last executing test programs: 7.151686691s ago: executing program 3 (id=6706): pipe(&(0x7f0000001b40)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x5, 0x0) splice(r1, 0x0, r0, &(0x7f0000002400)=0x5, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd7010ebffffff040000000800090002"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r2, 0x215eb000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r8}, &(0x7f0000000740), &(0x7f0000000780)='%pI4 \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) write(r7, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 6.580212556s ago: executing program 2 (id=6709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x1ff, 0x4) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x7, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) close(0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000251, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000180)={0xff}, 0x8) sendto(r1, &(0x7f0000000300)="3ff88b873eb784f63eecfcadc0421afb498fd21b5d5dd663ccd9840eeab798a84a98f323510b45a00903342e9fe74d664ea3ac7ea73a2e1436d33738050ccf8fb8acb0ca7ad1dcd640ca1986f274576927071e7612e43397c54c6982013f7aa0a929e95551", 0x65, 0x20000001, 0x0, 0x0) sendfile(r5, r7, 0x0, 0xf4f) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe64, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x201}, 0x1c) r8 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0xe64, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000}, 0x1c) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x7ff, @empty, 0x4cae}, 0x1c) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={0x14, 0x1, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0xfffffffffffffe28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 5.614685585s ago: executing program 2 (id=6712): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000100000000000000d2788c00"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x60, r2, 0x1, 0x70bd2d, 0x25dfdbfa, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in6={0xa, 0x4e22, 0x80000000, @empty, 0x81}}, {0x0, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}}]}]}, 0xff9d}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x20000043}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) r7 = socket(0x11, 0xa, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000140), &(0x7f0000000080)=@tcp=r7}, 0x20) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000010000000e0000001000000000000000000000000fe8000000000000000000000000000244e22000bffff00000a00808000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x80c4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x14, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x172}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ldst={0x0, 0x3, 0x1, 0x2, 0x3, 0x20, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000380)='GPL\x00', 0xbe, 0x77, &(0x7f0000001b40)=""/119, 0x41000, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0x24b, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000580)=[{0x0, 0x4, 0x9, 0x8}], 0x10, 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001b00)={'wpan3\x00'}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r7) r12 = syz_genetlink_get_family_id$smc(&(0x7f00000017c0), r7) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x34, r12, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40051}, 0x40008000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000700)={'gre0\x00', &(0x7f0000000680)={'syztnl0\x00', r6, 0x1, 0x10, 0x2e8, 0x12000, {{0x10, 0x4, 0x2, 0x30, 0x40, 0x65, 0x0, 0x80, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x26, 0x3, [{0x7, 0x6, "69f20014"}, {0x1, 0xa, "05a374a1e1890f31"}, {0x0, 0x10, "dac58909088a93087140ebee11a7"}]}]}}}}}) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000001940)={0x0, @multicast2}, &(0x7f0000001980)=0xc) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000001ac0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)={0x90, r11, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}, @ETHTOOL_A_RINGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfff}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000018c0)={&(0x7f0000001c40)=ANY=[@ANYBLOB="08010000", @ANYRES16=r11, @ANYBLOB="000329bd7000fbdbdf25040000001400018008000100", @ANYRES32=r6, @ANYBLOB="0800030003000000700001801400020068737230000000000000000000000000140002006d6163767461703000000000000000000800030001000000080003000100000008000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400020076657468305f746f5f6261746164760008000100", @ANYRES32=r6, @ANYBLOB="0800030001000000040001804000018008000100", @ANYRES32=r6, @ANYBLOB="140002006970365f76746930000000000000000008000100", @ANYRES32=r6, @ANYBLOB="08000300fa0000000800030002000000080001481ec1dd156aa8cab500", @ANYRES32=r6, @ANYBLOB="2c0001801400020076657468305f766972745f7769666900140002006e657470636930000000000000000000"], 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x24008800) close(r10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) sendfile(r5, 0xffffffffffffffff, &(0x7f0000001d80)=0xf770, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r16, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f0000001c00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001bc0)={&(0x7f00000003c0)={0x1c, r16, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 4.801360616s ago: executing program 1 (id=6715): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="ec0600000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000c0060380180000800c00018006000100ffd700000800034000000001"], 0x6ec}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x12, 0x0, {0xc, 0x9}, {0xffff, 0xfff3}, {0x2, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc811}, 0x4000090) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r3], 0xfe33) 4.368245935s ago: executing program 2 (id=6716): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4208010000000000300012800b00010067656e6576650000200002801400120000000000000000000000ffff6401010208000200ac5414aa"], 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00006dbffc), 0x4) (async) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$6lowpan_control(r3, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) (async) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4208010000000000300012800b00010067656e6576650000200002801400120000000000000000000000ffff6401010208000200ac5414aa"], 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x0) (async) 4.283327209s ago: executing program 4 (id=6717): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000540)={&(0x7f00000004c0)=[{&(0x7f0000000140)="cf3c83547292ad3b89f8601c101bb77d3d84a10019c6ad2f0cd7265bf386ca1b1bd4105e3d17f2306fdc6a1daff964427812e2ff3486bec006f9d04854f0e3", 0x3f}, {&(0x7f0000000700)="dc085da8f93fa23488e06fa8ebca6fbe319e16de681ef7ac644907176d501484fc36ca3b2c81cbfefc6aa1366f7fca42b89bfe997483c54f168e7cb973723a95b7668f0f8f845bd4ba1eb78fabf6478d295abddf15abcd74b73a61a721adb478c169336b44328dec1c4f29c27bc4b79b2b1ca4793a85a8450688fb7980a26a2fbc3b08831a3f950ffe9f69ab83efed12ceb99e98571e30abbd0d61f29d5157873966e37fb1e761e7b6c943d7ef422019634cb57bc830bc17ea3e6ac588893a3fc22c65cfbf6e6c4046f6998985c77a", 0xcf}, {&(0x7f00000005c0)="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", 0x118}, {&(0x7f0000000340)="9571d123ccca9a5353f789e40fa2eeff860c000000739632f72574e4da8dce7b120d45b22372f63407be1ff1e91e7f7f688087b1b4b7ae063668e0962a49e79ab50efd43e9159b", 0x47}, {&(0x7f00000003c0)="594d6653af33176c996c4f741a1c3da69b0746c07e0138239b2040efbb6e9f37083eed5c2945bf4546aadd3cbd648592de1d8af1aafae8b53a13b95992f6d2c84c91980955ebcd23838daa30324babaaa31ba31192a546a9587821ecef380c17273ea0c2fc57a8bd400e692a5d96f999fd106ed80e19befdde004f4a2ff6aa21f7d47c8b12dc9cf658b32af8302725c4772a52916fb145b50e8de7c9b87c4dab32e5680234aa6d8b45b0e1080676299b7f13cf3f99dd5bdb8c5afd586ca07e2cd94b8d96603dff316f6b984f90ea69e17343f9c5dc84b6edd487e3d3ce6bed16dd048fd1d55ba46d", 0xe8}], 0x5, 0x1c, 0x0, 0x5, 0x9, 0x101, 0x8, 0x12}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 4.282710424s ago: executing program 0 (id=6718): r0 = socket(0xf, 0x6, 0x7) sendmsg$inet(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)="84b8e7f5aca5c58b1f393eedeb546b8978f32ecb3e5f80af83659f7dc70a2472cf7f2a71f0537271c088c0cb7a599ae941cdeb6d00e63403cd404a4bc05e689cb68a46fe70c1c22025f3342f69cef535fc93f7db798816904f299a368d7198f32e306c3651bc176783790148b844a1dd8dc953789b74418d080f6f18cf5488907a8bf8d16402a58e52faf86c03a9beb960e0196106db1ae9b207bd345274971a63762a2cb59a7fff9860e29bd584540abbf0711f97c6c0d0d96a3b6ef1493090f2eb19631b427081df06acb1b3c5f95d2788b58bd886dc094ab6b0e9c01920704994932a3524064edcdd3a9e442db26207061022cd65181b5dea6bf45acd0fef43bb9c9f117228022f75e6a60007df7cba9ff095ce5f1db39b06bbcf5848bbf57a272e43ee9475855206aa2dd896261e3a2b7be1c14c4d4fb45ececa12a362b2f07d3b6f1c2e3be0e98407489ad0652de4e76e8ae78a7b687f4b839f50954051fa121db25fa6f04275255ec43267e1cfc8095519cc942a8c6257feb9e8f57e74a31e2768765e321c106660d79d36153b09098506e951e5e168e957ba1fba1eb337524c8ea1c49908bc0bf65fb41ee859c51b7579cca427fcab15f84ccdcec384098d7416d1b4f329070199a5e70aea473a56e4a7718df42464573868ec25fff60276f38b29f3d34400985129ae38b732a16f990975c766ff754b304eb953c0620cc06c5902a07e7a373d4a56fd9acd87959a878ac5f119db3ff1f3f1cd8382bf062c1b7840e520ab7e067da0a999ceeace9851d81bd9d3fba896f234a321adb1587ed0b093bf67077da20e0e105ba241b80bb410ea194657ac83266d910934eae6ccdc1b2fac169aa1be386ff4bb1eb84428dd5c11e05574a715a325cf56d9b14ff27b466d3f06eb142222781382dfbf428e8c284eaa61ff5c5ab1213506d3ccc65007f5c8ac710ad49c19c18815ef1a472f2ec616b855e931564284d04c11168a3251c636e30bab75ad5eb0906eac504e5c05108b1341fb38761968f96f9a65d2322849aa171b471f5cc33c11abdf5fd71cd7f96743dd854bbecda49d45521aa9cb9c4fa3f5c6ff5f58e605d20e5e7b527ee00420c37157e572ab3b9f2d2ac073affda2cc3672f8e1eba2a7b7c6e1aa47bcb7f3ff1cee6a612eef3eb9ca0a177f62c286fd2128afd9e33536625584b4b868a19e15acdac5f1e99669dc204be6fd54abc682131c75cc922926757185ef8ad761ab7b4c60b1a15c8d91b7afb098e0726bccf18765a77a52437bbbf67414ddcad43c93bb8eba49e3ed351b7535cf3d7dfea9568a8a4b8464a34bf19b34b7b335daef804314f155583c6956c966ea2d65e28e6c07faca0e8f1b74ebb21cd920e04c1d5b61706e03736747a50fe34f6f76c57b6fbe2f5161994eb79f0faba46f5839119a8ff983307716e3f7305e17b223aa79bd004b9a91421d82c3859f18361e4568f3cbf1721458a4b3d496936708c794b1b813ec78587e1793468a74651658576f30c15bd64f1a548fcdb7bde3203b47e1e7d261ef03b3579d7671fcab87186c384e63209efa0931ef8a22b7907524c1a33e942612023b3f9303aaa8e08085de71b79bee5b66c084f7aaf7308b1ba550a2909bf7deb71efc372b859a7e31314a86a5c4820e3e6d86e69c68a7cc93ae7b68fcfbc20c5d58f2fd90beb6eddbf28ee9c39ce237ceaad1355526861a839050099b96ddb5af8ec730247482aa120ac1f36ec27ba2e0b2b4eacbc5646ccc9b27b95d614c859026eb7ac984cf25defc9e1426d1be8cac13bb83be72db72f4774d01be0c99ce204a389ff8e64ba547e1e9c13112e97df0d3c6eecfd59b2a4a87e57c4cff7766207309352180e7e2c40ed820c5fa0f25ef72e71102e0ef47983ea101874b097a321356663aac1794fff835af24c458acaed158f4e2c88ca5772467102d146280f6e10e04fde99d0a0e5529e167b0eb0b84ae77dfc12e6a1b907e28aba82a94d04709683cbe8ba27847d3994fbf7f06590ca75cb601359d19e1f3b847a8cd745cf274a4e83b211d6035344c9114d7c0b4f5f3c1cf1edba4b44286b810fddf12afcaf8d046a6da1610f2e53bcc55fc477e123d1f7fe0d40c621d7ed7b27ad469f6f4232d70e03fd94237a1d7ba74ec1c95697e5b07f0ff540ca3dda5f59fb11c42f04f5fac1ff2298ea7cf66cd44d2fdee265cb38e685fd0780b296f55c92cddf80d0b48b1a1ebafbc0a96a540ddbc6d7ad987baaf4404d056588a8a48def54b70be3d298620ae855f9fd1503b9080cf3af149f64d9699c4c9b7aa72f2af705fe9efcc531b7a82e1c2c4bd8d5bdb1e8677d89a95e29b9150a6d1a307e2f55329448a9c41bd6935948173e8ee586d0300e3ea9c9835f37b6ec3b38fb48022206e0a0d6444d327fee124324d2c06abc86c6f6524632e0bf3b19385f7d88b253be9c3ef3587c57ac6bc253921f870acec3b78704ef07b3ed76632b64287cb674ddaff9d0e744a057a533d9468057c77fde2a8637b0acad8880c6cf0b20ad4b537f879ee5b7becc6a6ec30fe31c6689281e8ebecc284b4d3a50cad1ef8d802632288ad7cee8cd702eb0ae383cc1cdd1744cebdaac2f6137606587c57315002a22941fda0c5028434132aae53f79eb0199c82f7847ac1e7f8fc207ad6ecd30e482a4eef842ae8ef34e23f0baaa16ba30599ee4fbcb5ba22f016ac2b4aa939d95a5385a7eae1d0b663827315b5aac4cddc047818b671ae449e597d2cc014ea75a3767e33f74102d3e20a0f6ebbe83ed9457acd1ddb6558279bb4a358499a5d591a0d49625074286117a8fdc0e9aed93f3b11466e72671448f4e5e14da461cca09a40bc8382d88bae06e14fad054f92474b6ea6e6a7fac57680a39435314cb0ad4aeb59d41c076445ebf6e841a13d431fab75ebee6caf2b9ac86a5b2fb7b741c348a430b2e3bd092a8fe9b5ff935ac42efeaba09aea9c6e6cac0f4d27615a7f97b1813ac3e1d832d75350488f1e2fecc5eebebfab7bfccdf2838820cd8cf9ed3e6135df7247e327e0d9228ac8493cba17e14518754b37b8514e055a4a341af735d0e391fb5b04675c0ea0d2b7c2efea1796c7cd5f2fa59014bb33d9cc9f3ff2a2c227753756dff7cff324b81cfe10507af573b1707ced8e996ca6d4c7182ddbee49a463bce92e81d3aa7c776716d6f53978a18421fde557c4f3684fce63f190ce926555d00ab4257d7e8866543592b93aa49b24a71f1a0e7e2975a4033dbad0b467b978b44aebcded7461c8c6825d525b76b65bbff880366f399d896e3879c8695a9538db23f474a56085909450af27eeaf841da101d3384702f51b6c411b252c7bd8ab3ea95fe773e7004de28f66d7f795942a9e3eeba20b5f5fbd38412803a2fce737ad06f7e8939970b91efe52617fbf4a20cb35cb98fa85e6cfa9c1223f1d3a6af29563d80fbb3c59e9de1650f70f799fa13bbd5218dd62661c2ae912f28c41d8c56e253129c428e6e22cc43ef00b3f451ff9b118c7f0cb139e8e09d21f98a54462359a65ddc37babb17f6884d1e18737f41f71a35172e956a8c11150b04f8cfe486f03cd9cba46677d057827be6dd30b7d0b42b9f8c4d7fbb527681f075db022ce1be822eef08939e35feb7c93162e35d75419a31369a118b91160e0b76c68bf19ac3321e14e18365d721c12b9047aa103aa43373d698a41d234f61c50c22e6c079f798c813f2851a321bbd362719b22bf52386ed567167b357e2e3f1421e2ef6946a6a3318e0148a15e768547af17e8d5a45d3291b1fef59f70d54016aa24f0fd04893ef627e43be6630386503dc9da05dd31d145bcca8a804a3896e8a990b4628314ef296b2eaaf53a59d5d8e14b0083416af224ad4d48b36e25b27c52411eb866ddd8f8a11256dce8cbc3ea01debdb9ae6d52b62cc9d6f6e6995fb9a2c518334f24d8005f12bc0e6ab0fc6746175a5d771594e258ee1f331d446bca81954843d4eb3a88ebe88f17b437b99afdd061934b0977bb5b975d00fc8dc76addba91f1c0839b77bde61880d0e75619300eede116918ae5d5b66804c164ade04c69cf710e5f68b5bbf1f19608c7b057f55d531327ba870babb5cc54e0db8c87c92b14d70a3e055b4ac8df42b8dc809b8ad83eae61c6dc126a2b8bb7dad83eefa14450c3f999d2d7f2368e8aef20fd2fc62e4291fed8c186f81c00a7277e29b3cc167419ae3c18452cbc176c10b10f8d7e3eba53a16eb6fa89cbebe337625d77d4c882ae8a395386be1d0767b2c187313c9c61eaed3275d37e88e2ff9d0a0ae1246bd1531c867c0ef385b2b40d37916e33416654f0a23db662c62ee6f77da289a81edcc882a93e590a3fd04cf85b35760ac6b441f4ecb32a53ff871e20865751404133972db1e63a360749dc69805fa9f115afb16264d40e60148ed9922097a6a62e575de4e42e452c3c346d7de9221ab357e7dbb4c7572c8cb7a718fe28cf0d07172c6ffb49a97894e5982c405d6fa2b5fe0268f1ae526ffd6282f0a39894ed0449f1eae283a82a2aa088fed3ec9143694247fb0630d63b623308c3800c70c05e3235e10b8b5a01af4abf2163fbe09a4eefd6c7511d12805ca8f2969a50c531706da701f944a045fcd26c4959bdaa0c8fbd9e270bbcca0484b3bd773cf3d732562d9966732b299db7b96e4503245b48aaff70ae85eecb38d87d05fceda31f3affe7a4e968dfcba8e40dbb6840cd5584d4a9a21e3275ceeca752f23f72aad887b7297e1b1fcde5543da9db70eae4705930fdfae104806812030dfd2f76c93a016e0a48ffd63b6433201d22f98a8e87debd008ccf7279c687334b7051b1e9b3a4affb9abcc7ee4f43151ccf5b50b8c3ccde69ab78787304040ff1e694ba08c74c5d47f0c2eb8c250f5516e252d8f9b2c5fbf12a077c6d687de193a54a6281cdddac39b4565a6fe5922d54c9108a3063651eb1465d9c939705b67b9fa0fdef83aac563c6e00657795c483bebab731beb4f09ae1c08c8d5570b708789472198ac4b50e08197c0de94bc3a133dac983a229e6098bf983e35b222b9b76196c32dd7285e1f181feb9e33f8f5f0ea15aefd319d79ba3b45581fda5474cff0f3cb9d442a4c56572c5785fb8d09aeb9a500fadc142319146c4e94a064dd1fa9797af4c594c401511767818e5b97b5c10a6607386d42d55f38a113f2c7fa4f0419772d1730fc9ac80f78b1d2d0c6049868ade75fbe6a643d8fa97a18a3439c3af0e2a80a030e1101d82a5fad3b0b58ce4f1519b1b9620cf85326c09a8624e3f07473709f58f3524f0eebaab294ba16002333849c80359415681eb29b7149d46cc839593e6b7d4a2042a6450b2bea4fa8dffd6d9239a9c7cbb78f58c676bfcb2b8e430708ef99fb98fe8c710082acf9855d33b2db168e98db87c89719f6f042d7beb909fa80d0967aca249837616c79d9c591a3c7261734e76a3cfd1e90a0e8868465742ea20b20bc348af964d627e11949b075a9d4e8eb7e63e822898040c625f698d82c3241bd7f88987732581d4b64ad9dd63d709335afd60633ba67d99db2aeae86423855e6bfc8186cbcd6d4b5b844e6cdb1ebd99eb8fa84479d7923b9440b13856e17e8e9805c5d8ecf554d1e0c24d452013a0109f205599272b048098744194f1a1fc4ab0bce8e8bf4bba446dd7a03fa4e5c598022c287b232e6e02a67b20ce7284c7cd050dc576df5b08d1930bd80fc261cd528c399b5aa4a1b1dd1e462e7c5baef80998ab744b5681c8da11e0487f6cd04e1c303156bf4efe2155143e7de", 0x1000}, {&(0x7f0000001000)="5043ee36f7ad29464bb95361ee1d6f183117f3165ebb9eeddd0b19d7b4154e8d89de15edc1b55967cb8b93fa9f51c338512729850ae104d55db0283ae15dc1fab469833e417ddec4937e73be31ba768ccb0155bebe4a99ec0f7fe128da75fe9c90ac559a743a2bb057c3b360abdf24bbf2902c18e7f3c130a6c4a983e22bf8fe4230cb0f8080d4a6", 0x88}, {&(0x7f00000010c0)="4505f0999130fc55cef1fdf3ac75f79887199ae7c63b52205a87e7ed09660a13ee4b51bd5cf523e4ace28152ee0aa86055a81a2a4bf7218f9a735a83f9eb799215996ca593b1ba60fa566f11384dc80912658aff342dd701edf863e65573eb", 0x5f}, {&(0x7f0000001140)="997e1cfb79ecb077de3b8c007d169174264fc05730d2efbf1d89a9f81575766b7b81c51c65ac0ce9931f731bb7828cbb2c89ec635259995c69e6893d85eb1644464ef7555595a546882c1932f719d702a8405c33ea25b5f60a63b1cee20d5cedbd744f9290f14bd55a74cf066a3c2dc72c3b472345cb7956f5ab0665", 0x7c}, {&(0x7f00000011c0)="cca29b15d17716919893cacc98de4719d5da822fdbafc4b6114ccae812bf0e5af98bffe0e9c094b4310a00156d4dd4f71d3122db4eb084ed46245611f8daa4365d570a7bfbeb28268d414ec6a719b8c2748d891243b4ecfc199e5726a3c2ec4622590604eaaf1c14e211d3a6b32f84a69a0783", 0x73}, {&(0x7f0000001240)="17bd8825c55e5759eddd6566c5003d1fdd5a7f6a142e5ffb303a4996b943c706477b3b6c99e0d3ddf8198cc283a84179f3", 0x31}, {&(0x7f0000001280)="046ad360c7825e94c8fd956d41037ade44ad8c4c740389e2495f1527eb0f44a684045a21e8d2dbfe36cf91df0dd95aaea4baba51fba1cdcfac212036ff91aae6ec780212caec5d7e45c49381c6e8f9ffa1bf895acc2b4a36456d5e175c2934f5e388117fc0f9881a3025f3e665d847f2fa96572cd8e76a9812d3560434ce98162227983afaf0b7ba86b4496dfed53110ce9494e00b06b294beeedca46f4238e0106690d9027fab5bf39a2750869d60b9f1a6895a7a64a198497ca26fccd4f0dacffdeb4d46ce721a574835b5bf9d95b7b8fb84127489963499b48ad20009bb7cd23a56f0e007774c2c00525e7a64426d747a", 0xf2}, {&(0x7f0000001380)="7b8c06f3ae67abb329fc8d5aa4883332a034b70d7acad11466b424ecefe4667560ee032879b8f56797728c179176955fd98d881676361714e4722bfcf8ef7b1a646c5a1a31487e9085b8963ba438d1e270c71d900352f225bfae348fe58e78893668de4362293f8eaf7b1972bd770be78858d423a8bfb8b1b8931b7e200efc960540d712857a898cab60740b2d8e7103da90aaf546bd7cb92bd9fbc7f00aa697e8ad2c0a19443ab8d42fa5dfd5ffd10ed232eedbe233a81dc638e3e6754fd54dcf224771c4113de21e302b858984d1734f3f23c8242c6726de21bac3e1bdf9a73f5a72fb4109c969f1a7", 0xea}, {&(0x7f0000001480)="49590a92bbb90fe8650fc0472d118dca14fb273e5e82c728ec7b8508a591331b93f1345e09", 0x25}, {&(0x7f00000014c0)="6353a8ccc854b4fe66757a55fa3abbf72ae7e6f67788cb9f1f680d10687291a5abcfb3f0bd38ea6fea6373c440528954961372944e86", 0x36}], 0xa, &(0x7f00000015c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x68, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0xe6, [@dev={0xac, 0x14, 0x14, 0x2c}, @remote, @broadcast, @remote, @multicast2, @loopback, @empty, @remote, @rand_addr=0x64010100]}, @lsrr={0x83, 0x7, 0x9b, [@rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x42, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}, @private=0xa010101]}, @generic={0x83, 0xe, "64692fccfc5808775b3af990"}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4c, 0x11, 0x3, 0x7, [{@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe8eb}, {@broadcast, 0xc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}, {@multicast1}, {@rand_addr=0x64010101, 0x877}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0x929}, {@multicast1}]}, @rr={0x7, 0xb, 0x98, [@multicast2, @multicast2]}, @end, @ssrr={0x89, 0xb, 0x57, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x28}]}, @cipso={0x86, 0x40, 0x2, [{0x1, 0x4, "1f25"}, {0x6, 0xd, "eb9da283cabbb6e9ebf2a9"}, {0x2, 0xf, "503d9568c59cf981186a50e58f"}, {0x5, 0xa, "5c3bcc1ea8ee21f5"}, {0x5, 0xa, "61fadaee39401e08"}, {0x1, 0x6, "438c0bfb"}]}]}}}], 0x150}, 0x20008000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001780), r1) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001800), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001840)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x34, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc0ac}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000019c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001b40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a00)={0xec, r5, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_MESH_SETUP={0x94, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x3}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_IE={0x71, 0x3, "3009073d556c67fc55a64906a8d7c1c7d0f08771c1a64285a175d323d61848c645e7f1dea01f588c038b35c696c68253e57f85af439458b1dda23ddc5c21087b4e28044175607d311b43f617fe9fb75aa41a8ac80db1701edab47cf353a2dbda35f8ea3dcc6780cf5f1a9dad95"}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x200480d5}, 0x20000001) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001bc0), r1) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x3c, r7, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40008) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x20, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc080}, 0x4064) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = accept4(r8, &(0x7f0000001e00)=@nl, &(0x7f0000001e80)=0x80, 0x80400) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001ec0)=@base={0x6, 0x6, 0xffff0000, 0xfffffff7, 0xcb6, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000001f40)) openat$tun(0xffffffffffffff9c, &(0x7f0000001f80), 0x402400, 0x0) sendmsg$unix(r10, &(0x7f0000002580)={&(0x7f0000001fc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002500)=[{&(0x7f0000002040)="310656c76b08ddb4174534f29fa6fdd21a2f18a316941723ca493e7648f7e45ff26ba45a8a0f67d1c521c6960a675e3dde79a42e8dda4c3d1c51ae5631a095cbb65545fc23f16037eee32f0344ac50ca034558c6d310c9b925795557912a73c8dbd9d68c95f6fde4ab91cb548c06fbb828ccb5dda57f7041790f8767a6a887b559b7f0ede0143326e0b3c839a4d2fa6e6357688eea37d34894e4d6fbd728c91f486756d8a988b3b93b0b8aed12f92c8423894e0675702ae5c81c9723087ff3", 0xbf}, {&(0x7f0000002100)="045163a17e3fedccd47b4b427b97bdc56d96a4c8dafaee12c340839a35389d006d4a70d3d3e9a876e5e7cf14209a30966b926f8864a072b86d4f4919c9d6619d4b8cc776f13ee26163dd95093c07bffb3e83092b3d5922b3575b2818dfd10d9249e017124c0388a989c0a813bab1", 0x6e}, {&(0x7f0000002180)="84f008ce9913ab19f518c9faa9c279d6ce51bdd9020b87e1921b2c", 0x1b}, {&(0x7f00000021c0)="2b210f6a84ea28ef13a0fd26b63c9f5d5267d76c4d9475226c3a147a5a75d9e2bac2507cc4a26e0a9d50b8bc9a7744524f1c3abd7c9f6b49873a7f25b1980c09ce6821a7d57d76e010d49d71270ffade384cd8374bd14911b7ae6aa81db0be764f4d0941358267e252bb34c7c2a6aa12fbed581539b81f2939ab410b067e05543b860bd319635653aa7d52d2decb9d076072d9026d8e5fb54b3b5700", 0x9c}, {&(0x7f0000002280)="6f98d811242d0aa91f8881eebd75bc99c8b472cbbc175feae735ff753abbfef86970", 0x22}, {&(0x7f00000022c0)="10ed42729a9e1f73627ad72e202f7892ca0733d3ff430daff614e9d26dbf6e65ef646d1d5dbece34331cf254ae994f8909a5bf15b32457bc610c15b33f7597ea3aa97960588083f353ec", 0x4a}, {&(0x7f0000002340)="f28c174838026e24053fa3248956ce76f67e6c84705fbe60e2820b5eba684586154c60e4956790d1345a1f1ad856bdf67eaa140ababcbcf8de6b1fba7c4e624fca8b13070c6c5a0f14194ac2f1133f36ff20e80004f7c3670e3f951ce68c974ddce2003f192ef9ada7473bc27bcf76c7d993d8867a322fb0a152ea93bbd7bc44286720073f440a1be32224cd4c2ff46fee5d11d6b522448b47127fc90a848ac5718199d8e645b5a97694e7e9fadf2217bbe73be7fd27077e5808f52d3ad7666ec10605c850db0e4615e961eefa389d9cb6d4416dc4f645973fc7a8e42eb1e940b8304138d90ce303458de355cd4c89bf4008", 0xf2}, {&(0x7f0000002440)="187783026e7185376eb3ffcb3c0edb798cdbc335168d305bab00c775fcb855a15bb5c5802d5883f596e918560e91b987f90848218a96c610abd6600a05542e7da913aac64c241ac39bd094c5cf68ee0cc5439d8afa98f33c1879835e3510fd30fc7ffa0d3acf86614e65a70e6c6d7d752763fe7c899a0af5c8465a9d59a6a2ad24cb4a6563e2b306cd1f9201970f78f1c4b9692fc704829fc5a52565cf3c9d7d1f55deb9554934c82b", 0xa9}], 0x8, 0x0, 0x0, 0xc841}, 0x10) setsockopt$bt_rfcomm_RFCOMM_LM(r10, 0x12, 0x3, &(0x7f00000025c0)=0xa, 0x4) bind$inet6(r0, &(0x7f0000002600)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2eddf711}, 0x1c) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r12, &(0x7f0000002780)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002740)={&(0x7f0000002680)={0x8c, r7, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:selinux_config_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004081}, 0x10) getsockname$packet(r10, &(0x7f00000027c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002800)=0x14) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000002840)='xfrm0\x00') r14 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r14, 0x84, 0x6b, &(0x7f0000002880)=[@in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @empty, 0xfffffff7}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x4}], 0x80) bind$xdp(r10, &(0x7f0000002900)={0x2c, 0x4, r13, 0xc, r9}, 0x10) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002b80)=@bpf_tracing={0x1a, 0x11, &(0x7f0000002940)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10000}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}], &(0x7f0000002a00)='GPL\x00', 0x19, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000002a40)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000002a80)={0x4, 0x6, 0x10000, 0x7}, 0x10, 0x246a7, 0xffffffffffffffff, 0x8, &(0x7f0000002ac0)=[r11, r11], &(0x7f0000002b00)=[{0x5, 0x4, 0xe, 0x8}, {0x2, 0x4, 0xa, 0x5}, {0x4, 0x4, 0x10, 0xb}, {0x0, 0x2, 0x10, 0x3}, {0x1, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x5, 0x4}, {0x5, 0x4, 0x6, 0x9}, {0x0, 0x3, 0x10, 0x5}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002ec0)={r15, 0x0, 0xd5, 0x81, &(0x7f0000002c40)="c34294edb4368884da59b10ced220160cc532e8369c3984824c688dd0ec664e5a1e2221cc29a7c0057ab8ec5942422d1db802800c6678adc40d0a3e5612122cb3d42520d82e368e431c6ad55255b464f7aa67071a46b738a5417abccbd22777db51b3c5a055afe06342a6b951d95449b6c0dd5a202205a93c5f65b597e2c4efebd4022a19a70b1e32a1ef826b04799cb3fb068c6ca008caa19c94a83f430d17129087e65a0fb5f49e099b231d8a2bec4fc55ae4c01161b738922321226215fb644ae2b0806c2a023580e2cf46a748d213c856f4e06", &(0x7f0000002d40)=""/129, 0xbe, 0x0, 0x2, 0x63, &(0x7f0000002e00)="8297", &(0x7f0000002e40)="f30262adb122ee8a7eee9b0d6d42640be1990b25491f17078628e91ecac4ec12c70750bee6371200f39773987f779826041f85b95c2c78f7827200c26ab25f0c5f654fc44424b25a7a252d02c3c1248ca4a997e69ca3fe9fb45aeb5a84317a855f7c5a", 0x7e76695c3e1eced, 0x0, 0x2}, 0x50) 4.226853201s ago: executing program 3 (id=6719): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000791010000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) (async) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x4008054) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x40080) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) close(0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r8, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0x17, 0x4, 0x37a2c9c8, 0x6, 0x9a0b, r8, 0x78a5, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0x17, 0x4, 0x37a2c9c8, 0x6, 0x9a0b, r8, 0x78a5, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r9}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r10}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000200)=ANY=[], 0xe1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r12, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x100, 0x14, 0x4, 0x70bd2a, 0x25dfdbfd, {0x10, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "0b6278fdd480139eb41387cc3b9f0afb53e9f17a8cab10a03f1d4d4955971daca0bcf0655f07babc2be44716aedbd339f4e2444168f890819379e9bc994bb467a3d054ee725858a5834d950ef2dc42a0c44dbd4d3bdafc31b9bb3f0634297ad9c8a851585c6bf8e9609dd4927603ee3465a8bcbe26f18cb2a1d80851dc112c58cf37f43b7efb2bc7cb1e5732996ef8c4f643d4bc28881e32ad682f12753e129fb2e68ac2f9bbaf6c582b92c91f095b94b03d6a24327b503cb9a812938b3fd9d6f52812f81eaabfb19eaff1ea4e3443164d92e9b5b46d894ea4b9fc94466d93926b837b0f5c6499"}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x4801) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r12, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x100, 0x14, 0x4, 0x70bd2a, 0x25dfdbfd, {0x10, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "0b6278fdd480139eb41387cc3b9f0afb53e9f17a8cab10a03f1d4d4955971daca0bcf0655f07babc2be44716aedbd339f4e2444168f890819379e9bc994bb467a3d054ee725858a5834d950ef2dc42a0c44dbd4d3bdafc31b9bb3f0634297ad9c8a851585c6bf8e9609dd4927603ee3465a8bcbe26f18cb2a1d80851dc112c58cf37f43b7efb2bc7cb1e5732996ef8c4f643d4bc28881e32ad682f12753e129fb2e68ac2f9bbaf6c582b92c91f095b94b03d6a24327b503cb9a812938b3fd9d6f52812f81eaabfb19eaff1ea4e3443164d92e9b5b46d894ea4b9fc94466d93926b837b0f5c6499"}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x4801) 4.089045879s ago: executing program 1 (id=6720): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x5) pipe(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x101) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x8000200f}) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 15) 3.699217196s ago: executing program 0 (id=6721): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x6, 0x0, 0xdad1124f55525050, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcd8000}, 0x94) r1 = socket(0x11, 0x3, 0xd) accept4$unix(r1, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0000000206010800000000efff0000000000000900020073797a310000000005000400000000001400078005001500090000000800114000000000050001000600000005000500000000000d000300686173683a6d6163"], 0x5c}}, 0x4004804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r5) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x7ff]}, &(0x7f0000000080)=0x6) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x607, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1d, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x10, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0) 3.534095117s ago: executing program 1 (id=6722): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=@newchain={0x620, 0x1e, 0x1, 0x1000, 0x7ffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x4, 0xe}, {0x10, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x81}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x10174}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff1, 0xfff3}}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @filter_kind_options=@f_u32={{0x8}, {0x5a8, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x101}, @TCA_U32_POLICE={0x410, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8000, 0x5, 0xfffffff0, 0xd0, 0xc, 0x100, 0x80000000, 0xffff9ab6, 0x8, 0xb1, 0x9, 0x0, 0x4, 0xffff, 0x300000, 0x7, 0x8, 0xffffffff, 0x8000, 0x14, 0x37cf, 0x9, 0x9, 0xd4f, 0x3, 0x80, 0xfffff001, 0x6, 0x2, 0x9, 0xd, 0x5, 0x3, 0xfffffffd, 0x0, 0x3, 0x1, 0x3, 0x58, 0xe0, 0xfffffff8, 0x78be, 0x7b2, 0xb5, 0x6, 0x9, 0x2, 0x6, 0x2, 0x80000000, 0x9, 0x4, 0x7, 0x2, 0x38, 0x8, 0x6, 0x7f, 0x9, 0x0, 0xfe1d, 0x48, 0x0, 0x5, 0x400, 0x6, 0x5, 0xd43c, 0x80000002, 0x4, 0xfffffffb, 0x101, 0x10, 0x7, 0x6, 0x8, 0x7, 0x0, 0x7fc9, 0xdc, 0x0, 0x0, 0x3, 0xbb9d, 0x5, 0x3, 0xfffffff9, 0x8, 0xfffffd99, 0x6, 0x1, 0x2a00000, 0x4, 0x0, 0x101, 0x1, 0x10000, 0x8, 0x10001, 0x1, 0x101, 0x7c, 0x5f, 0x85, 0x2, 0xa5, 0x0, 0x4, 0x80000000, 0x80000001, 0x5, 0x6, 0x4, 0x1, 0x7f, 0x9, 0x1, 0xf, 0xffff, 0x8001, 0x80000000, 0x6, 0x8, 0x1751, 0x9, 0x7, 0x28, 0xfffffffa, 0x6, 0xd, 0x1, 0x7, 0x9, 0x7, 0x9e50, 0x29, 0x7, 0x8, 0xfff, 0x3, 0x2, 0x0, 0x1, 0x2, 0x4, 0x538d3843, 0x1, 0x1, 0x3, 0x6, 0x3, 0x5, 0x8, 0xf47, 0x0, 0x0, 0xde8c71, 0x4, 0x1c2, 0x1, 0x7fff, 0x0, 0x3b4, 0xe4, 0x1, 0x3, 0x1, 0x7, 0xa64, 0xffffffff, 0x2, 0xfffffffe, 0x800, 0x14, 0x2, 0x3, 0xfffffffb, 0x4, 0x7fff, 0x9758, 0x6, 0x8, 0x5, 0x0, 0x2, 0x3, 0x1, 0x9, 0x0, 0xfff, 0x3ff, 0x2, 0x1000, 0xe329, 0x0, 0x1, 0x6, 0x10000, 0xc, 0x6, 0x6487, 0x7ff, 0x6, 0x7fff, 0x800000, 0x9828, 0x200, 0xffffffff, 0x0, 0x3, 0x7, 0x5, 0x2561, 0x9502, 0x4, 0xc, 0x1, 0x2, 0xa81, 0xb3dd, 0x38, 0x9, 0x0, 0x101, 0x1, 0x66d4a6a9, 0xa, 0x8, 0xfffffff8, 0x7, 0x7, 0x9, 0x5, 0x5, 0x0, 0xfff, 0x2, 0x789, 0x0, 0x0, 0x4, 0x5, 0x3, 0x7, 0x9, 0x9cc, 0x7f, 0xffffffff, 0xa7e1, 0x1, 0x94, 0x5, 0xfffffffb, 0x80, 0x5]}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0xd2}, @TCA_U32_SEL={0x184, 0x5, {0x5, 0x61, 0xd4, 0xfff9, 0x9, 0xb69, 0x5, 0x0, [{0x9, 0x10001, 0x4, 0x9}, {0x86, 0x8, 0x7fff, 0x3}, {0x81, 0x4, 0xc77, 0x8003}, {0x5, 0x94, 0xfffffffa, 0x1b40}, {0x3, 0x5, 0x6, 0x4}, {0x9, 0x0, 0x80000000, 0x10}, {0x8, 0x9, 0x40, 0x101}, {0xa, 0xdfbe, 0x3, 0x8}, {0xffffff62, 0xfff, 0x3, 0x2}, {0x0, 0x8, 0xfffffffc, 0x1}, {0x68b, 0xf123, 0x7e0b, 0x7f}, {0x80, 0x4, 0x8001, 0x1}, {0x400, 0x3, 0x6, 0x8}, {0x0, 0x4, 0x4, 0x3}, {0x0, 0x10001, 0x3ff, 0x1}, {0x3, 0x98a, 0x3, 0x1}, {0x7, 0xcfe2, 0x0, 0x5}, {0x9, 0x0, 0x2, 0x6}, {0x22, 0x7, 0x7f, 0x1fc}, {0x8, 0x6, 0x5, 0x592}, {0xfffffff3, 0x400006, 0x2, 0xe3a9}, {0x800, 0x8, 0x100, 0x6}, {0x8, 0x0, 0x6, 0x7fd}]}}]}}, @filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0x9}}]}}]}, 0x620}}, 0x20044000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08009f000d0000000800a1050b000000080026006c09"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005d090100000000007b0000000000000018010000646c6c2500000000002020207b1af8fb00000000bfa100000000000007010000f8ffffffb702000008000000b703000068030000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.390379663s ago: executing program 3 (id=6723): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048855}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) accept4$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000680)=0x14, 0x800) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r6, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5dfd}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040084}, 0x4004000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05008100000008000500", @ANYRES32=r5], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e24, @broadcast}, {0x6, @broadcast}, 0x5a, {0x2, 0x4e24, @multicast1}, 'wlan0\x00'}) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="1c0012800b00010062726964676500000c000280050007000600"], 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) 3.279262771s ago: executing program 4 (id=6724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000180)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYRESDEC, @ANYRES16=r9, @ANYRESDEC=r4, @ANYRESOCT=r4, @ANYRESOCT=r1, @ANYBLOB="931e5e1a15c616bcb9f056f4d69ee80f846de1d1e21b76251d1f34721494bf2363ca7b62e3041682fb2d31476c22249bd13cf6b5dca96cc8aaf7d4e9ae952b7e9c33ff59aef55d6bec7f6599d3dd9abea962b4a7a0232b9d260dc5c2bbc9d95fb99aac653aec73a9f83a9d245d8eee5067d75caec3443c32bca37016ae058a00be17189426a2e7da7c2ef72d927acf136d1cecbc8dcaa54a11bd16009ab81d12e837ebf57d4407820afc995f7c0416e5fe2d0be25ffc1e7a9342a4e4e36537af5a92820aa06689ed1fc382d7fd1a5ab2a800"/223, @ANYRESOCT=r2], 0x44}}, 0x0) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, r10, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}}, 0x400400c) getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000600), &(0x7f0000000640)=0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r11}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000002c0), 0x1006, r11, 0x0, 0xd88d02a0}, 0x38) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000380), 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000180)={{r2, &(0x7f0000000000)='nl80211\x00', 0x8100, &(0x7f0000000080)={@_ha_fsid={[0x4]}, {0x7, 0x1, 0x7, 0x488b}}, 0x1, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)}, {[0x8, 0x800, 0x38000000, 0x1000]}, 0xffff, 0x2c, &(0x7f00000005c0)=""/44}) setsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f00000002c0)={0x0, @local, @multicast2}, 0xc) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd2b, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="18000000246837f73199aee6fdb9291b120000002d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115ad", 0xeb}], 0x1) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014000200"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) 3.222075496s ago: executing program 2 (id=6725): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000260000000800000002"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x9d}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000380), 0x0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000e40)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x8, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x20, 0x7, 0x101}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000f00)={@initdev, 0x0}, &(0x7f0000000f40)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e80)={0x24, r6, 0x331, 0x70bd2b, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x26040001}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000004280)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004240)={&(0x7f0000003ac0)={0x764, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x7c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_VALUE={0x40, 0x4, "ef94597a9adc9a5b9e2a19df7162b137c8084d852ba800f524d010c8fd35b4f4657407755e3b99dcfd02c91ddbd710930edb8beb989b10932bea5365"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x48, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x60}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ')*[R(:@!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'rpfilter\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4bc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8d, 0x4, "5889710cfb6f63337d7c8813b01c0e2ce7edb19a7ec5dba70a5d85b95f56cc6522a97f009f44a48918487629093167be4f36a1533e2f2415c015fca3c3e348df1aa77b3a67c64c54d29e4a00a2e634c604cc82629d6831c470f7f8a1d39d27c36d796c5b48a40c7610c533acc0bbb8f0d4182d82cd9752772b4507a669fd0fb62bc75c4967b99f811b"}, @ETHTOOL_A_BITSET_MASK={0x1c, 0x5, "0cd05a9da99d81a8d1960fdc46cab9ec96d39f510f2ef09b"}, @ETHTOOL_A_BITSET_MASK={0x38, 0x5, "cf1f0554d4951fa119633d11c0ff1da2eb15f3249b40365f3e6a48047371a71c9365056843d336b3990005f397eea9d61c774272"}, @ETHTOOL_A_BITSET_MASK={0xdb, 0x5, "eb5025a574bf3434ab601a1cfaf9fc0535f32f48587c2d54e3562431316c6fe284e57e2c17b25ee08023ea24118b616e3147953d21d13a673a134a715ee0dff01fec6cc2bb296b6c22f87c722cb8a16b2f9333c967dc7da4377b1b22fee92fcb58c3db895533fc4017912f0d32b5ee86028bbeb129e5e291b370f48729d228ab566c78d90da67b7466cc4498335faf716222d83b420d2d40ab79c06f1187f2ca1c5ae25004bb016acd76b5d65a73248f68b65a1f48fd5d7dff626cf43cc70584b0dab1eaf50dcda9bc5183cb11bb6c35edb6358ffe9ab2"}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '*-b{(#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x28}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'netpci0\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'freezer.state\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '}$$\\]\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'CT\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'l2tp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '+()/*-}-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf67}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xe4, 0x4, "f2025ede4b60548b9bf7a4ea6984d2258f9f354ca45896e4cc6b54d16fcb39af8876d3ba24ca5578e579c50b8b98052a94073faa66f545fc696e77a5b0d2d005f13fe39ac9ac27b231e9079a96c8178aebc199b00fdf858306d69d8f328b710e1da3b3074efd4ced0f0a78c9e3feea32e49e61a17f8fa983c514c86a104b699abc35a39cac2e22c311806fe6dfcdbd2277ad5ba5d095da128378fdd9e232ccbd74ffdfc218ac67ab0418fedd0d04cb66bcabba10291b73b48324a52ca8c10520b82940a3c0e59476540ea1bb5050366d81e1f939079b5c5bcef03ec2282a051f"}, @ETHTOOL_A_BITSET_VALUE={0x103, 0x4, "1c51f65693597388b34e0bb109635f100cbb48045bc164daf253eb31aeef1271c298bc2d5f1282905505cae80f2c8807b2d857adb21020563a08b48e3ae807126f217ede843512e570e1a880a9b295ce17f4ad024b7fe821fbe90f69619305d348336be5a5206381e98c9a169dae1bb5f60f282bb6d56f707d848b6846ecf32016d237bee22bb72213ca3eedb18a382ba38f53db2bc7c99a214a54fba0517e3825e246d2c495477e4dfea73a870e5247a2d7d9d53f4dad44140afdf4888fca397fb5b615a55256c10717f44ffaf8b8e18940b65e1a78e3c1bb5314ff4ac996c1bc76f08bc6bf4eac4019f21a6e34b23985b6065afc4f8b0604289fbb456c1b"}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x150, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffff204}, @ETHTOOL_A_BITSET_BITS={0x144, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, ' @{D]^\xf1^,\\%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '%pi6 \x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'CT\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '),:^]^)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'l2tp\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '%pi6 \x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '+:%@%+\'#@^-#(\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x764}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) pipe(&(0x7f0000000a00)={0xffffffffffffffff}) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000005800)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000a80)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x40}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xc}, @ldst={0x2, 0x2, 0x4, 0x5, 0xa, 0x20, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xcd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x280000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000b40)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000004700)=""/4096, 0x40f00, 0x50, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000005700)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000005740)={0x4, 0x2, 0x21, 0xc7dd}, 0x10, 0x8cd0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000005780)=[{0x0, 0x2, 0x2, 0xc}, {0x5, 0x4, 0x1, 0xa}, {0x2, 0x3, 0x8, 0xc}, {0x4, 0x2, 0xa, 0x7}, {0x2, 0x5, 0xe, 0x2}, {0x2, 0x1, 0x10, 0xb}], 0x10, 0x1}, 0x94) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000058c0), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000005980)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000940)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit, @map_fd={0x18, 0x7, 0x1, 0x0, r9}], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, &(0x7f00000009c0), 0x41000, 0x10, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x0, 0x4, 0xfffffffe, 0x3b51}, 0x10, 0x2040d, r11, 0x2, &(0x7f0000005900)=[r12, r0, r0], &(0x7f0000005940)=[{0x5, 0x2, 0x2, 0x6}, {0x3, 0x1, 0xa, 0x9}], 0x10, 0x7ff}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x0, 0xb, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0xe8, 0x130, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e24], [0x1, 0x0, 0x43, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x41, 0x0, 0x0, 0x0, 0xfc]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x24000000}, 0x440d0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r13) recvmmsg(r13, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)=""/197, 0xc5}, {&(0x7f0000000880)=""/138, 0x8a}, {&(0x7f0000001640)=""/4089, 0xff9}, {&(0x7f0000000780)=""/224, 0xe0}, {&(0x7f0000000340)=""/145, 0x91}, {&(0x7f0000000180)=""/118, 0x76}, {&(0x7f00000002c0)=""/115, 0x73}], 0x7}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2062, 0x0) r14 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x60, 0x12, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0710100002180000ffffffff00000000"}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x12, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018490000fdffffff0000000000000000b7080000000000007b8af8ff00000000b708000090ffffffa100000011f40080010001f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/108, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000003a80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003a40)={&(0x7f0000002640)={0x131c, 0x13, 0x400, 0x70bd28, 0x25dfdbff, {0x10}, [@generic="d6e8b14bd444efaa86c228e1a367e058aa7394cca30defbdc2d44ed63ff5cfd5b29bc2527c3bcc15419bb7d53c993ae3fbc6f04aebfeb5e326ed1a94b15e5f50df53c0f16c51d109fb8ff8a3a0db31f45fa9c4f3efac62152864863fc87e0aa8b4cd2b5084ab09d5ba4309dde237d9fdfe35868a2d78186e6abfa1d1cf94f22c72ab990e577bbc6f9f2b4987728d270e22f4b6277b61451090a3d89ec2969fe93c323d3267357dfcfe", @typed={0xc, 0x8f, 0x0, 0x0, @u64=0x5}, @nested={0x4c, 0xac, 0x0, 0x1, [@nested={0x4, 0x115}, @typed={0x3e, 0x82, 0x0, 0x0, @binary="5f7f96daefe70eba68ceb4b78749e21a0b54e99aade67250cd5653e4da4b1aade88fa18904b2d6a1244ca6fbe54d2b14b845f14a51fbbbbff795"}, @nested={0x4, 0x154}, @generic]}, @nested={0x1c, 0xa3, 0x0, 0x1, [@typed={0x14, 0x157, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x28}]}, @generic="48a3a84486b5948a0581ed58af44c98702ec10dc60903362b18ba6f9fd94d5f42c916a9352569bebb44765d446c71fab80435680de893cb1288576a593420be35140747054ce36b63642e0cee03ac17aa904557ff5ee1fb21fc5e769b1fbf2cc9f2b0f7e448b2b9a33942f6a675c8dc474a59d48c034351b30da36801734b7fb4abe48fea1618ec6ae5e9f124cad4e", @typed={0x8, 0xb6, 0x0, 0x0, @ipv4=@multicast1}, @generic="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", @nested={0x154, 0x56, 0x0, 0x1, [@typed={0x8, 0x15, 0x0, 0x0, @u32=0x4}, @generic="65dfa36809e43678ecaceb787da3108b32998a3b71e1f746c521dbfe4ef9d8628a072269197afdb21af52c", @nested={0x4, 0x3f}, @generic="5ee4d0582e758ca4e6b4e9a8fc3346d72b4c498ae8fa44f2b37812bf8df7b989c7eb95c6955e919bfe9672233199af6b17954f06c3a704b845c714d206c07543a20e6a8fcfec4d06ae0a240541c9b0ccaeea154fcf69a2ee6c8d22598868b42cccf9ec2dc323a8bbbdf6c072d079cb01fae2546563a1531ac6bd48617eee2c7ba3a8bfdcccad7165a4c60e064a5edf6ddea8", @typed={0x8, 0x84, 0x0, 0x0, @u32=0x9}, @generic="9ec40d919f69ab818570433a996cabccce1bceffb60b5c008cf316935203b03ed8f3f4542c6d3f9953d6a96e65d519725af33a0ee90a213df81262684eb6512965c35393aa1b88979a3b880f0a4aeccefc37962c7b8f747c432efac2c8a4d4c2bc01fa6f99e54a446331bdc835070fd15c1f515aa7fc33f65be7106ebdb143"]}]}, 0x131c}, 0x1, 0x0, 0x0, 0x40}, 0x64000000) getsockname$packet(r10, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c00)=0x14) sendmsg$nl_route_sched(r12, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)=@gettfilter={0x5c, 0x2e, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r15, {0xc, 0xc}, {0xe, 0xa}, {0xd, 0x4}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x25f}, {0x8, 0xb, 0x74aac364}, {0x8, 0xb, 0x88c0}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x28050}, 0x8004) openat$cgroup_freezer_state(r12, &(0x7f00000009c0), 0x2, 0x0) 3.174565165s ago: executing program 1 (id=6726): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080), 0x10) (async) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000004e200000000000000200000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffecff00000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000004000000000000001000000000ad0000000000000000000000000000000000000000000000030000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200040000000014000e00fe8000000000000000000000000000bb"], 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000002580), &(0x7f00000025c0)=0x8) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) r7 = socket(0x10, 0x3, 0x8) getsockopt$SO_COOKIE(r7, 0x1, 0x39, &(0x7f0000000300), &(0x7f0000000340)=0x8) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='\f#\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf2508000000180001801400020076657468305f746f5f7465616d000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040020}, 0x64100) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r6], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) (async) ioctl(r5, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f00000000c0)) (async, rerun: 32) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000140)=0x56a4c5c) (async, rerun: 32) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x96}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "31b5"}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x110}}, 0x0) 3.070533178s ago: executing program 0 (id=6727): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2}, {{}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5, 0x0, 0x100000002}, 0x6, 0x40000000, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x2040}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000600000000000000000a0030"], 0xb8}}, 0x4000) 2.318832375s ago: executing program 0 (id=6728): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[{0x10, 0x11, 0x2}, {0x10, 0x112, 0x3}, {0x10, 0x1, 0x5}], 0x30}}], 0x1, 0x4000040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003cc0), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003e80)={&(0x7f0000003d00)={0x18, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x8) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x12, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) 2.150211562s ago: executing program 3 (id=6729): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 2.038599009s ago: executing program 2 (id=6730): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x3b8, "000000000500"/952}, &(0x7f0000000400)=0x3e0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, 0x0, 0x0) listen(r7, 0xfffffffc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r9, 0x7, 0xffffffff, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400fbffb7030000000000008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xd}, 0x94) 1.867112785s ago: executing program 4 (id=6731): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000001000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.76726476s ago: executing program 0 (id=6732): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x5) pipe(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x101) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x8000200f}) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 16) 1.767064446s ago: executing program 1 (id=6733): socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x400000000000000) 1.644040117s ago: executing program 3 (id=6734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000005640)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="1400000000000000290000000be40000fffff9bb00000000"], 0x18}}], 0x1, 0x18000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r9, &(0x7f0000000480)={0xa, 0x0, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="850000002f000000d7000000100000009500000000000000423d19f1e4e058f160906b507e5120a0425f48f9550dcf76fc596696e6f89a4a2b1d29eadfdabd5217ba2d02d98d17b488d5437e04555f3dc719afc000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) 1.236797032s ago: executing program 4 (id=6735): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000020800130000000000080014"], 0x4c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000f3ff0000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0x5}, 0x94) 1.183119427s ago: executing program 0 (id=6736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) close(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r2, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r2}}, 0x1c) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x7}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={r4, 0x10, 0x10}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xfffe, 0xfff3}, {0xc, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6d8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newtfilter={0x2c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0xb9580000}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc804}, 0x2) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000ffff000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) readv(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/121, 0x79}], 0x1) r10 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0xd, &(0x7f0000000040), 0x4) sendmsg$kcm(r10, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000) listen(r10, 0x0) 1.066174248s ago: executing program 4 (id=6737): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x72d, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (fail_nth: 2) 955.834731ms ago: executing program 1 (id=6738): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000100)="3c0000003b00050001000000000000000a01000025000100534d432d425046544553542d554549442020202020202020202020202020202000000000", 0x3c) write(r0, &(0x7f0000000140)="380000003b00050002000000000000000a01000024000100534d432d425046544553542d5545494420202020202020202020202020202020", 0x38) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1e01}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty=0x98, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x5000, @loopback}, 0x10) listen(r1, 0xa) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x5000, @loopback}, 0x10) accept(r1, 0x0, 0x0) write(r0, &(0x7f0000000200)="140000003b000103030000000000000004010000", 0x14) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdc02, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4818}, 0x48010) 696.603851ms ago: executing program 2 (id=6739): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@empty, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0xffffffffffffffff, 0x0, 0x10000}, {0x401, 0x9, 0x70b}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}}, 0xf0}}, 0x24000058) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r7, 0x25, 0x11, @val=@netkit={@void, @value=r4}}, 0x1c) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB="3c20000010000304000000400000000000000c6c3cc0987c0f8aed530000", @ANYRESDEC=r1, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x4000010) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180000000000000080000000800000000700000010000000020000850c0000000a000000030000007f0000000300000000000000020000000b000000050000060400000004000000000100000b00000008000000010000000f000000000000000200000067918ce91ce5f66d01000000020000000b0000000000000c02000000020000000000000e01000000010000000500000000000008010000"], &(0x7f0000000940)=""/75, 0x9f, 0x4b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x9, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000001000085200000040000001869000003000000000000000100000018370000030000000000fa64b0e2080000006d9830000b00000095000000000000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x65, &(0x7f0000000800)=""/101, 0x41000, 0x3, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000a00)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0xb, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000a80)=[r1], &(0x7f0000000ac0)=[{0x3, 0x1, 0x8, 0x4}, {0x1, 0x1, 0x4, 0x7}, {0x1, 0x2, 0x5, 0xa}, {0x1, 0x5, 0x7, 0x9}, {0x3, 0x5, 0x5, 0x8}, {0x5, 0x2, 0x1, 0xb}], 0x10, 0x6}, 0x94) r10 = socket(0x2, 0x80805, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x1536ef9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x7a, &(0x7f0000000400)={r12, @in={{0x2, 0x4e24, @private=0xa010104}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f00000002c0)={r13, 0x9}, 0x8) recvmsg$kcm(r10, &(0x7f0000000400)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, &(0x7f00000003c0)=""/11, 0xb}, 0x21) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001ffff008500000095000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x54}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000200)="84c17ab1025ce32b1301ff8ba83303e82c29bc", 0x13}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000840) 241.767692ms ago: executing program 4 (id=6740): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x5) pipe(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x341}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd2d4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x101) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x8000200f}) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f000010dbc0)={{0x0, 0x6820000, 0x0, 0xd9, 0x86, 0x8, 0x7f, 0xff, 0x795460d5, 0x8, 0x5, 0x4, 0x9, 0x30000000000000, 0x7f7}}) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 3 (id=6741): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000003580)={{r1, &(0x7f0000000000)='[^#@(^)-&\x8b}{^\x00', 0x480002, &(0x7f0000000040)={@_ha_fsid={[0xf, 0x6]}, {0x1, 0x26e, 0x6, 0x7fffffffffffffff}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x3}, 0x6, &(0x7f00000034c0)=[{0x3, 0xf, &(0x7f0000000100)='{)\x00', &(0x7f00000001c0)="305a36abebf4a7e8f8b8236d9d369f87c00884517122537cfb945415650c536e8f21d12e35c47a406656d8c92df64cea2e0d158cb54294281e4e56db1b26dc737a6fb4a16c13b3de4e9669292eb50aab9900dbf4b385b454fdf11468aa6fa5221daff70a37b9f02f4791f9151676", 0x6e, 0x10}, {0x1, 0xf176, &(0x7f0000000240)=',\x00', &(0x7f00000002c0)="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", 0x1000, 0xa}, {0x3, 0x8001, &(0x7f00000012c0), &(0x7f0000001300)="220caecf8374c557eb182128f86bc19c6e3a8b932d9f373c2048b17a62e341e0af39b429b54fa5a11813b30875ece1a69bce9a4173d218b02daf20422d58dff54cacc57ad41cec030c6a4341", 0x4c, 0x20}, {0x1, 0xfff, &(0x7f0000001380)='$\x00', &(0x7f00000013c0)="90dc6469291a1d20b5d5d9ed1908fd4ccebc5c8d05aa27d3a13fddc9a9cfe97e51079bf02955bfbb409f882a06d50b0af962ce6534b880bb7bf81158b4a175238b1f162426bb7e9634bb2f6ba7163326f008ae5fda0fdef48408bd6f92774753126fda98ff4feb", 0x67, 0xa}, {0x3, 0x6, &(0x7f0000001440)=':/&!)\x00', &(0x7f0000001480)="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", 0x1000, 0x20}, {0x1, 0x6, &(0x7f0000002480)='\x00', &(0x7f00000024c0)="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", 0x1000}]}) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000012c0)={0x3e9c3e7e, 0x0, 0x7, 0x0, 0x8, 0x80}) kernel console output (not intermixed with test programs): 792.013115][T27971] should_failslab+0xa8/0x100 [ 792.013142][T27971] __kmalloc_cache_noprof+0xa3/0x600 [ 792.013165][T27971] ? nbd_dev_add+0x12b/0xb60 [ 792.013185][T27971] ? nbd_dev_add+0x12b/0xb60 [ 792.013213][T27971] nbd_dev_add+0x12b/0xb60 [ 792.013241][T27971] ? __pfx_nbd_dev_add+0x10/0x10 [ 792.013283][T27971] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 792.013307][T27971] ? kasan_check_range+0x97/0x2c0 [ 792.013340][T27971] nbd_genl_connect+0x96c/0x1cd0 [ 792.013373][T27971] ? __pfx_nbd_genl_connect+0x10/0x10 [ 792.013398][T27971] ? rcu_is_watching+0x16/0xb0 [ 792.013424][T27971] ? trace_kmalloc+0x2a/0xf0 [ 792.013447][T27971] ? __kmalloc_noprof+0x38c/0x720 [ 792.013471][T27971] ? __nla_parse+0x40/0x60 [ 792.013502][T27971] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 792.013540][T27971] genl_family_rcv_msg_doit+0x233/0x340 [ 792.013575][T27971] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 792.013614][T27971] ? __lock_acquire+0x747/0x2de0 [ 792.013647][T27971] genl_rcv_msg+0x614/0x7a0 [ 792.013686][T27971] ? __pfx_genl_rcv_msg+0x10/0x10 [ 792.013711][T27971] ? __pfx_nbd_genl_connect+0x10/0x10 [ 792.013746][T27971] netlink_rcv_skb+0x226/0x4a0 [ 792.013768][T27971] ? __pfx_genl_rcv_msg+0x10/0x10 [ 792.013797][T27971] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 792.013835][T27971] ? down_read+0x2be/0x330 [ 792.013861][T27971] genl_rcv+0x28/0x40 [ 792.013884][T27971] netlink_unicast+0x7bd/0x940 [ 792.013925][T27971] netlink_sendmsg+0x813/0xb40 [ 792.013955][T27971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.013984][T27971] ? apparmor_socket_sendmsg+0x98/0x360 [ 792.014010][T27971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.014031][T27971] sock_sendmsg_nosec+0x14e/0x190 [ 792.014056][T27971] ____sys_sendmsg+0x54e/0x850 [ 792.014091][T27971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 792.014129][T27971] ? import_iovec+0x73/0xa0 [ 792.014159][T27971] ___sys_sendmsg+0x2a5/0x360 [ 792.014184][T27971] ? __lock_acquire+0x747/0x2de0 [ 792.014211][T27971] ? __pfx____sys_sendmsg+0x10/0x10 [ 792.014277][T27971] ? __fget_files+0x2a/0x420 [ 792.014305][T27971] ? __fget_files+0x3a2/0x420 [ 792.014343][T27971] __x64_sys_sendmsg+0x1b1/0x290 [ 792.014375][T27971] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 792.014427][T27971] do_syscall_64+0x166/0x520 [ 792.014456][T27971] ? trace_irq_disable+0x3b/0x140 [ 792.014476][T27971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.014498][T27971] ? clear_bhb_loop+0x70/0xc0 [ 792.014523][T27971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.014544][T27971] RIP: 0033:0x7fc76319e199 [ 792.014563][T27971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.014581][T27971] RSP: 002b:00007fc763ffd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 792.014603][T27971] RAX: ffffffffffffffda RBX: 00007fc763425fa0 RCX: 00007fc76319e199 [ 792.014619][T27971] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000004 [ 792.014633][T27971] RBP: 00007fc763ffd090 R08: 0000000000000000 R09: 0000000000000000 [ 792.014646][T27971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.014659][T27971] R13: 00007fc763426038 R14: 00007fc763425fa0 R15: 00007fff270cb2a8 [ 792.014701][T27971] [ 792.023863][T27971] nbd: failed to add new device [ 792.776282][T27981] bond14: option tlb_dynamic_lb: invalid value (64) [ 792.849478][T27981] bond14 (unregistering): Released all slaves [ 793.213861][T28008] FAULT_INJECTION: forcing a failure. [ 793.213861][T28008] name failslab, interval 1, probability 0, space 0, times 0 [ 793.213892][T28008] CPU: 1 UID: 0 PID: 28008 Comm: syz.1.5857 Not tainted syzkaller #0 PREEMPT(full) [ 793.213913][T28008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 793.213924][T28008] Call Trace: [ 793.213932][T28008] [ 793.213940][T28008] dump_stack_lvl+0xe8/0x150 [ 793.213975][T28008] should_fail_ex+0x410/0x560 [ 793.214003][T28008] should_failslab+0xa8/0x100 [ 793.214031][T28008] __kmalloc_cache_noprof+0xa3/0x600 [ 793.214054][T28008] ? nbd_dev_add+0x12b/0xb60 [ 793.214074][T28008] ? nbd_dev_add+0x12b/0xb60 [ 793.214101][T28008] nbd_dev_add+0x12b/0xb60 [ 793.214129][T28008] ? __pfx_nbd_dev_add+0x10/0x10 [ 793.214171][T28008] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 793.214193][T28008] ? security_capable+0x7e/0x2c0 [ 793.214226][T28008] nbd_genl_connect+0x96c/0x1cd0 [ 793.214258][T28008] ? __pfx_nbd_genl_connect+0x10/0x10 [ 793.214283][T28008] ? rcu_is_watching+0x16/0xb0 [ 793.214309][T28008] ? trace_kmalloc+0x2a/0xf0 [ 793.214332][T28008] ? __kmalloc_noprof+0x38c/0x720 [ 793.214355][T28008] ? __nla_parse+0x40/0x60 [ 793.214387][T28008] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 793.214425][T28008] genl_family_rcv_msg_doit+0x233/0x340 [ 793.214460][T28008] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 793.214499][T28008] ? __lock_acquire+0x747/0x2de0 [ 793.214531][T28008] genl_rcv_msg+0x614/0x7a0 [ 793.214565][T28008] ? __pfx_genl_rcv_msg+0x10/0x10 [ 793.214597][T28008] ? __pfx_nbd_genl_connect+0x10/0x10 [ 793.214635][T28008] netlink_rcv_skb+0x226/0x4a0 [ 793.214657][T28008] ? __pfx_genl_rcv_msg+0x10/0x10 [ 793.214685][T28008] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 793.214720][T28008] ? down_read+0x2be/0x330 [ 793.214745][T28008] genl_rcv+0x28/0x40 [ 793.214769][T28008] netlink_unicast+0x7bd/0x940 [ 793.214811][T28008] netlink_sendmsg+0x813/0xb40 [ 793.214843][T28008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 793.214874][T28008] ? apparmor_socket_sendmsg+0x98/0x360 [ 793.214900][T28008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 793.214920][T28008] sock_sendmsg_nosec+0x14e/0x190 [ 793.214943][T28008] ____sys_sendmsg+0x54e/0x850 [ 793.214975][T28008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 793.215012][T28008] ? import_iovec+0x73/0xa0 [ 793.215042][T28008] ___sys_sendmsg+0x2a5/0x360 [ 793.215067][T28008] ? __lock_acquire+0x747/0x2de0 [ 793.215092][T28008] ? __pfx____sys_sendmsg+0x10/0x10 [ 793.215158][T28008] ? __fget_files+0x2a/0x420 [ 793.215186][T28008] ? __fget_files+0x3a2/0x420 [ 793.215224][T28008] __x64_sys_sendmsg+0x1b1/0x290 [ 793.215255][T28008] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 793.215307][T28008] do_syscall_64+0x166/0x520 [ 793.215335][T28008] ? trace_irq_disable+0x3b/0x140 [ 793.215356][T28008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.215377][T28008] ? clear_bhb_loop+0x70/0xc0 [ 793.215402][T28008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.215422][T28008] RIP: 0033:0x7f6ad119e199 [ 793.215442][T28008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.215459][T28008] RSP: 002b:00007f6ad2029028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 793.215480][T28008] RAX: ffffffffffffffda RBX: 00007f6ad1425fa0 RCX: 00007f6ad119e199 [ 793.215495][T28008] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000004 [ 793.215509][T28008] RBP: 00007f6ad2029090 R08: 0000000000000000 R09: 0000000000000000 [ 793.215522][T28008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.215535][T28008] R13: 00007f6ad1426038 R14: 00007f6ad1425fa0 R15: 00007ffe35ee71a8 [ 793.215568][T28008] [ 793.252573][T28008] nbd: failed to add new device [ 793.601952][T28014] __nla_validate_parse: 4 callbacks suppressed [ 793.601986][T28014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5858'. [ 793.602026][T28014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5858'. [ 793.739279][T28001] syzkaller1: entered promiscuous mode [ 793.739304][T28001] syzkaller1: entered allmulticast mode [ 793.799958][T28013] netlink: 'syz.4.5854': attribute type 5 has an invalid length. [ 793.800011][T28013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5854'. [ 794.029617][ T4934] block nbd154: Receive control failed (result -32) [ 794.033357][ T52] block nbd154: Receive control failed (result -32) [ 794.239883][T28035] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 794.506985][T28048] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5866'. [ 794.628718][T28051] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5866'. [ 794.648238][T28051] --map-set only usable from mangle table [ 797.602209][T28071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5869'. [ 797.602249][T28071] FAULT_INJECTION: forcing a failure. [ 797.602249][T28071] name failslab, interval 1, probability 0, space 0, times 0 [ 797.602284][T28071] CPU: 1 UID: 0 PID: 28071 Comm: syz.2.5869 Not tainted syzkaller #0 PREEMPT(full) [ 797.602305][T28071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 797.602318][T28071] Call Trace: [ 797.602326][T28071] [ 797.602335][T28071] dump_stack_lvl+0xe8/0x150 [ 797.602367][T28071] should_fail_ex+0x410/0x560 [ 797.602397][T28071] should_failslab+0xa8/0x100 [ 797.602425][T28071] __kmalloc_cache_noprof+0xa3/0x600 [ 797.602448][T28071] ? blk_mq_alloc_tag_set+0x442/0x1000 [ 797.602476][T28071] ? blk_mq_alloc_tag_set+0x442/0x1000 [ 797.602510][T28071] blk_mq_alloc_tag_set+0x442/0x1000 [ 797.602544][T28071] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 797.602577][T28071] nbd_dev_add+0x30e/0xb60 [ 797.602605][T28071] ? __pfx_nbd_dev_add+0x10/0x10 [ 797.602646][T28071] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 797.602669][T28071] ? security_capable+0x7e/0x2c0 [ 797.602701][T28071] nbd_genl_connect+0x96c/0x1cd0 [ 797.602732][T28071] ? __pfx_nbd_genl_connect+0x10/0x10 [ 797.602756][T28071] ? rcu_is_watching+0x16/0xb0 [ 797.602780][T28071] ? trace_kmalloc+0x2a/0xf0 [ 797.602803][T28071] ? __kmalloc_noprof+0x38c/0x720 [ 797.602827][T28071] ? __nla_parse+0x40/0x60 [ 797.602857][T28071] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 797.602894][T28071] genl_family_rcv_msg_doit+0x233/0x340 [ 797.602928][T28071] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 797.602966][T28071] ? __lock_acquire+0x747/0x2de0 [ 797.602998][T28071] genl_rcv_msg+0x614/0x7a0 [ 797.603031][T28071] ? __pfx_genl_rcv_msg+0x10/0x10 [ 797.603057][T28071] ? __pfx_nbd_genl_connect+0x10/0x10 [ 797.603093][T28071] netlink_rcv_skb+0x226/0x4a0 [ 797.603115][T28071] ? __pfx_genl_rcv_msg+0x10/0x10 [ 797.603143][T28071] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 797.603181][T28071] ? down_read+0x2be/0x330 [ 797.603206][T28071] genl_rcv+0x28/0x40 [ 797.603229][T28071] netlink_unicast+0x7bd/0x940 [ 797.603278][T28071] netlink_sendmsg+0x813/0xb40 [ 797.603309][T28071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 797.603340][T28071] ? apparmor_socket_sendmsg+0x98/0x360 [ 797.603366][T28071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 797.603385][T28071] sock_sendmsg_nosec+0x14e/0x190 [ 797.603409][T28071] ____sys_sendmsg+0x54e/0x850 [ 797.603442][T28071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 797.603479][T28071] ? import_iovec+0x73/0xa0 [ 797.603508][T28071] ___sys_sendmsg+0x2a5/0x360 [ 797.603535][T28071] ? __lock_acquire+0x747/0x2de0 [ 797.603560][T28071] ? __pfx____sys_sendmsg+0x10/0x10 [ 797.603624][T28071] ? __fget_files+0x2a/0x420 [ 797.603651][T28071] ? __fget_files+0x3a2/0x420 [ 797.603689][T28071] __x64_sys_sendmsg+0x1b1/0x290 [ 797.603720][T28071] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 797.603770][T28071] do_syscall_64+0x166/0x520 [ 797.603798][T28071] ? trace_irq_disable+0x3b/0x140 [ 797.603818][T28071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.603838][T28071] ? clear_bhb_loop+0x70/0xc0 [ 797.603863][T28071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.603884][T28071] RIP: 0033:0x7fc76319e199 [ 797.603903][T28071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.603920][T28071] RSP: 002b:00007fc763ffd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 797.603941][T28071] RAX: ffffffffffffffda RBX: 00007fc763425fa0 RCX: 00007fc76319e199 [ 797.603956][T28071] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000004 [ 797.603968][T28071] RBP: 00007fc763ffd090 R08: 0000000000000000 R09: 0000000000000000 [ 797.603981][T28071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.603993][T28071] R13: 00007fc763426038 R14: 00007fc763425fa0 R15: 00007fff270cb2a8 [ 797.604026][T28071] [ 797.778175][T28071] nbd: failed to add new device [ 798.031436][T28082] FAULT_INJECTION: forcing a failure. [ 798.031436][T28082] name failslab, interval 1, probability 0, space 0, times 0 [ 798.031487][T28082] CPU: 0 UID: 0 PID: 28082 Comm: syz.3.5873 Not tainted syzkaller #0 PREEMPT(full) [ 798.031510][T28082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 798.031522][T28082] Call Trace: [ 798.031531][T28082] [ 798.031540][T28082] dump_stack_lvl+0xe8/0x150 [ 798.031571][T28082] should_fail_ex+0x410/0x560 [ 798.031601][T28082] should_failslab+0xa8/0x100 [ 798.031625][T28082] __kmalloc_cache_node_noprof+0xaa/0x620 [ 798.031647][T28082] ? __css_rstat_updated+0x237/0x540 [ 798.031669][T28082] ? __get_vm_area_node+0x155/0x2f0 [ 798.031694][T28082] ? __get_vm_area_node+0x155/0x2f0 [ 798.031727][T28082] __get_vm_area_node+0x155/0x2f0 [ 798.031760][T28082] __vmalloc_node_range_noprof+0x343/0x1540 [ 798.031790][T28082] ? bpf_check+0x115d/0x2ef0 [ 798.031830][T28082] ? irqentry_exit+0x218/0x910 [ 798.031857][T28082] ? trace_irq_disable+0x3b/0x140 [ 798.031891][T28082] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 798.031919][T28082] ? security_capable+0x280/0x2c0 [ 798.031945][T28082] ? security_capable+0x280/0x2c0 [ 798.031969][T28082] ? security_capable+0x7e/0x2c0 [ 798.031994][T28082] ? bpf_check+0x115d/0x2ef0 [ 798.032013][T28082] __vmalloc_noprof+0xd2/0x120 [ 798.032043][T28082] ? bpf_check+0x115d/0x2ef0 [ 798.032067][T28082] bpf_check+0x115d/0x2ef0 [ 798.032107][T28082] ? __pfx_bpf_check+0x10/0x10 [ 798.032132][T28082] ? bpf_obj_name_cpy+0x194/0x1e0 [ 798.032164][T28082] bpf_prog_load+0x14d6/0x1c20 [ 798.032200][T28082] ? __pfx_bpf_prog_load+0x10/0x10 [ 798.032249][T28082] __sys_bpf+0xd0d/0xd90 [ 798.032281][T28082] ? __pfx___sys_bpf+0x10/0x10 [ 798.032313][T28082] ? __fget_files+0x2a/0x420 [ 798.032372][T28082] __x64_sys_bpf+0xba/0xd0 [ 798.032395][T28082] do_syscall_64+0x166/0x520 [ 798.032423][T28082] ? trace_irq_disable+0x3b/0x140 [ 798.032444][T28082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.032465][T28082] ? clear_bhb_loop+0x70/0xc0 [ 798.032488][T28082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.032508][T28082] RIP: 0033:0x7ff32c99e199 [ 798.032528][T28082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.032544][T28082] RSP: 002b:00007ff32d953028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 798.032564][T28082] RAX: ffffffffffffffda RBX: 00007ff32cc25fa0 RCX: 00007ff32c99e199 [ 798.032577][T28082] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 798.032590][T28082] RBP: 00007ff32d953090 R08: 0000000000000000 R09: 0000000000000000 [ 798.032603][T28082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 798.032616][T28082] R13: 00007ff32cc26038 R14: 00007ff32cc25fa0 R15: 00007ffc78ec6b98 [ 798.032647][T28082] [ 798.038247][T28082] syz.3.5873: vmalloc error: size 1768, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 798.038367][T28082] CPU: 0 UID: 0 PID: 28082 Comm: syz.3.5873 Not tainted syzkaller #0 PREEMPT(full) [ 798.038389][T28082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 798.038400][T28082] Call Trace: [ 798.038409][T28082] [ 798.038417][T28082] dump_stack_lvl+0xe8/0x150 [ 798.038447][T28082] warn_alloc+0x24d/0x270 [ 798.038466][T28082] ? __kasan_kmalloc+0x22/0xb0 [ 798.038493][T28082] ? __pfx_warn_alloc+0x10/0x10 [ 798.038509][T28082] ? __css_rstat_updated+0x237/0x540 [ 798.038531][T28082] ? __get_vm_area_node+0x155/0x2f0 [ 798.038564][T28082] ? __get_vm_area_node+0x2a9/0x2f0 [ 798.038599][T28082] __vmalloc_node_range_noprof+0x36b/0x1540 [ 798.038640][T28082] ? irqentry_exit+0x218/0x910 [ 798.038667][T28082] ? trace_irq_disable+0x3b/0x140 [ 798.038700][T28082] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 798.038728][T28082] ? security_capable+0x280/0x2c0 [ 798.038754][T28082] ? security_capable+0x280/0x2c0 [ 798.038777][T28082] ? security_capable+0x7e/0x2c0 [ 798.038802][T28082] ? bpf_check+0x115d/0x2ef0 [ 798.038827][T28082] __vmalloc_noprof+0xd2/0x120 [ 798.038856][T28082] ? bpf_check+0x115d/0x2ef0 [ 798.038879][T28082] bpf_check+0x115d/0x2ef0 [ 798.038918][T28082] ? __pfx_bpf_check+0x10/0x10 [ 798.038942][T28082] ? bpf_obj_name_cpy+0x194/0x1e0 [ 798.038973][T28082] bpf_prog_load+0x14d6/0x1c20 [ 798.039007][T28082] ? __pfx_bpf_prog_load+0x10/0x10 [ 798.039054][T28082] __sys_bpf+0xd0d/0xd90 [ 798.039084][T28082] ? __pfx___sys_bpf+0x10/0x10 [ 798.039116][T28082] ? __fget_files+0x2a/0x420 [ 798.039173][T28082] __x64_sys_bpf+0xba/0xd0 [ 798.039195][T28082] do_syscall_64+0x166/0x520 [ 798.039222][T28082] ? trace_irq_disable+0x3b/0x140 [ 798.039241][T28082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.039261][T28082] ? clear_bhb_loop+0x70/0xc0 [ 798.039286][T28082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.039305][T28082] RIP: 0033:0x7ff32c99e199 [ 798.039322][T28082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.039338][T28082] RSP: 002b:00007ff32d953028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 798.039358][T28082] RAX: ffffffffffffffda RBX: 00007ff32cc25fa0 RCX: 00007ff32c99e199 [ 798.039373][T28082] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 798.039385][T28082] RBP: 00007ff32d953090 R08: 0000000000000000 R09: 0000000000000000 [ 798.039398][T28082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 798.039411][T28082] R13: 00007ff32cc26038 R14: 00007ff32cc25fa0 R15: 00007ffc78ec6b98 [ 798.039441][T28082] [ 798.039605][T28082] Mem-Info: [ 798.039634][T28082] active_anon:9456 inactive_anon:0 isolated_anon:0 [ 798.039634][T28082] active_file:22 inactive_file:43817 isolated_file:0 [ 798.039634][T28082] unevictable:0 dirty:399 writeback:0 [ 798.039634][T28082] slab_reclaimable:18142 slab_unreclaimable:140621 [ 798.039634][T28082] mapped:29879 shmem:665 pagetables:1232 [ 798.039634][T28082] sec_pagetables:0 bounce:0 [ 798.039634][T28082] kernel_misc_reclaimable:0 [ 798.039634][T28082] free:1223646 free_pcp:9832 free_cma:0 [ 798.039724][T28082] Node 0 active_anon:37824kB inactive_anon:0kB active_file:88kB inactive_file:175056kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119516kB dirty:1596kB writeback:0kB shmem:2660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:23300kB pagetables:4792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 798.039797][T28082] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 798.039886][T28082] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 798.039966][T28082] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 798.040031][T28082] Node 0 DMA32 free:948672kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:37824kB inactive_anon:0kB active_file:88kB inactive_file:175056kB unevictable:0kB writepending:1596kB zspages:0kB present:3129332kB managed:2547096kB mlocked:0kB bounce:0kB free_pcp:35552kB local_pcp:13656kB free_cma:0kB [ 798.040125][T28082] lowmem_reserve[]: 0 0 0 0 0 [ 798.040187][T28082] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 798.040260][T28082] lowmem_reserve[]: 0 0 0 0 0 [ 798.040323][T28082] Node 1 Normal free:3930552kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:3776kB local_pcp:3776kB free_cma:0kB [ 798.055173][T28082] lowmem_reserve[]: 0 0 0 0 0 [ 798.055252][T28082] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 798.055454][T28082] Node 0 DMA32: 2504*4kB (UME) 920*8kB (UME) 360*16kB (UME) 253*32kB (UME) 48*64kB (UME) 42*128kB (ME) 33*256kB (UM) 13*512kB (UME) 9*1024kB (UME) 10*2048kB (UME) 211*4096kB (UM) = 948736kB [ 798.055728][T28082] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 798.055917][T28082] Node 1 Normal: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (UM) = 3930604kB [ 798.056185][T28082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 798.056217][T28082] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 798.056249][T28082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 798.056281][T28082] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 798.056312][T28082] 44500 total pagecache pages [ 798.056347][T28082] 0 pages in swap cache [ 798.056371][T28082] Free swap = 124996kB [ 798.056379][T28082] Total swap = 124996kB [ 798.056400][T28082] 2097051 pages RAM [ 798.056407][T28082] 0 pages HighMem/MovableOnly [ 798.056414][T28082] 428661 pages reserved [ 798.056438][T28082] 0 pages cma reserved [ 799.138351][ T4934] block nbd155: Receive control failed (result -32) [ 799.139231][ T52] block nbd155: Receive control failed (result -32) [ 799.215006][T28104] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5880'. [ 799.248560][T28104] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5880'. [ 799.299243][T28106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5881'. [ 799.368389][T28104] --map-set only usable from mangle table [ 799.463372][T28115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5885'. [ 799.522367][T28113] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 799.525929][T28115] syzkaller0: entered promiscuous mode [ 799.525964][T28115] syzkaller0: entered allmulticast mode [ 799.592884][T28122] FAULT_INJECTION: forcing a failure. [ 799.592884][T28122] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 799.592916][T28122] CPU: 1 UID: 0 PID: 28122 Comm: syz.4.5887 Not tainted syzkaller #0 PREEMPT(full) [ 799.592939][T28122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 799.592951][T28122] Call Trace: [ 799.592960][T28122] [ 799.592969][T28122] dump_stack_lvl+0xe8/0x150 [ 799.593000][T28122] should_fail_ex+0x410/0x560 [ 799.593028][T28122] prepare_alloc_pages+0x223/0x600 [ 799.593055][T28122] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 799.593081][T28122] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 799.593108][T28122] ? __pfx_policy_nodemask+0x10/0x10 [ 799.593130][T28122] ? __get_vm_area_node+0x155/0x2f0 [ 799.593156][T28122] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 799.593184][T28122] ? __vmalloc_noprof+0xd2/0x120 [ 799.593211][T28122] ? bpf_check+0x115d/0x2ef0 [ 799.593231][T28122] ? bpf_prog_load+0x14d6/0x1c20 [ 799.593253][T28122] ? __x64_sys_bpf+0xba/0xd0 [ 799.593271][T28122] ? do_syscall_64+0x166/0x520 [ 799.593299][T28122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.593325][T28122] alloc_pages_mpol+0x21e/0x390 [ 799.593356][T28122] alloc_pages_noprof+0xb1/0x2b0 [ 799.593384][T28122] get_free_pages_noprof+0xf/0x80 [ 799.593406][T28122] __kasan_populate_vmalloc+0x38/0x1c0 [ 799.593425][T28122] ? do_raw_spin_unlock+0xf5/0x200 [ 799.593458][T28122] alloc_vmap_area+0xd1a/0x1420 [ 799.593504][T28122] ? __pfx_alloc_vmap_area+0x10/0x10 [ 799.593529][T28122] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 799.593552][T28122] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 799.593573][T28122] ? __get_vm_area_node+0x155/0x2f0 [ 799.593605][T28122] __get_vm_area_node+0x200/0x2f0 [ 799.593645][T28122] __vmalloc_node_range_noprof+0x343/0x1540 [ 799.593676][T28122] ? bpf_check+0x115d/0x2ef0 [ 799.593709][T28122] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 799.593737][T28122] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 799.593775][T28122] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 799.593805][T28122] ? apparmor_capable+0x126/0x170 [ 799.593837][T28122] ? bpf_lsm_capable+0x9/0x20 [ 799.593856][T28122] ? security_capable+0x7e/0x2c0 [ 799.593882][T28122] ? bpf_check+0x115d/0x2ef0 [ 799.593902][T28122] __vmalloc_noprof+0xd2/0x120 [ 799.593931][T28122] ? bpf_check+0x115d/0x2ef0 [ 799.593955][T28122] bpf_check+0x115d/0x2ef0 [ 799.593993][T28122] ? __pfx_bpf_check+0x10/0x10 [ 799.594017][T28122] ? bpf_obj_name_cpy+0x194/0x1e0 [ 799.594049][T28122] bpf_prog_load+0x14d6/0x1c20 [ 799.594083][T28122] ? __pfx_bpf_prog_load+0x10/0x10 [ 799.594129][T28122] __sys_bpf+0xd0d/0xd90 [ 799.594160][T28122] ? __pfx___sys_bpf+0x10/0x10 [ 799.594194][T28122] ? __fget_files+0x2a/0x420 [ 799.594237][T28122] ? ksys_write+0x242/0x270 [ 799.594269][T28122] ? __pfx_ksys_write+0x10/0x10 [ 799.594303][T28122] __x64_sys_bpf+0xba/0xd0 [ 799.594327][T28122] do_syscall_64+0x166/0x520 [ 799.594354][T28122] ? trace_irq_disable+0x3b/0x140 [ 799.594375][T28122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.594395][T28122] ? clear_bhb_loop+0x70/0xc0 [ 799.594419][T28122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.594440][T28122] RIP: 0033:0x7f0b4ef9e199 [ 799.594459][T28122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.594476][T28122] RSP: 002b:00007f0b4fdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 799.594497][T28122] RAX: ffffffffffffffda RBX: 00007f0b4f225fa0 RCX: 00007f0b4ef9e199 [ 799.594513][T28122] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 799.594526][T28122] RBP: 00007f0b4fdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 799.594539][T28122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 799.594552][T28122] R13: 00007f0b4f226038 R14: 00007f0b4f225fa0 R15: 00007fff405f9678 [ 799.594584][T28122] [ 800.056861][T28128] tun0: tun_chr_ioctl cmd 1074025677 [ 800.058489][T28128] tun0: linktype set to 0 [ 800.106933][T28133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5891'. [ 800.115868][T28134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5889'. [ 800.436842][T28146] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5893'. [ 800.459965][T28143] netlink: 'syz.4.5893': attribute type 1 has an invalid length. [ 800.459989][T28143] netlink: 'syz.4.5893': attribute type 1 has an invalid length. [ 800.897666][ T52] block nbd156: Receive control failed (result -32) [ 800.898677][ T4934] block nbd156: Receive control failed (result -32) [ 801.165368][T28175] xt_policy: output policy not valid in PREROUTING and INPUT [ 801.409220][T28190] openvswitch: netlink: ufid size 30 bytes exceeds the range (1, 16) [ 801.409244][T28190] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 801.637296][T28200] ip6gre2: entered allmulticast mode [ 801.848330][T28207] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 801.870231][ T4934] block nbd157: Receive control failed (result -32) [ 801.870392][ T52] block nbd157: Receive control failed (result -32) [ 802.137983][T28214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5914'. [ 802.431335][T28226] xt_policy: output policy not valid in PREROUTING and INPUT [ 802.618142][T28231] bond6: entered allmulticast mode [ 802.661989][T28238] ip6tnl1: entered allmulticast mode [ 802.670444][T11530] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 802.670691][T11530] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 802.686334][ T5884] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 802.709247][T28238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5921'. [ 802.709268][T28238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5921'. [ 802.846899][ T5884] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 803.058003][ T4934] block nbd158: Receive control failed (result -32) [ 803.058003][ T52] block nbd158: Receive control failed (result -32) [ 803.080187][ T5884] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 803.199367][T28256] openvswitch: netlink: Duplicate or invalid key (type 0). [ 803.307448][T28259] netlink: 'syz.3.5929': attribute type 1 has an invalid length. [ 803.752795][ T4934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 803.761973][ T4934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 803.769914][ T4934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 803.781349][ T4934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 803.783148][ T4934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 804.596147][T28280] __nla_validate_parse: 6 callbacks suppressed [ 804.596185][T28280] netlink: 3136 bytes leftover after parsing attributes in process `syz.1.5935'. [ 804.599028][T28280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5935'. [ 804.651267][T28282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5936'. [ 804.681453][T28282] syzkaller0: entered promiscuous mode [ 804.681499][T28282] syzkaller0: entered allmulticast mode [ 804.764356][T28282] netlink: 'syz.2.5936': attribute type 1 has an invalid length. [ 805.534850][T28313] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5940'. [ 805.575348][T28313] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5940'. [ 805.591529][T28313] --map-set only usable from mangle table [ 805.639995][T28272] wg2 speed is unknown, defaulting to 1000 [ 805.641765][T28272] lo speed is unknown, defaulting to 1000 [ 805.821850][T28317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5941'. [ 805.821886][T28317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5941'. [ 805.828027][ T52] Bluetooth: hci2: command tx timeout [ 806.417738][T28272] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.420604][T28272] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.423608][T28272] bridge_slave_0: entered allmulticast mode [ 806.449197][T28272] bridge_slave_0: entered promiscuous mode [ 806.460377][T28272] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.460553][T28272] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.460696][T28272] bridge_slave_1: entered allmulticast mode [ 806.462466][T28272] bridge_slave_1: entered promiscuous mode [ 806.546668][T28272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.549844][T28272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.660922][ T4934] block nbd159: Receive control failed (result -32) [ 806.661180][ T52] block nbd159: Receive control failed (result -32) [ 806.679603][T28272] team0: Port device team_slave_0 added [ 806.709549][T28272] team0: Port device team_slave_1 added [ 806.784453][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 806.810276][T28272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.810292][T28272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.810319][T28272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.812333][T28272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.812347][T28272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.812374][T28272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.955169][T28272] hsr_slave_0: entered promiscuous mode [ 806.956160][T28272] hsr_slave_1: entered promiscuous mode [ 806.956899][T28272] debugfs: 'hsr0' already exists in 'hsr' [ 806.956918][T28272] Cannot create hsr debugfs directory [ 807.068559][T28349] gre0: left promiscuous mode [ 807.594739][T28365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5953'. [ 807.918717][ T52] Bluetooth: hci2: command tx timeout [ 808.136671][T28272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 808.163148][T28387] xt_policy: output policy not valid in PREROUTING and INPUT [ 808.769038][T28272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 808.792107][T28272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 808.964935][T28272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 808.966584][T28272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 808.975569][T28272] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 809.018556][T28272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 809.035523][T28272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 809.159913][T28272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.195505][T28272] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.206126][T21773] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.206318][T21773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.243270][T21773] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.243352][T21773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.994643][ T52] Bluetooth: hci2: command tx timeout [ 811.442965][T28272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.554301][T11534] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.554337][T11534] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.554372][T11534] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.554396][T11534] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.554428][T11534] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.554452][T11534] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.554507][T11534] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.554532][T11534] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.798096][T28272] veth0_vlan: entered promiscuous mode [ 811.836523][T28272] veth1_vlan: entered promiscuous mode [ 811.923162][T28272] veth0_macvtap: entered promiscuous mode [ 811.941491][T28272] veth1_macvtap: entered promiscuous mode [ 811.982263][T28272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.031102][T28272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 812.065172][ T52] Bluetooth: hci2: command tx timeout [ 812.096355][T28484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5982'. [ 812.103459][T11526] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.189995][T21766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.190070][T21766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.190135][T21766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.252199][T28487] netlink: 'syz.0.5982': attribute type 5 has an invalid length. [ 812.278453][T11534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.278490][T11534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.602107][T27277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.602164][T27277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.802621][T28504] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20002 [ 813.097339][T28518] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 813.431218][ T4934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 813.438131][ T4934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 813.446139][ T4934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 813.470479][ T4934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 813.496104][ T4934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 813.983828][T28526] tipc: Started in network mode [ 813.983860][T28526] tipc: Node identity ac14140f, cluster identity 4711 [ 813.986033][T28526] tipc: New replicast peer: 100.1.1.0 [ 813.986269][T28526] tipc: Enabled bearer , priority 10 [ 814.153186][T28528] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.178576][T28528] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.349356][T28538] ip_tables: iptables: counters copy to user failed while replacing table [ 814.817380][T28560] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 814.890725][T28562] x_tables: ip_tables: udplite match: only valid for protocol 136 [ 814.944166][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 815.108688][T20126] tipc: Node number set to 2886997007 [ 815.121412][T28523] wg2 speed is unknown, defaulting to 1000 [ 815.136944][T28523] lo speed is unknown, defaulting to 1000 [ 815.437828][T28569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6001'. [ 815.594698][ T4934] Bluetooth: hci4: command tx timeout [ 815.672146][T28569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6001'. [ 815.705521][T28576] xt_policy: output policy not valid in PREROUTING and INPUT [ 816.196156][T28523] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.196322][T28523] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.196460][T28523] bridge_slave_0: entered allmulticast mode [ 816.199085][T28523] bridge_slave_0: entered promiscuous mode [ 816.240707][T28523] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.242025][T28523] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.242172][T28523] bridge_slave_1: entered allmulticast mode [ 816.269965][T28523] bridge_slave_1: entered promiscuous mode [ 816.479929][T28523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.483198][T28523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.640967][T28523] team0: Port device team_slave_0 added [ 816.656441][T28523] team0: Port device team_slave_1 added [ 816.712383][T28597] netlink: 79 bytes leftover after parsing attributes in process `syz.0.6006'. [ 816.758427][T28523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.758459][T28523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.758514][T28523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.768646][T28523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.768845][T28523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.768901][T28523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.930197][T28594] syzkaller0: entered promiscuous mode [ 816.930236][T28594] syzkaller0: entered allmulticast mode [ 816.983315][T28523] hsr_slave_0: entered promiscuous mode [ 816.997215][T28523] hsr_slave_1: entered promiscuous mode [ 817.001891][T28523] debugfs: 'hsr0' already exists in 'hsr' [ 817.001926][T28523] Cannot create hsr debugfs directory [ 817.119342][T28613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6009'. [ 817.149319][T28612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6009'. [ 817.237140][T28612] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 817.245795][T28612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6009'. [ 817.665206][ T52] Bluetooth: hci4: command tx timeout [ 819.583786][T28595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 819.623827][T28523] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 819.669313][T28523] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 819.676334][T28523] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 819.744563][ T52] Bluetooth: hci4: command tx timeout [ 819.766584][T28523] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 819.767589][T28523] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 819.823029][T28523] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 819.823899][T28523] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 819.855495][T28523] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 819.946254][ T4934] block nbd160: Receive control failed (result -32) [ 819.948216][ T52] block nbd160: Receive control failed (result -32) [ 820.186234][T28654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6020'. [ 820.186256][T28654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6020'. [ 820.239231][T28523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.242844][ T52] block nbd161: Receive control failed (result -32) [ 820.247363][ T4934] block nbd161: Receive control failed (result -32) [ 820.328083][T28523] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.356331][T11532] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.356432][T11532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.385661][T11532] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.385810][T11532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.439853][ T52] block nbd162: Receive control failed (result -32) [ 820.441948][ T4934] block nbd162: Receive control failed (result -32) [ 820.508959][T28662] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 820.631382][T28667] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 820.735953][T28665] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6023'. [ 820.997547][T28678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6027'. [ 821.111180][T28678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6027'. [ 821.299495][T28690] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6029'. [ 821.299519][T28690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6029'. [ 821.334330][T21769] IPVS: starting estimator thread 0... [ 821.448055][T28692] IPVS: using max 36 ests per chain, 86400 per kthread [ 821.827255][ T4934] Bluetooth: hci4: command tx timeout [ 821.947514][T28711] netlink: 'syz.4.6031': attribute type 21 has an invalid length. [ 822.023378][T28713] openvswitch: netlink: Flow actions attr not present in new flow. [ 822.045499][T28720] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 822.298966][T28728] netlink: 'syz.4.6034': attribute type 10 has an invalid length. [ 822.302365][T28728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.355050][T28728] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 822.385637][T28523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.493522][T28733] __nla_validate_parse: 2 callbacks suppressed [ 822.493543][T28733] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6036'. [ 822.518524][T28523] veth0_vlan: entered promiscuous mode [ 822.541715][T28523] veth1_vlan: entered promiscuous mode [ 822.552704][T28733] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6036'. [ 822.566896][T28733] --map-set only usable from mangle table [ 822.580724][T28734] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6037'. [ 822.611956][T28737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6039'. [ 822.664478][T28734] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6037'. [ 822.670635][T28523] veth0_macvtap: entered promiscuous mode [ 822.673584][T28734] --map-set only usable from mangle table [ 822.702360][T28523] veth1_macvtap: entered promiscuous mode [ 822.733370][T28523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.815743][T28745] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6040'. [ 822.850174][T28523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.956253][T11533] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.956672][T11533] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.977221][T21773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.977272][T21773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.375322][T28759] netlink: 'syz.1.6042': attribute type 1 has an invalid length. [ 823.375344][T28759] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6042'. [ 823.415465][T11535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.415503][T11535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.528466][T21775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.528521][T21775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.732874][T28771] xt_policy: output policy not valid in PREROUTING and INPUT [ 823.874188][T28777] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6043'. [ 824.139768][T28785] syzkaller0: entered promiscuous mode [ 824.139831][T28785] syzkaller0: entered allmulticast mode [ 824.221433][T28791] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6051'. [ 824.280745][T28791] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6051'. [ 824.329793][T28791] --map-set only usable from mangle table [ 824.393824][T28794] tipc: New replicast peer: 127.0.0.1 [ 824.405252][T28794] tipc: Enabled bearer , priority 10 [ 825.307318][T28820] netlink: 'syz.3.6056': attribute type 5 has an invalid length. [ 825.345234][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 825.352680][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 825.368573][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 825.381617][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 825.382665][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 825.504329][T20126] tipc: Node number set to 4269801488 [ 826.391157][T28854] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 826.909361][T28821] wg2 speed is unknown, defaulting to 1000 [ 826.928867][T28821] lo speed is unknown, defaulting to 1000 [ 827.515656][ T4934] Bluetooth: hci0: command tx timeout [ 827.797200][T28888] __nla_validate_parse: 9 callbacks suppressed [ 827.797220][T28888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6069'. [ 828.099568][ T52] block nbd163: Receive control failed (result -32) [ 828.101512][ T4934] block nbd163: Receive control failed (result -32) [ 828.416476][T28905] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6074'. [ 828.521857][T28909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6075'. [ 828.527801][T28908] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6074'. [ 828.527854][T28908] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6074'. [ 828.713143][T28911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6076'. [ 828.741608][T28911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6076'. [ 829.027919][T28905] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 829.585448][ T4934] Bluetooth: hci0: command tx timeout [ 829.877805][T28930] netlink: 380 bytes leftover after parsing attributes in process `syz.1.6080'. [ 829.877832][T28930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6080'. [ 829.877848][T28930] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6080'. [ 830.429579][T28821] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.431927][T28821] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.432097][T28821] bridge_slave_0: entered allmulticast mode [ 830.441912][T28821] bridge_slave_0: entered promiscuous mode [ 830.451789][T28821] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.455212][T28821] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.455396][T28821] bridge_slave_1: entered allmulticast mode [ 830.472114][T28821] bridge_slave_1: entered promiscuous mode [ 830.647642][T28821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.696989][T28821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.866427][T28821] team0: Port device team_slave_0 added [ 830.881396][T28821] team0: Port device team_slave_1 added [ 830.944150][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 831.063232][T28821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.063250][T28821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.063278][T28821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.080495][T28821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.080511][T28821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.080538][T28821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.522597][T28821] hsr_slave_0: entered promiscuous mode [ 831.527045][T28821] hsr_slave_1: entered promiscuous mode [ 831.528852][T28821] debugfs: 'hsr0' already exists in 'hsr' [ 831.528872][T28821] Cannot create hsr debugfs directory [ 831.665497][ T4934] Bluetooth: hci0: command tx timeout [ 831.743478][ T4934] block nbd164: Receive control failed (result -32) [ 831.745901][ T52] block nbd164: Receive control failed (result -32) [ 832.431567][T28821] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.157555][T28821] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.362044][T29009] __nla_validate_parse: 3 callbacks suppressed [ 833.362070][T29009] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6106'. [ 833.363254][T28821] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.433531][T29013] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6106'. [ 833.448849][T29013] --map-set only usable from mangle table [ 833.493031][ T4934] block nbd165: Receive control failed (result -32) [ 833.493046][ T52] block nbd165: Receive control failed (result -32) [ 833.683713][T29024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6108'. [ 833.746939][ T52] Bluetooth: hci0: command tx timeout [ 833.782302][T28821] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.802820][ T4934] block nbd166: Receive control failed (result -32) [ 833.803870][ T52] block nbd166: Receive control failed (result -32) [ 833.888808][T29015] syzkaller1: entered promiscuous mode [ 833.888832][T29015] syzkaller1: entered allmulticast mode [ 833.892161][T29020] syzkaller1: left promiscuous mode [ 833.892181][T29020] syzkaller1: left allmulticast mode [ 834.876321][T28821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 834.890350][T28821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 834.896344][T28821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 834.935172][T28821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 834.945238][T28821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 834.982696][T28821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 834.997511][T28821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 835.029064][T28821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 835.320182][T29072] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6119'. [ 835.372329][T29072] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6119'. [ 835.393547][T29072] --map-set only usable from mangle table [ 835.576469][T28821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.747396][T28821] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.775449][T27274] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.775568][T27274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.791198][ T52] block nbd167: Receive control failed (result -32) [ 835.794807][ T4934] block nbd167: Receive control failed (result -32) [ 835.863386][T27274] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.863580][T27274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.327568][T29081] block nbd168: server does not support multiple connections per device. [ 836.329435][T29081] block nbd168: shutting down sockets [ 836.347904][T29082] block nbd168: server does not support multiple connections per device. [ 836.348199][T29082] block nbd168: shutting down sockets [ 836.377393][T29090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6125'. [ 837.506800][T29120] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6131'. [ 837.526712][ T4934] block nbd168: Receive control failed (result -32) [ 837.526874][ T52] block nbd168: Receive control failed (result -32) [ 837.616866][T29124] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 837.733016][T29126] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20003 [ 837.839925][T29128] netlink: 'syz.2.6136': attribute type 11 has an invalid length. [ 838.065776][T29139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6139'. [ 838.224926][T29152] ip_tables: iptables: counters copy to user failed while replacing table [ 838.228363][T29154] openvswitch: netlink: Message has 8 unknown bytes. [ 838.316803][T29155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6141'. [ 838.436115][ T52] block nbd169: Receive control failed (result -32) [ 838.437095][ T4934] block nbd169: Receive control failed (result -32) [ 838.572066][T28821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.691857][T28821] veth0_vlan: entered promiscuous mode [ 838.713859][T28821] veth1_vlan: entered promiscuous mode [ 838.758672][T28821] veth0_macvtap: entered promiscuous mode [ 838.769991][T28821] veth1_macvtap: entered promiscuous mode [ 838.805674][T28821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.847443][T28821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.886330][T21766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.886656][T21766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.140647][T11533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.140669][T11533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.161797][T21775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.163076][T21775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.268515][T21766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.268553][T21766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.328996][T29174] syzkaller1: entered promiscuous mode [ 839.329017][T29174] syzkaller1: entered allmulticast mode [ 839.333697][T29174] Bluetooth: MGMT ver 1.23 [ 839.333727][T29174] Bluetooth: hci0: unsupported parameter 5134 [ 839.333741][T29174] Bluetooth: hci0: unsupported parameter 8192 [ 839.333755][T29174] Bluetooth: hci0: unsupported parameter 5134 [ 839.333767][T29174] Bluetooth: hci0: unsupported parameter 8192 [ 839.378567][T29174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6147'. [ 839.633725][T29182] batman_adv: batadv0: Adding interface: syzkaller0 [ 839.633760][T29182] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.633823][T29182] batman_adv: batadv0: Interface activated: syzkaller0 [ 840.102904][T29180] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 840.189630][T29180] batman_adv: batadv0: Removing interface: syzkaller0 [ 840.333423][T29189] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6055'. [ 840.333449][T29189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6055'. [ 840.333486][T29189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6055'. [ 840.504694][ T52] block nbd170: Receive control failed (result -32) [ 840.505596][ T4934] block nbd170: Receive control failed (result -32) [ 840.741183][ T52] block nbd171: Receive control failed (result -32) [ 840.742908][ T4934] block nbd171: Receive control failed (result -32) [ 840.858632][T29213] netlink: 'syz.1.6155': attribute type 10 has an invalid length. [ 840.994241][T29218] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 841.150649][T29224] FAULT_INJECTION: forcing a failure. [ 841.150649][T29224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 841.150683][T29224] CPU: 1 UID: 0 PID: 29224 Comm: syz.1.6160 Not tainted syzkaller #0 PREEMPT(full) [ 841.150708][T29224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 841.150720][T29224] Call Trace: [ 841.150729][T29224] [ 841.150738][T29224] dump_stack_lvl+0xe8/0x150 [ 841.150772][T29224] should_fail_ex+0x410/0x560 [ 841.150801][T29224] _copy_from_iter+0x3b0/0x1660 [ 841.150838][T29224] ? __pfx__copy_from_iter+0x10/0x10 [ 841.150868][T29224] ? __alloc_skb+0x530/0x7a0 [ 841.150892][T29224] ? skb_put+0x112/0x210 [ 841.150916][T29224] ? tipc_msg_build+0xb29/0xf50 [ 841.150949][T29224] tipc_msg_build+0x8b6/0xf50 [ 841.150989][T29224] ? __pfx_tipc_msg_build+0x10/0x10 [ 841.151014][T29224] ? tipc_nametbl_lookup_mcast_nodes+0x2e/0x9e0 [ 841.151041][T29224] ? tipc_nametbl_lookup_mcast_nodes+0x4a6/0x9e0 [ 841.151062][T29224] ? tipc_nametbl_lookup_mcast_nodes+0x2e/0x9e0 [ 841.151092][T29224] __tipc_sendmsg+0x1b7d/0x2b60 [ 841.151130][T29224] ? process_measurement+0x7b2/0x1c10 [ 841.151163][T29224] ? __pfx___tipc_sendmsg+0x10/0x10 [ 841.151195][T29224] ? __lock_acquire+0x747/0x2de0 [ 841.151224][T29224] ? look_up_lock_class+0x57/0x110 [ 841.151253][T29224] ? __pfx_woken_wake_function+0x10/0x10 [ 841.151287][T29224] ? __lock_acquire+0x747/0x2de0 [ 841.151320][T29224] ? __lock_acquire+0x747/0x2de0 [ 841.151360][T29224] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 841.151394][T29224] ? tipc_sendmsg+0x47/0x70 [ 841.151424][T29224] ? __local_bh_enable_ip+0xd6/0x140 [ 841.151455][T29224] tipc_sendmsg+0x55/0x70 [ 841.151489][T29224] ? __pfx_tipc_sendmsg+0x10/0x10 [ 841.151514][T29224] sock_sendmsg_nosec+0x14e/0x190 [ 841.151539][T29224] ____sys_sendmsg+0x54e/0x850 [ 841.151573][T29224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 841.151612][T29224] ? import_iovec+0x73/0xa0 [ 841.151641][T29224] ___sys_sendmsg+0x2a5/0x360 [ 841.151668][T29224] ? __lock_acquire+0x747/0x2de0 [ 841.151694][T29224] ? __pfx____sys_sendmsg+0x10/0x10 [ 841.151760][T29224] ? __fget_files+0x2a/0x420 [ 841.151788][T29224] ? __fget_files+0x3a2/0x420 [ 841.151827][T29224] __x64_sys_sendmsg+0x1b1/0x290 [ 841.151858][T29224] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 841.151909][T29224] do_syscall_64+0x166/0x520 [ 841.151938][T29224] ? trace_irq_disable+0x3b/0x140 [ 841.151959][T29224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.151980][T29224] ? clear_bhb_loop+0x70/0xc0 [ 841.152005][T29224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.152026][T29224] RIP: 0033:0x7f6ad119e199 [ 841.152045][T29224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.152063][T29224] RSP: 002b:00007f6ad2029028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.152085][T29224] RAX: ffffffffffffffda RBX: 00007f6ad1425fa0 RCX: 00007f6ad119e199 [ 841.152100][T29224] RDX: 0000000000000000 RSI: 0000200000003a00 RDI: 0000000000000004 [ 841.152114][T29224] RBP: 00007f6ad2029090 R08: 0000000000000000 R09: 0000000000000000 [ 841.152127][T29224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 841.152140][T29224] R13: 00007f6ad1426038 R14: 00007f6ad1425fa0 R15: 00007ffe35ee71a8 [ 841.152173][T29224] [ 841.161776][T29220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6157'. [ 841.228894][T29220] ip6gre1: entered promiscuous mode [ 841.228947][T29220] ip6gre1: entered allmulticast mode [ 841.760502][T29231] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 842.087037][T29258] netlink: 'syz.0.6167': attribute type 1 has an invalid length. [ 842.179355][T29267] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.6168'. [ 842.211870][ T52] block nbd172: Receive control failed (result -32) [ 842.212783][ T4934] block nbd172: Receive control failed (result -32) [ 842.217497][T29231] bond1 (unregistering): Released all slaves [ 842.273882][T29243] bond3: (slave veth0_to_bond): Releasing active interface [ 842.273908][T29243] veth0_to_bond: left promiscuous mode [ 842.291609][T29243] veth0_to_bond: left allmulticast mode [ 842.293222][T29243] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 842.360050][T29259] bridge0: port 3(veth3) entered blocking state [ 842.365225][T29259] bridge0: port 3(veth3) entered disabled state [ 842.365366][T29259] veth3: entered allmulticast mode [ 842.367286][T29259] veth3: entered promiscuous mode [ 842.436671][T29265] vxcan3: entered promiscuous mode [ 842.643695][T29271] bridge0: port 3(veth3) entered blocking state [ 842.643810][T29271] bridge0: port 3(veth3) entered forwarding state [ 842.913313][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 842.926385][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 842.928123][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 842.929899][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 842.930754][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 843.022734][T29258] bridge0: port 4(batadv1) entered blocking state [ 843.022956][T29258] bridge0: port 4(batadv1) entered disabled state [ 843.023262][T29258] batadv1: entered allmulticast mode [ 843.042363][T29258] batadv1: entered promiscuous mode [ 843.337996][T29294] FAULT_INJECTION: forcing a failure. [ 843.337996][T29294] name failslab, interval 1, probability 0, space 0, times 0 [ 843.338062][T29294] CPU: 0 UID: 0 PID: 29294 Comm: syz.2.6173 Not tainted syzkaller #0 PREEMPT(full) [ 843.338087][T29294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 843.338099][T29294] Call Trace: [ 843.338107][T29294] [ 843.338116][T29294] dump_stack_lvl+0xe8/0x150 [ 843.338149][T29294] should_fail_ex+0x410/0x560 [ 843.338178][T29294] ? __alloc_skb+0x1db/0x7a0 [ 843.338202][T29294] should_failslab+0xa8/0x100 [ 843.338228][T29294] ? __alloc_skb+0x1db/0x7a0 [ 843.338249][T29294] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 843.338284][T29294] ? __alloc_skb+0x1db/0x7a0 [ 843.338321][T29294] __alloc_skb+0x1db/0x7a0 [ 843.338350][T29294] tipc_buf_acquire+0x2b/0xe0 [ 843.338378][T29294] tipc_msg_build+0x911/0xf50 [ 843.338417][T29294] ? __pfx_tipc_msg_build+0x10/0x10 [ 843.338443][T29294] ? tipc_nametbl_lookup_mcast_nodes+0x2e/0x9e0 [ 843.338469][T29294] ? tipc_nametbl_lookup_mcast_nodes+0x4a6/0x9e0 [ 843.338490][T29294] ? tipc_nametbl_lookup_mcast_nodes+0x2e/0x9e0 [ 843.338520][T29294] __tipc_sendmsg+0x1b7d/0x2b60 [ 843.338557][T29294] ? lock_acquire+0x115/0x350 [ 843.338584][T29294] ? __pfx___tipc_sendmsg+0x10/0x10 [ 843.338619][T29294] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 843.338647][T29294] ? lapic_next_event+0x11/0x20 [ 843.338667][T29294] ? clockevents_program_event+0x491/0x630 [ 843.338694][T29294] ? __pfx_woken_wake_function+0x10/0x10 [ 843.338725][T29294] ? __pfx_clockevents_program_event+0x10/0x10 [ 843.338766][T29294] ? irqentry_exit+0x218/0x910 [ 843.338795][T29294] ? lockdep_hardirqs_on+0x7b/0x110 [ 843.338823][T29294] ? irqentry_exit+0x218/0x910 [ 843.338850][T29294] ? trace_irq_disable+0x3b/0x140 [ 843.338889][T29294] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 843.338922][T29294] ? tipc_sendmsg+0x47/0x70 [ 843.338951][T29294] ? __local_bh_enable_ip+0xd6/0x140 [ 843.338981][T29294] tipc_sendmsg+0x55/0x70 [ 843.339009][T29294] ? __pfx_tipc_sendmsg+0x10/0x10 [ 843.339033][T29294] sock_sendmsg_nosec+0x14e/0x190 [ 843.339057][T29294] ____sys_sendmsg+0x54e/0x850 [ 843.339091][T29294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 843.339128][T29294] ? import_iovec+0x73/0xa0 [ 843.339159][T29294] ___sys_sendmsg+0x2a5/0x360 [ 843.339184][T29294] ? __lock_acquire+0x747/0x2de0 [ 843.339209][T29294] ? __pfx____sys_sendmsg+0x10/0x10 [ 843.339274][T29294] ? __fget_files+0x2a/0x420 [ 843.339300][T29294] ? __fget_files+0x3a2/0x420 [ 843.339344][T29294] __x64_sys_sendmsg+0x1b1/0x290 [ 843.339374][T29294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 843.339425][T29294] do_syscall_64+0x166/0x520 [ 843.339452][T29294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.339473][T29294] ? clear_bhb_loop+0x70/0xc0 [ 843.339498][T29294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.339518][T29294] RIP: 0033:0x7fa68619e199 [ 843.339537][T29294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.339554][T29294] RSP: 002b:00007fa687112028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 843.339576][T29294] RAX: ffffffffffffffda RBX: 00007fa686425fa0 RCX: 00007fa68619e199 [ 843.339591][T29294] RDX: 0000000000000000 RSI: 0000200000003a00 RDI: 0000000000000004 [ 843.339605][T29294] RBP: 00007fa687112090 R08: 0000000000000000 R09: 0000000000000000 [ 843.339618][T29294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 843.339631][T29294] R13: 00007fa686426038 R14: 00007fa686425fa0 R15: 00007ffc30de19a8 [ 843.339665][T29294] [ 843.505228][T21775] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 843.505278][T21775] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 845.024516][ T52] Bluetooth: hci5: command tx timeout [ 845.782934][T29334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6180'. [ 846.190693][T29286] wg2 speed is unknown, defaulting to 1000 [ 846.196201][T29286] lo speed is unknown, defaulting to 1000 [ 846.777730][T29368] IPv6: NLM_F_CREATE should be specified when creating new route [ 846.862728][T29370] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 846.955080][T29351] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 847.115647][ T52] Bluetooth: hci5: command tx timeout [ 847.201463][T29386] FAULT_INJECTION: forcing a failure. [ 847.201463][T29386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 847.201643][T29386] CPU: 0 UID: 0 PID: 29386 Comm: syz.4.6197 Not tainted syzkaller #0 PREEMPT(full) [ 847.201666][T29386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 847.201679][T29386] Call Trace: [ 847.201688][T29386] [ 847.201697][T29386] dump_stack_lvl+0xe8/0x150 [ 847.201730][T29386] should_fail_ex+0x410/0x560 [ 847.201760][T29386] _copy_from_iter+0x3b0/0x1660 [ 847.201797][T29386] ? __pfx__copy_from_iter+0x10/0x10 [ 847.201827][T29386] ? __alloc_skb+0x530/0x7a0 [ 847.201851][T29386] ? skb_put+0x112/0x210 [ 847.201874][T29386] ? tipc_msg_build+0xb29/0xf50 [ 847.201907][T29386] tipc_msg_build+0x8b6/0xf50 [ 847.201947][T29386] ? __pfx_tipc_msg_build+0x10/0x10 [ 847.201971][T29386] ? tipc_nametbl_lookup_mcast_nodes+0x2e/0x9e0 [ 847.201999][T29386] ? tipc_nametbl_lookup_mcast_nodes+0x4a6/0x9e0 [ 847.202020][T29386] ? tipc_nametbl_lookup_mcast_nodes+0x2e/0x9e0 [ 847.202048][T29386] __tipc_sendmsg+0x1b7d/0x2b60 [ 847.202088][T29386] ? process_measurement+0x7b2/0x1c10 [ 847.202122][T29386] ? __pfx___tipc_sendmsg+0x10/0x10 [ 847.202156][T29386] ? __lock_acquire+0x747/0x2de0 [ 847.202184][T29386] ? look_up_lock_class+0x57/0x110 [ 847.202213][T29386] ? __pfx_woken_wake_function+0x10/0x10 [ 847.202248][T29386] ? __lock_acquire+0x747/0x2de0 [ 847.202280][T29386] ? irqentry_exit+0x218/0x910 [ 847.202308][T29386] ? lockdep_hardirqs_on+0x7b/0x110 [ 847.202337][T29386] ? irqentry_exit+0x218/0x910 [ 847.202363][T29386] ? trace_irq_disable+0x3b/0x140 [ 847.202398][T29386] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 847.202432][T29386] ? tipc_sendmsg+0x47/0x70 [ 847.202460][T29386] ? __local_bh_enable_ip+0xd6/0x140 [ 847.202491][T29386] tipc_sendmsg+0x55/0x70 [ 847.202518][T29386] ? __pfx_tipc_sendmsg+0x10/0x10 [ 847.202548][T29386] sock_sendmsg_nosec+0x14e/0x190 [ 847.202573][T29386] ____sys_sendmsg+0x54e/0x850 [ 847.202606][T29386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 847.202643][T29386] ? import_iovec+0x73/0xa0 [ 847.202672][T29386] ___sys_sendmsg+0x2a5/0x360 [ 847.202697][T29386] ? __lock_acquire+0x747/0x2de0 [ 847.202722][T29386] ? __pfx____sys_sendmsg+0x10/0x10 [ 847.202787][T29386] ? __fget_files+0x2a/0x420 [ 847.202814][T29386] ? __fget_files+0x3a2/0x420 [ 847.202853][T29386] __x64_sys_sendmsg+0x1b1/0x290 [ 847.202884][T29386] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 847.202935][T29386] do_syscall_64+0x166/0x520 [ 847.202963][T29386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.202984][T29386] ? clear_bhb_loop+0x70/0xc0 [ 847.203009][T29386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.203029][T29386] RIP: 0033:0x7f0b4ef9e199 [ 847.203047][T29386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.203066][T29386] RSP: 002b:00007f0b4fdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.203088][T29386] RAX: ffffffffffffffda RBX: 00007f0b4f225fa0 RCX: 00007f0b4ef9e199 [ 847.203103][T29386] RDX: 0000000000000000 RSI: 0000200000003a00 RDI: 0000000000000004 [ 847.203115][T29386] RBP: 00007f0b4fdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 847.203128][T29386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 847.203141][T29386] R13: 00007f0b4f226038 R14: 00007f0b4f225fa0 R15: 00007fff405f9678 [ 847.203175][T29386] [ 847.204420][T29384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6196'. [ 847.439120][T29286] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.440681][T29286] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.440811][T29286] bridge_slave_0: entered allmulticast mode [ 847.449289][T29286] bridge_slave_0: entered promiscuous mode [ 847.459971][T29286] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.460152][T29286] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.460326][T29286] bridge_slave_1: entered allmulticast mode [ 847.469846][T29286] bridge_slave_1: entered promiscuous mode [ 847.716725][T29286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.727282][T29286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.831080][T29286] team0: Port device team_slave_0 added [ 847.843301][T29286] team0: Port device team_slave_1 added [ 847.920319][T29286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.920352][T29286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.920409][T29286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.973430][T29286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.973463][T29286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.973508][T29286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.980172][T29406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6204'. [ 848.227363][ T52] Bluetooth: hci0: command 0x080f tx timeout [ 848.233848][T29286] hsr_slave_0: entered promiscuous mode [ 848.242321][T29286] hsr_slave_1: entered promiscuous mode [ 848.249750][T29286] debugfs: 'hsr0' already exists in 'hsr' [ 848.249771][T29286] Cannot create hsr debugfs directory [ 848.255482][T29413] netlink: 236 bytes leftover after parsing attributes in process `syz.3.6205'. [ 848.255506][T29413] netlink: 236 bytes leftover after parsing attributes in process `syz.3.6205'. [ 848.263521][T29413] netlink: 'syz.3.6205': attribute type 1 has an invalid length. [ 848.286139][T29413] team0: entered allmulticast mode [ 848.286160][T29413] team_slave_0: entered allmulticast mode [ 848.286177][T29413] team_slave_1: entered allmulticast mode [ 848.286366][T29413] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 848.352263][T29412] netlink: 3568 bytes leftover after parsing attributes in process `syz.2.6206'. [ 848.828572][T29424] ip_tables: iptables: counters copy to user failed while replacing table [ 848.933882][T29427] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6212'. [ 849.195491][ T4934] Bluetooth: hci5: command tx timeout [ 849.281745][T29437] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 850.042922][T29451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6217'. [ 850.212105][T29451] netlink: 'syz.0.6217': attribute type 1 has an invalid length. [ 850.212128][T29451] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6217'. [ 850.355286][T29462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6219'. [ 850.428555][T29286] batman_adv: batadv0: Removing interface: vlan2 [ 850.750468][T29471] macvtap1: entered allmulticast mode [ 850.750492][T29471] veth0_to_bridge: entered allmulticast mode [ 850.798258][T29471] veth0_to_bridge: left allmulticast mode [ 851.264519][ T4934] Bluetooth: hci5: command tx timeout [ 851.670326][T29491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6226'. [ 851.756084][T29286] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 851.793083][T29286] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 851.806626][T29286] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 851.837970][T29286] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 851.877472][T29286] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 851.922384][T29286] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 851.932525][T29286] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 851.968283][T29286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 852.467122][T29286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.549110][T29517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 852.575917][T29286] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.637217][T11535] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.637324][T11535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.680813][T11535] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.680917][T11535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.830730][T29528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6234'. [ 853.531604][T29544] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6237'. [ 854.342124][T29557] tipc: Enabling of bearer rejected, failed to enable media [ 854.441683][ T4934] block nbd173: Receive control failed (result -32) [ 854.445970][ T52] block nbd173: Receive control failed (result -32) [ 855.203753][T29582] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6245'. [ 855.203779][T29582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6245'. [ 855.203798][T29582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6245'. [ 855.413302][T29589] ip_tables: iptables: counters copy to user failed while replacing table [ 855.461045][T29286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.611860][T29286] veth0_vlan: entered promiscuous mode [ 855.722351][T29286] veth1_vlan: entered promiscuous mode [ 855.913300][T29286] veth0_macvtap: entered promiscuous mode [ 855.960204][T29286] veth1_macvtap: entered promiscuous mode [ 856.118736][T29286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.153902][T29286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.359477][T21769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.359522][T21769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.359557][T21769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.359590][T21769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.926392][T29613] Bluetooth: hci0: Invalid link address type 20 for 66:55:44:33:22:11 [ 856.972549][T11533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.972569][T11533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.206919][T21776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.206941][T21776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.593723][T29634] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 858.152701][T29640] geneve1: entered promiscuous mode [ 858.273172][T29640] siw: device registration error -23 [ 859.075376][ T52] block nbd174: Receive control failed (result -32) [ 859.076108][ T4934] block nbd174: Receive control failed (result -32) [ 859.669801][T11535] IPVS: starting estimator thread 0... [ 859.755726][T29686] IPVS: using max 38 ests per chain, 91200 per kthread [ 860.421565][T29701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6278'. [ 860.421592][T29701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.421612][T29701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.455878][T29701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.455902][T29701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.747183][T29707] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6280'. [ 860.887030][ T52] block nbd175: Receive control failed (result -32) [ 860.887035][ T4934] block nbd175: Receive control failed (result -32) [ 861.997740][T29729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6287'. [ 862.221327][T29729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.409322][ T52] block nbd176: Receive control failed (result -32) [ 862.410629][ T4934] block nbd176: Receive control failed (result -32) [ 862.918483][ T4934] block nbd177: Receive control failed (result -32) [ 862.920702][ T52] block nbd177: Receive control failed (result -32) [ 863.058927][T29747] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.6292'. [ 863.060812][T29747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6292'. [ 863.262145][T29755] netlink: 'syz.2.6295': attribute type 2 has an invalid length. [ 863.585389][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 863.695231][ T52] block nbd178: Receive control failed (result -32) [ 863.698390][ T4934] block nbd178: Receive control failed (result -32) [ 864.048200][T29780] veth0: entered promiscuous mode [ 864.073732][T29783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6304'. [ 864.088751][T29783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6304'. [ 864.089063][T29783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6304'. [ 864.089254][T29783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6304'. [ 864.091788][T29783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6304'. [ 864.517252][T29778] veth0: left promiscuous mode [ 865.142490][T29806] --map-set only usable from mangle table [ 865.684486][T29821] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 865.772836][T29824] __nla_validate_parse: 29 callbacks suppressed [ 865.772857][T29824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6313'. [ 865.821587][T29823] batadv0: entered promiscuous mode [ 865.823493][T29823] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 865.843518][T29823] batadv0: left promiscuous mode [ 866.997350][T29789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 867.340399][T29833] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6314'. [ 867.449219][T29838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.500101][T29835] ip_tables: iptables: counters copy to user failed while replacing table [ 867.523852][T29839] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 867.574669][T29845] ip_tables: iptables: counters copy to user failed while replacing table [ 867.916169][T29833] syzkaller0: entered promiscuous mode [ 867.916195][T29833] syzkaller0: entered allmulticast mode [ 868.113216][T29861] xt_policy: output policy not valid in PREROUTING and INPUT [ 869.261060][T29895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6323'. [ 873.413340][T29868] netlink: 'syz.3.6316': attribute type 13 has an invalid length. [ 873.455670][T29862] syzkaller1: entered promiscuous mode [ 873.455694][T29862] syzkaller1: entered allmulticast mode [ 874.028703][ T4934] block nbd179: Receive control failed (result -32) [ 874.044054][ T52] block nbd179: Receive control failed (result -32) [ 874.217958][T29926] geneve3: entered promiscuous mode [ 874.272738][T29925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6325'. [ 874.284963][T29925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6325'. [ 874.509858][T29932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6332'. [ 874.601248][T29938] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 874.732261][T29930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6331'. [ 875.064844][T29943] xt_policy: output policy not valid in PREROUTING and INPUT [ 875.490883][T29950] netlink: 380 bytes leftover after parsing attributes in process `syz.3.6336'. [ 875.490917][T29950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6336'. [ 875.490932][T29950] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6336'. [ 875.720544][T29962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6343'. [ 875.859328][T29970] batman_adv: batadv0: Adding interface: syzkaller0 [ 875.859347][T29970] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.859394][T29970] batman_adv: batadv0: Interface activated: syzkaller0 [ 875.978008][ T4934] block nbd180: Receive control failed (result -32) [ 875.980480][ T52] block nbd180: Receive control failed (result -32) [ 876.521422][T29985] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6345'. [ 876.523854][T29985] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6345'. [ 876.878745][T29970] geneve1: left promiscuous mode [ 876.920343][T30005] sctp: [Deprecated]: syz.3.6348 (pid 30005) Use of int in max_burst socket option. [ 876.920343][T30005] Use struct sctp_assoc_value instead [ 877.057601][T29952] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 877.117514][T29952] batman_adv: batadv0: Removing interface: syzkaller0 [ 877.273098][T30016] sctp: [Deprecated]: syz.2.6350 (pid 30016) Use of int in max_burst socket option deprecated. [ 877.273098][T30016] Use struct sctp_assoc_value instead [ 877.318727][T30007] ovs-s!: entered promiscuous mode [ 877.452818][T29986] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 878.242482][ T4934] block nbd181: Receive control failed (result -32) [ 878.254617][ T52] block nbd181: Receive control failed (result -32) [ 878.275512][T30024] netlink: 'syz.1.6351': attribute type 5 has an invalid length. [ 878.935812][T30055] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 879.022590][T30051] syzkaller0: entered promiscuous mode [ 879.022612][T30051] syzkaller0: entered allmulticast mode [ 879.401421][T30060] __nla_validate_parse: 36 callbacks suppressed [ 879.401464][T30060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6361'. [ 879.427796][T30058] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 879.519802][T30063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6364'. [ 879.701734][T30063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6364'. [ 880.551459][T30086] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 881.718499][T30109] netlink: 380 bytes leftover after parsing attributes in process `syz.3.6373'. [ 881.718699][T30109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6373'. [ 881.718905][T30109] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6373'. [ 881.945250][ T52] block nbd182: Receive control failed (result -32) [ 881.948635][ T4934] block nbd182: Receive control failed (result -32) [ 883.516372][T30155] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20001 [ 884.221159][T30164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6392'. [ 884.371811][T30166] netlink: 'syz.4.6392': attribute type 2 has an invalid length. [ 884.371834][T30166] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6392'. [ 884.758531][ T4934] block nbd183: Receive control failed (result -32) [ 884.835748][ T52] block nbd183: Receive control failed (result -32) [ 884.939193][T30164] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 885.297305][T30174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6396'. [ 885.423101][T30178] FAULT_INJECTION: forcing a failure. [ 885.423101][T30178] name failslab, interval 1, probability 0, space 0, times 0 [ 885.423144][T30178] CPU: 1 UID: 0 PID: 30178 Comm: syz.3.6393 Not tainted syzkaller #0 PREEMPT(full) [ 885.423168][T30178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 885.423180][T30178] Call Trace: [ 885.423189][T30178] [ 885.423198][T30178] dump_stack_lvl+0xe8/0x150 [ 885.423231][T30178] should_fail_ex+0x410/0x560 [ 885.423260][T30178] ? __alloc_skb+0x1db/0x7a0 [ 885.423284][T30178] should_failslab+0xa8/0x100 [ 885.423311][T30178] ? __alloc_skb+0x1db/0x7a0 [ 885.423332][T30178] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 885.423367][T30178] ? __alloc_skb+0x1db/0x7a0 [ 885.423398][T30178] __alloc_skb+0x1db/0x7a0 [ 885.423427][T30178] tipc_buf_acquire+0x2b/0xe0 [ 885.423457][T30178] tipc_msg_build+0x911/0xf50 [ 885.423498][T30178] ? __pfx_tipc_msg_build+0x10/0x10 [ 885.423523][T30178] ? tipc_nametbl_lookup_mcast_nodes+0x2e/0x9e0 [ 885.423551][T30178] ? tipc_nametbl_lookup_mcast_nodes+0x4a6/0x9e0 [ 885.423573][T30178] ? tipc_nametbl_lookup_mcast_nodes+0x2e/0x9e0 [ 885.423603][T30178] __tipc_sendmsg+0x1b7d/0x2b60 [ 885.423644][T30178] ? process_measurement+0x7b2/0x1c10 [ 885.423684][T30178] ? __pfx___tipc_sendmsg+0x10/0x10 [ 885.423718][T30178] ? __lock_acquire+0x747/0x2de0 [ 885.423746][T30178] ? look_up_lock_class+0x57/0x110 [ 885.423776][T30178] ? __pfx_woken_wake_function+0x10/0x10 [ 885.423811][T30178] ? __lock_acquire+0x747/0x2de0 [ 885.423843][T30178] ? __lock_acquire+0x747/0x2de0 [ 885.423883][T30178] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 885.423915][T30178] ? tipc_sendmsg+0x47/0x70 [ 885.423942][T30178] ? __local_bh_enable_ip+0xd6/0x140 [ 885.423973][T30178] tipc_sendmsg+0x55/0x70 [ 885.424000][T30178] ? __pfx_tipc_sendmsg+0x10/0x10 [ 885.424025][T30178] sock_sendmsg_nosec+0x14e/0x190 [ 885.424050][T30178] ____sys_sendmsg+0x54e/0x850 [ 885.424083][T30178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 885.424120][T30178] ? import_iovec+0x73/0xa0 [ 885.424150][T30178] ___sys_sendmsg+0x2a5/0x360 [ 885.424176][T30178] ? __lock_acquire+0x747/0x2de0 [ 885.424201][T30178] ? __pfx____sys_sendmsg+0x10/0x10 [ 885.424266][T30178] ? __fget_files+0x2a/0x420 [ 885.424293][T30178] ? __fget_files+0x3a2/0x420 [ 885.424332][T30178] __x64_sys_sendmsg+0x1b1/0x290 [ 885.424362][T30178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 885.424413][T30178] do_syscall_64+0x166/0x520 [ 885.424441][T30178] ? trace_irq_disable+0x3b/0x140 [ 885.424462][T30178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.424483][T30178] ? clear_bhb_loop+0x70/0xc0 [ 885.424508][T30178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.424528][T30178] RIP: 0033:0x7fbcf719e199 [ 885.424547][T30178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.424565][T30178] RSP: 002b:00007fbcf7f84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 885.424588][T30178] RAX: ffffffffffffffda RBX: 00007fbcf7425fa0 RCX: 00007fbcf719e199 [ 885.424603][T30178] RDX: 0000000000000000 RSI: 0000200000003a00 RDI: 0000000000000004 [ 885.424617][T30178] RBP: 00007fbcf7f84090 R08: 0000000000000000 R09: 0000000000000000 [ 885.424630][T30178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 885.424642][T30178] R13: 00007fbcf7426038 R14: 00007fbcf7425fa0 R15: 00007ffee1bd35f8 [ 885.424682][T30178] [ 885.867862][T30182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6398'. [ 886.355115][T30192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6400'. [ 886.472983][T30197] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6405'. [ 886.515050][T30197] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6405'. [ 886.520937][T30197] --map-set only usable from mangle table [ 886.550948][T30195] xt_policy: output policy not valid in PREROUTING and INPUT [ 887.062088][ T4934] block nbd184: Receive control failed (result -22) [ 887.098991][ T2018] block nbd184: Dead connection, failed to find a fallback [ 887.099024][ T2018] block nbd184: shutting down sockets [ 887.099185][ T2018] I/O error, dev nbd184, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.099324][ T2018] Buffer I/O error on dev nbd184, logical block 0, async page read [ 887.102569][ T2018] I/O error, dev nbd184, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.102600][ T2018] Buffer I/O error on dev nbd184, logical block 0, async page read [ 887.102721][ T2018] I/O error, dev nbd184, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.102746][ T2018] Buffer I/O error on dev nbd184, logical block 0, async page read [ 887.102853][ T2018] I/O error, dev nbd184, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.102877][ T2018] Buffer I/O error on dev nbd184, logical block 0, async page read [ 887.102994][ T2018] I/O error, dev nbd184, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.103018][ T2018] Buffer I/O error on dev nbd184, logical block 0, async page read [ 887.103162][ T2018] I/O error, dev nbd184, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.103187][ T2018] Buffer I/O error on dev nbd184, logical block 0, async page read [ 887.103326][ T2018] I/O error, dev nbd184, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.103350][ T2018] Buffer I/O error on dev nbd184, logical block 0, async page read [ 887.103485][ T2018] I/O error, dev nbd184, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.117569][ T2018] Buffer I/O error on dev nbd184, logical block 0, async page read [ 887.259201][T29916] ldm_validate_partition_table(): Disk read failed. [ 887.259366][ T2018] I/O error, dev nbd184, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.259397][ T2018] Buffer I/O error on dev nbd184, logical block 0, async page read [ 887.273387][ T2018] I/O error, dev nbd184, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.273420][ T2018] Buffer I/O error on dev nbd184, logical block 0, async page read [ 887.285594][T29916] Dev nbd184: unable to read RDB block 0 [ 887.286182][T29916] nbd184: unable to read partition table [ 887.361003][T30210] nbd184: detected capacity change from 0 to 32 [ 887.422806][T29916] ldm_validate_partition_table(): Disk read failed. [ 887.438019][T29916] Dev nbd184: unable to read RDB block 0 [ 887.438885][T29916] nbd184: unable to read partition table [ 887.560326][T29916] ldm_validate_partition_table(): Disk read failed. [ 887.562987][T29916] Dev nbd184: unable to read RDB block 0 [ 887.563512][T29916] nbd184: unable to read partition table [ 888.005388][T30230] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 890.056499][T30256] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 891.099130][ T4934] block nbd185: Receive control failed (result -32) [ 891.099649][ T52] block nbd185: Receive control failed (result -32) [ 891.250659][T30291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 891.253699][T30291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 891.542034][ T4934] block nbd186: Receive control failed (result -32) [ 891.542034][ T52] block nbd186: Receive control failed (result -32) [ 891.863722][T30309] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6429'. [ 892.987673][T30335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6436'. [ 893.018317][T30335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6436'. [ 893.053402][T30335] --map-set only usable from mangle table [ 893.181270][ T52] block nbd187: Receive control failed (result -32) [ 893.191568][ T4934] block nbd187: Receive control failed (result -32) [ 893.553600][T30340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6438'. [ 893.618160][T30347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6438'. [ 894.202465][T27274] IPVS: starting estimator thread 0... [ 894.213223][T30370] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6441'. [ 894.300079][T30373] IPVS: using max 27 ests per chain, 64800 per kthread [ 894.796581][T30376] xt_policy: output policy not valid in PREROUTING and INPUT [ 894.892951][T30383] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6444'. [ 895.579385][T30402] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6448'. [ 896.766223][T30420] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6456'. [ 896.803469][T30420] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6456'. [ 896.841213][T30420] --map-set only usable from mangle table [ 897.051511][ T52] block nbd188: Receive control failed (result -32) [ 897.052162][ T4934] block nbd188: Receive control failed (result -32) [ 897.335094][T30433] gretap1: entered allmulticast mode [ 897.640874][T30445] netlink: 'syz.3.6463': attribute type 6 has an invalid length. [ 897.692893][T30455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6463'. [ 897.692929][T30455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6463'. [ 897.959667][T30451] nft_compat: unsupported protocol 5 [ 898.183150][T30466] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 898.583814][T30472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6471'. [ 898.583846][T30472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6471'. [ 898.848399][T30476] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6473'. [ 898.920836][ T4934] block nbd189: Receive control failed (result -32) [ 898.921306][ T52] block nbd189: Receive control failed (result -32) [ 899.016615][T30480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6472'. [ 899.318999][T30480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6472'. [ 899.861853][T30498] netlink: 67 bytes leftover after parsing attributes in process `syz.1.6476'. [ 900.020051][T30503] xt_policy: output policy not valid in PREROUTING and INPUT [ 900.046536][T30498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 900.306194][T30507] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 900.405793][T30511] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6484'. [ 900.500402][T30511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6484'. [ 900.570879][T30511] bond0: (slave bond_slave_0): Releasing backup interface [ 900.657418][T30519] bridge0: port 3(veth0) entered blocking state [ 900.657918][T30519] bridge0: port 3(veth0) entered disabled state [ 900.658075][T30519] veth0: entered allmulticast mode [ 900.688533][T30519] veth0: entered promiscuous mode [ 900.689329][T30519] bridge0: port 3(veth0) entered blocking state [ 900.689460][T30519] bridge0: port 3(veth0) entered forwarding state [ 901.270729][T30530] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 901.599622][T27274] IPVS: starting estimator thread 0... [ 901.684687][T30545] IPVS: using max 27 ests per chain, 64800 per kthread [ 901.813719][T30555] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 901.963583][T30549] xt_policy: output policy not valid in PREROUTING and INPUT [ 903.097192][T30580] macsec1: entered promiscuous mode [ 903.446949][T30591] ip_tables: iptables: counters copy to user failed while replacing table [ 904.409845][T30617] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 904.517867][T30620] netlink: 'syz.3.6515': attribute type 1 has an invalid length. [ 904.619468][T30625] __nla_validate_parse: 1 callbacks suppressed [ 904.619488][T30625] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6514'. [ 904.666009][T30620] bond1: entered promiscuous mode [ 904.666512][T30620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 904.688901][T30625] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6514'. [ 905.012198][T30630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6517'. [ 905.055005][T30620] bond1: (slave bridge1): making interface the new active one [ 905.055032][T30620] bridge1: entered promiscuous mode [ 905.056198][T30620] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 905.297611][T30636] xt_policy: output policy not valid in PREROUTING and INPUT [ 905.610900][T30639] xt_policy: output policy not valid in PREROUTING and INPUT [ 905.786316][T30645] wg2 speed is unknown, defaulting to 1000 [ 905.812894][T30645] lo speed is unknown, defaulting to 1000 [ 905.821746][T30650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6524'. [ 906.602238][T30662] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 906.903263][ T52] block nbd190: Receive control failed (result -32) [ 906.913580][ T4934] block nbd190: Receive control failed (result -32) [ 907.719812][T30682] netlink: 'syz.4.6536': attribute type 7 has an invalid length. [ 908.000753][T30687] batman_adv: batadv0: Adding interface: veth0 [ 908.000773][T30687] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.000805][T30687] batman_adv: batadv0: Interface activated: veth0 [ 908.219037][T30687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 908.219064][T30687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.343132][T30687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 908.343157][T30687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.412309][T30687] batman_adv: batadv0: Interface deactivated: veth0 [ 908.412334][T30687] batman_adv: batadv0: Removing interface: veth0 [ 908.667467][ T52] block nbd191: Receive control failed (result -32) [ 908.672212][ T4934] block nbd191: Receive control failed (result -32) [ 908.717495][T30697] xt_policy: output policy not valid in PREROUTING and INPUT [ 909.383091][ T4934] block nbd192: Receive control failed (result -32) [ 909.384974][ T52] block nbd192: Receive control failed (result -32) [ 910.315878][T30726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6550'. [ 910.349339][T30730] netlink: 'syz.3.6548': attribute type 8 has an invalid length. [ 910.349360][T30730] netlink: 'syz.3.6548': attribute type 9 has an invalid length. [ 910.349373][T30730] netlink: 'syz.3.6548': attribute type 10 has an invalid length. [ 910.349395][T30730] netlink: 'syz.3.6548': attribute type 11 has an invalid length. [ 910.349409][T30730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6548'. [ 910.651752][T30737] syzkaller0: entered promiscuous mode [ 910.651783][T30737] syzkaller0: entered allmulticast mode [ 910.800261][T30741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6554'. [ 911.147049][T30753] netlink: 'syz.0.6556': attribute type 12 has an invalid length. [ 911.182209][T30752] ip_tables: iptables: counters copy to user failed while replacing table [ 911.316922][T30761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6553'. [ 912.129905][T30778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6561'. [ 912.222055][T30778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6561'. [ 913.869702][T30797] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 913.920231][T30797] bond2 (unregistering): Released all slaves [ 913.960222][T30804] tipc: Enabling of bearer rejected, failed to enable media [ 915.222476][ T4934] block nbd193: Receive control failed (result -32) [ 915.227521][ T52] block nbd193: Receive control failed (result -32) [ 915.750972][T30862] netlink: 'syz.1.6581': attribute type 21 has an invalid length. [ 915.783855][T30862] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6581'. [ 915.793624][T30862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6581'. [ 915.894498][T30862] netlink: 'syz.1.6581': attribute type 21 has an invalid length. [ 918.389956][T30862] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6581'. [ 918.389998][T30862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6581'. [ 918.609650][ T4934] Bluetooth: hci5: link tx timeout [ 918.609670][ T4934] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 918.967276][T30905] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6585'. [ 919.014371][ T52] Bluetooth: hci5: link tx timeout [ 919.014887][ T52] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 919.044288][ T52] Bluetooth: hci5: link tx timeout [ 919.045059][ T52] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 919.080727][T30905] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6585'. [ 919.168732][ T52] Bluetooth: hci5: link tx timeout [ 919.169230][ T52] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 919.237960][T30905] --map-set only usable from mangle table [ 919.672730][T30925] netlink: 'syz.4.6589': attribute type 10 has an invalid length. [ 919.709820][T30923] xt_policy: output policy not valid in PREROUTING and INPUT [ 919.809129][T30925] syz_tun: entered promiscuous mode [ 919.833334][T30925] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 919.878310][ T4947] s`z1: Port: 1 Link ACTIVE [ 919.961252][T30927] ovs-system: entered promiscuous mode [ 920.061897][T30939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6593'. [ 920.079586][ T52] Bluetooth: hci5: link tx timeout [ 920.079848][ T52] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 920.175525][T30939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6593'. [ 920.267253][T30939] --map-set only usable from mangle table [ 920.621258][T30951] netlink: 380 bytes leftover after parsing attributes in process `syz.3.6596'. [ 920.621281][T30951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6596'. [ 920.627121][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 921.397608][T30967] __nla_validate_parse: 1 callbacks suppressed [ 921.397629][T30967] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6602'. [ 921.398230][T30965] netlink: zone id is out of range [ 921.398243][T30965] netlink: zone id is out of range [ 921.398252][T30965] netlink: zone id is out of range [ 921.398260][T30965] netlink: zone id is out of range [ 921.398269][T30965] netlink: zone id is out of range [ 921.398277][T30965] netlink: zone id is out of range [ 921.398290][T30965] netlink: zone id is out of range [ 921.398299][T30965] netlink: zone id is out of range [ 921.398308][T30965] netlink: zone id is out of range [ 921.398317][T30965] netlink: zone id is out of range [ 921.550117][T30967] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6602'. [ 921.552819][T30971] netlink: 3916 bytes leftover after parsing attributes in process `syz.0.6604'. [ 921.552889][T30971] netlink: 243 bytes leftover after parsing attributes in process `syz.0.6604'. [ 921.596173][T30967] --map-set only usable from mangle table [ 921.882742][T30976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6605'. [ 922.299709][ T4934] block nbd194: Receive control failed (result -32) [ 922.301854][ T52] block nbd194: Receive control failed (result -32) [ 922.710536][ T4934] block nbd195: Receive control failed (result -32) [ 922.724497][ T52] block nbd195: Receive control failed (result -32) [ 922.889060][T31009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6616'. [ 922.907895][T31009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6616'. [ 922.908193][T31009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6616'. [ 922.912368][T31009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6616'. [ 922.912652][T31009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6616'. [ 923.002113][T31010] netlink: 'syz.4.6615': attribute type 1 has an invalid length. [ 923.029158][T31017] --map-set only usable from mangle table [ 923.081286][T31010] 8021q: adding VLAN 0 to HW filter on device bond7 [ 923.092041][T31020] batman_adv: batadv0: Removing interface: veth0_to_bond [ 923.149219][T31020] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 923.706728][T31028] FAULT_INJECTION: forcing a failure. [ 923.706728][T31028] name failslab, interval 1, probability 0, space 0, times 0 [ 923.706763][T31028] CPU: 1 UID: 0 PID: 31028 Comm: syz.4.6619 Not tainted syzkaller #0 PREEMPT(full) [ 923.706792][T31028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 923.706806][T31028] Call Trace: [ 923.706814][T31028] [ 923.706823][T31028] dump_stack_lvl+0xe8/0x150 [ 923.706857][T31028] should_fail_ex+0x410/0x560 [ 923.706886][T31028] should_failslab+0xa8/0x100 [ 923.706914][T31028] __kvmalloc_node_noprof+0x176/0x820 [ 923.706941][T31028] ? page_pool_create_percpu+0x2ef/0xc70 [ 923.706964][T31028] ? page_pool_create_percpu+0x2ef/0xc70 [ 923.706994][T31028] page_pool_create_percpu+0x2ef/0xc70 [ 923.707022][T31028] bpf_test_run_xdp_live+0x23a/0x1c20 [ 923.707048][T31028] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 923.707074][T31028] ? __mutex_unlock_slowpath+0x731/0x900 [ 923.707111][T31028] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 923.707146][T31028] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 923.707169][T31028] ? bpf_dispatcher_xdp+0x800/0x1000 [ 923.707236][T31028] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 923.707267][T31028] ? _copy_from_user+0x94/0xb0 [ 923.707293][T31028] ? bpf_test_init+0x113/0x150 [ 923.707312][T31028] ? xdp_convert_md_to_buff+0x5b/0x330 [ 923.707336][T31028] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 923.707373][T31028] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 923.707400][T31028] ? __fget_files+0x2a/0x420 [ 923.707435][T31028] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 923.707458][T31028] bpf_prog_test_run+0x2c5/0x340 [ 923.707487][T31028] __sys_bpf+0xa22/0xd90 [ 923.707518][T31028] ? __pfx___sys_bpf+0x10/0x10 [ 923.707553][T31028] ? __fget_files+0x2a/0x420 [ 923.707597][T31028] ? ksys_write+0x242/0x270 [ 923.707629][T31028] ? __pfx_ksys_write+0x10/0x10 [ 923.707665][T31028] __x64_sys_bpf+0xba/0xd0 [ 923.707688][T31028] do_syscall_64+0x166/0x520 [ 923.707717][T31028] ? trace_irq_disable+0x3b/0x140 [ 923.707737][T31028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.707757][T31028] ? clear_bhb_loop+0x70/0xc0 [ 923.707788][T31028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.707808][T31028] RIP: 0033:0x7f0b4ef9e199 [ 923.707827][T31028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.707845][T31028] RSP: 002b:00007f0b4fdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 923.707868][T31028] RAX: ffffffffffffffda RBX: 00007f0b4f225fa0 RCX: 00007f0b4ef9e199 [ 923.707883][T31028] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 923.707896][T31028] RBP: 00007f0b4fdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 923.707910][T31028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.707922][T31028] R13: 00007f0b4f226038 R14: 00007f0b4f225fa0 R15: 00007fff405f9678 [ 923.707956][T31028] [ 923.707983][T31028] page_pool_create_percpu() gave up with errno -12 [ 925.610110][T31066] FAULT_INJECTION: forcing a failure. [ 925.610110][T31066] name failslab, interval 1, probability 0, space 0, times 0 [ 925.610143][T31066] CPU: 1 UID: 0 PID: 31066 Comm: syz.3.6634 Not tainted syzkaller #0 PREEMPT(full) [ 925.610167][T31066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 925.610179][T31066] Call Trace: [ 925.610188][T31066] [ 925.610197][T31066] dump_stack_lvl+0xe8/0x150 [ 925.610230][T31066] should_fail_ex+0x410/0x560 [ 925.610259][T31066] should_failslab+0xa8/0x100 [ 925.610285][T31066] __kmalloc_cache_noprof+0xa3/0x600 [ 925.610304][T31066] ? __mutex_unlock_slowpath+0x731/0x900 [ 925.610336][T31066] ? __xdp_reg_mem_model+0x1e9/0x5a0 [ 925.610364][T31066] ? __xdp_reg_mem_model+0x1e9/0x5a0 [ 925.610400][T31066] __xdp_reg_mem_model+0x1e9/0x5a0 [ 925.610438][T31066] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 925.610478][T31066] xdp_reg_mem_model+0x22/0x40 [ 925.610507][T31066] bpf_test_run_xdp_live+0x292/0x1c20 [ 925.610533][T31066] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 925.610560][T31066] ? __mutex_unlock_slowpath+0x731/0x900 [ 925.610596][T31066] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 925.610630][T31066] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 925.610660][T31066] ? bpf_dispatcher_xdp+0x800/0x1000 [ 925.610727][T31066] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 925.610758][T31066] ? _copy_from_user+0x94/0xb0 [ 925.610784][T31066] ? bpf_test_init+0x113/0x150 [ 925.610802][T31066] ? xdp_convert_md_to_buff+0x5b/0x330 [ 925.610826][T31066] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 925.610864][T31066] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 925.610891][T31066] ? __fget_files+0x2a/0x420 [ 925.610924][T31066] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 925.610947][T31066] bpf_prog_test_run+0x2c5/0x340 [ 925.610976][T31066] __sys_bpf+0xa22/0xd90 [ 925.611008][T31066] ? __pfx___sys_bpf+0x10/0x10 [ 925.611042][T31066] ? __fget_files+0x2a/0x420 [ 925.611086][T31066] ? ksys_write+0x242/0x270 [ 925.611118][T31066] ? __pfx_ksys_write+0x10/0x10 [ 925.611154][T31066] __x64_sys_bpf+0xba/0xd0 [ 925.611177][T31066] do_syscall_64+0x166/0x520 [ 925.611206][T31066] ? trace_irq_disable+0x3b/0x140 [ 925.611226][T31066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.611246][T31066] ? clear_bhb_loop+0x70/0xc0 [ 925.611271][T31066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.611292][T31066] RIP: 0033:0x7fbcf719e199 [ 925.611310][T31066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.611327][T31066] RSP: 002b:00007fbcf7f84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 925.611349][T31066] RAX: ffffffffffffffda RBX: 00007fbcf7425fa0 RCX: 00007fbcf719e199 [ 925.611364][T31066] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 925.611377][T31066] RBP: 00007fbcf7f84090 R08: 0000000000000000 R09: 0000000000000000 [ 925.611389][T31066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.611401][T31066] R13: 00007fbcf7426038 R14: 00007fbcf7425fa0 R15: 00007ffee1bd35f8 [ 925.611433][T31066] [ 926.474344][T31077] xt_policy: output policy not valid in PREROUTING and INPUT [ 926.788003][T31086] __nla_validate_parse: 8 callbacks suppressed [ 926.788024][T31086] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6639'. [ 927.237966][T31095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6643'. [ 927.238005][T31095] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6643'. [ 927.613653][T21775] tipc: Subscription rejected, illegal request [ 928.176157][T31117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6650'. [ 928.361011][T31117] netlink: 'syz.4.6650': attribute type 1 has an invalid length. [ 928.361041][T31117] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6650'. [ 928.395501][ T4934] Bluetooth: hci2: command 0x0406 tx timeout [ 928.482348][T31129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6651'. [ 928.541805][T31128] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6651'. [ 930.488589][T31171] xt_bpf: check failed: parse error [ 931.426324][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 931.791361][T31212] bond1: Unable to set up delay as MII monitoring is disabled [ 931.819051][T31212] bond1 (unregistering): Released all slaves [ 932.811731][T31235] bridge_slave_0: left allmulticast mode [ 932.811759][T31235] bridge_slave_0: left promiscuous mode [ 932.811969][T31235] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.930472][T31235] bridge_slave_1: left allmulticast mode [ 932.930498][T31235] bridge_slave_1: left promiscuous mode [ 932.930707][T31235] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.087782][ T4934] block nbd196: Receive control failed (result -32) [ 933.089027][ T52] block nbd196: Receive control failed (result -32) [ 933.146120][T31235] bond0: (slave bond_slave_0): Releasing backup interface [ 933.329751][T31235] bond0: (slave bond_slave_1): Releasing backup interface [ 933.468389][T31235] team0: Port device team_slave_0 removed [ 933.519244][T31235] team0: Port device team_slave_1 removed [ 933.535381][T31235] net_ratelimit: 148 callbacks suppressed [ 933.535400][T31235] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 933.640077][T31254] netlink: 'syz.3.6684': attribute type 15 has an invalid length. [ 933.996276][T31261] netlink: 'syz.4.6686': attribute type 4 has an invalid length. [ 933.997140][T31261] netlink: 'syz.4.6686': attribute type 4 has an invalid length. [ 934.433247][ T4934] block nbd197: Receive control failed (result -32) [ 934.447586][ T52] block nbd197: Receive control failed (result -32) [ 935.019844][T31292] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6694'. [ 935.019874][T31292] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6694'. [ 935.145108][T31294] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6694'. [ 935.352216][T31305] netlink: 6060 bytes leftover after parsing attributes in process `syz.4.6696'. [ 935.428713][T31305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6696'. [ 935.450140][T31305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 935.577212][T31323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6696'. [ 936.036396][ T52] block nbd198: Receive control failed (result -32) [ 936.043483][ T4934] block nbd198: Receive control failed (result -32) [ 936.269799][T31273] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 936.663711][T31338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6699'. [ 937.751205][T21775] wlan0: Trigger new scan to find an IBSS to join [ 937.998483][T26600] block nbd199: Receive control failed (result -32) [ 938.003732][ T52] block nbd199: Receive control failed (result -32) [ 938.189481][T31373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6707'. [ 938.233825][T31373] veth1_to_team: entered promiscuous mode [ 938.252755][T31373] veth0_to_team: entered promiscuous mode [ 938.272350][T31373] debugfs: 'hsr1' already exists in 'hsr' [ 938.272403][T31373] Cannot create hsr debugfs directory [ 938.272441][T31373] hsr1: entered promiscuous mode [ 938.516445][T31384] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6706'. [ 938.629316][T26600] Bluetooth: hci4: command 0x0406 tx timeout [ 938.820156][T31389] netlink: 'syz.1.6711': attribute type 1 has an invalid length. [ 939.016890][T31391] bond1: (slave veth3): Enslaving as an active interface with a down link [ 939.102464][T31392] block nbd0: reconnected socket [ 939.102485][T31392] nbd: socks must be embedded in a SOCK_ITEM attr [ 939.211860][T31389] bond1: (slave veth5): Enslaving as an active interface with a down link [ 939.212033][T31391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6711'. [ 939.415735][T31389] netlink: 'syz.1.6711': attribute type 14 has an invalid length. [ 939.415758][T31389] netlink: 'syz.1.6711': attribute type 13 has an invalid length. [ 939.626985][ T4934] block nbd0: Receive control failed (result -32) [ 940.511807][T31419] __nla_validate_parse: 3 callbacks suppressed [ 940.511829][T31419] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.6715'. [ 940.715171][T21769] wlan0: Trigger new scan to find an IBSS to join [ 940.871867][T31432] netlink: 'syz.3.6719': attribute type 1 has an invalid length. [ 941.081912][T31432] bond2: entered promiscuous mode [ 941.083056][T31432] 8021q: adding VLAN 0 to HW filter on device bond2 [ 941.181308][T31441] bond2: (slave bridge2): making interface the new active one [ 941.181333][T31441] bridge2: entered promiscuous mode [ 941.182468][T31441] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 941.515860][T31450] netlink: 'syz.0.6721': attribute type 16 has an invalid length. [ 941.743580][T31455] netlink: 'syz.3.6723': attribute type 1 has an invalid length. [ 941.858377][T31461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6723'. [ 941.890065][T31465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6726'. [ 941.922103][T31455] 8021q: adding VLAN 0 to HW filter on device bond3 [ 941.959102][T31461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6723'. [ 942.397893][T31463] xt_CT: No such helper "syz1" [ 942.710134][T26600] block nbd200: Receive control failed (result -32) [ 942.711361][ T4934] block nbd200: Receive control failed (result -32) [ 943.370553][T31492] xt_policy: output policy not valid in PREROUTING and INPUT [ 943.582574][T31501] tipc: Enabled bearer , priority 0 [ 943.643730][T31501] syzkaller0: entered promiscuous mode [ 943.644392][T31501] syzkaller0: entered allmulticast mode [ 943.750082][T21775] wlan0: Trigger new scan to find an IBSS to join [ 943.952849][T31501] tipc: Resetting bearer [ 943.966426][T31499] tipc: Resetting bearer [ 944.040608][T31516] ip_tables: iptables: counters copy to user failed while replacing table [ 944.164596][T31510] FAULT_INJECTION: forcing a failure. [ 944.164596][T31510] name failslab, interval 1, probability 0, space 0, times 0 [ 944.164633][T31510] CPU: 1 UID: 0 PID: 31510 Comm: syz.4.6737 Not tainted syzkaller #0 PREEMPT(full) [ 944.164660][T31510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 944.164673][T31510] Call Trace: [ 944.164681][T31510] [ 944.164689][T31510] dump_stack_lvl+0xe8/0x150 [ 944.164722][T31510] should_fail_ex+0x410/0x560 [ 944.164749][T31510] ? __alloc_skb+0x1db/0x7a0 [ 944.164773][T31510] should_failslab+0xa8/0x100 [ 944.164798][T31510] ? __alloc_skb+0x1db/0x7a0 [ 944.164819][T31510] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 944.164851][T31510] ? __alloc_skb+0x18d/0x7a0 [ 944.164875][T31510] ? __alloc_skb+0x1db/0x7a0 [ 944.164906][T31510] __alloc_skb+0x1db/0x7a0 [ 944.164934][T31510] netlink_sendmsg+0x5d4/0xb40 [ 944.164965][T31510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 944.164995][T31510] ? apparmor_socket_sendmsg+0x98/0x360 [ 944.165021][T31510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 944.165041][T31510] sock_sendmsg_nosec+0x14e/0x190 [ 944.165065][T31510] ____sys_sendmsg+0x54e/0x850 [ 944.165098][T31510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 944.165135][T31510] ? import_iovec+0x73/0xa0 [ 944.165165][T31510] ___sys_sendmsg+0x2a5/0x360 [ 944.165190][T31510] ? __lock_acquire+0x747/0x2de0 [ 944.165216][T31510] ? __pfx____sys_sendmsg+0x10/0x10 [ 944.165285][T31510] ? __fget_files+0x2a/0x420 [ 944.165312][T31510] ? __fget_files+0x3a2/0x420 [ 944.165349][T31510] __x64_sys_sendmsg+0x1b1/0x290 [ 944.165380][T31510] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 944.165429][T31510] do_syscall_64+0x166/0x520 [ 944.165458][T31510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.165479][T31510] ? clear_bhb_loop+0x70/0xc0 [ 944.165504][T31510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.165525][T31510] RIP: 0033:0x7f0b4ef9e199 [ 944.165544][T31510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.165562][T31510] RSP: 002b:00007f0b4fdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 944.165584][T31510] RAX: ffffffffffffffda RBX: 00007f0b4f225fa0 RCX: 00007f0b4ef9e199 [ 944.165600][T31510] RDX: 0000000004000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 944.165614][T31510] RBP: 00007f0b4fdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 944.165627][T31510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.165639][T31510] R13: 00007f0b4f226038 R14: 00007f0b4f225fa0 R15: 00007fff405f9678 [ 944.165673][T31510] [ 944.196208][T31499] tipc: Disabling bearer [ 944.531173][T31520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6739'. [ 944.876055][T27274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.119092][T20126] [ 945.121468][T20126] ====================================================== [ 945.128479][T20126] WARNING: possible circular locking dependency detected [ 945.135503][T20126] syzkaller #0 Not tainted [ 945.139911][T20126] ------------------------------------------------------ [ 945.146919][T20126] kworker/1:17/20126 is trying to acquire lock: [ 945.153146][T20126] ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x610 [ 945.163006][T20126] [ 945.163006][T20126] but task is already holding lock: [ 945.170370][T20126] ffffffff8ebf9100 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 945.179706][T20126] [ 945.179706][T20126] which lock already depends on the new lock. [ 945.179706][T20126] [ 945.190104][T20126] [ 945.190104][T20126] the existing dependency chain (in reverse order) is: [ 945.199115][T20126] [ 945.199115][T20126] -> #7 (wq_pool_mutex){+.+.}-{4:4}: [ 945.206590][T20126] __mutex_lock+0x19d/0x1550 [ 945.211718][T20126] __alloc_workqueue+0xa4f/0x1fe0 [ 945.217274][T20126] alloc_workqueue_noprof+0xe3/0x210 [ 945.223097][T20126] padata_alloc+0xbe/0x360 [ 945.228049][T20126] pcrypt_init_padata+0x27/0x100 [ 945.233519][T20126] pcrypt_init+0x60/0xc0 [ 945.238275][T20126] do_one_initcall+0x250/0x870 [ 945.243560][T20126] do_initcall_level+0x10a/0x1a0 [ 945.249029][T20126] do_initcalls+0x59/0xa0 [ 945.253888][T20126] kernel_init_freeable+0x29d/0x3e0 [ 945.259609][T20126] kernel_init+0x22/0x1d0 [ 945.264462][T20126] ret_from_fork+0x514/0xb70 [ 945.269578][T20126] ret_from_fork_asm+0x1a/0x30 [ 945.274964][T20126] [ 945.274964][T20126] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 945.282705][T20126] cpus_read_lock+0x42/0x160 [ 945.287826][T20126] static_key_slow_inc+0x12/0x30 [ 945.293293][T20126] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 945.299539][T20126] nbd_genl_foreach_sock+0x265/0x450 [ 945.305345][T20126] nbd_genl_reconfigure+0xbbb/0x1040 [ 945.311148][T20126] genl_family_rcv_msg_doit+0x233/0x340 [ 945.317220][T20126] genl_rcv_msg+0x614/0x7a0 [ 945.322278][T20126] netlink_rcv_skb+0x226/0x4a0 [ 945.327568][T20126] genl_rcv+0x28/0x40 [ 945.332081][T20126] netlink_unicast+0x7bd/0x940 [ 945.337376][T20126] netlink_sendmsg+0x813/0xb40 [ 945.342667][T20126] sock_sendmsg_nosec+0x14e/0x190 [ 945.348214][T20126] ____sys_sendmsg+0x54e/0x850 [ 945.353528][T20126] ___sys_sendmsg+0x2a5/0x360 [ 945.358731][T20126] __x64_sys_sendmsg+0x1b1/0x290 [ 945.364202][T20126] do_syscall_64+0x166/0x520 [ 945.369332][T20126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.375744][T20126] [ 945.375744][T20126] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 945.383397][T20126] __mutex_lock+0x19d/0x1550 [ 945.388523][T20126] nbd_queue_rq+0x373/0xff0 [ 945.393553][T20126] blk_mq_dispatch_rq_list+0x499/0x1990 [ 945.399633][T20126] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 945.406489][T20126] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 945.412997][T20126] blk_mq_run_work_fn+0x16c/0x300 [ 945.418552][T20126] process_scheduled_works+0xc3d/0x1630 [ 945.424624][T20126] worker_thread+0xa47/0xfb0 [ 945.429746][T20126] kthread+0x38b/0x480 [ 945.434343][T20126] ret_from_fork+0x514/0xb70 [ 945.439471][T20126] ret_from_fork_asm+0x1a/0x30 [ 945.444766][T20126] [ 945.444766][T20126] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 945.451987][T20126] __mutex_lock+0x19d/0x1550 [ 945.457109][T20126] nbd_queue_rq+0xc1/0xff0 [ 945.462045][T20126] blk_mq_dispatch_rq_list+0x499/0x1990 [ 945.468115][T20126] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 945.474967][T20126] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 945.481471][T20126] blk_mq_run_work_fn+0x16c/0x300 [ 945.487026][T20126] process_scheduled_works+0xc3d/0x1630 [ 945.493104][T20126] worker_thread+0xa47/0xfb0 [ 945.498228][T20126] kthread+0x38b/0x480 [ 945.502826][T20126] ret_from_fork+0x514/0xb70 [ 945.507952][T20126] ret_from_fork_asm+0x1a/0x30 [ 945.513254][T20126] [ 945.513254][T20126] -> #3 (set->srcu){.+.+}-{0:0}: [ 945.520386][T20126] __synchronize_srcu+0xc9/0x2f0 [ 945.523974][ C0] tipc: RX(2ee15420112b): key[1] is activated [ 945.531899][T20126] elevator_switch+0x1e8/0x7b0 [ 945.537187][T20126] elevator_change+0x2fa/0x480 [ 945.542479][T20126] elevator_set_default+0x375/0x440 [ 945.548208][T20126] blk_register_queue+0x3f3/0x4e0 [ 945.553761][T20126] __add_disk+0x6b8/0xdb0 [ 945.558622][T20126] add_disk_fwnode+0x100/0x3a0 [ 945.563915][T20126] nbd_dev_add+0x733/0xb60 [ 945.568851][T20126] nbd_init+0x168/0x1f0 [ 945.573530][T20126] do_one_initcall+0x250/0x870 [ 945.578912][T20126] do_initcall_level+0x10a/0x1a0 [ 945.584382][T20126] do_initcalls+0x59/0xa0 [ 945.589244][T20126] kernel_init_freeable+0x29d/0x3e0 [ 945.594972][T20126] kernel_init+0x22/0x1d0 [ 945.599825][T20126] ret_from_fork+0x514/0xb70 [ 945.604945][T20126] ret_from_fork_asm+0x1a/0x30 [ 945.610241][T20126] [ 945.610241][T20126] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 945.618066][T20126] __mutex_lock+0x19d/0x1550 [ 945.623188][T20126] elevator_change+0x1af/0x480 [ 945.628477][T20126] elevator_set_none+0xb5/0x140 [ 945.633858][T20126] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 945.640196][T20126] nbd_start_device+0x189/0xb30 [ 945.645574][T20126] nbd_genl_connect+0x167d/0x1cd0 [ 945.651122][T20126] genl_family_rcv_msg_doit+0x233/0x340 [ 945.657199][T20126] genl_rcv_msg+0x614/0x7a0 [ 945.662231][T20126] netlink_rcv_skb+0x226/0x4a0 [ 945.667518][T20126] genl_rcv+0x28/0x40 [ 945.672029][T20126] netlink_unicast+0x7bd/0x940 [ 945.677329][T20126] netlink_sendmsg+0x813/0xb40 [ 945.682620][T20126] sock_sendmsg_nosec+0x14e/0x190 [ 945.688188][T20126] ____sys_sendmsg+0x54e/0x850 [ 945.693487][T20126] ___sys_sendmsg+0x2a5/0x360 [ 945.698700][T20126] __x64_sys_sendmsg+0x1b1/0x290 [ 945.704164][T20126] do_syscall_64+0x166/0x520 [ 945.709280][T20126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.715685][T20126] [ 945.715685][T20126] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 945.724291][T20126] blk_alloc_queue+0x544/0x690 [ 945.729575][T20126] __blk_mq_alloc_disk+0x194/0x390 [ 945.735215][T20126] nbd_dev_add+0x494/0xb60 [ 945.740152][T20126] nbd_init+0x168/0x1f0 [ 945.744825][T20126] do_one_initcall+0x250/0x870 [ 945.750112][T20126] do_initcall_level+0x10a/0x1a0 [ 945.755575][T20126] do_initcalls+0x59/0xa0 [ 945.760432][T20126] kernel_init_freeable+0x29d/0x3e0 [ 945.766154][T20126] kernel_init+0x22/0x1d0 [ 945.770998][T20126] ret_from_fork+0x514/0xb70 [ 945.776116][T20126] ret_from_fork_asm+0x1a/0x30 [ 945.781407][T20126] [ 945.781407][T20126] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 945.788617][T20126] __lock_acquire+0x164c/0x2de0 [ 945.793990][T20126] lock_acquire+0x115/0x350 [ 945.799009][T20126] fs_reclaim_acquire+0x71/0x100 [ 945.804460][T20126] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 945.810791][T20126] __alloc_workqueue+0xc6e/0x1fe0 [ 945.816338][T20126] alloc_workqueue_noprof+0xe3/0x210 [ 945.822150][T20126] smc_conn_create+0x1589/0x3810 [ 945.827610][T20126] smc_listen_find_device+0x10c0/0x27f0 [ 945.833689][T20126] smc_listen_work+0xa7e/0x1410 [ 945.839065][T20126] process_scheduled_works+0xc3d/0x1630 [ 945.845132][T20126] worker_thread+0xa47/0xfb0 [ 945.850243][T20126] kthread+0x38b/0x480 [ 945.854826][T20126] ret_from_fork+0x514/0xb70 [ 945.859942][T20126] ret_from_fork_asm+0x1a/0x30 [ 945.865228][T20126] [ 945.865228][T20126] other info that might help us debug this: [ 945.865228][T20126] [ 945.875447][T20126] Chain exists of: [ 945.875447][T20126] fs_reclaim --> cpu_hotplug_lock --> wq_pool_mutex [ 945.875447][T20126] [ 945.887961][T20126] Possible unsafe locking scenario: [ 945.887961][T20126] [ 945.895399][T20126] CPU0 CPU1 [ 945.900753][T20126] ---- ---- [ 945.906104][T20126] lock(wq_pool_mutex); [ 945.910347][T20126] lock(cpu_hotplug_lock); [ 945.917368][T20126] lock(wq_pool_mutex); [ 945.924143][T20126] lock(fs_reclaim); [ 945.928128][T20126] [ 945.928128][T20126] *** DEADLOCK *** [ 945.928128][T20126] [ 945.936264][T20126] locks held by kworker/1:17/20126: 5, last CPU#1: [ 945.942762][T20126] #0: ffff8880327bb940 ((wq_completion)smc_hs_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 945.954003][T20126] #1: ffffc90003e57c40 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 945.966981][T20126] #2: ffff88805ab759e0 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_listen_work+0x5e/0x1410 [ 945.976565][T20126] #3: ffffffff90551180 (smc_server_lgr_pending){+.+.}-{4:4}, at: smc_listen_work+0xa5a/0x1410 [ 945.986931][T20126] #4: ffffffff8ebf9100 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 945.996685][T20126] [ 945.996685][T20126] stack backtrace: [ 946.002565][T20126] CPU: 1 UID: 0 PID: 20126 Comm: kworker/1:17 Not tainted syzkaller #0 PREEMPT(full) [ 946.012104][T20126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 946.022155][T20126] Workqueue: smc_hs_wq smc_listen_work [ 946.027626][T20126] Call Trace: [ 946.030902][T20126] [ 946.033832][T20126] dump_stack_lvl+0xe8/0x150 [ 946.038427][T20126] print_circular_bug+0x2e2/0x300 [ 946.043457][T20126] check_noncircular+0x12f/0x150 [ 946.048394][T20126] __lock_acquire+0x164c/0x2de0 [ 946.053246][T20126] ? pcpu_alloc_noprof+0xde2/0x1900 [ 946.058453][T20126] ? __mutex_unlock_slowpath+0x731/0x900 [ 946.064093][T20126] lock_acquire+0x115/0x350 [ 946.068593][T20126] ? kmem_cache_alloc_node_noprof+0x5f/0x610 [ 946.074582][T20126] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 946.080398][T20126] ? pcpu_alloc_noprof+0x100f/0x1900 [ 946.085690][T20126] ? __alloc_workqueue+0xc6e/0x1fe0 [ 946.090892][T20126] fs_reclaim_acquire+0x71/0x100 [ 946.095834][T20126] ? kmem_cache_alloc_node_noprof+0x5f/0x610 [ 946.101825][T20126] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 946.107636][T20126] ? __alloc_workqueue+0xc6e/0x1fe0 [ 946.112846][T20126] __alloc_workqueue+0xc6e/0x1fe0 [ 946.117885][T20126] alloc_workqueue_noprof+0xe3/0x210 [ 946.123175][T20126] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 946.128557][T20126] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 946.134459][T20126] ? trace_kmalloc+0x2a/0xf0 [ 946.139048][T20126] smc_conn_create+0x1589/0x3810 [ 946.143999][T20126] ? smc_clc_match_eid+0x1ce/0x250 [ 946.149112][T20126] smc_listen_find_device+0x10c0/0x27f0 [ 946.154672][T20126] ? __pfx_smc_listen_find_device+0x10/0x10 [ 946.160568][T20126] ? smc_listen_work+0x93f/0x1410 [ 946.165593][T20126] ? smc_clc_srv_v2x_features_validate+0x2b0/0x5c0 [ 946.172097][T20126] smc_listen_work+0xa7e/0x1410 [ 946.176955][T20126] ? rcu_is_watching+0x16/0xb0 [ 946.181724][T20126] ? process_scheduled_works+0x97a/0x1630 [ 946.187441][T20126] process_scheduled_works+0xc3d/0x1630 [ 946.193001][T20126] ? __pfx_process_scheduled_works+0x10/0x10 [ 946.198985][T20126] ? assign_work+0x3cf/0x5d0 [ 946.203575][T20126] worker_thread+0xa47/0xfb0 [ 946.208170][T20126] ? __kthread_parkme+0x71/0x1f0 [ 946.213119][T20126] kthread+0x38b/0x480 [ 946.217189][T20126] ? __pfx_worker_thread+0x10/0x10 [ 946.222303][T20126] ? __pfx_kthread+0x10/0x10 [ 946.226893][T20126] ret_from_fork+0x514/0xb70 [ 946.231492][T20126] ? __pfx_ret_from_fork+0x10/0x10 [ 946.236609][T20126] ? __switch_to+0xc89/0x1420 [ 946.241291][T20126] ? __pfx_kthread+0x10/0x10 [ 946.245875][T20126] ret_from_fork_asm+0x1a/0x30 [ 946.250654][T20126]