? add_subprog+0x2e2/0x3f0 [ 597.549801][T22333] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 597.549836][T22333] bpf_check+0x18f9/0x2ef0 [ 597.549880][T22333] ? __pfx_bpf_check+0x10/0x10 [ 597.549904][T22333] ? bpf_obj_name_cpy+0x194/0x1e0 [ 597.549937][T22333] bpf_prog_load+0x14d6/0x1c20 [ 597.549974][T22333] ? __pfx_bpf_prog_load+0x10/0x10 [ 597.550026][T22333] __sys_bpf+0xd0d/0xd90 [ 597.550059][T22333] ? __pfx___sys_bpf+0x10/0x10 [ 597.550095][T22333] ? __fget_files+0x2a/0x420 [ 597.550140][T22333] ? ksys_write+0x242/0x270 [ 597.550172][T22333] ? __pfx_ksys_write+0x10/0x10 [ 597.550208][T22333] __x64_sys_bpf+0xba/0xd0 [ 597.550231][T22333] do_syscall_64+0x166/0x520 [ 597.550257][T22333] ? trace_irq_disable+0x3b/0x140 [ 597.550275][T22333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.550294][T22333] ? clear_bhb_loop+0x70/0xc0 [ 597.550318][T22333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.550338][T22333] RIP: 0033:0x7f83a899e159 [ 597.550357][T22333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.550375][T22333] RSP: 002b:00007f83a985b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 597.550399][T22333] RAX: ffffffffffffffda RBX: 00007f83a8c25fa0 RCX: 00007f83a899e159 [ 597.550414][T22333] RDX: 0000000000000094 RSI: 0000200000000cc0 RDI: 0000000000000005 [ 597.550427][T22333] RBP: 00007f83a985b090 R08: 0000000000000000 R09: 0000000000000000 [ 597.550439][T22333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 597.550451][T22333] R13: 00007f83a8c26038 R14: 00007f83a8c25fa0 R15: 00007ffdf8b5d5b8 [ 597.550486][T22333] [ 597.554905][T22333] syz.5.3737: vmalloc error: size 24, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 597.554972][T22333] CPU: 0 UID: 0 PID: 22333 Comm: syz.5.3737 Not tainted syzkaller #0 PREEMPT(full) [ 597.554992][T22333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 597.555004][T22333] Call Trace: [ 597.555012][T22333] [ 597.555020][T22333] dump_stack_lvl+0xe8/0x150 [ 597.555050][T22333] warn_alloc+0x24d/0x270 [ 597.555069][T22333] ? __kasan_kmalloc+0x22/0xb0 [ 597.555094][T22333] ? __pfx_warn_alloc+0x10/0x10 [ 597.555113][T22333] ? __get_vm_area_node+0x155/0x2f0 [ 597.555148][T22333] ? __get_vm_area_node+0x2a9/0x2f0 [ 597.555185][T22333] __vmalloc_node_range_noprof+0x36b/0x1540 [ 597.555217][T22333] ? __x64_sys_bpf+0xba/0xd0 [ 597.555235][T22333] ? do_syscall_64+0x166/0x520 [ 597.555292][T22333] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 597.555323][T22333] ? irqentry_exit+0x218/0x910 [ 597.555348][T22333] ? trace_irq_disable+0x3b/0x140 [ 597.555378][T22333] ? bpf_prog_calc_tag+0x51/0x370 [ 597.555401][T22333] __vmalloc_noprof+0xd2/0x120 [ 597.555430][T22333] ? bpf_prog_calc_tag+0x51/0x370 [ 597.555457][T22333] bpf_prog_calc_tag+0x51/0x370 [ 597.555487][T22333] check_and_resolve_insns+0xbb/0x21d0 [ 597.555527][T22333] ? add_subprog+0x2e2/0x3f0 [ 597.555554][T22333] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 597.555590][T22333] bpf_check+0x18f9/0x2ef0 [ 597.555635][T22333] ? __pfx_bpf_check+0x10/0x10 [ 597.555660][T22333] ? bpf_obj_name_cpy+0x194/0x1e0 [ 597.555693][T22333] bpf_prog_load+0x14d6/0x1c20 [ 597.555732][T22333] ? __pfx_bpf_prog_load+0x10/0x10 [ 597.555786][T22333] __sys_bpf+0xd0d/0xd90 [ 597.555819][T22333] ? __pfx___sys_bpf+0x10/0x10 [ 597.555855][T22333] ? __fget_files+0x2a/0x420 [ 597.555907][T22333] ? ksys_write+0x242/0x270 [ 597.555939][T22333] ? __pfx_ksys_write+0x10/0x10 [ 597.555973][T22333] __x64_sys_bpf+0xba/0xd0 [ 597.556076][T22333] do_syscall_64+0x166/0x520 [ 597.556120][T22333] ? trace_irq_disable+0x3b/0x140 [ 597.556140][T22333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.556159][T22333] ? clear_bhb_loop+0x70/0xc0 [ 597.556183][T22333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.556200][T22333] RIP: 0033:0x7f83a899e159 [ 597.556219][T22333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.556237][T22333] RSP: 002b:00007f83a985b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 597.556259][T22333] RAX: ffffffffffffffda RBX: 00007f83a8c25fa0 RCX: 00007f83a899e159 [ 597.556274][T22333] RDX: 0000000000000094 RSI: 0000200000000cc0 RDI: 0000000000000005 [ 597.556287][T22333] RBP: 00007f83a985b090 R08: 0000000000000000 R09: 0000000000000000 [ 597.556301][T22333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 597.556313][T22333] R13: 00007f83a8c26038 R14: 00007f83a8c25fa0 R15: 00007ffdf8b5d5b8 [ 597.556359][T22333] [ 597.716136][T22333] Mem-Info: [ 597.716153][T22333] active_anon:6448 inactive_anon:0 isolated_anon:0 [ 597.716153][T22333] active_file:41 inactive_file:43672 isolated_file:0 [ 597.716153][T22333] unevictable:0 dirty:184 writeback:0 [ 597.716153][T22333] slab_reclaimable:12929 slab_unreclaimable:120774 [ 597.716153][T22333] mapped:40061 shmem:579 pagetables:3462 [ 597.716153][T22333] sec_pagetables:0 bounce:0 [ 597.716153][T22333] kernel_misc_reclaimable:0 [ 597.716153][T22333] free:1273406 free_pcp:10276 free_cma:0 [ 597.716208][T22333] Node 0 active_anon:25792kB inactive_anon:0kB active_file:164kB inactive_file:174484kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160244kB dirty:736kB writeback:0kB shmem:2316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17444kB pagetables:13776kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 597.716257][T22333] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:72kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 597.716301][T22333] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 597.716354][T22333] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 597.716389][T22333] Node 0 DMA32 free:1127624kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25792kB inactive_anon:0kB active_file:164kB inactive_file:174484kB unevictable:0kB writepending:736kB zspages:0kB present:3129332kB managed:2547104kB mlocked:0kB bounce:0kB free_pcp:41104kB local_pcp:20044kB free_cma:0kB [ 597.716441][T22333] lowmem_reserve[]: 0 0 0 0 0 [ 597.716473][T22333] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 597.716520][T22333] lowmem_reserve[]: 0 0 0 0 0 [ 597.716551][T22333] Node 1 Normal free:3950640kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 597.716601][T22333] lowmem_reserve[]: 0 0 0 0 0 [ 597.716633][T22333] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 597.716740][T22333] Node 0 DMA32: 1786*4kB (UME) 1346*8kB (UM) 633*16kB (UME) 314*32kB (UME) 133*64kB (UME) 196*128kB (UME) 327*256kB (UME) 239*512kB (UME) 190*1024kB (UM) 4*2048kB (UME) 158*4096kB (UM) = 1127688kB [ 597.746095][T22333] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 597.746198][T22333] Node 1 Normal: 4*4kB (UM) 2*8kB (UM) 5*16kB (UM) 8*32kB (UM) 11*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 963*4096kB (UM) = 3950640kB [ 597.746343][T22333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 597.746359][T22333] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 597.746374][T22333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 597.746388][T22333] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 597.746403][T22333] 44288 total pagecache pages [ 597.746411][T22333] 0 pages in swap cache [ 597.746417][T22333] Free swap = 124996kB [ 597.746425][T22333] Total swap = 124996kB [ 597.746432][T22333] 2097051 pages RAM [ 597.746439][T22333] 0 pages HighMem/MovableOnly [ 597.746446][T22333] 428659 pages reserved [ 597.746452][T22333] 0 pages cma reserved [ 600.411286][ T26] block nbd0: Possible stuck request ffff888027490000: control (read@0,1024B). Runtime 180 seconds [ 600.411334][ T26] block nbd0: Possible stuck request ffff8880274901c0: control (read@1024,1024B). Runtime 180 seconds [ 600.411362][ T26] block nbd0: Possible stuck request ffff888027490380: control (read@2048,1024B). Runtime 180 seconds [ 600.411397][ T26] block nbd0: Possible stuck request ffff888027490540: control (read@3072,1024B). Runtime 180 seconds [ 601.418566][ T4983] udevd[4983]: worker [17003] /devices/virtual/block/nbd0 timeout; kill it [ 601.418667][ T4983] udevd[4983]: seq 20346 '/devices/virtual/block/nbd0' killed [ 606.327622][ T4933] Bluetooth: hci4: command 0x0406 tx timeout [ 624.470490][T22341] __nla_validate_parse: 2 callbacks suppressed [ 624.470512][T22341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3738'. [ 624.470568][T22341] tipc: Enabling of bearer rejected, failed to enable media [ 624.536773][T22344] Bluetooth: hci0: unsupported parameter 5135 [ 624.536798][T22344] Bluetooth: hci0: unsupported parameter 8192 [ 624.549834][T22344] Bluetooth: hci0: unsupported parameter 5135 [ 624.549861][T22344] Bluetooth: hci0: unsupported parameter 8192 [ 624.551157][T22344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3742'. [ 624.552066][T22344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3742'. [ 624.721764][ T4933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 624.752178][T19858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 624.755706][T19858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 624.765119][T19858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 624.773070][T19858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 625.362758][T22346] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 625.363503][T22346] team0: Device ipvlan2 is already an upper device of the team interface [ 626.818539][ T5632] Bluetooth: hci0: command 0x0c24 tx timeout [ 626.887006][ T5632] Bluetooth: hci3: command tx timeout [ 627.494585][T18144] smbdirect: ib_dev[s`z1] removed [ 627.643326][T17874] infiniband s`z1: ib_query_port failed (-19) [ 627.798056][T22368] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3746'. [ 627.979024][T22376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3747'. [ 628.023157][T22381] FAULT_INJECTION: forcing a failure. [ 628.023157][T22381] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 628.023195][T22381] CPU: 1 UID: 0 PID: 22381 Comm: syz.0.3749 Not tainted syzkaller #0 PREEMPT(full) [ 628.023219][T22381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 628.023231][T22381] Call Trace: [ 628.023240][T22381] [ 628.023249][T22381] dump_stack_lvl+0xe8/0x150 [ 628.023283][T22381] should_fail_ex+0x410/0x560 [ 628.023314][T22381] prepare_alloc_pages+0x223/0x600 [ 628.023344][T22381] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 628.023372][T22381] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 628.023400][T22381] ? __pfx_policy_nodemask+0x10/0x10 [ 628.023423][T22381] ? __get_vm_area_node+0x155/0x2f0 [ 628.023449][T22381] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 628.023476][T22381] ? __vmalloc_noprof+0xd2/0x120 [ 628.023502][T22381] ? bpf_prog_calc_tag+0x51/0x370 [ 628.023524][T22381] ? check_and_resolve_insns+0xbb/0x21d0 [ 628.023546][T22381] ? bpf_prog_load+0x14d6/0x1c20 [ 628.023567][T22381] ? __sys_bpf+0xd0d/0xd90 [ 628.023585][T22381] ? __x64_sys_bpf+0xba/0xd0 [ 628.023606][T22381] ? do_syscall_64+0x166/0x520 [ 628.023634][T22381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.023658][T22381] alloc_pages_mpol+0x21e/0x390 [ 628.023688][T22381] alloc_pages_noprof+0xb1/0x2b0 [ 628.023716][T22381] get_free_pages_noprof+0xf/0x80 [ 628.023738][T22381] __kasan_populate_vmalloc+0x38/0x1c0 [ 628.023757][T22381] ? do_raw_spin_unlock+0xf5/0x200 [ 628.023790][T22381] alloc_vmap_area+0xd1a/0x1420 [ 628.023835][T22381] ? __pfx_alloc_vmap_area+0x10/0x10 [ 628.023868][T22381] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 628.023890][T22381] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 628.023910][T22381] ? __get_vm_area_node+0x155/0x2f0 [ 628.023943][T22381] __get_vm_area_node+0x200/0x2f0 [ 628.023979][T22381] __vmalloc_node_range_noprof+0x343/0x1540 [ 628.024009][T22381] ? bpf_prog_calc_tag+0x51/0x370 [ 628.024034][T22381] ? __x64_sys_bpf+0xba/0xd0 [ 628.024051][T22381] ? do_syscall_64+0x166/0x520 [ 628.024083][T22381] ? __kasan_kmalloc+0x93/0xb0 [ 628.024106][T22381] ? bpf_prog_load+0x14d6/0x1c20 [ 628.024126][T22381] ? __sys_bpf+0xd0d/0xd90 [ 628.024143][T22381] ? __x64_sys_bpf+0xba/0xd0 [ 628.024174][T22381] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 628.024214][T22381] ? bpf_prog_calc_tag+0x51/0x370 [ 628.024233][T22381] __vmalloc_noprof+0xd2/0x120 [ 628.024251][T22381] ? bpf_prog_calc_tag+0x51/0x370 [ 628.024266][T22381] bpf_prog_calc_tag+0x51/0x370 [ 628.024280][T22381] ? __pfx_cmp_subprogs+0x10/0x10 [ 628.024296][T22381] check_and_resolve_insns+0xbb/0x21d0 [ 628.024313][T22381] ? add_subprog+0x2e2/0x3f0 [ 628.024328][T22381] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 628.024348][T22381] bpf_check+0x18f9/0x2ef0 [ 628.024375][T22381] ? __pfx_bpf_check+0x10/0x10 [ 628.024398][T22381] ? bpf_obj_name_cpy+0x194/0x1e0 [ 628.024428][T22381] bpf_prog_load+0x14d6/0x1c20 [ 628.024454][T22381] ? __pfx_bpf_prog_load+0x10/0x10 [ 628.024483][T22381] __sys_bpf+0xd0d/0xd90 [ 628.024502][T22381] ? __pfx___sys_bpf+0x10/0x10 [ 628.024522][T22381] ? __fget_files+0x2a/0x420 [ 628.024549][T22381] ? ksys_write+0x242/0x270 [ 628.024568][T22381] ? __pfx_ksys_write+0x10/0x10 [ 628.024588][T22381] __x64_sys_bpf+0xba/0xd0 [ 628.024602][T22381] do_syscall_64+0x166/0x520 [ 628.024618][T22381] ? trace_irq_disable+0x3b/0x140 [ 628.024630][T22381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.024641][T22381] ? clear_bhb_loop+0x70/0xc0 [ 628.024656][T22381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.024667][T22381] RIP: 0033:0x7fc342b9e159 [ 628.024681][T22381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.024692][T22381] RSP: 002b:00007fc3439b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 628.024707][T22381] RAX: ffffffffffffffda RBX: 00007fc342e25fa0 RCX: 00007fc342b9e159 [ 628.024716][T22381] RDX: 0000000000000094 RSI: 0000200000000cc0 RDI: 0000000000000005 [ 628.024724][T22381] RBP: 00007fc3439b8090 R08: 0000000000000000 R09: 0000000000000000 [ 628.024733][T22381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 628.024742][T22381] R13: 00007fc342e26038 R14: 00007fc342e25fa0 R15: 00007ffd13289cf8 [ 628.024761][T22381] [ 628.047213][T22381] syz.0.3749: vmalloc error: size 24, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 628.047280][T22381] CPU: 1 UID: 0 PID: 22381 Comm: syz.0.3749 Not tainted syzkaller #0 PREEMPT(full) [ 628.047300][T22381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 628.047310][T22381] Call Trace: [ 628.047317][T22381] [ 628.047325][T22381] dump_stack_lvl+0xe8/0x150 [ 628.047356][T22381] warn_alloc+0x24d/0x270 [ 628.047377][T22381] ? lockdep_hardirqs_on+0x7b/0x110 [ 628.047405][T22381] ? __pfx_warn_alloc+0x10/0x10 [ 628.047422][T22381] ? kfree+0x1c5/0x650 [ 628.047454][T22381] ? __get_vm_area_node+0x219/0x2f0 [ 628.047486][T22381] __vmalloc_node_range_noprof+0x36b/0x1540 [ 628.047513][T22381] ? __x64_sys_bpf+0xba/0xd0 [ 628.047530][T22381] ? do_syscall_64+0x166/0x520 [ 628.047560][T22381] ? __kasan_kmalloc+0x93/0xb0 [ 628.047580][T22381] ? bpf_prog_load+0x14d6/0x1c20 [ 628.047598][T22381] ? __sys_bpf+0xd0d/0xd90 [ 628.047615][T22381] ? __x64_sys_bpf+0xba/0xd0 [ 628.047646][T22381] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 628.047683][T22381] ? bpf_prog_calc_tag+0x51/0x370 [ 628.047702][T22381] __vmalloc_noprof+0xd2/0x120 [ 628.047728][T22381] ? bpf_prog_calc_tag+0x51/0x370 [ 628.047751][T22381] bpf_prog_calc_tag+0x51/0x370 [ 628.047771][T22381] ? __pfx_cmp_subprogs+0x10/0x10 [ 628.047796][T22381] check_and_resolve_insns+0xbb/0x21d0 [ 628.047821][T22381] ? add_subprog+0x2e2/0x3f0 [ 628.047844][T22381] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 628.047883][T22381] bpf_check+0x18f9/0x2ef0 [ 628.047922][T22381] ? __pfx_bpf_check+0x10/0x10 [ 628.047944][T22381] ? bpf_ob ** replaying previous printk message ** [ 628.047944][T22381] ? bpf_obj_name_cpy+0x194/0x1e0 [ 628.047973][T22381] bpf_prog_load+0x14d6/0x1c20 [ 628.048005][T22381] ? __pfx_bpf_prog_load+0x10/0x10 [ 628.048055][T22381] __sys_bpf+0xd0d/0xd90 [ 628.048084][T22381] ? __pfx___sys_bpf+0x10/0x10 [ 628.048116][T22381] ? __fget_files+0x2a/0x420 [ 628.048157][T22381] ? ksys_write+0x242/0x270 [ 628.048185][T22381] ? __pfx_ksys_write+0x10/0x10 [ 628.048225][T22381] __x64_sys_bpf+0xba/0xd0 [ 628.048247][T22381] do_syscall_64+0x166/0x520 [ 628.048270][T22381] ? trace_irq_disable+0x3b/0x140 [ 628.048288][T22381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.048306][T22381] ? clear_bhb_loop+0x70/0xc0 [ 628.048328][T22381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.048346][T22381] RIP: 0033:0x7fc342b9e159 [ 628.048364][T22381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.048380][T22381] RSP: 002b:00007fc3439b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 628.048399][T22381] RAX: ffffffffffffffda RBX: 00007fc342e25fa0 RCX: 00007fc342b9e159 [ 628.048413][T22381] RDX: 0000000000000094 RSI: 0000200000000cc0 RDI: 0000000000000005 [ 628.048425][T22381] RBP: 00007fc3439b8090 R08: 0000000000000000 R09: 0000000000000000 [ 628.048436][T22381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 628.048447][T22381] R13: 00007fc342e26038 R14: 00007fc342e25fa0 R15: 00007ffd13289cf8 [ 628.048478][T22381] [ 628.053183][T22381] Mem-Info: [ 628.053197][T22381] active_anon:6643 inactive_anon:0 isolated_anon:0 [ 628.053197][T22381] active_file:41 inactive_file:43683 isolated_file:0 [ 628.053197][T22381] unevictable:0 dirty:122 writeback:0 [ 628.053197][T22381] slab_reclaimable:12755 slab_unreclaimable:127119 [ 628.053197][T22381] mapped:45175 shmem:579 pagetables:3505 [ 628.053197][T22381] sec_pagetables:0 bounce:0 [ 628.053197][T22381] kernel_misc_reclaimable:0 [ 628.053197][T22381] free:1258066 free_pcp:7843 free_cma:0 [ 628.053245][T22381] Node 0 active_anon:26572kB inactive_anon:0kB active_file:164kB inactive_file:174528kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180700kB dirty:488kB writeback:0kB shmem:2316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17516kB pagetables:13948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 628.053325][T22381] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:72kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 628.053369][T22381] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 628.053422][T22381] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 628.053457][T22381] Node 0 DMA32 free:1066264kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26572kB inactive_anon:0kB active_file:164kB inactive_file:174528kB unevictable:0kB writepending:488kB zspages:0kB present:3129332kB managed:2547104kB mlocked:0kB bounce:0kB free_pcp:31372kB local_pcp:18604kB free_cma:0kB [ 628.053509][T22381] lowmem_reserve[]: 0 0 0 0 0 [ 628.053540][T22381] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 628.053587][T22381] lowmem_reserve[]: 0 0 0 0 0 [ 628.053618][T22381] Node 1 Normal free:3950640kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 628.053667][T22381] lowmem_reserve[]: 0 0 0 0 0 [ 628.053699][T22381] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 628.053805][T22381] Node 0 DMA32: 1266*4kB (ME) 1224*8kB (UM) 653*16kB (UME) 198*32kB (UME) 128*64kB (UME) 87*128kB (UME) 328*256kB (UME) 239*512kB (UME) 190*1024kB (UM) 4*2048kB (UME) 148*4096kB (UM) = 1066264kB [ 628.053963][T22381] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 628.054077][T22381] Node 1 Normal: 4*4kB (UM) 2*8kB (UM) 5*16kB (UM) 8*32kB (UM) 11*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 963*4096kB (UM) = 3950640kB [ 628.054218][T22381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 628.054233][T22381] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 628.054248][T22381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 628.054262][T22381] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 628.054276][T22381] 44299 total pagecache pages [ 628.054283][T22381] 0 pages in swap cache [ 628.054290][T22381] Free swap = 124996kB [ 628.054297][T22381] Total swap = 124996kB [ 628.054304][T22381] 2097051 pages RAM [ 628.054310][T22381] 0 pages HighMem/MovableOnly [ 628.054317][T22381] 428659 pages reserved [ 628.054323][T22381] 0 pages cma reserved [ 628.241865][T22376] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 628.241892][T22376] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 628.608747][ T31] INFO: task syz.2.3005:19044 blocked for more than 143 seconds. [ 628.608776][ T31] Not tainted syzkaller #0 [ 628.608786][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 628.608796][ T31] task:syz.2.3005 state:D stack:25536 pid:19044 tgid:19041 ppid:5616 task_flags:0x400140 flags:0x00080002 [ 628.608867][ T31] Call Trace: [ 628.608875][ T31] [ 628.608890][ T31] __schedule+0x17db/0x58f0 [ 628.608955][ T31] ? __pfx___schedule+0x10/0x10 [ 628.608990][ T31] ? schedule+0x90/0x2b0 [ 628.609018][ T31] schedule+0x164/0x2b0 [ 628.609045][ T31] schedule_preempt_disabled+0x13/0x30 [ 628.609069][ T31] __mutex_lock+0x7c1/0x1550 [ 628.609101][ T31] ? __mutex_lock+0x5d4/0x1550 [ 628.609131][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 628.609264][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 628.609302][ T31] ? kernel_text_address+0xa5/0xe0 [ 628.609342][ T31] ? __kernel_text_address+0xd/0x30 [ 628.609361][ T31] ? unwind_get_return_address+0x4d/0x90 [ 628.609400][ T31] nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 628.609434][ T31] ? stack_trace_save+0xa9/0x100 [ 628.609465][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 628.609488][ T31] ? stack_depot_save_flags+0x33/0x7f0 [ 628.609516][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 628.609538][ T31] ? kasan_save_track+0x4f/0x80 [ 628.609558][ T31] ? kasan_save_track+0x3e/0x80 [ 628.609576][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 628.609595][ T31] ? __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 628.609614][ T31] ? __alloc_skb+0x2c1/0x7a0 [ 628.610797][ T31] ? netlink_dump+0x1e7/0xee0 [ 628.610818][ T31] ? __netlink_dump_start+0x589/0x7b0 [ 628.610843][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 628.610903][ T31] ? genl_rcv_msg+0x5e1/0x7a0 [ 628.610923][ T31] ? netlink_rcv_skb+0x226/0x4a0 [ 628.610940][ T31] ? genl_rcv+0x28/0x40 [ 628.610960][ T31] ? netlink_unicast+0x7bd/0x940 [ 628.610984][ T31] ? netlink_sendmsg+0x813/0xb40 [ 628.611002][ T31] ? sock_sendmsg_nosec+0x14e/0x190 [ 628.611020][ T31] ? ____sys_sendmsg+0x54e/0x850 [ 628.611042][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 628.611063][ T31] ? __x64_sys_sendmsg+0x1b1/0x290 [ 628.611086][ T31] ? do_syscall_64+0x166/0x520 [ 628.611110][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.615999][ T31] ? rcu_is_watching+0x16/0xb0 [ 628.616030][ T31] ? trace_kmalloc+0x2a/0xf0 [ 628.616054][ T31] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 628.616075][ T31] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 628.616093][ T31] ? netlink_dump+0x1e7/0xee0 [ 628.616110][ T31] ? netlink_dump+0x1e7/0xee0 [ 628.616137][ T31] genl_dumpit+0x10b/0x1b0 [ 628.616166][ T31] netlink_dump+0x711/0xee0 [ 628.616197][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 628.616230][ T31] ? genl_start+0x497/0x6d0 [ 628.616261][ T31] __netlink_dump_start+0x589/0x7b0 [ 628.616288][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 628.616317][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 628.616367][ T31] ? genl_get_cmd+0x523/0x960 [ 628.616398][ T31] ? __pfx_genl_start+0x10/0x10 [ 628.616418][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 628.616440][ T31] ? __pfx_genl_done+0x10/0x10 [ 628.616465][ T31] ? __lock_acquire+0x747/0x2de0 [ 628.616496][ T31] genl_rcv_msg+0x5e1/0x7a0 [ 628.616527][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 628.616550][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 628.616591][ T31] netlink_rcv_skb+0x226/0x4a0 [ 628.616611][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 628.616637][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 628.616674][ T31] ? down_read+0x2be/0x330 [ 628.616697][ T31] genl_rcv+0x28/0x40 [ 628.616719][ T31] netlink_unicast+0x7bd/0x940 [ 628.616758][ T31] netlink_sendmsg+0x813/0xb40 [ 628.616788][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.618789][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 628.618820][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.618847][ T31] sock_sendmsg_nosec+0x14e/0x190 [ 628.618871][ T31] ____sys_sendmsg+0x54e/0x850 [ 628.618918][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 628.618958][ T31] ? import_iovec+0x73/0xa0 [ 628.618989][ T31] ___sys_sendmsg+0x2a5/0x360 [ 628.619014][ T31] ? __lock_acquire+0x747/0x2de0 [ 628.619041][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 628.619072][ T31] ? futex_wait+0x2a2/0x390 [ 628.619153][ T31] ? __fget_files+0x2a/0x420 [ 628.622286][ T31] ? __fget_files+0x3a2/0x420 [ 628.622332][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 628.622362][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 628.628631][ T31] do_syscall_64+0x166/0x520 [ 628.628674][ T31] ? trace_irq_disable+0x3b/0x140 [ 628.628695][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.628716][ T31] ? clear_bhb_loop+0x70/0xc0 [ 628.628740][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.628759][ T31] RIP: 0033:0x7f2bd359e159 [ 628.628778][ T31] RSP: 002b:00007f2bd444c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 628.628800][ T31] RAX: ffffffffffffffda RBX: 00007f2bd3826090 RCX: 00007f2bd359e159 [ 628.628823][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 628.628836][ T31] RBP: 00007f2bd363506b R08: 0000000000000000 R09: 0000000000000000 [ 628.628849][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.628877][ T31] R13: 00007f2bd3826128 R14: 00007f2bd3826090 R15: 00007ffe368cfa88 [ 628.628912][ T31] [ 628.628950][ T31] [ 628.628950][ T31] Showing all locks held in the system: [ 628.628962][ T31] locks held by kworker/u8:1/13: 2, on CPU#1: [ 628.628976][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.629029][ T31] #1: ffffc90000127c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.629079][ T31] locks held by pr/ttyS0/16: 2, last CPU#0: [ 628.629093][ T31] #0: ffffffff8ec364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 628.629140][ T31] #1: ffffffff9ad2f2d8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 628.629304][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 628.629317][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 628.629403][ T31] locks held by getty/5373: 2, on CPU#1: [ 628.629417][ T31] #0: ffff88803681d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 628.629508][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 628.629565][ T31] locks held by kworker/u8:27/7435: 2, on CPU#1: [ 628.629578][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.629626][ T31] #1: ffffc9000359fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.629681][ T31] locks held by syz.4.1998/14159: 2, on CPU#0: [ 628.629694][ T31] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 628.629744][ T31] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 628.629798][ T31] locks held by udevd/17003: 1, on CPU#0: [ 628.629811][ T31] #0: ffff888025cb0350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 628.629915][ T31] locks held by kworker/u8:67/18144: 4, last CPU#1: [ 628.629929][ T31] #0: ffff888057ffa140 ((wq_completion)krds_cp_wq#6/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.639426][ T31] #1: ffffc90006287c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.639479][ T31] #2: ffff88805702d580 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 628.639623][ T31] #3: ffff88805251e0e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 628.639714][ T31] locks held by syz.2.3005/19044: 3, on CPU#1: [ 628.639729][ T31] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 628.639776][ T31] #1: ffff88802e0e86e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 628.639832][ T31] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 628.639889][ T31] locks held by syz.6.3638/21939: 2, on CPU#0: [ 628.639902][ T31] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 628.643120][ T31] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 628.643180][ T31] locks held by modprobe/22386: 1, last CPU#1: [ 628.643194][ T31] #0: ffff888078737180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 628.643245][ T31] locks held by syz.0.3752/22391: 1, last CPU#1: [ 628.643259][ T31] #0: ffff88807d278340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 628.643308][ T31] locks held by modprobe/22389: 1, last CPU#1: [ 628.643321][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 628.643368][ T31] locks held by syz-executor/22393: 4, last CPU#0: [ 628.643381][ T31] #0: ffff88807a081bc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 628.643439][ T31] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 628.643482][ T31] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 628.643557][ T31] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 628.643607][ T31] locks held by syz-executor/22394: 1, last CPU#1: [ 628.643620][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 628.643667][ T31] [ 628.643673][ T31] ============================================= [ 628.643673][ T31] [ 628.643682][ T31] NMI backtrace for cpu 1 [ 628.643695][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 628.643716][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 628.643727][ T31] Call Trace: [ 628.643735][ T31] [ 628.643743][ T31] dump_stack_lvl+0xe8/0x150 [ 628.643770][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 628.643840][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 628.643869][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 628.643894][ T31] sys_info+0x135/0x170 [ 628.643912][ T31] watchdog+0xfd7/0x1030 [ 628.643943][ T31] ? watchdog+0x1c7/0x1030 [ 628.643969][ T31] kthread+0x38b/0x480 [ 628.643987][ T31] ? __pfx_watchdog+0x10/0x10 [ 628.644004][ T31] ? __pfx_kthread+0x10/0x10 [ 628.644022][ T31] ret_from_fork+0x514/0xb70 [ 628.644052][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 628.644077][ T31] ? __switch_to+0xc89/0x1420 [ 628.644124][ T31] ? __pfx_kthread+0x10/0x10 [ 628.644142][ T31] ret_from_fork_asm+0x1a/0x30 [ 628.644183][ T31] [ 628.644234][ T31] Sending NMI from CPU 1 to CPUs 0: [ 628.644263][ C0] NMI backtrace for cpu 0 [ 628.644278][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 628.644299][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 628.644310][ C0] RIP: 0010:io_serial_out+0x7c/0xc0 [ 628.644343][ C0] Code: 82 54 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4c 85 c4 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d e9 07 6e 75 06 cc 44 89 f9 80 e1 07 38 c1 [ 628.644359][ C0] RSP: 0000:ffffc90000157900 EFLAGS: 00000002 [ 628.644377][ C0] RAX: 0000000000000065 RBX: 0000000000000065 RCX: 0000000000000000 [ 628.644389][ C0] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 [ 628.644402][ C0] RBP: 00000000000003f8 R08: 0000000000000003 R09: 0000000000000004 [ 628.644413][ C0] R10: dffffc0000000000 R11: ffffffff85736b90 R12: dffffc0000000000 [ 628.644428][ C0] R13: 0000000000000065 R14: ffffffff9ad2f300 R15: 0000000000000000 [ 628.644441][ C0] FS: 0000000000000000(0000) GS:ffff888124cdc000(0000) knlGS:0000000000000000 [ 628.644457][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 628.644471][ C0] CR2: 00007f83a89b9680 CR3: 000000005a2ec000 CR4: 00000000003526f0 [ 628.644488][ C0] Call Trace: [ 628.644496][ C0] [ 628.644505][ C0] __serial8250_console_fifo_write+0x1e6/0x3e0 [ 628.644536][ C0] serial8250_console_write+0xaa1/0x1200 [ 628.644555][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 628.644585][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 628.644604][ C0] ? __schedule+0x17f1/0x58f0 [ 628.644635][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 628.644663][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 628.644685][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 628.644712][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 628.644814][ C0] nbcon_kthread_func+0x679/0x880 [ 628.644837][ C0] ? nbcon_kthread_func+0x163/0x880 [ 628.644855][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 628.644878][ C0] ? __kthread_parkme+0x71/0x1f0 [ 628.644903][ C0] ? __kthread_parkme+0x199/0x1f0 [ 628.644929][ C0] kthread+0x38b/0x480 [ 628.644946][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 628.644964][ C0] ? __pfx_kthread+0x10/0x10 [ 628.644981][ C0] ret_from_fork+0x514/0xb70 [ 628.645008][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 628.645034][ C0] ? __switch_to+0xc89/0x1420 [ 628.645057][ C0] ? __pfx_kthread+0x10/0x10 [ 628.645075][ C0] ret_from_fork_asm+0x1a/0x30 [ 628.645108][ C0] [ 628.653388][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 630.492241][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 630.501374][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 630.511437][ T31] Call Trace: [ 630.514724][ T31] [ 630.517849][ T31] vpanic+0x56d/0xa60 [ 630.521855][ T31] ? __pfx___schedule+0x10/0x10 [ 630.526718][ T31] ? __pfx_vpanic+0x10/0x10 [ 630.531238][ T31] panic+0xc5/0xd0 [ 630.534973][ T31] ? __pfx_panic+0x10/0x10 [ 630.539399][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 630.544912][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 630.550297][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 630.556479][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 630.562757][ T31] watchdog+0x1030/0x1030 [ 630.567135][ T31] ? watchdog+0x1c7/0x1030 [ 630.571617][ T31] kthread+0x38b/0x480 [ 630.575724][ T31] ? __pfx_watchdog+0x10/0x10 [ 630.580409][ T31] ? __pfx_kthread+0x10/0x10 [ 630.585008][ T31] ret_from_fork+0x514/0xb70 [ 630.589617][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 630.594752][ T31] ? __switch_to+0xc89/0x1420 [ 630.599445][ T31] ? __pfx_kthread+0x10/0x10 [ 630.604044][ T31] ret_from_fork_asm+0x1a/0x30 [ 630.608866][ T31] [ 630.612193][ T31] Kernel Offset: disabled [ 630.616692][ T31] Rebooting in 86400 seconds..