last executing test programs: 4m35.406996471s ago: executing program 4 (id=4094): ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bridge0\x00', {0x1}, 0x8}) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}, 0x1, 0x0, 0xf0ffffffffffffff}, 0x0) 4m35.29698534s ago: executing program 4 (id=4095): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000001f00), &(0x7f0000000540), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x400, 0x2, 0x2000005}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x6558, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r4, 0x4d, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff0307680426b1929e14f08800", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x2f) 4m32.636617323s ago: executing program 4 (id=4105): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040001}, 0x10) connect$unix(r6, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m31.093629149s ago: executing program 4 (id=4110): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1000000}, 0x50) 4m30.777290748s ago: executing program 4 (id=4115): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000001f00), &(0x7f0000000540), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x400, 0x2, 0x2000005}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x6558, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r4, 0x4d, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff0307680426b1929e14f08800", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x2f) 4m26.557507744s ago: executing program 4 (id=4130): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000180)=0x80000005, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000480), &(0x7f00000004c0)=0x4) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x240081c0}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r6, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x2}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="350abf1eec4b460100000000000000bfc9d21ace7a0a205328877baa75c900e9b7ddc2a46f2905c6fcb40a706c5437000753e872ef5e7fbb6accc210f38a852031e24aa32526ef460069a69b04618c629083235b726c15ca100076969cc58b679a741472083603264ac831edee6150eb8312f989fc19832e4a", @ANYRES16=r8, @ANYBLOB="110327bd7000ffdbdf250100000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000003880)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) 4m10.830402851s ago: executing program 32 (id=4130): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000180)=0x80000005, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000480), &(0x7f00000004c0)=0x4) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x240081c0}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r6, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x2}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="350abf1eec4b460100000000000000bfc9d21ace7a0a205328877baa75c900e9b7ddc2a46f2905c6fcb40a706c5437000753e872ef5e7fbb6accc210f38a852031e24aa32526ef460069a69b04618c629083235b726c15ca100076969cc58b679a741472083603264ac831edee6150eb8312f989fc19832e4a", @ANYRES16=r8, @ANYBLOB="110327bd7000ffdbdf250100000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000003880)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) 22.461920237s ago: executing program 3 (id=6211): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdc04, {0x0, 0x0, 0x0, r4, {0x9, 0xd}, {0xfff1, 0xb}, {0x4, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 21.180527578s ago: executing program 3 (id=6221): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000005f1887a12159ed726e6750bd7dbf6a00000001830704e0000002"], 0x18}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$packet(0x11, 0x2, 0x300) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4004) ioctl$FS_IOC_RESVSP(r1, 0x40305829, 0x0) syz_emit_ethernet(0x52, &(0x7f00000011c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd318001c0600fc010000000000000000000000000002ff02000000000000000000000000000100004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70020000907800000500000000000000"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) close(0x3) ioctl$XFS_IOC_FSGROWFSDATA(r2, 0x4010586e, &(0x7f0000000000)={0x4, 0xf}) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000001080)=""/140, &(0x7f0000001180)=0x8c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x290, 0x20a, 0x278, 0x290, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0xffffffff, 0xffffff00, 0x0, 0xffffff00], [0x0, 0xffffff00], 'ip_vti0\x00', 'batadv0\x00', {0xff}, {}, 0x6, 0xfe, 0x1}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0xc0, 0x2, 0xb}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x27}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0xffffff00, 0xffff00], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xa3, 0x7, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 19.803357502s ago: executing program 3 (id=6232): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(0x4) r1 = syz_genetlink_get_family_id$wireguard(0x0, r0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40001) r2 = socket$nl_generic(0x10, 0x3, 0x10) writev(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x42850) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24004004) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40004240) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @empty, 0x8000d}, 0x1c) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) listen(r8, 0x400) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) bind$bt_hci(r7, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRESDEC=r9, @ANYRES32=r1, @ANYBLOB="010026bd7000fcdbdf252200000026ee1a201b9b32c4cf5e9cb59a08000100", @ANYRES64=r4], 0x1c}}, 0x8000) write$nci(r3, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES16=r5, @ANYRESHEX=r6], 0x7) 19.313485244s ago: executing program 3 (id=6239): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000900000000001f005f0f00008500000013000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.861557799s ago: executing program 0 (id=6348): ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688474c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.209689699s ago: executing program 0 (id=6354): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495dd, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2000012, 0x8ff, 0x0, &(0x7f00000004c0)="4133c9e924380000000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.088855463s ago: executing program 2 (id=6356): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100110000000000000006"], 0x14}], 0x1}, 0x0) 2.850069103s ago: executing program 5 (id=6357): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071180d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200"], 0x0, 0x96}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000200000000000000000000209504000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x700}, 0x2}, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000080000000900010073797a300000000058000000160a01000000000000000000020000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003640)='?', 0x1}], 0x1}}], 0x1, 0xc005) sendmmsg$inet(r1, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)='@', 0x1}], 0xef}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}], 0x1}}], 0x2, 0x4000000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) openat$cgroup(r6, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000240)={'some', 0x20, 0x9, 0x20, 0xd}, 0x2f) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) socket$nl_audit(0x10, 0x3, 0x9) 2.741392977s ago: executing program 0 (id=6358): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x0, 0x11, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0xf7ad, @empty}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e20, @private=0xa010100}}]}, 0x88}, 0x1, 0x7}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r0, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r3 = socket(0x28, 0x805, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x6c, r4, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5e}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x121c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1099}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1b8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4c841}, 0x4044) socket$inet6(0xa, 0x5, 0x7f) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, &(0x7f0000000100)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000900008085000000c400000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYBLOB="04000d8008"], 0x24}, 0x1, 0x5502000000000000}, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in6=@mcast1, 0x0, 0xecdf, 0x0, 0x200}, {@in=@broadcast, 0x4d3, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x8, 0x4007ff, 0x0, 0x400}, {}, 0x0, 0x3507, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0xc0}}]}, 0x194}}, 0x4050) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2714, @host}, 0x10) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 2.739586783s ago: executing program 2 (id=6359): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x4, 0xfffffffd, 0x1}, 0x10) (async) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe00000000020000", 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000ffffffe04e000000000000005fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r1 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, &(0x7f0000000000)={0x2a, 0x4}, 0xc) 2.557544745s ago: executing program 5 (id=6361): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800007d000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) 2.411477575s ago: executing program 1 (id=6362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4000}, 0x94) 2.331887263s ago: executing program 1 (id=6363): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x5, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_int(0xffffffffffffffff, 0x3a, 0x3c, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x4000, &(0x7f0000000640)={&(0x7f0000000340)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2d, 0x33, @action={{{}, {}, @device_b}, @sp_mp_confirm={0xf, 0x2, {0x202, @default, {0x1, 0x1, [{0x18}]}, @val={0x72, 0x6}, @void}}}}]}, 0x4c}}, 0x0) 1.508750905s ago: executing program 2 (id=6364): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x9c}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18000000, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.508341148s ago: executing program 1 (id=6365): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x1, 0x9c1, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1}, 0xb, 0x3, 0x0, 0x0, "8c889e8c209498efffe9ef06390dc5d717c6e5e8febd9999c6fafafa72c2beea07dad4e87243359d1bb1085d6737d42d949b2df7f0dfd9732fc882f65f71f35d"}}, 0x80}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2c, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) 1.508084974s ago: executing program 5 (id=6366): socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bind(r0, &(0x7f0000000240)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x1}, 0x80) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)=ANY=[@ANYBLOB="58010000", @ANYRES16=r1, @ANYBLOB="200027bd7000fbdbdf250f000000080001007063690011000200303030303a30303a31302e30000000000800a10d000006001100a3880000080001007063690011000200303030303a30303a31302e300000000008000b000100000006001100020000000e0001006e657464657673696d0000000f6d30000008000b000100000006001100010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0000000000060011009f0300000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000600000006001100090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b002c0e00000600110077000000080001007063690011000200303030303a30303a31302e300000000008000b0061f2000006001100c9000000"], 0x158}, 0x1, 0x0, 0x0, 0x40005}, 0x20044000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES8=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d30", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0xc7a90be8c95f386b) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0600000004000000040000000200000081400000a723a88dc630de2274e508493f39e5e571fd7d0e5c477adffec8f85bbc1675ac2e7a8eeb178771338c8d7a5e3b93b990a3ed7f6cf06d55981ccc1ff96dd1569e05d5524f44a0da27f0d6d4250c0ba4c0d15cc9f3023ef426f909b9c03c63120fbb6aa6fbc0aee7bffda062442f5ab1cc0d85817ab74d3e810720bd34ce797b552aab5b5db4d39ad92b96a3434edceccb38bc86f8511f90254923ab82ce0d22f7638bbcb8641fa0bf6e1f53e5b320341e72da3895cfade0c3b4475a7661a042d283438abcc28ca1694e203202cb22f2a7469e16321fd31e2262623a51c48f0f00c7", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r7}, 0xc) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r8 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8954, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c00000040000701fefeffff00000000047c0000040042801400018006009a71ca7a8ea7521f500600800a000006000c00800a000073525658a694b329097733ce638e53b725a4342ac786f0f5d28c06c90a40caa503bfc892701d81170a6ffd7a49b597010b46093c"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r10 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x1b59, 0x20407, @empty, 0x200}}, 0x24) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES64=r10, @ANYBLOB="00012cb980000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r11) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff0000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r3, 0x0, 0x0, 0x0) 1.460013787s ago: executing program 0 (id=6367): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x158, 0x18c, 0x203, 0x0, 0x19030000, 0x248, 0x2e0, 0x2e0, 0x248, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {0xff}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xa8, 0xf0, 0x0, {0x1000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100, 0x2000}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 1.320672284s ago: executing program 2 (id=6368): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @time_exceed={0x4, 0x1, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @mcast1, @mcast1, [], "af34000000000000"}}}}}}}, 0x0) 1.042495401s ago: executing program 0 (id=6369): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) unshare(0x26020480) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000004222263000000000030000000000000000010000000900010073797a3100000000400073ad3db5a48981b70000000000000100ffff0900030073797a320000000014000480080002400000000008000140000000000900010073797a310000000030000000050a4f010000000000000000010020000c00024000000000000000fca5733fceb6d00000040004801400000011000100000000000000000000005cde8e94a980126a71000a0000"], 0xb8}}, 0x0) r2 = gettid() r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)='@[', 0x2}], 0x1, 0x0, 0x0, 0x4008800}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)="e5", 0x1}, {0x0, 0xf00}], 0x2, 0x0, 0x0, 0x20000000}}], 0x2, 0x8010) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000300001800d0001007564703a73797a30000000001c000280080001003b"], 0x44}}, 0x0) getsockopt$sock_buf(r5, 0x1, 0x21, &(0x7f0000000300)=""/98, &(0x7f0000000380)=0x62) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0xa, 0x6073, 0x7, 0x0, 0x0, 0x9e25, 0x0, 0xffffffffffffffff}, &(0x7f0000000280), 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r10}, 0x8) sendmsg$TIPC_NL_MON_PEER_GET(r11, &(0x7f00000009c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="d32d27e89172f615", @ANYRES16=r8, @ANYBLOB="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"], 0x250}, 0x1, 0x0, 0x0, 0x4805}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x20000010) syz_open_procfs$namespace(r2, &(0x7f00000006c0)='ns/time_for_children\x00') socket$nl_route(0x10, 0x3, 0x0) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$OCFS2_IOC_INFO(r12, 0x80106f05, &(0x7f0000007480)={&(0x7f00000072c0)=[&(0x7f0000000440)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f0000001240)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x7, 0x3}, {0x180000, 0x6}, {0xfffffffffffffffc, 0x7fffffff}, {0xc693, 0x52e}, {0x2, 0x20000000}, {0x10000, 0x5}, {0xff, 0x8000000000000001}, {0x10, 0x6}, {0x9, 0x1}, {0x1, 0x1}, {0x0, 0x2}, {0x7eb6, 0x9}, {0x0, 0x6}, {0xe9e, 0x5}, {0x1, 0x8000}, {0x8, 0x1}, {0x7fffffffffffffff, 0x628d}, {0x4, 0x8f2}, {0x0, 0x5}, {0x53c, 0x280000000000}, {0x5a, 0xffffffffffff87a5}, {0x1, 0x2}, {0x3, 0x7fffffff}, {}, {0x7, 0x8}, {0x5, 0x2}, {0x6, 0x1c00000000000000}, {0x9, 0x2}, {0x9a, 0xffffffffffffff34}, {0x6, 0x78}, {0xffffffffffffffff, 0x2}, {0x80000000, 0x5}, {0x400eda0d, 0x6}, {0x0, 0xfff}, {0x2, 0x3}, {0x8001, 0x9}, {0x594, 0x14220}, {0x55f3, 0x9}, {0x53c, 0x9399}, {0x6, 0x4}, {0x52, 0x8000000000000000}, {0x38000000000, 0x20000000000000}, {0x8, 0x5}, {0x77, 0x1}, {0x7, 0xfffffffffffffff7}, {0xffffffffffffffff, 0x2}, {0x4e}, {0x200, 0x3}, {0x3, 0x9}, {0x7, 0x8000000000000000}, {0x10001}, {0x5, 0x3}, {0x6, 0xd}, {0x6, 0x8}, {0x5, 0x5}, {0x400, 0x8}, {0x8, 0x8}, {0x9d07, 0x8}, {0xe, 0x80}, {0x1, 0x7fffffff}, {0xffffffff, 0x7}, {0x5, 0x7fffffff}, {0x2, 0x159}, {0x8000, 0x1c2}, {0x3, 0x8}, {0x1, 0x1e3e}, {0x9, 0x5}, {0x8, 0x7fffffff}, {0xffffffff, 0x1}, {0x6, 0x1}, {0xff}, {0x200, 0x400000000}, {0xffffffffffffff5f, 0x80000000}, {0xce, 0x8}, {0x69ba, 0x3}, {0x3, 0x673}, {0x0, 0xa517}, {0x7, 0x49}, {0x9, 0x7ff}, {0x9, 0xfffffffffffffffa}, {0x6, 0x5}, {0x2, 0x8}, {0x7b6, 0x319}, {0x4, 0xe}, {0x3, 0x100000001}, {0x1, 0xc}, {0xffffffffffffffff, 0x6}, {0x6, 0x81}, {0x8, 0x9}, {0x9, 0x7}, {0x8000000000000001, 0x8}, {0x6}, {0x7, 0x1}, {0x60e5, 0x4}, {0xf63, 0x7fff}, {0xffffffffffffffff, 0x2c84}, {0x1, 0x6}, {0x7fff, 0x1}, {0x41ab, 0xd44}, {0x0, 0x3}, {0x8, 0xffffffffffffffff}, {0x7, 0x2e2f39fb}, {0xc5a3, 0x80000000}, {0x78000, 0xfffffffffffff1d4}, {0x8, 0x3}, {0x7, 0x4}, {0x8000000000000001, 0x2d}, {0x2, 0x8}, {0x3, 0xd}, {0x2, 0x6000000000000}, {0x83c, 0x69ca}, {0x9, 0x3}, {0x7, 0xffffffffffffff80}, {0xfffffffffffffff8, 0xd}, {0xf1b, 0x4}, {0x0, 0x9}, {0x9, 0x8}, {0x7f, 0x6}, {0x9, 0x3}, {0x100}, {0x7fff}, {0xe, 0xc}, {0x10001, 0x1}, {0x8, 0x3}, {0x34a, 0x4}, {0xe306, 0x7ff}, {0x8, 0x9}, {0x3, 0x9}, {0xe}, {0x9, 0x2}, {0x4, 0x8}, {0x5, 0x3}, {0x7fff, 0x400000}, {0xfffffffffffffff7, 0x3}, {0x1, 0x8dc6}, {0x3, 0x8}, {0x7fff, 0xffff}, {0xb61, 0x8}, {0x80000000, 0x9}, {0x9, 0x2}, {0x1, 0x1}, {0x8000000000000001, 0x7}, {0x9, 0x7fffffffffffffff}, {0x9, 0x4}, {0x3, 0x4}, {0x2, 0x6}, {0x3ff, 0x7}, {0x1}, {0xff, 0x5}, {0xfff, 0x2a}, {0xd, 0xffff}, {0x3, 0x3}, {0x5be0365b, 0x7fff}, {0xffffffff, 0x8}, {0x7f, 0x1}, {0xffffffffffffffff, 0x998}, {0x81, 0x2}, {0x10000, 0x3}, {0x2, 0xd0}, {0x95e, 0x127}, {0xf282, 0xc352}, {0x5, 0x5}, {0x2, 0x7}, {0x9, 0x2}, {0x200, 0x100000001}, {0x6, 0x8}, {0x5, 0xf1}, {0x0, 0xaaeb}, {0x39, 0xff}, {0x1ff, 0x9}, {0x3, 0x7f}, {0x7fffffffffffffff, 0x40a}, {0x0, 0x200}, {0x8, 0x8}, {0x8, 0x2}, {0x3, 0x3}, {0x8, 0x100}, {0x9}, {0x10000, 0x1000}, {0x4, 0x4}, {0x9, 0x81}, {0x4, 0xd04}, {0x5, 0x4}, {0x100000000, 0x2}, {0xfffffffffffffff7, 0x3ff}, {0xbf, 0x395e}, {0xe, 0x100000000}, {0x308d09b5, 0x4aa9}, {0x100, 0xe0a}, {0x3, 0x4}, {0x9, 0x8000000000000000}, {0x5b8, 0x1}, {0xf7f, 0x80000}, {0x7, 0x4}, {0x2, 0x4}, {0x1, 0x2}, {0x2, 0x78}, {0xffffffffffffff22, 0x5}, {0x40, 0xfff}, {0x50000000000, 0x1}, {0x101, 0x1}, {0x3, 0x3}, {0xe08f, 0x3ff}, {0x3, 0x10001}, {0x1, 0x7}, {0x8, 0x5}, {0x6, 0xc0c4}, {0x2, 0x4}, {0x80000000000, 0x7f}, {0xfffffffffffffafc, 0x3}, {0x8}, {0x3, 0x4}, {0x9, 0xf}, {0x88ff, 0x81}, {0x1, 0x3}, {0x1, 0x20000000000}, {0xc, 0x2}, {0x100, 0xfc4}, {0x8, 0x7}, {0xb, 0x4}, {0x9, 0x7}, {0xfc}, {0x3d00000000, 0x7fffffff}, {0x400, 0x7fffffff}, {0x1bc, 0xffffffffffffffff}, {0x10000, 0x7}, {0x8000000000000000, 0x6}, {0x2, 0x3ff}, {0xf39, 0x2}, {0xbc, 0x1}, {0x401, 0x9}, {0x6, 0x80000001}, {0xb954, 0x5}, {0x6}, {0x40, 0x5}, {0x9, 0x9}, {0x4, 0x100}, {0x1, 0x6}, {0x8000000000000000, 0xc}, {0x4, 0x75b}, {0x6, 0x40716633}, {0x3}, {0x4d7241f4, 0x800}, {0x6, 0x5}, {0xe, 0x9}, {0x6ab, 0xc75}, {0x767f, 0x36}, {0x4, 0x100000000}, {0x3, 0x2}, {0x5, 0xd}, {0x3, 0x7854}, {0x5, 0x9}, {0x31, 0x2}, {0x6ab, 0x1}, {0xae, 0x2}]}, &(0x7f0000002280)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f00000022c0)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000002300)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000002380)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000002400)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f0000002440)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000002480)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f00000024c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xbbaddf9052a9e111}}, &(0x7f0000002500)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f0000002540)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f00000025c0)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000002600)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000002640)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000002680)=@journal={{0x4f32494e, 0x7, 0x10, 0x140000000}}, &(0x7f00000026c0)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000002740)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f00000027c0)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000001}}, &(0x7f0000002800)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0x81, 0x4}, {0x36, 0x6}, {0x67c, 0x42}, {0x100, 0x6}, {0x2, 0x6}, {0x9, 0x6}, {0x5, 0x101}, {0x7, 0x7ae8}, {0x7, 0xc6}, {0x7, 0x7}, {0x6, 0xa}, {0xb103, 0xfffffffffffffffa}, {0x7ff, 0x8}, {0x7ff, 0x800}, {0x2}, {0x0, 0xffffffffffffffff}, {0x0, 0x8}, {0x5, 0x5}, {0xffffffff, 0x8}, {0x3, 0xb}, {0x7, 0xd2}, {0x9, 0x8}, {0x6, 0x101}, {0xffff, 0xffff}, {0x6}, {0x0, 0x7}, {0x2, 0x5}, {0x77a, 0x2}, {0x9ea4, 0xd}, {0x6, 0x7fff}, {0x6, 0xffffffff}, {0x8001, 0xf7}, {0x1, 0xa713}, {0x2, 0x5}, {0x2fb, 0x4}, {0x7, 0x9}, {0x9, 0x9}, {0x0, 0x5}, {0x36, 0x9}, {0x100, 0x7}, {0x7, 0x10001}, {0x9, 0x8}, {0x1, 0x7}, {0x2, 0xd67}, {0x3f4d, 0x3}, {0x2, 0xa}, {0x5, 0x9}, {0x7, 0x80000001}, {0x5, 0xe}, {0x7, 0xfffffffffffffff4}, {0xffffffffffffffff, 0x7f}, {0x4, 0x1}, {0x6, 0x57}, {0xffff, 0xa}, {}, {0xb606, 0x6d}, {0x7, 0x6}, {0xfffffffffffffbff, 0x8}, {0x3, 0x1}, {0x0, 0xffffffffffff8001}, {0xb}, {0x10, 0x80000001}, {0x7ff, 0x1a942e17}, {0xb, 0x100000000}, {0x1, 0x8}, {0x6, 0x6}, {0x8, 0x6}, {0x3, 0x3}, {0x9, 0x101}, {0x3800, 0x5}, {0xfe, 0x9}, {0xfff, 0x1}, {0x8, 0x1}, {0x10001, 0x401}, {0x3, 0x6}, {0x80, 0x3}, {0x100, 0xffffffffffffffff}, {0x2, 0x2}, {0x3, 0xab}, {0x7b6, 0x8001}, {0x3, 0x5}, {0x2, 0x7}, {0x1, 0x4}, {0x9, 0x6}, {0x8, 0xfffffffffffffffd}, {0x8, 0x500}, {0x7514, 0x2}, {0x3, 0x4019}, {0x30, 0x100000000}, {0x2, 0xfffffffffffffff9}, {0x1, 0x1}, {0x25, 0x9}, {0x3527, 0xafe9}, {0x6, 0x10}, {0x6, 0x14b}, {0x1, 0x4}, {0x5, 0xffffffffffff0000}, {0xffffffffffffff00, 0x2}, {0x4, 0x3}, {0xfffffffffffffffd, 0x2}, {0xfffffffffffeffff, 0x6}, {0x5, 0x5}, {0x8d4, 0xfffffffffffff5d5}, {0x1d8, 0x8}, {0x4, 0x9}, {0xb, 0x1ff}, {0x8001, 0x9}, {0x1, 0xff}, {0x6, 0xd280b1c}, {0x0, 0x8}, {0x8, 0x9}, {0x0, 0xe4d2}, {0xbfe2, 0x4274866}, {0x2}, {0xfffffffffffffff7, 0xcf}, {0x550, 0xe0000000}, {0xffffffffffffffdb, 0x100}, {0x5, 0xb}, {0x0, 0x5}, {0x7, 0xe4c9}, {0xf, 0x7f}, {0x2, 0x53c6}, {0x4, 0xfffffffffffffffd}, {0xfffffffffffffff4, 0x7}, {0xffff, 0xc07}, {0xffffffffffffffff, 0x346c}, {0xffffffff, 0x9b5}, {0x8000000000000000}, {0x3, 0x3}, {0x100000001, 0x2}, {0x400, 0x64}, {0xe}, {0x2, 0x5}, {0xfffffffffffffffc, 0x9}, {0x619, 0x7ff}, {0x7fffffffffffffff, 0xffffffff}, {0xb9, 0xffffffffffffffff}, {0x7fffffff, 0x9}, {0x9, 0x6}, {0x100, 0x7b}, {0x3, 0x7fffffffffffffff}, {0x2, 0x6}, {0x3, 0x6}, {0x4d3c57cc, 0x8}, {0xfa, 0x7}, {0xffd9, 0x1ffc00000000000}, {0x8}, {0x4, 0x3}, {0x9, 0x2}, {0x401, 0x81}, {0x5, 0x40000000}, {0x8a, 0x462f}, {0x1ff, 0x2}, {0x1b26, 0xffffffff}, {0xf, 0x2000}, {0x1, 0x7}, {0x0, 0x9}, {0x7, 0x7}, {0xa, 0x8}, {0x3, 0x4a}, {0x80000001, 0x3}, {0x6, 0x5}, {0xba, 0x218}, {0xfffffffffffffffe, 0x1}, {0x3, 0xec87}, {0x80000001, 0x2400000}, {0x1, 0x1}, {0xac2c, 0x7}, {0x7, 0x1}, {0x3, 0x4}, {0x9, 0x8}, {0x8, 0x57}, {0x45bc, 0x7}, {0x8, 0x1}, {0x7, 0x1}, {0x7, 0xfffffffffffffffc}, {0x3, 0x9}, {0x100000001, 0x5}, {0xe, 0x5}, {0x6, 0x100000000}, {0x7, 0x1}, {0x2, 0x8}, {0xfffffffffffffff8, 0x7fffffffffffffff}, {0x0, 0x2}, {0x5, 0x3}, {0x9}, {0x4, 0x100}, {0x4, 0x8}, {0x1, 0x8}, {0x5, 0x6}, {0x8fe, 0x5}, {0x0, 0x7fffffff}, {0x8, 0x5}, {0x10000, 0x6}, {0xd8, 0xba0f}, {0x9ff, 0x800}, {0x1, 0x1}, {0x0, 0x8}, {0x26ba2736, 0x2}, {0x3ff, 0x8}, {0x8, 0xd62}, {0xfb, 0x8}, {0x6, 0x1}, {0xfffffffffffffffa}, {0x5, 0xfffffffffffffe01}, {0x3, 0x101}, {0x2, 0x4}, {0x6, 0x2}, {0x1e, 0x5}, {0x800, 0x6}, {0x0, 0x7ff}, {0x1, 0x9}, {0x1, 0x6}, {0xf3b, 0xfffffffffffffffc}, {0x2, 0xfffffffffffffffb}, {0x7fffffff, 0x100000000}, {0xf202, 0x7b9}, {0x4, 0xffffffffffffff5a}, {0x10000, 0x2}, {0x1, 0x5}, {0x1, 0x8000}, {0x918, 0x8000000000000001}, {0xfffffffffffffff9, 0x6}, {0xfffffffffffffffc, 0x8000}, {0x9, 0xa}, {0x3, 0x3ff}, {0x4, 0x4}, {0x800, 0x401}, {0x9, 0x8000000000000001}, {0xfffffffffffff58f, 0x2}, {0xe0}, {0x6dfa, 0x7}, {0x2, 0xb53}, {0x8, 0x239}, {0xba9f, 0x2}, {0xffffffffffffffff, 0x3}, {0xac8, 0xe}, {0x3, 0x4}, {0x4, 0xfffffffffffffffb}, {0x3, 0x1}, {0x988, 0x1}, {0x7, 0x7f}, {0x2, 0xd6e8}, {0xf, 0x3}, {0xce6, 0x4}, {0x9ad3, 0xffffffffffff7fff}, {0x8001, 0xb}, {0x100000000, 0x3}, {0xfffffffffffffff8, 0x8}, {0x2}, {0x5, 0x1}, {0x5, 0xfea}, {0x4, 0xffffffff9422c6e5}, {0x10000, 0x5}, {0x7ff, 0x2}]}, &(0x7f0000003840)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f00000038c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000001}}, &(0x7f0000003900)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000003940)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x101, 0x7}, {0x6, 0x2}, {0xb, 0x5}, {0x7f}, {0x5, 0xfffffffffffffffd}, {0x7ff, 0x100000001}, {0x7, 0x41c64803}, {0x9, 0x1}, {0x5, 0xb17}, {0x5, 0x8000000004}, {0x3, 0x1}, {0x7, 0x9383}, {0x57f, 0x2}, {0x7f, 0xec9}, {0x8, 0x3}, {0x7, 0x81}, {0x3, 0xec}, {0x5, 0x6}, {0x5}, {0x101, 0x9}, {0xffffffffffffff01, 0xf}, {0x1, 0x8}, {0x9, 0xc}, {0xae, 0x5}, {0x9, 0x3}, {0x7, 0x7}, {0x3, 0x7}, {0x8, 0x40}, {0x1, 0x4}, {0x1f9d, 0x7}, {0x9, 0xfffffffffffffff7}, {0xffffffff, 0x7}, {0x5, 0x8}, {0x200, 0x1}, {0x0, 0x6998}, {0x5, 0x7}, {0x1, 0x9}, {0x9, 0x8}, {0xc9, 0x8}, {0x200, 0x12a9}, {0xd, 0x373}, {0x5, 0x80000001}, {0x1, 0x38000000000000}, {0xcd4, 0x100}, {0x8000800, 0x6}, {0x3, 0x6}, {0x1, 0x4a13}, {0x21e8fee0, 0xa0}, {0x1}, {0x27161ac5, 0x6}, {0x7, 0x4}, {0x1}, {0x9, 0x5}, {0x9, 0xffff}, {0xe07, 0x1ff}, {0xbd2c, 0x1}, {0x7, 0x1}, {0x3, 0xa934}, {0x2, 0x5}, {0xfff, 0x8001}, {0x101, 0x7}, {0x9, 0x8}, {0x1, 0x5}, {0x5, 0x24}, {0x461a, 0x7}, {0x4, 0x4}, {0x8, 0x4}, {0x3, 0x101}, {0x8, 0x373c}, {0x0, 0x6}, {0x8, 0xde}, {0x101, 0x1000}, {0xbf6b, 0xe}, {0x7f, 0xfffffffffffffffd}, {0x751, 0x4}, {0x6, 0x8}, {0x0, 0x2}, {0x0, 0x3}, {0xd, 0x9}, {0x15da, 0x7fffffffffffffff}, {0x7, 0x4d}, {0xfffffffffffeffff, 0x7f}, {0x40dbf3d2, 0xfffffffffffff001}, {0x7, 0x1}, {0x2, 0x1}, {0x7fff, 0x7ff}, {0x4a81, 0x370d}, {0x2, 0x9}, {0x9, 0x8}, {0x7f, 0x7}, {0x3, 0xc978}, {0x3, 0x4}, {0x2}, {0xf, 0x8}, {0x8000000000000000, 0x4a2e2140}, {0x7fffffff, 0x3}, {0x401, 0x8}, {0x9, 0x9}, {0x9, 0x1}, {0xdb, 0x5}, {0xa, 0x5}, {0x0, 0x7}, {0x6, 0x40}, {0xfffffffffffffff8, 0x9}, {0x9, 0x4}, {0x4, 0x100}, {0x4fb, 0x8}, {0x200000000000000, 0x2}, {0x6199, 0x1}, {0x5d, 0x5}, {0xea0d, 0x6}, {0x3, 0x81}, {0x5, 0x101}, {0x2, 0x992}, {0x9}, {0x5, 0xf}, {0x3, 0x4}, {0xffff, 0x159}, {0x6d6, 0x7}, {0x3, 0x2f08}, {0x23, 0x401}, {0x1b6e, 0xe6f}, {0x7}, {0x1, 0x7}, {0x4, 0x2}, {0x4, 0x2}, {0x6, 0x3}, {0x4, 0xa}, {0x4, 0x101}, {0x8, 0x2ec6}, {0x4, 0x7}, {0x50d, 0x7}, {0x7185fcb4, 0x2}, {0x4, 0x7}, {0x1ee38792}, {0x7, 0x8001}, {0x9, 0x45}, {0x526, 0x8000000000000001}, {0x6, 0x9}, {0x339, 0x2}, {0x4, 0x1}, {0xc, 0x80000001}, {0x3, 0xfffffffffffffffd}, {0x2, 0x101}, {0x24000000, 0x9}, {0x8001, 0x2}, {0x4, 0x2}, {0x6, 0x3}, {0xa546, 0x9}, {0xb, 0x5}, {0xa2ef, 0xfffffffffffffffa}, {0xff, 0x9}, {0x6f99, 0x725}, {0xbfc, 0x10000}, {0x5}, {0x1, 0x2}, {0x4, 0x4}, {0x45, 0xde}, {0x3, 0x7fff}, {0x5, 0x5}, {0x100, 0xf}, {0x6, 0xb487}, {0x3ff, 0x8}, {0x3, 0x319}, {0xa8, 0x2}, {0x1, 0x9}, {0x4, 0x7}, {0xffffffffffff6728, 0x3ff}, {0x80000001, 0x800100000000000}, {0x400, 0x7fffffff}, {0x9, 0x2}, {0x1, 0xffff}, {0xa, 0x9b}, {0x9}, {0x100}, {0xc36, 0x7dca}, {0xd, 0x1}, {0x6961, 0x401}, {0x8, 0x3}, {0x5, 0x65139b9d}, {0xd52, 0xac35}, {0x6, 0x7}, {0xd, 0xf1}, {0x2}, {0x5, 0x8000000000000000}, {0x9, 0x7fffffffffffffff}, {0x7ff, 0x3}, {0x78b3, 0x9}, {0x0, 0x2}, {0xa28f, 0x5}, {0x1, 0xe}, {0x80000001, 0x300}, {0x9, 0x8d7d}, {0xfffffffffffffffd}, {0x1, 0xdf4}, {0xfffffffffffffff6, 0xc14f}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x2}, {0x1, 0x2}, {0x3, 0x1}, {0x5}, {0xd7, 0x7}, {0xa, 0xb}, {0x7, 0x8}, {0x5, 0x7}, {0x2, 0xe}, {0x2, 0xfffffffffffffff9}, {0x7, 0x2}, {0x7, 0x4}, {0x8, 0x10}, {0x7fff, 0x2}, {0x6, 0xd2}, {0x6, 0x1000}, {0x7, 0x3}, {0x3, 0x200}, {0x3, 0x9}, {0xfffffffffffffff7, 0x5}, {0xf0, 0x92}, {0xffffffffffff05e3, 0x679}, {0xe53e, 0xe537}, {0x5}, {0x80000001, 0x4}, {0x2, 0x8}, {0x9, 0x8}, {0x8, 0x6e13}, {0x24000000, 0x5}, {0x2, 0x4}, {0x1, 0x4}, {0xeac}, {0x8, 0x9}, {0x4, 0x100}, {0x2, 0x8}, {0x9, 0xe}, {0x9, 0xffffffff}, {0x3, 0x7fff}, {0x2, 0x6}, {0x4, 0xa499}, {0x4000000000000000, 0x51}, {0x6, 0xf21a}, {0x0, 0x3ff}, {0x6, 0xf5}, {0x100000001, 0x5}, {0x6, 0x5}, {0x10, 0x8}, {0x8000000000000000, 0x8}, {0x4, 0x3}, {0x0, 0x1}, {0x7, 0x8}, {0x9, 0x1}, {0x7fff}, {0x8e, 0x5}, {0x7, 0x98a0}, {0xc1ab, 0x2e0d}, {0xffff, 0x8000}]}, &(0x7f0000004980)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x10000}, &(0x7f0000004ac0)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x7fff, 0xffffffffffffc100}, {0x8000000000000000, 0x37b}, {0x44b, 0x8}, {0xfffffffffffffff9, 0x6}, {0x9, 0x6}, {0x7, 0xb2eb}, {0x2000000, 0x3d}, {0x29e, 0xc16e}, {0x9d, 0xad1e}, {0xfffffffffffffffa}, {0x2, 0x6}, {0xa59, 0x7}, {0x17, 0x1}, {0x3, 0xfa4}, {0x2, 0x10001}, {0x4, 0x80000000}, {0x789, 0x1}, {0x2f, 0xcb}, {0xc9, 0x1ee6f3a4}, {0x1ff, 0x5}, {0x80000001, 0x6}, {0x1, 0x4}, {0x9, 0x3}, {0xff, 0x3}, {0xb2, 0x2}, {0x37, 0x3}, {0x2, 0xff}, {0x401, 0x8}, {0xffffffffffffffff, 0x3}, {0x2, 0x400}, {0x2, 0x6}, {0x6, 0xbe}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x5}, {0x7, 0x1}, {0x3, 0x1}, {0x5, 0xffffffff}, {0xd7e, 0x7}, {0x7f, 0x4}, {0x7, 0x7}, {0x1, 0x8}, {0x2, 0x4}, {0x1, 0xe}, {0x6, 0xfff}, {0x2e, 0xfdb5}, {0xffff, 0x7}, {0x1, 0x2}, {0x3ff, 0x8}, {0xfff, 0x2}, {0x7fffffffffffffff, 0x5}, {0x6}, {0x6, 0x2}, {0x3, 0x6f6e}, {0x2, 0x5}, {0xffffffffffffffff, 0x8}, {0x11b, 0x1}, {0x10000, 0x1}, {0x6, 0x8}, {0x1, 0xffffffff}, {0x7, 0x4}, {0xc8b, 0x800}, {0x4, 0x8}, {0x2, 0xa}, {0x2}, {0xfffffffffffffffc, 0xd30}, {0x3, 0xd8}, {0x8f, 0x3e}, {0x3, 0x800}, {0xd6, 0x2}, {0xe, 0x1}, {0x8, 0x5}, {0xa0, 0x7}, {0xfffffffffffffff7, 0x8}, {0x8, 0x1}, {0x40, 0x5}, {0x4, 0x7}, {0x6, 0xe7}, {0x3, 0x4}, {0x9, 0x10}, {0x5, 0xa6e20000000000}, {0x0, 0x1efa}, {0x8, 0x5}, {0x10001, 0x1}, {0x8, 0xfffffffffffffff9}, {0x4, 0xf28}, {0x7f, 0x6}, {0x1, 0xc}, {0x1, 0xd}, {0x5, 0x7fff}, {0x49, 0x8}, {0x81, 0xc}, {0x5, 0xdb25}, {0x3, 0x1}, {0x3, 0x2}, {0xb, 0x9}, {0x1, 0x2}, {0x0, 0x5}, {0x1, 0xae7e}, {0x0, 0x80000001}, {0x8, 0xfffffffffffffffe}, {0x8001, 0x7fffffff}, {0x8, 0x401}, {0xfffffffffffffffb, 0x100}, {0x80, 0x4}, {0x3, 0x8}, {0x8000, 0x48000000}, {0x2}, {0x7, 0x100000001}, {0x1, 0x200000000}, {0x9, 0x7}, {0x2c, 0xfffffffffffffffe}, {0xf1, 0x9}, {0xb11, 0xd9}, {0x6, 0x6}, {0x7}, {0x2, 0x7191}, {0xda, 0xfffffffffffff60f}, {0x0, 0x10}, {0x5, 0x7}, {0x8, 0x3}, {0x3b, 0xf}, {0x3, 0x1}, {0x3, 0x3}, {0x1, 0x7fff}, {0x1, 0x1000}, {0x2, 0xffffffffffffffff}, {0x8, 0x8f3f}, {0x83, 0xdf43}, {0x7, 0x1}, {0x0, 0x3}, {0x3, 0x3}, {0x1, 0xe}, {0x400, 0x1}, {0x8000, 0xfffffffffffffff7}, {0x5, 0x8001}, {0x5, 0x988e}, {0x0, 0x9}, {0x101, 0xfffffffffffffff8}, {0x4, 0xf}, {0xa6a}, {0x9, 0x90}, {0x4e65, 0xfffffffffffffffc}, {0x0, 0x6}, {0xd43, 0x3}, {0x800, 0x2}, {0x7, 0x5}, {0x6, 0x1}, {0x6, 0x8000000000000000}, {0x4, 0x100}, {0x5, 0x9}, {0x9, 0x800}, {0x624, 0x5}, {0x6, 0xfff}, {0xc7, 0x1000}, {0x9}, {0x2, 0xf3}, {0x4, 0x8}, {0x0, 0x6}, {0x0, 0x8}, {0x5, 0xfffffffffffffffc}, {0x2}, {0xbf71, 0x8}, {0x2, 0x2}, {0x3, 0x3}, {0x8, 0x8000000000}, {0x3, 0x80}, {0x4, 0x2}, {0x7, 0x2}, {0x0, 0x1b7}, {0x4b8, 0x5}, {0x8, 0x9}, {0x7, 0x9}, {0x7, 0x9}, {0x3, 0x6}, {0x90, 0x2}, {0x200, 0x6d}, {0xf88f, 0x7}, {0x5, 0x7}, {0x2, 0x62}, {0x643, 0xffffffffffffff90}, {0x0, 0x2}, {0x1, 0x1d3a}, {0x6, 0xa428}, {0x5, 0x9}, {0x5, 0x4}, {0xc5, 0x9}, {0x10001, 0x1ff}, {0x5, 0x34}, {0x8001, 0x4}, {0x7fffffff, 0x3ff}, {0x9, 0x6}, {0x3, 0x5}, {0x9, 0x8}, {0x2, 0x1ff}, {0xffffffffffffff00, 0x40}, {0xc5df, 0x200}, {0x5, 0x6}, {0x3, 0x81}, {0x1}, {0x6, 0x100000000}, {0x7, 0xffffffffffffffff}, {0xc1d, 0x653}, {0x3c00000, 0x80000001}, {0x1, 0x5}, {0x100000000, 0x7}, {0x7, 0x9}, {0x87, 0x400}, {0x2, 0x5}, {0x30e5, 0x5368c6b3}, {0xffffffffffffff22}, {0xffffffffffffffff, 0xa23f}, {0x7fffffffffffffff, 0xff37}, {0x6, 0x2}, {0x3f, 0x8}, {0x8, 0x2}, {0x7}, {0x7, 0x218}, {0xfffffffffffffff8, 0x7}, {0x4, 0xff0}, {0x9, 0x90000000}, {0x3, 0x650}, {0xe, 0x100000000}, {0x3, 0x3b89aeda}, {0x8935, 0x10000}, {0x28b, 0x7fffffffffffffff}, {0xffffffffffffff81, 0xffffffffffffff98}, {0xcd8, 0x5e4}, {0x4be, 0x1ff}, {0xffffffffffffffff, 0xfffffffffffffff9}, {0x3, 0x5}, {0x2, 0x200000000000}, {0xf, 0x1}, {0x1, 0xed8e}, {0x5, 0xcb}, {0x1, 0x1}, {0x7, 0xa3}, {0x3, 0x6}, {0x1, 0x1}, {0xc, 0xa}, {0x1, 0x6}, {0x6, 0xa}, {0x82f8, 0x7}, {0x3f, 0xfffffffffffffffc}, {0x2, 0xc2}, {0x6, 0x200}, {0x3ff, 0xfffffffffffffff7}, {0x9, 0x1}, {0x9}, {0x5, 0x10}, {0x2748, 0xfec1}, {0x1, 0x7}, {0x200}, {0x6, 0x10}, {0x10, 0x9}]}, &(0x7f0000005b00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000005b40)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000005bc0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f0000005c00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000002}}, &(0x7f0000005c40)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000001}}, &(0x7f0000005c80)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000005cc0)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000005d00)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000005d40)=@label={{0x4f32494e, 0x4, 0x10, 0x40000002}}, &(0x7f0000005dc0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000005e00)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000005e40)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000005e80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x200, 0x3}, {0x1ff, 0x9}, {0xff79, 0x800}, {0x5, 0x9}, {0xd3, 0x8}, {0x6, 0x5}, {0x7, 0x6}, {0x1, 0x80000000}, {0x3, 0x8000000000000000}, {0x3, 0x9}, {0x47b3, 0x4}, {0x7, 0x100000000}, {0x6, 0x8}, {0x5ceb, 0x9}, {0x614aaa78, 0x40}, {0x4, 0x6}, {0x5, 0x1}, {0x7ff, 0x5}, {0x6, 0x80000000}, {0x400, 0x200}, {0x2, 0x25af}, {0x10001, 0x3}, {0x192, 0x1}, {0x0, 0x9}, {0x6, 0x3}, {0x3c826ccf, 0x3}, {0xc7c4, 0x3}, {0x4652, 0x92a}, {0xfffffffffffffffe, 0x4}, {0x38c2, 0x9b}, {0x9, 0x1}, {0x51, 0xffffffffffff8c24}, {0x7ec4, 0x8}, {0xa, 0x200}, {0x5, 0x4}, {0xcf4c, 0x8}, {0x80, 0x9c}, {0xf, 0x400}, {0x7, 0x80000000}, {0x0, 0xab78}, {0x7, 0x3}, {0x7, 0x401}, {0x9, 0x3}, {0xe34d, 0xfffffffffffffc01}, {0x0, 0x1}, {0x100}, {0x6, 0x4}, {0x6, 0x40}, {0x4, 0x8}, {0x3ff, 0xf}, {0x8, 0x3}, {0xe5e, 0x4}, {0x8, 0x2}, {0xfffffffffffffffc, 0x3ff}, {0x7, 0x4}, {0x9, 0x5}, {0x1, 0xffffffff00000000}, {0x7f}, {0x24d, 0x74e}, {0x8, 0x5}, {0x35164733, 0xfd34}, {0x8001, 0x101}, {0x902, 0x4}, {0xffff, 0x3}, {0x0, 0xc21}, {0x1d0, 0x2}, {0x9, 0x2}, {0x200, 0x2}, {0x1cefa1ad, 0x7fff}, {0x7, 0x3ff}, {0xffffffffffffffff, 0x3}, {0x4, 0x3}, {0x7ff, 0x3}, {0x5, 0x8000000000000001}, {0x40, 0x23}, {0x4, 0x4a67}, {0x0, 0x2}, {0x3, 0xfff}, {0xff, 0x1}, {0xf4, 0x9}, {0x0, 0x4800000000000000}, {0x5, 0xfffffffffffffff7}, {0x1, 0x68df}, {0x8, 0xd}, {0x1e4, 0xfffffffffffffff8}, {0xf1ba, 0x2}, {0x3, 0x8000000000000000}, {0x2, 0x3}, {0x2, 0x6}, {0x5, 0x8}, {0x924, 0x5}, {0x10000, 0x1}, {0x5, 0xe}, {0x5, 0x8000000000000001}, {0x3, 0x6}, {0x8, 0x3}, {0x6, 0x2}, {0x8001, 0x2}, {0x0, 0x2}, {0x10001, 0x172}, {0x100, 0x1}, {0x100, 0x10001}, {0xf, 0x9}, {0x5, 0x6e}, {0x7, 0x7bf}, {0xffff, 0xfff}, {0x7fffffff, 0x80}, {0x2, 0x7}, {0x4, 0x6}, {0x100000000, 0x3ff}, {0x7fffffff, 0x4}, {0x3, 0x4}, {0x0, 0x3}, {0x15216a8e, 0x2}, {0xa15, 0x7}, {0x0, 0xc}, {0x7da69b7a, 0xfffffffffffffffd}, {0xffffffffffffffff, 0x4}, {0xd2, 0x5}, {0x1, 0x8000000000000000}, {0xfffffffffffff800, 0x1}, {0x9, 0x7}, {0x9f1, 0x2}, {0x8, 0x84}, {0x6, 0x2}, {0xc7, 0x9}, {0x200, 0x9}, {0x9, 0x2}, {0x0, 0x6}, {0xffffffff, 0x8000000000000000}, {0x9, 0x7}, {0x3, 0xa5}, {0x1d, 0xffffffffffff0000}, {0x5}, {0x8000000000000001, 0x4}, {0x9, 0x6}, {0x5, 0x3}, {0x3, 0x8001}, {0x3, 0x200}, {0xd17}, {0x7, 0x9}, {0x1000, 0x7}, {0xffff, 0x80}, {0x9, 0xd4}, {0x4, 0x368}, {0x5, 0x5}, {0xffffffffffffffff, 0x8}, {0x5}, {0x5, 0x3}, {0x800, 0x9}, {0xbc8, 0x8000000000000001}, {0x5, 0x4}, {0x7}, {0xb, 0x2}, {0x6, 0x7}, {0x9, 0x9}, {0x3, 0x9}, {0x2, 0x1}, {0x8000000000000001, 0x4}, {0x4, 0x2}, {0x5, 0x200}, {0x6, 0x7}, {0x9, 0x8}, {0x4, 0x86}, {0x1, 0x5}, {0x2, 0x39}, {0x1, 0x541d}, {0x8000, 0x9}, {0xffffffff, 0x3f8000}, {0x1ff, 0x8}, {0xe, 0x80000000}, {0x1, 0x1}, {0x5, 0xfffffffffffffff9}, {0x7ff, 0x4}, {0x7fffffff, 0x7f}, {0x36, 0x401}, {0xdb3, 0x1}, {0x10000, 0x5}, {0x9, 0x5}, {0x8000000000000000, 0x4}, {0x1, 0x1}, {0x2, 0x8}, {0x9b, 0x9}, {0x5ab7b7d0, 0x9}, {0x8000, 0xae3e}, {0x2, 0x8}, {0x445, 0x3}, {0x8, 0x25}, {0xb, 0x3}, {0x61, 0x7fffffff}, {0x2, 0x5}, {0x760d, 0xffffffffffffff01}, {0xd16, 0x6bf74f87}, {0x1ff, 0x40}, {0x1, 0x8}, {0x3, 0x9}, {0x2, 0x10}, {0x4, 0xf}, {0x2, 0xbb}, {0x3, 0xd}, {0x40, 0x8}, {0x8000000000000000, 0x8000}, {0x8}, {0xffffffffffffffff}, {0x6, 0x1}, {0x4, 0x9}, {0x19, 0x6}, {0x589, 0x6a}, {0x3, 0x5e}, {0x81, 0x10000}, {0x9, 0xffffffff}, {0x7, 0x3}, {0x72, 0x8}, {0x9, 0x7}, {0x8, 0x81}, {0x1, 0x10001}, {0x3, 0x80000001}, {0x8, 0x6}, {0x8000000000000000, 0x7}, {0x7, 0x9}, {0x5, 0x7fff}, {0x4, 0x80}, {0x6, 0xffffffffffff8000}, {0x9, 0x40}, {0xb, 0xf460}, {0x3, 0xf1f}, {0xd, 0x8}, {0x1000, 0x9}, {0xbf2, 0x6}, {0xa7f1, 0x2}, {0x7d, 0x5}, {0x9, 0x7}, {0x3, 0x7}, {0x3, 0x9}, {0x30f5, 0xca7}, {0x4, 0x3}, {0x10001, 0x7ff}, {0x0, 0x7fff}, {0xfffffffffffffffd, 0x2}, {0x2, 0x3}, {0x7, 0xf}, {0xa2de, 0x50}, {0x2, 0xfffffffffffffffe}, {0x7fffffffffffffff, 0xffffffff}, {0x9, 0x7}, {0xaba, 0xfffffffffffffffe}, {0x8, 0x3}, {0x3, 0x6}, {0x5, 0x3}, {0x35}, {0x46e9, 0xb}, {0xefc0, 0x99}, {0x3, 0x8}, {0x0, 0x3}, {0x1, 0x6}]}, &(0x7f0000006ec0)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000006f00)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000006f80)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000001}}, &(0x7f0000006fc0)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000007000)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000007040)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f0000007080)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000000}}, &(0x7f00000070c0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000007100)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0xb}, &(0x7f0000007240)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000007280)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}], 0x32}) 1.042352486s ago: executing program 2 (id=6370): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xae}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x4000, &(0x7f0000000400)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f0000001880)=""/4112, 0x1010}, {&(0x7f0000000a40)=""/107, 0x6b}, {&(0x7f0000001740)=""/64, 0x40}, {&(0x7f00000005c0)=""/48, 0x30}, {&(0x7f00000001c0)=""/64, 0x40}, {&(0x7f00000002c0)=""/30, 0x1e}], 0x7}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8000d3a7}], 0x4, 0x2132, 0x0) 922.777895ms ago: executing program 5 (id=6371): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 799.306769ms ago: executing program 1 (id=6372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="7197423e5b436d0dafc34326fffce70a0a717fa60888155f7a8c45e5b2a0107cc7f5994cc84acca935b105cd8eece112196c5a68f4753d25344268f0ba4293e0d8bf4abb4104e31501deaabd73facc2b1e9f9be56f783caf354fac7c3221d99c17a59a4c03b9c2461459ba0523927cd234787c70622e1cbf00a104fa668b9d2a28cc046d0ee4fee5de5b9136129460d1dd1046e9ebb5d061a409fb2df773007a4359309fd1cf6c76675d5641e916", 0xae}, {&(0x7f00000001c0)}], 0x2, 0x16) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000050900010073797a30000000000900030073797a32000000007c000000060a010400000000000000000100000208000b40000000005400048050000180080001006e61740044000280080002400000000208000140000000000800054000000016080006400000000a0800054000000000080002400000000a080006400000000c080004400000000c0900010073797a30"], 0xf0}}, 0x0) 613.579844ms ago: executing program 1 (id=6373): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x0, 0x130, 0x130, 0x1f0, 0x348, 0x348, 0x348, 0x130, 0x348, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x29}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x25}}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0x0, 0x0, 'pimreg1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x4, 0x4}, {0x2, 0x4, 0x6}}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'lo\x00', 'dvmrp1\x00', {}, {}, 0x73}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 555.783595ms ago: executing program 5 (id=6374): r0 = socket(0xa, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="654671ca4b48f31b5f810e5e09c898e9f6", 0x11}], 0x1, 0x0, 0x0, 0xd0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000015006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x28}}], 0x1, 0x4000810) 512.194025ms ago: executing program 1 (id=6375): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f80)={@map, 0x24, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x36c7, 0x0}, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa08004927002c00670000fc0b000000000000ac1e0001830739ac38c9018307efac1414bb0000150490780a010101"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@func={0xe, 0x0, 0x0, 0xc, 0x3}, @func={0x6, 0x0, 0x0, 0xc, 0x3}, @restrict={0xd, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x30, 0x1e, 0x61, 0x2e]}}, &(0x7f0000000380)=""/47, 0x42, 0x2f, 0x1, 0x9, 0x10000}, 0x28) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="2409b5"], &(0x7f0000000200)='GPL\x00', 0x0, 0xb6, &(0x7f0000000240)=""/182, 0x41000, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000500)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x2, 0x9, 0xdc}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000580)=[{0x2, 0x4, 0x10, 0x1}, {0x4, 0x2, 0x4, 0xa}, {0x4, 0x4, 0x6, 0x3}, {0x1, 0x1, 0x5, 0xb}, {0x4, 0x3, 0x2, 0x5}, {0x0, 0x2, 0x1, 0x7}, {0x0, 0x1, 0xd, 0x2}], 0x10, 0x386}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000880)={{r4, &(0x7f00000006c0)='filter\x00', 0x60a80, &(0x7f0000000700)={@_ha_fsid={[0xb85, 0xc]}, {0x0, 0x3, 0x2, 0x2}}, 0x3, &(0x7f0000000740), &(0x7f0000000780)=0x401}, {[0xfff, 0xaf, 0x1, 0x9]}, 0xffff2259, 0x88, &(0x7f00000007c0)=""/136}) connect$rds(r5, &(0x7f0000000900)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x5}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r6, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 388.818535ms ago: executing program 2 (id=6376): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x0, 0x11, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0xf7ad, @empty}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e20, @private=0xa010100}}]}, 0x88}, 0x1, 0x7}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r0, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r3 = socket(0x28, 0x805, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x6c, r4, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5e}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x121c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1099}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1b8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4c841}, 0x4044) socket$inet6(0xa, 0x5, 0x7f) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, &(0x7f0000000100)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000900008085000000c400000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYBLOB="04000d8008"], 0x24}, 0x1, 0x5502000000000000}, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in6=@mcast1, 0x0, 0xecdf, 0x0, 0x200}, {@in=@broadcast, 0x4d3, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x8, 0x4007ff, 0x0, 0x400}, {}, 0x0, 0x3507, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0xc0}}]}, 0x194}}, 0x4050) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2714, @host}, 0x10) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 328.817537ms ago: executing program 5 (id=6377): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000006000000000000ffffff80e500020000000000c500fcff00000000850000001b3bdf0095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x3284, 0x66, 0x5, 0x2, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x10000, '\x00', 0x0, r7, 0x4, 0x4, 0x3}, 0x50) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff070000070000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller1\x00', @link_local}) 298.97699ms ago: executing program 0 (id=6378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) 230.802867ms ago: executing program 3 (id=6241): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbf8, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 0s ago: executing program 3 (id=6380): socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bind(r0, &(0x7f0000000240)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x1}, 0x80) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)=ANY=[@ANYBLOB="58010000", @ANYRES16=r1, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x40005}, 0x20044000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES8=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0xc7a90be8c95f386b) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0600000004000000040000000200000081400000a723a88dc630de2274e508493f39e5e571fd7d0e5c477adffec8f85bbc1675ac2e7a8eeb178771338c8d7a5e3b93b990a3ed7f6cf06d55981ccc1ff96dd1569e05d5524f44a0da27f0d6d4250c0ba4c0d15cc9f3023ef426f909b9c03c63120fbb6aa6fbc0aee7bffda062442f5ab1cc0d85817ab74d3e810720bd34ce797b552aab5b5db4d39ad92b96a3434edceccb38bc86f8511f90254923ab82ce0d22f7638bbcb8641fa0bf6e1f53e5b320341e72da3895cfade0c3b4475a7661a042d283438abcc28ca1694e203202cb22f2a7469e16321fd31e2262623a51c48f0f00c7", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r7}, 0xc) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r8 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8954, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c00000040000701fefeffff00000000047c0000040042801400018006009a71ca7a8ea7521f500600800a000006000c00800a000073525658a694b329097733ce638e53b725a4342ac786f0f5d28c06c90a40caa503bfc892701d81170a6ffd7a49b597010b46093c"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r10 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x1b59, 0x20407, @empty, 0x200}}, 0x24) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES64=r10, @ANYBLOB="00012cb980000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r11) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff0000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r3, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ecdbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 602.686018][T22701] RAX: ffffffffffffffda RBX: 00007fe0ec215fa0 RCX: 00007fe0ebf9ce59 [ 602.686031][T22701] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 602.686042][T22701] RBP: 00007fe0ecdbd090 R08: 0000000000000000 R09: 0000000000000000 [ 602.686053][T22701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 602.686065][T22701] R13: 00007fe0ec216038 R14: 00007fe0ec215fa0 R15: 00007ffdb0f4d7e8 [ 602.686095][T22701] [ 602.829591][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 603.038942][T22698] geneve4: entered promiscuous mode [ 603.094252][T22703] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 603.150247][T22705] syzkaller0: entered promiscuous mode [ 603.162397][T22705] syzkaller0: entered allmulticast mode [ 603.741991][T22728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5166'. [ 603.865527][T22738] netlink: 'syz.3.5170': attribute type 61 has an invalid length. [ 604.314537][T22755] netlink: 1244 bytes leftover after parsing attributes in process `syz.5.5176'. [ 604.488326][T22765] FAULT_INJECTION: forcing a failure. [ 604.488326][T22765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 604.498937][T22766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5181'. [ 604.512314][T22765] CPU: 1 UID: 0 PID: 22765 Comm: syz.5.5179 Not tainted syzkaller #0 PREEMPT(full) [ 604.512340][T22765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 604.512351][T22765] Call Trace: [ 604.512359][T22765] [ 604.512367][T22765] dump_stack_lvl+0xe8/0x150 [ 604.512393][T22765] should_fail_ex+0x412/0x560 [ 604.512419][T22765] prepare_alloc_pages+0x22a/0x650 [ 604.512452][T22765] __alloc_frozen_pages_noprof+0x12f/0x380 [ 604.512482][T22765] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 604.512511][T22765] ? __pfx_policy_nodemask+0x10/0x10 [ 604.512533][T22765] ? __lock_acquire+0x6b5/0x2cf0 [ 604.512557][T22765] alloc_pages_mpol+0x235/0x490 [ 604.512581][T22765] folio_alloc_mpol_noprof+0x39/0x160 [ 604.512602][T22765] vma_alloc_folio_noprof+0xe1/0x1e0 [ 604.512623][T22765] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 604.512643][T22765] ? __pte_offset_map+0x29/0x240 [ 604.512666][T22765] ? __pte_offset_map+0x29/0x240 [ 604.512692][T22765] do_pte_missing+0x159d/0x33f0 [ 604.512729][T22765] ? handle_mm_fault+0xf1/0x3170 [ 604.512753][T22765] handle_mm_fault+0x1bf2/0x3170 [ 604.512796][T22765] ? handle_mm_fault+0xf1/0x3170 [ 604.512824][T22765] ? __pfx_handle_mm_fault+0x10/0x10 [ 604.512847][T22765] ? follow_page_pte+0x6cf/0xe60 [ 604.512878][T22765] ? __pfx_follow_page_pte+0x10/0x10 [ 604.512911][T22765] __get_user_pages+0x167f/0x2730 [ 604.512962][T22765] __gup_longterm_locked+0xdcf/0x1630 [ 604.512989][T22765] ? lock_acquire+0x106/0x350 [ 604.513012][T22765] ? sanity_check_pinned_pages+0x7a8/0x870 [ 604.513059][T22765] gup_fast_fallback+0x1d84/0x20d0 [ 604.513108][T22765] ? __pfx_gup_fast_fallback+0x10/0x10 [ 604.513133][T22765] ? is_valid_gup_args+0x11f/0x200 [ 604.513155][T22765] ? pin_user_pages_fast+0x4d/0xb0 [ 604.513179][T22765] rds_info_getsockopt+0x20e/0x4a0 [ 604.513297][T22765] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 604.513323][T22765] ? __might_fault+0xaf/0x130 [ 604.513350][T22765] ? rds_getsockopt+0x2e6/0x500 [ 604.513371][T22765] ? __pfx_rds_getsockopt+0x10/0x10 [ 604.513392][T22765] do_sock_getsockopt+0x51d/0x7e0 [ 604.513416][T22765] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 604.513446][T22765] ? __fget_files+0x3a0/0x420 [ 604.513465][T22765] ? __fget_files+0x2a/0x420 [ 604.513491][T22765] __x64_sys_getsockopt+0x1a4/0x240 [ 604.513514][T22765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.513534][T22765] do_syscall_64+0x174/0x580 [ 604.513552][T22765] ? trace_irq_disable+0x3b/0x140 [ 604.513575][T22765] ? clear_bhb_loop+0x40/0x90 [ 604.513595][T22765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.513610][T22765] RIP: 0033:0x7f1aa499ce59 [ 604.513629][T22765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.513644][T22765] RSP: 002b:00007f1aa2bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 604.513665][T22765] RAX: ffffffffffffffda RBX: 00007f1aa4c15fa0 RCX: 00007f1aa499ce59 [ 604.513676][T22765] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000003 [ 604.513687][T22765] RBP: 00007f1aa2bee090 R08: 0000200000000400 R09: 0000000000000000 [ 604.513700][T22765] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 604.513712][T22765] R13: 00007f1aa4c16038 R14: 00007f1aa4c15fa0 R15: 00007ffd069fc478 [ 604.513743][T22765] [ 604.881957][T22770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5182'. [ 604.972849][ T9349] net_ratelimit: 21 callbacks suppressed [ 604.972872][ T9349] bond2: (slave gretap0): failed to get link speed/duplex [ 605.089790][ T9331] bond2: (slave gretap0): failed to get link speed/duplex [ 605.136744][T22781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5186'. [ 605.226316][ T9331] bond2: (slave gretap0): failed to get link speed/duplex [ 605.284573][T22781] netlink: 'syz.1.5186': attribute type 32 has an invalid length. [ 605.339827][ T604] bond2: (slave gretap0): failed to get link speed/duplex [ 605.450197][ T604] bond2: (slave gretap0): failed to get link speed/duplex [ 605.579405][ T1052] bond2: (slave gretap0): failed to get link speed/duplex [ 605.661355][T22804] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5193'. [ 605.709919][T22805] block nbd0: server does not support multiple connections per device. [ 605.728573][T22805] block nbd0: shutting down sockets [ 606.014663][T22801] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 606.174647][T22801] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 606.293103][ T1052] bond2: (slave gretap0): failed to get link speed/duplex [ 606.529451][ T1052] bond2: (slave gretap0): failed to get link speed/duplex [ 606.608708][T22836] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 606.686856][T22829] syzkaller0: entered promiscuous mode [ 606.705846][T22829] syzkaller0: entered allmulticast mode [ 606.740901][ T9349] bond2: (slave gretap0): failed to get link speed/duplex [ 607.829248][T22866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5211'. [ 609.631616][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 610.913473][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 611.613772][T22863] batadv1: entered promiscuous mode [ 611.633065][T22863] batadv1: entered allmulticast mode [ 611.682149][T22869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5212'. [ 611.694083][T22869] netlink: 'syz.0.5212': attribute type 11 has an invalid length. [ 611.717438][T22875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5213'. [ 611.786457][T22869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5212'. [ 611.797781][ T9349] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.821342][ T9349] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.833005][T22869] netlink: 'syz.0.5212': attribute type 11 has an invalid length. [ 611.853429][ T9349] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.887431][ T9349] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.962516][T22881] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 612.032666][ T9349] bond2: (slave gretap0): failed to get link speed/duplex [ 612.147307][T22877] lo speed is unknown, defaulting to 1000 [ 612.165077][ T9349] bond2: (slave gretap0): failed to get link speed/duplex [ 612.389568][ T604] bond2: (slave gretap0): failed to get link speed/duplex [ 612.501792][T22902] sctp: [Deprecated]: syz.0.5223 (pid 22902) Use of int in max_burst socket option. [ 612.501792][T22902] Use struct sctp_assoc_value instead [ 612.592974][T22903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5222'. [ 612.938106][T22903] bond7: option miimon: invalid value (18446744073709551607) [ 612.980271][T22903] bond7: option miimon: allowed values 0 - 2147483647 [ 613.025680][T22903] bond7 (unregistering): Released all slaves [ 613.165324][ T9349] bond2: (slave gretap0): link status up again after 0 ms [ 613.206355][ T5633] block nbd0: Receive control failed (result -32) [ 613.210202][ T9331] bond2: (slave gretap0): link status up again after 0 ms [ 613.254566][T22927] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 613.264254][ T9331] bond2: (slave gretap0): link status up again after 0 ms [ 613.318113][ T9331] bond2: (slave gretap0): link status up again after 0 ms [ 613.338960][T19590] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 613.359562][ T9331] bond2: (slave gretap0): link status up again after 0 ms [ 613.399650][ T9331] bond2: (slave gretap0): link status up again after 0 ms [ 613.429537][ T9331] bond2: (slave gretap0): link status up again after 0 ms [ 613.447239][T22932] netlink: 'syz.2.5227': attribute type 22 has an invalid length. [ 613.470901][T22922] syzkaller0: entered promiscuous mode [ 613.476577][T22922] syzkaller0: entered allmulticast mode [ 613.501807][T22902] batadv1: entered promiscuous mode [ 613.518977][T22902] batadv1: entered allmulticast mode [ 613.706316][T22937] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 617.040152][ T9327] net_ratelimit: 151 callbacks suppressed [ 617.040173][ T9327] bond2: (slave gretap0): link status up again after 0 ms [ 617.070460][ T1052] bond2: (slave gretap0): link status up again after 0 ms [ 617.094162][ T9327] bond2: (slave gretap0): link status up again after 0 ms [ 617.131097][ T9327] bond2: (slave gretap0): link status up again after 0 ms [ 617.153820][ T9327] bond2: (slave gretap0): link status up again after 0 ms [ 617.192170][ T9316] bond2: (slave gretap0): link status up again after 0 ms [ 617.237066][ T9316] bond2: (slave gretap0): link status up again after 0 ms [ 617.260253][ T9316] bond2: (slave gretap0): link status up again after 0 ms [ 617.316041][ T9349] bond2: (slave gretap0): link status up again after 0 ms [ 617.344026][ T9349] bond2: (slave gretap0): link status up again after 0 ms [ 618.587031][T22980] netlink: 276 bytes leftover after parsing attributes in process `syz.3.5239'. [ 618.908452][T22993] netlink: 'syz.1.5237': attribute type 1 has an invalid length. [ 619.196322][T23005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.233370][T22977] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.241162][T22977] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.327729][T22977] team_slave_0: left promiscuous mode [ 619.343841][T22977] team_slave_1: left promiscuous mode [ 619.861926][T22977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.935740][T22977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.197629][T23002] gretap1: entered allmulticast mode [ 621.242476][ T9349] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 621.253624][ T9349] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.264836][ T9349] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 621.277677][ T9349] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.291172][ T9349] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 621.338228][ T9349] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.361029][ T9349] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 621.377041][ T9349] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.688814][T23054] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 621.887091][T23061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 621.892820][T23063] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 621.896127][T23061] IPv6: NLM_F_CREATE should be set when creating new route [ 621.909866][T23061] IPv6: NLM_F_CREATE should be set when creating new route [ 621.975595][T23065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5264'. [ 622.007994][T23061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5264'. [ 622.077778][T23064] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5263'. [ 622.102265][ T9331] net_ratelimit: 57 callbacks suppressed [ 622.102287][ T9331] bond2: (slave gretap0): failed to get link speed/duplex [ 622.239440][ T9349] bond2: (slave gretap0): failed to get link speed/duplex [ 622.290316][T23078] openvswitch: netlink: Key type 12698 is out of range max 32 [ 622.370987][ T9349] bond2: (slave gretap0): failed to get link speed/duplex [ 622.412165][T23082] FAULT_INJECTION: forcing a failure. [ 622.412165][T23082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.475866][T23082] CPU: 0 UID: 0 PID: 23082 Comm: syz.3.5272 Not tainted syzkaller #0 PREEMPT(full) [ 622.475894][T23082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 622.475905][T23082] Call Trace: [ 622.475914][T23082] [ 622.475922][T23082] dump_stack_lvl+0xe8/0x150 [ 622.475949][T23082] should_fail_ex+0x412/0x560 [ 622.475974][T23082] _copy_from_user+0x2d/0xb0 [ 622.475996][T23082] ___sys_sendmsg+0x1c6/0x360 [ 622.476018][T23082] ? __lock_acquire+0x6b5/0x2cf0 [ 622.476042][T23082] ? __pfx____sys_sendmsg+0x10/0x10 [ 622.476093][T23082] ? __fget_files+0x2a/0x420 [ 622.476115][T23082] ? __fget_files+0x3a0/0x420 [ 622.476146][T23082] __x64_sys_sendmsg+0x1bd/0x2a0 [ 622.476169][T23082] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 622.476198][T23082] ? __pfx_ksys_write+0x10/0x10 [ 622.476231][T23082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.476251][T23082] do_syscall_64+0x174/0x580 [ 622.476269][T23082] ? trace_irq_disable+0x3b/0x140 [ 622.476295][T23082] ? clear_bhb_loop+0x40/0x90 [ 622.476316][T23082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.476335][T23082] RIP: 0033:0x7f0c1659ce59 [ 622.476352][T23082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.476368][T23082] RSP: 002b:00007f0c173ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.476389][T23082] RAX: ffffffffffffffda RBX: 00007f0c16815fa0 RCX: 00007f0c1659ce59 [ 622.476403][T23082] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000003 [ 622.476415][T23082] RBP: 00007f0c173ab090 R08: 0000000000000000 R09: 0000000000000000 [ 622.476426][T23082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.476438][T23082] R13: 00007f0c16816038 R14: 00007f0c16815fa0 R15: 00007ffe872c72b8 [ 622.476467][T23082] [ 622.569509][ T604] bond2: (slave gretap0): failed to get link speed/duplex [ 622.768100][T23090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5275'. [ 622.795635][T23088] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 622.937244][T23090] bond5: entered promiscuous mode [ 622.942987][T23090] 8021q: adding VLAN 0 to HW filter on device bond5 [ 622.969701][ T9327] bond2: (slave gretap0): failed to get link speed/duplex [ 623.075149][T23090] 8021q: adding VLAN 0 to HW filter on device bond5 [ 623.101770][T23090] bond5: (slave sit2): The slave device specified does not support setting the MAC address [ 623.125101][T23090] bond5: (slave sit2): Error -95 calling set_mac_address [ 623.172554][T23116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.306921][T23110] syzkaller0: entered promiscuous mode [ 623.312898][T23110] syzkaller0: entered allmulticast mode [ 623.323099][ T604] bond2: (slave gretap0): failed to get link speed/duplex [ 623.525427][T23126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5282'. [ 623.548679][T23125] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 623.579430][T23126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5282'. [ 623.649013][T23129] tipc: Started in network mode [ 623.663214][T23129] tipc: Node identity 0e24e82da8e3, cluster identity 4711 [ 623.683433][T23129] tipc: Enabled bearer , priority 0 [ 623.684722][T23134] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.5286'. [ 623.710890][ T9349] bond2: (slave gretap0): failed to get link speed/duplex [ 623.725018][T23129] syzkaller0: entered promiscuous mode [ 623.738152][T23129] syzkaller0: entered allmulticast mode [ 623.772476][T23126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5282'. [ 623.808100][T23129] tipc: Resetting bearer [ 623.824218][T23140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5282'. [ 623.827033][T23134] pim6reg1: entered promiscuous mode [ 623.881033][T23134] pim6reg1: entered allmulticast mode [ 624.081524][T23145] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 624.130741][T23127] tipc: Resetting bearer [ 624.216725][T23127] tipc: Disabling bearer [ 624.369828][ T9349] bond2: (slave gretap0): failed to get link speed/duplex [ 624.464600][T23168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5295'. [ 624.486400][T23168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5295'. [ 624.570164][ T9331] bond2: (slave gretap0): failed to get link speed/duplex [ 624.818913][T23180] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 625.026208][T23194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5303'. [ 625.043320][T23190] lo speed is unknown, defaulting to 1000 [ 625.166885][T23199] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 625.195403][T23204] bridge0: left allmulticast mode [ 625.217113][T23204] geneve3: left promiscuous mode [ 625.240338][T23204] geneve3: left allmulticast mode [ 625.262196][T23204] veth9: left allmulticast mode [ 625.281451][T23204] veth11: left allmulticast mode [ 625.304970][T23204] bond3: left promiscuous mode [ 625.330585][T23204] bridge8: left promiscuous mode [ 625.353798][T23204] bridge8: left allmulticast mode [ 625.359593][T23204] macsec1: left promiscuous mode [ 625.364876][T23204] macsec1: left allmulticast mode [ 625.377962][T23204] geneve4: left promiscuous mode [ 625.385856][T23213] netlink: 'syz.0.5310': attribute type 32 has an invalid length. [ 625.556096][T23216] syzkaller0: entered promiscuous mode [ 625.570272][T23216] syzkaller0: entered allmulticast mode [ 625.601027][T23223] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5313'. [ 625.874601][ T604] wlan1: Trigger new scan to find an IBSS to join [ 626.909533][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 628.835073][ T9349] wlan1: Trigger new scan to find an IBSS to join [ 629.754400][ T604] net_ratelimit: 3 callbacks suppressed [ 629.754420][ T604] bond2: (slave gretap0): failed to get link speed/duplex [ 629.791579][T23240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5316'. [ 630.011321][ T604] bond2: (slave gretap0): failed to get link speed/duplex [ 630.120581][ T9345] bond2: (slave gretap0): failed to get link speed/duplex [ 630.251191][ T604] bond2: (slave gretap0): failed to get link speed/duplex [ 630.282550][T23254] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 630.399500][ T9345] bond2: (slave gretap0): failed to get link speed/duplex [ 630.474811][T23266] sctp: [Deprecated]: syz.0.5326 (pid 23266) Use of struct sctp_assoc_value in delayed_ack socket option. [ 630.474811][T23266] Use struct sctp_sack_info instead [ 630.481603][T23269] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5325'. [ 630.519800][ T9327] bond2: (slave gretap0): failed to get link speed/duplex [ 630.690504][ T9345] bond2: (slave gretap0): failed to get link speed/duplex [ 630.819410][ T9327] bond2: (slave gretap0): failed to get link speed/duplex [ 630.881057][T23289] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5331'. [ 630.921630][T23289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5331'. [ 631.005913][T23294] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 631.033280][T23297] netlink: 'syz.0.5333': attribute type 10 has an invalid length. [ 631.052889][T23297] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5333'. [ 631.095930][T23294] geneve2: left promiscuous mode [ 631.132168][T23294] bond3: left promiscuous mode [ 631.138122][T23294] ip6tnl1: left allmulticast mode [ 631.155042][T23294] ip6gre1: left promiscuous mode [ 631.175933][T23306] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 631.178861][T23294] ip6gre1: left allmulticast mode [ 631.233836][T23306] netlink: 'syz.5.5334': attribute type 21 has an invalid length. [ 631.301425][ T9349] bond2: (slave gretap0): failed to get link speed/duplex [ 631.312432][T23307] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 631.327865][T23297] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.348043][ T604] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.378760][ T604] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.407287][T23309] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5337'. [ 631.444922][T23309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5337'. [ 631.481909][T23309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5337'. [ 631.515831][T23318] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5337'. [ 631.591842][ T604] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.635924][ T604] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.682467][ T1052] bond2: (slave gretap0): failed to get link speed/duplex [ 631.735123][T23332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5342'. [ 631.886013][ T9316] wlan1: Trigger new scan to find an IBSS to join [ 631.924582][T23334] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 632.486552][T23357] 8021q: VLANs not supported on vxcan1 [ 632.554541][T23365] tipc: Enabled bearer , priority 0 [ 632.581543][T23365] syzkaller0: entered promiscuous mode [ 632.600834][T23365] syzkaller0: entered allmulticast mode [ 632.630806][T23365] tipc: Resetting bearer [ 632.656290][T23364] tipc: Resetting bearer [ 632.731895][T23364] tipc: Disabling bearer [ 632.809238][ T9349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.687864][T23409] tipc: Started in network mode [ 633.695396][T23409] tipc: Node identity ba9c2b262bf6, cluster identity 4711 [ 633.703208][T23409] tipc: Enabled bearer , priority 0 [ 633.736008][T23406] syzkaller0: entered promiscuous mode [ 633.760216][T23406] syzkaller0: entered allmulticast mode [ 633.804415][T23406] tipc: Resetting bearer [ 633.852042][T23407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.938077][T23405] tipc: Resetting bearer [ 634.001785][T23405] tipc: Disabling bearer [ 634.599469][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 634.900953][ T9327] net_ratelimit: 19 callbacks suppressed [ 634.900975][ T9327] bond2: (slave gretap0): failed to get link speed/duplex [ 634.904675][T23448] __nla_validate_parse: 8 callbacks suppressed [ 634.904697][T23448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5377'. [ 635.034064][T23448] gretap1: entered allmulticast mode [ 635.062064][T23454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5377'. [ 635.083638][T23453] netlink: 'syz.3.5378': attribute type 1 has an invalid length. [ 635.154383][T23457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5378'. [ 635.185251][T23457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5378'. [ 635.196223][T23462] netlink: 272 bytes leftover after parsing attributes in process `syz.2.5381'. [ 635.265503][T23464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5380'. [ 635.310811][T23453] bond6: entered promiscuous mode [ 635.327455][T23453] 8021q: adding VLAN 0 to HW filter on device bond6 [ 635.345884][T23460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5377'. [ 635.440176][ T604] bond2: (slave gretap0): failed to get link speed/duplex [ 635.458368][T23470] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 635.525084][T23476] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5383'. [ 635.589606][ T9327] bond2: (slave gretap0): failed to get link speed/duplex [ 635.653303][T23480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5384'. [ 635.673687][T23484] FAULT_INJECTION: forcing a failure. [ 635.673687][T23484] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 635.709750][T23484] CPU: 0 UID: 0 PID: 23484 Comm: syz.3.5385 Not tainted syzkaller #0 PREEMPT(full) [ 635.709798][T23484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 635.709810][T23484] Call Trace: [ 635.709850][T23484] [ 635.709858][T23484] dump_stack_lvl+0xe8/0x150 [ 635.709886][T23484] should_fail_ex+0x412/0x560 [ 635.709911][T23484] prepare_alloc_pages+0x22a/0x650 [ 635.709946][T23484] __alloc_frozen_pages_noprof+0x12f/0x380 [ 635.709977][T23484] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 635.710008][T23484] ? __pfx_policy_nodemask+0x10/0x10 [ 635.710031][T23484] ? __lock_acquire+0x6b5/0x2cf0 [ 635.710055][T23484] alloc_pages_mpol+0x235/0x490 [ 635.710078][T23484] folio_alloc_mpol_noprof+0x39/0x160 [ 635.710100][T23484] vma_alloc_folio_noprof+0xe1/0x1e0 [ 635.710122][T23484] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 635.710142][T23484] ? __pte_offset_map+0x29/0x240 [ 635.710166][T23484] ? __pte_offset_map+0x29/0x240 [ 635.710191][T23484] do_pte_missing+0x159d/0x33f0 [ 635.710229][T23484] ? handle_mm_fault+0xf1/0x3170 [ 635.710255][T23484] handle_mm_fault+0x1bf2/0x3170 [ 635.710290][T23484] ? handle_mm_fault+0xf1/0x3170 [ 635.710319][T23484] ? __pfx_handle_mm_fault+0x10/0x10 [ 635.710345][T23484] ? follow_page_pte+0x6cf/0xe60 [ 635.710376][T23484] ? __pfx_follow_page_pte+0x10/0x10 [ 635.710409][T23484] __get_user_pages+0x167f/0x2730 [ 635.710458][T23484] __gup_longterm_locked+0xdcf/0x1630 [ 635.710483][T23484] ? lock_acquire+0x106/0x350 [ 635.710506][T23484] ? sanity_check_pinned_pages+0x7a8/0x870 [ 635.710536][T23484] gup_fast_fallback+0x1d84/0x20d0 [ 635.710589][T23484] ? __pfx_gup_fast_fallback+0x10/0x10 [ 635.710612][T23484] ? is_valid_gup_args+0x11f/0x200 [ 635.710637][T23484] ? pin_user_pages_fast+0x4d/0xb0 [ 635.710660][T23484] rds_info_getsockopt+0x20e/0x4a0 [ 635.710694][T23484] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 635.710721][T23484] ? __might_fault+0xaf/0x130 [ 635.710748][T23484] ? rds_getsockopt+0x2e6/0x500 [ 635.710769][T23484] ? __pfx_rds_getsockopt+0x10/0x10 [ 635.710790][T23484] do_sock_getsockopt+0x51d/0x7e0 [ 635.710824][T23484] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 635.710860][T23484] ? __fget_files+0x3a0/0x420 [ 635.710882][T23484] ? __fget_files+0x2a/0x420 [ 635.710910][T23484] __x64_sys_getsockopt+0x1a4/0x240 [ 635.710937][T23484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.710958][T23484] do_syscall_64+0x174/0x580 [ 635.710978][T23484] ? trace_irq_disable+0x3b/0x140 [ 635.711003][T23484] ? clear_bhb_loop+0x40/0x90 [ 635.711026][T23484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.711044][T23484] RIP: 0033:0x7f0c1659ce59 [ 635.711062][T23484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.711078][T23484] RSP: 002b:00007f0c173ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 635.711098][T23484] RAX: ffffffffffffffda RBX: 00007f0c16815fa0 RCX: 00007f0c1659ce59 [ 635.711113][T23484] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000003 [ 635.711125][T23484] RBP: 00007f0c173ab090 R08: 0000200000000400 R09: 0000000000000000 [ 635.711138][T23484] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 635.711151][T23484] R13: 00007f0c16816038 R14: 00007f0c16815fa0 R15: 00007ffe872c72b8 [ 635.711182][T23484] [ 635.713412][ T9349] bond2: (slave gretap0): failed to get link speed/duplex [ 636.123691][T23502] openvswitch: netlink: Key type 12698 is out of range max 32 [ 636.210500][ T9349] bond2: (slave gretap0): failed to get link speed/duplex [ 636.351965][ T9316] bond2: (slave gretap0): failed to get link speed/duplex [ 636.469709][ T9349] bond2: (slave gretap0): failed to get link speed/duplex [ 636.589505][ T9349] bond2: (slave gretap0): failed to get link speed/duplex [ 636.711302][ T9316] bond2: (slave gretap0): failed to get link speed/duplex [ 637.143141][T23539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5405'. [ 637.169528][T23539] netlink: 'syz.2.5405': attribute type 1 has an invalid length. [ 637.184046][T23539] netlink: 'syz.2.5405': attribute type 1 has an invalid length. [ 637.310659][T23545] xt_hashlimit: size too large, truncated to 1048576 [ 637.329104][T23545] xt_hashlimit: invalid interval [ 637.637902][T23558] geneve5: entered promiscuous mode [ 637.646163][T23558] geneve5: entered allmulticast mode [ 637.661086][T23559] Cannot find add_set index 0 as target [ 637.670096][ T9327] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20003 - 0 [ 637.693265][ T9327] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20003 - 0 [ 637.715393][ T9327] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20003 - 0 [ 637.743969][ T9327] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0 [ 637.871917][ T9327] wlan1: Trigger new scan to find an IBSS to join [ 637.982970][T23572] netlink: 'syz.5.5418': attribute type 1 has an invalid length. [ 638.251975][T23576] bond5: (slave bridge2): making interface the new active one [ 638.274821][T23576] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 638.337648][T23573] 8021q: VLANs not supported on vxcan1 [ 638.738572][T23602] Cannot find set identified by id 65534 to match [ 639.939473][ T9327] net_ratelimit: 19 callbacks suppressed [ 639.939491][ T9327] bond2: (slave gretap0): failed to get link speed/duplex [ 640.110947][ T9327] bond2: (slave gretap0): failed to get link speed/duplex [ 640.249438][ T9345] bond2: (slave gretap0): failed to get link speed/duplex [ 640.553281][ T9327] bond2: (slave gretap0): failed to get link speed/duplex [ 640.623920][T23653] netlink: 'syz.3.5437': attribute type 10 has an invalid length. [ 640.680338][T23653] __nla_validate_parse: 16 callbacks suppressed [ 640.680359][T23653] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5437'. [ 640.735525][T23658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5438'. [ 640.910450][ T9331] wlan1: Trigger new scan to find an IBSS to join [ 640.956646][T23670] Cannot find add_set index 1 as target [ 640.964595][T23651] bond6: left promiscuous mode [ 640.977672][T23651] geneve5: left promiscuous mode [ 640.994982][T23651] geneve5: left allmulticast mode [ 641.012369][ T604] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.057718][ T604] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.085968][ T604] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20003 - 0 [ 641.116885][ T604] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.147506][ T604] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.190354][ T604] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20003 - 0 [ 641.231863][T23653] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.240611][T23685] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5441'. [ 641.246601][T23666] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5441'. [ 641.295906][T23666] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5441'. [ 641.369465][T23666] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5441'. [ 641.433302][ T604] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.448240][T23693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5447'. [ 641.457121][ T604] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.457153][ T604] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20003 - 0 [ 641.457213][ T604] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.457235][ T604] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.457257][ T604] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20003 - 0 [ 641.459841][ T604] bond2: (slave gretap0): failed to get link speed/duplex [ 641.542725][T23693] unsupported nla_type 216 [ 641.903007][ T9316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.957858][T23708] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5452'. [ 641.959462][ T1052] bond2: (slave gretap0): failed to get link speed/duplex [ 642.005088][T23682] syz_tun: entered promiscuous mode [ 642.099498][ T9349] bond2: (slave gretap0): failed to get link speed/duplex [ 642.172335][T23712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5454'. [ 642.265831][T23712] bond8: entered promiscuous mode [ 642.294968][T23712] 8021q: adding VLAN 0 to HW filter on device bond8 [ 642.454783][T23712] 8021q: adding VLAN 0 to HW filter on device bond8 [ 642.471772][T23712] bond8: (slave sit2): The slave device specified does not support setting the MAC address [ 642.526761][T23712] bond8: (slave sit2): Error -95 calling set_mac_address [ 642.611367][T23730] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5460'. [ 642.659396][ T9316] bond2: (slave gretap0): failed to get link speed/duplex [ 642.783841][ T9349] bond2: (slave gretap0): failed to get link speed/duplex [ 642.910015][ T9327] bond2: (slave gretap0): failed to get link speed/duplex [ 643.105139][T23758] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 644.572224][T23777] FAULT_INJECTION: forcing a failure. [ 644.572224][T23777] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 644.591915][T23777] CPU: 1 UID: 0 PID: 23777 Comm: syz.1.5471 Not tainted syzkaller #0 PREEMPT(full) [ 644.591941][T23777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 644.591953][T23777] Call Trace: [ 644.591961][T23777] [ 644.591969][T23777] dump_stack_lvl+0xe8/0x150 [ 644.591996][T23777] should_fail_ex+0x412/0x560 [ 644.592021][T23777] prepare_alloc_pages+0x22a/0x650 [ 644.592056][T23777] __alloc_frozen_pages_noprof+0x12f/0x380 [ 644.592087][T23777] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 644.592118][T23777] ? __pfx_policy_nodemask+0x10/0x10 [ 644.592135][T23777] ? __folio_batch_add_and_move+0x11a/0xc50 [ 644.592160][T23777] ? lock_acquire+0x106/0x350 [ 644.592188][T23777] alloc_pages_mpol+0x235/0x490 [ 644.592211][T23777] folio_alloc_mpol_noprof+0x39/0x160 [ 644.592232][T23777] vma_alloc_folio_noprof+0xe1/0x1e0 [ 644.592255][T23777] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 644.592287][T23777] do_wp_page+0x118a/0x4cc0 [ 644.592315][T23777] ? __pte_offset_map+0x29/0x240 [ 644.592347][T23777] ? __pfx_do_wp_page+0x10/0x10 [ 644.592366][T23777] ? do_raw_spin_lock+0x12b/0x2f0 [ 644.592393][T23777] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 644.592427][T23777] handle_mm_fault+0x1698/0x3170 [ 644.592464][T23777] ? handle_mm_fault+0xf1/0x3170 [ 644.592493][T23777] ? __pfx_handle_mm_fault+0x10/0x10 [ 644.592516][T23777] ? follow_page_pte+0xbd1/0xe60 [ 644.592547][T23777] ? __pfx_follow_page_pte+0x10/0x10 [ 644.592580][T23777] __get_user_pages+0x167f/0x2730 [ 644.592633][T23777] __gup_longterm_locked+0xdcf/0x1630 [ 644.592666][T23777] ? sanity_check_pinned_pages+0x7af/0x870 [ 644.592696][T23777] gup_fast_fallback+0x1d84/0x20d0 [ 644.592748][T23777] ? __pfx_gup_fast_fallback+0x10/0x10 [ 644.592766][T23777] ? ____sys_recvmsg+0x1e6/0x4a0 [ 644.592785][T23777] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 644.592802][T23777] ? do_syscall_64+0x174/0x580 [ 644.592819][T23777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.592841][T23777] ? pin_user_pages_fast+0x4d/0xb0 [ 644.592863][T23777] iov_iter_extract_pages+0x37b/0x5f0 [ 644.592893][T23777] extract_iter_to_sg+0xefb/0x25d0 [ 644.592934][T23777] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 644.592960][T23777] ? rcu_is_watching+0x15/0xb0 [ 644.592982][T23777] ? trace_kmalloc+0x2a/0xf0 [ 644.593013][T23777] ? __kmalloc_noprof+0x1b8/0x760 [ 644.593042][T23777] ? __asan_memset+0x22/0x50 [ 644.593067][T23777] af_alg_get_rsgl+0x4b6/0x8e0 [ 644.593104][T23777] aead_recvmsg+0x54c/0x1160 [ 644.593139][T23777] ? __pfx_aa_sk_perm+0x10/0x10 [ 644.593166][T23777] ? __pfx_aead_recvmsg+0x10/0x10 [ 644.593185][T23777] ? __lock_acquire+0x6b5/0x2cf0 [ 644.593204][T23777] ? aa_sock_msg_perm+0xf1/0x1b0 [ 644.593231][T23777] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 644.593253][T23777] ? security_socket_recvmsg+0x7e/0x2c0 [ 644.593274][T23777] ? __pfx_aead_recvmsg+0x10/0x10 [ 644.593296][T23777] sock_recvmsg+0x172/0x1b0 [ 644.593323][T23777] ____sys_recvmsg+0x1e6/0x4a0 [ 644.593353][T23777] ? __pfx_____sys_recvmsg+0x10/0x10 [ 644.593390][T23777] ? import_iovec+0x73/0xa0 [ 644.593414][T23777] ___sys_recvmsg+0x215/0x590 [ 644.593433][T23777] ? get_pid_task+0x20/0x1f0 [ 644.593460][T23777] ? __pfx____sys_recvmsg+0x10/0x10 [ 644.593486][T23777] ? __fget_files+0x2a/0x420 [ 644.593525][T23777] ? __fget_files+0x3a0/0x420 [ 644.593557][T23777] __x64_sys_recvmsg+0x1ba/0x2a0 [ 644.593581][T23777] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 644.593612][T23777] ? __pfx_ksys_write+0x10/0x10 [ 644.593646][T23777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.593666][T23777] do_syscall_64+0x174/0x580 [ 644.593685][T23777] ? trace_irq_disable+0x3b/0x140 [ 644.593710][T23777] ? clear_bhb_loop+0x40/0x90 [ 644.593732][T23777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.593751][T23777] RIP: 0033:0x7fca09b9ce59 [ 644.593769][T23777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.593786][T23777] RSP: 002b:00007fca0aa2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 644.593806][T23777] RAX: ffffffffffffffda RBX: 00007fca09e15fa0 RCX: 00007fca09b9ce59 [ 644.593820][T23777] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 644.593832][T23777] RBP: 00007fca0aa2a090 R08: 0000000000000000 R09: 0000000000000000 [ 644.593844][T23777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 644.593855][T23777] R13: 00007fca09e16038 R14: 00007fca09e15fa0 R15: 00007ffdeae0c7c8 [ 644.593886][T23777] [ 645.041850][ T9327] net_ratelimit: 15 callbacks suppressed [ 645.041872][ T9327] bond2: (slave gretap0): failed to get link speed/duplex [ 645.159492][ T604] bond2: (slave gretap0): failed to get link speed/duplex [ 645.269465][ T1052] bond2: (slave gretap0): failed to get link speed/duplex [ 645.379448][ T604] bond2: (slave gretap0): failed to get link speed/duplex [ 645.519379][ T604] bond2: (slave gretap0): failed to get link speed/duplex [ 645.526764][T23734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 645.536397][T23729] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 645.580347][T23766] netlink: 'syz.2.5468': attribute type 1 has an invalid length. [ 645.594858][T23766] netlink: 'syz.2.5468': attribute type 1 has an invalid length. [ 645.613662][T23766] netlink: 'syz.2.5468': attribute type 8 has an invalid length. [ 645.639229][ T1052] bond2: (slave gretap0): failed to get link speed/duplex [ 645.747202][T23782] xt_hashlimit: size too large, truncated to 1048576 [ 645.770273][ T9316] bond2: (slave gretap0): failed to get link speed/duplex [ 645.812160][T23783] netlink: 'syz.3.5473': attribute type 1 has an invalid length. [ 645.840711][T23788] bond2: (slave gretap0): Removing an active aggregator [ 645.865922][T23783] __nla_validate_parse: 7 callbacks suppressed [ 645.865942][T23783] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5473'. [ 645.900773][T23788] bond2: (slave gretap0): Releasing backup interface [ 645.946940][T23795] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5473'. [ 645.974446][T23788] bridge_slave_0: left allmulticast mode [ 646.000301][T23788] bridge_slave_0: left promiscuous mode [ 646.031977][T23788] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.097999][T23788] bridge_slave_1: left allmulticast mode [ 646.126190][T23788] bridge_slave_1: left promiscuous mode [ 646.157660][T23788] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.224463][T23815] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5477'. [ 646.280774][T23788] bond0: (slave bond_slave_0): Releasing backup interface [ 646.357909][T23788] bond0: (slave bond_slave_1): Releasing backup interface [ 646.423986][T23788] team0: Port device team_slave_0 removed [ 646.475537][T23788] team0: Port device team_slave_1 removed [ 646.498579][T23788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.521671][T23788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.539586][T23788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.555755][T23788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.626788][T23788] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 646.692805][T23794] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5477'. [ 646.804099][T23794] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5477'. [ 646.915714][T23794] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5477'. [ 647.063932][T23803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5479'. [ 647.079504][T23803] geneve1: Caught tx_queue_len zero misconfig [ 647.355291][T23857] netlink: 'syz.2.5483': attribute type 2 has an invalid length. [ 647.555894][T23864] bond3: entered allmulticast mode [ 647.727753][T23871] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 647.941025][T23878] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5488'. [ 648.118489][T23882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5490'. [ 648.139501][T23882] netlink: 'syz.0.5490': attribute type 6 has an invalid length. [ 648.462947][T23893] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5493'. [ 649.116758][T23915] IPVS: Scheduler module ip_vs_sip not found [ 649.239419][T23929] xt_SECMARK: invalid mode: 4 [ 650.007584][T23966] netlink: 'syz.2.5519': attribute type 7 has an invalid length. [ 650.039254][T23966] netlink: 'syz.2.5519': attribute type 8 has an invalid length. [ 650.325552][T23986] geneve3: entered promiscuous mode [ 650.876124][T24020] __nla_validate_parse: 13 callbacks suppressed [ 650.876146][T24020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5539'. [ 651.046456][T24031] netlink: 'syz.2.5543': attribute type 16 has an invalid length. [ 651.059501][T24031] netlink: 'syz.2.5543': attribute type 17 has an invalid length. [ 651.272411][T19590] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 651.770114][T19590] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 651.865854][T24062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5552'. [ 652.055344][T24072] tipc: Can't bind to reserved service type 0 [ 652.173641][T24073] tipc: Enabled bearer , priority 0 [ 652.264315][T24071] tipc: Disabling bearer [ 652.338523][T24084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5563'. [ 652.368785][T24084] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5563'. [ 652.372672][T24085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5561'. [ 652.392639][T24084] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5563'. [ 652.397767][T24083] syzkaller0: entered promiscuous mode [ 652.422657][T24083] syzkaller0: entered allmulticast mode [ 652.453931][T24083] 0: reclassify loop, rule prio 0, protocol 800 [ 653.000186][T24109] netlink: 276 bytes leftover after parsing attributes in process `syz.2.5569'. [ 653.125345][T24117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5572'. [ 653.445466][T24132] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5574'. [ 653.485190][T24132] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5574'. [ 655.079763][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 656.189772][T24122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 656.507886][T24220] __nla_validate_parse: 4 callbacks suppressed [ 656.507905][T24220] netlink: 276 bytes leftover after parsing attributes in process `syz.2.5606'. [ 656.711101][T24235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5608'. [ 656.941807][T24243] netlink: 'syz.3.5612': attribute type 9 has an invalid length. [ 657.217893][T24256] netlink: 276 bytes leftover after parsing attributes in process `syz.5.5617'. [ 657.629515][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 657.698944][T24271] tipc: Enabled bearer , priority 0 [ 657.826247][T24270] tipc: Disabling bearer [ 658.147787][T24290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5627'. [ 658.264811][T24295] netlink: 276 bytes leftover after parsing attributes in process `syz.3.5629'. [ 658.474941][T24298] lo speed is unknown, defaulting to 1000 [ 658.948963][T24313] tipc: Enabled bearer , priority 0 [ 659.194672][T24319] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5638'. [ 659.209436][T24323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5639'. [ 659.322626][T24312] tipc: Disabling bearer [ 659.617364][T24338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5643'. [ 659.640779][T24338] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5643'. [ 659.660208][T24338] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5643'. [ 661.408366][T24425] netlink: 'syz.0.5675': attribute type 1 has an invalid length. [ 661.520417][T24428] __nla_validate_parse: 7 callbacks suppressed [ 661.520438][T24428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5675'. [ 661.594737][T24425] bond4: entered promiscuous mode [ 661.620957][T24428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5675'. [ 661.622685][T24425] 8021q: adding VLAN 0 to HW filter on device bond4 [ 661.722034][T24440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5679'. [ 661.978474][T24445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.059557][T24449] syzkaller0: entered promiscuous mode [ 662.077227][T24449] syzkaller0: entered allmulticast mode [ 662.087326][T24445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.099065][T24449] 0: reclassify loop, rule prio 0, protocol 800 [ 662.342025][T24445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.413245][T24470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5688'. [ 662.434240][T24470] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5688'. [ 663.027750][T24491] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 663.345651][T24512] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5702'. [ 663.364127][T24512] netlink: 252 bytes leftover after parsing attributes in process `syz.5.5702'. [ 664.066486][T24541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5712'. [ 664.199629][T24544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5714'. [ 664.459072][T24544] bond8: entered promiscuous mode [ 664.485094][T24560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5714'. [ 664.508736][T24544] 8021q: adding VLAN 0 to HW filter on device bond8 [ 664.568322][T24564] siw: device registration error -23 [ 664.823514][T24572] tipc: Enabled bearer , priority 0 [ 664.843579][T24572] syzkaller0: entered promiscuous mode [ 664.849100][T24572] syzkaller0: entered allmulticast mode [ 664.885631][T24572] tipc: Resetting bearer [ 665.013425][T24575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.050558][T24575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.168636][T24575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.179545][T24575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.195598][T24568] tipc: Resetting bearer [ 665.246048][T24568] tipc: Disabling bearer [ 665.324450][T24577] 8021q: adding VLAN 0 to HW filter on device bond9 [ 665.334100][T24577] bridge0: port 1(bond9) entered blocking state [ 665.340706][T24577] bridge0: port 1(bond9) entered disabled state [ 665.347536][T24577] bond9: entered allmulticast mode [ 665.355742][T24577] bond9: entered promiscuous mode [ 665.385388][ T9347] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.392672][ T9347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.560643][ T9347] bridge0: port 1(team0) entered blocking state [ 665.567096][ T9347] bridge0: port 1(team0) entered forwarding state [ 665.778119][T24602] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 666.286828][T24619] bond0 (unregistering): Released all slaves [ 666.384641][T24621] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 666.419034][T24621] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 666.652624][T24640] __nla_validate_parse: 13 callbacks suppressed [ 666.652646][T24640] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5744'. [ 666.680718][T24645] batadv_slave_1: entered promiscuous mode [ 666.747629][T24649] FAULT_INJECTION: forcing a failure. [ 666.747629][T24649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.782179][T24649] CPU: 1 UID: 0 PID: 24649 Comm: syz.5.5748 Not tainted syzkaller #0 PREEMPT(full) [ 666.782206][T24649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 666.782218][T24649] Call Trace: [ 666.782226][T24649] [ 666.782235][T24649] dump_stack_lvl+0xe8/0x150 [ 666.782262][T24649] should_fail_ex+0x412/0x560 [ 666.782287][T24649] _copy_from_user+0x2d/0xb0 [ 666.782310][T24649] __sys_bpf+0x229/0x950 [ 666.782339][T24649] ? __pfx___sys_bpf+0x10/0x10 [ 666.782379][T24649] ? ksys_write+0x242/0x270 [ 666.782407][T24649] ? __pfx_ksys_write+0x10/0x10 [ 666.782436][T24649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.782456][T24649] __x64_sys_bpf+0x7c/0x90 [ 666.782480][T24649] do_syscall_64+0x174/0x580 [ 666.782500][T24649] ? trace_irq_disable+0x3b/0x140 [ 666.782526][T24649] ? clear_bhb_loop+0x40/0x90 [ 666.782548][T24649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.782567][T24649] RIP: 0033:0x7f1aa499ce59 [ 666.782586][T24649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.782601][T24649] RSP: 002b:00007f1aa2bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 666.782620][T24649] RAX: ffffffffffffffda RBX: 00007f1aa4c15fa0 RCX: 00007f1aa499ce59 [ 666.782633][T24649] RDX: 000000000000002f RSI: 0000200000000000 RDI: 000000000000000a [ 666.782644][T24649] RBP: 00007f1aa2bee090 R08: 0000000000000000 R09: 0000000000000000 [ 666.782656][T24649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.782667][T24649] R13: 00007f1aa4c16038 R14: 00007f1aa4c15fa0 R15: 00007ffd069fc478 [ 666.782697][T24649] [ 666.987970][T24647] Cannot find del_set index 14804 as target [ 666.994514][T24651] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5750'. [ 667.007308][T24651] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5750'. [ 667.016978][T24651] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5750'. [ 667.034009][T24654] syzkaller0: entered promiscuous mode [ 667.042282][T24654] syzkaller0: entered allmulticast mode [ 667.392828][T24647] batadv_slave_1: left promiscuous mode [ 667.588586][T24676] tipc: Started in network mode [ 667.604925][T24676] tipc: Node identity ac1414aa, cluster identity 4711 [ 667.652307][T24676] tipc: Enabled bearer , priority 10 [ 668.144423][T24695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5761'. [ 668.174652][T24695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5761'. [ 668.729178][T24725] netlink: 'syz.5.5771': attribute type 1 has an invalid length. [ 668.816518][T24725] 8021q: adding VLAN 0 to HW filter on device bond6 [ 668.834510][ T8153] tipc: Node number set to 2886997162 [ 668.895966][T24728] bond6: (slave geneve4): making interface the new active one [ 668.910607][T24728] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 668.922600][T24725] netlink: 'syz.5.5771': attribute type 8 has an invalid length. [ 668.948265][T24725] sch_fq: defrate 0 ignored. [ 669.027740][T24725] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5771'. [ 671.124479][T24696] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 671.140612][T24717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5768'. [ 671.343921][T24736] Cannot find set identified by id 65534 to match [ 671.486397][T24743] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5778'. [ 671.528527][T24742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5776'. [ 671.917079][T24761] netlink: 'syz.1.5785': attribute type 16 has an invalid length. [ 671.968654][T24761] netlink: 'syz.1.5785': attribute type 17 has an invalid length. [ 672.009672][T24766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5786'. [ 672.017634][T24765] block nbd5: not configured, cannot reconfigure [ 672.216126][T24775] netlink: 'syz.3.5791': attribute type 1 has an invalid length. [ 672.288318][T24779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5792'. [ 672.298376][T24780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5791'. [ 672.314875][T24775] bond10: entered promiscuous mode [ 672.320816][T24775] 8021q: adding VLAN 0 to HW filter on device bond10 [ 672.342622][T24779] macsec2: entered promiscuous mode [ 672.348022][T24779] macsec2: entered allmulticast mode [ 672.383030][T24780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5791'. [ 672.403569][T24784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5794'. [ 672.484148][T24786] syzkaller0: entered promiscuous mode [ 672.496793][T24786] syzkaller0: entered allmulticast mode [ 672.538324][T24790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5796'. [ 672.571121][T24790] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5796'. [ 672.592400][T24793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5794'. [ 672.603784][T24790] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5796'. [ 672.918636][T24798] bridge0: entered allmulticast mode [ 673.108839][T24802] syzkaller0: entered promiscuous mode [ 673.119096][T24802] syzkaller0: entered allmulticast mode [ 673.306996][T24819] tap0: tun_chr_ioctl cmd 1074025677 [ 673.327433][T24819] tap0: linktype set to 768 [ 673.535065][T24832] Cannot find add_set index 1 as target [ 673.633917][T24826] syzkaller0: entered promiscuous mode [ 673.651538][T24826] syzkaller0: entered allmulticast mode [ 673.923636][T24839] netlink: 'syz.3.5811': attribute type 1 has an invalid length. [ 678.478539][T24868] openvswitch: netlink: Key type 12698 is out of range max 32 [ 678.720485][T24882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.765350][T24884] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5824'. [ 678.791386][T24884] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5824'. [ 678.974396][T24892] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5828'. [ 678.976211][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5827'. [ 678.994179][T24890] netlink: 348 bytes leftover after parsing attributes in process `syz.3.5827'. [ 679.004617][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5827'. [ 679.014738][T24890] netlink: 348 bytes leftover after parsing attributes in process `syz.3.5827'. [ 679.069456][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5827'. [ 679.129384][T24894] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 679.413615][T24909] openvswitch: netlink: Key type 12698 is out of range max 32 [ 679.917457][T24937] netlink: 'syz.2.5843': attribute type 10 has an invalid length. [ 679.938186][T24937] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5843'. [ 680.071294][T24934] ip6tnl0: left promiscuous mode [ 680.105993][T24934] bridge0: left allmulticast mode [ 680.168922][T24949] Cannot find set identified by id 65534 to match [ 680.752798][T24934] veth0_vlan: left promiscuous mode [ 681.351280][T24934] xfrm1: left allmulticast mode [ 681.370974][T24934] bond3: left promiscuous mode [ 681.388481][T24934] ip6gre1: left promiscuous mode [ 681.398409][T24934] ip6gre1: left allmulticast mode [ 681.408948][T24934] bridge1: left allmulticast mode [ 681.431760][T24934] bond8: left promiscuous mode [ 681.578071][ T9353] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.597803][T24959] openvswitch: netlink: Key type 12698 is out of range max 32 [ 681.614627][ T9353] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.631914][T24965] FAULT_INJECTION: forcing a failure. [ 681.631914][T24965] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 681.648876][ T9353] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.686889][T24965] CPU: 0 UID: 0 PID: 24965 Comm: syz.5.5850 Not tainted syzkaller #0 PREEMPT(full) [ 681.686916][T24965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 681.686928][T24965] Call Trace: [ 681.686935][T24965] [ 681.686944][T24965] dump_stack_lvl+0xe8/0x150 [ 681.686970][T24965] should_fail_ex+0x412/0x560 [ 681.686995][T24965] prepare_alloc_pages+0x22a/0x650 [ 681.687030][T24965] __alloc_frozen_pages_noprof+0x12f/0x380 [ 681.687060][T24965] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 681.687091][T24965] ? __pfx_policy_nodemask+0x10/0x10 [ 681.687114][T24965] ? __lock_acquire+0x6b5/0x2cf0 [ 681.687137][T24965] alloc_pages_mpol+0x235/0x490 [ 681.687161][T24965] folio_alloc_mpol_noprof+0x39/0x160 [ 681.687183][T24965] vma_alloc_folio_noprof+0xe1/0x1e0 [ 681.687206][T24965] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 681.687225][T24965] ? __pte_offset_map+0x29/0x240 [ 681.687249][T24965] ? __pte_offset_map+0x29/0x240 [ 681.687274][T24965] do_pte_missing+0x159d/0x33f0 [ 681.687311][T24965] ? handle_mm_fault+0xf1/0x3170 [ 681.687337][T24965] handle_mm_fault+0x1bf2/0x3170 [ 681.687373][T24965] ? handle_mm_fault+0xf1/0x3170 [ 681.687402][T24965] ? __pfx_handle_mm_fault+0x10/0x10 [ 681.687424][T24965] ? follow_page_pte+0x6cf/0xe60 [ 681.687455][T24965] ? __pfx_follow_page_pte+0x10/0x10 [ 681.687488][T24965] __get_user_pages+0x167f/0x2730 [ 681.687539][T24965] __gup_longterm_locked+0xdcf/0x1630 [ 681.687567][T24965] ? lock_acquire+0x106/0x350 [ 681.687597][T24965] ? sanity_check_pinned_pages+0x7a8/0x870 [ 681.687626][T24965] gup_fast_fallback+0x1d84/0x20d0 [ 681.687679][T24965] ? __pfx_gup_fast_fallback+0x10/0x10 [ 681.687703][T24965] ? is_valid_gup_args+0x11f/0x200 [ 681.687727][T24965] ? pin_user_pages_fast+0x4d/0xb0 [ 681.687751][T24965] rds_info_getsockopt+0x20e/0x4a0 [ 681.687784][T24965] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 681.687811][T24965] ? __might_fault+0xaf/0x130 [ 681.687838][T24965] ? rds_getsockopt+0x2e6/0x500 [ 681.687860][T24965] ? __pfx_rds_getsockopt+0x10/0x10 [ 681.687881][T24965] do_sock_getsockopt+0x51d/0x7e0 [ 681.687908][T24965] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 681.687944][T24965] ? __fget_files+0x3a0/0x420 [ 681.687966][T24965] ? __fget_files+0x2a/0x420 [ 681.687995][T24965] __x64_sys_getsockopt+0x1a4/0x240 [ 681.688020][T24965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.688041][T24965] do_syscall_64+0x174/0x580 [ 681.688061][T24965] ? trace_irq_disable+0x3b/0x140 [ 681.688086][T24965] ? clear_bhb_loop+0x40/0x90 [ 681.688109][T24965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.688128][T24965] RIP: 0033:0x7f1aa499ce59 [ 681.688146][T24965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.688162][T24965] RSP: 002b:00007f1aa2bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 681.688182][T24965] RAX: ffffffffffffffda RBX: 00007f1aa4c15fa0 RCX: 00007f1aa499ce59 [ 681.688196][T24965] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000003 [ 681.688208][T24965] RBP: 00007f1aa2bee090 R08: 0000200000000400 R09: 0000000000000000 [ 681.688220][T24965] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000002 [ 681.688234][T24965] R13: 00007f1aa4c16038 R14: 00007f1aa4c15fa0 R15: 00007ffd069fc478 [ 681.688264][T24965] [ 682.058786][ T9353] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.276530][T24978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5853'. [ 682.716757][T24985] bond0: Unable to set up delay as MII monitoring is disabled [ 682.913913][T24985] bond0 (unregistering): Released all slaves [ 683.463481][T25018] openvswitch: netlink: Key type 12698 is out of range max 32 [ 683.824791][T25040] netlink: 'syz.1.5870': attribute type 12 has an invalid length. [ 683.863134][T25040] netlink: 'syz.1.5870': attribute type 29 has an invalid length. [ 683.895668][T25040] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5870'. [ 683.916972][T25040] netlink: 'syz.1.5870': attribute type 3 has an invalid length. [ 683.929018][T25048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5873'. [ 683.937060][T25040] netlink: 'syz.1.5870': attribute type 2 has an invalid length. [ 683.961797][T25040] netlink: 35 bytes leftover after parsing attributes in process `syz.1.5870'. [ 684.204943][T25059] nbd: couldn't find a device at index 63 [ 684.426161][T25056] veth21: entered allmulticast mode [ 684.502097][T25056] bond5: (slave veth21): Enslaving as an active interface with an up link [ 684.528162][T25071] netlink: 'syz.3.5878': attribute type 9 has an invalid length. [ 684.548061][T25069] openvswitch: netlink: Key type 12698 is out of range max 32 [ 684.598729][T25048] bond5 (unregistering): (slave veth21): Releasing backup interface [ 684.631256][T25048] bond5 (unregistering): Released all slaves [ 684.810292][T25067] lo speed is unknown, defaulting to 1000 [ 684.959129][T25088] block nbd2: not configured, cannot reconfigure [ 685.072700][T25092] FAULT_INJECTION: forcing a failure. [ 685.072700][T25092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.132554][T25092] CPU: 1 UID: 0 PID: 25092 Comm: syz.0.5886 Not tainted syzkaller #0 PREEMPT(full) [ 685.132582][T25092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 685.132593][T25092] Call Trace: [ 685.132601][T25092] [ 685.132610][T25092] dump_stack_lvl+0xe8/0x150 [ 685.132637][T25092] should_fail_ex+0x412/0x560 [ 685.132662][T25092] _copy_from_user+0x2d/0xb0 [ 685.132681][T25092] ___sys_sendmsg+0x1c6/0x360 [ 685.132700][T25092] ? __lock_acquire+0x6b5/0x2cf0 [ 685.132723][T25092] ? __pfx____sys_sendmsg+0x10/0x10 [ 685.132771][T25092] ? __fget_files+0x2a/0x420 [ 685.132793][T25092] ? __fget_files+0x3a0/0x420 [ 685.132824][T25092] __x64_sys_sendmsg+0x1bd/0x2a0 [ 685.132847][T25092] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 685.132877][T25092] ? __pfx_ksys_write+0x10/0x10 [ 685.132910][T25092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.132930][T25092] do_syscall_64+0x174/0x580 [ 685.132950][T25092] ? trace_irq_disable+0x3b/0x140 [ 685.132975][T25092] ? clear_bhb_loop+0x40/0x90 [ 685.132998][T25092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.133016][T25092] RIP: 0033:0x7fe0ebf9ce59 [ 685.133034][T25092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.133049][T25092] RSP: 002b:00007fe0ecdbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.133069][T25092] RAX: ffffffffffffffda RBX: 00007fe0ec215fa0 RCX: 00007fe0ebf9ce59 [ 685.133083][T25092] RDX: 0000000000000000 RSI: 00002000000096c0 RDI: 0000000000000003 [ 685.133095][T25092] RBP: 00007fe0ecdbd090 R08: 0000000000000000 R09: 0000000000000000 [ 685.133107][T25092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.133118][T25092] R13: 00007fe0ec216038 R14: 00007fe0ec215fa0 R15: 00007ffdb0f4d7e8 [ 685.133145][T25092] [ 685.393361][T25101] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 685.971927][T25121] openvswitch: netlink: Key type 12698 is out of range max 32 [ 686.355643][T25128] ip6gretap0: left promiscuous mode [ 686.393768][T25128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.426066][T25139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5897'. [ 686.446105][T25139] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5897'. [ 686.498766][T25128] virt_wifi0: left promiscuous mode [ 686.516283][T25128] veth1_vlan: left promiscuous mode [ 686.534191][T25128] veth0_vlan: entered promiscuous mode [ 686.558665][T25128] veth1_vlan: entered promiscuous mode [ 686.587401][T25128] veth1_macvtap: left promiscuous mode [ 686.604762][T25128] veth0_macvtap: left promiscuous mode [ 686.623233][T25128] veth0_macvtap: entered promiscuous mode [ 686.642146][T25128] veth1_macvtap: entered promiscuous mode [ 686.676533][T25128] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 686.698223][T25128] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 686.715401][T25128] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 686.737176][T25128] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 686.758522][T25128] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 686.780745][T25128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 686.806658][T25128] ip6gretap0: entered promiscuous mode [ 686.834645][T25128] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 686.966059][T25128] virt_wifi0: entered promiscuous mode [ 686.995805][T25128] 8021q: adding VLAN 0 to HW filter on device bond2 [ 687.031865][T25128] 8021q: adding VLAN 0 to HW filter on device bond3 [ 687.073154][T25128] 8021q: adding VLAN 0 to HW filter on device bond4 [ 687.100966][T25162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5905'. [ 687.126430][T25128] 8021q: adding VLAN 0 to HW filter on device bond5 [ 687.150790][T25162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5905'. [ 687.178183][T25128] 8021q: adding VLAN 0 to HW filter on device bond6 [ 687.197870][T25168] openvswitch: netlink: Key type 12698 is out of range max 32 [ 687.226237][T25128] 8021q: adding VLAN 0 to HW filter on device bond7 [ 687.255779][T25128] 8021q: adding VLAN 0 to HW filter on device bond8 [ 687.346967][T25129] mac80211_hwsim hwsim55 wlan0: entered promiscuous mode [ 687.365609][T25129] mac80211_hwsim hwsim55 wlan0: entered allmulticast mode [ 687.396150][T19590] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 687.627169][ T9350] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.649096][ T9350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.771764][T25180] syzkaller0: entered promiscuous mode [ 687.814654][T25180] syzkaller0: entered allmulticast mode [ 687.848889][ T9350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.924672][ T9350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.978067][ T12] ip6_tunnel:  xmit: Local address not yet configured! [ 688.016907][T19590] ip6_tunnel:  xmit: Local address not yet configured! [ 688.028184][ T12] ip6_tunnel:  xmit: Local address not yet configured! [ 688.094637][T25209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5914'. [ 688.119426][T25209] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5914'. [ 688.151746][T19590] ip6_tunnel:  xmit: Local address not yet configured! [ 688.192148][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 688.219524][ T5823] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 688.227444][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 688.400910][T19590] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 688.540341][T25221] openvswitch: netlink: Key type 12698 is out of range max 32 [ 688.710620][T19590] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 688.736538][T25235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5921'. [ 688.829896][T19590] ip6_tunnel:  xmit: Local address not yet configured! [ 690.737439][T25195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 690.979045][T25246] syzkaller0: entered promiscuous mode [ 691.003784][T25246] syzkaller0: entered allmulticast mode [ 691.324326][T25258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5929'. [ 691.638394][T25277] netlink: 'syz.5.5936': attribute type 3 has an invalid length. [ 691.650050][T25277] netlink: 'syz.5.5936': attribute type 3 has an invalid length. [ 692.283297][T25298] syzkaller0: entered promiscuous mode [ 692.293366][T25298] syzkaller0: entered allmulticast mode [ 692.875861][T25317] nbd: couldn't find a device at index 240 [ 693.024223][T25321] openvswitch: netlink: Key type 12698 is out of range max 32 [ 693.247296][T19593] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 693.269797][T19593] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 693.280640][T19593] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 693.294625][T19593] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 693.306843][T19593] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 693.680971][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.704357][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.907186][T25354] syzkaller0: entered promiscuous mode [ 693.932659][T25342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.948686][T25354] syzkaller0: entered allmulticast mode [ 694.344467][T25365] siw: device registration error -23 [ 694.931772][T25363] 8021q: VLANs not supported on vxcan1 [ 694.957643][T25326] lo speed is unknown, defaulting to 1000 [ 695.390521][T19593] Bluetooth: hci3: command tx timeout [ 695.435882][T25397] netlink: 'syz.5.5971': attribute type 3 has an invalid length. [ 695.461192][T25397] netlink: 'syz.5.5971': attribute type 3 has an invalid length. [ 696.011023][T25403] syzkaller0: entered promiscuous mode [ 696.027115][T25403] syzkaller0: entered allmulticast mode [ 696.338908][T25432] xt_SECMARK: invalid mode: 4 [ 696.461621][T25437] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5981'. [ 696.490294][T25437] netlink: 252 bytes leftover after parsing attributes in process `syz.5.5981'. [ 697.480119][T19593] Bluetooth: hci3: command tx timeout [ 697.882923][ T9347] wlan1: Trigger new scan to find an IBSS to join [ 699.556974][T19593] Bluetooth: hci3: command tx timeout [ 699.880554][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 699.880591][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 700.529575][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 701.551371][T25435] syzkaller0: entered promiscuous mode [ 701.570422][T25435] syzkaller0: entered allmulticast mode [ 701.629423][T19593] Bluetooth: hci3: command tx timeout [ 702.179253][T25326] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.215689][T25326] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.239659][T25326] bridge_slave_0: entered allmulticast mode [ 702.266566][T25326] bridge_slave_0: entered promiscuous mode [ 702.310866][T25326] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.335878][T25326] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.358343][T25326] bridge_slave_1: entered allmulticast mode [ 702.385458][T25326] bridge_slave_1: entered promiscuous mode [ 702.575090][T25499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5992'. [ 702.623182][T25499] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5992'. [ 702.651171][T25326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.719156][T25326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.832245][T25508] xt_bpf: check failed: parse error [ 702.833233][ T9349] wlan1: Trigger new scan to find an IBSS to join [ 702.930204][T25506] bridge0: port 4(erspan0) entered blocking state [ 702.962146][T25506] bridge0: port 4(erspan0) entered disabled state [ 703.012931][T25506] erspan0: entered allmulticast mode [ 703.162717][T25506] erspan0: entered promiscuous mode [ 703.214370][T25326] team0: Port device team_slave_0 added [ 703.364089][T25509] erspan0: left allmulticast mode [ 703.379821][T25509] erspan0: left promiscuous mode [ 703.420564][T25509] bridge0: port 4(erspan0) entered disabled state [ 703.538369][T25326] team0: Port device team_slave_1 added [ 703.662519][T25531] openvswitch: netlink: Actions may not be safe on all matching packets [ 703.738336][T25326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.789700][T25326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.851208][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.891917][T25326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.917105][T25542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6001'. [ 703.932932][T25326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.956390][T25326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.996295][T25326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.998836][T25545] openvswitch: netlink: EtherType 50a is less than min 600 [ 704.075864][T25548] tipc: Enabling of bearer rejected, failed to enable media [ 704.236066][T25326] hsr_slave_0: entered promiscuous mode [ 704.263791][T25326] hsr_slave_1: entered promiscuous mode [ 704.359710][T25560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6005'. [ 704.393572][T25560] netlink: 252 bytes leftover after parsing attributes in process `syz.3.6005'. [ 704.756002][T25575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6010'. [ 705.238625][T25587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6014'. [ 705.402911][T25326] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.471846][T25589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6015'. [ 705.506879][T25589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6015'. [ 705.702175][T25593] netlink: 276 bytes leftover after parsing attributes in process `syz.3.6017'. [ 705.953447][T25326] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.966938][T25600] FAULT_INJECTION: forcing a failure. [ 705.966938][T25600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.009554][T25600] CPU: 1 UID: 0 PID: 25600 Comm: syz.3.6021 Not tainted syzkaller #0 PREEMPT(full) [ 706.009581][T25600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 706.009592][T25600] Call Trace: [ 706.009601][T25600] [ 706.009609][T25600] dump_stack_lvl+0xe8/0x150 [ 706.009637][T25600] should_fail_ex+0x412/0x560 [ 706.009662][T25600] _copy_to_user+0x31/0xb0 [ 706.009685][T25600] bpf_prog_test_run_raw_tp+0x511/0x6c0 [ 706.009714][T25600] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 706.009736][T25600] ? __fget_files+0x2a/0x420 [ 706.009763][T25600] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 706.009785][T25600] bpf_prog_test_run+0x2c7/0x340 [ 706.009806][T25600] __sys_bpf+0x643/0x950 [ 706.009833][T25600] ? __pfx___sys_bpf+0x10/0x10 [ 706.009871][T25600] ? ksys_write+0x242/0x270 [ 706.009899][T25600] ? __pfx_ksys_write+0x10/0x10 [ 706.009927][T25600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.009946][T25600] __x64_sys_bpf+0x7c/0x90 [ 706.009971][T25600] do_syscall_64+0x174/0x580 [ 706.009993][T25600] ? clear_bhb_loop+0x40/0x90 [ 706.010015][T25600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.010042][T25600] RIP: 0033:0x7f0c1659ce59 [ 706.010061][T25600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.010077][T25600] RSP: 002b:00007f0c173ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 706.010098][T25600] RAX: ffffffffffffffda RBX: 00007f0c16815fa0 RCX: 00007f0c1659ce59 [ 706.010111][T25600] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a [ 706.010124][T25600] RBP: 00007f0c173ab090 R08: 0000000000000000 R09: 0000000000000000 [ 706.010135][T25600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.010146][T25600] R13: 00007f0c16816038 R14: 00007f0c16815fa0 R15: 00007ffe872c72b8 [ 706.010176][T25600] [ 706.437054][T25326] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.447690][T25604] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 706.786083][T25326] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.260152][T25615] syzkaller0: entered promiscuous mode [ 707.279538][T25615] syzkaller0: entered allmulticast mode [ 708.109069][T25656] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 708.622980][T25662] __nla_validate_parse: 3 callbacks suppressed [ 708.623001][T25662] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6038'. [ 708.638823][T25662] netlink: 252 bytes leftover after parsing attributes in process `syz.5.6038'. [ 709.185840][T25667] FAULT_INJECTION: forcing a failure. [ 709.185840][T25667] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 709.201675][T25667] CPU: 0 UID: 0 PID: 25667 Comm: syz.5.6040 Not tainted syzkaller #0 PREEMPT(full) [ 709.201701][T25667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 709.201712][T25667] Call Trace: [ 709.201720][T25667] [ 709.201728][T25667] dump_stack_lvl+0xe8/0x150 [ 709.201755][T25667] should_fail_ex+0x412/0x560 [ 709.201778][T25667] prepare_alloc_pages+0x22a/0x650 [ 709.201808][T25667] __alloc_frozen_pages_noprof+0x12f/0x380 [ 709.201834][T25667] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 709.201859][T25667] ? __pfx_policy_nodemask+0x10/0x10 [ 709.201878][T25667] ? __lock_acquire+0x6b5/0x2cf0 [ 709.201896][T25667] alloc_pages_mpol+0x235/0x490 [ 709.201915][T25667] folio_alloc_mpol_noprof+0x39/0x160 [ 709.201932][T25667] vma_alloc_folio_noprof+0xe1/0x1e0 [ 709.201947][T25667] ? lockdep_hardirqs_on+0x7a/0x110 [ 709.202073][T25667] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 709.202089][T25667] ? __pte_offset_map+0x29/0x240 [ 709.202108][T25667] ? __pte_offset_map+0x29/0x240 [ 709.202128][T25667] do_pte_missing+0x159d/0x33f0 [ 709.202159][T25667] ? handle_mm_fault+0xf1/0x3170 [ 709.202181][T25667] handle_mm_fault+0x1bf2/0x3170 [ 709.202222][T25667] ? handle_mm_fault+0xf1/0x3170 [ 709.202247][T25667] ? __pfx_handle_mm_fault+0x10/0x10 [ 709.202266][T25667] ? follow_page_pte+0x6cf/0xe60 [ 709.202292][T25667] ? __pfx_follow_page_pte+0x10/0x10 [ 709.202319][T25667] __get_user_pages+0x167f/0x2730 [ 709.202362][T25667] __gup_longterm_locked+0xdcf/0x1630 [ 709.202384][T25667] ? lock_acquire+0x106/0x350 [ 709.202404][T25667] ? sanity_check_pinned_pages+0x7a8/0x870 [ 709.202428][T25667] gup_fast_fallback+0x1d84/0x20d0 [ 709.202472][T25667] ? __pfx_gup_fast_fallback+0x10/0x10 [ 709.202492][T25667] ? is_valid_gup_args+0x11f/0x200 [ 709.202511][T25667] ? pin_user_pages_fast+0x4d/0xb0 [ 709.202530][T25667] rds_info_getsockopt+0x20e/0x4a0 [ 709.202557][T25667] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 709.202579][T25667] ? __might_fault+0xaf/0x130 [ 709.202601][T25667] ? rds_getsockopt+0x2e6/0x500 [ 709.202619][T25667] ? __pfx_rds_getsockopt+0x10/0x10 [ 709.202636][T25667] do_sock_getsockopt+0x51d/0x7e0 [ 709.202659][T25667] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 709.202689][T25667] ? __fget_files+0x3a0/0x420 [ 709.202708][T25667] ? __fget_files+0x2a/0x420 [ 709.202732][T25667] __x64_sys_getsockopt+0x1a4/0x240 [ 709.202753][T25667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.202770][T25667] do_syscall_64+0x174/0x580 [ 709.202788][T25667] ? clear_bhb_loop+0x40/0x90 [ 709.202807][T25667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.202822][T25667] RIP: 0033:0x7f1aa499ce59 [ 709.202838][T25667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.202851][T25667] RSP: 002b:00007f1aa2bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 709.202867][T25667] RAX: ffffffffffffffda RBX: 00007f1aa4c15fa0 RCX: 00007f1aa499ce59 [ 709.202878][T25667] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000003 [ 709.202888][T25667] RBP: 00007f1aa2bee090 R08: 0000200000000400 R09: 0000000000000000 [ 709.202898][T25667] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000002 [ 709.202907][T25667] R13: 00007f1aa4c16038 R14: 00007f1aa4c15fa0 R15: 00007ffd069fc478 [ 709.202933][T25667] [ 710.147072][T25671] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6041'. [ 713.274939][T25635] ip6gre1: entered promiscuous mode [ 713.289087][T25635] ip6gre1: entered allmulticast mode [ 713.316097][T25670] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6041'. [ 713.336382][T25670] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6041'. [ 713.359455][T25670] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6041'. [ 713.463598][T25679] netlink: 'syz.1.6043': attribute type 1 has an invalid length. [ 713.527090][T25680] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 713.537290][T25679] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 713.576666][T25681] vlan5: entered promiscuous mode [ 713.632841][T25681] bridge0: entered promiscuous mode [ 713.843657][T25681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6042'. [ 713.862649][T25694] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6047'. [ 713.863256][T25692] xt_l2tp: missing protocol rule (udp|l2tpip) [ 713.882290][T25685] netlink: 'syz.3.6042': attribute type 4 has an invalid length. [ 714.040790][T25702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6048'. [ 714.125022][T25704] netlink: 'syz.3.6050': attribute type 16 has an invalid length. [ 714.125360][T25326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 714.132867][T25704] netlink: 'syz.3.6050': attribute type 17 has an invalid length. [ 714.275722][T25326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 714.295591][T25326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 714.354606][T25326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 714.395678][T25326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 714.432522][T25706] Bluetooth: MGMT ver 1.23 [ 714.442426][T25713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6052'. [ 714.472656][T25326] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 714.490693][T25326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 714.545199][T25326] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 714.594701][T25718] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6053'. [ 714.612222][T25718] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6053'. [ 714.639263][T25718] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6053'. [ 714.790598][T25725] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6053'. [ 714.905793][T25326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.989209][T25326] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.046336][ T9329] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.053501][ T9329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.114761][ T9329] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.122279][ T9329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.173336][T25738] netlink: 'syz.0.6057': attribute type 62 has an invalid length. [ 715.254857][T25326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 715.959883][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 716.008734][T25765] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6065'. [ 716.017727][T25765] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6065'. [ 716.510388][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 716.691330][T25326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.921327][T25326] veth0_vlan: entered promiscuous mode [ 716.977132][T25326] veth1_vlan: entered promiscuous mode [ 717.066439][T25788] openvswitch: netlink: Key type 12698 is out of range max 32 [ 717.460153][T25326] veth0_macvtap: entered promiscuous mode [ 717.501928][T25326] veth1_macvtap: entered promiscuous mode [ 717.569257][T25326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.605051][T25326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.648127][ T9349] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.656913][ T9349] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.665637][ T9349] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.674368][ T9349] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.723316][ T9329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.767119][ T9329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.822480][T25813] netlink: 'syz.3.6080': attribute type 1 has an invalid length. [ 717.918263][T25813] bond11: entered promiscuous mode [ 717.924094][T25813] 8021q: adding VLAN 0 to HW filter on device bond11 [ 717.955840][T25820] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 718.083664][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.128648][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.237151][T25824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.307712][ T9350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.316390][ T9350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.474663][T25831] 8021q: VLANs not supported on vxcan1 [ 718.532526][T25830] syzkaller0: entered promiscuous mode [ 718.538048][T25830] syzkaller0: entered allmulticast mode [ 718.566521][T25830] 0: reclassify loop, rule prio 0, protocol 800 [ 719.673543][T25842] geneve3: entered promiscuous mode [ 719.678807][T25842] geneve3: entered allmulticast mode [ 719.685569][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 719.760175][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 719.784363][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 720.019422][T25851] 8021q: VLANs not supported on vxcan1 [ 720.028668][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 720.297180][T25855] vlan0: left promiscuous mode [ 720.445314][T25855] bond3: left promiscuous mode [ 720.469911][T19614] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 720.662970][T25855] 8021q: adding VLAN 0 to HW filter on device bond4 [ 720.729115][T25855] 8021q: adding VLAN 0 to HW filter on device bond5 [ 720.753174][T25855] geneve3: left promiscuous mode [ 720.768916][T25855] virt_wifi0: entered promiscuous mode [ 720.788853][T25855] virt_wifi0: entered allmulticast mode [ 720.800572][T25855] macsec2: left promiscuous mode [ 721.231453][T19614] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 721.629704][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 721.664295][T25893] 8021q: VLANs not supported on vxcan1 [ 721.703289][T25895] __nla_validate_parse: 4 callbacks suppressed [ 721.703311][T25895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6107'. [ 721.718980][T25895] netlink: 252 bytes leftover after parsing attributes in process `syz.0.6107'. [ 722.439237][T25914] tipc: Enabling of bearer rejected, failed to enable media [ 722.552977][T25918] lo speed is unknown, defaulting to 1000 [ 722.839423][T25927] lo speed is unknown, defaulting to 1000 [ 723.283092][T25943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6117'. [ 723.480834][T25938] netlink: 'syz.0.6117': attribute type 1 has an invalid length. [ 723.690352][T25953] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6122'. [ 723.699354][T25953] netlink: 252 bytes leftover after parsing attributes in process `syz.5.6122'. [ 723.900380][T25962] netlink: 'syz.3.6120': attribute type 14 has an invalid length. [ 724.316525][T25967] tipc: Enabling of bearer rejected, failed to enable media [ 724.819905][T25986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6130'. [ 725.154152][T25992] sch_tbf: burst 4398 is lower than device lo mtu (32783) ! [ 725.181291][T25992] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6135'. [ 725.276539][T25999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.300808][T26003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6138'. [ 725.328037][T26003] netlink: 252 bytes leftover after parsing attributes in process `syz.1.6138'. [ 725.376907][T26001] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6137'. [ 725.726062][T26017] tipc: Enabling of bearer rejected, failed to enable media [ 725.971254][T26020] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 726.425589][T26045] x_tables: duplicate underflow at hook 1 [ 726.715926][T26055] __nla_validate_parse: 1 callbacks suppressed [ 726.715946][T26055] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6151'. [ 726.841877][ T5738] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 726.927844][T26057] bond4: option lacp_rate: invalid value (128) [ 726.949213][T26057] bond4 (unregistering): Released all slaves [ 727.093636][T26060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6155'. [ 727.146344][T26062] syzkaller0: entered promiscuous mode [ 727.160357][T26062] syzkaller0: entered allmulticast mode [ 727.719986][ T5738] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 728.256306][T26091] Cannot find set identified by id 65534 to match [ 728.366570][T26094] syzkaller0: entered promiscuous mode [ 728.379472][T26094] syzkaller0: entered allmulticast mode [ 728.771244][T26108] netlink: 'syz.3.6170': attribute type 16 has an invalid length. [ 728.789082][T26108] netlink: 'syz.3.6170': attribute type 17 has an invalid length. [ 728.977220][T26112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6172'. [ 729.610948][T26132] syzkaller0: entered promiscuous mode [ 729.616471][T26132] syzkaller0: entered allmulticast mode [ 729.972258][T26142] netlink: 'syz.1.6184': attribute type 1 has an invalid length. [ 730.012117][T26142] netlink: 'syz.1.6184': attribute type 2 has an invalid length. [ 730.033449][T26146] netlink: 'syz.1.6184': attribute type 1 has an invalid length. [ 730.175888][T26149] netlink: 'syz.0.6186': attribute type 13 has an invalid length. [ 731.405828][T26180] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6197'. [ 731.415192][T26180] ksmbd: Unknown IPC event: 1, ignore. [ 731.682851][T26185] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 731.777566][T26192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6201'. [ 731.858027][T26189] bond1: option lacp_rate: invalid value (128) [ 731.868378][T26189] bond1 (unregistering): Released all slaves [ 731.989127][T26193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6200'. [ 732.323440][T26211] openvswitch: netlink: Key type 12698 is out of range max 32 [ 732.336380][T26206] IPVS: Scheduler module ip_vs_sip not found [ 732.531575][T26218] FAULT_INJECTION: forcing a failure. [ 732.531575][T26218] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 732.563829][T26218] CPU: 1 UID: 0 PID: 26218 Comm: syz.2.6212 Not tainted syzkaller #0 PREEMPT(full) [ 732.563857][T26218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 732.563869][T26218] Call Trace: [ 732.563877][T26218] [ 732.563886][T26218] dump_stack_lvl+0xe8/0x150 [ 732.563913][T26218] should_fail_ex+0x412/0x560 [ 732.563938][T26218] prepare_alloc_pages+0x22a/0x650 [ 732.563972][T26218] __alloc_frozen_pages_noprof+0x12f/0x380 [ 732.564004][T26218] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 732.564035][T26218] ? __pfx_policy_nodemask+0x10/0x10 [ 732.564058][T26218] ? __lock_acquire+0x6b5/0x2cf0 [ 732.564082][T26218] alloc_pages_mpol+0x235/0x490 [ 732.564107][T26218] folio_alloc_mpol_noprof+0x39/0x160 [ 732.564129][T26218] vma_alloc_folio_noprof+0xe1/0x1e0 [ 732.564151][T26218] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 732.564172][T26218] ? __pte_offset_map+0x29/0x240 [ 732.564195][T26218] ? __pte_offset_map+0x29/0x240 [ 732.564221][T26218] do_pte_missing+0x159d/0x33f0 [ 732.564259][T26218] ? handle_mm_fault+0xf1/0x3170 [ 732.564293][T26218] handle_mm_fault+0x1bf2/0x3170 [ 732.564329][T26218] ? handle_mm_fault+0xf1/0x3170 [ 732.564359][T26218] ? __pfx_handle_mm_fault+0x10/0x10 [ 732.564383][T26218] ? follow_page_pte+0x6cf/0xe60 [ 732.564414][T26218] ? __pfx_follow_page_pte+0x10/0x10 [ 732.564447][T26218] __get_user_pages+0x167f/0x2730 [ 732.564500][T26218] __gup_longterm_locked+0xdcf/0x1630 [ 732.564528][T26218] ? lock_acquire+0x106/0x350 [ 732.564551][T26218] ? sanity_check_pinned_pages+0x7a8/0x870 [ 732.564582][T26218] gup_fast_fallback+0x1d84/0x20d0 [ 732.564634][T26218] ? __pfx_gup_fast_fallback+0x10/0x10 [ 732.564658][T26218] ? is_valid_gup_args+0x11f/0x200 [ 732.564683][T26218] ? pin_user_pages_fast+0x4d/0xb0 [ 732.564707][T26218] rds_info_getsockopt+0x20e/0x4a0 [ 732.564740][T26218] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 732.564767][T26218] ? __might_fault+0xaf/0x130 [ 732.564793][T26218] ? rds_getsockopt+0x2e6/0x500 [ 732.564819][T26218] ? __pfx_rds_getsockopt+0x10/0x10 [ 732.564840][T26218] do_sock_getsockopt+0x51d/0x7e0 [ 732.564867][T26218] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 732.564903][T26218] ? __fget_files+0x3a0/0x420 [ 732.564924][T26218] ? __fget_files+0x2a/0x420 [ 732.564953][T26218] __x64_sys_getsockopt+0x1a4/0x240 [ 732.564979][T26218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.565004][T26218] do_syscall_64+0x174/0x580 [ 732.565024][T26218] ? trace_irq_disable+0x3b/0x140 [ 732.565049][T26218] ? clear_bhb_loop+0x40/0x90 [ 732.565072][T26218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.565090][T26218] RIP: 0033:0x7f923759ce59 [ 732.565109][T26218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.565124][T26218] RSP: 002b:00007f923848f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 732.565144][T26218] RAX: ffffffffffffffda RBX: 00007f9237815fa0 RCX: 00007f923759ce59 [ 732.565157][T26218] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000003 [ 732.565169][T26218] RBP: 00007f923848f090 R08: 0000200000000400 R09: 0000000000000000 [ 732.565182][T26218] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000002 [ 732.565194][T26218] R13: 00007f9237816038 R14: 00007f9237815fa0 R15: 00007ffdae4704c8 [ 732.565224][T26218] [ 732.941617][ T5738] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 732.966560][T26221] syzkaller0: entered promiscuous mode [ 732.972087][T26221] syzkaller0: entered allmulticast mode [ 733.482090][T26238] xt_bpf: check failed: parse error [ 733.692033][T26244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6219'. [ 733.751507][T26246] openvswitch: netlink: Key type 12698 is out of range max 32 [ 733.858329][T26250] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6222'. [ 733.867328][T26250] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6222'. [ 733.931877][T26250] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6222'. [ 733.953319][T19614] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 733.996662][T26256] netlink: 'syz.0.6224': attribute type 9 has an invalid length. [ 734.091034][T26250] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6222'. [ 734.388757][T26265] FAULT_INJECTION: forcing a failure. [ 734.388757][T26265] name failslab, interval 1, probability 0, space 0, times 0 [ 734.401502][T26265] CPU: 0 UID: 0 PID: 26265 Comm: syz.0.6227 Not tainted syzkaller #0 PREEMPT(full) [ 734.401528][T26265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 734.401540][T26265] Call Trace: [ 734.401556][T26265] [ 734.401565][T26265] dump_stack_lvl+0xe8/0x150 [ 734.401591][T26265] should_fail_ex+0x412/0x560 [ 734.401615][T26265] should_failslab+0xa8/0x100 [ 734.401635][T26265] __kmalloc_cache_noprof+0x88/0x660 [ 734.401662][T26265] ? tcf_action_init_1+0x1c2/0x740 [ 734.401799][T26265] tcf_action_init_1+0x1c2/0x740 [ 734.401830][T26265] ? __pfx_tcf_action_init_1+0x10/0x10 [ 734.401854][T26265] ? _raw_read_unlock+0x28/0x50 [ 734.401902][T26265] ? tc_action_load_ops+0x247/0x540 [ 734.401940][T26265] ? is_bpf_text_address+0x292/0x2b0 [ 734.401964][T26265] ? __nla_parse+0x40/0x60 [ 734.402014][T26265] tcf_action_init+0x31e/0xb40 [ 734.402048][T26265] ? __pfx_tcf_action_init+0x10/0x10 [ 734.402096][T26265] ? netlink_sendmsg+0x813/0xb40 [ 734.402116][T26265] ? ____sys_sendmsg+0x972/0x9f0 [ 734.402137][T26265] ? __pfx___nla_validate_parse+0x10/0x10 [ 734.402156][T26265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.402209][T26265] tc_ctl_action+0x43b/0xc70 [ 734.402246][T26265] ? __pfx_tc_ctl_action+0x10/0x10 [ 734.402277][T26265] ? trace_contention_end+0x3d/0x140 [ 734.402343][T26265] ? __pfx_tc_ctl_action+0x10/0x10 [ 734.402366][T26265] rtnetlink_rcv_msg+0x77e/0xbe0 [ 734.402425][T26265] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 734.402443][T26265] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 734.402459][T26265] ? ref_tracker_free+0x693/0x840 [ 734.402481][T26265] ? __pfx_ref_tracker_free+0x10/0x10 [ 734.402510][T26265] netlink_rcv_skb+0x232/0x4b0 [ 734.402532][T26265] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 734.402559][T26265] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 734.402591][T26265] ? netlink_deliver_tap+0x2e/0x1b0 [ 734.402612][T26265] ? netlink_deliver_tap+0x2e/0x1b0 [ 734.402634][T26265] netlink_unicast+0x75c/0x8e0 [ 734.402664][T26265] netlink_sendmsg+0x813/0xb40 [ 734.402694][T26265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.402718][T26265] ? aa_sock_msg_perm+0xf1/0x1b0 [ 734.402745][T26265] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 734.402769][T26265] ____sys_sendmsg+0x972/0x9f0 [ 734.402787][T26265] ? __might_fault+0xaf/0x130 [ 734.402814][T26265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 734.402839][T26265] ? import_iovec+0x73/0xa0 [ 734.402861][T26265] ___sys_sendmsg+0x2a5/0x360 [ 734.402878][T26265] ? __lock_acquire+0x6b5/0x2cf0 [ 734.402901][T26265] ? __pfx____sys_sendmsg+0x10/0x10 [ 734.402950][T26265] ? __fget_files+0x2a/0x420 [ 734.402971][T26265] ? __fget_files+0x3a0/0x420 [ 734.403003][T26265] __x64_sys_sendmsg+0x1bd/0x2a0 [ 734.403025][T26265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 734.403054][T26265] ? __pfx_ksys_write+0x10/0x10 [ 734.403088][T26265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.403108][T26265] do_syscall_64+0x174/0x580 [ 734.403127][T26265] ? trace_irq_disable+0x3b/0x140 [ 734.403153][T26265] ? clear_bhb_loop+0x40/0x90 [ 734.403175][T26265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.403193][T26265] RIP: 0033:0x7fe0ebf9ce59 [ 734.403211][T26265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.403224][T26265] RSP: 002b:00007fe0ecdbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.403244][T26265] RAX: ffffffffffffffda RBX: 00007fe0ec215fa0 RCX: 00007fe0ebf9ce59 [ 734.403257][T26265] RDX: 0000000000000000 RSI: 00002000000096c0 RDI: 0000000000000003 [ 734.403269][T26265] RBP: 00007fe0ecdbd090 R08: 0000000000000000 R09: 0000000000000000 [ 734.403280][T26265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.403289][T26265] R13: 00007fe0ec216038 R14: 00007fe0ec215fa0 R15: 00007ffdb0f4d7e8 [ 734.403317][T26265] [ 735.317773][T26282] openvswitch: netlink: Key type 12698 is out of range max 32 [ 735.350840][T26285] siw: device registration error -23 [ 735.582873][T26287] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6236'. [ 735.727682][T26292] lo speed is unknown, defaulting to 1000 [ 735.757584][T26297] ipip0: entered promiscuous mode [ 735.762682][T26297] ipip0: entered allmulticast mode [ 736.224097][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 736.238911][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 736.247729][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 736.256036][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 736.311400][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 736.906137][T26330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6248'. [ 737.127083][T26333] openvswitch: netlink: Key type 12698 is out of range max 32 [ 737.292039][T26342] bond4: option lacp_rate: invalid value (128) [ 737.301196][T26342] bond4 (unregistering): Released all slaves [ 737.420952][T26350] netlink: 'syz.0.6253': attribute type 1 has an invalid length. [ 737.434032][T26349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6252'. [ 737.544435][T26309] lo speed is unknown, defaulting to 1000 [ 737.609684][T26353] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6254'. [ 737.756018][T26360] netlink: 276 bytes leftover after parsing attributes in process `syz.1.6257'. [ 737.816567][T26361] gtp0: entered promiscuous mode [ 737.839401][T26361] gtp0: entered allmulticast mode [ 737.865332][T26361] team0: Device gtp0 is of different type [ 738.268566][T26378] openvswitch: netlink: Key type 12698 is out of range max 32 [ 738.297429][T26380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6261'. [ 738.430128][T19593] Bluetooth: hci5: command tx timeout [ 738.835881][T26386] 8021q: VLANs not supported on vxcan1 [ 739.109990][T26309] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.137666][T26309] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.149219][T26309] bridge_slave_0: entered allmulticast mode [ 739.188283][T26309] bridge_slave_0: entered promiscuous mode [ 739.364644][T26406] Cannot find set identified by id 65534 to match [ 739.551215][T26309] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.583685][T26309] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.590975][T26309] bridge_slave_1: entered allmulticast mode [ 739.598642][T26309] bridge_slave_1: entered promiscuous mode [ 739.613435][T26410] openvswitch: netlink: Key type 12698 is out of range max 32 [ 739.755158][T26309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.820934][T26309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.908242][T26309] team0: Port device team_slave_0 added [ 739.917370][T26309] team0: Port device team_slave_1 added [ 740.038245][T26309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.054559][T26309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.122329][T26309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.155623][T26309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.173410][T26309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.204412][T26431] netlink: 388 bytes leftover after parsing attributes in process `syz.2.6279'. [ 740.253968][T26309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.510195][T19593] Bluetooth: hci5: command tx timeout [ 740.616914][T26309] hsr_slave_0: entered promiscuous mode [ 740.643733][T26309] hsr_slave_1: entered promiscuous mode [ 740.664698][T26309] debugfs: 'hsr0' already exists in 'hsr' [ 740.693997][T26309] Cannot create hsr debugfs directory [ 741.128053][ T12] bond9: left allmulticast mode [ 741.170836][ T12] bond9: left promiscuous mode [ 741.193681][ T12] bridge0: port 1(bond9) entered disabled state [ 741.221629][ T12] team0: left allmulticast mode [ 741.237406][ T12] team_slave_0: left allmulticast mode [ 741.256357][ T12] team_slave_1: left allmulticast mode [ 741.273887][ T12] team0: left promiscuous mode [ 741.290596][ T12] team_slave_0: left promiscuous mode [ 741.301970][ T12] team_slave_1: left promiscuous mode [ 741.315347][ T12] bridge0: port 3(team0) entered disabled state [ 741.334226][T26464] openvswitch: netlink: Key type 12698 is out of range max 32 [ 741.363018][ T12] bridge_slave_1: left allmulticast mode [ 741.377042][ T12] bridge_slave_1: left promiscuous mode [ 741.396466][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.016312][T26488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6291'. [ 742.246971][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.257897][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.268228][ T12] bond0 (unregistering): Released all slaves [ 742.286788][ T12] bond1 (unregistering): Released all slaves [ 742.315747][ T12] bond2 (unregistering): Released all slaves [ 742.357663][ T12] bond3 (unregistering): Released all slaves [ 742.378148][ T12] bond4 (unregistering): Released all slaves [ 742.405537][ T12] bond5 (unregistering): Released all slaves [ 742.453660][ T12] bond6 (unregistering): Released all slaves [ 742.486378][ T12] bond7 (unregistering): Released all slaves [ 742.507423][ T12] bond8 (unregistering): Released all slaves [ 742.528329][ T12] bond9 (unregistering): Released all slaves [ 742.574588][ T12] bond10 (unregistering): Released all slaves [ 742.612156][ T12] bond11 (unregistering): Released all slaves [ 742.636239][T19593] Bluetooth: hci5: command tx timeout [ 742.814634][T26490] bond5: option lacp_rate: invalid value (128) [ 742.844206][T26490] bond5 (unregistering): Released all slaves [ 742.933962][T26491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6292'. [ 743.015403][T26497] bond7: option lacp_rate: invalid value (128) [ 743.036327][T26497] bond7 (unregistering): Released all slaves [ 743.121367][ T12] tipc: Left network mode [ 743.124716][T26504] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6293'. [ 743.239352][T26498] lo speed is unknown, defaulting to 1000 [ 744.117916][T26528] FAULT_INJECTION: forcing a failure. [ 744.117916][T26528] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 744.159531][T26528] CPU: 1 UID: 0 PID: 26528 Comm: syz.5.6304 Not tainted syzkaller #0 PREEMPT(full) [ 744.159559][T26528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 744.159570][T26528] Call Trace: [ 744.159578][T26528] [ 744.159587][T26528] dump_stack_lvl+0xe8/0x150 [ 744.159614][T26528] should_fail_ex+0x412/0x560 [ 744.159640][T26528] prepare_alloc_pages+0x22a/0x650 [ 744.159675][T26528] __alloc_frozen_pages_noprof+0x12f/0x380 [ 744.159707][T26528] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 744.159738][T26528] ? __pfx_policy_nodemask+0x10/0x10 [ 744.159761][T26528] ? __lock_acquire+0x6b5/0x2cf0 [ 744.159785][T26528] alloc_pages_mpol+0x235/0x490 [ 744.159810][T26528] folio_alloc_mpol_noprof+0x39/0x160 [ 744.159831][T26528] vma_alloc_folio_noprof+0xe1/0x1e0 [ 744.159853][T26528] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 744.159873][T26528] ? __pte_offset_map+0x29/0x240 [ 744.159895][T26528] ? __pte_offset_map+0x29/0x240 [ 744.159920][T26528] do_pte_missing+0x159d/0x33f0 [ 744.159957][T26528] ? handle_mm_fault+0xf1/0x3170 [ 744.159984][T26528] handle_mm_fault+0x1bf2/0x3170 [ 744.160026][T26528] ? handle_mm_fault+0xf1/0x3170 [ 744.160056][T26528] ? __pfx_handle_mm_fault+0x10/0x10 [ 744.160079][T26528] ? follow_page_pte+0x6cf/0xe60 [ 744.160110][T26528] ? __pfx_follow_page_pte+0x10/0x10 [ 744.160142][T26528] __get_user_pages+0x167f/0x2730 [ 744.160194][T26528] __gup_longterm_locked+0xdcf/0x1630 [ 744.160221][T26528] ? lock_acquire+0x106/0x350 [ 744.160244][T26528] ? sanity_check_pinned_pages+0x7a8/0x870 [ 744.160274][T26528] gup_fast_fallback+0x1d84/0x20d0 [ 744.160326][T26528] ? __pfx_gup_fast_fallback+0x10/0x10 [ 744.160350][T26528] ? is_valid_gup_args+0x11f/0x200 [ 744.160374][T26528] ? pin_user_pages_fast+0x4d/0xb0 [ 744.160397][T26528] rds_info_getsockopt+0x20e/0x4a0 [ 744.160428][T26528] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 744.160455][T26528] ? __might_fault+0xaf/0x130 [ 744.160482][T26528] ? rds_getsockopt+0x2e6/0x500 [ 744.160504][T26528] ? __pfx_rds_getsockopt+0x10/0x10 [ 744.160525][T26528] do_sock_getsockopt+0x51d/0x7e0 [ 744.160552][T26528] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 744.160589][T26528] ? __fget_files+0x3a0/0x420 [ 744.160610][T26528] ? __fget_files+0x2a/0x420 [ 744.160639][T26528] __x64_sys_getsockopt+0x1a4/0x240 [ 744.160665][T26528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.160686][T26528] do_syscall_64+0x174/0x580 [ 744.160705][T26528] ? trace_irq_disable+0x3b/0x140 [ 744.160730][T26528] ? clear_bhb_loop+0x40/0x90 [ 744.160754][T26528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.160772][T26528] RIP: 0033:0x7f1aa499ce59 [ 744.160790][T26528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.160806][T26528] RSP: 002b:00007f1aa2bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 744.160825][T26528] RAX: ffffffffffffffda RBX: 00007f1aa4c15fa0 RCX: 00007f1aa499ce59 [ 744.160839][T26528] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000003 [ 744.160851][T26528] RBP: 00007f1aa2bee090 R08: 0000200000000400 R09: 0000000000000000 [ 744.160864][T26528] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000002 [ 744.160875][T26528] R13: 00007f1aa4c16038 R14: 00007f1aa4c15fa0 R15: 00007ffd069fc478 [ 744.160905][T26528] [ 744.821295][ T5633] Bluetooth: hci5: command tx timeout [ 744.858235][T26535] 8021q: VLANs not supported on vxcan1 [ 744.931154][T26544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6308'. [ 745.025098][T26539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.040033][T26544] bond4: entered promiscuous mode [ 745.056847][T26544] 8021q: adding VLAN 0 to HW filter on device bond4 [ 745.074823][T26549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6309'. [ 745.464912][T26562] FAULT_INJECTION: forcing a failure. [ 745.464912][T26562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.534921][T26562] CPU: 1 UID: 0 PID: 26562 Comm: syz.1.6311 Not tainted syzkaller #0 PREEMPT(full) [ 745.534947][T26562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 745.534959][T26562] Call Trace: [ 745.534967][T26562] [ 745.534976][T26562] dump_stack_lvl+0xe8/0x150 [ 745.535003][T26562] should_fail_ex+0x412/0x560 [ 745.535027][T26562] _copy_from_iter+0x1d3/0x1670 [ 745.535045][T26562] ? unwind_next_frame+0xa6/0x2550 [ 745.535075][T26562] ? __lock_acquire+0x6b5/0x2cf0 [ 745.535096][T26562] ? __pfx__copy_from_iter+0x10/0x10 [ 745.535130][T26562] tun_get_user+0x267/0x43e0 [ 745.535235][T26562] ? aa_file_perm+0x192/0x15e0 [ 745.535264][T26562] ? aa_file_perm+0x192/0x15e0 [ 745.535286][T26562] ? aa_file_perm+0x50e/0x15e0 [ 745.535304][T26562] ? __pfx_tun_get_user+0x10/0x10 [ 745.535325][T26562] ? __lock_acquire+0x6b5/0x2cf0 [ 745.535347][T26562] ? kstrtoull+0x12f/0x1d0 [ 745.535418][T26562] ? ref_tracker_alloc+0x35c/0x4c0 [ 745.535441][T26562] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 745.535462][T26562] ? tun_get+0x1c/0x2f0 [ 745.535480][T26562] ? tun_get+0x1c/0x2f0 [ 745.535503][T26562] ? tun_get+0x1c/0x2f0 [ 745.535521][T26562] ? tun_get+0x1c/0x2f0 [ 745.535543][T26562] tun_chr_write_iter+0x113/0x200 [ 745.535565][T26562] vfs_write+0x61d/0xb90 [ 745.535597][T26562] ? __pfx_vfs_write+0x10/0x10 [ 745.535628][T26562] ? __fget_files+0x2a/0x420 [ 745.535656][T26562] ksys_write+0x150/0x270 [ 745.535684][T26562] ? __pfx_ksys_write+0x10/0x10 [ 745.535716][T26562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.535736][T26562] do_syscall_64+0x174/0x580 [ 745.535755][T26562] ? trace_irq_disable+0x3b/0x140 [ 745.535781][T26562] ? clear_bhb_loop+0x40/0x90 [ 745.535804][T26562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.535823][T26562] RIP: 0033:0x7fca09b9ce59 [ 745.535841][T26562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.535856][T26562] RSP: 002b:00007fca0a9e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 745.535875][T26562] RAX: ffffffffffffffda RBX: 00007fca09e16180 RCX: 00007fca09b9ce59 [ 745.535888][T26562] RDX: 0000000000000072 RSI: 0000200000000100 RDI: 0000000000000003 [ 745.535900][T26562] RBP: 00007fca0a9e8090 R08: 0000000000000000 R09: 0000000000000000 [ 745.535911][T26562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.535923][T26562] R13: 00007fca09e16218 R14: 00007fca09e16180 R15: 00007ffdeae0c7c8 [ 745.535953][T26562] [ 746.180019][T26570] pim6reg1: entered promiscuous mode [ 746.191113][T26570] pim6reg1: entered allmulticast mode [ 746.409250][T26579] netlink: 'syz.1.6315': attribute type 9 has an invalid length. [ 746.654441][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 746.680129][T26582] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6317'. [ 746.879542][ T5633] Bluetooth: hci5: command 0x0405 tx timeout [ 746.911030][T26309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 746.949667][T26309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 746.989740][ T9350] wlan1: Trigger new scan to find an IBSS to join [ 747.023001][T26309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 747.066192][T26309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 747.103832][T26309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 747.146010][T26309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 747.175822][T26309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 747.221723][T26309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 747.246701][T26590] 8021q: VLANs not supported on vxcan1 [ 747.511681][T26309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.587771][T26599] lo speed is unknown, defaulting to 1000 [ 747.908899][T26309] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.971974][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 747.985920][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.993096][ T9347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.002805][ T9347] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.009964][ T9347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.294037][T26636] openvswitch: netlink: Key type 12698 is out of range max 32 [ 748.549670][T26651] syzkaller0: entered promiscuous mode [ 748.555193][T26651] syzkaller0: entered allmulticast mode [ 748.576463][T26651] FAULT_INJECTION: forcing a failure. [ 748.576463][T26651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.590009][T26651] CPU: 0 UID: 0 PID: 26651 Comm: syz.1.6333 Not tainted syzkaller #0 PREEMPT(full) [ 748.590034][T26651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 748.590045][T26651] Call Trace: [ 748.590062][T26651] [ 748.590069][T26651] dump_stack_lvl+0xe8/0x150 [ 748.590092][T26651] should_fail_ex+0x412/0x560 [ 748.590114][T26651] _copy_from_user+0x2d/0xb0 [ 748.590135][T26651] __copy_msghdr+0x3c5/0x5b0 [ 748.590159][T26651] ___sys_sendmsg+0x213/0x360 [ 748.590178][T26651] ? __lock_acquire+0x6b5/0x2cf0 [ 748.590202][T26651] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.590252][T26651] ? __fget_files+0x2a/0x420 [ 748.590271][T26651] ? __fget_files+0x3a0/0x420 [ 748.590298][T26651] __x64_sys_sendmsg+0x1bd/0x2a0 [ 748.590321][T26651] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 748.590349][T26651] ? __pfx_ksys_write+0x10/0x10 [ 748.590382][T26651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.590402][T26651] do_syscall_64+0x174/0x580 [ 748.590423][T26651] ? trace_irq_disable+0x3b/0x140 [ 748.590453][T26651] ? clear_bhb_loop+0x40/0x90 [ 748.590474][T26651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.590491][T26651] RIP: 0033:0x7fca09b9ce59 [ 748.590509][T26651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.590523][T26651] RSP: 002b:00007fca0aa2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.590543][T26651] RAX: ffffffffffffffda RBX: 00007fca09e15fa0 RCX: 00007fca09b9ce59 [ 748.590555][T26651] RDX: 0000000000004005 RSI: 0000200000000200 RDI: 0000000000000008 [ 748.590568][T26651] RBP: 00007fca0aa2a090 R08: 0000000000000000 R09: 0000000000000000 [ 748.590578][T26651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.590590][T26651] R13: 00007fca09e16038 R14: 00007fca09e15fa0 R15: 00007ffdeae0c7c8 [ 748.590619][T26651] [ 749.116265][T26654] 8021q: VLANs not supported on vxcan1 [ 749.182253][T26660] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.193510][T26660] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.209454][T26661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6336'. [ 749.318624][T26659] netlink: 'syz.2.6336': attribute type 1 has an invalid length. [ 749.397586][T26660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6336'. [ 749.414374][T26666] siw: device registration error -23 [ 749.427553][ T12] hsr_slave_0: left promiscuous mode [ 749.445910][ T12] hsr_slave_1: left promiscuous mode [ 749.892450][ T12] team0 (unregistering): Port device team_slave_1 removed [ 749.911690][ T12] team0 (unregistering): Port device team_slave_0 removed [ 750.157234][T26671] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 750.423948][T26683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6344'. [ 750.441268][T26682] openvswitch: netlink: Key type 12698 is out of range max 32 [ 750.470943][T26686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6345'. [ 750.485142][T26683] netlink: 252 bytes leftover after parsing attributes in process `syz.1.6344'. [ 750.535634][T26686] netlink: 252 bytes leftover after parsing attributes in process `syz.2.6345'. [ 750.621268][ T12] IPVS: stop unused estimator thread 0... [ 750.718387][T26695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6346'. [ 750.793790][T26693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6346'. [ 750.918244][T26309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.141039][T26309] veth0_vlan: entered promiscuous mode [ 751.201467][T26309] veth1_vlan: entered promiscuous mode [ 751.253590][T26705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6350'. [ 751.284297][T26705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6350'. [ 751.302291][T26309] veth0_macvtap: entered promiscuous mode [ 751.325222][T26309] veth1_macvtap: entered promiscuous mode [ 751.377781][T26309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.443374][T26309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.492123][ T9322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.526255][ T9322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.569399][ T9322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.575525][T19593] block nbd0: Receive control failed (result -107) [ 751.597836][T26710] block nbd0: reconnected socket [ 751.603488][ T9322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.693299][ T3362] team0: left allmulticast mode [ 751.734110][ T3362] team0: left promiscuous mode [ 751.764445][ T3362] bridge0: port 1(team0) entered disabled state [ 751.856786][T26716] openvswitch: netlink: Key type 12698 is out of range max 32 [ 751.870886][ T1052] wlan1: Trigger new scan to find an IBSS to join [ 752.799745][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.837091][ T3362] bond1 (unregistering): Released all slaves [ 752.858995][ T3362] bond2 (unregistering): Released all slaves [ 752.921750][ T3362] bond3 (unregistering): Released all slaves [ 752.946999][ T3362] bond4 (unregistering): Released all slaves [ 752.984033][ T3362] bond5 (unregistering): Released all slaves [ 753.007494][ T3362] bond6 (unregistering): Released all slaves [ 753.032243][ T3362] bond7 (unregistering): Released all slaves [ 753.066646][ T3362] bond8 (unregistering): Released all slaves [ 753.524828][T26747] netlink: 'syz.1.6365': attribute type 18 has an invalid length. [ 753.563749][ T9322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.566587][T26748] openvswitch: netlink: Key type 12698 is out of range max 32 [ 753.594280][ T9322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.627425][T26747] netlink: 'syz.1.6365': attribute type 18 has an invalid length. [ 753.687474][ T9347] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.720508][ T9347] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.822475][ T9347] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.860020][ T9350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.873561][ T9347] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.903505][ T9350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.155985][T26758] bond5: option lacp_rate: invalid value (128) [ 754.204137][T26758] bond5 (unregistering): Released all slaves [ 754.311375][T26768] Cannot find add_set index 1 as target [ 754.343486][T26760] __nla_validate_parse: 2 callbacks suppressed [ 754.343514][T26760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6369'. [ 754.379484][ T3362] tipc: Left network mode [ 754.758654][T26781] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6378'. [ 754.885761][T26761] [ 754.888130][T26761] ====================================================== [ 754.895149][T26761] WARNING: possible circular locking dependency detected [ 754.902186][T26761] syzkaller #0 Not tainted [ 754.906606][T26761] ------------------------------------------------------ [ 754.913620][T26761] poweroff/26761 is trying to acquire lock: [ 754.919497][T26761] ffffffff8ea85580 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 754.928627][T26761] [ 754.928627][T26761] but task is already holding lock: [ 754.935969][T26761] ffff888035a98338 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 754.945447][T26761] [ 754.945447][T26761] which lock already depends on the new lock. [ 754.945447][T26761] [ 754.955840][T26761] [ 754.955840][T26761] the existing dependency chain (in reverse order) is: [ 754.964833][T26761] [ 754.964833][T26761] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 754.972376][T26761] __might_fault+0xcb/0x130 [ 754.977397][T26761] _copy_from_user+0x28/0xb0 [ 754.982496][T26761] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 754.989056][T26761] ip_generic_getfrag+0x149/0x2d0 [ 754.994629][T26761] __ip6_append_data+0x39cd/0x3f60 [ 755.000288][T26761] ip6_append_data+0x10f/0x280 [ 755.005556][T26761] rawv6_sendmsg+0x12d3/0x18e0 [ 755.010887][T26761] ____sys_sendmsg+0x80a/0x9f0 [ 755.016155][T26761] ___sys_sendmsg+0x2a5/0x360 [ 755.021333][T26761] __x64_sys_sendmsg+0x1bd/0x2a0 [ 755.026861][T26761] do_syscall_64+0x174/0x580 [ 755.031960][T26761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.038359][T26761] [ 755.038359][T26761] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 755.046081][T26761] lock_sock_nested+0x41/0x100 [ 755.051362][T26761] inet_shutdown+0x6a/0x390 [ 755.056462][T26761] nbd_mark_nsock_dead+0x2e9/0x560 [ 755.062165][T26761] recv_work+0x1c2e/0x1d40 [ 755.067092][T26761] process_scheduled_works+0xb5d/0x1860 [ 755.073140][T26761] worker_thread+0xa53/0xfc0 [ 755.078235][T26761] kthread+0x389/0x470 [ 755.082812][T26761] ret_from_fork+0x514/0xb70 [ 755.087905][T26761] ret_from_fork_asm+0x1a/0x30 [ 755.093181][T26761] [ 755.093181][T26761] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 755.100809][T26761] __mutex_lock+0x1a3/0x1550 [ 755.105910][T26761] nbd_queue_rq+0x37b/0x1100 [ 755.111008][T26761] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 755.117141][T26761] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 755.124017][T26761] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 755.130511][T26761] blk_mq_run_hw_queue+0x348/0x4f0 [ 755.136128][T26761] blk_mq_dispatch_list+0xd16/0xe10 [ 755.141841][T26761] blk_mq_flush_plug_list+0x48d/0x570 [ 755.147729][T26761] __blk_flush_plug+0x3ed/0x4d0 [ 755.153150][T26761] __submit_bio+0x28d/0x580 [ 755.158161][T26761] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 755.164297][T26761] block_read_full_folio+0x599/0x830 [ 755.170095][T26761] filemap_read_folio+0x137/0x3b0 [ 755.175657][T26761] do_read_cache_folio+0x358/0x590 [ 755.181287][T26761] read_part_sector+0xb6/0x2b0 [ 755.186662][T26761] adfspart_check_ICS+0xb1/0x960 [ 755.192120][T26761] bdev_disk_changed+0x817/0x1770 [ 755.197672][T26761] blkdev_get_whole+0x380/0x510 [ 755.203117][T26761] bdev_open+0x31e/0xd30 [ 755.207886][T26761] blkdev_open+0x470/0x610 [ 755.212828][T26761] do_dentry_open+0x822/0x13a0 [ 755.218111][T26761] vfs_open+0x3b/0x340 [ 755.222719][T26761] path_openat+0x2e08/0x3860 [ 755.227833][T26761] do_file_open+0x23e/0x4a0 [ 755.232845][T26761] do_sys_openat2+0x113/0x200 [ 755.238032][T26761] __x64_sys_openat+0x138/0x170 [ 755.243417][T26761] do_syscall_64+0x174/0x580 [ 755.248521][T26761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.254923][T26761] [ 755.254923][T26761] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 755.262120][T26761] __mutex_lock+0x1a3/0x1550 [ 755.267222][T26761] nbd_queue_rq+0xc6/0x1100 [ 755.272236][T26761] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 755.278551][T26761] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 755.285390][T26761] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 755.291878][T26761] blk_mq_run_hw_queue+0x348/0x4f0 [ 755.297496][T26761] blk_mq_dispatch_list+0xd16/0xe10 [ 755.303199][T26761] blk_mq_flush_plug_list+0x48d/0x570 [ 755.309078][T26761] __blk_flush_plug+0x3ed/0x4d0 [ 755.314441][T26761] __submit_bio+0x28d/0x580 [ 755.319450][T26761] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 755.325590][T26761] block_read_full_folio+0x599/0x830 [ 755.331390][T26761] filemap_read_folio+0x137/0x3b0 [ 755.336942][T26761] do_read_cache_folio+0x358/0x590 [ 755.342574][T26761] read_part_sector+0xb6/0x2b0 [ 755.347853][T26761] adfspart_check_ICS+0xb1/0x960 [ 755.353300][T26761] bdev_disk_changed+0x817/0x1770 [ 755.358837][T26761] blkdev_get_whole+0x380/0x510 [ 755.364194][T26761] bdev_open+0x31e/0xd30 [ 755.368944][T26761] blkdev_open+0x470/0x610 [ 755.373867][T26761] do_dentry_open+0x822/0x13a0 [ 755.379137][T26761] vfs_open+0x3b/0x340 [ 755.383709][T26761] path_openat+0x2e08/0x3860 [ 755.388811][T26761] do_file_open+0x23e/0x4a0 [ 755.393826][T26761] do_sys_openat2+0x113/0x200 [ 755.399011][T26761] __x64_sys_openat+0x138/0x170 [ 755.404370][T26761] do_syscall_64+0x174/0x580 [ 755.409467][T26761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.415863][T26761] [ 755.415863][T26761] -> #3 (set->srcu){.+.+}-{0:0}: [ 755.422972][T26761] __synchronize_srcu+0xca/0x300 [ 755.428416][T26761] elevator_switch+0x1e8/0x7a0 [ 755.433758][T26761] elevator_change+0x2cc/0x450 [ 755.439032][T26761] elevator_set_default+0x36c/0x430 [ 755.444737][T26761] blk_register_queue+0x3e9/0x4e0 [ 755.450287][T26761] __add_disk+0x677/0xd50 [ 755.455226][T26761] add_disk_fwnode+0xfb/0x480 [ 755.460411][T26761] nbd_dev_add+0x72c/0xb50 [ 755.465352][T26761] nbd_init+0x168/0x1f0 [ 755.470016][T26761] do_one_initcall+0x250/0x870 [ 755.475285][T26761] do_initcall_level+0x104/0x190 [ 755.480736][T26761] do_initcalls+0x59/0xa0 [ 755.485571][T26761] kernel_init_freeable+0x2a6/0x3e0 [ 755.491274][T26761] kernel_init+0x1d/0x1d0 [ 755.496116][T26761] ret_from_fork+0x514/0xb70 [ 755.501211][T26761] ret_from_fork_asm+0x1a/0x30 [ 755.506485][T26761] [ 755.506485][T26761] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 755.514289][T26761] __mutex_lock+0x1a3/0x1550 [ 755.519386][T26761] elevator_change+0x1b3/0x450 [ 755.524654][T26761] elevator_set_none+0xb5/0x140 [ 755.530010][T26761] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 755.536324][T26761] nbd_start_device+0x17f/0xb10 [ 755.541685][T26761] nbd_genl_connect+0x165b/0x1cf0 [ 755.547230][T26761] genl_family_rcv_msg_doit+0x22a/0x330 [ 755.553287][T26761] genl_rcv_msg+0x61c/0x7a0 [ 755.558306][T26761] netlink_rcv_skb+0x232/0x4b0 [ 755.563575][T26761] genl_rcv+0x28/0x40 [ 755.568065][T26761] netlink_unicast+0x75c/0x8e0 [ 755.573354][T26761] netlink_sendmsg+0x813/0xb40 [ 755.578632][T26761] ____sys_sendmsg+0x972/0x9f0 [ 755.583900][T26761] ___sys_sendmsg+0x2a5/0x360 [ 755.589086][T26761] __x64_sys_sendmsg+0x1bd/0x2a0 [ 755.594527][T26761] do_syscall_64+0x174/0x580 [ 755.599625][T26761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.606021][T26761] [ 755.606021][T26761] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 755.614608][T26761] blk_alloc_queue+0x546/0x680 [ 755.619886][T26761] __blk_mq_alloc_disk+0x197/0x390 [ 755.625505][T26761] nbd_dev_add+0x499/0xb50 [ 755.630428][T26761] nbd_init+0x168/0x1f0 [ 755.635089][T26761] do_one_initcall+0x250/0x870 [ 755.640360][T26761] do_initcall_level+0x104/0x190 [ 755.645802][T26761] do_initcalls+0x59/0xa0 [ 755.650640][T26761] kernel_init_freeable+0x2a6/0x3e0 [ 755.656349][T26761] kernel_init+0x1d/0x1d0 [ 755.661187][T26761] ret_from_fork+0x514/0xb70 [ 755.666296][T26761] ret_from_fork_asm+0x1a/0x30 [ 755.671567][T26761] [ 755.671567][T26761] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 755.678779][T26761] __lock_acquire+0x15a5/0x2cf0 [ 755.684135][T26761] lock_acquire+0x106/0x350 [ 755.689152][T26761] fs_reclaim_acquire+0x71/0x100 [ 755.694602][T26761] prepare_alloc_pages+0x152/0x650 [ 755.700250][T26761] __alloc_frozen_pages_noprof+0x12f/0x380 [ 755.706589][T26761] alloc_pages_mpol+0x235/0x490 [ 755.711949][T26761] folio_alloc_mpol_noprof+0x39/0x160 [ 755.717828][T26761] vma_alloc_folio_noprof+0xe1/0x1e0 [ 755.724137][T26761] do_pte_missing+0x159d/0x33f0 [ 755.729497][T26761] handle_mm_fault+0x1bf2/0x3170 [ 755.734940][T26761] do_user_addr_fault+0x75b/0x1340 [ 755.740556][T26761] exc_page_fault+0x6a/0xc0 [ 755.745566][T26761] asm_exc_page_fault+0x26/0x30 [ 755.750922][T26761] filldir64+0x2ab/0x640 [ 755.755671][T26761] proc_readdir_de+0x41f/0x550 [ 755.760948][T26761] proc_root_readdir+0x65/0xd0 [ 755.766223][T26761] iterate_dir+0x399/0x570 [ 755.771145][T26761] __se_sys_getdents64+0xf1/0x280 [ 755.776694][T26761] do_syscall_64+0x174/0x580 [ 755.781791][T26761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.788198][T26761] [ 755.788198][T26761] other info that might help us debug this: [ 755.788198][T26761] [ 755.798409][T26761] Chain exists of: [ 755.798409][T26761] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 755.798409][T26761] [ 755.811004][T26761] Possible unsafe locking scenario: [ 755.811004][T26761] [ 755.818448][T26761] CPU0 CPU1 [ 755.823881][T26761] ---- ---- [ 755.829226][T26761] rlock(&mm->mmap_lock); [ 755.833696][T26761] lock(sk_lock-AF_INET6); [ 755.840703][T26761] lock(&mm->mmap_lock); [ 755.847536][T26761] lock(fs_reclaim); [ 755.851514][T26761] [ 755.851514][T26761] *** DEADLOCK *** [ 755.851514][T26761] [ 755.859647][T26761] 3 locks held by poweroff/26761: [ 755.864658][T26761] #0: ffff88808eec3430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 755.873705][T26761] #1: ffff88802b3178e0 (&sb->s_type->i_mutex_key#12){++++}-{4:4}, at: iterate_dir+0x292/0x570 [ 755.884051][T26761] #2: ffff888035a98338 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 755.893959][T26761] [ 755.893959][T26761] stack backtrace: [ 755.899838][T26761] CPU: 1 UID: 0 PID: 26761 Comm: poweroff Not tainted syzkaller #0 PREEMPT(full) [ 755.899854][T26761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 755.899863][T26761] Call Trace: [ 755.899870][T26761] [ 755.899877][T26761] dump_stack_lvl+0xe8/0x150 [ 755.899894][T26761] print_circular_bug+0x2e1/0x300 [ 755.899914][T26761] check_noncircular+0x12e/0x150 [ 755.899933][T26761] __lock_acquire+0x15a5/0x2cf0 [ 755.899950][T26761] ? kernel_text_address+0xa5/0xe0 [ 755.899969][T26761] ? __lock_acquire+0x6b5/0x2cf0 [ 755.899986][T26761] ? prepare_alloc_pages+0x152/0x650 [ 755.900005][T26761] lock_acquire+0x106/0x350 [ 755.900017][T26761] ? prepare_alloc_pages+0x152/0x650 [ 755.900037][T26761] ? __pfx_stack_trace_save+0x10/0x10 [ 755.900058][T26761] ? __lock_acquire+0x6b5/0x2cf0 [ 755.900073][T26761] fs_reclaim_acquire+0x71/0x100 [ 755.900091][T26761] ? prepare_alloc_pages+0x152/0x650 [ 755.900110][T26761] prepare_alloc_pages+0x152/0x650 [ 755.900132][T26761] __alloc_frozen_pages_noprof+0x12f/0x380 [ 755.900153][T26761] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 755.900175][T26761] ? __pfx_policy_nodemask+0x10/0x10 [ 755.900189][T26761] ? __lock_acquire+0x6b5/0x2cf0 [ 755.900203][T26761] alloc_pages_mpol+0x235/0x490 [ 755.900219][T26761] folio_alloc_mpol_noprof+0x39/0x160 [ 755.900233][T26761] vma_alloc_folio_noprof+0xe1/0x1e0 [ 755.900247][T26761] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 755.900260][T26761] ? __pte_offset_map+0x29/0x240 [ 755.900276][T26761] ? __pte_offset_map+0x29/0x240 [ 755.900293][T26761] do_pte_missing+0x159d/0x33f0 [ 755.900316][T26761] ? handle_mm_fault+0xf1/0x3170 [ 755.900333][T26761] handle_mm_fault+0x1bf2/0x3170 [ 755.900353][T26761] ? handle_mm_fault+0xf1/0x3170 [ 755.900371][T26761] ? __pfx_handle_mm_fault+0x10/0x10 [ 755.900393][T26761] ? lock_mm_and_find_vma+0xa7/0x340 [ 755.900412][T26761] do_user_addr_fault+0x75b/0x1340 [ 755.900430][T26761] exc_page_fault+0x6a/0xc0 [ 755.900446][T26761] asm_exc_page_fault+0x26/0x30 [ 755.900459][T26761] RIP: 0010:filldir64+0x2ab/0x640 [ 755.900474][T26761] Code: 00 f0 ff ff ff 7f 00 00 48 39 c8 48 0f 47 c1 0f 01 cb 48 8b 4c 24 28 48 89 48 08 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 60 <48> 89 02 8b 44 24 04 66 89 42 10 41 80 e7 0f 44 88 7a 12 42 c6 44 [ 755.900486][T26761] RSP: 0018:ffffc9000409fc48 EFLAGS: 00050283 [ 755.900498][T26761] RAX: 00000000f00000d1 RBX: ffffc9000409fe38 RCX: 0000000000000035 [ 755.900508][T26761] RDX: 0000562df9257000 RSI: 0000000000000000 RDI: 0000000000000000 [ 755.900517][T26761] RBP: dffffc0000000000 R08: ffff888031f98007 R09: 1ffff110063f3000 [ 755.900527][T26761] R10: dffffc0000000000 R11: ffffed10063f3001 R12: ffff88801fedfd5c [ 755.900538][T26761] R13: 000000000000000a R14: 000000000000000a R15: 0000000000000008 [ 755.900552][T26761] ? filldir64+0x249/0x640 [ 755.900567][T26761] ? __pfx_filldir64+0x10/0x10 [ 755.900580][T26761] proc_readdir_de+0x41f/0x550 [ 755.900602][T26761] proc_root_readdir+0x65/0xd0 [ 755.900622][T26761] iterate_dir+0x399/0x570 [ 755.900636][T26761] __se_sys_getdents64+0xf1/0x280 [ 755.900649][T26761] ? __pfx___se_sys_getdents64+0x10/0x10 [ 755.900662][T26761] ? exc_page_fault+0x6a/0xc0 [ 755.900675][T26761] ? __pfx_filldir64+0x10/0x10 [ 755.900688][T26761] ? do_user_addr_fault+0xc6f/0x1340 [ 755.900704][T26761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.900723][T26761] do_syscall_64+0x174/0x580 [ 755.900737][T26761] ? trace_irq_disable+0x3b/0x140 [ 755.900756][T26761] ? clear_bhb_loop+0x40/0x90 [ 755.900771][T26761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.900784][T26761] RIP: 0033:0x7fd6fafcfd23 [ 755.900797][T26761] Code: 8b 05 d9 00 10 00 64 c7 00 16 00 00 00 31 c0 eb b0 66 0f 1f 44 00 00 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 8b 15 a1 00 10 00 f7 d8 [ 755.900809][T26761] RSP: 002b:00007ffd987f8e98 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 755.900823][T26761] RAX: ffffffffffffffda RBX: 0000562df92569c0 RCX: 00007fd6fafcfd23 [ 755.900833][T26761] RDX: 0000000000008000 RSI: 0000562df92569f0 RDI: 0000000000000003 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 755.900842][T26761] RBP: 0000562df92569c4 R08: 00007fd6fb0d0ac0 R09: 0000000000000000 [ 755.900851][T26761] R10: 0000000000000004 R11: 0000000000000293 R12: 0000562df92569f0 [ 755.900860][T26761] R13: ffffffffffffff88 R14: 0000000000000002 R15: 0000562de4079d98 [ 755.900875][T26761] [ 756.103502][T26788] openvswitch: netlink: Key type 12698 is out of range max 32 [ 756.487883][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 756.495308][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 756.502676][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 756.510588][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 756.518248][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 758.069025][ T3362] virt_wifi0: left promiscuous mode [ 758.079487][ T3362] veth1_macvtap: left promiscuous mode [ 758.092097][ T3362] veth0_macvtap: left promiscuous mode [ 758.109228][ T3362] veth1_vlan: left promiscuous mode [ 758.116086][ T3362] veth0_vlan: left promiscuous mode Stopping sshd: stopped /usr/sbin/sshd (pid 5385) OK Stopping crond: stopped /usr/sbin/crond (pid 5368) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5292) Stopping network: [ 759.073540][ T3362] IPVS: stop unused estimator thread 0... OK Stopping iptables: OK Stopping system message bus: [ 759.584528][ T3362] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.648287][ T3362] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.728337][ T3362] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.860307][ T3362] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 done [ 759.997249][ T3362] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.083966][ T3362] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.144897][ T3362] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.199468][ T3362] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.826292][ T3362] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.865979][ T3362] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 Stopping klogd: [ 760.937540][ T3362] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.948091][ T3362] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 761.001424][ T3362] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.011868][ T3362] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 OK Stopping acpid: [ 761.077752][ T3362] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.088159][ T3362] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 761.145433][ T3362] bridge_slave_1: left allmulticast mode [ 761.151469][ T3362] bridge_slave_1: left promiscuous mode [ 761.157172][ T3362] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.165384][ T3362] bridge_slave_0: left allmulticast mode [ 761.171165][ T3362] bridge_slave_0: left promiscuous mode [ 761.176831][ T3362] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.187008][ T3362] bridge_slave_1: left allmulticast mode [ 761.192861][ T3362] bridge_slave_1: left promiscuous mode [ 761.198533][ T3362] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.206775][ T3362] bridge_slave_0: left allmulticast mode [ 761.212457][ T3362] bridge_slave_0: left promiscuous mode [ 761.218080][ T3362] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.227027][ T3362] bridge0: port 1(team0) entered disabled state [ 761.234607][ T3362] bridge_slave_1: left allmulticast mode [ 761.240505][ T3362] bridge_slave_1: left promiscuous mode [ 761.246245][ T3362] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.255363][ T3362] veth17: left allmulticast mode [ 761.260638][ T3362] veth17: left promiscuous mode [ 761.265631][ T3362] bridge2: port 3(veth17) entered disabled state [ 761.272966][ T3362] veth0_to_bond: left allmulticast mode [ 761.278529][ T3362] veth0_to_bond: left promiscuous mode [ 761.284712][ T3362] bridge2: port 2(veth0_to_bond) entered disabled state [ 761.292751][ T3362] veth15: left allmulticast mode [ 761.297711][ T3362] veth15: left promiscuous mode [ 761.302738][ T3362] bridge2: port 1(veth15) entered disabled state [ 761.312986][ T3362] bridge_slave_1: left allmulticast mode [ 761.318647][ T3362] bridge_slave_1: left promiscuous mode [ 761.324355][ T3362] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.332245][ T3362] bridge_slave_0: left allmulticast mode [ 761.337887][ T3362] bridge_slave_0: left promiscuous mode [ 761.343753][ T3362] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.427066][ T3362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.437408][ T3362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.447876][ T3362] bond0 (unregistering): Released all slaves [ 761.495063][ T3362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.504977][ T3362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.514499][ T3362] bond0 (unregistering): Released all slaves [ 761.623979][ T3362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.634953][ T3362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.645313][ T3362] bond0 (unregistering): Released all slaves [ 761.653683][ T3362] bond1 (unregistering): (slave veth9): Releasing active interface [ 761.662279][ T3362] bond1 (unregistering): Released all slaves [ 761.672917][ T3362] bond2 (unregistering): Released all slaves [ 761.682136][ T3362] bond3 (unregistering): Released all slaves [ 761.693720][ T3362] bond4 (unregistering): Released all slaves [ 761.788281][ T3362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.799122][ T3362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.808603][ T3362] bond0 (unregistering): Released all slaves [ 761.819435][ T3362] bond1 (unregistering): Released all slaves [ 761.828321][ T3362] bond2 (unregistering): Released all slaves [ 761.837245][ T3362] bond3 (unregistering): Released all slaves [ 761.846268][ T3362] bond4 (unregistering): Released all slaves [ 761.991496][ T3362] tipc: Disabling bearer [ 761.998662][ T3362] tipc: Left network mode [ 762.011037][ T3362] tipc: Left network mode OK Stopping syslogd: stopped /sbin/syslogd (pid 4980) OK umount: devtmpfs busy - remounted read-only [ 763.069218][T26883] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1 ro. The system is going down NOW! Sent SIGTERM to[ 763.176977][ T3362] hsr_slave_0: left promiscuous mode [ 763.182743][ T3362] hsr_slave_1: left promiscuous mode [ 763.188373][ T3362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.195892][ T3362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.203558][ T3362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.211107][ T3362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.223293][ T3362] hsr_slave_0: left promiscuous mode [ 763.229103][ T3362] hsr_slave_1: left promiscuous mode [ 763.235426][ T3362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.242861][ T3362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.250417][ T3362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.257824][ T3362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.267177][ T3362] hsr_slave_0: left promiscuous mode [ 763.273750][ T3362] hsr_slave_1: left promiscuous mode [ 763.279392][ T3362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.286772][ T3362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.294710][ T3362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.302130][ T3362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.313025][ T3362] hsr_slave_0: left promiscuous mode [ 763.318674][ T3362] hsr_slave_1: left promiscuous mode [ 763.324344][ T3362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.331829][ T3362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.343369][ T3362] veth1_macvtap: left promiscuous mode [ 763.348850][ T3362] veth0_macvtap: left promiscuous mode [ 763.355067][ T3362] veth1_vlan: left promiscuous mode [ 763.360343][ T3362] veth0_vlan: left promiscuous mode [ 763.366156][ T3362] veth1_macvtap: left promiscuous mode [ 763.371651][ T3362] veth0_macvtap: left promiscuous mode [ 763.377148][ T3362] veth1_vlan: left promiscuous mode [ 763.382514][ T3362] veth0_vlan: left promiscuous mode [ 763.524731][ T3362] team0 (unregistering): Port device team_slave_1 removed [ 763.535114][ T3362] team0 (unregistering): Port device team_slave_0 removed [ 763.654856][ T3362] team0 (unregistering): Port device team_slave_1 removed [ 763.665388][ T3362] team0 (unregistering): Port device team_slave_0 removed [ 763.825569][ T3362] team_slave_1 (unregistering): left promiscuous mode [ 763.832405][ T3362] team_slave_1 (unregistering): left allmulticast mode [ 763.846460][ T3362] team0 (unregistering): Port device team_slave_1 removed [ 763.856406][ T3362] team_slave_0 (unregistering): left promiscuous mode [ 763.863285][ T3362] team_slave_0 (unregistering): left allmulticast mode [ 763.871089][ T3362] team0 (unregistering): Port device team_slave_0 removed [ 764.029052][ T3362] team0 (unregistering): Port device team_slave_1 removed [ 764.040809][ T3362] team0 (unregistering): Port device team_slave_0 removed Sent SIGKILL to all processes Requesting system poweroff