last executing test programs: 3m47.885339427s ago: executing program 0 (id=1486): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x7, 0x4) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x60, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x20}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x14, 0x4, @private2}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008004}, 0x804) shutdown(r2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x5, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}, @IFLA_ALT_IFNAME={0x38, 0x35, 'syz_tun\x00'}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x40880) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x20000844) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000180)=ANY=[], 0x290) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0xfffffffffffffdef) 3m47.20427972s ago: executing program 0 (id=1490): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000063c0)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000740)=ANY=[@ANYBLOB="0272ff07020000001811f2ff", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000057530000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000000000000039f0ff030e0900001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000"], &(0x7f0000000880)='GPL\x00', 0x20, 0x1000, &(0x7f0000002a00)=""/4096, 0x41000, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000003a80)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000003ac0)={0x4, 0x7, 0x2, 0x4}, 0x10, 0x1572e, 0xffffffffffffffff, 0x3, &(0x7f0000006340)=[0xffffffffffffffff], &(0x7f0000006380)=[{0x3, 0x2, 0x0, 0x1}, {0x2, 0x3, 0xc}, {0x4, 0x1, 0xd, 0x1}], 0x10, 0xa}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="b7dbcd17e48c2f3d902efefbb24e5f2c6d4bc82a640d5cd2b7747e48b044ad03b2ee3b8abb226fa9b26dd71f2723a9324d5404f8a47cdfe693203f12249facaaedf3c9854ee2ebbab8f45a0f9ee19132973c8001f9cad1199c0fa02a04c430653d51f4f6f35e2a943807df8e26c0e1414f601f79995febf6", @ANYRES64=0x0], 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0xc, 0xe, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002780)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000002840)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r4, 0x0, 0x0) bind$inet(r4, &(0x7f0000000500)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000540)={0x2, 0xfffa, @empty}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002880)={'dvmrp1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000028c0)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000002900)=ANY=[@ANYBLOB="00006003000000000000aaaaaaaaaa0281003a0008004500005c40000000022f907800001fe1e0000001a0008864004890780300000001000000a5049ac17f1d2ffe5fb6e085bb465b5c9fb166c61d4936f0d2531bce480c7609668eaf83be4c163f2faa46d4ef956e962fe4ef02d890789f"], 0x72) syz_emit_ethernet(0x46, &(0x7f0000002980)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f250000000000000000010000e00000017f00000100186371ae9b0300"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000580)={r8, 0xe, 0x1ff, 0x20, 0x7, 0xfff}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=r0, @ANYRESDEC=0x0], 0x88}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 3m46.618852311s ago: executing program 0 (id=1494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000f0)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a010400000000000000000200000708000240000000020900010073797a31000000004c000000030a01040000000000000000020000070900010073797a31000000000900030073797a320000000014000480080001000000000308000200000000000b00070066696c746572000084000000060a01040000000000000000020000070900010073797a3100000000090002007379"], 0x120}}, 0x0) 3m46.288554293s ago: executing program 0 (id=1497): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1d, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000280)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000000d00)=""/4121, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x409}, 0x94) (async) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @private=0xa010101, @local, {[@cipso={0x86, 0x28, 0x2, [{0x6, 0xb, "5e000000ff000000f5"}, {0x0, 0x5, "0404a6"}, {0x0, 0x12, "960605390006fff5800000b61af93a93"}]}, @rr={0x7, 0xf, 0x57, [@rand_addr=0x64010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) (async) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x8) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, &(0x7f0000000780)) (async) socket$netlink(0x10, 0x3, 0xc) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x84, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x68, 0x33, @beacon={{{}, {0xff}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x48, 0x1}]}, @val={0x3, 0x1, 0xe}, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x4, 0xab, 0x3a}}, @val={0x2d, 0x1a, {0x4000, 0x1, 0x6, 0x0, {0x5, 0x5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xe}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x5, 0x0, 0x2b, 0x800}}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x880}, 0x810) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000040) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (rerun: 64) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async, rerun: 64) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000700)=0x3, 0x2) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffac) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bind(r7, &(0x7f00000005c0)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(0xca, &(0x7f0000000640)="040e0c01031000ffffffffff40ffff", 0xf) (async) write(0xca, &(0x7f0000000680)="040e0c01032000ffffffffffffffff", 0xf) (async, rerun: 32) write(0xca, &(0x7f00000006c0)="040e0a01602000fb00", 0x9) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r0) nanosleep(0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x5c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3c, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c0000000001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e3c67"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) 3m44.987982869s ago: executing program 0 (id=1507): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r3, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003801c0003800600010000000000efff02000200000006000300a3aa0000080001"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c085}, 0x40) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newsa={0x148, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x67}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffff, 0x0, 0x800, 0x1}, {0x3, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @extra_flags={0x8, 0x18, 0x8}]}, 0x148}, 0x1, 0x0, 0x0, 0x48841}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x200, 0xfff, 0xc807, 0x0, 0x6, 0x964d930d47068913}) (async) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003100090027bd700000000000040000000800180005ac0f"], 0x1c}, 0x1, 0x0, 0x0, 0x2000a0b4}, 0x4044004) 3m44.514039187s ago: executing program 0 (id=1513): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@arena={0x21, 0x0, 0x0, 0x22, 0x60400, r0, 0x10001, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@private2, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff7, 0x5, 0x0, 0x0, 0x16, 0x4000000, r3}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x4, 0x0, 0x400, r1, 0x4, '\x00', r3, r0, 0x3, 0x1, 0x0, 0x9}, 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) unshare(0x2a020400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x2, 0xc, 0x1400}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r6, 0x68, &(0x7f0000000440)}, 0x10) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000140), 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@arena={0x21, 0x0, 0x0, 0x22, 0x60400, r0, 0x10001, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@private2, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff7, 0x5, 0x0, 0x0, 0x16, 0x4000000, r3}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x4, 0x0, 0x400, r1, 0x4, '\x00', r3, r0, 0x3, 0x1, 0x0, 0x9}, 0x50) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) (async) unshare(0x2a020400) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x2, 0xc, 0x1400}, 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r6, 0x68, &(0x7f0000000440)}, 0x10) (async) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) (async) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000140), 0x4) (async) 3m29.202364971s ago: executing program 32 (id=1513): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@arena={0x21, 0x0, 0x0, 0x22, 0x60400, r0, 0x10001, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@private2, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff7, 0x5, 0x0, 0x0, 0x16, 0x4000000, r3}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x4, 0x0, 0x400, r1, 0x4, '\x00', r3, r0, 0x3, 0x1, 0x0, 0x9}, 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) unshare(0x2a020400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x2, 0xc, 0x1400}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r6, 0x68, &(0x7f0000000440)}, 0x10) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000140), 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@arena={0x21, 0x0, 0x0, 0x22, 0x60400, r0, 0x10001, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@private2, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff7, 0x5, 0x0, 0x0, 0x16, 0x4000000, r3}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x4, 0x0, 0x400, r1, 0x4, '\x00', r3, r0, 0x3, 0x1, 0x0, 0x9}, 0x50) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) (async) unshare(0x2a020400) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x2, 0xc, 0x1400}, 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r6, 0x68, &(0x7f0000000440)}, 0x10) (async) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) (async) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000140), 0x4) (async) 4.257406779s ago: executing program 2 (id=3033): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001100), r0) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'virt_wifi0\x00', 0x96}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x6, 0xd, &(0x7f0000001200)=ANY=[@ANYBLOB="bf1600000000000085000000bc000000180200000a0000010000000000000000180200000a0000020000000040000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000cd000000850000004500000095"], &(0x7f0000001280)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000001340)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000100)={{r0}, r2, 0x8, @inherit={0x78, &(0x7f0000000080)={0x0, 0x6, 0x6, 0xe, {0x0, 0x9, 0x62d2, 0x2, 0x4}, [0xfffffffffffffffb, 0x40, 0xd, 0x1, 0x1a893c57, 0x0]}}, @devid}) 4.195965872s ago: executing program 2 (id=3035): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x40, 0x8000, 0x3, 0x9, {{0x15, 0x4, 0x2, 0x9, 0x54, 0x65, 0x0, 0xf, 0x29, 0x0, @empty, @private=0xa010100, {[@timestamp_prespec={0x44, 0x14, 0xb, 0x3, 0x8, [{@private=0xa010100, 0x6}, {@empty, 0x8}]}, @lsrr={0x83, 0x1f, 0xdb, [@dev={0xac, 0x14, 0x14, 0x11}, @loopback, @initdev={0xac, 0x1e, 0xfe, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2, @multicast2]}, @lsrr={0x83, 0x3, 0x64}, @end, @noop, @ra={0x94, 0x4}, @noop]}}}}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x275a, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1e, 0xe, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRESOCT=0x0, @ANYRES16=r0], &(0x7f0000001fc0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r2, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000002080)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x420000, &(0x7f0000000200)={@align=0x8000000000000001, {0x8, 0x9, 0x4, 0x9}}, 0x1535, &(0x7f0000000240), &(0x7f0000000280)=0x2}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000380), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000003c0)={@empty, 0x0}, &(0x7f0000000400)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000f00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f00000020c0)=ANY=[@ANYBLOB='4\t\x00\x00', @ANYRES16=r4, @ANYBLOB="020026bd7000fedbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="bc0002803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400fcffffff08000600", @ANYRES32=r0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="bc00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000008000100", @ANYRES32=r0, @ANYBLOB="b40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000008000100", @ANYRES32=r0, @ANYBLOB="bc01028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff07000008000600", @ANYRES32=r0, @ANYBLOB="400001002400010071756575655b0100000000b5252dbae4b1844ae0f8b64f9bcfd1000000000000000000000000000000000000a22a780e000300030000000868b62472713ccc87027dd3", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400050000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="7c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB="080007000000000008000100", @ANYRES32=r0, @ANYBLOB="f00002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400c2f2000008000600", @ANYRES32=r0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004007f00000008000100", @ANYRES32=r0, @ANYBLOB="d001028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB="0800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400f8ffffff08000600", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="740102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400fe0d000008000600", @ANYRES32=r0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400080000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040002000000"], 0x934}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008000000911015000000000095", @ANYRESDEC=r0, @ANYRES8=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', r0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x40, 0x8000, 0x3, 0x9, {{0x15, 0x4, 0x2, 0x9, 0x54, 0x65, 0x0, 0xf, 0x29, 0x0, @empty, @private=0xa010100, {[@timestamp_prespec={0x44, 0x14, 0xb, 0x3, 0x8, [{@private=0xa010100, 0x6}, {@empty, 0x8}]}, @lsrr={0x83, 0x1f, 0xdb, [@dev={0xac, 0x14, 0x14, 0x11}, @loopback, @initdev={0xac, 0x1e, 0xfe, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2, @multicast2]}, @lsrr={0x83, 0x3, 0x64}, @end, @noop, @ra={0x94, 0x4}, @noop]}}}}}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x275a, 0x0) (async) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1e, 0xe, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRESOCT=0x0, @ANYRES16=r0], &(0x7f0000001fc0)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r2, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000002080)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x420000, &(0x7f0000000200)={@align=0x8000000000000001, {0x8, 0x9, 0x4, 0x9}}, 0x1535, &(0x7f0000000240), &(0x7f0000000280)=0x2}) (async) syz_genetlink_get_family_id$team(&(0x7f0000000380), 0xffffffffffffffff) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000003c0)={@empty}, &(0x7f0000000400)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'veth1_to_bond\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000f00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f00000020c0)=ANY=[@ANYBLOB='4\t\x00\x00', @ANYRES16=r4, @ANYBLOB="020026bd7000fedbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="bc0002803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400fcffffff08000600", @ANYRES32=r0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="bc00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000008000100", @ANYRES32=r0, @ANYBLOB="b40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000008000100", @ANYRES32=r0, @ANYBLOB="bc01028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff07000008000600", @ANYRES32=r0, @ANYBLOB="400001002400010071756575655b0100000000b5252dbae4b1844ae0f8b64f9bcfd1000000000000000000000000000000000000a22a780e000300030000000868b62472713ccc87027dd3", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400050000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="7c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB="080007000000000008000100", @ANYRES32=r0, @ANYBLOB="f00002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400c2f2000008000600", @ANYRES32=r0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004007f00000008000100", @ANYRES32=r0, @ANYBLOB="d001028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB="0800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400f8ffffff08000600", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="740102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400fe0d000008000600", @ANYRES32=r0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400080000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040002000000"], 0x934}}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008000000911015000000000095", @ANYRESDEC=r0, @ANYRES8=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', r0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) 4.029263881s ago: executing program 2 (id=3037): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 43) 3.855022234s ago: executing program 2 (id=3041): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, 0x0, 0x20008081) shutdown(0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000140), &(0x7f0000000180)='%pB \x00'}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/178, 0xb2}, {&(0x7f0000001540)=""/70, 0x46}, {&(0x7f00000015c0)=""/4084, 0xff4}, {&(0x7f00000025c0)=""/150, 0x9a}, {&(0x7f0000002680)=""/167, 0xa7}, {&(0x7f0000002740)=""/256, 0x100}, {&(0x7f0000002840)=""/191, 0xbf}, {&(0x7f0000002900)=""/180, 0xb4}], 0x8, 0x0, 0x5e}, 0x1}], 0x4, 0x0, 0x0) 3.681777432s ago: executing program 2 (id=3044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000580)={{r0, &(0x7f0000000000)='pids.events\x00', 0x20182, &(0x7f0000000180)={@align=0x7, {0x3, 0x0, 0x8, 0xa}}, 0x2eb, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x3}, 0x4, &(0x7f0000000500)=[{0x3, 0x145, &(0x7f0000000240)='#\x00', &(0x7f0000000280)="835b1ce39326f0bb2ac54a7765dbaa7c9c5af056b79c8fb07144d28d6a02e2f4b27ae749e0eda50df7ee7983af47d9b6edbf94faf6085b26b6a0b9cab4a7d104afb42a32549a17dde5fb3ffdc2ee57fd287efc61004c0d6077addc0375f6eb5725f87c7c66ea6bac696ff0819ae541", 0x6f, 0x20}, {0x2, 0x81, &(0x7f0000000300)='pids.events\x00', &(0x7f0000000340)="f977cf4b1b4c06bb69", 0x9, 0x8}, {0x2, 0x7, &(0x7f0000000380)='pids.events\x00', &(0x7f00000003c0)="bd77261c491f1d54de2900bc97a3e42173a74404f3cdfbeceddb5d8d09156a5b23ea16efcc373c16ad9c9368e295596e0d713a2dfcf239291ebca79c65c9e364cedfedd922921f0cbb522510572229df2c772067bd3e7fd712351a269039e432932edf90bf2313dbac1a68b2a8bceffb35f927e599bd4c4f9e5539ec3258ca8ec9a81ee485885ca0bdb5379264876f0b1d366e95767cc524531e", 0x9a, 0x30}, {0x3, 0x2, &(0x7f0000000480)='pids.events\x00', &(0x7f00000004c0)="00b9f475c3a27263e95b9dba32861e55c491e5", 0x13, 0x2}]}) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='pids.events\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xfffffff5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000700)=0x0) bind$nfc_llcp(r3, &(0x7f0000000740)={0x27, r5, 0x1, 0x1, 0x0, 0x3, "450005bd85ef260f1d0f822fd38715df455ea9dfa0645505003c62a635f445fd5c495f3f8f6f1d7a5547b61cb558fe050d3c0e24a25ce4052fbfcf18472f86", 0x31}, 0x60) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000000c0)=0x200, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000a3000048008000100000012341400028057"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 3.61724698s ago: executing program 5 (id=3045): r0 = socket(0x5, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xffffffff, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 3.510396438s ago: executing program 2 (id=3047): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d8000000180081054e81f782db4cb904021d0800ff207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r5, 0x801, 0x70bd2e, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xba83542b86c80fd3}, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x44, r9, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5f}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 3.453045379s ago: executing program 5 (id=3048): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100)={0x27, 0x0}, &(0x7f0000000240)=0x60) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x8, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000001dc0), 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000005c0)="05031400d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000600)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) close(r3) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001e00)={@map=r3, r2, 0x2f}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xe, &(0x7f0000002300)=ANY=[@ANYRES16=r1], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000040)={0xfffffffe, 0x0, 0x3}, 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r11, 0x11, 0x2, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff05000700008d9c18ed0f6fd2", 0x0, 0xfea, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 3.309569456s ago: executing program 3 (id=3049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept4$alg(r4, 0x0, 0x0, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x97, 0x400add4, &(0x7f0000000180)={0xa, 0x4e28, 0x10789e, @mcast2}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) unshare(0x2020600) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000380)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000480), 0x366, 0x10, &(0x7f00000004c0), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="05"], 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0xb}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x8000}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2, 0x20, 0x7}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f00000017c0)=ANY=[], 0xfdef) 2.704974939s ago: executing program 5 (id=3052): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 44) 2.684850669s ago: executing program 3 (id=3053): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x200, '\x00', 0x0, 0x0}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000340)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x1, 0x100, 0x100, 0x0, 0xd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000055090200000300006e00000000000000b7090000ffffffb0739af0ff00000000ce09020000000000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000000000073119c00000000008510000002000000850000000200000095000000000000009500a50500000000"], &(0x7f0000000200)='GPL\x00', 0x5, 0x29e, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) 2.390510214s ago: executing program 1 (id=3054): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x2, 0x2724}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r1, 0x8}, &(0x7f0000000180)=0x8) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000200)={r2, 0xffffffffffffffff}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000280)=r1, 0x4) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0xfffffffffffffffd) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x200, @remote, 0x3}, @in6={0xa, 0x4e22, 0x101, @dev={0xfe, 0x80, '\x00', 0x11}, 0xd39}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x80000000, @private1, 0x4}], 0x64) r4 = socket(0x3, 0x1, 0x80) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2b, 'rdma'}, {0x2b, 'net_cls'}, {0x2d, 'perf_event'}, {0x2b, 'cpu'}, {0x2d, 'freezer'}, {0x2b, 'rlimit'}]}, 0x31) r6 = socket$inet6(0xa, 0x80000, 0xfffffffd) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f00000003c0)=0x58ed, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r7, 0x400, 0x4, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x29}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000580)=0xe, 0x4) recvmmsg(r0, &(0x7f00000078c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000005c0)=""/54, 0x36}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2, &(0x7f0000001640)=""/203, 0xcb}, 0xc2}, {{&(0x7f0000001740)=@tipc, 0x80, &(0x7f0000001840)=[{&(0x7f00000017c0)=""/114, 0x72}], 0x1, &(0x7f0000001880)=""/54, 0x36}}, {{&(0x7f00000018c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001940)=""/127, 0x7f}, {&(0x7f00000019c0)=""/237, 0xed}, {&(0x7f0000001ac0)=""/155, 0x9b}, {&(0x7f0000001b80)=""/60, 0x3c}, {&(0x7f0000001bc0)=""/116, 0x74}, {&(0x7f0000001c40)=""/180, 0xb4}, {&(0x7f0000001d00)=""/180, 0xb4}, {&(0x7f0000001dc0)=""/27, 0x1b}], 0x8, &(0x7f0000001e80)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000002e80)=@hci, 0x80, &(0x7f0000004400)=[{&(0x7f0000002f00)=""/187, 0xbb}, {&(0x7f0000002fc0)=""/66, 0x42}, {&(0x7f0000003040)=""/48, 0x30}, {&(0x7f0000003080)=""/83, 0x53}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/252, 0xfc}, {&(0x7f0000004200)=""/76, 0x4c}, {&(0x7f0000004280)=""/83, 0x53}, {&(0x7f0000004300)=""/196, 0xc4}], 0x9}, 0x9}, {{&(0x7f00000044c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000007780)=[{&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000005540)=""/150, 0x96}, {&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/87, 0x57}, {&(0x7f0000006680)=""/203, 0xcb}, {&(0x7f0000006780)=""/4096, 0x1000}], 0x6, &(0x7f0000007800)=""/148, 0x94}, 0xed}], 0x5, 0x2000, &(0x7f0000007a00)={0x77359400}) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000007a40)={0x2, 0x8, 0x1, 0x2, 0x0, [@private0, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @remote]}, 0x48) socket$phonet(0x23, 0x2, 0x1) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = accept4(r10, &(0x7f0000007ac0)=@ieee802154={0x24, @long}, &(0x7f0000007b40)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r11, 0x84, 0x1b, &(0x7f0000007b80)={r1, 0x79, "18d4002b899334f7f5538fcf2a910251b1daa9867730aa3b5690bb1ee2e977348a355dbf91cd6c78fcf24cc3413a162bb58fa3a21cd501f2bd614a52011d32852a42880cbc3ac5194ddd60982cb382f2b539d0ca146a35dfbfa019b2a9552bd34bc773203e93bff03e723ae38eca75372449ea4b068049d62a"}, &(0x7f0000007c40)=0x81) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000007c80)={r2, 0xffffffffffffffff, 0x800}, &(0x7f0000007cc0)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000007d00)={r12, 0x80000000, 0x3, 0x3}, &(0x7f0000007d40)=0x10) setsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r13, 0x84, 0x82, &(0x7f0000007d80)={r14, 0x4}, 0x8) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000007ec0)={r10, &(0x7f0000007dc0)='.\x00', 0x402000, &(0x7f0000007e00)={@align, {0x9, 0x3, 0xfff}}, 0x9, &(0x7f0000007e40)={@_ha_fsid}, &(0x7f0000007e80)=0x4}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000007f80)={'ip6tnl0\x00', &(0x7f0000007f00)={'syztnl1\x00', r9, 0x4, 0x2, 0xc, 0xc8000, 0x40, @dev={0xfe, 0x80, '\x00', 0x1e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x7, 0x7, 0xbde6}}) r17 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000007fc0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000008000)={0x1b, 0x0, 0x0, 0xf48e, 0x0, r15, 0x0, '\x00', r16, r17, 0x3, 0x0, 0x3}, 0x50) sendmsg$nl_route(r11, &(0x7f0000008200)={&(0x7f0000008080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000081c0)={&(0x7f0000008180)=@ipv4_getaddr={0x20, 0x16, 0xc2aebaa1e35114a, 0x70bd29, 0x25dfdbfb, {0x2, 0x78, 0x8, 0xfe}, [@IFA_BROADCAST={0x8, 0x4, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0xc840) 2.178488749s ago: executing program 5 (id=3055): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000180)=0x8000, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000200)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000240), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "bac6734d333dbaf9eeb943ca05f5b02c57a1e6a78fe77ab965f89a84fb7a4a824ef2a166703f1a4b7efde3690af12b82f528c2bab28c2e5a8e607988197c4fb5c65609b0c614ba24c5eb5b95c8ae2f29"}, 0xd8) sendmsg$nl_route(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRESOCT=r1], 0x38}, 0x1, 0x0, 0x0, 0x24004885}, 0x0) 2.17547158s ago: executing program 4 (id=3056): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x31}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @cgroup_sock_addr=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000002000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000002040)="03000000", 0x4}], 0x2}, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000140)={{0x2, 0x4e21, @broadcast}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x2, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'bridge_slave_1\x00'}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000002100)="2e00000012008188e6b42aa73772cc9f1b2f8b48430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x90) 2.175138589s ago: executing program 3 (id=3057): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x40000000) write(r0, &(0x7f0000000280)="120000001c0000010011223344556600060101010101010101010101010101010100", 0x22) 1.907677529s ago: executing program 4 (id=3058): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000100)={&(0x7f0000000080)='\x00', &(0x7f00000000c0)='@\'[&.]1\x00', 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'veth0_macvtap\x00', {0x2}, 0x620e}) 1.833862571s ago: executing program 1 (id=3059): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @local, 0x5}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) 1.824645444s ago: executing program 5 (id=3060): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) pwritev(r1, &(0x7f0000000b40)=[{&(0x7f0000000c00)='1n', 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x8, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b40500000000000061103c000000000063514a00000000009500090000000000"], &(0x7f00000004c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x0, 0x10, &(0x7f0000000780), 0x85}, 0x52) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000005c0)) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r3, 0x0, 0x33, 0x0, &(0x7f0000000040)) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4, @ANYBLOB="68a54fab9ef9a653d3cc9aa40a25ec00976cd396fdc0667c56b93a904808f7e74ac14bffd9d373f8c802387049ed050aeb458c318b56d1248ce0f4c56b893456f0219135302688b7e1ef7b1aacca58091b0e16bac36d4560c50a8aac5567e6f84623a9c65d09cc71b8c851ceaf938aedd0a08690"], 0x3c}}, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000d00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2100020}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x6}}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6bfd}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008014) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$sock(r5, &(0x7f00000009c0)={&(0x7f0000000280)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000980)=[{&(0x7f00000007c0)="2f1b7deb3909e04a211ba611ea48b70a09ba505ca6b26306dd8579a664045456700728df97411e8f7d88d45a90b6350e029a5f9993ec6abb4058ff60931e75b67bdcb641342629e921a32432afc6a3af6a0830a1085714d0c56ae3c769e741122dfcd94151a2c0ad4515adffe0cf47658f5f38f92ed5aab6fdc287a218ca034d4dfa8ffa377ae40051e28789f6aca49594292b666a3d947e2428e7bb160b35809f3ee1335363e41453cb727e18a43449def9f7bf55b01fcf0120cceef77538a2d2a1c1f81408a07ad0f2f681d48692174a51f4a20d107e4452f8", 0xda}, {&(0x7f00000008c0)="431b6343c09246fe00db0fd1a7afe23315e2bca78285fc24942c425ce700a8f5c0bf8f32420ff7b7adca81ea1a46c22d31519fd0da979368bc317c1b0f189bd9aa148e64cbab4b2fedced292c7a69f17d4be5d201ba16e6cf5c3fc48d430efec80eb028b0a8ad187ce0610dc236ac26ed9ad87d2b3f65da1212dac047756d0894fab43f0ea9ea2e457d4e35e7a707fc6886cf165283fd6c7cd78a188ad6c", 0x9e}], 0x2}, 0x840) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0x7fff, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x2f, 0x0, @empty, @empty}}}}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000d40)=0x3000) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 1.734302709s ago: executing program 1 (id=3061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000a0000040900010073797a3100000000400004803c0001800a0001006c696d69740000002c0002800c000240fc0000000000000e0c0001400000000000000007080005400000000108000440000000010900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 1.629077257s ago: executing program 4 (id=3062): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000002c0)={@private2}, 0xfffffffffffffdab) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000004c0)={@remote, r4}, 0x14) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r4, {0x5, 0x1}, {0x1, 0xfff2}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) (async, rerun: 64) close(r3) (async, rerun: 32) r5 = socket(0x15, 0x5, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000a, 0x31, r5, 0x8269000) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x80) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$cgroup_pid(r6, &(0x7f0000000100), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="8000260b0a0002000180c200000c00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) (async) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f0000000140), &(0x7f0000000180)) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x979b5000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000008, 0x13, r5, 0x80000000) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) 1.599409016s ago: executing program 1 (id=3063): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001ac0)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000680)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@setlink={0x48, 0x13, 0x1, 0x2000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x110, 0x4000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x24, 0x7}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000001940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001980)={@fallback=r4, r4, 0x2f}, 0x20) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000019c0), 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001a00)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001a40)={@cgroup=r4, r5, 0x2f, 0x28, 0x4, @void, @void, @void, @value=r6}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001a80)={r6}, 0x4) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xa1}]}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.16513699s ago: executing program 4 (id=3064): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.freeze\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000740)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x4, 0x2, 0x2, {0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x6}}}, 0x80, 0x0}, 0x40437f0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f00000007c0)={'virt_wifi0\x00', @random="bde328cf6234"}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000020000000000000004000000852040000300000095"], &(0x7f0000000540)='GPL\x00', 0x2, 0x2d, &(0x7f0000000580)=""/45, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) unshare(0x20000400) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000005c0)=@generic={0x0}, 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = gettid() sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000001000a1fb00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="8422040004000600140012800900010076657468000000000400028008001300", @ANYRES32=r5, @ANYBLOB='\b\x00%'], 0x44}}, 0x4008040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a0100000000050000000900010073797a30aab8db9778abb28e5f4e982d46515f000000000900030073797a300000000058000000060a010400000000000000000500000008000b4000000000300004802c0001800b00010074756e6e656c00ed1c000280080003400000000008000240000000010800fe40000000010900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}}, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f0000000880)={0x7, 0x0, 0x9, 0x1000, 0xffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x5, 0x839, 0x10, @remote, @private2, 0x8020, 0x80, 0xa, 0x4}}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@getchain={0x5c, 0x66, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x3, 0x8}, {0x6, 0xe}, {0xa}}, [{0x8, 0xb, 0x10000}, {0x8, 0xb, 0xfffffffc}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x9}, {0x2, 0xb, 0x85}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4008084) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'dvmrp0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) socket$unix(0x1, 0x2, 0x0) 1.001938588s ago: executing program 3 (id=3065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 45) 546.733209ms ago: executing program 3 (id=3066): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001800)={{0xffffffffffffffff, &(0x7f0000000000)='}[.\x00', 0x20000, &(0x7f0000000040)={@_ha_fsid={[0xd, 0x10001]}, {0x1, 0x7, 0x206, 0x100000001}}, 0x7, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x24}, 0x7, &(0x7f0000001700)=[{0x2, 0x8, &(0x7f0000000100)='\x00', &(0x7f0000000240)="1ceb3a6af42dfb25c7c8e595fbc56c4e4e05632cdb7446f96778e0fc71f213c803e19d48335382a18d632d7828827249e14f6609101743bdaf2cafa24febc745b8e1b6497a2abe56875171e537a1348dfa938cff3aaf8b12f25280e167a790bf1484d4d210a01a8c8eb7979ffa194c4274be8942fa0c9645d77134", 0x7b, 0x3a}, {0x2, 0x6e04, &(0x7f00000002c0)='#\x00', &(0x7f0000000340)="95f642f0dfb3d36d25be9330da671e710dd48b8d1d591c06b2fc1a3f1cb7a21fb905e9d0cddbfaf5c18a4676ea1c18ac0f420dd80bfda2fe581e6b6b6fae64bfbf4a8671ad49efce2d4bb0a7509c38cd3e672b6bc851d12486ffa339e8661d673328327a9cafb9f4c32c4131e9e3edae2dc9e03bb1b487f5871a10b8a1e25d2e028c342d05aa8432d44ebc0cb35808913ad40487d6042f179a9c7c1018112b7bfa099b257e941dc8f892bab3376487934e6fc1eab8a46452f757a680e3a51594ee1463cbae02a0e748e2d8e951001717be31fe56ccef54e9eb3e0b8475e15909b94195fd25c6c33ca440c4243d390e190dffccfdf6998361d716e7a9291e07e6b42e13ac4d238755ef2764dd60b0c106b96267286874edd65ee0c5c8f555456de8591f63fe7c904b84de2fd66b03ae8269a08cac0830965a00614e4e959eba8490c7f0b063eaf6ea0f3cbeb968b25a2aabdaa9005e96572490139d0198c854984110a23869b63741b712479281debb93a450b147b2a9833f599a4249729e71a966adee63ecce128cfebcc1ea4749a7b578b82ab128ac79f1415bd647eb87246164a17dd48b3f304289edfd7a2f9ceeca01070b0cc0f94dfbcfa5f6cd3a75dfa47f88dab518b3ca2b1bddeda2464ff3649a51403f3ff4fb075f29df4adc64c81bf85c7932a94f91e14c19b63306e82a3a59204ba5156884736854e21310057fc7fbc3494628b4f00ab249fc1e4a5dab0179412e4d5cd9367aa86f08cc84f070d68b8e3577c983007b8ef580c0e24198ba2b729c197095c268bcb8279c1c04c5c8c08cb24776dd6b4fd5d7c99288d3a075ae2d8c196e7c6ab6a3f2894e1b3d1cef21eeca89b432037de224447868b73a626dcd9ebf9285bde93dd152634a23fe74998e207f23ad9f45caa0112d668b4a81eb7485f9608ecc6aab69273099ac0967ffff29d8fa187ba63df10327e4235562c88f0c46265d64b7412d27e6e04c0321f23482a7bb79ee102810d6dfb028240d6e60c48b6a9fa951462b958e85a37ef5f0ce7f46e9c427d0561c3692a2e4f603effde35036d8662b7dc929ce4532632544f445c93a32317d0622071a789799cd36bcae01eb8c07e86259c9dfc360f29a16dd0ddc4ffcc07e5c81595acc9c072f078ae401671d6cecb99a7af5a13b4b51fcc16fc2e034d166a881dc65d52a1dd2c88c89a8e1f93e4365bc80f2b090ba55a4c1dada3df6d259dd08cfeafedc44d652881632fda109615da8ec39cdae2422bc8c309d3c23d041c86da7bd66f8a66714253a29afb9079fa618eea6cb2010da48db24e9e45679dca66a2290e2f3d6b441a900876e523c0bbadaf29cf038bc96726bc875fd5d9e1bc988bfa8c49be0a772a47b34513eb948ab6a5a497e22d18aba5cc4b0597c2ca70d0716ddd72c59f7ae1b7fa7f363b6682b2c64211ac6465aa46dd16f90661af0197b43586b34fc642c4f0105c3872d0022fcf04190583c19551072c6b5b5b822c54ffb102eb7c48cec561c4dd14b0420a73ccb35bf95b7008b81bc8e51f9ffb90570ce81ddcc76a4714867842b64a739ba8b95ec6a54f2189612d3b15dd104f18c62dbcb4f5b913396d20f37b373717ac9e6d554db6fb3d0648700e0b5fd1d9757dd68cf7a6669509558a6a032ff8b8dfaef09c4c22cc166f3c76cb1061b09dc766faa777a6b96be08d5f593654e0d1dce30b83dceffe3f7a20b32b4ba72cf1f30fe525b532a9a2964112b5afbba47dcec1cec09ccc210793693239fe2f08383e8bc97c1d5c8a3bcfe4055243f26e6d7113537af8ae19359f6d7f379bf6e0af3592f5448456f290feab1b3f8ccf41d5c1d406124a56e56ee98aef7bc7fb1975511f9dca16ab465aa79199cdc665f07fe4d5bde80b4adadb55a6b9d0611f81b5a3cddce6d1ab599a7fe6fd2f267b7247d822f3f14b341f1ba99b611a1b65ce1ad5cc2a50d84032128d44414be3e64b9664a56419e2b42f6a711a3af5e3374f2cdfb2241a2f0e39ebb5a498968fe22e9d732d2d30a0ac6b76511051b86d40466340fd754dfeedffe89f27d704daa445e6f99f7615a0734c03b7fe3af338937a8eb259d1ab71a13d63580b93e3056c3d32dc71c382009784d56b595ae677dccfc0f4994da5302722a259f71bcd259e9902a9cd76362e1e5a3ec97232a3a7bb8028d4234c51aa26195d403f75f62cbfc7ac4ce4ccb458101069c7ab227b0556b0fe7e4dde926c08616c89214e348fb38fa43c06b425ac33b3e20063dcaf659920614066339b6ad0da45bd0da139069c7604787a1fee83460103e14cfde625982a73ef8c688aa48afa61d0a9abcd428e45c04aa4c043566c11c7739470bca74f6867fb646667056f0cee2fe2ef080aa3794990ac7580037a8e4293d16d8da61fddbef470053b0d6816a29ad788a46eb7c3e20bfa4c4bf33e0f7949cc62fcd1faf35ead174c2b1b69968570e8e1a63a7fab271d1faf1f526cee33abc8099f42e735a2b0a30ecb38772c8e3af5b35e067095af6ff53589c7fc3d81eec0c22c2ee62c60699464edece78a4abc18db68f8888d5d1bdfb72941a855837e036ab19d49b1baac321a71e6f1b2b6bada60d236b9d47fc04d0e6b5e9d1004c5bb6b4c5397fbce2ff572c172367f73d615c62091d406a184a3d12c39740679a32c454d2ff73bbba76dbea44585e70faf0c8c7ab5777dec57f5aeb2d189e9e3fcb02573b86c03a6dfd86ee6ee9cc6b9690d52371297bf5d4da95c71b1d03a5294d9b340279c592d177d83572b6d14fe2990f093f91857b5e1e871507f1c83c03e0bf1a41a3cd299ae365b148c35509ccd9b0846d32d91680401213eef3ac407afabded4ed799c8ae93139ce2d8c5893d8445e89816184b8dfddd3bf6793ed8dae8cae20ae5cd3d69cd5432477c7d4dcb9c5c5acd074cd15ffdfba156138fb3238f71c040c73074fb6fd7b38ca7f0bad8f01e6602dca8c8e3c7fb42b197bd72e1005b0e8bef67ad9190de24e82713f69fbd18890daec9a958ba63ba0efdc6548f608b96ddc120cdac4c1058b5242c146a92922720cf7938890742206b455efaebac17791d17665ec3a26880abb42f673153af4b52748003fad93fe1b2a928ec72d45acc7d032f90fc38134b7429c15e7603602b9dcad90d197375c169d3c60f64b2787262c139c47324a6325db797e5469e9c934225ffd2d4e7e79a180ae0cd4213e47af864b958ccc6a78269dec28f3ea9eb3e98856c33d275ec13d48abcefc7535c204995f207938d518e1178e46886537211ce8723edfd0d921366287312e991cb2a797c3d37a2d4c0ac58ef7ce6c1b2a9d4673a7aa245f660cdd95b8b2b77598a13947637d3d313b3afc9245fa0223c363c75944a5eace4e87ba3ac0032e2abdfdb776f75d0439f09418886a172151c171b1e6697f18ba7bea4723b7d64f5a03dacfbbbea24fcabae61908771c9a791ba3ae4bb5f626394881d697db47bc3e7077484d13063035206570519a1654ece3664e9bd6d48da394bd6e2b4905c913a58332a11859484f55dba19c843c0ff2d7a23c9d9a0ff43ce0fd44bfc56d6b148f5d81a03606dcf5bd65584e475765d183756a3745a8e33618dc3a06d84ebdcdadeeeb75d183eaaabaa5ecaa5da9f88d65c9bb2cf1150251aa35980d9b4e848456db3b49cb0bed162bfdad7bc3140eb9a16395d5392bd78b5e7aea00530f6e07ea0f7ac00032836589343a69fe5c8afbd41222aacc1c4d1b14eaa2808fc3a89ec1f402142d2b42c01162ff721f9cbce3f05ade2c341d5ce3e415f54183ac50286dd57e24fda9360635a4b4c63f6565513064089a483cdebf8ed60f84ef952ca029f452a4c68f0f341b871457d735439db7015234e7b881d660d1554cc6e30c6d9641326098b1a94ea9201fb0fc9faee24627802a4490f9bc616c80078c22f6d17a6973b303863a1ab4ebb887a63872a6093484c9a075b470f3c88ffadd1e74bb8e4b45ad30456c646ad01ec61cbfbef3d057bb8906a31b21f6c143190b53f510049bf5dec938575cb4c001017bffa86e5d9b0d9b46e85a6b8fdd7e5b7897453d0140f9e16ac5f831f38508c62946fa0ccbd387d1834d69e226c68cd638eac1c0bde8bb81cb35452233f60220c70838dfbfdeec74530d0c2be147c576b33e35d9a6a7f291ffbe4a98eeb994fd1fefc78ab5a44925df2208ac13034a6d78e6db0e0279bb6c07857e19fa7b78458ef1c8f003f14da75aa15d5dbbd5b1d45af56ff19b6e784981ebe2826a8969cf63f834ddef4837abefb16c2528f043c7973be9b2cd05d33edc845ba4a28a75071426ac027528b539a939bf72ac9b8383df6266f32d518197cfd0aad4e6641a2a0131fb5811cce72c81bde90121d8fb67dbd5d364770308d3e25ef260fda86dc7551b56ccb241299fdebd653849f97fd66ee70437cbdf4b339213de07c0e82bc5a2ee78d8b26b883f9a4dfc111e3d8bd114e70497eba74969557de814980360ea802168279a7905ac96dd86ff67dbf3ad6f4b9c9fbafb18a780301338199eb3989ab1e7d73d3c7d3bcdc7399903c8c9e7fc7df7a18a30745958528791d04d7d38ba03d2bf1025147788549083049cfbf81927808af406056ad29d616eb0bb47c17117e9505c698abc66dedfd6985fdaed6bb410a2a35d7d354515b7a1d9edb6732cfc8d2a16c5901b7bab43da8aa20f54ac30c6d606d7cd8bb8b86ddaf9c0f36ac912f01df47f86695051a71bb63bb0e10d0d9f81a9543d7fee2b0c92213189e7f78ac8198bf73d5d64dc0b53dd8daff9fa4becc13635f42d1618d82a240281260ee19d1d7c4098eba94694c1d040e308d42799f7240808c874f6b256e12cf39890c3ead4ffa730501c709feed5eb2c7c3e75417cc38047cee4ee2a4bcf68dd7f9d17b9ea3ab8865f8feaaba31597ea3c2fdffef928272dd7f1c6093d1e1c9ee32ef67ab3851211f796b244ae585d23b6238bc49097dbb6efbcdd86d47906cdc30042074069d08a6877deb952b68631faffa6e18ff85f0b8a7aa167be902d5ceacd233ed656ec834c574db1dab5145b3f59f80a9f93d231a790e9c53e5602f79e566530cac7448f282d060629a0aba55e6029148b8c7cc9185542d411951ffb24d941eb7ed9e0f01d215a40358274f92123d13d852f5f3609d1c080adee4284b410965e61e9fb6fad56d58b84b5a796508865d4ba6f0dd868cc542b7b35ea7ae43acf8fabc40b348a766e07e42fec94df7e742851e8087b12af0ee18d8743b281878541f3bded10268c4a2674353f3f4c66a15f75b975fc28736de27c8b415d8d1a98a8b154b056b825edd7176a99fda3da338e666ace7b77757ed6dcb1c937a3d79ba35f099d785dbd43cceea07cb43d0e9ce1b23b72781aa88b16d2e16a1edcbce78e1ecc758ad951a43a7b875a155968b4d4c906cb45dbaededf9228225d15333cb71ab4a849ca0c317cc9db520b00c5d6e024d0dcbf51b59e74c6e4f87d1666497960f507392fe735297c717ffd66d8e9e48edc47163522e8fc1a1348f8162db10b545acf7ab1b515ab1b5feda730f4e76c5549b7772855c4a08545a9025f637883d939f57738ba736fd1a6f6db77f1da5128fff18b22b573003915b9c48c5a469da4591555effeaa62bf1b273dacdd74568839b21a363f64644a76b6654e3df3cedbb65251a57f083fb2cd6e4a31b4a49fccb96d78dbbee844c8446e328e77b5188e0dab1e97e8055dbcb7ee457619290866ef516c5d3bd78f8c578dec5144c8771c7ab1d207f5442e2c7acb963ebcabe0a", 0x1000, 0x28}, {0x0, 0x7, &(0x7f0000001340)=':/\x00', &(0x7f0000001380)="78315f5d099150b52cd1749f56b3527307ef12b4d16e37ccd57d971cff091a3d15ef3b999ce6aba9a17b03b7b5f937d82e4c3a13e6e88521e28409f269c671bab7a53f11e478bfd9625b223a9c8dfa43e6bee5130fb07627878040046030dcc7b9e8504e1a22ba4b9d", 0x69, 0x20}, {0x2, 0xfff, &(0x7f0000001400)=']\x00', &(0x7f0000001440)="0f1afdb5e432be63083995f710bcae929e21d16edb402be3dd99ebb2e099a8375ad385274f1344063d7edf7ef49b6cc64a4d93db1029017008678bdbd96d992e4f06a6fdd0b6b1cc6540f77e8a7624bc4cb96da52f2a43e308276ea4565e7b0b96dd858a0d7655d4556ac92736a66724bf275da2787de49d3286690385b64c03f0136ffb", 0x84, 0x8}, {0x2, 0x2, &(0x7f0000001500)='+\x00', &(0x7f0000001540)="c7d85ddb24741d2956be3a0544b6695e74ac9e3580bca8b13bf17c37f7ed0c6f6b13b324c6276ebd39b73bb8", 0x2c}, {0x3, 0xe, &(0x7f0000001580)=':,\x00', &(0x7f00000015c0)="542a322c349ae016dbbf1e8f9178f32e501950af684ef18f49e9e5c357220253195791fcbdb9624f8a968ec267c7e40d44d5b9a983ea8d0d035af712fe7fab1b535bc503ed2f46c7a6647dbe82340c77591797c3a7c78a0545f526d40555300ad6249efe22e796587f790347025dc68bc57f988ae0c2e174d5151e346787e35b74d0bacc28b20d50846c17fe482e42c595da59a7e27a80a0d55672216a2df88416baf2ec6aa25044", 0xa8, 0x28}, {0x1, 0x6191, &(0x7f0000001680)='^\x00', &(0x7f00000016c0)="3ccae2baaa04", 0x6, 0xa}]}) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x24, r1, 0x828, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x10001}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c1}, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000180)='X', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) shutdown(r2, 0x1) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x2, 0x9}, &(0x7f0000000300)=0x8) 417.261995ms ago: executing program 5 (id=3067): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000185a00000a0000000000000000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7910e0008000000b7030000040000008500000006000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x8e, &(0x7f00000003c0)=""/142, 0x0, 0xb, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x8, 0x9, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000700)=[0x1, 0x1], &(0x7f0000000540)=[{0x1, 0x3, 0x6, 0x8}, {0x1, 0x4, 0x4, 0x6}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xf, 0x2}, {0x2, 0xffffffff, 0x3, 0xa}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x34, 0x0, &(0x7f00000006c0)="5eb62788ecd1fe7f42e4aef38559af2d395eb652c9f8b99a2dd70318b3f673a0903c71503aae9e9e010d095dd94bf0f8891180ce", &(0x7f0000000700), 0xa0, 0x0, 0xab, 0x0, &(0x7f0000000740)="24f2319e8da38ac1031aa8085e7b1f73bc5e2b04052f2ac22afc13d8ba595fda24cd5ab55e73a13c964e2d5d896de90be54fb6255d25ee329a8e4b1607f29abd27b7adc2ed30bf69a3b0630fe2a39af9b74558c3311e55f8991854dc866615442574cad5dbff6ae003c970e14e58d1e1be7c61cba92a49d0110989a24ee4908c7ffd406faac66ace0a40a1a56d5c8c0acdf1931485671cae03467246f523393d92766c44ede51de998bb55", 0x0, 0x3, 0x0, 0x8}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x34, 0x0, &(0x7f00000006c0)="5eb62788ecd1fe7f42e4aef38559af2d395eb652c9f8b99a2dd70318b3f673a0903c71503aae9e9e010d095dd94bf0f8891180ce", &(0x7f0000000700), 0xa0, 0x0, 0xab, 0x0, &(0x7f0000000740)="24f2319e8da38ac1031aa8085e7b1f73bc5e2b04052f2ac22afc13d8ba595fda24cd5ab55e73a13c964e2d5d896de90be54fb6255d25ee329a8e4b1607f29abd27b7adc2ed30bf69a3b0630fe2a39af9b74558c3311e55f8991854dc866615442574cad5dbff6ae003c970e14e58d1e1be7c61cba92a49d0110989a24ee4908c7ffd406faac66ace0a40a1a56d5c8c0acdf1931485671cae03467246f523393d92766c44ede51de998bb55", 0x0, 0x3, 0x0, 0x8}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000500)=0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000867ccab6f32eefabdf2d97224acd162b46", @ANYRES64=r4, @ANYRES16=r7], 0x48}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000010428bd70000100000000130000", @ANYRES32=0x0, @ANYBLOB="08000000000001002c00128009000100766c616e000000001c000280060001000200000006000100020000000600050088a8000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r8, 0x5452, &(0x7f0000000840)=0xf) (async) ioctl$int_in(r8, 0x5452, &(0x7f0000000840)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="18000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="a7ab04869600"], 0x20) socket$igmp6(0xa, 0x3, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000980)=0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bddb00fcdbdf250400000008a6d1ea7af4bbf297cc4e00040005000000050005000700000008000200080000001d381d9e25f67ce2e84f5daf31b791c6a1185a430e96e42c31"], 0x2c}}, 0x891) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bddb00fcdbdf250400000008a6d1ea7af4bbf297cc4e00040005000000050005000700000008000200080000001d381d9e25f67ce2e84f5daf31b791c6a1185a430e96e42c31"], 0x2c}}, 0x891) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f00000002c0)={"9102fb09b95cd846f38d86bd744d83eb", r11, r12, {0x2755, 0x7}, {0x1, 0x2}, 0x0, [0x2, 0x4, 0x52, 0xffffffffffff35cf, 0x738, 0xffff, 0x8000000000000000, 0x1, 0x3, 0x3, 0xdb4, 0x9, 0x7, 0x8, 0x7, 0x80000001]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000940)=r12) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001cc0), 0xffffffffffffffff) (async) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001cc0), 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4008, r5}, 0x18) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4008, r5}, 0x18) syz_emit_ethernet(0x6e, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c2000003aa2aaaaaaaaa86dd6080000000383afffe800eff0000000000000000000000bbff02000000000000000000000000000102009078000005dc608cb02b00002fff00000000040000000000000000000001fe80000000000000000000"], 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c2000003aa2aaaaaaaaa86dd6080000000383afffe800eff0000000000000000000000bbff02000000000000000000000000000102009078000005dc608cb02b00002fff00000000040000000000000000000001fe80000000000000000000"], 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r13, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0d0027bd7000fddbdf2526000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x4040805}, 0x40) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x1}, {0x2}}, {{0x4}, {0x2, 0x0, 0x0, 0x1}}], 0x10) 301.137117ms ago: executing program 1 (id=3068): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='GPL\x00', 0x4, 0xfd90, &(0x7f00000004c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x366, 0x10, &(0x7f0000000600), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)={@map=r1, r0, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&\x00'], 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x111, 0x4b4, 0x190, 0x700, 0x288, 0x278, 0x278, 0x288, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0xff000000, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0xfc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3, 0x0, 0x1, 0x2]}}, @common=@srh={{0x30}, {0x67, 0x81, 0xff, 0x76, 0x8, 0x2, 0x1e27}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x80, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 295.795399ms ago: executing program 4 (id=3069): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="20010000160001000000000000000000640101000000000000000000000000000000000000000000000000000000000100000000000300f8ffff7fa000000000ad9604fb367e0b61fdf996373d267f42da37bf55ddacd203d4791421bdce2fbb366d56", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be0000000000000000000000b1a0010008001f00040000000c0015005b073500040000000c000800080008000104000008001800ff070000"], 0x120}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000780)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000007c0)={@private2, 0x9c940000, 0x2, 0x3, 0x8, 0x8001, 0x3}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00', @ANYRES16=r5, @ANYBLOB="210327bd7000fcdbdf25040000000c0001800800030001000000"], 0x20}}, 0x4000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe000001000000001400120011"], 0x30}}, 0x0) sendmsg$kcm(r3, 0x0, 0x4000010) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0xffffffffffffff00) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="200100001f0001000000000000000000100100800c0001000400c8b3a6caa09a1a38d124a173def80bde05b592a5f49db8056fef8028a8c8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072bf08009600", @ANYRES32=r9, @ANYBLOB="6500f1801400640000000000000000000000000000000000741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a467f1ef9da08000800000018000000000800c300", @ANYRES32, @ANYBLOB], 0x120}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r10, @ANYBLOB="40005200060010"], 0x24}}, 0x0) 256.617799ms ago: executing program 3 (id=3070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x10005}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040800}, 0x20048000) (async) r1 = socket(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000f2000000000000000024aa64a8b420be2c146b08aee2517760c55aa25ea2302e0d6ec08aad25c1de8a69c72acd9033f12eea22f793f6ec47b26e9e333c4ce9bc91b2339a203adf89ed14e7c78fa64af20663d1f58b9af209547a1242a59055e1e24ca65be31bd118822e6e990dabdf0b44ec6bdd33125f6702983fc807506ee602b7b5a8d23cd2e308c1993e7cfb2221c7ed3291f05dd590b7948ecb45f830c5f66d120f3016788068bcc0172ba4e48d5ebd7903fc7e0b1df0b2f2c977b6d499e80a73e02b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000100000000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014006a00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0xf2a9a9ee94caf607, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000009c0)=r5, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), 0xffffffffffffffff) (async, rerun: 64) r6 = epoll_create1(0x80000) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000a40)={0x60000010}) (async) epoll_create1(0x0) (async, rerun: 64) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000a80)={0x0, 0x10, &(0x7f0000000ac0)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000b00)=0x10) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000b40)={0x1, [0x0]}, &(0x7f0000000b80)=0x8) (rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r7, 0x84, 0x81, &(0x7f0000000bc0)={r9, 0x9}, 0x8) (async) r10 = epoll_create1(0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$rds(0x15, 0x5, 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f0000000c00)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000c40)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r6, &(0x7f0000000c80)={0x80002005}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) (async) socket$inet(0xa, 0x3, 0x84) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r12, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd700000100021010000000c00020009000000000000001c0007800c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r11, @ANYBLOB="0c0005002201000000000000"], 0x48}}, 0x400400c) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000480)={0xffffffffffffffff, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x3}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (rerun: 64) 54.729399ms ago: executing program 1 (id=3071): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x1, 0xfffffffe, 0x0, {}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000200)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000240)=[{&(0x7f0000000280)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$can_j1939(r1, &(0x7f00000002c0)={&(0x7f0000000300)={0x1d, r2, 0x0, {0x2, 0xff}, 0x2}, 0x18, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 0s ago: executing program 4 (id=3072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000a0000040900010073797a3100000000400004803c0001800a0001006c696d69740000002c0002800c000240fc0000000000000e0c0001400000000000000007080005400000000108000440000000010900020073797a"], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) kernel console output (not intermixed with test programs): /,mems_allowed=0-1 [ 453.470480][T16420] CPU: 0 UID: 0 PID: 16420 Comm: syz.3.2579 Not tainted syzkaller #0 PREEMPT(full) [ 453.470505][T16420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 453.470518][T16420] Call Trace: [ 453.470527][T16420] [ 453.470537][T16420] dump_stack_lvl+0xe8/0x150 [ 453.470572][T16420] warn_alloc+0x24d/0x270 [ 453.470609][T16420] ? lockdep_hardirqs_on+0x7b/0x110 [ 453.470645][T16420] ? __pfx_warn_alloc+0x10/0x10 [ 453.470669][T16420] ? kfree+0x1c5/0x650 [ 453.470696][T16420] ? __get_vm_area_node+0x219/0x2f0 [ 453.470740][T16420] __vmalloc_node_range_noprof+0x36b/0x1540 [ 453.470765][T16420] ? __lock_acquire+0x747/0x2de0 [ 453.470819][T16420] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 453.470854][T16420] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 453.470881][T16420] __vmalloc_noprof+0xd2/0x120 [ 453.470904][T16420] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 453.470935][T16420] bpf_prog_alloc_no_stats+0x47/0x560 [ 453.470962][T16420] ? bpf_prog_alloc+0x2a/0x1a0 [ 453.470991][T16420] bpf_prog_alloc+0x3c/0x1a0 [ 453.471021][T16420] bpf_prog_load+0x7f8/0x1c20 [ 453.471063][T16420] ? __pfx_bpf_prog_load+0x10/0x10 [ 453.471114][T16420] __sys_bpf+0xd0d/0xd90 [ 453.471151][T16420] ? __pfx___sys_bpf+0x10/0x10 [ 453.471191][T16420] ? __fget_files+0x2a/0x420 [ 453.471243][T16420] ? ksys_write+0x242/0x270 [ 453.471269][T16420] ? __pfx_ksys_write+0x10/0x10 [ 453.471298][T16420] __x64_sys_bpf+0xba/0xd0 [ 453.471325][T16420] do_syscall_64+0x166/0x520 [ 453.471356][T16420] ? trace_irq_disable+0x3b/0x140 [ 453.471380][T16420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.471403][T16420] ? clear_bhb_loop+0x70/0xc0 [ 453.471429][T16420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.471451][T16420] RIP: 0033:0x7f25a479f559 [ 453.471472][T16420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.471492][T16420] RSP: 002b:00007f25a55e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 453.471514][T16420] RAX: ffffffffffffffda RBX: 00007f25a4a25fa0 RCX: 00007f25a479f559 [ 453.471531][T16420] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 453.471546][T16420] RBP: 00007f25a55e8090 R08: 0000000000000000 R09: 0000000000000000 [ 453.471560][T16420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.471581][T16420] R13: 00007f25a4a26038 R14: 00007f25a4a25fa0 R15: 00007ffe0e6cecc8 [ 453.471617][T16420] [ 453.471660][T16420] Mem-Info: [ 453.471671][T16420] active_anon:8394 inactive_anon:0 isolated_anon:0 [ 453.471671][T16420] active_file:0 inactive_file:43789 isolated_file:0 [ 453.471671][T16420] unevictable:90 dirty:146 writeback:0 [ 453.471671][T16420] slab_reclaimable:11845 slab_unreclaimable:111092 [ 453.471671][T16420] mapped:30827 shmem:2883 pagetables:5899 [ 453.471671][T16420] sec_pagetables:0 bounce:0 [ 453.471671][T16420] kernel_misc_reclaimable:0 [ 453.471671][T16420] free:1258520 free_pcp:9453 free_cma:0 [ 453.471725][T16420] Node 0 active_anon:33576kB inactive_anon:0kB active_file:0kB inactive_file:174952kB unevictable:360kB isolated(anon):0kB isolated(file):0kB mapped:123308kB dirty:580kB writeback:0kB shmem:11532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16116kB pagetables:23460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 453.471786][T16420] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 453.724807][T16420] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.725016][T16420] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 453.725263][T16420] Node 0 DMA32 free:1073880kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31976kB inactive_anon:0kB active_file:0kB inactive_file:174952kB unevictable:360kB writepending:580kB zspages:0kB present:3129332kB managed:2527384kB mlocked:300kB bounce:0kB free_pcp:39472kB local_pcp:30184kB free_cma:0kB [ 453.725422][T16420] lowmem_reserve[]: 0 0 0 0 0 [ 453.725567][T16420] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.725712][T16420] lowmem_reserve[]: 0 0 0 0 0 [ 453.725814][T16420] Node 1 Normal free:3944840kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.725971][T16420] lowmem_reserve[]: 0 0 0 0 0 [ 453.726075][T16420] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 453.726438][T16420] Node 0 DMA32: 275*4kB (UE) 1346*8kB (UE) 2040*16kB (UM) 1821*32kB (UM) 1872*64kB (UE) 1277*128kB (UM) 529*256kB (UME) 401*512kB (UM) 169*1024kB (UM) 33*2048kB (UM) 26*4096kB (UM) = 1073916kB [ 453.750899][T16420] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 453.751195][T16420] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 7*16kB (UM) 8*32kB (UM) 4*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3944840kB [ 453.768913][T16420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.768975][T16420] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 453.769019][T16420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.769062][T16420] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 453.769105][T16420] 46243 total pagecache pages [ 453.769185][T16420] 0 pages in swap cache [ 453.769214][T16420] Free swap = 124996kB [ 453.769246][T16420] Total swap = 124996kB [ 453.769269][T16420] 2097051 pages RAM [ 453.769290][T16420] 0 pages HighMem/MovableOnly [ 453.769310][T16420] 433589 pages reserved [ 453.769331][T16420] 0 pages cma reserved [ 453.901244][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 453.901594][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 454.043700][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 454.992965][T16445] syzkaller0: entered promiscuous mode [ 454.992999][T16445] syzkaller0: entered allmulticast mode [ 455.344370][T16466] netlink: 'syz.5.2589': attribute type 1 has an invalid length. [ 455.421142][T16478] __nla_validate_parse: 4 callbacks suppressed [ 455.421165][T16478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2591'. [ 455.610435][T16488] FAULT_INJECTION: forcing a failure. [ 455.610435][T16488] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 455.610473][T16488] CPU: 0 UID: 0 PID: 16488 Comm: syz.2.2593 Not tainted syzkaller #0 PREEMPT(full) [ 455.610498][T16488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 455.610512][T16488] Call Trace: [ 455.610521][T16488] [ 455.610531][T16488] dump_stack_lvl+0xe8/0x150 [ 455.610570][T16488] should_fail_ex+0x410/0x560 [ 455.610607][T16488] prepare_alloc_pages+0x223/0x600 [ 455.610641][T16488] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 455.610674][T16488] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 455.610701][T16488] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 455.610736][T16488] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 455.610769][T16488] ? __pfx_policy_nodemask+0x10/0x10 [ 455.610798][T16488] ? __get_vm_area_node+0x155/0x2f0 [ 455.610831][T16488] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 455.610853][T16488] ? __vmalloc_noprof+0xd2/0x120 [ 455.610878][T16488] __alloc_pages_noprof+0x10/0x100 [ 455.610913][T16488] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 455.610950][T16488] ? alloc_pages_noprof+0x140/0x2b0 [ 455.610986][T16488] __kasan_populate_vmalloc+0xb7/0x1c0 [ 455.611020][T16488] alloc_vmap_area+0xd1a/0x1420 [ 455.611079][T16488] ? __pfx_alloc_vmap_area+0x10/0x10 [ 455.611112][T16488] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 455.611139][T16488] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 455.611165][T16488] ? __get_vm_area_node+0x155/0x2f0 [ 455.611206][T16488] __get_vm_area_node+0x200/0x2f0 [ 455.611249][T16488] __vmalloc_node_range_noprof+0x343/0x1540 [ 455.611274][T16488] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 455.611303][T16488] ? __lock_acquire+0x747/0x2de0 [ 455.611356][T16488] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 455.611391][T16488] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 455.611417][T16488] __vmalloc_noprof+0xd2/0x120 [ 455.611440][T16488] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 455.611472][T16488] bpf_prog_alloc_no_stats+0x47/0x560 [ 455.611498][T16488] ? bpf_prog_alloc+0x2a/0x1a0 [ 455.611529][T16488] bpf_prog_alloc+0x3c/0x1a0 [ 455.611559][T16488] bpf_prog_load+0x7f8/0x1c20 [ 455.611601][T16488] ? __pfx_bpf_prog_load+0x10/0x10 [ 455.611657][T16488] __sys_bpf+0xd0d/0xd90 [ 455.611693][T16488] ? __pfx___sys_bpf+0x10/0x10 [ 455.611733][T16488] ? __fget_files+0x2a/0x420 [ 455.611787][T16488] ? ksys_write+0x242/0x270 [ 455.611812][T16488] ? __pfx_ksys_write+0x10/0x10 [ 455.611841][T16488] __x64_sys_bpf+0xba/0xd0 [ 455.611869][T16488] do_syscall_64+0x166/0x520 [ 455.611900][T16488] ? trace_irq_disable+0x3b/0x140 [ 455.611924][T16488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.611948][T16488] ? clear_bhb_loop+0x70/0xc0 [ 455.611976][T16488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.611999][T16488] RIP: 0033:0x7f7e4cd9f559 [ 455.612019][T16488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.612038][T16488] RSP: 002b:00007f7e4dbf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 455.612063][T16488] RAX: ffffffffffffffda RBX: 00007f7e4d025fa0 RCX: 00007f7e4cd9f559 [ 455.612087][T16488] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 455.612101][T16488] RBP: 00007f7e4dbf9090 R08: 0000000000000000 R09: 0000000000000000 [ 455.612115][T16488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.612129][T16488] R13: 00007f7e4d026038 R14: 00007f7e4d025fa0 R15: 00007ffda3b3aa98 [ 455.612166][T16488] [ 455.977734][ C1] net_ratelimit: 2 callbacks suppressed [ 455.977791][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 455.978048][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 456.518047][T16509] xt_nfacct: accounting object `' does not exist [ 456.566221][T16486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2594'. [ 456.582656][T16512] xt_ipcomp: unknown flags 1D [ 457.002980][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 457.003070][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 457.257452][T16542] virt_wifi0: left promiscuous mode [ 457.257478][T16542] virt_wifi0: left allmulticast mode [ 457.260333][T16542] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2609'. [ 457.299917][T16542] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2609'. [ 457.563009][T16560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2612'. [ 457.984131][T16577] bridge0: port 1(syz_tun) entered disabled state [ 458.034265][T16577] .`: left allmulticast mode [ 458.034294][T16577] bond_slave_0: left allmulticast mode [ 458.034315][T16577] bond_slave_1: left allmulticast mode [ 458.034335][T16577] .`: left promiscuous mode [ 458.034348][T16577] bond_slave_0: left promiscuous mode [ 458.034603][T16577] bond_slave_1: left promiscuous mode [ 458.035104][T16577] bridge0: port 3(.`) entered disabled state [ 458.043124][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 458.043225][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 458.105715][T16577] bridge_slave_1: left allmulticast mode [ 458.105746][T16577] bridge_slave_1: left promiscuous mode [ 458.105948][T16577] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.145083][T16577] .`: (slave bond_slave_0): Releasing backup interface [ 458.170594][T16577] .`: (slave bond_slave_1): Releasing backup interface [ 458.246195][T16577] team0: Port device team_slave_0 removed [ 458.270578][T16577] team0: Port device team_slave_1 removed [ 458.279781][T16577] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 458.280374][T16580] tipc: Enabled bearer , priority 0 [ 458.299645][ T8882] tipc: Resetting bearer [ 458.736542][T16607] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2621'. [ 458.736571][T16607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2621'. [ 458.741698][T16607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2621'. [ 458.837590][T16606] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2623'. [ 458.983186][T16617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.987117][T16606] tipc: Resetting bearer [ 458.987216][T16606] hsr0: left allmulticast mode [ 459.131941][T16623] openvswitch: netlink: EtherType 300 is less than min 600 [ 459.238179][T16630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2628'. [ 459.299298][ T25] tipc: Node number set to 3335824624 [ 459.679513][ T4986] udevd[4986]: worker [10768] /devices/virtual/block/nbd1 timeout; kill it [ 459.679610][ T4986] udevd[4986]: seq 14012 '/devices/virtual/block/nbd1' killed [ 460.186899][T16664] xt_nfacct: accounting object `' does not exist [ 460.336946][T16668] xt_hashlimit: size too large, truncated to 1048576 [ 460.957167][ T5632] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 461.060951][T16704] bond7: option ad_user_port_key: invalid value (65535) [ 461.060981][T16704] bond7: option ad_user_port_key: allowed values 0 - 1023 [ 461.065735][T16704] bond7 (unregistering): Released all slaves [ 461.269153][T16676] ovs-system: entered promiscuous mode [ 461.321727][T16704] __nla_validate_parse: 3 callbacks suppressed [ 461.321754][T16704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2643'. [ 461.351658][T16715] netlink: 'syz.3.2646': attribute type 3 has an invalid length. [ 461.351681][T16715] netlink: 'syz.3.2646': attribute type 1 has an invalid length. [ 461.351694][T16715] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2646'. [ 461.351725][T16715] NCSI netlink: No device for ifindex 0 [ 461.392285][T16715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2646'. [ 461.692010][T16729] tun0: tun_chr_ioctl cmd 1074025675 [ 461.692037][T16729] tun0: persist enabled [ 461.702688][T16729] tun0: tun_chr_ioctl cmd 1074025675 [ 461.702761][T16729] tun0: persist enabled [ 461.801786][T16729] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 461.865804][T16739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.866417][ T8885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.866663][T16739] veth0: Caught tx_queue_len zero misconfig [ 462.842561][T16772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2658'. [ 463.064112][T16779] x_tables: ip_tables: osf match: only valid for protocol 6 [ 463.086277][T16779] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2659'. [ 463.667632][T16810] syzkaller0: left promiscuous mode [ 463.667658][T16810] syzkaller0: left allmulticast mode [ 463.731574][T16812] IPVS: rr: UDP 127.0.0.1:20000 - no destination available [ 464.074452][T16836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2672'. [ 464.074481][T16836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2672'. [ 464.074500][T16836] netlink: 'syz.3.2672': attribute type 4 has an invalid length. [ 465.196417][T16883] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2686'. [ 465.200190][T16883] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2686'. [ 465.234031][T16887] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2686'. [ 465.922646][T16914] netlink: 'syz.3.2691': attribute type 13 has an invalid length. [ 465.971592][T16917] netlink: 'syz.3.2691': attribute type 13 has an invalid length. [ 465.981138][T16918] netlink: 'syz.3.2691': attribute type 13 has an invalid length. [ 466.006080][T16919] netlink: set zone limit has 4 unknown bytes [ 466.078473][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 466.093822][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 466.099071][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 466.121168][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 466.125998][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 466.458437][T16944] Bluetooth: MGMT ver 1.23 [ 466.849265][T16955] __nla_validate_parse: 8 callbacks suppressed [ 466.849287][T16955] netlink: 3568 bytes leftover after parsing attributes in process `syz.3.2696'. [ 466.926249][T16959] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 466.934040][T16957] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 467.120588][T16956] netlink: 3568 bytes leftover after parsing attributes in process `syz.3.2696'. [ 467.814454][ T5628] syz_tun (unregistering): left allmulticast mode [ 467.973367][T16916] rxe_eth0 speed is unknown, defaulting to 1000 [ 468.203183][ T5632] Bluetooth: hci0: command tx timeout [ 468.219630][T16980] netlink: 'syz.4.2700': attribute type 4 has an invalid length. [ 468.219654][T16980] netlink: 'syz.4.2700': attribute type 1 has an invalid length. [ 468.649148][T16916] gre0 speed is unknown, defaulting to 1000 [ 468.687073][T16974] netlink: 'syz.2.2698': attribute type 32 has an invalid length. [ 468.687102][T16974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'. [ 468.845934][T16974] bond5: Setting coupled_control to off (0) [ 469.675886][T17016] FAULT_INJECTION: forcing a failure. [ 469.675886][T17016] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 469.675924][T17016] CPU: 0 UID: 0 PID: 17016 Comm: syz.4.2708 Not tainted syzkaller #0 PREEMPT(full) [ 469.675948][T17016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 469.675962][T17016] Call Trace: [ 469.675970][T17016] [ 469.675981][T17016] dump_stack_lvl+0xe8/0x150 [ 469.676019][T17016] should_fail_ex+0x410/0x560 [ 469.676056][T17016] prepare_alloc_pages+0x223/0x600 [ 469.676091][T17016] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 469.676132][T17016] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 469.676160][T17016] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 469.676191][T17016] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 469.676224][T17016] ? __pfx_policy_nodemask+0x10/0x10 [ 469.676253][T17016] ? __get_vm_area_node+0x155/0x2f0 [ 469.676285][T17016] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 469.676308][T17016] ? __vmalloc_noprof+0xd2/0x120 [ 469.676333][T17016] __alloc_pages_noprof+0x10/0x100 [ 469.676362][T17016] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 469.676415][T17016] ? alloc_pages_noprof+0x140/0x2b0 [ 469.676453][T17016] __kasan_populate_vmalloc+0xb7/0x1c0 [ 469.676487][T17016] alloc_vmap_area+0xd1a/0x1420 [ 469.676541][T17016] ? __pfx_alloc_vmap_area+0x10/0x10 [ 469.676574][T17016] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 469.676602][T17016] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 469.676628][T17016] ? __get_vm_area_node+0x155/0x2f0 [ 469.676669][T17016] __get_vm_area_node+0x200/0x2f0 [ 469.676711][T17016] __vmalloc_node_range_noprof+0x343/0x1540 [ 469.676735][T17016] ? bpf_check+0x115b/0x2ef0 [ 469.676775][T17016] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 469.676811][T17016] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 469.676859][T17016] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 469.676885][T17016] ? apparmor_capable+0x126/0x170 [ 469.676913][T17016] ? bpf_lsm_capable+0x9/0x20 [ 469.676936][T17016] ? security_capable+0x7e/0x2c0 [ 469.676971][T17016] ? bpf_check+0x115b/0x2ef0 [ 469.676995][T17016] __vmalloc_noprof+0xd2/0x120 [ 469.677017][T17016] ? bpf_check+0x115b/0x2ef0 [ 469.677046][T17016] bpf_check+0x115b/0x2ef0 [ 469.677093][T17016] ? __pfx_bpf_check+0x10/0x10 [ 469.677130][T17016] ? bpf_obj_name_cpy+0x194/0x1e0 [ 469.677169][T17016] bpf_prog_load+0x14d6/0x1c20 [ 469.677211][T17016] ? __pfx_bpf_prog_load+0x10/0x10 [ 469.677268][T17016] __sys_bpf+0xd0d/0xd90 [ 469.677305][T17016] ? __pfx___sys_bpf+0x10/0x10 [ 469.677344][T17016] ? __fget_files+0x2a/0x420 [ 469.677399][T17016] ? ksys_write+0x242/0x270 [ 469.677424][T17016] ? __pfx_ksys_write+0x10/0x10 [ 469.677454][T17016] __x64_sys_bpf+0xba/0xd0 [ 469.677481][T17016] do_syscall_64+0x166/0x520 [ 469.677511][T17016] ? trace_irq_disable+0x3b/0x140 [ 469.677536][T17016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.677558][T17016] ? clear_bhb_loop+0x70/0xc0 [ 469.677585][T17016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.677607][T17016] RIP: 0033:0x7fe82819f559 [ 469.677628][T17016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.677648][T17016] RSP: 002b:00007fe8263f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 469.677672][T17016] RAX: ffffffffffffffda RBX: 00007fe828425fa0 RCX: 00007fe82819f559 [ 469.677688][T17016] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 469.677703][T17016] RBP: 00007fe8263f6090 R08: 0000000000000000 R09: 0000000000000000 [ 469.677717][T17016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.677730][T17016] R13: 00007fe828426038 R14: 00007fe828425fa0 R15: 00007ffe8257ab08 [ 469.677766][T17016] [ 469.686708][T17016] warn_alloc: 1 callbacks suppressed [ 469.686813][T17016] syz.4.2708: vmalloc error: size 2720, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 469.686987][T17016] CPU: 0 UID: 0 PID: 17016 Comm: syz.4.2708 Not tainted syzkaller #0 PREEMPT(full) [ 469.687054][T17016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 469.687095][T17016] Call Trace: [ 469.687126][T17016] [ 469.687148][T17016] dump_stack_lvl+0xe8/0x150 [ 469.687256][T17016] warn_alloc+0x24d/0x270 [ 469.687339][T17016] ? lockdep_hardirqs_on+0x7b/0x110 [ 469.687437][T17016] ? __pfx_warn_alloc+0x10/0x10 [ 469.687499][T17016] ? kfree+0x1c5/0x650 [ 469.687571][T17016] ? __get_vm_area_node+0x219/0x2f0 [ 469.687683][T17016] __vmalloc_node_range_noprof+0x36b/0x1540 [ 469.687787][T17016] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 469.687873][T17016] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 469.687990][T17016] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 469.688062][T17016] ? apparmor_capable+0x126/0x170 [ 469.688138][T17016] ? bpf_lsm_capable+0x9/0x20 [ 469.688191][T17016] ? security_capable+0x7e/0x2c0 [ 469.688275][T17016] ? bpf_check+0x115b/0x2ef0 [ 469.688337][T17016] __vmalloc_noprof+0xd2/0x120 [ 469.688400][T17016] ? bpf_check+0x115b/0x2ef0 [ 469.688467][T17016] bpf_check+0x115b/0x2ef0 [ 469.688585][T17016] ? __pfx_bpf_check+0x10/0x10 [ 469.688659][T17016] ? bpf_obj_name_cpy+0x194/0x1e0 [ 469.688774][T17016] bpf_prog_load+0x14d6/0x1c20 [ 469.688880][T17016] ? __pfx_bpf_prog_load+0x10/0x10 [ 469.689019][T17016] __sys_bpf+0xd0d/0xd90 [ 469.689123][T17016] ? __pfx___sys_bpf+0x10/0x10 [ 469.689221][T17016] ? __fget_files+0x2a/0x420 [ 469.689369][T17016] ? ksys_write+0x242/0x270 [ 469.689433][T17016] ? __pfx_ksys_write+0x10/0x10 [ 469.689513][T17016] __x64_sys_bpf+0xba/0xd0 [ 469.689579][T17016] do_syscall_64+0x166/0x520 [ 469.689656][T17016] ? trace_irq_disable+0x3b/0x140 [ 469.689717][T17016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.689779][T17016] ? clear_bhb_loop+0x70/0xc0 [ 469.689845][T17016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.689899][T17016] RIP: 0033:0x7fe82819f559 [ 469.689962][T17016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.690007][T17016] RSP: 002b:00007fe8263f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 469.690124][T17016] RAX: ffffffffffffffda RBX: 00007fe828425fa0 RCX: 00007fe82819f559 [ 469.690174][T17016] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 469.690221][T17016] RBP: 00007fe8263f6090 R08: 0000000000000000 R09: 0000000000000000 [ 469.690253][T17016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.690285][T17016] R13: 00007fe828426038 R14: 00007fe828425fa0 R15: 00007ffe8257ab08 [ 469.690379][T17016] [ 469.714781][T17016] Mem-Info: [ 469.714840][T17016] active_anon:6044 inactive_anon:0 isolated_anon:0 [ 469.714840][T17016] active_file:0 inactive_file:43797 isolated_file:0 [ 469.714840][T17016] unevictable:0 dirty:94 writeback:0 [ 469.714840][T17016] slab_reclaimable:11621 slab_unreclaimable:113692 [ 469.714840][T17016] mapped:29750 shmem:547 pagetables:5880 [ 469.714840][T17016] sec_pagetables:0 bounce:0 [ 469.714840][T17016] kernel_misc_reclaimable:0 [ 469.714840][T17016] free:1181757 free_pcp:14409 free_cma:0 [ 469.715012][T17016] Node 0 active_anon:24176kB inactive_anon:0kB active_file:0kB inactive_file:174984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119000kB dirty:376kB writeback:0kB shmem:2188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15980kB pagetables:23384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 469.715173][T17016] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 469.715309][T17016] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 469.715475][T17016] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 469.715573][T17016] Node 0 DMA32 free:766828kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24176kB inactive_anon:0kB active_file:0kB inactive_file:174984kB unevictable:0kB writepending:376kB zspages:0kB present:3129332kB managed:2527384kB mlocked:0kB bounce:0kB free_pcp:57636kB local_pcp:29032kB free_cma:0kB [ 469.715787][T17016] lowmem_reserve[]: 0 0 0 0 0 [ 469.715890][T17016] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 469.716041][T17016] lowmem_reserve[]: 0 0 0 0 0 [ 469.716129][T17016] Node 1 Normal free:3944840kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 469.722579][T17016] lowmem_reserve[]: 0 0 0 0 0 [ 469.722630][T17016] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 469.722926][T17016] Node 0 DMA32: 3*4kB (UME) 2*8kB (UE) 2*16kB (UM) 54*32kB (UM) 27*64kB (UME) 690*128kB (UM) 528*256kB (UME) 400*512kB (UM) 169*1024kB (UM) 27*2048kB (UM) 26*4096kB (UM) = 766652kB [ 469.723106][T17016] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 469.723360][T17016] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 7*16kB (UM) 8*32kB (UM) 4*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3944840kB [ 469.723532][T17016] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 469.723549][T17016] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 469.723567][T17016] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 469.723582][T17016] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 469.723598][T17016] 44340 total pagecache pages [ 469.723607][T17016] 0 pages in swap cache [ 469.723615][T17016] Free swap = 124996kB [ 469.723623][T17016] Total swap = 124996kB [ 469.723633][T17016] 2097051 pages RAM [ 469.723640][T17016] 0 pages HighMem/MovableOnly [ 469.723649][T17016] 433589 pages reserved [ 469.723656][T17016] 0 pages cma reserved [ 470.287983][ T5632] Bluetooth: hci0: command tx timeout [ 470.824655][T17021] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2710'. [ 471.243888][T17037] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2713'. [ 471.637698][T16916] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.637870][T16916] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.638037][T16916] bridge_slave_0: entered allmulticast mode [ 471.640216][T16916] bridge_slave_0: entered promiscuous mode [ 471.683643][T16916] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.683835][T16916] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.684001][T16916] bridge_slave_1: entered allmulticast mode [ 471.687231][T16916] bridge_slave_1: entered promiscuous mode [ 471.882183][T16916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.909302][T16916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.110463][T16916] team0: Port device team_slave_0 added [ 472.130388][T16916] team0: Port device team_slave_1 added [ 472.287775][T16916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.287796][T16916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.287825][T16916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.330856][T16916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.330887][T16916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.330916][T16916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.377902][ T5632] Bluetooth: hci0: command tx timeout [ 472.431006][T17063] FAULT_INJECTION: forcing a failure. [ 472.431006][T17063] name failslab, interval 1, probability 0, space 0, times 0 [ 472.431044][T17063] CPU: 0 UID: 0 PID: 17063 Comm: syz.2.2719 Not tainted syzkaller #0 PREEMPT(full) [ 472.431069][T17063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 472.431083][T17063] Call Trace: [ 472.431092][T17063] [ 472.431101][T17063] dump_stack_lvl+0xe8/0x150 [ 472.431141][T17063] should_fail_ex+0x410/0x560 [ 472.431179][T17063] should_failslab+0xa8/0x100 [ 472.431213][T17063] __kmalloc_node_noprof+0x100/0x720 [ 472.431238][T17063] ? __get_vm_area_node+0x200/0x2f0 [ 472.431273][T17063] ? __get_vm_area_node+0x283/0x2f0 [ 472.431306][T17063] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 472.431328][T17063] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 472.431360][T17063] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 472.431401][T17063] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 472.431448][T17063] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 472.431474][T17063] ? apparmor_capable+0x126/0x170 [ 472.431502][T17063] ? bpf_lsm_capable+0x9/0x20 [ 472.431525][T17063] ? security_capable+0x7e/0x2c0 [ 472.431559][T17063] ? bpf_check+0x115b/0x2ef0 [ 472.431583][T17063] __vmalloc_noprof+0xd2/0x120 [ 472.431606][T17063] ? bpf_check+0x115b/0x2ef0 [ 472.431635][T17063] bpf_check+0x115b/0x2ef0 [ 472.431681][T17063] ? __pfx_bpf_check+0x10/0x10 [ 472.431714][T17063] ? bpf_obj_name_cpy+0x194/0x1e0 [ 472.431753][T17063] bpf_prog_load+0x14d6/0x1c20 [ 472.431795][T17063] ? __pfx_bpf_prog_load+0x10/0x10 [ 472.431851][T17063] __sys_bpf+0xd0d/0xd90 [ 472.431894][T17063] ? __pfx___sys_bpf+0x10/0x10 [ 472.431934][T17063] ? __fget_files+0x2a/0x420 [ 472.431987][T17063] ? ksys_write+0x242/0x270 [ 472.432013][T17063] ? __pfx_ksys_write+0x10/0x10 [ 472.432041][T17063] __x64_sys_bpf+0xba/0xd0 [ 472.432069][T17063] do_syscall_64+0x166/0x520 [ 472.432101][T17063] ? trace_irq_disable+0x3b/0x140 [ 472.432125][T17063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.432148][T17063] ? clear_bhb_loop+0x70/0xc0 [ 472.432177][T17063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.432199][T17063] RIP: 0033:0x7f7e4cd9f559 [ 472.432220][T17063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.432240][T17063] RSP: 002b:00007f7e4dbf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 472.432265][T17063] RAX: ffffffffffffffda RBX: 00007f7e4d025fa0 RCX: 00007f7e4cd9f559 [ 472.432281][T17063] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 472.432296][T17063] RBP: 00007f7e4dbf9090 R08: 0000000000000000 R09: 0000000000000000 [ 472.432311][T17063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 472.432324][T17063] R13: 00007f7e4d026038 R14: 00007f7e4d025fa0 R15: 00007ffda3b3aa98 [ 472.432361][T17063] [ 472.890993][T16916] hsr_slave_0: entered promiscuous mode [ 472.904438][T16916] hsr_slave_1: entered promiscuous mode [ 472.905264][T16916] debugfs: 'hsr0' already exists in 'hsr' [ 472.905285][T16916] Cannot create hsr debugfs directory [ 472.948843][T17070] xt_addrtype: ipv6 does not support BROADCAST matching [ 472.964116][T17070] xt_addrtype: ipv6 does not support BROADCAST matching [ 472.964381][T17070] xt_addrtype: ipv6 does not support BROADCAST matching [ 472.964606][T17070] xt_addrtype: ipv6 does not support BROADCAST matching [ 472.964863][T17070] xt_addrtype: ipv6 does not support BROADCAST matching [ 472.965082][T17070] xt_addrtype: ipv6 does not support BROADCAST matching [ 472.965298][T17070] xt_addrtype: ipv6 does not support BROADCAST matching [ 472.965517][T17070] xt_addrtype: ipv6 does not support BROADCAST matching [ 472.972472][T17070] xt_addrtype: ipv6 does not support BROADCAST matching [ 472.978325][T17070] xt_addrtype: ipv6 does not support BROADCAST matching [ 473.639616][T17081] syzkaller0: left promiscuous mode [ 473.639644][T17081] syzkaller0: left allmulticast mode [ 473.639855][T17081] tipc: Resetting bearer [ 473.647569][T17081] syzkaller0: entered promiscuous mode [ 473.647624][T17081] syzkaller0: entered allmulticast mode [ 473.648361][T17081] tipc: Resetting bearer [ 474.106359][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2726'. [ 474.443435][ T5632] Bluetooth: hci0: command tx timeout [ 474.515909][T16916] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.515962][T16916] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 474.515991][T16916] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.516017][T16916] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 474.785324][T16916] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.785365][T16916] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 474.785394][T16916] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.785424][T16916] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 474.898766][T17104] netlink: 'syz.2.2730': attribute type 1 has an invalid length. [ 475.040476][T17104] 8021q: adding VLAN 0 to HW filter on device bond6 [ 475.059756][T17108] veth0_to_bond: left promiscuous mode [ 475.100645][T17108] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 475.117012][T17104] netlink: NAT attribute has 8 unknown bytes [ 475.117051][T17104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.118671][T17109] bond6: entered promiscuous mode [ 475.118742][T17109] bond6: entered allmulticast mode [ 475.356766][T16916] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.356808][T16916] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 475.356839][T16916] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.356867][T16916] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 475.479366][T17104] macvlan3: entered promiscuous mode [ 475.479392][T17104] macvlan3: entered allmulticast mode [ 475.496116][T17104] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 475.732272][T16916] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.732310][T16916] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 475.732341][T16916] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.746219][T16916] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 475.982119][T17120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2734'. [ 476.068972][T17127] tipc: Resetting bearer [ 476.228724][T17119] tipc: Resetting bearer [ 476.501040][T17138] bridge0: entered promiscuous mode [ 476.501082][T17138] bridge0: entered allmulticast mode [ 476.682247][ T8882] tipc: Resetting bearer [ 476.786414][T16916] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 476.819867][T16916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.834861][T16916] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 476.862064][T16916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.878780][T16916] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 476.941935][T16916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.955451][T16916] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 477.012605][T16916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.174570][T17146] netlink: 'syz.3.2741': attribute type 12 has an invalid length. [ 477.209617][T17146] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2741'. [ 477.338418][T17164] FAULT_INJECTION: forcing a failure. [ 477.338418][T17164] name failslab, interval 1, probability 0, space 0, times 0 [ 477.338455][T17164] CPU: 1 UID: 0 PID: 17164 Comm: syz.4.2744 Not tainted syzkaller #0 PREEMPT(full) [ 477.338478][T17164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 477.338491][T17164] Call Trace: [ 477.338503][T17164] [ 477.338512][T17164] dump_stack_lvl+0xe8/0x150 [ 477.338548][T17164] should_fail_ex+0x410/0x560 [ 477.338582][T17164] should_failslab+0xa8/0x100 [ 477.338614][T17164] __kvmalloc_node_noprof+0x176/0x820 [ 477.338640][T17164] ? security_capable+0x7e/0x2c0 [ 477.338670][T17164] ? bpf_check+0x165c/0x2ef0 [ 477.338692][T17164] ? bpf_check+0x165c/0x2ef0 [ 477.338725][T17164] bpf_check+0x165c/0x2ef0 [ 477.338768][T17164] ? __pfx_bpf_check+0x10/0x10 [ 477.338795][T17164] ? bpf_obj_name_cpy+0x194/0x1e0 [ 477.338831][T17164] bpf_prog_load+0x14d6/0x1c20 [ 477.338869][T17164] ? __pfx_bpf_prog_load+0x10/0x10 [ 477.338922][T17164] __sys_bpf+0xd0d/0xd90 [ 477.338954][T17164] ? __pfx___sys_bpf+0x10/0x10 [ 477.338992][T17164] ? __fget_files+0x2a/0x420 [ 477.339041][T17164] ? ksys_write+0x242/0x270 [ 477.339065][T17164] ? __pfx_ksys_write+0x10/0x10 [ 477.339092][T17164] __x64_sys_bpf+0xba/0xd0 [ 477.339117][T17164] do_syscall_64+0x166/0x520 [ 477.339146][T17164] ? trace_irq_disable+0x3b/0x140 [ 477.339169][T17164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.339191][T17164] ? clear_bhb_loop+0x70/0xc0 [ 477.339217][T17164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.339238][T17164] RIP: 0033:0x7fe82819f559 [ 477.339258][T17164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.339275][T17164] RSP: 002b:00007fe8263f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 477.339298][T17164] RAX: ffffffffffffffda RBX: 00007fe828425fa0 RCX: 00007fe82819f559 [ 477.339313][T17164] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 477.339326][T17164] RBP: 00007fe8263f6090 R08: 0000000000000000 R09: 0000000000000000 [ 477.339340][T17164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 477.339352][T17164] R13: 00007fe828426038 R14: 00007fe828425fa0 R15: 00007ffe8257ab08 [ 477.339394][T17164] [ 477.432414][T17165] syzkaller0: left promiscuous mode [ 477.432491][T17165] syzkaller0: left allmulticast mode [ 477.438521][T17165] tipc: Resetting bearer [ 477.717958][T16916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.949073][T16916] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.984135][ T8873] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.984249][ T8873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.990493][T17176] rxe_eth0 speed is unknown, defaulting to 1000 [ 478.055927][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.056080][ T8873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.335860][T17184] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 479.266012][T17176] gre0 speed is unknown, defaulting to 1000 [ 479.270979][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'. [ 479.308170][T17220] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2754'. [ 480.044882][T17213] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 480.441308][T17251] tc_dump_action: action bad kind [ 480.562071][T17257] netlink: 'syz.3.2755': attribute type 2 has an invalid length. [ 480.562097][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2755'. [ 480.900949][T16916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.065794][T16916] veth0_vlan: entered promiscuous mode [ 481.088776][ T1692] block nbd1: Possible stuck request ffff888029127000: control (read@0,1024B). Runtime 210 seconds [ 481.088832][ T1692] block nbd1: Possible stuck request ffff8880291271c0: control (read@1024,1024B). Runtime 210 seconds [ 481.088862][ T1692] block nbd1: Possible stuck request ffff888029127380: control (read@2048,1024B). Runtime 210 seconds [ 481.088891][ T1692] block nbd1: Possible stuck request ffff888029127540: control (read@3072,1024B). Runtime 210 seconds [ 481.116414][T16916] veth1_vlan: entered promiscuous mode [ 481.395491][T16916] veth0_macvtap: entered promiscuous mode [ 481.417651][T16916] veth1_macvtap: entered promiscuous mode [ 481.465632][T16916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.534740][T16916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.573348][ T8885] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.573505][ T8885] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.573544][ T8885] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.721652][ T8873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.071439][T17286] netlink: 'syz.3.2760': attribute type 21 has an invalid length. [ 482.071469][T17286] IPv6: NLM_F_CREATE should be specified when creating new route [ 482.071580][T17286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2760'. [ 482.329846][ T8875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.329871][ T8875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.658650][T17307] pim6reg: entered allmulticast mode [ 482.706228][ T8875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.706256][ T8875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.151262][T17333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2689'. [ 483.296656][T17344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2689'. [ 483.314661][T17340] x_tables: duplicate underflow at hook 3 [ 483.314818][T17340] x_tables: duplicate underflow at hook 3 [ 483.354300][T17333] veth1_macvtap: left promiscuous mode [ 483.740673][T17355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.792934][T17360] x_tables: unsorted entry at hook 2 [ 483.912025][T17367] bond0: option arp_interval: invalid value (18446744073709551615) [ 483.912056][T17367] bond0: option arp_interval: allowed values 0 - 2147483647 [ 483.943893][T17367] bond0 (unregistering): Released all slaves [ 484.072116][T17373] syzkaller0: entered promiscuous mode [ 484.072144][T17373] syzkaller0: entered allmulticast mode [ 484.980430][T17413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2791'. [ 484.980470][T17413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2791'. [ 485.036099][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2791'. [ 485.036137][T17415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2791'. [ 485.165462][ T12] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 485.165518][ T12] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 485.165566][ T12] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 485.165605][ T12] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 485.282958][T17418] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2793'. [ 485.737711][T17439] netlink: 'syz.2.2798': attribute type 1 has an invalid length. [ 485.737737][T17439] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2798'. [ 486.178415][T17454] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2802'. [ 486.189992][T17457] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2804'. [ 486.420378][T17466] syzkaller0: entered promiscuous mode [ 486.420404][T17466] syzkaller0: entered allmulticast mode [ 486.420644][T17466] tipc: Resetting bearer [ 486.548652][T17472] netlink: 5340 bytes leftover after parsing attributes in process `syz.3.2807'. [ 486.604220][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 487.590648][T17512] FAULT_INJECTION: forcing a failure. [ 487.590648][T17512] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 487.590685][T17512] CPU: 1 UID: 0 PID: 17512 Comm: syz.4.2819 Not tainted syzkaller #0 PREEMPT(full) [ 487.590710][T17512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 487.590725][T17512] Call Trace: [ 487.590733][T17512] [ 487.590743][T17512] dump_stack_lvl+0xe8/0x150 [ 487.590782][T17512] should_fail_ex+0x410/0x560 [ 487.590819][T17512] prepare_alloc_pages+0x223/0x600 [ 487.590855][T17512] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 487.590896][T17512] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 487.590929][T17512] ? __pfx_policy_nodemask+0x10/0x10 [ 487.590974][T17512] alloc_pages_mpol+0x21e/0x390 [ 487.591012][T17512] alloc_pages_noprof+0xb1/0x2b0 [ 487.591046][T17512] get_free_pages_noprof+0xf/0x80 [ 487.591074][T17512] __kasan_populate_vmalloc+0x38/0x1c0 [ 487.591098][T17512] ? do_raw_spin_unlock+0xf5/0x200 [ 487.591137][T17512] alloc_vmap_area+0xd1a/0x1420 [ 487.591188][T17512] ? __pfx_alloc_vmap_area+0x10/0x10 [ 487.591221][T17512] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 487.591252][T17512] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 487.591277][T17512] ? __get_vm_area_node+0x155/0x2f0 [ 487.591317][T17512] __get_vm_area_node+0x200/0x2f0 [ 487.591361][T17512] __vmalloc_node_range_noprof+0x343/0x1540 [ 487.591385][T17512] ? bpf_prog_calc_tag+0x51/0x370 [ 487.591415][T17512] ? __x64_sys_bpf+0xba/0xd0 [ 487.591436][T17512] ? do_syscall_64+0x166/0x520 [ 487.591474][T17512] ? __kasan_kmalloc+0x93/0xb0 [ 487.591502][T17512] ? bpf_prog_load+0x14d6/0x1c20 [ 487.591527][T17512] ? __sys_bpf+0xd0d/0xd90 [ 487.591550][T17512] ? __x64_sys_bpf+0xba/0xd0 [ 487.591588][T17512] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 487.591625][T17512] ? bpf_prog_calc_tag+0x51/0x370 [ 487.591650][T17512] __vmalloc_noprof+0xd2/0x120 [ 487.591673][T17512] ? bpf_prog_calc_tag+0x51/0x370 [ 487.591703][T17512] bpf_prog_calc_tag+0x51/0x370 [ 487.591731][T17512] ? __pfx_cmp_subprogs+0x10/0x10 [ 487.591764][T17512] check_and_resolve_insns+0xbb/0x21d0 [ 487.591797][T17512] ? add_subprog+0x2e2/0x3f0 [ 487.591828][T17512] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 487.591867][T17512] bpf_check+0x18f7/0x2ef0 [ 487.591921][T17512] ? __pfx_bpf_check+0x10/0x10 [ 487.591950][T17512] ? bpf_obj_name_cpy+0x194/0x1e0 [ 487.591987][T17512] bpf_prog_load+0x14d6/0x1c20 [ 487.592028][T17512] ? __pfx_bpf_prog_load+0x10/0x10 [ 487.592084][T17512] __sys_bpf+0xd0d/0xd90 [ 487.592121][T17512] ? __pfx___sys_bpf+0x10/0x10 [ 487.592161][T17512] ? __fget_files+0x2a/0x420 [ 487.592215][T17512] ? ksys_write+0x242/0x270 [ 487.592241][T17512] ? __pfx_ksys_write+0x10/0x10 [ 487.592269][T17512] __x64_sys_bpf+0xba/0xd0 [ 487.592297][T17512] do_syscall_64+0x166/0x520 [ 487.592327][T17512] ? trace_irq_disable+0x3b/0x140 [ 487.592352][T17512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.592376][T17512] ? clear_bhb_loop+0x70/0xc0 [ 487.592404][T17512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.592428][T17512] RIP: 0033:0x7fe82819f559 [ 487.592449][T17512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.592468][T17512] RSP: 002b:00007fe8263f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.592493][T17512] RAX: ffffffffffffffda RBX: 00007fe828425fa0 RCX: 00007fe82819f559 [ 487.592510][T17512] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 487.592525][T17512] RBP: 00007fe8263f6090 R08: 0000000000000000 R09: 0000000000000000 [ 487.592539][T17512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 487.592552][T17512] R13: 00007fe828426038 R14: 00007fe828425fa0 R15: 00007ffe8257ab08 [ 487.592588][T17512] [ 487.609202][T17512] warn_alloc: 1 callbacks suppressed [ 487.609262][T17512] syz.4.2819: vmalloc error: size 160, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 487.609450][T17512] CPU: 1 UID: 0 PID: 17512 Comm: syz.4.2819 Not tainted syzkaller #0 PREEMPT(full) [ 487.609515][T17512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 487.609555][T17512] Call Trace: [ 487.609576][T17512] [ 487.609599][T17512] dump_stack_lvl+0xe8/0x150 [ 487.609696][T17512] warn_alloc+0x24d/0x270 [ 487.609769][T17512] ? lockdep_hardirqs_on+0x7b/0x110 [ 487.609852][T17512] ? __pfx_warn_alloc+0x10/0x10 [ 487.609916][T17512] ? kfree+0x1c5/0x650 [ 487.609987][T17512] ? __get_vm_area_node+0x219/0x2f0 [ 487.610100][T17512] __vmalloc_node_range_noprof+0x36b/0x1540 [ 487.610163][T17512] ? __x64_sys_bpf+0xba/0xd0 [ 487.610217][T17512] ? do_syscall_64+0x166/0x520 [ 487.610301][T17512] ? __kasan_kmalloc+0x93/0xb0 [ 487.610366][T17512] ? bpf_prog_load+0x14d6/0x1c20 [ 487.610433][T17512] ? __sys_bpf+0xd0d/0xd90 [ 487.610493][T17512] ? __x64_sys_bpf+0xba/0xd0 [ 487.610579][T17512] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 487.610679][T17512] ? bpf_prog_calc_tag+0x51/0x370 [ 487.610757][T17512] __vmalloc_noprof+0xd2/0x120 [ 487.610817][T17512] ? bpf_prog_calc_tag+0x51/0x370 [ 487.610898][T17512] bpf_prog_calc_tag+0x51/0x370 [ 487.610970][T17512] ? __pfx_cmp_subprogs+0x10/0x10 [ 487.611047][T17512] check_and_resolve_insns+0xbb/0x21d0 [ 487.611130][T17512] ? add_subprog+0x2e2/0x3f0 [ 487.611204][T17512] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 487.611299][T17512] bpf_check+0x18f7/0x2ef0 [ 487.611408][T17512] ? __pfx_bpf_check+0x10/0x10 [ 487.611482][T17512] ? bpf_obj_name_cpy+0x194/0x1e0 [ 487.611569][T17512] bpf_prog_load+0x14d6/0x1c20 [ 487.611673][T17512] ? __pfx_bpf_prog_load+0x10/0x10 [ 487.611810][T17512] __sys_bpf+0xd0d/0xd90 [ 487.611897][T17512] ? __pfx___sys_bpf+0x10/0x10 [ 487.611994][T17512] ? __fget_files+0x2a/0x420 [ 487.612151][T17512] ? ksys_write+0x242/0x270 [ 487.612221][T17512] ? __pfx_ksys_write+0x10/0x10 [ 487.612294][T17512] __x64_sys_bpf+0xba/0xd0 [ 487.612359][T17512] do_syscall_64+0x166/0x520 [ 487.612421][T17512] ? trace_irq_disable+0x3b/0x140 [ 487.612482][T17512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.612536][T17512] ? clear_bhb_loop+0x70/0xc0 [ 487.612608][T17512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.612663][T17512] RIP: 0033:0x7fe82819f559 [ 487.612717][T17512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.612760][T17512] RSP: 002b:00007fe8263f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.612820][T17512] RAX: ffffffffffffffda RBX: 00007fe828425fa0 RCX: 00007fe82819f559 [ 487.612855][T17512] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 487.612896][T17512] RBP: 00007fe8263f6090 R08: 0000000000000000 R09: 0000000000000000 [ 487.612929][T17512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 487.612961][T17512] R13: 00007fe828426038 R14: 00007fe828425fa0 R15: 00007ffe8257ab08 [ 487.613045][T17512] [ 487.621429][T17512] Mem-Info: [ 487.621471][T17512] active_anon:6208 inactive_anon:0 isolated_anon:0 [ 487.621471][T17512] active_file:0 inactive_file:43806 isolated_file:0 [ 487.621471][T17512] unevictable:0 dirty:143 writeback:0 [ 487.621471][T17512] slab_reclaimable:11722 slab_unreclaimable:114353 [ 487.621471][T17512] mapped:29836 shmem:527 pagetables:5914 [ 487.621471][T17512] sec_pagetables:0 bounce:0 [ 487.621471][T17512] kernel_misc_reclaimable:0 [ 487.621471][T17512] free:1081346 free_pcp:13477 free_cma:0 [ 487.621670][T17512] Node 0 active_anon:24832kB inactive_anon:0kB active_file:0kB inactive_file:175020kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119344kB dirty:568kB writeback:0kB shmem:2108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16436kB pagetables:23520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 487.621809][T17512] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 487.621979][T17512] Node 0 DMA free:10252kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:216kB local_pcp:184kB free_cma:0kB [ 487.622142][T17512] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 487.622248][T17512] Node 0 DMA32 free:411548kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24832kB inactive_anon:0kB active_file:0kB inactive_file:175012kB unevictable:0kB writepending:568kB zspages:0kB present:3129332kB managed:2527384kB mlocked:0kB bounce:0kB free_pcp:39652kB local_pcp:18300kB free_cma:0kB [ 487.622411][T17512] lowmem_reserve[]: 0 0 0 0 0 [ 487.622558][T17512] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 487.627744][T17512] lowmem_reserve[]: 0 0 0 0 0 [ 487.627791][T17512] Node 1 Normal free:3903584kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:14040kB local_pcp:8432kB free_cma:0kB [ 487.627854][T17512] lowmem_reserve[]: 0 0 0 0 0 [ 487.627899][T17512] Node 0 DMA: 4*4kB (UM) 4*8kB (UM) 4*16kB (UM) 3*32kB (UM) 1*64kB (M) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10256kB [ 487.628060][T17512] Node 0 DMA32: 2716*4kB (UME) 1477*8kB (UM) 1990*16kB (UM) 1580*32kB (UM) 1069*64kB (UME) 530*128kB (UME) 301*256kB (UME) 124*512kB (UM) 1*1024kB (M) 6*2048kB (UM) 4*4096kB (UM) = 411576kB [ 487.628236][T17512] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 487.628346][T17512] Node 1 Normal: 18*4kB (UM) 5*8kB (UM) 5*16kB (UM) 3*32kB (UM) 3*64kB (UM) 3*128kB (UM) 3*256kB (UM) 1*512kB (M) 0*1024kB 1*2048kB (M) 952*4096kB (UM) = 3903584kB [ 487.628533][T17512] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 487.628550][T17512] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 487.628568][T17512] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 487.628585][T17512] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 487.628603][T17512] 44329 total pagecache pages [ 487.628611][T17512] 0 pages in swap cache [ 487.628619][T17512] Free swap = 124996kB [ 487.628628][T17512] Total swap = 124996kB [ 487.628637][T17512] 2097051 pages RAM [ 487.628645][T17512] 0 pages HighMem/MovableOnly [ 487.628652][T17512] 433589 pages reserved [ 487.628660][T17512] 0 pages cma reserved [ 487.828129][T17514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2817'. [ 489.148253][T17541] netlink: 'syz.5.2824': attribute type 1 has an invalid length. [ 489.150375][T17522] syzkaller0: entered promiscuous mode [ 489.150403][T17522] syzkaller0: entered allmulticast mode [ 491.803272][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 495.841852][T17595] __nla_validate_parse: 4 callbacks suppressed [ 495.841876][T17595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2835'. [ 495.900438][T17584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2831'. [ 496.128592][T17582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2831'. [ 496.301809][ T31] audit: type=1800 audit(1792600069.947:14): pid=17615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2836" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1119 res=0 errno=0 [ 496.421879][T17622] FAULT_INJECTION: forcing a failure. [ 496.421879][T17622] name failslab, interval 1, probability 0, space 0, times 0 [ 496.421916][T17622] CPU: 0 UID: 0 PID: 17622 Comm: syz.2.2839 Not tainted syzkaller #0 PREEMPT(full) [ 496.421942][T17622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 496.421957][T17622] Call Trace: [ 496.421966][T17622] [ 496.421976][T17622] dump_stack_lvl+0xe8/0x150 [ 496.422014][T17622] should_fail_ex+0x410/0x560 [ 496.422051][T17622] should_failslab+0xa8/0x100 [ 496.422084][T17622] __kvmalloc_node_noprof+0x176/0x820 [ 496.422115][T17622] ? __kvmalloc_node_noprof+0x345/0x820 [ 496.422142][T17622] ? bpf_check_cfg+0x1ad/0x3840 [ 496.422215][T17622] ? bpf_check_cfg+0x1ad/0x3840 [ 496.422246][T17622] bpf_check_cfg+0x1ad/0x3840 [ 496.422279][T17622] ? lock_acquire+0x115/0x350 [ 496.422318][T17622] ? __fget_files+0x2a/0x420 [ 496.422359][T17622] ? __pfx_bpf_check_cfg+0x10/0x10 [ 496.422387][T17622] ? fput+0xa0/0xd0 [ 496.422416][T17622] ? add_used_map+0xff/0x110 [ 496.422450][T17622] ? check_and_resolve_insns+0x1d54/0x21d0 [ 496.422489][T17622] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 496.422521][T17622] ? add_kfuncs+0x251/0x2e0 [ 496.422554][T17622] bpf_check+0x25fb/0x2ef0 [ 496.422600][T17622] ? __pfx_bpf_check+0x10/0x10 [ 496.422630][T17622] ? bpf_obj_name_cpy+0x194/0x1e0 [ 496.422667][T17622] bpf_prog_load+0x14d6/0x1c20 [ 496.422707][T17622] ? __pfx_bpf_prog_load+0x10/0x10 [ 496.422760][T17622] __sys_bpf+0xd0d/0xd90 [ 496.422793][T17622] ? __pfx___sys_bpf+0x10/0x10 [ 496.422831][T17622] ? __fget_files+0x2a/0x420 [ 496.422883][T17622] ? ksys_write+0x242/0x270 [ 496.422908][T17622] ? __pfx_ksys_write+0x10/0x10 [ 496.422935][T17622] __x64_sys_bpf+0xba/0xd0 [ 496.422963][T17622] do_syscall_64+0x166/0x520 [ 496.422994][T17622] ? trace_irq_disable+0x3b/0x140 [ 496.423018][T17622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.423042][T17622] ? clear_bhb_loop+0x70/0xc0 [ 496.423070][T17622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.423092][T17622] RIP: 0033:0x7f7e4cd9f559 [ 496.423114][T17622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.423134][T17622] RSP: 002b:00007f7e4dbf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 496.423158][T17622] RAX: ffffffffffffffda RBX: 00007f7e4d025fa0 RCX: 00007f7e4cd9f559 [ 496.423182][T17622] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 496.423197][T17622] RBP: 00007f7e4dbf9090 R08: 0000000000000000 R09: 0000000000000000 [ 496.423211][T17622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 496.423225][T17622] R13: 00007f7e4d026038 R14: 00007f7e4d025fa0 R15: 00007ffda3b3aa98 [ 496.423261][T17622] [ 496.765949][T17626] tipc: Enabled bearer , priority 0 [ 496.767606][T17626] syzkaller0: entered promiscuous mode [ 496.767629][T17626] syzkaller0: entered allmulticast mode [ 496.771475][T17626] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 496.844297][T17626] tipc: Resetting bearer [ 496.861901][T17625] tipc: Resetting bearer [ 496.961369][T17625] tipc: Disabling bearer [ 497.006133][T17641] netlink: 'syz.1.2844': attribute type 9 has an invalid length. [ 497.169020][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2844'. [ 497.170711][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2844'. [ 497.171010][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2844'. [ 497.201605][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2844'. [ 497.362267][T17652] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 497.426352][T17656] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 497.439013][T17656] bond0 (unregistering): Released all slaves [ 497.510442][T17664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2852'. [ 497.510466][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2852'. [ 497.510522][T17664] netlink: 'syz.2.2852': attribute type 11 has an invalid length. [ 497.510538][T17664] netlink: 'syz.2.2852': attribute type 13 has an invalid length. [ 497.555272][ T8881] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 497.580792][T17668] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 497.999893][T17670] netlink: Invalid conntrack helper [ 497.999927][T17670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.170558][T17689] ip_tables: iptables: counters copy to user failed while replacing table [ 498.338223][T17693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2858'. [ 498.404312][T17696] netlink: 'syz.5.2860': attribute type 11 has an invalid length. [ 499.069076][T17722] FAULT_INJECTION: forcing a failure. [ 499.069076][T17722] name failslab, interval 1, probability 0, space 0, times 0 [ 499.069115][T17722] CPU: 0 UID: 0 PID: 17722 Comm: syz.3.2866 Not tainted syzkaller #0 PREEMPT(full) [ 499.069139][T17722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 499.069153][T17722] Call Trace: [ 499.069161][T17722] [ 499.069171][T17722] dump_stack_lvl+0xe8/0x150 [ 499.069209][T17722] should_fail_ex+0x410/0x560 [ 499.069245][T17722] should_failslab+0xa8/0x100 [ 499.069277][T17722] __kvmalloc_node_noprof+0x176/0x820 [ 499.069308][T17722] ? __kvmalloc_node_noprof+0x345/0x820 [ 499.069335][T17722] ? bpf_check_cfg+0x1ad/0x3840 [ 499.069358][T17722] ? bpf_check_cfg+0x1ad/0x3840 [ 499.069389][T17722] bpf_check_cfg+0x1ad/0x3840 [ 499.069423][T17722] ? lock_acquire+0x115/0x350 [ 499.069457][T17722] ? __fget_files+0x2a/0x420 [ 499.069499][T17722] ? __pfx_bpf_check_cfg+0x10/0x10 [ 499.069528][T17722] ? fput+0xa0/0xd0 [ 499.069558][T17722] ? add_used_map+0xff/0x110 [ 499.069592][T17722] ? check_and_resolve_insns+0x1d54/0x21d0 [ 499.069631][T17722] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 499.069662][T17722] ? add_kfuncs+0x251/0x2e0 [ 499.069699][T17722] bpf_check+0x25fb/0x2ef0 [ 499.069746][T17722] ? __pfx_bpf_check+0x10/0x10 [ 499.069775][T17722] ? bpf_obj_name_cpy+0x194/0x1e0 [ 499.069814][T17722] bpf_prog_load+0x14d6/0x1c20 [ 499.069854][T17722] ? __pfx_bpf_prog_load+0x10/0x10 [ 499.069922][T17722] __sys_bpf+0xd0d/0xd90 [ 499.069959][T17722] ? __pfx___sys_bpf+0x10/0x10 [ 499.069999][T17722] ? __fget_files+0x2a/0x420 [ 499.070052][T17722] ? ksys_write+0x242/0x270 [ 499.070077][T17722] ? __pfx_ksys_write+0x10/0x10 [ 499.070106][T17722] __x64_sys_bpf+0xba/0xd0 [ 499.070132][T17722] do_syscall_64+0x166/0x520 [ 499.070161][T17722] ? trace_irq_disable+0x3b/0x140 [ 499.070184][T17722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.070209][T17722] ? clear_bhb_loop+0x70/0xc0 [ 499.070236][T17722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.070257][T17722] RIP: 0033:0x7f25a479f559 [ 499.070277][T17722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.070298][T17722] RSP: 002b:00007f25a55e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 499.070322][T17722] RAX: ffffffffffffffda RBX: 00007f25a4a25fa0 RCX: 00007f25a479f559 [ 499.070338][T17722] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 499.070351][T17722] RBP: 00007f25a55e8090 R08: 0000000000000000 R09: 0000000000000000 [ 499.070364][T17722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.070377][T17722] R13: 00007f25a4a26038 R14: 00007f25a4a25fa0 R15: 00007ffe0e6cecc8 [ 499.070412][T17722] [ 499.545084][T17727] ip_tables: iptables: counters copy to user failed while replacing table [ 499.604946][T17727] syzkaller1: entered promiscuous mode [ 499.604972][T17727] syzkaller1: entered allmulticast mode [ 499.679120][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 499.684282][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 499.704375][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 499.707416][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 499.708961][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 500.857719][T17734] rxe_eth0 speed is unknown, defaulting to 1000 [ 501.234294][ T8885] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 501.234853][ T8885] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 501.360970][T17792] __nla_validate_parse: 2 callbacks suppressed [ 501.360992][T17792] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2884'. [ 501.541374][ T8881] bridge_slave_1: left allmulticast mode [ 501.543530][ T8881] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.564872][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.588355][ T8881] bridge_slave_0: left allmulticast mode [ 501.589567][ T8881] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.824856][ T5632] Bluetooth: hci2: command tx timeout [ 502.601927][ T8881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.619512][ T8881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.622191][ T8881] bond0 (unregistering): Released all slaves [ 502.643324][ T8881] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 502.644178][ T8881] bond1 (unregistering): Released all slaves [ 502.670023][ T8881] bond3 (unregistering): Released all slaves [ 502.687830][ T8881] bond4 (unregistering): Released all slaves [ 502.715269][ T8881] bond2 (unregistering): Released all slaves [ 502.750568][ T8881] bond5 (unregistering): Released all slaves [ 502.776393][ T8881] bond6 (unregistering): (slave veth9): Releasing active interface [ 502.781902][ T8881] bond6 (unregistering): Released all slaves [ 502.810760][T17734] gre0 speed is unknown, defaulting to 1000 [ 502.898005][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 502.898417][ T25] infiniband syz1: ib_query_port failed (-19) [ 502.913274][ T8885] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20004 - 0 [ 502.913389][ T8885] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 20004 - 0 [ 503.145205][T17839] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 503.404170][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 503.433216][ T8882] smbdirect: ib_dev[syz1] removed [ 503.508473][T17811] rxe_eth0 speed is unknown, defaulting to 1000 [ 503.746350][T17854] netlink: 'syz.2.2892': attribute type 1 has an invalid length. [ 503.839887][T17862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2894'. [ 503.884274][ T5632] Bluetooth: hci2: command tx timeout [ 504.041996][T17811] gre0 speed is unknown, defaulting to 1000 [ 504.257734][T17881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'. [ 504.385556][T17888] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2895'. [ 504.442367][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 504.547967][T17888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.682107][T17734] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.682253][T17734] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.682356][T17734] bridge_slave_0: entered allmulticast mode [ 504.702145][T17734] bridge_slave_0: entered promiscuous mode [ 504.729135][T17734] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.729214][T17734] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.729355][T17734] bridge_slave_1: entered allmulticast mode [ 504.730851][T17734] bridge_slave_1: entered promiscuous mode [ 504.831143][T17734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.850148][T17734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.935637][T17734] team0: Port device team_slave_0 added [ 504.953019][T17734] team0: Port device team_slave_1 added [ 505.259018][T17734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.259039][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.259069][T17734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.342405][ T8881] ovs-s!: left promiscuous mode [ 505.401352][T17734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.401372][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.401402][T17734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.405537][T17903] syzkaller0: entered promiscuous mode [ 505.405562][T17903] syzkaller0: entered allmulticast mode [ 505.493031][ T8881] tipc: Disabling bearer [ 505.493314][ T8881] tipc: Left network mode [ 505.632207][T17734] hsr_slave_0: entered promiscuous mode [ 505.653842][T17734] hsr_slave_1: entered promiscuous mode [ 505.656251][T17734] debugfs: 'hsr0' already exists in 'hsr' [ 505.656278][T17734] Cannot create hsr debugfs directory [ 505.782042][T17913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2899'. [ 505.975115][ T5632] Bluetooth: hci2: command tx timeout [ 506.065090][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 506.068162][T17917] FAULT_INJECTION: forcing a failure. [ 506.068162][T17917] name failslab, interval 1, probability 0, space 0, times 0 [ 506.068198][T17917] CPU: 0 UID: 0 PID: 17917 Comm: syz.3.2900 Not tainted syzkaller #0 PREEMPT(full) [ 506.068224][T17917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 506.068239][T17917] Call Trace: [ 506.068247][T17917] [ 506.068257][T17917] dump_stack_lvl+0xe8/0x150 [ 506.068295][T17917] should_fail_ex+0x410/0x560 [ 506.068334][T17917] should_failslab+0xa8/0x100 [ 506.068368][T17917] __kvmalloc_node_noprof+0x176/0x820 [ 506.068395][T17917] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 506.068429][T17917] ? sort_subprogs_topo+0xbf/0xf20 [ 506.068455][T17917] ? sort_subprogs_topo+0xbf/0xf20 [ 506.068487][T17917] sort_subprogs_topo+0xbf/0xf20 [ 506.068515][T17917] ? bpf_prune_dead_branches+0xa3b/0xab0 [ 506.068571][T17917] bpf_check+0x26f8/0x2ef0 [ 506.068612][T17917] ? __pfx_bpf_check+0x10/0x10 [ 506.068637][T17917] ? bpf_obj_name_cpy+0x194/0x1e0 [ 506.068671][T17917] bpf_prog_load+0x14d6/0x1c20 [ 506.068711][T17917] ? __pfx_bpf_prog_load+0x10/0x10 [ 506.068759][T17917] __sys_bpf+0xd0d/0xd90 [ 506.068789][T17917] ? __pfx___sys_bpf+0x10/0x10 [ 506.068818][T17917] ? __fget_files+0x2a/0x420 [ 506.068859][T17917] ? ksys_write+0x242/0x270 [ 506.068881][T17917] ? __pfx_ksys_write+0x10/0x10 [ 506.068902][T17917] __x64_sys_bpf+0xba/0xd0 [ 506.068923][T17917] do_syscall_64+0x166/0x520 [ 506.068946][T17917] ? trace_irq_disable+0x3b/0x140 [ 506.068964][T17917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.068981][T17917] ? clear_bhb_loop+0x70/0xc0 [ 506.069005][T17917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.069022][T17917] RIP: 0033:0x7f25a479f559 [ 506.069040][T17917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.069055][T17917] RSP: 002b:00007f25a55e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 506.069077][T17917] RAX: ffffffffffffffda RBX: 00007f25a4a25fa0 RCX: 00007f25a479f559 [ 506.069090][T17917] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 506.069101][T17917] RBP: 00007f25a55e8090 R08: 0000000000000000 R09: 0000000000000000 [ 506.069112][T17917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.069122][T17917] R13: 00007f25a4a26038 R14: 00007f25a4a25fa0 R15: 00007ffe0e6cecc8 [ 506.069150][T17917] [ 506.558970][T17927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2901'. [ 506.919395][T17940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2903'. [ 506.920823][T17945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2903'. [ 506.978659][T17930] syzkaller0: entered promiscuous mode [ 506.978717][T17930] syzkaller0: entered allmulticast mode [ 507.990227][T17981] netlink: 'syz.1.2909': attribute type 1 has an invalid length. [ 508.045335][ T5632] Bluetooth: hci2: command tx timeout [ 508.112598][ T8881] team0 (unregistering): Port device team_slave_1 removed [ 508.168085][ T8881] team0 (unregistering): Port device team_slave_0 removed [ 508.675266][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 508.917414][T17994] FAULT_INJECTION: forcing a failure. [ 508.917414][T17994] name failslab, interval 1, probability 0, space 0, times 0 [ 508.917450][T17994] CPU: 1 UID: 0 PID: 17994 Comm: syz.5.2911 Not tainted syzkaller #0 PREEMPT(full) [ 508.917473][T17994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 508.917485][T17994] Call Trace: [ 508.917493][T17994] [ 508.917501][T17994] dump_stack_lvl+0xe8/0x150 [ 508.917537][T17994] should_fail_ex+0x410/0x560 [ 508.917570][T17994] should_failslab+0xa8/0x100 [ 508.917600][T17994] __kvmalloc_node_noprof+0x176/0x820 [ 508.917626][T17994] ? __kvmalloc_node_noprof+0x345/0x820 [ 508.917656][T17994] ? sort_subprogs_topo+0xf5/0xf20 [ 508.917681][T17994] ? sort_subprogs_topo+0xf5/0xf20 [ 508.917713][T17994] sort_subprogs_topo+0xf5/0xf20 [ 508.917737][T17994] ? bpf_prune_dead_branches+0xa3b/0xab0 [ 508.917780][T17994] bpf_check+0x26f8/0x2ef0 [ 508.917832][T17994] ? __pfx_bpf_check+0x10/0x10 [ 508.917862][T17994] ? bpf_obj_name_cpy+0x194/0x1e0 [ 508.917897][T17994] bpf_prog_load+0x14d6/0x1c20 [ 508.917930][T17994] ? __pfx_bpf_prog_load+0x10/0x10 [ 508.917977][T17994] __sys_bpf+0xd0d/0xd90 [ 508.918009][T17994] ? __pfx___sys_bpf+0x10/0x10 [ 508.918042][T17994] ? __fget_files+0x2a/0x420 [ 508.918091][T17994] ? ksys_write+0x242/0x270 [ 508.918115][T17994] ? __pfx_ksys_write+0x10/0x10 [ 508.918142][T17994] __x64_sys_bpf+0xba/0xd0 [ 508.918166][T17994] do_syscall_64+0x166/0x520 [ 508.918195][T17994] ? trace_irq_disable+0x3b/0x140 [ 508.918217][T17994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.918240][T17994] ? clear_bhb_loop+0x70/0xc0 [ 508.918262][T17994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.918280][T17994] RIP: 0033:0x7f2e5379f559 [ 508.918299][T17994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.918317][T17994] RSP: 002b:00007f2e546bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 508.918340][T17994] RAX: ffffffffffffffda RBX: 00007f2e53a25fa0 RCX: 00007f2e5379f559 [ 508.918354][T17994] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 508.918365][T17994] RBP: 00007f2e546bc090 R08: 0000000000000000 R09: 0000000000000000 [ 508.918377][T17994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 508.918388][T17994] R13: 00007f2e53a26038 R14: 00007f2e53a25fa0 R15: 00007ffd6f280028 [ 508.918421][T17994] [ 509.255999][T17734] netdevsim netdevsim4 eth5 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 509.422280][T17999] netlink: 'syz.5.2915': attribute type 11 has an invalid length. [ 509.432093][T18000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2914'. [ 509.472103][T17734] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 509.593652][T18009] xt_nfacct: accounting object `' does not exist [ 509.768563][T17734] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 509.869675][ T8881] IPVS: stop unused estimator thread 0... [ 509.996741][T17734] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 510.088752][T18027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2922'. [ 510.242488][T18026] rxe_eth0 speed is unknown, defaulting to 1000 [ 510.564282][ T1413] IPVS: starting estimator thread 0... [ 510.654655][T18049] IPVS: using max 34 ests per chain, 81600 per kthread [ 510.799219][T17734] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 510.825725][T17734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 510.829640][T17734] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 510.870760][T17734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 510.878032][T17734] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 510.907650][T17734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 510.912023][T17734] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 510.938210][T18061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2929'. [ 511.001675][T18060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2929'. [ 511.018006][T17734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 511.166245][ T1692] block nbd1: Possible stuck request ffff888029127000: control (read@0,1024B). Runtime 240 seconds [ 511.167664][ T1692] block nbd1: Possible stuck request ffff8880291271c0: control (read@1024,1024B). Runtime 240 seconds [ 511.167700][ T1692] block nbd1: Possible stuck request ffff888029127380: control (read@2048,1024B). Runtime 240 seconds [ 511.167745][ T1692] block nbd1: Possible stuck request ffff888029127540: control (read@3072,1024B). Runtime 240 seconds [ 511.221867][T18077] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2934'. [ 511.266982][T18077] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2934'. [ 511.300932][T18026] gre0 speed is unknown, defaulting to 1000 [ 511.591755][T17734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.677361][T17734] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.720154][ T8882] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.720335][ T8882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.735148][T18088] netlink: 'syz.3.2936': attribute type 1 has an invalid length. [ 511.929981][T18088] 8021q: adding VLAN 0 to HW filter on device bond9 [ 511.954636][ T8882] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.954783][ T8882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.292628][T18088] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2936'. [ 512.872034][T18127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2942'. [ 512.979886][T18129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2940'. [ 512.979930][T18129] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2940'. [ 513.273491][T18141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.337631][T17734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.440848][T18180] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2951'. [ 514.696064][T18189] netlink: 'syz.2.2954': attribute type 83 has an invalid length. [ 514.719557][T18189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2954'. [ 514.719591][T18189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2954'. [ 515.049965][T18203] ipt_ECN: cannot use operation on non-tcp rule [ 515.086546][T17734] veth0_vlan: entered promiscuous mode [ 515.104726][T17734] veth1_vlan: entered promiscuous mode [ 515.146313][T18203] syzkaller0: entered promiscuous mode [ 515.146338][T18203] syzkaller0: entered allmulticast mode [ 515.197723][T17734] veth0_macvtap: entered promiscuous mode [ 515.286754][T18210] FAULT_INJECTION: forcing a failure. [ 515.286754][T18210] name failslab, interval 1, probability 0, space 0, times 0 [ 515.286795][T18210] CPU: 1 UID: 0 PID: 18210 Comm: syz.3.2958 Not tainted syzkaller #0 PREEMPT(full) [ 515.286836][T18210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 515.286858][T18210] Call Trace: [ 515.286867][T18210] [ 515.286877][T18210] dump_stack_lvl+0xe8/0x150 [ 515.286915][T18210] should_fail_ex+0x410/0x560 [ 515.286953][T18210] should_failslab+0xa8/0x100 [ 515.286987][T18210] __kvmalloc_node_noprof+0x176/0x820 [ 515.287017][T18210] ? __kvmalloc_node_noprof+0x345/0x820 [ 515.287045][T18210] ? bpf_compute_scc+0xa26/0xb10 [ 515.287067][T18210] ? bpf_compute_scc+0xa26/0xb10 [ 515.287099][T18210] bpf_compute_scc+0xa26/0xb10 [ 515.287146][T18210] bpf_check+0x271e/0x2ef0 [ 515.287193][T18210] ? __pfx_bpf_check+0x10/0x10 [ 515.287223][T18210] ? bpf_obj_name_cpy+0x194/0x1e0 [ 515.287259][T18210] bpf_prog_load+0x14d6/0x1c20 [ 515.287301][T18210] ? __pfx_bpf_prog_load+0x10/0x10 [ 515.287356][T18210] __sys_bpf+0xd0d/0xd90 [ 515.287393][T18210] ? __pfx___sys_bpf+0x10/0x10 [ 515.287433][T18210] ? __fget_files+0x2a/0x420 [ 515.287487][T18210] ? ksys_write+0x242/0x270 [ 515.287512][T18210] ? __pfx_ksys_write+0x10/0x10 [ 515.287542][T18210] __x64_sys_bpf+0xba/0xd0 [ 515.287569][T18210] do_syscall_64+0x166/0x520 [ 515.287600][T18210] ? trace_irq_disable+0x3b/0x140 [ 515.287625][T18210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.287647][T18210] ? clear_bhb_loop+0x70/0xc0 [ 515.287675][T18210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.287694][T18210] RIP: 0033:0x7f25a479f559 [ 515.287713][T18210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.287731][T18210] RSP: 002b:00007f25a55e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 515.287755][T18210] RAX: ffffffffffffffda RBX: 00007f25a4a25fa0 RCX: 00007f25a479f559 [ 515.287772][T18210] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 515.287787][T18210] RBP: 00007f25a55e8090 R08: 0000000000000000 R09: 0000000000000000 [ 515.287801][T18210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 515.287814][T18210] R13: 00007f25a4a26038 R14: 00007f25a4a25fa0 R15: 00007ffe0e6cecc8 [ 515.287858][T18210] [ 515.546390][T17734] veth1_macvtap: entered promiscuous mode [ 515.566698][T18211] netlink: 'syz.2.2957': attribute type 39 has an invalid length. [ 515.586986][T17734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.613394][T17734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.655813][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.656037][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.656102][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.656139][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.845710][ T8877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.845735][ T8877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.973044][ T1413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.973067][ T1413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.092228][T18225] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2961'. [ 516.298680][T18239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2864'. [ 516.298723][T18239] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2864'. [ 516.537431][T18251] netlink: 'syz.2.2969': attribute type 1 has an invalid length. [ 516.603767][T18251] 8021q: adding VLAN 0 to HW filter on device bond10 [ 516.785360][T18257] bond10: (slave geneve4): making interface the new active one [ 516.791843][T18257] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 517.185360][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 517.188796][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 517.190349][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 517.208677][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 517.227039][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 517.453345][T18288] tipc: Resetting bearer [ 518.343834][T18280] rxe_eth0 speed is unknown, defaulting to 1000 [ 518.886620][T18280] gre0 speed is unknown, defaulting to 1000 [ 519.139422][T18312] infiniband syz1: set down [ 519.139508][T18312] infiniband syz1: added bond0 [ 519.171215][T18312] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 519.183631][T18312] infiniband syz1: Couldn't open port 1 [ 519.183900][T18312] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 519.183935][T18312] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 519.183979][T18312] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 519.323767][ T5632] Bluetooth: hci3: command tx timeout [ 519.354576][T18312] RDS/IB: syz1: added [ 519.354639][T18312] smc: adding ib device syz1 with port count 1 [ 519.354660][T18312] smc: ib device syz1 port 1 has no pnetid [ 519.920300][T18280] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.920487][T18280] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.920642][T18280] bridge_slave_0: entered allmulticast mode [ 519.946695][T18280] bridge_slave_0: entered promiscuous mode [ 519.959023][T18280] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.959138][T18280] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.959312][T18280] bridge_slave_1: entered allmulticast mode [ 519.986849][T18280] bridge_slave_1: entered promiscuous mode [ 520.059923][T18280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.090074][T18280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.182671][T18280] team0: Port device team_slave_0 added [ 520.187432][T18280] team0: Port device team_slave_1 added [ 520.257218][T18280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.257239][T18280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.257268][T18280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.259748][T18280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.259764][T18280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.259793][T18280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.413440][T18288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 520.601531][T18280] hsr_slave_0: entered promiscuous mode [ 520.608391][T18280] hsr_slave_1: entered promiscuous mode [ 520.615622][T18280] debugfs: 'hsr0' already exists in 'hsr' [ 520.615646][T18280] Cannot create hsr debugfs directory [ 520.628908][T18287] tipc: Resetting bearer [ 520.854947][ T8881] tipc: Resetting bearer [ 520.901659][T18395] netlink: 'syz.4.2986': attribute type 1 has an invalid length. [ 520.901683][T18395] __nla_validate_parse: 2 callbacks suppressed [ 520.901694][T18395] netlink: 1368 bytes leftover after parsing attributes in process `syz.4.2986'. [ 520.902114][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 521.278162][T18407] netlink: 'syz.2.2988': attribute type 15 has an invalid length. [ 521.278189][T18407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2988'. [ 521.410174][ T5632] Bluetooth: hci3: command tx timeout [ 521.579186][T18418] Bluetooth: hci0: unsupported parameter 5135 [ 521.579211][T18418] Bluetooth: hci0: unsupported parameter 8192 [ 521.599332][T18418] Bluetooth: hci0: unsupported parameter 5135 [ 521.599356][T18418] Bluetooth: hci0: unsupported parameter 8192 [ 521.843328][T18280] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.843371][T18280] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 521.843401][T18280] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.947017][T18439] Bluetooth: hci0: unsupported parameter 5135 [ 521.947044][T18439] Bluetooth: hci0: unsupported parameter 8192 [ 521.947058][T18439] Bluetooth: hci0: unsupported parameter 5135 [ 521.947072][T18439] Bluetooth: hci0: unsupported parameter 8192 [ 522.296417][T18280] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.296468][T18280] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 522.296498][T18280] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.503889][T18280] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.503930][T18280] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 522.503961][T18280] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.584784][T18458] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 522.607830][T18458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2994'. [ 523.016201][T18280] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.017443][T18280] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 523.017479][T18280] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.451695][T18280] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 523.479373][T18280] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 523.482296][T18280] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 523.487852][ T5632] Bluetooth: hci3: command tx timeout [ 523.524823][T18280] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.531888][T18280] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 523.556535][T18280] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.559045][T18280] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 523.582501][T18495] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3000'. [ 523.602217][T18280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 523.707332][T18505] FAULT_INJECTION: forcing a failure. [ 523.707332][T18505] name failslab, interval 1, probability 0, space 0, times 0 [ 523.707372][T18505] CPU: 0 UID: 0 PID: 18505 Comm: syz.1.3002 Not tainted syzkaller #0 PREEMPT(full) [ 523.707398][T18505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 523.707413][T18505] Call Trace: [ 523.707422][T18505] [ 523.707433][T18505] dump_stack_lvl+0xe8/0x150 [ 523.707473][T18505] should_fail_ex+0x410/0x560 [ 523.707511][T18505] should_failslab+0xa8/0x100 [ 523.707545][T18505] __kvmalloc_node_noprof+0x176/0x820 [ 523.707577][T18505] ? __kvmalloc_node_noprof+0x345/0x820 [ 523.707605][T18505] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 523.707635][T18505] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 523.707673][T18505] bpf_compute_subprog_arg_access+0x187/0x14d0 [ 523.707702][T18505] ? bpf_tracing_func_proto+0x72/0x180 [ 523.707761][T18505] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 523.707798][T18505] ? __kvmalloc_node_noprof+0x345/0x820 [ 523.707826][T18505] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 523.707854][T18505] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 523.707899][T18505] bpf_compute_live_registers+0x8d3/0x1ff0 [ 523.707953][T18505] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 523.707995][T18505] bpf_check+0x2744/0x2ef0 [ 523.708043][T18505] ? __pfx_bpf_check+0x10/0x10 [ 523.708074][T18505] ? bpf_obj_name_cpy+0x194/0x1e0 [ 523.708113][T18505] bpf_prog_load+0x14d6/0x1c20 [ 523.708155][T18505] ? __pfx_bpf_prog_load+0x10/0x10 [ 523.708213][T18505] __sys_bpf+0xd0d/0xd90 [ 523.708249][T18505] ? __pfx___sys_bpf+0x10/0x10 [ 523.708290][T18505] ? __fget_files+0x2a/0x420 [ 523.708345][T18505] ? ksys_write+0x242/0x270 [ 523.708371][T18505] ? __pfx_ksys_write+0x10/0x10 [ 523.708408][T18505] __x64_sys_bpf+0xba/0xd0 [ 523.708436][T18505] do_syscall_64+0x166/0x520 [ 523.708467][T18505] ? trace_irq_disable+0x3b/0x140 [ 523.708492][T18505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.708516][T18505] ? clear_bhb_loop+0x70/0xc0 [ 523.708544][T18505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.708567][T18505] RIP: 0033:0x7f1e7899f559 [ 523.708590][T18505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.708610][T18505] RSP: 002b:00007f1e797f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 523.708636][T18505] RAX: ffffffffffffffda RBX: 00007f1e78c25fa0 RCX: 00007f1e7899f559 [ 523.708653][T18505] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 523.708669][T18505] RBP: 00007f1e797f4090 R08: 0000000000000000 R09: 0000000000000000 [ 523.708683][T18505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 523.708698][T18505] R13: 00007f1e78c26038 R14: 00007f1e78c25fa0 R15: 00007ffdc1208328 [ 523.708735][T18505] [ 523.863715][T18504] bond6: (slave veth0_to_bond): Releasing active interface [ 524.029404][T18504] team0: Port device team_slave_0 removed [ 524.045283][T18504] team0: Port device team_slave_1 removed [ 524.045689][T18504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.051479][T18504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.057078][T18504] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 524.108467][T18504] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3001'. [ 524.326511][T18280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.378184][T18280] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.402287][ T8881] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.402432][ T8881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.487077][ T8881] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.487200][ T8881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.642153][T18524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3007'. [ 524.670777][T18524] tipc: Resetting bearer [ 524.767661][T18523] tipc: Resetting bearer [ 525.221834][ T8882] tipc: Resetting bearer [ 525.488924][T18551] FAULT_INJECTION: forcing a failure. [ 525.488924][T18551] name failslab, interval 1, probability 0, space 0, times 0 [ 525.488964][T18551] CPU: 1 UID: 0 PID: 18551 Comm: syz.5.3013 Not tainted syzkaller #0 PREEMPT(full) [ 525.488990][T18551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 525.489005][T18551] Call Trace: [ 525.489015][T18551] [ 525.489026][T18551] dump_stack_lvl+0xe8/0x150 [ 525.489065][T18551] should_fail_ex+0x410/0x560 [ 525.489103][T18551] should_failslab+0xa8/0x100 [ 525.489160][T18551] __kvmalloc_node_noprof+0x176/0x820 [ 525.489188][T18551] ? rcu_is_watching+0x16/0xb0 [ 525.489217][T18551] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 525.489247][T18551] ? trace_kmalloc+0x2a/0xf0 [ 525.489270][T18551] ? call_instance+0x263/0x560 [ 525.489295][T18551] ? call_instance+0x263/0x560 [ 525.489329][T18551] call_instance+0x263/0x560 [ 525.489365][T18551] bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 525.489394][T18551] ? bpf_tracing_func_proto+0x72/0x180 [ 525.489454][T18551] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 525.489489][T18551] ? __kvmalloc_node_noprof+0x345/0x820 [ 525.489517][T18551] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 525.489545][T18551] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 525.489581][T18551] bpf_compute_live_registers+0x8d3/0x1ff0 [ 525.489630][T18551] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 525.489672][T18551] bpf_check+0x2744/0x2ef0 [ 525.489720][T18551] ? __pfx_bpf_check+0x10/0x10 [ 525.489750][T18551] ? bpf_obj_name_cpy+0x194/0x1e0 [ 525.489789][T18551] bpf_prog_load+0x14d6/0x1c20 [ 525.489832][T18551] ? __pfx_bpf_prog_load+0x10/0x10 [ 525.489889][T18551] __sys_bpf+0xd0d/0xd90 [ 525.489926][T18551] ? __pfx___sys_bpf+0x10/0x10 [ 525.489966][T18551] ? __fget_files+0x2a/0x420 [ 525.490019][T18551] ? ksys_write+0x242/0x270 [ 525.490045][T18551] ? __pfx_ksys_write+0x10/0x10 [ 525.490075][T18551] __x64_sys_bpf+0xba/0xd0 [ 525.490102][T18551] do_syscall_64+0x166/0x520 [ 525.490140][T18551] ? trace_irq_disable+0x3b/0x140 [ 525.490164][T18551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.490188][T18551] ? clear_bhb_loop+0x70/0xc0 [ 525.490217][T18551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.490241][T18551] RIP: 0033:0x7f2e5379f559 [ 525.490263][T18551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.490282][T18551] RSP: 002b:00007f2e546bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 525.490307][T18551] RAX: ffffffffffffffda RBX: 00007f2e53a25fa0 RCX: 00007f2e5379f559 [ 525.490328][T18551] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 525.490342][T18551] RBP: 00007f2e546bc090 R08: 0000000000000000 R09: 0000000000000000 [ 525.490357][T18551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 525.490371][T18551] R13: 00007f2e53a26038 R14: 00007f2e53a25fa0 R15: 00007ffd6f280028 [ 525.490406][T18551] [ 525.574774][ T5632] Bluetooth: hci3: command tx timeout [ 526.022639][T18280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.149016][T18567] ip6t_srh: unknown srh invflags 4000 [ 526.162384][T18280] veth0_vlan: entered promiscuous mode [ 526.169886][T18565] netlink: 'syz.2.3017': attribute type 5 has an invalid length. [ 526.187604][T18567] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 526.230019][T18569] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3019'. [ 526.262307][T18574] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3019'. [ 526.339946][T18574] lo: left promiscuous mode [ 526.364366][T18574] tunl0: left promiscuous mode [ 526.380857][T18574] gre0: left promiscuous mode [ 526.389883][T18574] gretap0: left promiscuous mode [ 526.390372][T18574] erspan0: left promiscuous mode [ 526.419700][T18574] ip_vti0: left promiscuous mode [ 526.420255][T18574] ip6_vti0: left promiscuous mode [ 526.438554][T18574] sit0: left promiscuous mode [ 526.439116][T18574] ip6tnl0: left promiscuous mode [ 526.457933][T18574] ip6gre0: left promiscuous mode [ 526.480424][T18580] atomic_op ffff8880a82af9e0 conn xmit_atomic 0000000000000000 [ 526.483761][T18574] syz_tun: left promiscuous mode [ 526.495713][T18574] ip6gretap0: left promiscuous mode [ 526.559328][T18574] bridge0: left promiscuous mode [ 526.575790][T18574] vcan0: left promiscuous mode [ 526.589420][T18574] team0: left promiscuous mode [ 526.591389][T18574] dummy0: left promiscuous mode [ 526.601341][T18574] nlmon0: left promiscuous mode [ 526.609339][T18574] batadv0: left promiscuous mode [ 526.616276][T18574] veth0: left promiscuous mode [ 526.620006][T18574] veth1: left promiscuous mode [ 526.621929][T18574] wg0: left promiscuous mode [ 526.638116][T18574] wg1: left promiscuous mode [ 526.638716][T18574] wg2: left promiscuous mode [ 526.654815][T18574] veth0_to_bridge: left promiscuous mode [ 526.655597][T18574] bridge_slave_0: left promiscuous mode [ 526.656098][T18574] veth1_to_bridge: left promiscuous mode [ 526.659149][T18574] bridge_slave_1: left promiscuous mode [ 526.704511][T18574] bond_slave_0: left promiscuous mode [ 526.708750][T18574] veth1_to_bond: left promiscuous mode [ 526.724763][T18574] bond_slave_1: left promiscuous mode [ 526.731901][T18574] veth0_to_team: left promiscuous mode [ 526.741101][T18574] team_slave_0: left promiscuous mode [ 526.749046][T18574] veth1_to_team: left promiscuous mode [ 526.751482][T18574] team_slave_1: left promiscuous mode [ 526.774610][T18574] veth0_to_batadv: left promiscuous mode [ 526.775212][T18574] batadv_slave_0: left promiscuous mode [ 526.778686][T18574] veth1_to_batadv: left promiscuous mode [ 526.779266][T18574] batadv_slave_1: left promiscuous mode [ 526.780938][T18574] veth0_to_hsr: left promiscuous mode [ 526.782657][T18574] veth1_to_hsr: left promiscuous mode [ 526.789872][T18574] hsr0: left promiscuous mode [ 526.792218][T18574] veth1_virt_wifi: left promiscuous mode [ 526.799479][T18574] veth0_virt_wifi: left promiscuous mode [ 526.839022][T18574] vlan0: left promiscuous mode [ 526.839756][T18574] vlan1: left promiscuous mode [ 526.840250][T18574] macvlan0: left promiscuous mode [ 526.861276][T18574] macvlan1: left promiscuous mode [ 526.861873][T18574] ipvlan0: left promiscuous mode [ 526.862309][T18574] ipvlan1: left promiscuous mode [ 526.881270][T18574] macvtap0: left promiscuous mode [ 526.881836][T18574] macsec0: left promiscuous mode [ 526.893981][T18574] geneve0: left promiscuous mode [ 526.904498][T18574] geneve1: left promiscuous mode [ 526.904986][T18574] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 526.905448][T18574] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 526.908855][T18574] netdevsim netdevsim5 netdevsim2: left promiscuous mode [ 526.909556][T18574] netdevsim netdevsim5 netdevsim3: left promiscuous mode [ 526.940033][T18574] gtp0: left promiscuous mode [ 526.973417][T18574] bridge1: left promiscuous mode [ 526.974213][T18574] nicvf0: left promiscuous mode [ 527.194228][T18574] veth0_vlan.2: left promiscuous mode [ 527.197195][T18574] mac80211_hwsim hwsim20 wlan2: left promiscuous mode [ 527.371808][T18574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.393929][T18574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 527.426707][T18280] veth1_vlan: entered promiscuous mode [ 527.485791][T18594] netlink: 'syz.4.3023': attribute type 1 has an invalid length. [ 527.485818][T18594] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3023'. [ 527.485996][T18594] netlink: 'syz.4.3023': attribute type 1 has an invalid length. [ 527.486013][T18594] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3023'. [ 527.486170][T18594] netlink: 'syz.4.3023': attribute type 1 has an invalid length. [ 527.486186][T18594] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3023'. [ 527.486337][T18594] netlink: 'syz.4.3023': attribute type 1 has an invalid length. [ 527.486352][T18594] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3023'. [ 527.486501][T18594] netlink: 'syz.4.3023': attribute type 1 has an invalid length. [ 527.486516][T18594] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3023'. [ 527.486846][T18594] netlink: 'syz.4.3023': attribute type 1 has an invalid length. [ 527.486863][T18594] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3023'. [ 527.487022][T18594] netlink: 'syz.4.3023': attribute type 1 has an invalid length. [ 527.487038][T18594] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3023'. [ 527.487225][T18594] netlink: 'syz.4.3023': attribute type 1 has an invalid length. [ 527.487241][T18594] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3023'. [ 527.519349][T18594] netlink: 'syz.4.3023': attribute type 1 has an invalid length. [ 527.674567][T18582] bond11: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 527.679332][T18582] bond11 (unregistering): Released all slaves [ 527.749563][T18586] tc_dump_action: action bad kind [ 527.942505][T18602] FAULT_INJECTION: forcing a failure. [ 527.942505][T18602] name failslab, interval 1, probability 0, space 0, times 0 [ 527.942538][T18602] CPU: 0 UID: 0 PID: 18602 Comm: syz.1.3024 Not tainted syzkaller #0 PREEMPT(full) [ 527.942559][T18602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 527.942571][T18602] Call Trace: [ 527.942579][T18602] [ 527.942587][T18602] dump_stack_lvl+0xe8/0x150 [ 527.942619][T18602] should_fail_ex+0x410/0x560 [ 527.942649][T18602] should_failslab+0xa8/0x100 [ 527.942681][T18602] __kvmalloc_node_noprof+0x176/0x820 [ 527.942705][T18602] ? rcu_is_watching+0x16/0xb0 [ 527.942729][T18602] ? analyze_subprog+0x846/0x9e00 [ 527.942750][T18602] ? analyze_subprog+0x846/0x9e00 [ 527.942778][T18602] analyze_subprog+0x846/0x9e00 [ 527.942800][T18602] ? is_bpf_text_address+0x292/0x2b0 [ 527.942828][T18602] ? kernel_text_address+0xa5/0xe0 [ 527.942886][T18602] ? arch_stack_walk+0xfb/0x150 [ 527.942931][T18602] ? __pfx_stack_trace_save+0x10/0x10 [ 527.942963][T18602] ? call_instance+0x263/0x560 [ 527.942991][T18602] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 527.943014][T18602] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 527.943038][T18602] ? __pfx_analyze_subprog+0x10/0x10 [ 527.943059][T18602] ? __x64_sys_bpf+0xba/0xd0 [ 527.943077][T18602] ? do_syscall_64+0x166/0x520 [ 527.943103][T18602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.943155][T18602] ? call_instance+0x263/0x560 [ 527.943176][T18602] ? rcu_is_watching+0x16/0xb0 [ 527.943201][T18602] ? call_instance+0x263/0x560 [ 527.943222][T18602] ? trace_kmalloc+0x2a/0xf0 [ 527.943246][T18602] ? call_instance+0x263/0x560 [ 527.943268][T18602] ? __kvmalloc_node_noprof+0x52f/0x820 [ 527.943294][T18602] ? __kvmalloc_node_noprof+0x345/0x820 [ 527.943319][T18602] ? call_instance+0x263/0x560 [ 527.943342][T18602] ? call_instance+0x263/0x560 [ 527.943373][T18602] ? call_instance+0x42e/0x560 [ 527.943404][T18602] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 527.943428][T18602] ? bpf_tracing_func_proto+0x72/0x180 [ 527.943474][T18602] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 527.943506][T18602] ? __kvmalloc_node_noprof+0x345/0x820 [ 527.943529][T18602] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 527.943553][T18602] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 527.943585][T18602] bpf_compute_live_registers+0x8d3/0x1ff0 [ 527.943624][T18602] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 527.943661][T18602] bpf_check+0x2744/0x2ef0 [ 527.943704][T18602] ? __pfx_bpf_check+0x10/0x10 [ 527.943733][T18602] ? bpf_obj_name_cpy+0x194/0x1e0 [ 527.943768][T18602] bpf_prog_load+0x14d6/0x1c20 [ 527.943805][T18602] ? __pfx_bpf_prog_load+0x10/0x10 [ 527.943859][T18602] __sys_bpf+0xd0d/0xd90 [ 527.943894][T18602] ? __pfx___sys_bpf+0x10/0x10 [ 527.943932][T18602] ? __fget_files+0x2a/0x420 [ 527.943993][T18602] ? ksys_write+0x242/0x270 [ 527.944019][T18602] ? __pfx_ksys_write+0x10/0x10 [ 527.944048][T18602] __x64_sys_bpf+0xba/0xd0 [ 527.944075][T18602] do_syscall_64+0x166/0x520 [ 527.944105][T18602] ? trace_irq_disable+0x3b/0x140 [ 527.944129][T18602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.944152][T18602] ? clear_bhb_loop+0x70/0xc0 [ 527.944180][T18602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.944203][T18602] RIP: 0033:0x7f1e7899f559 [ 527.944226][T18602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.944245][T18602] RSP: 002b:00007f1e797f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 527.944269][T18602] RAX: ffffffffffffffda RBX: 00007f1e78c25fa0 RCX: 00007f1e7899f559 [ 527.944286][T18602] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 527.944300][T18602] RBP: 00007f1e797f4090 R08: 0000000000000000 R09: 0000000000000000 [ 527.944315][T18602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 527.944329][T18602] R13: 00007f1e78c26038 R14: 00007f1e78c25fa0 R15: 00007ffdc1208328 [ 527.944365][T18602] [ 528.158435][T18280] veth0_macvtap: entered promiscuous mode [ 528.249488][T18280] veth1_macvtap: entered promiscuous mode [ 528.425721][T18280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.447729][T18607] tipc: Enabling of bearer rejected, failed to enable media [ 528.448041][T18604] tipc: Resetting bearer [ 528.529846][T18280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.615196][ T8882] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.615728][ T8882] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.615771][ T8882] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.615808][ T8882] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.616866][T18604] IPVS: Scheduler module ip_vs_sip not found [ 528.621938][T18603] tipc: Resetting bearer [ 528.793554][ T8885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.793579][ T8885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.888762][T18264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.888789][T18264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.090171][T18628] IPVS: Error connecting to the multicast addr [ 529.201791][T18635] –: renamed from virt_wifi0 [ 529.271119][T18632] Cannot find add_set index 0 as target [ 529.473817][ T8885] tipc: Resetting bearer [ 529.609813][T18656] tipc: Started in network mode [ 529.609849][T18656] tipc: Node identity 660b1d8d746, cluster identity 4711 [ 529.610080][T18656] tipc: Enabled bearer , priority 0 [ 529.614073][T18656] syzkaller0: entered promiscuous mode [ 529.614098][T18656] syzkaller0: entered allmulticast mode [ 529.663377][T18656] tipc: Resetting bearer [ 529.666648][T18655] tipc: Resetting bearer [ 529.716818][T18655] tipc: Disabling bearer [ 530.006058][T18679] 8021q: adding VLAN 0 to HW filter on device bond2 [ 530.047918][T18680] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 530.080337][T18672] sctp: [Deprecated]: syz.1.3042 (pid 18672) Use of int in max_burst socket option. [ 530.080337][T18672] Use struct sctp_assoc_value instead [ 530.216480][T18686] syzkaller0: entered promiscuous mode [ 530.216508][T18686] syzkaller0: entered allmulticast mode [ 530.426040][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 530.430398][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 530.432453][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 530.462080][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 530.474538][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 530.787956][T18704] FAULT_INJECTION: forcing a failure. [ 530.787956][T18704] name failslab, interval 1, probability 0, space 0, times 0 [ 530.787991][T18704] CPU: 1 UID: 0 PID: 18704 Comm: syz.5.3052 Not tainted syzkaller #0 PREEMPT(full) [ 530.788013][T18704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 530.788025][T18704] Call Trace: [ 530.788034][T18704] [ 530.788043][T18704] dump_stack_lvl+0xe8/0x150 [ 530.788077][T18704] should_fail_ex+0x410/0x560 [ 530.788118][T18704] should_failslab+0xa8/0x100 [ 530.788149][T18704] __kvmalloc_node_noprof+0x176/0x820 [ 530.788173][T18704] ? rcu_is_watching+0x16/0xb0 [ 530.788197][T18704] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 530.788221][T18704] ? trace_kmalloc+0x2a/0xf0 [ 530.788240][T18704] ? call_instance+0x263/0x560 [ 530.788260][T18704] ? call_instance+0x263/0x560 [ 530.788289][T18704] call_instance+0x263/0x560 [ 530.788322][T18704] bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 530.788348][T18704] ? bpf_tracing_func_proto+0x72/0x180 [ 530.788407][T18704] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 530.788439][T18704] ? __kvmalloc_node_noprof+0x345/0x820 [ 530.788465][T18704] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 530.788487][T18704] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 530.788519][T18704] bpf_compute_live_registers+0x8d3/0x1ff0 [ 530.788564][T18704] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 530.788603][T18704] bpf_check+0x2744/0x2ef0 [ 530.788646][T18704] ? __pfx_bpf_check+0x10/0x10 [ 530.788671][T18704] ? bpf_obj_name_cpy+0x194/0x1e0 [ 530.788705][T18704] bpf_prog_load+0x14d6/0x1c20 [ 530.788743][T18704] ? __pfx_bpf_prog_load+0x10/0x10 [ 530.788789][T18704] __sys_bpf+0xd0d/0xd90 [ 530.788821][T18704] ? __pfx___sys_bpf+0x10/0x10 [ 530.788857][T18704] ? __fget_files+0x2a/0x420 [ 530.788902][T18704] ? ksys_write+0x242/0x270 [ 530.788929][T18704] ? __pfx_ksys_write+0x10/0x10 [ 530.788955][T18704] __x64_sys_bpf+0xba/0xd0 [ 530.788982][T18704] do_syscall_64+0x166/0x520 [ 530.789013][T18704] ? trace_irq_disable+0x3b/0x140 [ 530.789035][T18704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.789056][T18704] ? clear_bhb_loop+0x70/0xc0 [ 530.789080][T18704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.789102][T18704] RIP: 0033:0x7f2e5379f559 [ 530.789124][T18704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.789141][T18704] RSP: 002b:00007f2e546bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 530.789163][T18704] RAX: ffffffffffffffda RBX: 00007f2e53a25fa0 RCX: 00007f2e5379f559 [ 530.789177][T18704] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 530.789189][T18704] RBP: 00007f2e546bc090 R08: 0000000000000000 R09: 0000000000000000 [ 530.789200][T18704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 530.789211][T18704] R13: 00007f2e53a26038 R14: 00007f2e53a25fa0 R15: 00007ffd6f280028 [ 530.789240][T18704] [ 531.280610][T18711] validate_nla: 61 callbacks suppressed [ 531.280636][T18711] netlink: 'syz.4.3056': attribute type 10 has an invalid length. [ 531.320920][T18711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.346420][T18711] team0: Port device netdevsim1 added [ 531.354657][T18715] netlink: 'syz.4.3056': attribute type 10 has an invalid length. [ 531.440394][T18721] sctp: [Deprecated]: syz.3.3057 (pid 18721) Use of int in max_burst socket option. [ 531.440394][T18721] Use struct sctp_assoc_value instead [ 531.769511][T18733] netlink: 'syz.5.3060': attribute type 1 has an invalid length. [ 531.790456][ T8882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.848699][T18739] __nla_validate_parse: 67 callbacks suppressed [ 531.848722][T18739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3062'. [ 531.927299][T18733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 531.989613][T18734] bond2: (slave veth3): Enslaving as an active interface with a down link [ 531.989915][T18695] rxe_eth0 speed is unknown, defaulting to 1000 [ 532.040753][T18730] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 532.055849][T18730] bond2: (slave batadv1): making interface the new active one [ 532.076227][T18730] batadv1: entered promiscuous mode [ 532.093252][T18730] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 532.310599][T18734] bond2 (unregistering): (slave veth3): Releasing active interface [ 532.341626][T18734] bond2 (unregistering): (slave batadv1): Releasing active interface [ 532.341661][T18734] batadv1: left promiscuous mode [ 532.374496][T18734] bond2 (unregistering): Released all slaves [ 532.450446][T18752] FAULT_INJECTION: forcing a failure. [ 532.450446][T18752] name failslab, interval 1, probability 0, space 0, times 0 [ 532.450483][T18752] CPU: 1 UID: 0 PID: 18752 Comm: syz.3.3065 Not tainted syzkaller #0 PREEMPT(full) [ 532.450508][T18752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 532.450522][T18752] Call Trace: [ 532.450531][T18752] [ 532.450542][T18752] dump_stack_lvl+0xe8/0x150 [ 532.450578][T18752] should_fail_ex+0x410/0x560 [ 532.450613][T18752] should_failslab+0xa8/0x100 [ 532.450658][T18752] __kvmalloc_node_noprof+0x176/0x820 [ 532.450688][T18752] ? rcu_is_watching+0x16/0xb0 [ 532.450718][T18752] ? analyze_subprog+0x846/0x9e00 [ 532.450744][T18752] ? analyze_subprog+0x846/0x9e00 [ 532.450779][T18752] analyze_subprog+0x846/0x9e00 [ 532.450806][T18752] ? is_bpf_text_address+0x292/0x2b0 [ 532.450843][T18752] ? kernel_text_address+0xa5/0xe0 [ 532.450876][T18752] ? arch_stack_walk+0xfb/0x150 [ 532.450917][T18752] ? __pfx_stack_trace_save+0x10/0x10 [ 532.450955][T18752] ? call_instance+0x263/0x560 [ 532.450976][T18752] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 532.451000][T18752] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 532.451028][T18752] ? __pfx_analyze_subprog+0x10/0x10 [ 532.451054][T18752] ? __x64_sys_bpf+0xba/0xd0 [ 532.451072][T18752] ? do_syscall_64+0x166/0x520 [ 532.451099][T18752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.451162][T18752] ? call_instance+0x263/0x560 [ 532.451188][T18752] ? rcu_is_watching+0x16/0xb0 [ 532.451215][T18752] ? call_instance+0x263/0x560 [ 532.451241][T18752] ? trace_kmalloc+0x2a/0xf0 [ 532.451266][T18752] ? call_instance+0x263/0x560 [ 532.451293][T18752] ? __kvmalloc_node_noprof+0x52f/0x820 [ 532.451326][T18752] ? __kvmalloc_node_noprof+0x345/0x820 [ 532.451351][T18752] ? call_instance+0x263/0x560 [ 532.451375][T18752] ? call_instance+0x263/0x560 [ 532.451406][T18752] ? call_instance+0x42e/0x560 [ 532.451436][T18752] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 532.451466][T18752] ? bpf_tracing_func_proto+0x72/0x180 [ 532.451524][T18752] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 532.451580][T18752] ? __kvmalloc_node_noprof+0x345/0x820 [ 532.451607][T18752] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 532.451645][T18752] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 532.451682][T18752] bpf_compute_live_registers+0x8d3/0x1ff0 [ 532.451733][T18752] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 532.451772][T18752] bpf_check+0x2744/0x2ef0 [ 532.451817][T18752] ? __pfx_bpf_check+0x10/0x10 [ 532.451847][T18752] ? bpf_obj_name_cpy+0x194/0x1e0 [ 532.451885][T18752] bpf_prog_load+0x14d6/0x1c20 [ 532.451928][T18752] ? __pfx_bpf_prog_load+0x10/0x10 [ 532.451981][T18752] __sys_bpf+0xd0d/0xd90 [ 532.452011][T18752] ? __pfx___sys_bpf+0x10/0x10 [ 532.452042][T18752] ? __fget_files+0x2a/0x420 [ 532.452102][T18752] ? ksys_write+0x242/0x270 [ 532.452123][T18752] ? __pfx_ksys_write+0x10/0x10 [ 532.452149][T18752] __x64_sys_bpf+0xba/0xd0 [ 532.452173][T18752] do_syscall_64+0x166/0x520 [ 532.452201][T18752] ? trace_irq_disable+0x3b/0x140 [ 532.452221][T18752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.452241][T18752] ? clear_bhb_loop+0x70/0xc0 [ 532.452265][T18752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.452285][T18752] RIP: 0033:0x7fcb6c39f559 [ 532.452305][T18752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.452322][T18752] RSP: 002b:00007fcb6d348028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 532.452344][T18752] RAX: ffffffffffffffda RBX: 00007fcb6c625fa0 RCX: 00007fcb6c39f559 [ 532.452358][T18752] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 532.452371][T18752] RBP: 00007fcb6d348090 R08: 0000000000000000 R09: 0000000000000000 [ 532.452385][T18752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 532.452398][T18752] R13: 00007fcb6c626038 R14: 00007fcb6c625fa0 R15: 00007fff2e9b6738 [ 532.452431][T18752] [ 532.538008][ T5631] Bluetooth: hci4: command tx timeout [ 532.569174][ T8882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.686640][T18753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3064'. [ 532.896457][T18695] gre0 speed is unknown, defaulting to 1000 [ 533.152113][ T8882] team0: Port device netdevsim1 removed [ 533.174276][ T8882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.215875][T18764] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3067'. [ 533.263189][T18768] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3069'. [ 533.270391][T18768] netlink: 'syz.4.3069': attribute type 1 has an invalid length. [ 533.270417][T18768] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3069'. [ 533.272346][T18764] bridge0: port 1(vlan2) entered blocking state [ 533.276207][T18764] bridge0: port 1(vlan2) entered disabled state [ 533.278388][T18764] vlan2: entered allmulticast mode [ 533.309625][T18764] vlan2: entered promiscuous mode [ 533.309775][T18764] geneve0: entered promiscuous mode [ 533.432890][ T8882] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.561821][T18769] [ 533.564231][T18769] ====================================================== [ 533.571354][T18769] WARNING: possible circular locking dependency detected [ 533.578598][T18769] syzkaller #0 Not tainted [ 533.583050][T18769] ------------------------------------------------------ [ 533.590166][T18769] syz.3.3070/18769 is trying to acquire lock: [ 533.596265][T18769] ffff888029022ac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 533.605850][T18769] [ 533.605850][T18769] but task is already holding lock: [ 533.613254][T18769] ffff8880290225a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 533.623873][T18769] [ 533.623873][T18769] which lock already depends on the new lock. [ 533.623873][T18769] [ 533.634311][T18769] [ 533.634311][T18769] the existing dependency chain (in reverse order) is: [ 533.643388][T18769] [ 533.643388][T18769] -> #6 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 533.652137][T18769] blk_alloc_queue+0x544/0x690 [ 533.657534][T18769] __blk_mq_alloc_disk+0x194/0x390 [ 533.663298][T18769] nbd_dev_add+0x494/0xb60 [ 533.668381][T18769] nbd_init+0x168/0x1f0 [ 533.673232][T18769] do_one_initcall+0x250/0x870 [ 533.678568][T18769] do_initcall_level+0x10a/0x1a0 [ 533.684202][T18769] do_initcalls+0x59/0xa0 [ 533.689168][T18769] kernel_init_freeable+0x29d/0x3e0 [ 533.694937][T18769] kernel_init+0x22/0x1d0 [ 533.699847][T18769] ret_from_fork+0x514/0xb70 [ 533.705050][T18769] ret_from_fork_asm+0x1a/0x30 [ 533.710391][T18769] [ 533.710391][T18769] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 533.717646][T18769] fs_reclaim_acquire+0x71/0x100 [ 533.723154][T18769] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 533.729519][T18769] __alloc_skb+0x1db/0x7a0 [ 533.734538][T18769] __ip6_append_data+0x2ec4/0x40c0 [ 533.740300][T18769] ip6_append_data+0x108/0x270 [ 533.745715][T18769] rawv6_sendmsg+0x1298/0x18c0 [ 533.751200][T18769] sock_sendmsg_nosec+0x10f/0x190 [ 533.756994][T18769] ____sys_sendmsg+0x54e/0x850 [ 533.763126][T18769] ___sys_sendmsg+0x2a5/0x360 [ 533.768398][T18769] __x64_sys_sendmsg+0x1b1/0x290 [ 533.773916][T18769] do_syscall_64+0x166/0x520 [ 533.779208][T18769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.785672][T18769] [ 533.785672][T18769] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 533.793496][T18769] lock_sock_nested+0x41/0x100 [ 533.798871][T18769] inet_shutdown+0x6a/0x390 [ 533.804066][T18769] nbd_mark_nsock_dead+0x2cb/0x550 [ 533.809775][T18769] sock_shutdown+0x15e/0x260 [ 533.815039][T18769] nbd_clear_sock+0x24/0x170 [ 533.820224][T18769] nbd_config_put+0x477/0x7e0 [ 533.825500][T18769] nbd_genl_connect+0x19b8/0x1cd0 [ 533.831109][T18769] genl_family_rcv_msg_doit+0x233/0x340 [ 533.837415][T18769] genl_rcv_msg+0x614/0x7a0 [ 533.842498][T18769] netlink_rcv_skb+0x226/0x4a0 [ 533.847823][T18769] genl_rcv+0x28/0x40 [ 533.852460][T18769] netlink_unicast+0x8ef/0xa80 [ 533.857803][T18769] netlink_sendmsg+0x813/0xb40 [ 533.863125][T18769] sock_sendmsg_nosec+0x14e/0x190 [ 533.868722][T18769] ____sys_sendmsg+0x54e/0x850 [ 533.874320][T18769] ___sys_sendmsg+0x2a5/0x360 [ 533.879679][T18769] __x64_sys_sendmsg+0x1b1/0x290 [ 533.885189][T18769] do_syscall_64+0x166/0x520 [ 533.890520][T18769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.897073][T18769] [ 533.897073][T18769] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 533.904800][T18769] __mutex_lock+0x19d/0x1550 [ 533.909972][T18769] nbd_queue_rq+0x373/0xff0 [ 533.915049][T18769] blk_mq_dispatch_rq_list+0x499/0x1990 [ 533.921262][T18769] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 533.928207][T18769] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 533.934791][T18769] blk_mq_run_work_fn+0x16c/0x300 [ 533.940383][T18769] process_scheduled_works+0xc3d/0x1630 [ 533.946504][T18769] worker_thread+0xa47/0xfb0 [ 533.951678][T18769] kthread+0x38b/0x480 [ 533.956313][T18769] ret_from_fork+0x514/0xb70 [ 533.961482][T18769] ret_from_fork_asm+0x1a/0x30 [ 533.966816][T18769] [ 533.966816][T18769] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 533.974179][T18769] __mutex_lock+0x19d/0x1550 [ 533.979363][T18769] nbd_queue_rq+0xc1/0xff0 [ 533.984487][T18769] blk_mq_dispatch_rq_list+0x499/0x1990 [ 533.990610][T18769] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 533.997507][T18769] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 534.004070][T18769] blk_mq_run_work_fn+0x16c/0x300 [ 534.009662][T18769] process_scheduled_works+0xc3d/0x1630 [ 534.015782][T18769] worker_thread+0xa47/0xfb0 [ 534.020939][T18769] kthread+0x38b/0x480 [ 534.025655][T18769] ret_from_fork+0x514/0xb70 [ 534.030824][T18769] ret_from_fork_asm+0x1a/0x30 [ 534.036158][T18769] [ 534.036158][T18769] -> #1 (set->srcu){.+.+}-{0:0}: [ 534.043341][T18769] __synchronize_srcu+0xc9/0x2f0 [ 534.048928][T18769] elevator_switch+0x1e8/0x7b0 [ 534.054312][T18769] elevator_change+0x2fa/0x480 [ 534.059640][T18769] elevator_set_default+0x375/0x440 [ 534.065409][T18769] blk_register_queue+0x3f3/0x4e0 [ 534.071100][T18769] __add_disk+0x6b8/0xdb0 [ 534.076186][T18769] add_disk_fwnode+0x100/0x3a0 [ 534.081521][T18769] nbd_dev_add+0x733/0xb60 [ 534.086507][T18769] nbd_init+0x168/0x1f0 [ 534.091237][T18769] do_one_initcall+0x250/0x870 [ 534.096571][T18769] do_initcall_level+0x10a/0x1a0 [ 534.102071][T18769] do_initcalls+0x59/0xa0 [ 534.106973][T18769] kernel_init_freeable+0x29d/0x3e0 [ 534.112828][T18769] kernel_init+0x22/0x1d0 [ 534.117763][T18769] ret_from_fork+0x514/0xb70 [ 534.122929][T18769] ret_from_fork_asm+0x1a/0x30 [ 534.128273][T18769] [ 534.128273][T18769] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 534.136254][T18769] __lock_acquire+0x164c/0x2de0 [ 534.141674][T18769] lock_acquire+0x115/0x350 [ 534.146747][T18769] __mutex_lock+0x19d/0x1550 [ 534.152351][T18769] elevator_change+0x1af/0x480 [ 534.157682][T18769] elevator_set_none+0xb5/0x140 [ 534.163103][T18769] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 534.169488][T18769] nbd_start_device+0x189/0xb30 [ 534.174901][T18769] nbd_genl_connect+0x167d/0x1cd0 [ 534.180494][T18769] genl_family_rcv_msg_doit+0x233/0x340 [ 534.186595][T18769] genl_rcv_msg+0x614/0x7a0 [ 534.191658][T18769] netlink_rcv_skb+0x226/0x4a0 [ 534.197013][T18769] genl_rcv+0x28/0x40 [ 534.201571][T18769] netlink_unicast+0x8ef/0xa80 [ 534.206913][T18769] netlink_sendmsg+0x813/0xb40 [ 534.212409][T18769] sock_sendmsg_nosec+0x14e/0x190 [ 534.218001][T18769] ____sys_sendmsg+0x54e/0x850 [ 534.223338][T18769] ___sys_sendmsg+0x2a5/0x360 [ 534.228623][T18769] __x64_sys_sendmsg+0x1b1/0x290 [ 534.234123][T18769] do_syscall_64+0x166/0x520 [ 534.239304][T18769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.245753][T18769] [ 534.245753][T18769] other info that might help us debug this: [ 534.245753][T18769] [ 534.256011][T18769] Chain exists of: [ 534.256011][T18769] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#52 [ 534.256011][T18769] [ 534.269800][T18769] Possible unsafe locking scenario: [ 534.269800][T18769] [ 534.277282][T18769] CPU0 CPU1 [ 534.282673][T18769] ---- ---- [ 534.288121][T18769] lock(&q->q_usage_counter(io)#52); [ 534.293810][T18769] lock(fs_reclaim); [ 534.300342][T18769] lock(&q->q_usage_counter(io)#52); [ 534.308271][T18769] lock(&q->elevator_lock); [ 534.312979][T18769] [ 534.312979][T18769] *** DEADLOCK *** [ 534.312979][T18769] [ 534.321233][T18769] locks held by syz.3.3070/18769: 6, last CPU#1: [ 534.327808][T18769] #0: ffffffff912c02e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.336310][T18769] #1: ffffffff912c0120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 534.345608][T18769] #2: ffff8880290a79c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0 [ 534.357079][T18769] #3: ffff8880290a78d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0 [ 534.368131][T18769] #4: ffff8880290225a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 534.378834][T18769] #5: ffff8880290225d8 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 534.389893][T18769] [ 534.389893][T18769] stack backtrace: [ 534.395831][T18769] CPU: 1 UID: 0 PID: 18769 Comm: syz.3.3070 Not tainted syzkaller #0 PREEMPT(full) [ 534.405334][T18769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 534.415539][T18769] Call Trace: [ 534.418860][T18769] [ 534.421815][T18769] dump_stack_lvl+0xe8/0x150 [ 534.426468][T18769] print_circular_bug+0x2e2/0x300 [ 534.431526][T18769] check_noncircular+0x12f/0x150 [ 534.436502][T18769] __lock_acquire+0x164c/0x2de0 [ 534.441387][T18769] lock_acquire+0x115/0x350 [ 534.445919][T18769] ? elevator_change+0x1af/0x480 [ 534.450895][T18769] __mutex_lock+0x19d/0x1550 [ 534.455518][T18769] ? elevator_change+0x1af/0x480 [ 534.460490][T18769] ? rcu_is_watching+0x16/0xb0 [ 534.465381][T18769] ? elevator_change+0x1af/0x480 [ 534.470349][T18769] ? __pfx___mutex_lock+0x10/0x10 [ 534.475402][T18769] ? enable_work+0x17f/0x230 [ 534.480025][T18769] ? lockdep_hardirqs_on+0x7b/0x110 [ 534.485251][T18769] ? __cancel_work_sync+0xf8/0x110 [ 534.490400][T18769] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 534.495893][T18769] elevator_change+0x1af/0x480 [ 534.500687][T18769] elevator_set_none+0xb5/0x140 [ 534.505591][T18769] ? __pfx_elevator_set_none+0x10/0x10 [ 534.511075][T18769] ? xa_load+0x1db/0x210 [ 534.515426][T18769] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 534.521286][T18769] ? kernfs_add_one+0xfc/0x6f0 [ 534.526098][T18769] ? nbd_start_device+0x17d/0xb30 [ 534.531332][T18769] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 534.537612][T18769] ? sysfs_add_file_mode_ns+0x258/0x300 [ 534.543285][T18769] nbd_start_device+0x189/0xb30 [ 534.548166][T18769] ? device_create_file+0xf4/0x1b0 [ 534.553398][T18769] nbd_genl_connect+0x167d/0x1cd0 [ 534.558456][T18769] ? __pfx_nbd_genl_connect+0x10/0x10 [ 534.563858][T18769] ? rcu_is_watching+0x16/0xb0 [ 534.568652][T18769] ? __nla_parse+0x40/0x60 [ 534.573104][T18769] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 534.579471][T18769] genl_family_rcv_msg_doit+0x233/0x340 [ 534.585049][T18769] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 534.591174][T18769] ? __lock_acquire+0x747/0x2de0 [ 534.596134][T18769] genl_rcv_msg+0x614/0x7a0 [ 534.600704][T18769] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.605754][T18769] ? __pfx_nbd_genl_connect+0x10/0x10 [ 534.611156][T18769] netlink_rcv_skb+0x226/0x4a0 [ 534.615951][T18769] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.621010][T18769] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 534.626375][T18769] ? down_read+0x2be/0x330 [ 534.630825][T18769] genl_rcv+0x28/0x40 [ 534.634861][T18769] netlink_unicast+0x8ef/0xa80 [ 534.639670][T18769] netlink_sendmsg+0x813/0xb40 [ 534.644463][T18769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.649772][T18769] ? apparmor_socket_sendmsg+0x98/0x360 [ 534.655342][T18769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.660656][T18769] sock_sendmsg_nosec+0x14e/0x190 [ 534.665711][T18769] ____sys_sendmsg+0x54e/0x850 [ 534.670510][T18769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.675837][T18769] ? import_iovec+0x73/0xa0 [ 534.680374][T18769] ___sys_sendmsg+0x2a5/0x360 [ 534.685075][T18769] ? __lock_acquire+0x747/0x2de0 [ 534.690061][T18769] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.695314][T18769] ? futex_wait+0x2a2/0x390 [ 534.699881][T18769] ? __fget_files+0x2a/0x420 [ 534.704504][T18769] ? __fget_files+0x3a2/0x420 [ 534.709240][T18769] __x64_sys_sendmsg+0x1b1/0x290 [ 534.714225][T18769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 534.719892][T18769] do_syscall_64+0x166/0x520 [ 534.724536][T18769] ? trace_irq_disable+0x3b/0x140 [ 534.729597][T18769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.735716][T18769] ? clear_bhb_loop+0x70/0xc0 [ 534.740450][T18769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.746365][T18769] RIP: 0033:0x7fcb6c39f559 [ 534.750807][T18769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.770444][T18769] RSP: 002b:00007fcb6d348028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.778909][T18769] RAX: ffffffffffffffda RBX: 00007fcb6c625fa0 RCX: 00007fcb6c39f559 [ 534.786921][T18769] RDX: 000000000400400c RSI: 0000200000000e00 RDI: 00000000000000f6 [ 534.794931][T18769] RBP: 00007fcb6c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 534.802952][T18769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.810967][T18769] R13: 00007fcb6c626038 R14: 00007fcb6c625fa0 R15: 00007fff2e9b6738 [ 534.818995][T18769] [ 534.848559][ T5631] Bluetooth: hci4: command tx timeout [ 534.887449][ T8862] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 20004 - 0 [ 534.903333][ T8881] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 534.903587][ T8881] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20004 - 0 [ 534.903625][ T8881] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 535.005579][ T8882] pim6reg: left allmulticast mode [ 535.083633][ T5631] block nbd3: Receive control failed (result -32) [ 535.083728][ T5632] block nbd3: Receive control failed (result -32) [ 535.200287][T18264] smc: removing ib device syz0 [ 535.221465][T18264] smbdirect: ib_dev[syz0] removed [ 535.229679][ T8882] bond10 (unregistering): (slave geneve4): Releasing active interface [ 535.348686][ T8882] bond0 (unregistering): (slave bridge5): Removing an active aggregator [ 535.349032][ T8882] bond0 (unregistering): (slave bridge5): Releasing backup interface [ 535.428911][ T8882] bond1 (unregistering): Released all slaves [ 535.469059][ T8882] bond0 (unregistering): Released all slaves [ 535.496887][ T8882] bond2 (unregistering): Released all slaves [ 535.502593][ T8882] bond3 (unregistering): Released all slaves [ 535.521311][ T8882] bond4 (unregistering): Released all slaves [ 535.545288][ T8882] bond5 (unregistering): Released all slaves [ 535.551517][ T8882] bond6 (unregistering): Released all slaves [ 535.571607][ T8882] bond7 (unregistering): Released all slaves [ 535.588808][ T8882] bond8 (unregistering): Released all slaves [ 535.625995][ T8882] bond9 (unregistering): Released all slaves [ 535.648595][ T8882] bond10 (unregistering): Released all slaves [ 536.282243][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 536.289643][T18695] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.289764][T18695] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.289910][T18695] bridge_slave_0: entered allmulticast mode [ 536.315747][T18695] bridge_slave_0: entered promiscuous mode [ 536.326623][T18695] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.326745][T18695] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.326883][T18695] bridge_slave_1: entered allmulticast mode [ 536.361424][T18695] bridge_slave_1: entered promiscuous mode [ 536.416291][T18695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.418993][T18695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.491077][T18695] team0: Port device team_slave_0 added [ 536.501055][T18695] team0: Port device team_slave_1 added [ 536.537113][T18695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.537133][T18695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.537163][T18695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.539552][T18695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.539570][T18695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.539600][T18695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.678707][T18695] hsr_slave_0: entered promiscuous mode [ 536.681103][T18695] hsr_slave_1: entered promiscuous mode [ 536.681587][T18695] debugfs: 'hsr0' already exists in 'hsr' [ 536.681605][T18695] Cannot create hsr debugfs directory [ 536.923383][ T5632] Bluetooth: hci4: command tx timeout [ 536.980096][T18695] netdevsim netdevsim2 eth5 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 537.053646][T18695] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 537.058354][ T8882] ovs-system: left promiscuous mode [ 537.091472][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 537.108495][T18695] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 537.159470][ T8882] tipc: Disabling bearer [ 537.159629][ T8882] tipc: Disabling bearer [ 537.159718][ T8882] tipc: Disabling bearer [ 537.160452][ T8882] tipc: Left network mode [ 537.194894][ T8882] IPVS: stopping backup sync thread 12349 ... [ 537.199124][T18695] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 537.373229][T18695] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 537.392839][T18695] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 537.395016][T18695] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 537.399225][T18695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 537.399997][T18695] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 537.436380][T18695] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 537.440152][T18695] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 537.450263][T18695] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 537.549640][T18695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.567542][T18695] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.572376][ T8862] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.572449][ T8862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.610242][ T8878] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.610308][ T8878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.826694][ T8882] batman_adv: batadv0: Removing interface: macvtap1 [ 538.526914][ T8882] IPVS: stop unused estimator thread 0... [ 538.571897][T18695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.617322][T18695] veth0_vlan: entered promiscuous mode [ 538.626025][T18695] veth1_vlan: entered promiscuous mode [ 538.659387][T18695] veth0_macvtap: entered promiscuous mode [ 538.663983][T18695] veth1_macvtap: entered promiscuous mode [ 538.692281][T18695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.710942][T18695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.753227][ T8878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.754034][ T8882] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.754072][ T8882] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.754107][ T8882] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.785618][T18695] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 538.819947][ T8878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.819972][ T8878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.830428][T18695] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 538.872165][ T8882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.872192][ T8882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.013204][ T5632] Bluetooth: hci4: command tx timeout [ 541.245778][ T1692] block nbd1: Possible stuck request ffff888029127000: control (read@0,1024B). Runtime 270 seconds [ 541.245822][ T1692] block nbd1: Possible stuck request ffff8880291271c0: control (read@1024,1024B). Runtime 270 seconds [ 541.245851][ T1692] block nbd1: Possible stuck request ffff888029127380: control (read@2048,1024B). Runtime 270 seconds [ 541.245894][ T1692] block nbd1: Possible stuck request ffff888029127540: control (read@3072,1024B). Runtime 270 seconds