last executing test programs: 5m11.911987476s ago: executing program 2 (id=6010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f00000000c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, 0x0, &(0x7f0000000300)=""/4096}, 0x20) (async, rerun: 32) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'wg2\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x8, 0x80, 0x8, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x47, [0x0, 0x80]}}) 5m11.643922678s ago: executing program 2 (id=6013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4048091}, 0x24000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000190a0101"], 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) 5m11.359121656s ago: executing program 2 (id=6016): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xa, 0x4, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x83}, [@generic={0x73, 0x1, 0x1, 0x9e}]}, &(0x7f0000001840)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000440)={'macsec0\x00', 0x400}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000500)=0xf41) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000001a40)={0x7fffffff}, 0x10) sendmsg$kcm(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001b00)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001b40)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x100}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x128}, 0x400d4) recvmsg(r9, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/4096, 0x1000}, 0x0) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000580)={0x80000020}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="240000001200578300"/20, @ANYRESDEC=r11], 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001900)={'syztnl2\x00', &(0x7f0000001880)={'syztnl2\x00', 0x0, 0x29, 0x8, 0xd, 0x0, 0x1c, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x10, 0x5, 0x6}}) bpf$MAP_CREATE(0x0, &(0x7f0000001940)=@arena={0x21, 0x0, 0x0, 0x10, 0x400, r1, 0x7, '\x00', r12, r1, 0x5, 0x5, 0x4}, 0x50) 5m10.247247827s ago: executing program 2 (id=6027): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x51}}}}, ["", "", ""]}, 0x20}}, 0x40010) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8040002}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x68}}, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1a958, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5m10.108013618s ago: executing program 2 (id=6028): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000300)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1a, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509fbffffffffff9400000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) unshare(0x8040480) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x10}) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) 5m9.84696216s ago: executing program 2 (id=6030): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="230000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)="3461ba5a2618286851ccbadfd396f17189fcf3773130beaaf2acce318e045d0e9a9fedd500e97419cab92e215b9cd185f884e051c57834614ed0ec7d3a5c5e103bb09426306dc2075183fdb749f0b332020000002ed4cc83df4853e9c0d27ae322d7df57198e68f2ef2b90ca7116e49d68e1ee1bcb668faa18f153e3af1682a986d400"/141, &(0x7f0000000180)="b0fc1142b1f93baffd3e36cc361e5f7a94a4fa86f48ed683f4fa8aff7f00005ca0e83e4704001481a6c50500a88278543173aaae8afc3b03d76fbc", 0x800407f, r1, 0x4}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001000010024bd7000fc"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000340)=""/24, &(0x7f00000003c0)=0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100000000676d6f3aab522659000000000003000700140000001100010000000000000000000500000a"], 0x28}, 0x1, 0x0, 0x0, 0x20008094}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xf, &(0x7f0000000a00)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)=[{0x0, 0x2, 0x8, 0x6}, {0x3, 0x5, 0x4, 0xc}], 0x10, 0x10001}, 0x94) 4m54.375269095s ago: executing program 32 (id=6030): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="230000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)="3461ba5a2618286851ccbadfd396f17189fcf3773130beaaf2acce318e045d0e9a9fedd500e97419cab92e215b9cd185f884e051c57834614ed0ec7d3a5c5e103bb09426306dc2075183fdb749f0b332020000002ed4cc83df4853e9c0d27ae322d7df57198e68f2ef2b90ca7116e49d68e1ee1bcb668faa18f153e3af1682a986d400"/141, &(0x7f0000000180)="b0fc1142b1f93baffd3e36cc361e5f7a94a4fa86f48ed683f4fa8aff7f00005ca0e83e4704001481a6c50500a88278543173aaae8afc3b03d76fbc", 0x800407f, r1, 0x4}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001000010024bd7000fc"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000340)=""/24, &(0x7f00000003c0)=0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100000000676d6f3aab522659000000000003000700140000001100010000000000000000000500000a"], 0x28}, 0x1, 0x0, 0x0, 0x20008094}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xf, &(0x7f0000000a00)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)=[{0x0, 0x2, 0x8, 0x6}, {0x3, 0x5, 0x4, 0xc}], 0x10, 0x10001}, 0x94) 4.911307272s ago: executing program 0 (id=8288): socket(0xa, 0x3, 0x3a) (async) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40, 0x0, 0x4}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000347cd9f4c3208451", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) (async) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000347cd9f4c3208451", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) close(r1) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xc) 4.45186723s ago: executing program 0 (id=8293): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000b3b200000000000018000000852000007f51030095"], &(0x7f0000000100)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3d}, 0x94) 4.316753856s ago: executing program 0 (id=8299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r1, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x40) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 4.055802213s ago: executing program 0 (id=8302): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x80800}, &(0x7f0000000040)=0xc) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12, 0x468fe4e8}]}}]}, 0x38}}, 0x4048000) (async) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x97, 0x0, 0x0, 0x96, 0x0, 0x1, 0x4, 0x1, 0xb, 0x7, 0x2, 0x81, 0x1, 0x1}, 0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe25}, 0x48) 3.94506602s ago: executing program 1 (id=8305): unshare(0xc000600) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000002240)=""/4096, &(0x7f0000003240)=0x1000) socket$inet6(0xa, 0x3, 0xff) (async) r1 = socket$inet6(0xa, 0x3, 0xff) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000003280)=0x8, 0x4) sendmsg$nl_generic(r3, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003300)={&(0x7f0000003340)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@generic='-']}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a9380, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f0000000280)='GPL\x00', 0x1}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000300)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000300)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) unshare(0x20000400) socket$l2tp(0x2, 0x2, 0x73) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x3, 0x7, &(0x7f0000002100)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008c000000b70000000100000095"], &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x3, 0x7, &(0x7f0000002100)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008c000000b70000000100000095"], &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002180)={r5, 0x0, 0xe, 0x0, &(0x7f0000002200)="0000e5ffffffffffffff00000000", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) recvmmsg(r1, &(0x7f0000001f80)=[{{&(0x7f0000000340)=@isdn, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/201, 0xc9}], 0x2, &(0x7f00000005c0)=""/27, 0x1b}, 0x98}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)=""/192, 0xc0}, {&(0x7f00000006c0)=""/90, 0x5a}, {&(0x7f0000000740)=""/230, 0xe6}, {&(0x7f0000000840)=""/91, 0x5b}, {&(0x7f00000008c0)=""/145, 0x91}], 0x5, &(0x7f0000000a00)=""/68, 0x44}, 0x1}, {{&(0x7f0000000a80)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000b00)=""/29, 0x1d}, {&(0x7f0000000b40)=""/139, 0x8b}, {&(0x7f0000000c00)=""/131, 0x83}, {&(0x7f0000000cc0)=""/224, 0xe0}, {&(0x7f0000000dc0)=""/54, 0x36}, {&(0x7f0000000e00)=""/163, 0xa3}, {&(0x7f0000000ec0)=""/3, 0x3}], 0x7, &(0x7f0000000f80)=""/4096, 0x1000}, 0x997}], 0x3, 0x2000, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000200)={0x2b, 0x3}) (async) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000200)={0x2b, 0x3}) 3.816031483s ago: executing program 0 (id=8307): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000018c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x5b0, 0x410, 0x340, 0x340, 0x270, 0x158, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast2, @private2, [0x0, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0xff], 'macvtap0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x6, 0x3, 0x2, 0x68}, 0x0, 0x110, 0x158, 0x0, {0x7a00000010000000}, [@common=@unspec=@cluster={{0x30}, {0x4, 0xb, 0x5}}, @common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x10000, 0x3e6c8bba, 0x3, {0xb}}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private=0xa010101, @ipv6=@remote, 0x4, 0x3, 0x4535}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xff}, [0x0, 0xffffff00], [0xff000000], 'veth1_macvtap\x00', 'pimreg1\x00', {}, {}, 0x2c, 0x0, 0x7}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2fcdd0ff, 0x0, 0x6, 0x1, 0x0, "073bbaa87c749846726548671bb2b5f019f1c9cb74acff8e1c44fe1938cde907b2080c328a340ed71148f4e4b761f5bb9ae93cd3ec70f031b967eec5bfd45c7a"}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) bpf$TOKEN_CREATE(0x24, &(0x7f0000001580), 0x8) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001680)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}, @TCA_STAB={0x20, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x68}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x0, 0x1, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21, '\x00', r3, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x9, [@ptr={0x5, 0x0, 0x0, 0x2, 0x3}, @func={0x1, 0x0, 0x0, 0xc, 0x5}, @func={0xa, 0x0, 0x0, 0xc, 0x3}, @var={0x4, 0x0, 0x0, 0xe, 0x5}, @var={0x10, 0x0, 0x0, 0xe, 0x3}, @struct={0x1, 0x1, 0x0, 0x4, 0x1, 0xfffffff9, [{0x9, 0x5}]}, @restrict={0xc, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x2}}, @typedef={0xf, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x5f, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x2e]}}, &(0x7f00000004c0)=""/4096, 0xad, 0x1000, 0x0, 0x5}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001500)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x8, '\x00', r6, r7, 0x4, 0x0, 0x3}, 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000100)={r4, &(0x7f0000000000)='\x00', 0x240001, &(0x7f0000000040)={@_ha_fsid={[0x9, 0x1]}, {0x7, 0x1, 0x82, 0x6}}, 0x0, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xf4}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000001700)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000001740)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000017c0)={r10, &(0x7f0000001800), &(0x7f0000001840)=@tcp6=r9}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000001880), 0x3) close(0x3) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e24, 0x2, @local, 0x1}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000140), &(0x7f00000001c0)='%pB \x00'}, 0x20) 3.655044421s ago: executing program 0 (id=8311): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000700)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x11, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000400)='\\', 0x1}], 0x2}}], 0x1, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)='j\x00'/14, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x3d) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000035aaa27243d94e117f00bece626771135369007363eeddfc07174443ee08d81d4decc87d6502b4f55ced946245df9d28dbad37"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000035aaa27243d94e117f00bece626771135369007363eeddfc07174443ee08d81d4decc87d6502b4f55ced946245df9d28dbad37"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001180)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001180)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'ip6_vti0\x00', &(0x7f0000001200)={'syztnl2\x00', r7, 0x29, 0x4, 0x3, 0x80000001, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, 0x20, 0x8, 0x100, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'ip6_vti0\x00', &(0x7f0000001200)={'syztnl2\x00', r7, 0x29, 0x4, 0x3, 0x80000001, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, 0x20, 0x8, 0x100, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000012c0)={'gre0\x00', &(0x7f0000001280)={'sit0\x00', 0x0, 0x720, 0x20, 0x9, 0x9, {{0x7, 0x4, 0x1, 0x26, 0x1c, 0x67, 0x0, 0xe, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, {[@noop, @ra={0x94, 0x4}, @noop, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001380)={'syztnl1\x00', &(0x7f0000001300)={'sit0\x00', 0x0, 0x8, 0x7, 0x5, 0xc, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @loopback, {[@ssrr={0x89, 0x1b, 0xf9, [@loopback, @loopback, @empty, @multicast2, @loopback, @multicast1]}]}}}}}) socket(0x400000000010, 0x2, 0x0) (async) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000013c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r9, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x1}, @TCA_FLOW_KEYS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000015c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001600)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000016c0)={'ip6gre0\x00', &(0x7f0000001640)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x9, 0x3, 0x1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x8000, 0x100, 0x80000000}}) socket$can_bcm(0x1d, 0x2, 0x2) (async) r10 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000000540)={@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {&(0x7f0000000440)=""/154, 0x9a}, &(0x7f0000000500), 0x17}, 0xa0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000000540)={@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {&(0x7f0000000440)=""/154, 0x9a}, &(0x7f0000000500), 0x17}, 0xa0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000001700)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000001700)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f0000001740)={0x1d, r11}, 0x10) 3.57907039s ago: executing program 4 (id=8313): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000003d0000003d00000004000000100000000400000f0100000005000000ffff0000e40e000005000000000000000300000004000000e50a00007f000000030000000e000000010000007400000000005f00"], &(0x7f0000000700)=""/106, 0x5c, 0x6a, 0x1, 0x8}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x48702, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x2, 0x0, @value=r0}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) unshare(0x20000400) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002440), 0x1, 0x0) ppoll(&(0x7f0000000c80)=[{r3, 0x72}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000004c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0) recvmmsg(r8, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000e80)=[{0x0}, {&(0x7f0000000ec0)=""/248, 0xf8}, {&(0x7f0000000fc0)=""/52, 0x34}, {&(0x7f0000001000)=""/4099, 0x1003}], 0x4}, 0xc4e0}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x2}], 0x4, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000600)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0xd0, 0x238, 0xd0, 0x238, 0xd0, 0x390, 0x390, 0x390, 0x390, 0x390, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@CLUSTERIP={0x0, 'CLUSTERIP\x00', 0x0, {0xfffffffe, @multicast, 0x4, 0xc, [0x2015, 0x38, 0x28, 0x37, 0x4015, 0x37, 0x19, 0x2002, 0x2a, 0x32, 0x19, 0x18, 0x32, 0x2b, 0x2d, 0x3f], 0x5, 0x4, 0x8}}}, {{@ip={@local, @loopback, 0xff, 0xff000000, 'veth0_to_bridge\x00', 'ipvlan0\x00', {}, {}, 0x8, 0x2, 0x2}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@SET={0x0, 'SET\x00', 0x0, {{0x4, [0x6, 0x3, 0x0, 0x2, 0x6, 0x1], 0x6, 0x5}, {0xffffffffffffffff, [0x5, 0x2, 0x4, 0x0, 0x5, 0x2], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x0, 'NFQUEUE\x00', 0x3, {0x1, 0x5, 0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000, 0xff, 'batadv0\x00', 'ip6erspan0\x00', {}, {0xff}, 0xff, 0x1, 0x3}, 0x0, 0xa0, 0xc8, 0x0, {}, [@inet=@rpfilter={{}, {0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3b5) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x6, 0xc, &(0x7f0000002100)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002140)={0x0, 0x4, &(0x7f0000002200)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000002240)={0x6, 0xc, &(0x7f0000002300)=ANY=[@ANYBLOB="18020000fcffffff"], &(0x7f0000002340)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002380)={r11, 0x5, 0xe, 0x0, &(0x7f0000002400)="259a00f2710010000000000000a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PPPIOCSMRU1(r7, 0x40047452, &(0x7f0000000640)=0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r6, 0x20, &(0x7f0000000440)={&(0x7f0000000340)=""/157, 0x9d, 0x0, &(0x7f0000000400)=""/57, 0x39}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r5, 0x0, 0x0}, 0x10) 3.372680155s ago: executing program 4 (id=8316): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0100001000010000000000fdfffffffe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000a0000008a000000000000001c0017000000000000000000ffffffff00000000ffffffff040000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001"], 0x15c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x10, 0x3d, 0x4}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000780)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0xf8, 0x1, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x1f, 0x1, '\x00'/12}, {0xe, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x5, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0xe, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x1, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000680)=0x1, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000580)=r6, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010"], 0x3c}, 0x1, 0x0, 0x0, 0x4000889}, 0x20048810) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x30, r1}, 0x18) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r7, 0x4) 3.161111933s ago: executing program 3 (id=8319): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x8044) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x9a) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f00000007c0)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000840)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)}], 0x1}}], 0x2, 0x10) 3.043830111s ago: executing program 4 (id=8320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x44084) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010006000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a0000000000000100100200001267"], 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x7a, &(0x7f0000000580)={@local, @random="7a873d3d6474", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "063f36", 0x44, 0x2f, 0x0, @remote, @loopback={0xff00000000000000}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x806}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}}}}}}}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d60908007fffffffc39af0ff01000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000054080000020000008500000007000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x5, 0x483, 0xffff, {}, {r6, r7/1000+60000}, {0x3, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1}, 0x33, 0x2, 0x0, 0x0, "44a8b7cd55403cc8aeafc1e24a1dabe0a73052a2018cfa33db16db243b898e688ab2c64e2f84cb9626bbde76e76de54145f27f1cf9950452794da5b6a271c525"}}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4f4000384000000000000000010010020000126701"], 0x0) 2.999799181s ago: executing program 3 (id=8321): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x0, 0x2, 0x5, 0xda2, 0xa46f58afb5cb19de, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x707, 0x10, 0x7, 0x5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff000000004fa900000000000007010000f8ffffffb7020000000000008000000100000000850000009900000095"], &(0x7f0000000040)='syzkaller\x00', 0x1400, 0x0, 0x0, 0x0, 0x4, '\x00', r1}, 0x94) 2.908212368s ago: executing program 1 (id=8322): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)="e6", 0x1}], 0x1, &(0x7f0000000340)=[@init={0x18, 0x84, 0x0, {0x0, 0xfffd, 0x1ff, 0xd9}}], 0x18, 0x8890}, 0x24000052) r1 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x80800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x0, 0x7, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x10, 0x8, 0x4a7c, 0x100}}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r4, &(0x7f0000000400), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b25, &(0x7f0000000200)={'wlan1\x00'}) connect$packet(r1, &(0x7f0000000140)={0x11, 0x5, r2, 0x1, 0xa, 0x6, @remote}, 0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x913e0000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r5, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) 2.819784135s ago: executing program 3 (id=8323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) (async) 2.819315843s ago: executing program 4 (id=8324): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000100)=0x84, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @loopback, 0x80000001}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002003, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0), 0x801, 0x0) write$rfkill(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000480)={{r3, &(0x7f0000000000)='nl80211\x00', 0x400, &(0x7f0000000140)={@align=0x81, {0x6, 0x400, 0x0, 0xffffffffffffffff}}, 0xfffffff9, &(0x7f0000000240), &(0x7f0000000280)=0xf}, 0x1, &(0x7f0000000440)=[{0x3, 0xc23, &(0x7f0000000300)='\\!\x00', &(0x7f0000000340)="3be5a6e30494a874347cbb4de874d67ee138ce353f4374f4bceee6d7fb8ab0f85a1e7a1ca33a68838ececf028012f9dbca3773f2cb0d425341c62c2a9a50d830c98107392db9d0bda1d23fecbffd32a3f36240c8d8664879eb2650c2c05429e666c9b58d8bbd10e5b6ba231c2711d4ff43777543693dd9663d373ab3852bf7532c0890e70a9c3458c689fa24b2c40d6160ead7071447b9e2e01fc3595bbf1eab9ee465bc1da31ccc10eb631146ebe46554c6b5907f0f01e6b0f09762d89e97e244c988fe4b27668c089320028502f16d8cd7d82939edb86307ed77c62c", 0xdd, 0x20}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x2010) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010700000000fbdbdf256700000008000300", @ANYRES32=0x0, @ANYBLOB="0800c36ed10d0000"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000100)=0x84, 0x4) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @loopback, 0x80000001}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000080)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002003, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0), 0x801, 0x0) (async) write$rfkill(r2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000480)={{r3, &(0x7f0000000000)='nl80211\x00', 0x400, &(0x7f0000000140)={@align=0x81, {0x6, 0x400, 0x0, 0xffffffffffffffff}}, 0xfffffff9, &(0x7f0000000240), &(0x7f0000000280)=0xf}, 0x1, &(0x7f0000000440)=[{0x3, 0xc23, &(0x7f0000000300)='\\!\x00', &(0x7f0000000340)="3be5a6e30494a874347cbb4de874d67ee138ce353f4374f4bceee6d7fb8ab0f85a1e7a1ca33a68838ececf028012f9dbca3773f2cb0d425341c62c2a9a50d830c98107392db9d0bda1d23fecbffd32a3f36240c8d8664879eb2650c2c05429e666c9b58d8bbd10e5b6ba231c2711d4ff43777543693dd9663d373ab3852bf7532c0890e70a9c3458c689fa24b2c40d6160ead7071447b9e2e01fc3595bbf1eab9ee465bc1da31ccc10eb631146ebe46554c6b5907f0f01e6b0f09762d89e97e244c988fe4b27668c089320028502f16d8cd7d82939edb86307ed77c62c", 0xdd, 0x20}]}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) (async) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x2010) (async) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010700000000fbdbdf256700000008000300", @ANYRES32=0x0, @ANYBLOB="0800c36ed10d0000"], 0x24}}, 0x0) (async) 2.746682008s ago: executing program 3 (id=8326): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xa, &(0x7f0000000240)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x63}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000003200000000000000000000000000000000000000fefffffffffffffffcffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff01000000000000000900000000000000010000000000000000084000000000000900000000000000920200000000000000100000000000000000000000000000000000000a0001002c00000000000000580002006362632874776f66697368290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000e0fa01040040000000100000fff2074f"], 0x148}}, 0x44050) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x7fff, 0xf1, 0x50}, {0x10, 0x7, 0x80, 0xfffffffc}]}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0xc201}) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f00000005c0), 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="f4b84de4116dbdfec2d408000000", 0x0, 0x200401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.695464444s ago: executing program 4 (id=8327): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) write(r0, &(0x7f0000000040)="fa7316ed49b4ddcf763fb502166b10cf77d3a09645cf8fcb0d11aea32fab4deeff845d2fd45db02e53f6a45c0f3092792b8d786466a06bea67e8c00c59a869aea67100254cd011d8191312b228657bcf5a74f5d9f66cd0a602b16683789b0a17c1a62340eae16c040347d929c61abba14bf8f9990ebd2c5b66c7d9025bcc0524030c048a4fc20b37f6e633ad5a57454d3c502c867d3ba9d7bb77b8e3025d3632bad97f7433e7a04f05ce381375d55ddc619baac2a9550e956eb222549d6af8cdaec8ad7dbcd5c83daf272194237a00e0", 0xd0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000140)={0x1b, 0x58, 0x10, 0x0, 0xfffff800}) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000180)={0x8}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r2, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x35}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000340)) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x1, 0x0, 0x3}, 0xfd}, 0x18) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x7c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x553}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x34, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x2}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0xf70}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x8}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x1}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x80}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x912}]}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'vlan0\x00'}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}]}, 0x7c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001840)={{'\x00', 0x2}, {0x3}, 0x10, 0x0, 0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)="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", 0x16e, 0x0, &(0x7f0000000740)={0x2, 0x108c, {0x1, 0xc, 0x7f, "b199452689ac2ca5564b48b9b89ca5a0d1c5c601acf89a83d94518ed218630372981f3bdd68307319470c3bfe24671fee141a38ab4b6c1386ac7c2d1701cee8b2cfcbe7e76b470b2f670d8dc64c0164d0c5457b9b97a0280e236d67f3f3ca7c86ee62a82f27b0a01b1be9cffec2f484f1e7e196b8ec91c87ff488fc8445188", 0x1000, "f6b845f22712b76c1d91a29d76e8286c562e3842e28d6173143440b4e30e07b899fab8dc8a65403569da5dc374d38704629973d3c6d9f87a9a131299442f634952abb15d56ca65c11b76c6de21b5d2d5cc92cd7ad7f3df1c028faa5dce4e5bcaa9b6730c5d7ac3c7fb8f970e49af1d7676e6b8bbc01712ba4d6b1ee9d15011d7e802b60fb46f8340b5d1b96f4beb078afda3170ddc588414ea7b79cc8af67da0be901a8abc70201fa554ba4e88fbb38f329940cb48678d4c4c57d8f0309ea616b4fe377fac056b462697b864d064ea026e7a997b7393476ce74e144213633d1bebb9b2cffd553d1b73fdebb76d1f1da61431fdb163afdafe7da2b8c2507876376eb23867bbd44985f933e42f8c22a6a6bc3ec7f262020231436d5855c5f8e6bb7d7ff054c59df5ef6aee3bef5b80739bba42638803e940a1870eadcfc4eb3470b46af96d10c8e50b908a4c04914183d077f5e76dffce66f4864ef2b98735c84e433461adc944077271b52a2f28a0f882f40cf06acc4bceab526bac20955289f4dfd807596961e60138113b5bf32bdfceaa8f8cd67fa7f8dcdd65eb961e94e925deb79928430b17af644d34fc5125a80fe507b0a12afb5576613f48627ad109df2c877ce9014a4dc781f07990a44887d9a9a45e05798d39a39edb52171150168447940445a719ea93b5a007b0e8b43502e2ed66ab6a812f8233611f71e8a4499e99d10781b995434bc23d85ff334e59b7daf867ee28f33e1047cba4001e184ea2653bb47c6314f872091fd2186c13043b1336396b56467f2cc5ea2e789724ef5ac53d35de93049bff3d86fadd18130ab38920f8c38a97c82e9a59ce9d8c03777988bce80f80b73a838529eb68a1b0a11f7d7c77433a2ab71ba6b16a0e3d2f58927cace97ad00c803886b02e21f31c56ec8e53acce3261db80144bab808b5775317a5cece3a0e5681352a3430d4bf06ab5b7ab31701b2228193f0faa034badf052c659140d1cedc35105f94e911197477fc5e5423d0114049b33a0da4be1b62070dc60b41375fdceef74574a9d0318da13285fa2e09e2c2dd40e2e6d91a76655f393fd78221b8ba0d4d7edafa86d9b347b38da9c50e946e190a29a2eb69dd9640eb5117814f3933964a8002f7465091abc1dfeb6270fab81e0c11d62e67ba92ef0f5c50637c09361f329b1a29b98b4ca038bc3ef988d6d0319a2f6484a558e4a7966c287b397d41dc1617e895bc033aa34b74faf4a1182e87ef1dd7eb161886b1f9f6dd03ce1301a220ae2a0c58eb1ca12d5e035ed6410ad0746347ff20d288d0a5687c0bd96186d6c0a614f3cc20f27ec2761caecb107d9ef61455dca42143fadea1859fbb4229599ce693ed3a3442fe45fb7c3e059eb9916bdb21ae3e39b8c2758cd3eab9fe7153dad6efbce76c084cbff693633ba6ddaab5460ed6932ed3db9cac187e5ecb5db9221432bbfb750753bfb439ea21e710101141f502a79777a6003b5c39e9a370e63811b2ad3fe25b30eb31417f2a12d37d840fa1840c57c8d625121445d40f93e3681c8ce4a9ab0ab10de5b7070b8ef16945549238a40e15364d49244a82ed1b8c55627f57b99af452572cdb0afa6d6e5658c067fa7730fd50f6f6ccb135f0af5f29dc3f6eac566c47e55d9d92782605ce00c385b37ea7e0b90500abec8f10010eb8e4011970617db162a4e4b4b545e4608c5d9fedc403989afa810704aa4ec8b5f184daefe7ae434bc29615c93256c3e3b4b38777c02fcd7ab91483193ecd9241fc6ebd30e003a871a7a059b710d7b68298858ef8725ebf2fe27ec4cd71823802c4f986e39599ca2f564fc31a30814cf1ba2cc47776ca7a33b940f51bb90e2c307fb62b162c2c1f7404546f2c5b29fd241035b660c891f95906f67278cef701cab308b981b599f8fb6c1f302e28a6ecd4d64ef5a76b0f0a43e0d567e8cfc58c4ed8205f19125745d8b3e71e22eef10615b6084dd9255febdfb37eae2a443e03a8d65bc7ae5b18eccf30d2693dbbee0ebb61000a97193f357b9445c1099bbe3548691aed4f3ecb58196533fa34c35f419b2e1d68b6726519142d9b202e21f7220a7874e34be0fea6e41ff585a82cd8c6a7c3d97ff0f86e603d32afa9d3dc4408e481eebfe062dcd0eac8bc63696a49ae16a5346dee0368d45dea23bc231897ae7728bd795b1974cd81960f1d9fedff213e272ac63b04e99498c0ebef7e5c69dae9d84e09feabb9b8c02f258efaaa729f880b9154695fd4ee8500d83f292adc7dc7fb0ff2addcc0eea94f9a59ae2f9c91b710c1df4ca0896585a7749d8ee986501ef9090af11c7262b9f82acf99dfdfd5ad80cd32f6a08a0d4604102107d65fe73e2778b57dcb7080d71104edd84d27ab97b877efc40613ff01d155284d4d5fd166c7ede4a44213f043514b4cdc988d178a9cfb53915d43f19562998e7d11eeeba6fd9d75225166c77030f8a61a9b805d7acae07f6a7cee5fadeadcb6bba8cc27e08403381c4764a6559ad0321209e20209b817923e984385d5fb64a8e2796b4866fab64dee4f812a4702ced871790cf83ad4c89b3d5ea20fc8129d03c7deb6a522b3020aadd95825573ee6a521d5204d9f9d6fc5da1e692471d4b24ecdc83cb48bf6b8c2346cf85696355a9f5000d15f165d79f874fc9be0d1181467db3057af66b097a574e67ab8cbd57a9ede0036781a3bbd8071bb86a62c0aed368897fc005563bbe35f12b00e11aa734c8c21d3740773ede97e1fb4c987cd837daccf4ee26e9061f9a56dff1f5b21017340e43a34a7b5cd855fb34c67e128b9340c9224dbefbafc1465e8931ca58c70bc6d7e27f4a1af4b669a724d467aeeef22ea58af3923d6929eca8369ad8070441a72a9b77788f08eaa515b8cd04a9b6be9cdc04f3a7b24a566d109e06cfb19e5997c41cb066684637cc043689547d222fd0a689b0770afc8048c2c05961fcd98452090956e68fc2303031c49956806e8ca8165ee14df7e5d5028a6ff53fd3e481bb917765369b054a6d5ad415630c9e18da7e7bf4887c3c6d501e9ca2d86d035a445ca5185d68176c2ba5e7b1389a7b4f8fb37db20506845ac2c2b7456d55189d7d0fb27740be6b825333401450ef9e99c6758afab7f07668bc63efe5e192217319d496105f3307faeaa2ed384c6dfbe806cc744492db0b0bea1d21606500bf85303ec77c26cbcede2b4fff5e920c5bd7892cd65662c1a64c9321b0314578fdcb760120436e19bb66694ee726b7ed5988167c27b1e4f76e532ec754bc02195d838725ad7c9d7767836b414fb85cf84a862bb5b3d71f403f985ce270ad8d640784d888ab605d2511f32816a7ba370fc8443fdfcb885e27c344f4a67c29f303838fac46377e7cce7109be87c3cd54f51e73a95246fdd5e100e32f666c788590f9252f6b4efea2d406f0433b3e9823013e3fd730c6f8448d89c24ac1273c242605cd6ce1b756abdc02e1fca955ff62b879057a01dafa36ac4b8fc923b8aa77a698939ad38a7c5f8f90fdb78521fdf762d89e261f4f8d7b69ae5e48514e79f5a316e8c90934f5e84eb31226a387832013d4270eaffeccd3618904d0574fe0793940239aa76416cda0a03d2d8e6d49ad1dafd7976aef472c753955bc4840dcd8c7058e97591f712d40d0c34e638dd2cf8eac9e4da9726c784c38ade2f4731a102404115d0e35fdf114f7a84080b7d85b7b563629627c3e9ec64efd9b5eb080c23c516f6eda57441767116959ad7380d2a9c1206cb139de30c724df195d8d937ff24fb638c502ac651b19cce865f0c1f5a7bfcaccb81bc6089e554fb30394a095fc869149e186ad8807bdb9f40e5a7dbc92b3ade3cac2054e91b1056c6b9f94d347393596f16611963cf7b9e99d381cb616be731115c813f99cfce11c5427f96afbbc1dfbcc37acf693d5d9043002861471f2a59c47bb39fb6ca876d5dee8f4d839b15137c1273f8a3ee4dd37106ba0cf17d3069824a11b0744095ca11d744fdbcf91c9ac2e7b4f7a346f24f8a9808c49d4b00b5b0b9eb24c384bbbe070c4f2d38e13dcdc14269837472a64fce25306266bfb8e3d336497bf97618ac9f1b2fc505846cc374aa5eb57592cb74c8285686e1cc467eb958c3b3c85ba4030ad6a7599302d49451a2ed755974b90216815e98bc9797b6ceb9c22eda5b476af59137d25fc2b9753781978eb19917e655bbeccb05d41c5701569e4d44b4bb25f70384e81402260f41b493fd3c09b708d3039f38af1bbe388dcee3cf39720261f5515beacb03ceede60136ae7ff8c3f1d5aec4afba93b944dc1c47b3a7f56209b2b6d27ad193f5f86549e6715fd4da51f2bde4bad523f2b5312bc5eebd6cdad01f0bae34767aa6dd923a101aa9742c1e1c21a6bb1b46eb7e8fbbcf6b82992b876462276305fbd7a158f008600004b725e68f3e406a7b6228cdbe0f9fac04bfbbb4cc2cc40668f9635a14a31385fd58f18373a601a0030de372691d26091aee9008c5f5e3073ab5cc00b07b97c0d4908a4bd80390445ce7af2b886a6238e452d859483260d90dad689a1e98e37e44ef4f666316ff87b3255facfb6b73f3a172cdc16db800801ccb0a0c75a814be6b5a45fd2f10af743608e112ef97a06f89fb4cd1ac3b8e6daa7f3a88a8954570c64088c0f170a656c7a09a7f9261b093d4f4043b2fb8247823a8475d36e4c82f7384a2ff6a929ba61c7232a4959ecf9c703b911bebfb192e788d51cba23529ae28fb74a390d70f905dbbc83a2369a9da6785e1509bc85666ed1698420a8b28a8e0396e879cd37e823055ac1d0c9fcf2a9762051465dcc1eb7f9eee3b31a6b37de9d830b27ec92e4136c27bbd6bc517642bb76ac8d87162fabcadd0cb2760c06d0b5a7928119a933e17f06675ebe54f2c7c82a7968b053c81722ab8e1851bded4ef2420fd89aa992091e180aed39a826986f18e6a96282c83e486a9f9fba0e116cf263af627f499dcd68b8462c0396070626e552c9488b3b248ca6a83f054f125189c01de2044f81605514df45ad77fa0b8213619f8c3c079104cd81c07212359abbb49b017eabdf8948aa99dfb84398ceaa98bb67442b6adcc1bc3e74882dad943790e94ab24aa34dca10b20bf616eaba09ae0d60f8b92135f4b91d960d1e9a2ae696b90254b82ea1021f2b489ce232e0af9ec255a17b5127838bae5f38dffa3f4e954b2f910a1e5de34c009f110641058c9f74c60a33fa8f81464b5cd866e8b8039d39c7f838ca9e63b3d9c9a92f3599882ceeb5f84909f15b949667e5be543d3a26926d4cb6fa7f39ae866f124c7e3949ae8ed2a5da0f21a053b9541f7207fb27884f20097d83f81c809131721ba0c055f3f00ec0afbd482929c44de67fa4510fcaa3d3034cd0099e7f5f2fe528de577f0e55a00812df5c36deb5c8d4e45c48007979930e84b83ae6fe9d3878b14d4cc798cb778287adac39e872f46104294d730a6aac723b6eca6bd2eb38ee8e264d4904abad0299244b41739a3c604d224ec295bd246b5d269b3e9bb243b2165be96a2948b4849c3b692678f29a951fda6b2ade946c7f5bdd194badd4074c31a7fdf960540be124f1a733000723f2abe8d0bdd7d881370439d54c05e981f7750d611618a6f54d5fa79c08e8d3817c33be393071a5bbece16c0e4b1d656064d768ca5e8b6cef396b6ef36d1d62a0da4a2b1cbd54d57b648aee7c495b2a76a696b4c271d415d73739294ed62932073e79eb5667e77409b7f4913d4e908882a1d8476c7b88325326cc64f3b42d97b0ecd376d0998fe7f04a9a1cfe"}, 0x41, "ccef70fa7ccb60e622dc16d6c201a4869e58478a1e3fb076fa4bc01f5416657f15758a680a5033c6d4b337ad60fb711412f08800e0af0d67e7affc84f9795f20b9"}, 0x10d9}) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f00000018c0)={0xfffffffffffffffb, 0x7fff}) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$XFS_IOC_GET_RESBLKS(r3, 0x80105873, &(0x7f0000001900)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001ac0)={&(0x7f0000001940), 0xc, &(0x7f0000001a80)={&(0x7f0000001980)=@ipv6_newnexthop={0xdc, 0x68, 0x400, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x4, 0x0, 0x2}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x401}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}]}, @NHA_GROUP_TYPE={0x6}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ENCAP={0x80, 0x8, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x7c, 0x1, {0xea, 0x78, 0x1, 0x2, 0x5, [@local, @remote, @remote, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}]}}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001b00)={0x1, 0x2, 0x9, 0xb, 0x7}, 0x14) ioctl$XFS_IOC_FSGROWFSRT(r3, 0x40105870, &(0x7f0000001b40)={0x10000, 0x5}) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r5, 0xc0205866, &(0x7f0000001e40)={&(0x7f0000001b80)=0x47a, 0x4, &(0x7f0000001bc0)=[{}, {}, {}], &(0x7f0000001e00)}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x38, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x2f}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x38}}, 0x80c0) getpeername$inet(r0, &(0x7f0000001fc0)={0x2, 0x0, @multicast1}, &(0x7f0000002000)=0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002140)={&(0x7f0000002080)={0xb4, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x100}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x9b15}, {0x8, 0xb, 0x3ff}}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc0}, 0x4008040) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000002200)={0xf2, 0x20, '\x00', 0x0, &(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0]}) 2.635722384s ago: executing program 1 (id=8328): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x2, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x2, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r3}, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001d00)={'syztnl0\x00', &(0x7f0000001c80)={'ip6tnl0\x00', 0x0, 0x4, 0xba, 0xfa, 0x4, 0x19, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x40, 0x700, 0x4}}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@dellinkprop={0xac, 0x6d, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x2000, 0x11b42}, [@IFLA_PHYS_PORT_ID={0x24, 0x22, "97ac23efc83e68eca322de5e99d1eda1ad329e916587d5ffeaeb0d93a1d367be"}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}, {0x14, 0x35, 'bridge_slave_0\x00'}, {0x14, 0x35, 'sit0\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8080}, 0x240488c8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000880)={r2, &(0x7f0000000780)="87c61d0219c2875b40fbc8ffee6bd4d13cfbcd4f0c6823430383b349bf906c1ead00575fe75e832c629e0c9f7227537eb9e68c646641f223b40315261341c6cfdb101b7dc846e3912473587ecb7a6f85292b60f97d135597cf1cae699133bf85e850c1e3bbccbacd90790ab451f2d8bd988b4c35f4ca4b93cf7ef81e36ee6052c97b322f8ce72e31bb07e17ed9ecd5f55f843532318e38346fc8d37c35b827d0541a2ad15af3e0792ffb4bb768", &(0x7f0000000840)=@udp6=r6, 0x2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000880)={r2, &(0x7f0000000780)="87c61d0219c2875b40fbc8ffee6bd4d13cfbcd4f0c6823430383b349bf906c1ead00575fe75e832c629e0c9f7227537eb9e68c646641f223b40315261341c6cfdb101b7dc846e3912473587ecb7a6f85292b60f97d135597cf1cae699133bf85e850c1e3bbccbacd90790ab451f2d8bd988b4c35f4ca4b93cf7ef81e36ee6052c97b322f8ce72e31bb07e17ed9ecd5f55f843532318e38346fc8d37c35b827d0541a2ad15af3e0792ffb4bb768", &(0x7f0000000840)=@udp6=r6, 0x2}, 0x20) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000000200)={0x1, {0x0, 0x2, 0x8, 0x83c, 0xfffffffffffffff9}}) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000000200)={0x1, {0x0, 0x2, 0x8, 0x83c, 0xfffffffffffffff9}}) r7 = socket(0x400000000010, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_create1(0x0) (async) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000280)={0x90000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000280)={0x90000000}) listen(r8, 0x28) poll(&(0x7f0000001c40)=[{r8, 0x408}], 0x1, 0x40000400) (async) poll(&(0x7f0000001c40)=[{r8, 0x408}], 0x1, 0x40000400) shutdown(r8, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r10, {0x2, 0x3da48c8682330ab8}, {}, {0xfff3, 0xfffa}}, [@filter_kind_options=@f_fw={{0x12}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1d, 0x4, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34fb7}]}, &(0x7f0000001d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$rds(r7, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000008c0)=""/182, 0xb6}, {&(0x7f0000000980)=""/150, 0x96}, {&(0x7f0000000a40)=""/103, 0x67}, {&(0x7f0000000ac0)=""/97, 0x61}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x5, &(0x7f0000001bc0)=[@rdma_dest={0x18, 0x114, 0x2, {0x7, 0x8}}], 0x18, 0x8010}, 0xc0) 2.577821669s ago: executing program 4 (id=8329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r1 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000340)={0x11, 0xd, 0x0, 0x1, 0x11, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[], 0xfdef) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @private}, &(0x7f00000004c0)=0x10) bind$inet(r3, &(0x7f0000000880)={0x2, 0x4e22, @multicast2}, 0x10) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="2f9083c106f1d327f510c87d9d4e36e2254bfda8bfddefcfc34df7c80f80946eb6210f1e4c41b5a24151a1b35669ecdcf15ffc96ba5ea7b6c044198cb6aa201fd729", 0x42}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="a8000000000000000f01000005000000cd346441cba6213b61dba780f09c219ef1331c68fa6d1e8eb85402c53642700b1c0df54dcaef4a5e2aa11de748fa01b9689d5d74476462e9ce59e04349dbd617f659ceb7bbfc32a5d48bb71b82d172d5be5fb5d3c4cee87b5b055a4dbe6843eb9bdd3d78a478cef84f6113c84a7a2e6782372205b09c1ab1a547a607e619ad14e2f0b879424210a0196499b2cfc408edbe8f0f0eb5000000a800000000000000210300000300000029caee499369aff2b98be0cd5a733cb2890a3595d289d3e62ccc3517a08ff9fd7969f8adf7dab7adca4bc47106f87ad4754e2f93853a7132cd9163a98525124d00d9333f2c9d872789c80670607b9521c52691ac3a8e1e889b49bf8c78a4e535b8c12183847f577796b257e1ec9a1b71d2d00217e757669b077c46c3518ddf05dc94b366a9629d457456820770f9f5baeb0f2317d9c23b00a8000000000000002900000005000000cff4dd3b1286257e07d18e5e16bbf49a869bc16aecd01e339af084544b6ddcf2c7c7ecd1bdd7a0a443499fb514e43113eea07387a7bddfbe00bc7a922fd941c03312aed423ff175189cd402ea7039ee7dac1f4e8a94c35bad413ecbe1976f5e5abbe6f9d3e32aad80131e7b34ec5c6236886bfc24aa85118ecb3828adeeafe3c0b23d11c952d50ca529f1acc5430e46b038785012c4495db5800000000000000020100000000000080336a500700000000000000062af5f9de636d6bac51580b3501e33c9c12994e87bc030bbbd6d12ce5d8764da412a891e4d17b4767f72b200d03fcb967b287734469880bbc05f30070000000000000001d0000000010000031cfb0dbb1496621ebc93bf8c43aeb2f6adc1e320ad431cf85bb0322461cf805aac6102812293fefc42f23138e3eb6fd7aa2165d2651f26909b905d2a25dace7fd295c4894fdbcfa54caf199b5d5f716494aead57466089d65ef000000000000"], 0x2c0}, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@ipv6_getaddr={0x34, 0x16, 0x10, 0x70bd25, 0x25dfdbfc, {0xa, 0x78, 0x22, 0x37}, [@IFA_LOCAL={0x14, 0x2, @private0}, @IFA_TARGET_NETNSID={0x8}]}, 0x34}, 0x1, 0xba01, 0x0, 0xc0d0}, 0x20000810) (async) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x13, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000073114300000000008510000002000000850000000500000095000000000000009500a50500000000ff62e1d40ecd66ca30c1ff2ccfa43b03212d0fdc24886acf65f159b8112f2adb0a07d66b2831567ac44d8ee259b982"], &(0x7f00000001c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000200)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x6}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="9c000000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000540008001c000100000000000000000000000000000000000000000018"], 0x9c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000f80)) (async) sendmmsg(r7, &(0x7f0000000ec0), 0x40000000000009f, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000180)={0xa, 0x4e22, 0x40009, @loopback, 0x6}, 0x1c) (async) connect$inet6(r9, &(0x7f0000000940)={0xa, 0x4e22, 0x56202329, @mcast2, 0x4000005}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f0000000980)=ANY=[], 0x8) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000001300)=ANY=[@ANYBLOB="fc00000013000500010000000000000000800000000000000000000000cd00011541260000000000000000000000000000010017e15b8ff6080fead49efee50000000a00808000000000249fb31f549b4f692ac53d9813b0b78ccaccdc5b062cf122df387dedeb13508248957424a9eec2bca761d3218bf9ab6ae7b67a27f93fd62e79f1e1985f11daa3af7e21a2cf17d2f8407688d7c500000000ca194bb53de0b58a2727b621a5b6deca959157b5031e04c7e53a37657883ad10fd624f62cfe2bdb0003aad05b5a4c6196d7526e57cde3cd0272b06ba1163031050cab3a4bbc528a86e699fda21f3247f85102830964429c6f5ac01e1582ceb6a6c59aaae52e7d01ee90d2356b0f40b763d4d6260b9faee0e9f7e95ed90cf9591beda005ff88892d0a2e0446e87073e56d639c9ffb30e5b3fd1615f6c54d909309812e9cfd732e2d90667a46753f53a01aaf5d486e22da88a9e09dc62d9367f100c7c9c6066bd5fc4b9d2f0acbde9ba4969bff1e9503b71dcc254ee4143000054175fad47425828249193f94e90e8045483f6", @ANYRES32=0x0, @ANYRES64=r2, @ANYRESDEC=r1], 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.813619174s ago: executing program 5 (id=8330): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff000000004fa900000000000007010000f8ffffffb702000008000000b7030000000000008500000099fe000095"], &(0x7f0000000900)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000000940)=""/4071}, 0x94) (fail_nth: 87) 1.728885017s ago: executing program 5 (id=8331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x304, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2d8, 0x3, 0x0, 0x1, [{0x2d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2a4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5b, 0x1, "8359fa132e64f10d622d383f5ebb5135951c02f82fc04e617897afd48db051df750a8104ede94c45f815ab9a86a3eff59fb546153d14077450ef9059ff5cfaff4a23cfa98b461350320aea34c4cc432a37cf3b85bcff41"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "165c378f8a93fde7de6d4c635b5cf21ee34cd77a4ec0877185a59a78c5284279e4f2ed5027136ce9c7cc484302b8631221ed2289b08bf5e345474c95501561e788135dfe6166c2f368e3fa27bd9567229628e558d4588adec211a38cd2c9c12667496f33db7966dcbcd0dde93ea0fb1fddf9d4c4047f82"}, @NFTA_DATA_VALUE={0x72, 0x1, "d3496a941929c8e7262f000c20000482425290aacf24d2ee8f20b08150fb190b96033a24af7a225bc26955d68533601a5a"}, @NFTA_DATA_VERDICT={0x6, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "dc28f4b6652fb088c68673a464a9c9c8f02311436523f674dd3f7fdbd89d52905aa9b14293e16aed42d37a28bb6cab6e5e9f16476244a08093fc673e0800e2d7eab9ca4663f8254d36dc6a8cce845cb7e36bbeb753232cebc359930f78a4e1ad4d28171f0f1bb95c53adb43b8b4ae17a314f32c32d3a76099787b52fcb5a58c2aec752da2de2acf141ac2cd97fa5fe094886c28257eaa3925d0041ff2a5fcbe77dedbe8262e19ab1463f873d420e9308a7465df8ad69be98c37b58c823"}, @NFTA_DATA_VALUE={0x7c, 0x1, "4fcef62e0c28e37a2e439d3d6112a62c7cbe860c58c2acfc8321f970920af0e20f53ef4d1c15db88557192c06535c881e7552d6bb6d0713293f22ce0dc7817235c4d893c506e5081d59ee39687d00b8ce6c3c85ce9c82542c5daf9c6cbc120e460a5debba5486bf0d0ba4ea8d3954793fe888bf71588c976"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x388}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000003a40)={0x14, 0x0, 0x600, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1b6f41bc0259370}, 0x8000) writev(r1, &(0x7f0000001400)=[{&(0x7f0000000740)='X', 0x1}], 0x1) 1.346261834s ago: executing program 5 (id=8332): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000430001000000000000000000020000000e0001006172705f6361636865000000340006800c00070009ffff80"], 0x58}, 0x1, 0x0, 0x0, 0x4801}, 0x40084) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r0}, 0xc) 1.345969972s ago: executing program 1 (id=8333): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r0, 0x84, 0x7d, &(0x7f0000000000)={0x1, 0x27cc4534}, 0x8) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0xc082a000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000020000000852018000500000095"], &(0x7f0000000400)='syzkaller\x00', 0xc, 0x1007, &(0x7f0000001980)=""/4103, 0x41100, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9d8}, 0x94) 1.238300751s ago: executing program 5 (id=8334): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x1, 0x100, 0x100, 0x0, 0xd}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000080)=[{{&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)='P', 0x34000}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000240)=[{0x0, 0x5dc}], 0x1}}], 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x9c}}, 0x0) 1.185913621s ago: executing program 1 (id=8335): syz_emit_ethernet(0x4a, &(0x7f0000000b40)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x4e24, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x3, &(0x7f0000000800)=@raw=[@generic={0xbf, 0x6, 0x1, 0x20}, @generic={0x40, 0x0, 0x1}, @exit], &(0x7f0000000840)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000060a03040000000000000000017500080100010000000000000000000000000a00"/80], 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000011c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="c80000004200010002000000000000000201000042420000500001", @ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYBLOB="ce", @ANYRES64=r2], 0xc8}}, 0x14040040) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000700)={0xa, 0x8, 0x0, @mcast1, 0x2}, 0x1c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r5) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x3d8, 0x3d8, 0xd0, 0xd0, 0x2e8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}, {0x11}, {0xfffc}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @empty, [0x0, 0xff], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'virt_wifi0\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x14, r6, 0x30b, 0xfffffffc, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r8 = accept4$x25(0xffffffffffffffff, &(0x7f0000000a00)={0x9, @remote}, &(0x7f00000011c0)=0x12, 0x0) bind$x25(r8, &(0x7f0000001280), 0x12) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={0x0}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f00000005c0)={r11, 0x6, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000600)={r11, @in6={{0xa, 0x4e23, 0x2, @mcast2, 0x8}}, 0x5, 0x400, 0x4, 0xd5a, 0x88, 0x7ff, 0x4}, &(0x7f00000006c0)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000380)={r12, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000440)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f00000004c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000500)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="850000002e0000001600000000a3badd47000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0xffffffffffffffff, 0x0, 0xb, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xb4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}, @AF_INET6={0x50, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xfb}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.007373668s ago: executing program 5 (id=8336): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000001c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x31}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001cc0)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000001d40)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8800135433f6e31e171200070302a44340e5a252cba6cd0800e2649fcb61c2bcfbfe672bfd3a9b863ffe8a", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000080)={r1}) 165.612947ms ago: executing program 5 (id=8337): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48010}, 0x200080c4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800000, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000002c0)={r0, &(0x7f00000001c0)='/!&\x00', 0x80, &(0x7f0000000200)={@_ha_fsid={[0x3, 0x4]}, {0x3, 0x400, 0x2, 0x40}}, 0x5, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xfffffffc}) write$6lowpan_control(r3, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:10 0', 0x1b) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f00000003c0)={0x4, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e22, @local}}}, 0x108) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x25, 0x1c, @void}, 0x10) ioctl$NILFS_IOCTL_GET_SUSTAT(r5, 0x80306e85, &(0x7f0000000540)) r6 = openat$cgroup_ro(r3, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r7, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000780)={@pptp={0x18, 0x2, {0x3, @broadcast}}, {&(0x7f0000000700)=""/63, 0x3f}, &(0x7f0000000740), 0xc}, 0xa0) socket$unix(0x1, 0x1, 0x0) connect$inet(r3, &(0x7f0000000840)={0x2, 0x4e21, @empty}, 0x10) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x98, 0x13, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_OBJ_USERDATA={0x77, 0x8, "3247c3961cc1584126590b295c94872a5328d2b5b1947a90621b9bb5975fb2530796c1a9f3c8890039f9a49d777bdc77667b7569df488009e80f10a01c073b58b8c0534cb00e51f55e690084c72440163c7fbc03eca72567ebe6c45381087eb5dd0812f8c3cc310ccedaf819d5b33f78ddafe2"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x27, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x471}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x51ae}, @map_fd={0x18, 0xb, 0x1, 0x0, r6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @map_fd={0x18, 0xb, 0x1, 0x0, r3}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x1}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='GPL\x00', 0x95, 0x25, &(0x7f0000000b80)=""/37, 0x41100, 0x4b, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000bc0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0x7, 0x2, 0xc7}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000c40)=[{0x0, 0x3, 0x3, 0xc}], 0x10, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r3, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000d80)=[0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0], 0x0, 0x9b, &(0x7f0000000e00)=[{}], 0x8, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x4a, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r8, r9, 0x25, 0x4, @void}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r8, &(0x7f0000001080)={0x30000001}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r3) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000001280)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xd4, r10, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9405bb8c7edc9e378f2f46b0032b85e1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b7ccf05bbdf9b534"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x33f}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fe3c20f470fd2dae96c1de2940557a12"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "234612f14488542f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x708}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c939d09d62bf9f10"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5ca1196877234304c75f618b474106c0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4b4b24a3dbc30bbf222ddbcd73c0cbf7cc0756838791f9ffbc8943d7c097e705"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4954ce8ca87685a091d65c628951aefb"}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x40050) connect$vsock_stream(r6, &(0x7f00000012c0)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg$unix(r3, &(0x7f0000001f40)=[{{&(0x7f0000001300), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001380)=""/16, 0x10}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/239, 0xef}, {&(0x7f0000001500)=""/200, 0xc8}, {&(0x7f0000001600)=""/127, 0x7f}, {&(0x7f0000001680)=""/179, 0xb3}, {&(0x7f0000001740)=""/89, 0x59}], 0x7, &(0x7f0000001840)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001900)=""/189, 0xbd}, {&(0x7f00000019c0)=""/114, 0x72}, {&(0x7f0000001a40)=""/177, 0xb1}, {&(0x7f0000001b00)=""/189, 0xbd}, {&(0x7f0000001bc0)=""/80, 0x50}, {&(0x7f0000001c40)=""/104, 0x68}, {&(0x7f0000001cc0)=""/167, 0xa7}, {&(0x7f0000001d80)=""/66, 0x42}, {&(0x7f0000001e00)=""/52, 0x34}], 0x9, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}}], 0x2, 0x2002, &(0x7f0000001fc0)) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002000)={0x2, 0x4, 0x8, 0x1, 0x80, r12, 0xfff, '\x00', r9}, 0x50) close(r13) listen(r11, 0xf) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000002100)={0x0, 0x8}, 0x8) 123.646697ms ago: executing program 1 (id=8338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400000006000000100000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000780)={r1}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1, 0xffffffffffffffff}, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x47) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040)=0x3d, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000080)=0x100000001, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002140)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000002240)=0xe8) sendmsg$nl_generic(r6, &(0x7f0000002280)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002300)={&(0x7f0000003540)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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"], 0x13a4}, 0x1, 0x0, 0x0, 0x11}, 0x81) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000004940)={0x0}, &(0x7f0000004980)=0xc) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000049c0)=0x0) r10 = getgid() r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000004a00), 0x10901, 0x0) pipe(&(0x7f0000004a40)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r12, &(0x7f0000004a80), 0xfffffdef) write$cgroup_subtree(r12, 0x0, 0xfffffeb0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)={&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000000940)="37b9b0f9fd90c0d7f4e1a85dae5797dacb10f16b9d1e6ae9ee8070579a6d91d11cf20cc1e4faecfd33f2298380c345d68197aac7fa7d58d5444cf3c599097f825398ee82e0d56e56cf53e16a4ce0cf709e71d0ccb50f4bfc950a", 0x5a}, {&(0x7f00000009c0)="5c0101dc3d8e6971b74ad384108c2ec746a648ac19d586", 0x17}, {&(0x7f0000000a00)="2de9fe6df38b3406c8680ddec2d3afbb788757c65db959f3adecf1c6780617624bf6f4513b1915595373f283cd72071320fd503bc282de", 0x37}, {&(0x7f0000000a40)="7630ad70c05b57525e223704450e783c", 0x10}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="c4c805c156d0f6c3dfd6120fe25a04", 0xf}], 0x6, &(0x7f0000004ac0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r11, r3, r12]}}], 0xa8, 0xc800}, 0x2000001) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100)=[@mss, @timestamp, @window={0x3, 0x62f3, 0x1}, @mss, @sack_perm, @mss={0x2, 0x6}, @timestamp, @sack_perm], 0x8) sendmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180), 0x4) sendto$inet(r3, &(0x7f00000001c0)='<', 0xfdef, 0x805, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000800000085000000a50000009500000000000000e67c010e0beef065e5bc34798f621a002068b9f6042f61cfe4960a311caa1ad8775ebc0575ab2f1c6866c39ee20a951af37c1da8c5f035cca274d6a84f669a8a3d1fd41aa324ca3111b7549dad778009875f5a72477e006b98aecf74551830ef4ec1f23e26678dbd7a704d2a2d7b63b92eb35d2236be49f41dc46196519aea65bc8ac4c0"], &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 91.415309ms ago: executing program 3 (id=8339): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x1e8, 0x700001b, 0x148, 0x90, 0x148, 0x1e8, 0x206, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'tunl0\x00', 'sit0\x00', {}, {}, 0x7602}, 0x1ea, 0xc0, 0x128, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 0s ago: executing program 3 (id=8340): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, r2, 0x211, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x71d}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1040}, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004008) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4880}, 0x24000000) kernel console output (not intermixed with test programs): les: counters copy to user failed while replacing table [ 1295.679380][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7216'. [ 1297.017401][ T4908] tipc: Resetting bearer [ 1297.034897][ T4924] validate_nla: 1 callbacks suppressed [ 1297.034915][ T4924] netlink: 'syz.4.7211': attribute type 21 has an invalid length. [ 1297.034929][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7211'. [ 1297.117464][ T4944] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1297.117750][ T5739] tipc: Node number set to 4269801488 [ 1297.121845][ T4104] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.123445][ T4104] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.123497][ T4104] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.125692][ T4104] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.201331][ T4960] netlink: 220 bytes leftover after parsing attributes in process `syz.1.7219'. [ 1297.280976][ T4959] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7217'. [ 1297.281003][ T4959] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1297.370797][ T4969] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7221'. [ 1297.373208][ T4969] sctp: [Deprecated]: syz.1.7221 (pid 4969) Use of int in max_burst socket option. [ 1297.373208][ T4969] Use struct sctp_assoc_value instead [ 1297.433163][ T4953] Set syz1 is full, maxelem 2076 reached [ 1297.495142][ T4975] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7224'. [ 1297.524298][ T4973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7222'. [ 1297.566206][ T4973] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7222'. [ 1297.638378][ T4978] sctp: [Deprecated]: syz.1.7225 (pid 4978) Use of int in max_burst socket option. [ 1297.638378][ T4978] Use struct sctp_assoc_value instead [ 1297.683034][ T4978] batadv0: entered promiscuous mode [ 1297.685545][ T4978] macvlan0: entered promiscuous mode [ 1297.694366][ T4978] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1297.714169][ T4978] batadv0: left promiscuous mode [ 1297.979469][ T5006] ip_tables: iptables: counters copy to user failed while replacing table [ 1299.441783][ T5078] netlink: 'syz.3.7248': attribute type 1 has an invalid length. [ 1299.441808][ T5078] netlink: 'syz.3.7248': attribute type 2 has an invalid length. [ 1299.613344][ T5082] 0: reclassify loop, rule prio 0, protocol 03 [ 1300.476495][ T5108] netlink: 'syz.0.7256': attribute type 1 has an invalid length. [ 1300.476517][ T5108] __nla_validate_parse: 11 callbacks suppressed [ 1300.476529][ T5108] netlink: 236 bytes leftover after parsing attributes in process `syz.0.7256'. [ 1300.619375][ T5110] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7257'. [ 1300.637894][ T5110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7257'. [ 1300.820743][ T5124] netlink: 'syz.5.7261': attribute type 25 has an invalid length. [ 1300.827333][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7261'. [ 1300.884194][ T5126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7262'. [ 1300.884219][ T5126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7262'. [ 1300.884281][ T5126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7262'. [ 1300.884783][ T5126] bridge0: entered allmulticast mode [ 1300.927690][ T5126] pim6reg: entered allmulticast mode [ 1301.381896][ T5149] netlink: 172 bytes leftover after parsing attributes in process `syz.4.7269'. [ 1301.381918][ T5149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7269'. [ 1301.384248][ T5151] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1301.705347][ T5185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7275'. [ 1301.777267][ T5188] xt_IDLETIMER: label is empty or not nul-terminated [ 1304.413549][ T5225] IPv6: sit1: Disabled Multicast RS [ 1304.564690][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.596504][ T5240] bridge_slave_1: left allmulticast mode [ 1304.596760][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.633687][ T5240] bond0: (slave bond_slave_0): Releasing backup interface [ 1304.649891][ T5240] bond0: (slave bond_slave_1): Releasing backup interface [ 1304.687885][ T5240] team0: Port device team_slave_0 removed [ 1304.705255][ T5240] team0: Port device team_slave_1 removed [ 1304.706965][ T5240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1304.706985][ T5240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1304.708617][ T5240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1304.708634][ T5240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1304.715517][ T5240] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1304.793700][ T5252] bond0: entered promiscuous mode [ 1304.798908][ T5252] batadv0: entered promiscuous mode [ 1304.804667][ T5252] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1304.804686][ T5252] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1304.806576][ T5252] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1305.047041][ T5273] batadv_slave_1: entered promiscuous mode [ 1305.216399][ T5278] netlink: 'syz.0.7295': attribute type 1 has an invalid length. [ 1305.263654][ T5278] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1305.301045][ T5278] pim6reg99999999: entered allmulticast mode [ 1305.355138][ T5278] bridge4: entered promiscuous mode [ 1305.375908][ T5278] bond6: (slave bridge4): making interface the new active one [ 1305.390427][ T5278] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 1305.860212][ T5264] batadv_slave_1: left promiscuous mode [ 1306.007627][ T5306] netlink: 'syz.0.7300': attribute type 1 has an invalid length. [ 1306.087833][ T5306] macvtap1: entered allmulticast mode [ 1306.103797][ T5306] macvtap2: entered allmulticast mode [ 1306.128919][ T5294] __nla_validate_parse: 18 callbacks suppressed [ 1306.128940][ T5294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7299'. [ 1306.149872][ T5306] bond7: (slave bridge5): making interface the new active one [ 1306.159486][ T5306] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 1306.786939][ T5352] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7309'. [ 1306.903987][ T5354] netlink: 'syz.5.7310': attribute type 39 has an invalid length. [ 1306.963850][ T5355] lo: left promiscuous mode [ 1306.964040][ T5355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1307.196459][ T5365] xt_hashlimit: size too large, truncated to 1048576 [ 1307.197165][ T5364] xt_hashlimit: size too large, truncated to 1048576 [ 1307.548909][ T5382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7317'. [ 1307.564038][ T5382] bridge0: port 1(veth0) entered blocking state [ 1307.564226][ T5382] bridge0: port 1(veth0) entered disabled state [ 1307.564487][ T5382] veth0: entered allmulticast mode [ 1307.575136][ T5382] bridge0: port 1(veth0) entered blocking state [ 1307.575263][ T5382] bridge0: port 1(veth0) entered forwarding state [ 1307.685948][ T5384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7318'. [ 1307.685988][ T5384] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7318'. [ 1307.748431][ T5394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7320'. [ 1307.927944][ T5385] bridge0: port 1(veth0) entered disabled state [ 1308.167574][ T5407] bridge0: port 3(gretap0) entered blocking state [ 1308.167674][ T5407] bridge0: port 3(gretap0) entered disabled state [ 1308.167822][ T5407] gretap0: entered allmulticast mode [ 1308.173984][ T5407] gretap0: entered promiscuous mode [ 1308.174663][ T5407] bridge0: port 3(gretap0) entered blocking state [ 1308.174759][ T5407] bridge0: port 3(gretap0) entered forwarding state [ 1308.183884][ T4105] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1308.183913][ T4105] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.183933][ T4105] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1308.183978][ T4105] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1308.183999][ T4105] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.184021][ T4105] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1308.184048][ T4105] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1308.184068][ T4105] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.184088][ T4105] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1308.184113][ T4105] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1308.184133][ T4105] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.184163][ T4105] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1308.828922][ T5474] veth0_to_bond: left promiscuous mode [ 1308.848306][ T5467] ip_tables: iptables: counters copy to user failed while replacing table [ 1308.931860][ T5477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7338'. [ 1308.969363][ T5481] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7339'. [ 1309.147184][ T5488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7342'. [ 1309.213420][ T5490] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1309.214155][ T5490] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1309.218777][ T5490] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1309.272737][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7343'. [ 1309.310190][ T5495] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1309.325834][ T5495] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1309.374698][ T5500] veth1_vlan: left promiscuous mode [ 1309.377643][ T5500] veth0_vlan: left promiscuous mode [ 1309.397847][ T5500] veth0_vlan: entered promiscuous mode [ 1309.417002][ T5500] veth1_vlan: entered promiscuous mode [ 1309.429138][ T5500] veth1_macvtap: left promiscuous mode [ 1309.437334][ T5500] veth0_macvtap: left promiscuous mode [ 1309.438579][ T5500] veth0_macvtap: entered promiscuous mode [ 1309.439812][ T5500] veth1_macvtap: entered promiscuous mode [ 1309.508622][ T5500] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1309.519012][ T5500] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1309.528232][ T5500] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1309.538955][ T5500] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1309.552285][ T5500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1309.554506][ T5500] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1309.607656][ T5500] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1309.656444][ T5500] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1309.678995][ T5500] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1309.681653][ T5500] bond7: entered allmulticast mode [ 1309.681673][ T5500] bridge5: entered allmulticast mode [ 1309.682506][ T5500] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1309.686866][ T5500] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1309.693665][ T5500] bridge5: entered promiscuous mode [ 1309.759376][ T29] audit: type=1804 audit(1794089801.174:123): pid=5512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7347" name="/newroot/350/cgroup.controllers" dev="tmpfs" ino=1800 res=1 errno=0 [ 1309.759761][ T29] audit: type=1800 audit(1794089801.174:124): pid=5512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7347" name="cgroup.controllers" dev="tmpfs" ino=1800 res=0 errno=-22 [ 1309.850419][ T9279] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.853370][ T9279] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1309.853591][ T9279] bond3: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 1309.853901][ T9279] bond3: (slave veth5): making interface the new active one [ 1309.898491][ T9279] bond3: active interface up! [ 1309.903968][ T4105] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.904299][ T4105] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.013218][ T5527] FAULT_INJECTION: forcing a failure. [ 1310.013218][ T5527] name failslab, interval 1, probability 0, space 0, times 0 [ 1310.013245][ T5527] CPU: 1 UID: 0 PID: 5527 Comm: syz.1.7351 Not tainted syzkaller #0 PREEMPT(full) [ 1310.013265][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1310.013277][ T5527] Call Trace: [ 1310.013284][ T5527] [ 1310.013292][ T5527] dump_stack_lvl+0xe8/0x150 [ 1310.013327][ T5527] should_fail_ex+0x3eb/0x540 [ 1310.013357][ T5527] should_failslab+0xa8/0x100 [ 1310.013379][ T5527] __kmalloc_node_noprof+0xfb/0x720 [ 1310.013402][ T5527] ? __get_vm_area_node+0x200/0x2f0 [ 1310.013421][ T5527] ? __get_vm_area_node+0x283/0x2f0 [ 1310.013438][ T5527] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 1310.013457][ T5527] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 1310.013486][ T5527] __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 1310.013513][ T5527] ? __lock_acquire+0x747/0x2de0 [ 1310.013549][ T5527] ? hook_capable+0x1c3/0x5e0 [ 1310.013579][ T5527] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1310.013610][ T5527] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1310.013628][ T5527] __vmalloc_noprof+0xd2/0x120 [ 1310.013649][ T5527] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1310.013670][ T5527] bpf_prog_alloc_no_stats+0x47/0x550 [ 1310.013686][ T5527] ? bpf_prog_alloc+0x2a/0x1a0 [ 1310.013706][ T5527] bpf_prog_alloc+0x3c/0x1a0 [ 1310.013726][ T5527] bpf_prog_load+0x7f8/0x1c60 [ 1310.013756][ T5527] ? __pfx_bpf_prog_load+0x10/0x10 [ 1310.013787][ T5527] ? __might_fault+0xaf/0x130 [ 1310.013812][ T5527] __sys_bpf+0xd86/0xe00 [ 1310.013839][ T5527] ? __pfx___sys_bpf+0x10/0x10 [ 1310.013868][ T5527] ? __fget_files+0x2a/0x420 [ 1310.013909][ T5527] ? ksys_write+0x242/0x270 [ 1310.013935][ T5527] ? __pfx_ksys_write+0x10/0x10 [ 1310.013965][ T5527] __x64_sys_bpf+0xba/0xd0 [ 1310.014001][ T5527] do_syscall_64+0x166/0x520 [ 1310.014026][ T5527] ? trace_irq_disable+0x3b/0x140 [ 1310.014048][ T5527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.014067][ T5527] ? clear_bhb_loop+0x70/0xc0 [ 1310.014088][ T5527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.014106][ T5527] RIP: 0033:0x7f382699fb19 [ 1310.014123][ T5527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1310.014139][ T5527] RSP: 002b:00007f3824bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1310.014157][ T5527] RAX: ffffffffffffffda RBX: 00007f3826c25fa0 RCX: 00007f382699fb19 [ 1310.014169][ T5527] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1310.014181][ T5527] RBP: 00007f3824bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1310.014191][ T5527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1310.014205][ T5527] R13: 00007f3826c26038 R14: 00007f3826c25fa0 R15: 00007fffc176aa78 [ 1310.014235][ T5527] [ 1310.017775][ T5527] syz.1.7351: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1310.017835][ T5527] CPU: 1 UID: 0 PID: 5527 Comm: syz.1.7351 Not tainted syzkaller #0 PREEMPT(full) [ 1310.017854][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1310.017864][ T5527] Call Trace: [ 1310.017872][ T5527] [ 1310.017880][ T5527] dump_stack_lvl+0xe8/0x150 [ 1310.017911][ T5527] warn_alloc+0x24d/0x270 [ 1310.017941][ T5527] ? __pfx_warn_alloc+0x10/0x10 [ 1310.017970][ T5527] ? __kmalloc_node_noprof+0x4d2/0x720 [ 1310.017991][ T5527] ? __get_vm_area_node+0x200/0x2f0 [ 1310.018018][ T5527] ? __get_vm_area_node+0x283/0x2f0 [ 1310.018035][ T5527] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 1310.018055][ T5527] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 1310.018080][ T5527] __vmalloc_node_range_noprof+0xa10/0x16f0 [ 1310.018108][ T5527] ? __lock_acquire+0x747/0x2de0 [ 1310.018161][ T5527] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1310.018192][ T5527] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1310.018209][ T5527] __vmalloc_noprof+0xd2/0x120 [ 1310.018230][ T5527] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1310.018251][ T5527] bpf_prog_alloc_no_stats+0x47/0x550 [ 1310.018267][ T5527] ? bpf_prog_alloc+0x2a/0x1a0 [ 1310.018286][ T5527] bpf_prog_alloc+0x3c/0x1a0 [ 1310.018307][ T5527] bpf_prog_load+0x7f8/0x1c60 [ 1310.018338][ T5527] ? __pfx_bpf_prog_load+0x10/0x10 [ 1310.018373][ T5527] ? __might_fault+0xaf/0x130 [ 1310.018400][ T5527] __sys_bpf+0xd86/0xe00 [ 1310.018427][ T5527] ? __pfx___sys_bpf+0x10/0x10 [ 1310.018456][ T5527] ? __fget_files+0x2a/0x420 [ 1310.018494][ T5527] ? ksys_write+0x242/0x270 [ 1310.018521][ T5527] ? __pfx_ksys_write+0x10/0x10 [ 1310.018550][ T5527] __x64_sys_bpf+0xba/0xd0 [ 1310.018579][ T5527] do_syscall_64+0x166/0x520 [ 1310.018602][ T5527] ? trace_irq_disable+0x3b/0x140 [ 1310.018626][ T5527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.018644][ T5527] ? clear_bhb_loop+0x70/0xc0 [ 1310.018666][ T5527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.018683][ T5527] RIP: 0033:0x7f382699fb19 [ 1310.018700][ T5527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1310.018714][ T5527] RSP: 002b:00007f3824bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1310.018731][ T5527] RAX: ffffffffffffffda RBX: 00007f3826c25fa0 RCX: 00007f382699fb19 [ 1310.018744][ T5527] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1310.018755][ T5527] RBP: 00007f3824bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1310.018766][ T5527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1310.018777][ T5527] R13: 00007f3826c26038 R14: 00007f3826c25fa0 R15: 00007fffc176aa78 [ 1310.018808][ T5527] [ 1310.018815][ T5527] Mem-Info: [ 1310.018823][ T5527] active_anon:13311 inactive_anon:0 isolated_anon:0 [ 1310.018823][ T5527] active_file:162 inactive_file:43590 isolated_file:0 [ 1310.018823][ T5527] unevictable:0 dirty:292 writeback:0 [ 1310.018823][ T5527] slab_reclaimable:13520 slab_unreclaimable:132592 [ 1310.018823][ T5527] mapped:29683 shmem:566 pagetables:3776 [ 1310.018823][ T5527] sec_pagetables:0 bounce:0 [ 1310.018823][ T5527] kernel_misc_reclaimable:0 [ 1310.018823][ T5527] free:1224464 free_pcp:11852 free_cma:0 [ 1310.018869][ T5527] Node 0 active_anon:53244kB inactive_anon:0kB active_file:648kB inactive_file:174156kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118732kB dirty:1168kB writeback:0kB shmem:2264kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17156kB pagetables:14972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1310.018917][ T5527] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1310.018962][ T5527] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1310.019020][ T5527] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 1310.019051][ T5527] Node 0 DMA32 free:950884kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:53244kB inactive_anon:0kB active_file:648kB inactive_file:174156kB unevictable:0kB writepending:1168kB zspages:0kB present:3129332kB managed:2522828kB mlocked:0kB bounce:0kB free_pcp:45656kB local_pcp:25672kB free_cma:0kB [ 1310.019130][ T5527] lowmem_reserve[]: 0 0 1 1 1 [ 1310.019161][ T5527] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1310.019209][ T5527] lowmem_reserve[]: 0 0 0 0 0 [ 1310.019239][ T5527] Node 1 Normal free:3931612kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1748kB local_pcp:1748kB free_cma:0kB [ 1310.019290][ T5527] lowmem_reserve[]: 0 0 0 0 0 [ 1310.019320][ T5527] Node 0 [ 1310.022216][ T4104] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.023832][ T5523] openvswitch: netlink: IP tunnel dst address not specified [ 1310.029417][ T5527] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1310.029515][ T5527] Node 0 DMA32: 2565*4kB (UME) 1172*8kB (UM) 1417*16kB (UME) 2000*32kB (UME) 1558*64kB (UME) 281*128kB (UM) 301*256kB (UME) 188*512kB (UM) 53*1024kB (UME) 5*2048kB (UM) 115*4096kB (UM) = 950852kB [ 1310.029647][ T5527] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1310.029729][ T5527] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 6*128kB (UM) 10*256kB (UM) 4*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 957*4096kB (M) = 3931612kB [ 1310.029872][ T5527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1310.029887][ T5527] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1310.029900][ T5527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1310.029913][ T5527] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1310.029927][ T5527] 44314 total pagecache pages [ 1310.029934][ T5527] 0 pages in swap cache [ 1310.029940][ T5527] Free swap = 124996kB [ 1310.029947][ T5527] Total swap = 124996kB [ 1310.029954][ T5527] 2097051 pages RAM [ 1310.029961][ T5527] 0 pages HighMem/MovableOnly [ 1310.029968][ T5527] 434380 pages reserved [ 1310.029981][ T5527] 0 pages cma reserved [ 1310.062570][ T5532] openvswitch: netlink: IP tunnel dst address not specified [ 1310.484422][ T5552] IPv6: Can't replace route, no match found [ 1311.179666][ T5565] __nla_validate_parse: 4 callbacks suppressed [ 1311.179687][ T5565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7356'. [ 1312.199079][ T5612] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7361'. [ 1312.925082][ T5648] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7369'. [ 1312.955557][ T5648] syzkaller1: entered promiscuous mode [ 1312.955578][ T5648] syzkaller1: entered allmulticast mode [ 1313.100058][ T5666] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7371'. [ 1313.100090][ T5666] netlink: 'syz.4.7371': attribute type 8 has an invalid length. [ 1313.148437][ T5666] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1313.148459][ T5666] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1313.286488][ T5671] tipc: Cannot configure node identity twice [ 1313.286504][ T5671] tipc: Cannot configure node identity twice [ 1313.439127][ T5678] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7374'. [ 1313.439324][ T5678] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7374'. [ 1313.439499][ T5678] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7374'. [ 1313.439675][ T5678] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7374'. [ 1313.439844][ T5678] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7374'. [ 1313.440015][ T5678] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7374'. [ 1313.601211][ T5692] bridge0: port 2(veth1_virt_wifi) entered blocking state [ 1313.601374][ T5692] bridge0: port 2(veth1_virt_wifi) entered disabled state [ 1313.601519][ T5692] veth1_virt_wifi: entered allmulticast mode [ 1313.603831][ T5692] veth1_virt_wifi: left allmulticast mode [ 1313.787109][ T5694] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1313.944487][ T5700] bond5 (unregistering): Released all slaves [ 1314.027299][ T5702] lo: entered promiscuous mode [ 1314.027322][ T5702] lo: left allmulticast mode [ 1314.027490][ T5702] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1314.078734][ T5702] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1314.108436][ T5702] bond6: (slave lo): Enslaving as an active interface with an up link [ 1314.173065][ T5728] geneve2: entered promiscuous mode [ 1314.173087][ T5728] geneve2: entered allmulticast mode [ 1314.367677][ T5760] netlink: 'syz.3.7384': attribute type 1 has an invalid length. [ 1314.453239][ T5760] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1314.475122][ T5762] netlink: 'syz.0.7385': attribute type 11 has an invalid length. [ 1314.523837][ T5765] bond5: (slave veth3): Enslaving as an active interface with a down link [ 1314.615771][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1314.634588][ T5765] bond5: (slave batadv0): making interface the new active one [ 1314.649572][ T5765] batadv0: entered promiscuous mode [ 1314.666060][ T5765] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 1314.801967][ T5781] bond5 (unregistering): (slave veth3): Releasing active interface [ 1314.831409][ T5781] bond5 (unregistering): (slave batadv0): Releasing active interface [ 1314.831437][ T5781] batadv0: left promiscuous mode [ 1314.841027][ T5781] bond5 (unregistering): Released all slaves [ 1315.243866][ T5805] syzkaller0: entered promiscuous mode [ 1315.243890][ T5805] syzkaller0: entered allmulticast mode [ 1315.527724][ T5829] syzkaller1: entered promiscuous mode [ 1315.527746][ T5829] syzkaller1: entered allmulticast mode [ 1315.584904][ T29] audit: type=1800 audit(1794089807.004:125): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7398" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1340 res=0 errno=-22 [ 1315.591287][ T5835] –: renamed from virt_wifi0 [ 1316.395470][ T5872] bridge6: entered promiscuous mode [ 1316.395495][ T5872] bridge6: entered allmulticast mode [ 1316.416111][ T5872] team0: Port device bridge6 added [ 1316.426429][ T5876] __nla_validate_parse: 73 callbacks suppressed [ 1316.426449][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7403'. [ 1316.457321][ T5873] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7405'. [ 1316.464940][ T5873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7405'. [ 1316.884130][ T5901] gretap2: entered promiscuous mode [ 1316.913393][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7411'. [ 1317.074296][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7412'. [ 1317.074327][ T5899] bond0: option resend_igmp: invalid value (807419198) [ 1317.074344][ T5899] bond0: option resend_igmp: allowed values 0 - 255 [ 1317.655515][ T5916] netlink: 124 bytes leftover after parsing attributes in process `syz.0.7417'. [ 1317.655542][ T5916] netlink: 124 bytes leftover after parsing attributes in process `syz.0.7417'. [ 1317.843609][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7420'. [ 1317.905502][ T5923] bond6: (slave lo): Releasing backup interface [ 1317.906842][ T5923] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1317.929187][ T5923] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1317.948019][ T5931] netlink: 'syz.4.7420': attribute type 10 has an invalid length. [ 1317.948039][ T5931] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7420'. [ 1318.022090][ T5938] netlink: 'syz.0.7422': attribute type 39 has an invalid length. [ 1318.513184][ T5964] netlink: 'syz.4.7430': attribute type 2 has an invalid length. [ 1318.513205][ T5964] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7430'. [ 1318.523907][ T5964] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 1319.367448][ T6006] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1319.383961][ T6006] bond8 (unregistering): Released all slaves [ 1319.536046][ T6018] pim6reg1: entered promiscuous mode [ 1319.536062][ T6018] pim6reg1: entered allmulticast mode [ 1319.907776][ T6045] bridge7: entered promiscuous mode [ 1319.907800][ T6045] bridge7: entered allmulticast mode [ 1320.079790][ T29] audit: type=1804 audit(1794089811.494:126): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7457" name="/newroot/376/cgroup.controllers" dev="tmpfs" ino=1934 res=1 errno=0 [ 1320.105480][ T29] audit: type=1800 audit(1794089811.524:127): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7457" name="cgroup.controllers" dev="tmpfs" ino=1934 res=0 errno=-22 [ 1320.134906][ T6053] netlink: 'syz.1.7457': attribute type 10 has an invalid length. [ 1320.135503][ T6053] netlink: 'syz.1.7457': attribute type 10 has an invalid length. [ 1320.458524][ T6065] lo: left promiscuous mode [ 1320.517678][ T6065] A link change request failed with some changes committed already. Interface ip6gretap1 may have been left with an inconsistent configuration, please check. [ 1320.588624][ T6065] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1320.821371][ T6083] netlink: 'syz.0.7461': attribute type 9 has an invalid length. [ 1321.089054][ T6095] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1321.309879][ T6113] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1321.349414][ T6113] tipc: Enabled bearer , priority 0 [ 1321.398136][ T6113] syzkaller0: entered promiscuous mode [ 1321.398159][ T6113] syzkaller0: entered allmulticast mode [ 1321.398774][ T6113] tipc: Resetting bearer [ 1321.399164][ T6116] x_tables: duplicate underflow at hook 2 [ 1321.447552][ T6120] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1321.483214][ T6125] __nla_validate_parse: 9 callbacks suppressed [ 1321.483233][ T6125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7471'. [ 1321.537408][ T4106] tipc: Resetting bearer [ 1321.537663][ T6125] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7471'. [ 1321.538534][ T6125] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7471'. [ 1321.538654][ T6125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7471'. [ 1321.574818][ T6111] tipc: Resetting bearer [ 1323.499617][ T6111] tipc: Disabling bearer [ 1323.938668][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7479'. [ 1324.222469][ T6139] IPv6: NLM_F_CREATE should be specified when creating new route [ 1324.601550][ T6166] IPv6: sit2: Disabled Multicast RS [ 1324.973147][ T6185] netlink: 'syz.4.7487': attribute type 1 has an invalid length. [ 1325.094593][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7488'. [ 1325.164076][ T6197] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1325.277030][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7494'. [ 1325.309626][ T6197] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1325.332616][ T5738] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1325.336657][ T6197] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1325.358805][ T6197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1325.410036][ T6203] netlink: 'syz.5.7494': attribute type 11 has an invalid length. [ 1325.410061][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7494'. [ 1325.426200][ T6203] netlink: 'syz.5.7494': attribute type 2 has an invalid length. [ 1325.457210][ T6203] !: entered promiscuous mode [ 1325.510113][ T6203] netlink: 'syz.5.7494': attribute type 2 has an invalid length. [ 1325.589870][ T6222] ip_tables: iptables: counters copy to user failed while replacing table [ 1325.591467][ T6221] ip_tables: iptables: counters copy to user failed while replacing table [ 1325.752090][ T6230] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7500'. [ 1325.813213][ T6238] sctp: [Deprecated]: syz.0.7502 (pid 6238) Use of int in max_burst socket option. [ 1325.813213][ T6238] Use struct sctp_assoc_value instead [ 1325.987563][ T6243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7506'. [ 1326.122184][ T6243] tipc: Enabling of bearer rejected, failed to enable media [ 1326.211684][T28662] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1326.270045][ T6257] ip_tables: iptables: counters copy to user failed while replacing table [ 1326.483229][ T6274] xt_hashlimit: overflow, try lower: 0/0 [ 1326.604307][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7512'. [ 1326.886404][ T6290] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7514'. [ 1327.158870][ T6310] tipc: Enabling of bearer rejected, failed to enable media [ 1327.657747][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7525'. [ 1327.657828][ T6333] veth0: left allmulticast mode [ 1327.658078][ T6333] bridge0: port 1(veth0) entered disabled state [ 1327.691566][ T6333] vlan3: left promiscuous mode [ 1327.694381][ T6333] bridge0: port 3(vlan3) entered disabled state [ 1327.930194][ T6341] sctp: [Deprecated]: syz.1.7527 (pid 6341) Use of int in max_burst socket option. [ 1327.930194][ T6341] Use struct sctp_assoc_value instead [ 1328.059862][ T6329] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7523'. [ 1328.070838][ T6329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7523'. [ 1328.256232][ T6359] netlink: 'syz.1.7532': attribute type 1 has an invalid length. [ 1328.258324][ T6359] netlink: 'syz.1.7532': attribute type 362 has an invalid length. [ 1328.317278][ T6362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7532'. [ 1328.335065][ T6361] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7531'. [ 1328.599912][ T6366] bridge_slave_0: left allmulticast mode [ 1328.599938][ T6366] bridge_slave_0: left promiscuous mode [ 1328.600167][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.628931][ T6367] gretap0: left allmulticast mode [ 1328.628955][ T6367] gretap0: left promiscuous mode [ 1328.629172][ T6367] bridge0: port 3(gretap0) entered disabled state [ 1328.639497][ T6367] bridge_slave_1: left allmulticast mode [ 1328.639520][ T6367] bridge_slave_1: left promiscuous mode [ 1328.639732][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.083416][ T6394] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7541'. [ 1329.095164][ T6396] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7541'. [ 1329.136574][ T6394] netlink: 'syz.1.7541': attribute type 38 has an invalid length. [ 1329.136738][ T6396] netlink: 'syz.1.7541': attribute type 38 has an invalid length. [ 1329.578958][ T6425] netlink: 'syz.5.7545': attribute type 1 has an invalid length. [ 1329.768597][ T6432] veth7: entered allmulticast mode [ 1329.798914][ T6432] bond7: (slave veth7): Enslaving as an active interface with a down link [ 1329.842364][ T6425] bond0: (slave veth0_to_bond): Releasing backup interface [ 1329.891989][ T6425] bond7: (slave veth0_to_bond): making interface the new active one [ 1329.893593][ T6425] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1329.931495][ T6444] netlink: 136 bytes leftover after parsing attributes in process `syz.3.7547'. [ 1330.334813][ T6457] ip_tables: iptables: counters copy to user failed while replacing table [ 1330.379659][ T6457] syzkaller1: entered promiscuous mode [ 1330.379682][ T6457] syzkaller1: entered allmulticast mode [ 1330.758361][ T6468] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1330.894450][ T6476] bond0 (unregistering): left promiscuous mode [ 1330.895134][ T6476] bond0 (unregistering): Released all slaves [ 1334.798407][ T6527] __nla_validate_parse: 3 callbacks suppressed [ 1334.798428][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7569'. [ 1334.945152][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7571'. [ 1334.967401][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7571'. [ 1335.036383][ T6538] FAULT_INJECTION: forcing a failure. [ 1335.036383][ T6538] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.036411][ T6538] CPU: 1 UID: 0 PID: 6538 Comm: syz.4.7573 Not tainted syzkaller #0 PREEMPT(full) [ 1335.036431][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1335.036442][ T6538] Call Trace: [ 1335.036449][ T6538] [ 1335.036457][ T6538] dump_stack_lvl+0xe8/0x150 [ 1335.036496][ T6538] should_fail_ex+0x3eb/0x540 [ 1335.036524][ T6538] should_failslab+0xa8/0x100 [ 1335.036546][ T6538] __kmalloc_cache_noprof+0x9e/0x600 [ 1335.036571][ T6538] ? bpf_diag_init+0x87/0x140 [ 1335.036594][ T6538] ? bpf_diag_init+0x87/0x140 [ 1335.036625][ T6538] bpf_diag_init+0x87/0x140 [ 1335.036651][ T6538] bpf_check+0x8c6/0x34e0 [ 1335.036682][ T6538] ? ktime_get_with_offset+0x93/0x2d0 [ 1335.036708][ T6538] ? ktime_get_with_offset+0x93/0x2d0 [ 1335.036731][ T6538] ? __pfx_bpf_check+0x10/0x10 [ 1335.036754][ T6538] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1335.036781][ T6538] bpf_prog_load+0x14da/0x1c60 [ 1335.036812][ T6538] ? __pfx_bpf_prog_load+0x10/0x10 [ 1335.036847][ T6538] ? __might_fault+0xaf/0x130 [ 1335.036872][ T6538] __sys_bpf+0xd86/0xe00 [ 1335.036898][ T6538] ? __pfx___sys_bpf+0x10/0x10 [ 1335.036929][ T6538] ? __fget_files+0x2a/0x420 [ 1335.036969][ T6538] ? ksys_write+0x242/0x270 [ 1335.036996][ T6538] ? __pfx_ksys_write+0x10/0x10 [ 1335.037025][ T6538] __x64_sys_bpf+0xba/0xd0 [ 1335.037054][ T6538] do_syscall_64+0x166/0x520 [ 1335.037077][ T6538] ? trace_irq_disable+0x3b/0x140 [ 1335.037101][ T6538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.037119][ T6538] ? clear_bhb_loop+0x70/0xc0 [ 1335.037141][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.037159][ T6538] RIP: 0033:0x7ff27699fb19 [ 1335.037177][ T6538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1335.037192][ T6538] RSP: 002b:00007ff2777cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1335.037212][ T6538] RAX: ffffffffffffffda RBX: 00007ff276c25fa0 RCX: 00007ff27699fb19 [ 1335.037232][ T6538] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1335.037243][ T6538] RBP: 00007ff2777cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1335.037255][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1335.037266][ T6538] R13: 00007ff276c26038 R14: 00007ff276c25fa0 R15: 00007ffc281b5378 [ 1335.037297][ T6538] [ 1335.298729][ T6540] ip_tables: iptables: counters copy to user failed while replacing table [ 1335.764016][ T6557] sctp: [Deprecated]: syz.1.7578 (pid 6557) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1335.764016][ T6557] Use struct sctp_sack_info instead [ 1335.765878][ T6556] sctp: [Deprecated]: syz.1.7578 (pid 6556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1335.765878][ T6556] Use struct sctp_sack_info instead [ 1336.197079][ T6549] vcan1: entered promiscuous mode [ 1336.197101][ T6549] vcan1: entered allmulticast mode [ 1336.396659][ T6561] xt_nfacct: accounting object `' does not exist [ 1336.407239][ T6561] xt_nfacct: accounting object `' does not exist [ 1336.416895][ T6561] xt_nfacct: accounting object `' does not exist [ 1336.436217][ T6561] xt_nfacct: accounting object `' does not exist [ 1336.469605][ T6564] macsec1: entered promiscuous mode [ 1336.469626][ T6564] macsec1: entered allmulticast mode [ 1336.473352][ T6561] xt_nfacct: accounting object `' does not exist [ 1336.486453][ T6567] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7580'. [ 1336.495988][ T6561] xt_nfacct: accounting object `' does not exist [ 1336.544476][ T6561] xt_nfacct: accounting object `' does not exist [ 1336.567456][ T6561] xt_nfacct: accounting object `' does not exist [ 1336.597318][ T6561] xt_nfacct: accounting object `' does not exist [ 1336.625829][ T6561] xt_nfacct: accounting object `' does not exist [ 1337.188723][ T6577] netlink: 'syz.5.7583': attribute type 1 has an invalid length. [ 1337.188746][ T6577] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7583'. [ 1337.575262][ T6597] netlink: 'syz.3.7587': attribute type 1 has an invalid length. [ 1337.577210][ T6598] netlink: 'syz.3.7587': attribute type 1 has an invalid length. [ 1337.667220][ T6597] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1337.764090][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7587'. [ 1338.165620][ T6612] netlink: 'syz.4.7589': attribute type 2 has an invalid length. [ 1338.165640][ T6612] netlink: 'syz.4.7589': attribute type 8 has an invalid length. [ 1338.165652][ T6612] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7589'. [ 1338.189360][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7590'. [ 1338.895636][ T6632] netlink: 'syz.3.7597': attribute type 16 has an invalid length. [ 1338.895658][ T6632] netlink: 'syz.3.7597': attribute type 17 has an invalid length. [ 1338.895670][ T6632] netlink: 'syz.3.7597': attribute type 27 has an invalid length. [ 1339.145787][ T6644] syzkaller0: entered promiscuous mode [ 1339.145813][ T6644] syzkaller0: entered allmulticast mode [ 1339.180589][ T6653] IPVS: set_ctl: invalid protocol: 94 172.30.0.4:20003 [ 1340.661766][ T6680] netlink: 'syz.3.7609': attribute type 10 has an invalid length. [ 1340.756920][ T6681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7609'. [ 1341.961892][ T6700] netlink: 'syz.4.7612': attribute type 4 has an invalid length. [ 1341.961915][ T6700] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7612'. [ 1342.294528][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7614'. [ 1343.934603][ T6680] ipvlan0: entered allmulticast mode [ 1343.934628][ T6680] veth0_vlan: entered allmulticast mode [ 1343.958750][ T6680] team0: Device ipvlan0 failed to register rx_handler [ 1343.965757][ T6683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7609'. [ 1343.966809][ T6700] A link change request failed with some changes committed already. Interface 00ªX¹¦Dö» may have been left with an inconsistent configuration, please check. [ 1344.246362][ T6718] x_tables: unsorted underflow at hook 2 [ 1344.398090][ T6727] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7620'. [ 1344.577894][ T6747] IPv6: addrconf: prefix option has invalid lifetime [ 1344.598760][ T6748] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7624'. [ 1344.861897][ T6754] netlink: 'syz.3.7627': attribute type 15 has an invalid length. [ 1345.200116][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7628'. [ 1345.215155][ T6761] bridge_slave_1: left allmulticast mode [ 1345.215179][ T6761] bridge_slave_1: left promiscuous mode [ 1345.215402][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.219636][ T6764] xt_hashlimit: size too large, truncated to 1048576 [ 1345.219911][ T6764] xt_hashlimit: max too large, truncated to 1048576 [ 1345.275288][ T6761] bridge_slave_0: left allmulticast mode [ 1345.275316][ T6761] bridge_slave_0: left promiscuous mode [ 1345.275546][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.492734][ T6766] netlink: 'syz.5.7629': attribute type 14 has an invalid length. [ 1345.534190][ T6764] netlink: 'syz.5.7629': attribute type 14 has an invalid length. [ 1345.696345][ T6772] netlink: 'syz.0.7630': attribute type 1 has an invalid length. [ 1345.696365][ T6772] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7630'. [ 1345.941186][ T6789] xt_CT: No such helper "netbios-ns" [ 1346.106761][ T6802] FAULT_INJECTION: forcing a failure. [ 1346.106761][ T6802] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.106789][ T6802] CPU: 1 UID: 0 PID: 6802 Comm: syz.5.7638 Not tainted syzkaller #0 PREEMPT(full) [ 1346.106804][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1346.106812][ T6802] Call Trace: [ 1346.106818][ T6802] [ 1346.106824][ T6802] dump_stack_lvl+0xe8/0x150 [ 1346.106851][ T6802] should_fail_ex+0x3eb/0x540 [ 1346.106872][ T6802] should_failslab+0xa8/0x100 [ 1346.106886][ T6802] __kvmalloc_node_noprof+0x171/0x820 [ 1346.106903][ T6802] ? __kmalloc_cache_noprof+0x148/0x600 [ 1346.106919][ T6802] ? bpf_diag_init+0x87/0x140 [ 1346.106937][ T6802] ? bpf_check+0x1934/0x34e0 [ 1346.106950][ T6802] ? bpf_check+0x1934/0x34e0 [ 1346.106967][ T6802] bpf_check+0x1934/0x34e0 [ 1346.106990][ T6802] ? ktime_get_with_offset+0x93/0x2d0 [ 1346.107008][ T6802] ? ktime_get_with_offset+0x93/0x2d0 [ 1346.107026][ T6802] ? __pfx_bpf_check+0x10/0x10 [ 1346.107042][ T6802] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1346.107074][ T6802] bpf_prog_load+0x14da/0x1c60 [ 1346.107098][ T6802] ? __pfx_bpf_prog_load+0x10/0x10 [ 1346.107124][ T6802] ? __might_fault+0xaf/0x130 [ 1346.107145][ T6802] __sys_bpf+0xd86/0xe00 [ 1346.107165][ T6802] ? __pfx___sys_bpf+0x10/0x10 [ 1346.107187][ T6802] ? __fget_files+0x2a/0x420 [ 1346.107216][ T6802] ? ksys_write+0x242/0x270 [ 1346.107235][ T6802] ? __pfx_ksys_write+0x10/0x10 [ 1346.107257][ T6802] __x64_sys_bpf+0xba/0xd0 [ 1346.107279][ T6802] do_syscall_64+0x166/0x520 [ 1346.107296][ T6802] ? trace_irq_disable+0x3b/0x140 [ 1346.107314][ T6802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.107328][ T6802] ? clear_bhb_loop+0x70/0xc0 [ 1346.107345][ T6802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.107359][ T6802] RIP: 0033:0x7fc50dd9fb19 [ 1346.107373][ T6802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.107385][ T6802] RSP: 002b:00007fc50ebf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1346.107401][ T6802] RAX: ffffffffffffffda RBX: 00007fc50e025fa0 RCX: 00007fc50dd9fb19 [ 1346.107411][ T6802] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1346.107420][ T6802] RBP: 00007fc50ebf5090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.107429][ T6802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1346.107437][ T6802] R13: 00007fc50e026038 R14: 00007fc50e025fa0 R15: 00007ffd6d381248 [ 1346.107462][ T6802] [ 1346.564617][ T6825] netlink: 'syz.1.7645': attribute type 13 has an invalid length. [ 1346.731487][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7646'. [ 1346.731518][ T6833] netlink: 'syz.0.7646': attribute type 26 has an invalid length. [ 1346.731531][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7646'. [ 1346.736203][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7646'. [ 1346.736231][ T6833] netlink: 'syz.0.7646': attribute type 26 has an invalid length. [ 1346.736244][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7646'. [ 1346.809786][ T6839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7650'. [ 1346.864729][ T6839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7650'. [ 1347.496989][ T6872] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1347.692470][ T6875] syzkaller1: entered promiscuous mode [ 1347.692493][ T6875] syzkaller1: entered allmulticast mode [ 1348.048059][ T6895] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7666'. [ 1348.098528][ T6893] netlink: 'syz.3.7665': attribute type 70 has an invalid length. [ 1348.102650][ T6898] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7667'. [ 1348.158729][ T6900] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1348.169090][ T6900] netlink: 'syz.5.7669': attribute type 1 has an invalid length. [ 1348.241028][ T6906] syzkaller1: entered promiscuous mode [ 1348.241089][ T6906] syzkaller1: entered allmulticast mode [ 1348.447043][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7673'. [ 1348.447073][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7673'. [ 1348.712583][ T6948] netlink: 'syz.3.7678': attribute type 1 has an invalid length. [ 1348.758961][ T6949] syz.1.7681: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1348.759028][ T6949] CPU: 0 UID: 0 PID: 6949 Comm: syz.1.7681 Not tainted syzkaller #0 PREEMPT(full) [ 1348.759049][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1348.759061][ T6949] Call Trace: [ 1348.759069][ T6949] [ 1348.759078][ T6949] dump_stack_lvl+0xe8/0x150 [ 1348.759113][ T6949] warn_alloc+0x24d/0x270 [ 1348.759136][ T6949] ? stack_depot_save_flags+0x33/0x810 [ 1348.759167][ T6949] ? __pfx_warn_alloc+0x10/0x10 [ 1348.759188][ T6949] ? kasan_save_track+0x4f/0x80 [ 1348.759212][ T6949] ? __kasan_kmalloc+0x93/0xb0 [ 1348.759238][ T6949] ? xsk_init_queue+0x8a/0xe0 [ 1348.759259][ T6949] ? xsk_setsockopt+0x52a/0x960 [ 1348.759280][ T6949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.759312][ T6949] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 1348.759368][ T6949] ? rcu_is_watching+0x16/0xb0 [ 1348.759403][ T6949] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1348.759424][ T6949] ? __kmalloc_cache_noprof+0x31c/0x600 [ 1348.759448][ T6949] ? __kmalloc_cache_noprof+0x148/0x600 [ 1348.759470][ T6949] ? xskq_create+0x56/0x220 [ 1348.759496][ T6949] xskq_create+0x148/0x220 [ 1348.759518][ T6949] ? xsk_init_queue+0x8a/0xe0 [ 1348.759542][ T6949] xsk_init_queue+0x8a/0xe0 [ 1348.759564][ T6949] xsk_setsockopt+0x52a/0x960 [ 1348.759587][ T6949] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1348.759609][ T6949] ? __pfx_aa_sk_perm+0x10/0x10 [ 1348.759648][ T6949] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1348.759673][ T6949] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1348.759695][ T6949] do_sock_setsockopt+0x17c/0x1b0 [ 1348.759732][ T6949] __x64_sys_setsockopt+0x13d/0x1b0 [ 1348.759759][ T6949] do_syscall_64+0x166/0x520 [ 1348.759783][ T6949] ? trace_irq_disable+0x3b/0x140 [ 1348.759808][ T6949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.759827][ T6949] ? clear_bhb_loop+0x70/0xc0 [ 1348.759851][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.759869][ T6949] RIP: 0033:0x7f382699fb19 [ 1348.759888][ T6949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1348.759903][ T6949] RSP: 002b:00007f3824bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1348.759922][ T6949] RAX: ffffffffffffffda RBX: 00007f3826c25fa0 RCX: 00007f382699fb19 [ 1348.759936][ T6949] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1348.759947][ T6949] RBP: 00007f3826a37b70 R08: 0000000000000004 R09: 0000000000000000 [ 1348.759960][ T6949] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 1348.759972][ T6949] R13: 00007f3826c26038 R14: 00007f3826c25fa0 R15: 00007fffc176aa78 [ 1348.760006][ T6949] [ 1348.794315][ T6949] Mem-Info: [ 1348.794332][ T6949] active_anon:13450 inactive_anon:0 isolated_anon:0 [ 1348.794332][ T6949] active_file:162 inactive_file:43604 isolated_file:0 [ 1348.794332][ T6949] unevictable:0 dirty:101 writeback:0 [ 1348.794332][ T6949] slab_reclaimable:13404 slab_unreclaimable:135758 [ 1348.794332][ T6949] mapped:29632 shmem:541 pagetables:6149 [ 1348.794332][ T6949] sec_pagetables:0 bounce:0 [ 1348.794332][ T6949] kernel_misc_reclaimable:0 [ 1348.794332][ T6949] free:1207261 free_pcp:23815 free_cma:0 [ 1348.794383][ T6949] Node 0 active_anon:53684kB inactive_anon:0kB active_file:648kB inactive_file:174204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118528kB dirty:404kB writeback:0kB shmem:2164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17416kB pagetables:20972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1348.794433][ T6949] Node 1 active_anon:116kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:3624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1348.794481][ T6949] Node 0 DMA free:15088kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:152kB local_pcp:124kB free_cma:0kB [ 1348.794535][ T6949] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 1348.794568][ T6949] Node 0 DMA32 free:945932kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:53684kB inactive_anon:0kB active_file:648kB inactive_file:174204kB unevictable:0kB writepending:404kB zspages:0kB present:3129332kB managed:2522828kB mlocked:0kB bounce:0kB free_pcp:44076kB local_pcp:22940kB free_cma:0kB [ 1348.794623][ T6949] lowmem_reserve[]: 0 0 1 1 1 [ 1348.799924][ T6949] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1348.799980][ T6949] lowmem_reserve[]: 0 0 0 0 0 [ 1348.800012][ T6949] Node 1 Normal free:3868024kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:116kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:51028kB local_pcp:16476kB free_cma:0kB [ 1348.800065][ T6949] lowmem_reserve[]: 0 0 0 0 0 [ 1348.800315][ T6949] Node 0 DMA: 8*4kB (U) 10*8kB (U) 14*16kB (U) 9*32kB (U) 12*64kB (U) 9*128kB (U) 7*256kB (U) 3*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (U) = 15088kB [ 1348.800456][ T6949] Node 0 DMA32: 5567*4kB (UME) 2524*8kB (UME) 1931*16kB (UME) 3280*32kB (UME) 2472*64kB (UME) 1141*128kB (UE) 662*256kB (UME) 248*512kB (UM) 125*1024kB (UME) 13*2048kB (UM) 3*4096kB (UM) = 945932kB [ 1348.800591][ T6949] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1348.800676][ T6949] Node 1 Normal: 197*4kB (UM) 179*8kB (UM) 178*16kB (UME) 171*32kB (UM) 150*64kB (UM) 118*128kB (UM) 52*256kB (UME) 22*512kB (UME) 11*1024kB (UE) 10*2048kB (UME) 922*4096kB (UM) = 3868076kB [ 1348.800820][ T6949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1348.800836][ T6949] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1348.800850][ T6949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1348.803232][ T6949] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1348.803251][ T6949] 44303 total pagecache pages [ 1348.803259][ T6949] 0 pages in swap cache [ 1348.803266][ T6949] Free swap = 124996kB [ 1348.803274][ T6949] Total swap = 124996kB [ 1348.803282][ T6949] 2097051 pages RAM [ 1348.803289][ T6949] 0 pages HighMem/MovableOnly [ 1348.803296][ T6949] 434380 pages reserved [ 1348.803303][ T6949] 0 pages cma reserved [ 1349.513049][ T6958] bond8: entered allmulticast mode [ 1349.874613][ T6984] bond6: option updelay: invalid value (18446744073709551481) [ 1349.874636][ T6984] bond6: option updelay: allowed values 0 - 2147483647 [ 1349.877904][ T6984] bond6 (unregistering): Released all slaves [ 1349.955056][ T6994] pimreg: entered allmulticast mode [ 1350.006068][ T6983] veth1_to_team: Caught tx_queue_len zero misconfig [ 1350.165739][ T7004] ip6t_ah: unknown flags 4 [ 1350.386473][ T7015] validate_nla: 1 callbacks suppressed [ 1350.386493][ T7015] netlink: 'syz.0.7700': attribute type 4 has an invalid length. [ 1350.664780][ T7030] syzkaller0: entered promiscuous mode [ 1350.664804][ T7030] syzkaller0: entered allmulticast mode [ 1351.062848][ T7045] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1351.119406][ T7057] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1351.356040][ T7074] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:2 [ 1351.499521][ T7071] IPVS: Scheduler module ip_vs_sip not found [ 1351.563631][ T7074] IPVS: Scheduler module ip_vs_sip not found [ 1351.804900][ T7090] syzkaller1: left promiscuous mode [ 1351.804925][ T7090] syzkaller1: left allmulticast mode [ 1351.825800][ T7096] tipc: Resetting bearer [ 1351.839911][ T7090] __nla_validate_parse: 11 callbacks suppressed [ 1351.839930][ T7090] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7718'. [ 1351.994519][ T7110] ip_tables: iptables: counters copy to user failed while replacing table [ 1352.117057][ T7101] syzkaller0: entered promiscuous mode [ 1352.117080][ T7101] syzkaller0: entered allmulticast mode [ 1352.453452][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7733'. [ 1352.516448][ T7141] netlink: 'syz.4.7734': attribute type 1 has an invalid length. [ 1352.699262][ T7152] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1352.718084][ T7149] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7736'. [ 1352.718106][ T7149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1352.718319][ T7137] dummy0: left promiscuous mode [ 1352.724558][ T7137] netlink: 'syz.4.7734': attribute type 10 has an invalid length. [ 1352.724576][ T7137] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7734'. [ 1352.724785][ T7137] dummy0: entered promiscuous mode [ 1352.822782][ T7155] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7738'. [ 1352.823180][ T7156] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7738'. [ 1352.893071][ T7158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7739'. [ 1352.893147][ T7158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7739'. [ 1353.149390][ T7178] FAULT_INJECTION: forcing a failure. [ 1353.149390][ T7178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1353.149428][ T7178] CPU: 0 UID: 0 PID: 7178 Comm: syz.3.7744 Not tainted syzkaller #0 PREEMPT(full) [ 1353.149450][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1353.149462][ T7178] Call Trace: [ 1353.149469][ T7178] [ 1353.149478][ T7178] dump_stack_lvl+0xe8/0x150 [ 1353.149511][ T7178] should_fail_ex+0x3eb/0x540 [ 1353.149540][ T7178] _copy_from_iter+0x1d3/0x1680 [ 1353.149561][ T7178] ? __pfx_process_measurement+0x10/0x10 [ 1353.149675][ T7178] ? lock_acquire+0x115/0x350 [ 1353.149700][ T7178] ? __pfx__copy_from_iter+0x10/0x10 [ 1353.149737][ T7178] bcm_sendmsg+0x157/0x800 [ 1353.149851][ T7178] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1353.149882][ T7178] ? apparmor_socket_sendmsg+0x98/0x360 [ 1353.149907][ T7178] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1353.149925][ T7178] sock_sendmsg_nosec+0x14e/0x190 [ 1353.149953][ T7178] ____sys_sendmsg+0x54e/0x850 [ 1353.149979][ T7178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1353.150008][ T7178] ? import_iovec+0x73/0xa0 [ 1353.150033][ T7178] ___sys_sendmsg+0x2a5/0x360 [ 1353.150051][ T7178] ? __lock_acquire+0x747/0x2de0 [ 1353.150077][ T7178] ? __pfx____sys_sendmsg+0x10/0x10 [ 1353.150134][ T7178] ? __fget_files+0x3a2/0x420 [ 1353.150155][ T7178] ? __fget_files+0x2a/0x420 [ 1353.150186][ T7178] __x64_sys_sendmsg+0x1b1/0x290 [ 1353.150208][ T7178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1353.150244][ T7178] do_syscall_64+0x166/0x520 [ 1353.150265][ T7178] ? trace_irq_disable+0x3b/0x140 [ 1353.150286][ T7178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.150303][ T7178] ? clear_bhb_loop+0x70/0xc0 [ 1353.150325][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.150341][ T7178] RIP: 0033:0x7f2d8bf9fb19 [ 1353.150358][ T7178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1353.150373][ T7178] RSP: 002b:00007f2d8ce21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1353.150436][ T7178] RAX: ffffffffffffffda RBX: 00007f2d8c225fa0 RCX: 00007f2d8bf9fb19 [ 1353.150449][ T7178] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1353.150461][ T7178] RBP: 00007f2d8ce21090 R08: 0000000000000000 R09: 0000000000000000 [ 1353.150473][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1353.150484][ T7178] R13: 00007f2d8c226038 R14: 00007f2d8c225fa0 R15: 00007ffc70d8b898 [ 1353.150515][ T7178] [ 1353.648872][ T7188] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1353.659827][ T7188] batman_adv: batadv0: Adding interface: gretap1 [ 1353.659844][ T7188] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1353.659958][ T7188] batman_adv: batadv0: Interface activated: gretap1 [ 1353.757519][ T7206] netlink: 'syz.1.7750': attribute type 1 has an invalid length. [ 1353.934085][ T7206] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1353.977413][ T7216] netlink: 'syz.1.7750': attribute type 1 has an invalid length. [ 1354.015401][ T7224] bond0: entered promiscuous mode [ 1354.033755][ T7224] batadv0: entered promiscuous mode [ 1354.036241][ T7224] debugfs: 'hsr1' already exists in 'hsr' [ 1354.036260][ T7224] Cannot create hsr debugfs directory [ 1354.036312][ T7224] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1354.040072][ T7224] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1354.167115][ T7233] FAULT_INJECTION: forcing a failure. [ 1354.167115][ T7233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1354.167144][ T7233] CPU: 0 UID: 0 PID: 7233 Comm: syz.5.7756 Not tainted syzkaller #0 PREEMPT(full) [ 1354.167165][ T7233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1354.167176][ T7233] Call Trace: [ 1354.167184][ T7233] [ 1354.167191][ T7233] dump_stack_lvl+0xe8/0x150 [ 1354.167225][ T7233] should_fail_ex+0x3eb/0x540 [ 1354.167251][ T7233] _copy_to_user+0x31/0xb0 [ 1354.167277][ T7233] simple_read_from_buffer+0xe1/0x170 [ 1354.167402][ T7233] proc_fail_nth_read+0x1bb/0x230 [ 1354.167478][ T7233] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1354.167500][ T7233] ? rw_verify_area+0x24a/0x4c0 [ 1354.167526][ T7233] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1354.167544][ T7233] vfs_read+0x213/0xa80 [ 1354.167574][ T7233] ? __pfx___mutex_lock+0x10/0x10 [ 1354.167598][ T7233] ? __pfx_vfs_read+0x10/0x10 [ 1354.167623][ T7233] ? __fget_files+0x2a/0x420 [ 1354.167643][ T7233] ? __fget_files+0x3a2/0x420 [ 1354.167665][ T7233] ? __fget_files+0x2a/0x420 [ 1354.167691][ T7233] ? fdget+0x1ac/0x250 [ 1354.167721][ T7233] ksys_read+0x150/0x270 [ 1354.167747][ T7233] ? __pfx_ksys_read+0x10/0x10 [ 1354.167783][ T7233] do_syscall_64+0x166/0x520 [ 1354.167805][ T7233] ? trace_irq_disable+0x3b/0x140 [ 1354.167829][ T7233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.167855][ T7233] ? clear_bhb_loop+0x70/0xc0 [ 1354.167876][ T7233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.167894][ T7233] RIP: 0033:0x7fc50dd6034e [ 1354.167911][ T7233] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1354.167926][ T7233] RSP: 002b:00007fc50ebf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1354.167945][ T7233] RAX: ffffffffffffffda RBX: 00007fc50ebf56c0 RCX: 00007fc50dd6034e [ 1354.167957][ T7233] RDX: 000000000000000f RSI: 00007fc50ebf50a0 RDI: 0000000000000004 [ 1354.167967][ T7233] RBP: 00007fc50ebf5090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.167978][ T7233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1354.167989][ T7233] R13: 00007fc50e026038 R14: 00007fc50e025fa0 R15: 00007ffd6d381248 [ 1354.168019][ T7233] [ 1354.594012][ T7251] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1354.696614][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7763'. [ 1354.713858][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7763'. [ 1354.714936][ T7256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1354.875219][ T7262] syzkaller1: entered promiscuous mode [ 1354.875243][ T7262] syzkaller1: entered allmulticast mode [ 1355.083609][ T7284] xt_TCPMSS: Only works on TCP SYN packets [ 1355.211782][ T7295] netlink: 'syz.3.7776': attribute type 3 has an invalid length. [ 1355.211807][ T7295] nbd: must specify an index to disconnect [ 1355.251341][ T7288] syzkaller0: entered promiscuous mode [ 1355.251364][ T7288] syzkaller0: entered allmulticast mode [ 1355.446813][ T7297] netlink: 'syz.5.7775': attribute type 2 has an invalid length. [ 1355.446833][ T7297] netlink: 'syz.5.7775': attribute type 8 has an invalid length. [ 1357.613412][ T7302] pimreg: entered allmulticast mode [ 1357.754413][ T7333] __nla_validate_parse: 3 callbacks suppressed [ 1357.754436][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7780'. [ 1357.978593][ T7338] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7781'. [ 1358.699619][ T7350] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7783'. [ 1358.699645][ T7350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1358.792240][ T7349] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1359.197640][ T7393] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1361.044141][ T7403] netlink: 'syz.0.7790': attribute type 6 has an invalid length. [ 1361.110125][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7791'. [ 1361.224199][ T7407] žÿ: renamed from bond_slave_1 (while UP) [ 1361.288071][ T7407] : option downdelay: invalid value (18446744073709547007) [ 1361.288096][ T7407] : option downdelay: allowed values 0 - 2147483647 [ 1361.309211][ T7407]  (unregistering): Released all slaves [ 1361.380157][ T7423] netlink: 'syz.5.7797': attribute type 1 has an invalid length. [ 1361.810499][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1364.365846][ T7439] netlink: 'syz.4.7799': attribute type 33 has an invalid length. [ 1364.386130][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7799'. [ 1364.386162][ T7441] netlink: 'syz.4.7799': attribute type 5 has an invalid length. [ 1364.386175][ T7441] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7799'. [ 1364.431057][ T7441] geneve4: entered promiscuous mode [ 1364.431073][ T7441] geneve4: entered allmulticast mode [ 1364.451604][ T4106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1364.451909][ T4106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1364.452590][ T4106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1364.452623][ T4106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1364.909935][ T7468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7806'. [ 1364.975427][ T7469] macsec1: entered promiscuous mode [ 1364.975449][ T7469] bridge0: entered promiscuous mode [ 1364.976000][ T7469] macsec1: entered allmulticast mode [ 1364.976014][ T7469] bridge0: entered allmulticast mode [ 1364.983947][ T7469] bridge0: port 1(macsec1) entered blocking state [ 1364.984065][ T7469] bridge0: port 1(macsec1) entered disabled state [ 1365.332599][ T7469] bridge0: left allmulticast mode [ 1365.332623][ T7469] bridge0: left promiscuous mode [ 1365.576347][ T7485] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1365.610057][ T7488] netlink: 'syz.4.7809': attribute type 83 has an invalid length. [ 1365.777914][ T7495] syzkaller0: entered promiscuous mode [ 1365.777938][ T7495] syzkaller0: entered allmulticast mode [ 1365.815789][ T7502] tipc: MTU too low for tipc bearer [ 1365.882629][ T7506] IPv6: NLM_F_CREATE should be specified when creating new route [ 1366.735069][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7817'. [ 1366.822208][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7821'. [ 1366.881666][ T7525] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7818'. [ 1366.882585][ T7533] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7818'. [ 1366.908350][ T7529] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7820'. [ 1367.127721][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7826'. [ 1367.978219][ T7587] ip_tables: iptables: counters copy to user failed while replacing table [ 1368.241971][ T7597] tipc: Enabling of bearer rejected, already enabled [ 1368.267254][ T7597] xt_hashlimit: size too large, truncated to 1048576 [ 1368.677177][ T7620] bond9: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1368.678681][ T7620] bond9 (unregistering): Released all slaves [ 1368.719579][ T7633] netlink: 'syz.5.7844': attribute type 1 has an invalid length. [ 1368.719601][ T7633] netlink: 'syz.5.7844': attribute type 2 has an invalid length. [ 1368.760639][ T7633] netlink: 'syz.5.7844': attribute type 8 has an invalid length. [ 1368.760663][ T7633] sch_fq: defrate 0 ignored. [ 1368.828562][ T7639] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1369.809660][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7859'. [ 1369.811830][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7859'. [ 1369.863154][ T7694] netlink: zone id is out of range [ 1369.997284][ T7699] rxe_eth0 speed is unknown, defaulting to 1000 [ 1370.185358][ T7701] netlink: 'syz.5.7863': attribute type 10 has an invalid length. [ 1370.304464][ T7701] bond7: (slave veth0_to_bond): Releasing active interface [ 1370.345014][ T7701] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1370.399752][ T7721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7866'. [ 1370.454105][ T7723] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7866'. [ 1370.472779][T14981] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1370.472898][T14981] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1370.472932][T14981] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1370.472964][T14981] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1370.563072][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7868'. [ 1370.563093][ T7736] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7868'. [ 1370.563332][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7868'. [ 1370.563346][ T7736] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7868'. [ 1370.563543][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7868'. [ 1370.563555][ T7736] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7868'. [ 1370.635498][ T7726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1370.635932][ T7726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1370.636161][ T7726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1370.649423][ T7726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1370.649932][ T7726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1370.672237][ T7726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1370.672752][ T7726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1370.673268][ T7726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1370.673708][ T7726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1370.679973][ T7726] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1371.295519][ T7750] geneve0: Caught tx_queue_len zero misconfig [ 1371.402221][ T7755] netlink: 'syz.0.7874': attribute type 2 has an invalid length. [ 1371.591937][ T7763] netlink: 'syz.5.7877': attribute type 1 has an invalid length. [ 1371.687049][ T7763] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1371.713353][ T7768] openvswitch: netlink: Key 6 has unexpected len 13 expected 2 [ 1371.923114][ T7785] FAULT_INJECTION: forcing a failure. [ 1371.923114][ T7785] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.923141][ T7785] CPU: 0 UID: 0 PID: 7785 Comm: syz.4.7886 Not tainted syzkaller #0 PREEMPT(full) [ 1371.923161][ T7785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1371.923172][ T7785] Call Trace: [ 1371.923179][ T7785] [ 1371.923188][ T7785] dump_stack_lvl+0xe8/0x150 [ 1371.923222][ T7785] should_fail_ex+0x3eb/0x540 [ 1371.923251][ T7785] should_failslab+0xa8/0x100 [ 1371.923273][ T7785] __kvmalloc_node_noprof+0x171/0x820 [ 1371.923297][ T7785] ? __kvmalloc_node_noprof+0x340/0x820 [ 1371.923318][ T7785] ? bpf_compute_postorder+0xd3/0x9a0 [ 1371.923342][ T7785] ? bpf_compute_postorder+0xd3/0x9a0 [ 1371.923376][ T7785] bpf_compute_postorder+0xd3/0x9a0 [ 1371.923402][ T7785] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 1371.923422][ T7785] ? check_unwind_insns+0x670/0x910 [ 1371.923451][ T7785] bpf_check+0x298f/0x34e0 [ 1371.923482][ T7785] ? ktime_get_with_offset+0x93/0x2d0 [ 1371.923508][ T7785] ? ktime_get_with_offset+0x93/0x2d0 [ 1371.923531][ T7785] ? __pfx_bpf_check+0x10/0x10 [ 1371.923553][ T7785] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1371.923579][ T7785] bpf_prog_load+0x14da/0x1c60 [ 1371.923610][ T7785] ? __pfx_bpf_prog_load+0x10/0x10 [ 1371.923645][ T7785] ? __might_fault+0xaf/0x130 [ 1371.923672][ T7785] __sys_bpf+0xd86/0xe00 [ 1371.923698][ T7785] ? __pfx___sys_bpf+0x10/0x10 [ 1371.923728][ T7785] ? __fget_files+0x2a/0x420 [ 1371.923770][ T7785] ? ksys_write+0x242/0x270 [ 1371.923797][ T7785] ? __pfx_ksys_write+0x10/0x10 [ 1371.923826][ T7785] __x64_sys_bpf+0xba/0xd0 [ 1371.923854][ T7785] do_syscall_64+0x166/0x520 [ 1371.923879][ T7785] ? trace_irq_disable+0x3b/0x140 [ 1371.923902][ T7785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.923921][ T7785] ? clear_bhb_loop+0x70/0xc0 [ 1371.923943][ T7785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.923961][ T7785] RIP: 0033:0x7ff27699fb19 [ 1371.923978][ T7785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1371.923993][ T7785] RSP: 002b:00007ff2777cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1371.924013][ T7785] RAX: ffffffffffffffda RBX: 00007ff276c25fa0 RCX: 00007ff27699fb19 [ 1371.924026][ T7785] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1371.924038][ T7785] RBP: 00007ff2777cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1371.924055][ T7785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1371.924066][ T7785] R13: 00007ff276c26038 R14: 00007ff276c25fa0 R15: 00007ffc281b5378 [ 1371.924098][ T7785] [ 1372.265547][ T7800] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1372.432677][ T7796] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1372.432714][ T7796] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1372.432749][ T7796] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1372.467918][ T7813] 8021q: VLANs not supported on ip6_vti0 [ 1372.743728][ T7822] 0: reclassify loop, rule prio 0, protocol 800 [ 1372.997492][ T7828] netlink: 'syz.4.7896': attribute type 10 has an invalid length. [ 1372.997529][ T7828] hsr0: left promiscuous mode [ 1372.997706][ T7828] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1372.998323][ T7828] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1372.998344][ T7828] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1373.097879][ T7835] sctp: [Deprecated]: syz.3.7897 (pid 7835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1373.097879][ T7835] Use struct sctp_sack_info instead [ 1373.186059][ T7838] FAULT_INJECTION: forcing a failure. [ 1373.186059][ T7838] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.186087][ T7838] CPU: 1 UID: 0 PID: 7838 Comm: syz.4.7900 Not tainted syzkaller #0 PREEMPT(full) [ 1373.186107][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1373.186118][ T7838] Call Trace: [ 1373.186125][ T7838] [ 1373.186133][ T7838] dump_stack_lvl+0xe8/0x150 [ 1373.186167][ T7838] should_fail_ex+0x3eb/0x540 [ 1373.186195][ T7838] should_failslab+0xa8/0x100 [ 1373.186216][ T7838] __kvmalloc_node_noprof+0x171/0x820 [ 1373.186242][ T7838] ? __kvmalloc_node_noprof+0x340/0x820 [ 1373.186265][ T7838] ? bpf_compute_postorder+0x127/0x9a0 [ 1373.186287][ T7838] ? bpf_compute_postorder+0x127/0x9a0 [ 1373.186317][ T7838] bpf_compute_postorder+0x127/0x9a0 [ 1373.186343][ T7838] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 1373.186375][ T7838] bpf_check+0x298f/0x34e0 [ 1373.186406][ T7838] ? ktime_get_with_offset+0x93/0x2d0 [ 1373.186429][ T7838] ? ktime_get_with_offset+0x93/0x2d0 [ 1373.186454][ T7838] ? __pfx_bpf_check+0x10/0x10 [ 1373.186479][ T7838] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1373.186512][ T7838] bpf_prog_load+0x14da/0x1c60 [ 1373.186542][ T7838] ? __pfx_bpf_prog_load+0x10/0x10 [ 1373.186572][ T7838] ? __might_fault+0xaf/0x130 [ 1373.186598][ T7838] __sys_bpf+0xd86/0xe00 [ 1373.186623][ T7838] ? __pfx___sys_bpf+0x10/0x10 [ 1373.186651][ T7838] ? __fget_files+0x2a/0x420 [ 1373.186691][ T7838] ? ksys_write+0x242/0x270 [ 1373.186717][ T7838] ? __pfx_ksys_write+0x10/0x10 [ 1373.186746][ T7838] __x64_sys_bpf+0xba/0xd0 [ 1373.186775][ T7838] do_syscall_64+0x166/0x520 [ 1373.186796][ T7838] ? trace_irq_disable+0x3b/0x140 [ 1373.186819][ T7838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.186838][ T7838] ? clear_bhb_loop+0x70/0xc0 [ 1373.186860][ T7838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.186878][ T7838] RIP: 0033:0x7ff27699fb19 [ 1373.186895][ T7838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1373.186910][ T7838] RSP: 002b:00007ff2777cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1373.186929][ T7838] RAX: ffffffffffffffda RBX: 00007ff276c25fa0 RCX: 00007ff27699fb19 [ 1373.186942][ T7838] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1373.186954][ T7838] RBP: 00007ff2777cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1373.186965][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1373.186977][ T7838] R13: 00007ff276c26038 R14: 00007ff276c25fa0 R15: 00007ffc281b5378 [ 1373.187007][ T7838] [ 1373.187533][ T7841] netlink: 'syz.3.7903': attribute type 1 has an invalid length. [ 1373.253117][ T7845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1373.346715][ T7841] bond7: entered promiscuous mode [ 1373.349358][ T7849] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 1373.349761][ T7841] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1373.538101][ T7841] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1373.538465][ T7841] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1373.538484][ T7841] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1373.568284][ T7841] bond7: (slave xfrm1): making interface the new active one [ 1373.568313][ T7841] xfrm1: entered promiscuous mode [ 1373.583116][ T7841] bond7: (slave xfrm1): Enslaving as an active interface with an up link [ 1373.901404][ T7877] bridge0: entered allmulticast mode [ 1373.947512][ T7877] pim6reg: entered allmulticast mode [ 1375.733421][T25370] bond0: (slave veth0_to_bond): interface is now down [ 1376.588378][ T7919] __nla_validate_parse: 79 callbacks suppressed [ 1376.588397][ T7919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7921'. [ 1376.707966][ T7921] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1376.707996][ T7921] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.770878][ T7924] netlink: 'syz.0.7920': attribute type 4 has an invalid length. [ 1376.903671][ T7921] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1376.903713][ T7921] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.083756][ T7921] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1377.083791][ T7921] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.099523][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7923'. [ 1377.205068][ T7933] bond8: option lacp_active: invalid value (5) [ 1377.219671][ T7933] bond8 (unregistering): Released all slaves [ 1377.337630][ T7921] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1377.337666][ T7921] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.391447][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7929'. [ 1377.391561][ T7964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1377.394714][ T7965] netlink: 'syz.5.7929': attribute type 11 has an invalid length. [ 1377.453585][ T7964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1377.747476][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7930'. [ 1377.747508][ T7981] netlink: 'syz.3.7930': attribute type 30 has an invalid length. [ 1377.748254][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7930'. [ 1377.748285][ T7982] netlink: 'syz.3.7930': attribute type 30 has an invalid length. [ 1377.847641][ T7981] vxlan1: entered promiscuous mode [ 1377.847663][ T7981] vxlan1: entered allmulticast mode [ 1377.908650][ T7982] vxlan1: entered promiscuous mode [ 1377.908672][ T7982] vxlan1: entered allmulticast mode [ 1378.063942][T25370] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.063976][T25370] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.064021][T25370] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.064043][T25370] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.064074][T25370] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.064095][T25370] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.139648][ T7989] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7932'. [ 1378.151484][ T4107] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.151516][ T4107] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.291794][ T4107] bond0: (slave veth0_to_bond): interface is now down [ 1378.627492][ T8010] tipc: Started in network mode [ 1378.627522][ T8010] tipc: Node identity 00000000000000000300000000000001, cluster identity 4711 [ 1378.627570][ T8010] tipc: Enabling of bearer rejected, failed to enable media [ 1378.645905][ T8012] FAULT_INJECTION: forcing a failure. [ 1378.645905][ T8012] name failslab, interval 1, probability 0, space 0, times 0 [ 1378.645933][ T8012] CPU: 1 UID: 0 PID: 8012 Comm: syz.5.7941 Not tainted syzkaller #0 PREEMPT(full) [ 1378.645953][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1378.645963][ T8012] Call Trace: [ 1378.645971][ T8012] [ 1378.645979][ T8012] dump_stack_lvl+0xe8/0x150 [ 1378.646013][ T8012] should_fail_ex+0x3eb/0x540 [ 1378.646039][ T8012] should_failslab+0xa8/0x100 [ 1378.646058][ T8012] __kvmalloc_node_noprof+0x171/0x820 [ 1378.646082][ T8012] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 1378.646109][ T8012] ? sort_subprogs_topo+0xbe/0x1130 [ 1378.646128][ T8012] ? sort_subprogs_topo+0xbe/0x1130 [ 1378.646154][ T8012] sort_subprogs_topo+0xbe/0x1130 [ 1378.646173][ T8012] ? bpf_prune_dead_branches+0xb56/0xbc0 [ 1378.646220][ T8012] bpf_check+0x2c4c/0x34e0 [ 1378.646253][ T8012] ? ktime_get_with_offset+0x93/0x2d0 [ 1378.646276][ T8012] ? ktime_get_with_offset+0x93/0x2d0 [ 1378.646300][ T8012] ? __pfx_bpf_check+0x10/0x10 [ 1378.646321][ T8012] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1378.646347][ T8012] bpf_prog_load+0x14da/0x1c60 [ 1378.646378][ T8012] ? __pfx_bpf_prog_load+0x10/0x10 [ 1378.646411][ T8012] ? __might_fault+0xaf/0x130 [ 1378.646436][ T8012] __sys_bpf+0xd86/0xe00 [ 1378.646462][ T8012] ? __pfx___sys_bpf+0x10/0x10 [ 1378.646490][ T8012] ? __fget_files+0x2a/0x420 [ 1378.646529][ T8012] ? ksys_write+0x242/0x270 [ 1378.646555][ T8012] ? __pfx_ksys_write+0x10/0x10 [ 1378.646584][ T8012] __x64_sys_bpf+0xba/0xd0 [ 1378.646619][ T8012] do_syscall_64+0x166/0x520 [ 1378.646640][ T8012] ? trace_irq_disable+0x3b/0x140 [ 1378.646663][ T8012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.646680][ T8012] ? clear_bhb_loop+0x70/0xc0 [ 1378.646702][ T8012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.646719][ T8012] RIP: 0033:0x7fc50dd9fb19 [ 1378.646735][ T8012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1378.646750][ T8012] RSP: 002b:00007fc50ebf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1378.646769][ T8012] RAX: ffffffffffffffda RBX: 00007fc50e025fa0 RCX: 00007fc50dd9fb19 [ 1378.646782][ T8012] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1378.646793][ T8012] RBP: 00007fc50ebf5090 R08: 0000000000000000 R09: 0000000000000000 [ 1378.646804][ T8012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1378.646814][ T8012] R13: 00007fc50e026038 R14: 00007fc50e025fa0 R15: 00007ffd6d381248 [ 1378.646844][ T8012] [ 1378.744243][ T8016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7940'. [ 1379.118633][ T8031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7944'. [ 1379.176961][ T8033] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1379.266240][ T8039] netlink: 'syz.1.7947': attribute type 1 has an invalid length. [ 1379.298941][ T8039] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1379.338290][ T8039] bond9: (slave ip6gretap2): making interface the new active one [ 1379.339627][ T8039] bond9: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1379.459412][ T8048] wg2: Caught tx_queue_len zero misconfig [ 1379.625364][ T8060] FAULT_INJECTION: forcing a failure. [ 1379.625364][ T8060] name failslab, interval 1, probability 0, space 0, times 0 [ 1379.625505][ T8060] CPU: 0 UID: 0 PID: 8060 Comm: syz.5.7952 Not tainted syzkaller #0 PREEMPT(full) [ 1379.625526][ T8060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1379.625537][ T8060] Call Trace: [ 1379.625544][ T8060] [ 1379.625553][ T8060] dump_stack_lvl+0xe8/0x150 [ 1379.625585][ T8060] should_fail_ex+0x3eb/0x540 [ 1379.625613][ T8060] should_failslab+0xa8/0x100 [ 1379.625634][ T8060] __kvmalloc_node_noprof+0x171/0x820 [ 1379.625660][ T8060] ? __kvmalloc_node_noprof+0x340/0x820 [ 1379.625690][ T8060] ? sort_subprogs_topo+0xf4/0x1130 [ 1379.625709][ T8060] ? sort_subprogs_topo+0xf4/0x1130 [ 1379.625736][ T8060] sort_subprogs_topo+0xf4/0x1130 [ 1379.625755][ T8060] ? bpf_prune_dead_branches+0xb56/0xbc0 [ 1379.625797][ T8060] bpf_check+0x2c4c/0x34e0 [ 1379.625826][ T8060] ? ktime_get_with_offset+0x93/0x2d0 [ 1379.625851][ T8060] ? ktime_get_with_offset+0x93/0x2d0 [ 1379.625875][ T8060] ? __pfx_bpf_check+0x10/0x10 [ 1379.625897][ T8060] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1379.625924][ T8060] bpf_prog_load+0x14da/0x1c60 [ 1379.625955][ T8060] ? __pfx_bpf_prog_load+0x10/0x10 [ 1379.625989][ T8060] ? __might_fault+0xaf/0x130 [ 1379.626016][ T8060] __sys_bpf+0xd86/0xe00 [ 1379.626050][ T8060] ? __pfx___sys_bpf+0x10/0x10 [ 1379.626079][ T8060] ? __fget_files+0x2a/0x420 [ 1379.626120][ T8060] ? ksys_write+0x242/0x270 [ 1379.626147][ T8060] ? __pfx_ksys_write+0x10/0x10 [ 1379.626176][ T8060] __x64_sys_bpf+0xba/0xd0 [ 1379.626205][ T8060] do_syscall_64+0x166/0x520 [ 1379.626227][ T8060] ? trace_irq_disable+0x3b/0x140 [ 1379.626250][ T8060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.626268][ T8060] ? clear_bhb_loop+0x70/0xc0 [ 1379.626291][ T8060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.626308][ T8060] RIP: 0033:0x7fc50dd9fb19 [ 1379.626326][ T8060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1379.626340][ T8060] RSP: 002b:00007fc50ebf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1379.626360][ T8060] RAX: ffffffffffffffda RBX: 00007fc50e025fa0 RCX: 00007fc50dd9fb19 [ 1379.626373][ T8060] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1379.626385][ T8060] RBP: 00007fc50ebf5090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.626396][ T8060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1379.626407][ T8060] R13: 00007fc50e026038 R14: 00007fc50e025fa0 R15: 00007ffd6d381248 [ 1379.626438][ T8060] [ 1380.056230][ T8077] NFSD: Failed to start, no listeners configured. [ 1380.593934][ T8107] FAULT_INJECTION: forcing a failure. [ 1380.593934][ T8107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1380.593964][ T8107] CPU: 0 UID: 0 PID: 8107 Comm: syz.1.7966 Not tainted syzkaller #0 PREEMPT(full) [ 1380.593983][ T8107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1380.593994][ T8107] Call Trace: [ 1380.594001][ T8107] [ 1380.594012][ T8107] dump_stack_lvl+0xe8/0x150 [ 1380.594045][ T8107] should_fail_ex+0x3eb/0x540 [ 1380.594070][ T8107] _copy_to_user+0x31/0xb0 [ 1380.594096][ T8107] bpf_verifier_vlog+0x3a2/0x900 [ 1380.594128][ T8107] verbose+0x11d/0x1a0 [ 1380.594151][ T8107] ? rcu_is_watching+0x16/0xb0 [ 1380.594181][ T8107] ? __pfx_verbose+0x10/0x10 [ 1380.594202][ T8107] ? sort_subprogs_topo+0xf4/0x1130 [ 1380.594224][ T8107] ? __kvmalloc_node_noprof+0x340/0x820 [ 1380.594248][ T8107] ? sort_subprogs_topo+0xf4/0x1130 [ 1380.594276][ T8107] sort_subprogs_topo+0xfbf/0x1130 [ 1380.594318][ T8107] bpf_check+0x2c4c/0x34e0 [ 1380.594346][ T8107] ? ktime_get_with_offset+0x93/0x2d0 [ 1380.594369][ T8107] ? ktime_get_with_offset+0x93/0x2d0 [ 1380.594394][ T8107] ? __pfx_bpf_check+0x10/0x10 [ 1380.594416][ T8107] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1380.594450][ T8107] bpf_prog_load+0x14da/0x1c60 [ 1380.594480][ T8107] ? __pfx_bpf_prog_load+0x10/0x10 [ 1380.594514][ T8107] ? __might_fault+0xaf/0x130 [ 1380.594539][ T8107] __sys_bpf+0xd86/0xe00 [ 1380.594565][ T8107] ? __pfx___sys_bpf+0x10/0x10 [ 1380.594594][ T8107] ? __fget_files+0x2a/0x420 [ 1380.594634][ T8107] ? ksys_write+0x242/0x270 [ 1380.594660][ T8107] ? __pfx_ksys_write+0x10/0x10 [ 1380.594689][ T8107] __x64_sys_bpf+0xba/0xd0 [ 1380.594719][ T8107] do_syscall_64+0x166/0x520 [ 1380.594741][ T8107] ? trace_irq_disable+0x3b/0x140 [ 1380.594763][ T8107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.594782][ T8107] ? clear_bhb_loop+0x70/0xc0 [ 1380.594803][ T8107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.594819][ T8107] RIP: 0033:0x7f382699fb19 [ 1380.594837][ T8107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1380.594850][ T8107] RSP: 002b:00007f3824bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1380.594868][ T8107] RAX: ffffffffffffffda RBX: 00007f3826c25fa0 RCX: 00007f382699fb19 [ 1380.594881][ T8107] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1380.594893][ T8107] RBP: 00007f3824bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1380.594904][ T8107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1380.594915][ T8107] R13: 00007f3826c26038 R14: 00007f3826c25fa0 R15: 00007fffc176aa78 [ 1380.594946][ T8107] [ 1380.659838][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7964'. [ 1380.816955][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7969'. [ 1380.854922][ T9285] bond0: (slave veth0_to_bond): interface is now down [ 1381.808814][ T8154] __nla_validate_parse: 4 callbacks suppressed [ 1381.808834][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7975'. [ 1382.931823][ T8159] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1383.255723][ T8176] FAULT_INJECTION: forcing a failure. [ 1383.255723][ T8176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1383.257015][ T8176] CPU: 1 UID: 0 PID: 8176 Comm: syz.5.7980 Not tainted syzkaller #0 PREEMPT(full) [ 1383.257038][ T8176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1383.257047][ T8176] Call Trace: [ 1383.257055][ T8176] [ 1383.257063][ T8176] dump_stack_lvl+0xe8/0x150 [ 1383.257095][ T8176] should_fail_ex+0x3eb/0x540 [ 1383.257121][ T8176] _copy_to_user+0x31/0xb0 [ 1383.257145][ T8176] bpf_verifier_vlog+0x3a2/0x900 [ 1383.257175][ T8176] verbose+0x11d/0x1a0 [ 1383.257199][ T8176] ? rcu_is_watching+0x16/0xb0 [ 1383.257228][ T8176] ? __pfx_verbose+0x10/0x10 [ 1383.257249][ T8176] ? sort_subprogs_topo+0xf4/0x1130 [ 1383.257272][ T8176] ? __kvmalloc_node_noprof+0x340/0x820 [ 1383.257297][ T8176] ? sort_subprogs_topo+0xf4/0x1130 [ 1383.257323][ T8176] sort_subprogs_topo+0xfbf/0x1130 [ 1383.257366][ T8176] bpf_check+0x2c4c/0x34e0 [ 1383.257397][ T8176] ? ktime_get_with_offset+0x93/0x2d0 [ 1383.257421][ T8176] ? ktime_get_with_offset+0x93/0x2d0 [ 1383.257444][ T8176] ? __pfx_bpf_check+0x10/0x10 [ 1383.257466][ T8176] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1383.257493][ T8176] bpf_prog_load+0x14da/0x1c60 [ 1383.257523][ T8176] ? __pfx_bpf_prog_load+0x10/0x10 [ 1383.257557][ T8176] ? __might_fault+0xaf/0x130 [ 1383.257584][ T8176] __sys_bpf+0xd86/0xe00 [ 1383.257611][ T8176] ? __pfx___sys_bpf+0x10/0x10 [ 1383.257642][ T8176] ? __fget_files+0x2a/0x420 [ 1383.257684][ T8176] ? ksys_write+0x242/0x270 [ 1383.257712][ T8176] ? __pfx_ksys_write+0x10/0x10 [ 1383.257742][ T8176] __x64_sys_bpf+0xba/0xd0 [ 1383.257780][ T8176] do_syscall_64+0x166/0x520 [ 1383.257802][ T8176] ? trace_irq_disable+0x3b/0x140 [ 1383.257826][ T8176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.257845][ T8176] ? clear_bhb_loop+0x70/0xc0 [ 1383.257871][ T8176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.257888][ T8176] RIP: 0033:0x7fc50dd9fb19 [ 1383.257907][ T8176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1383.257922][ T8176] RSP: 002b:00007fc50ebf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1383.257941][ T8176] RAX: ffffffffffffffda RBX: 00007fc50e025fa0 RCX: 00007fc50dd9fb19 [ 1383.257953][ T8176] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1383.257965][ T8176] RBP: 00007fc50ebf5090 R08: 0000000000000000 R09: 0000000000000000 [ 1383.257977][ T8176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1383.257988][ T8176] R13: 00007fc50e026038 R14: 00007fc50e025fa0 R15: 00007ffd6d381248 [ 1383.258020][ T8176] [ 1383.389930][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7982'. [ 1383.410679][ T9285] bond0: (slave veth0_to_bond): interface is now down [ 1383.596631][ T8180] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7981'. [ 1383.722486][ T8180] syzkaller1: entered promiscuous mode [ 1383.722507][ T8180] syzkaller1: entered allmulticast mode [ 1383.946028][T17531] block nbd8: Receive control failed (result -32) [ 1384.198427][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7991'. [ 1384.412736][ T8215] netlink: 'syz.0.7995': attribute type 2 has an invalid length. [ 1384.555749][ T8223] ip_tables: iptables: counters copy to user failed while replacing table [ 1384.665722][ T8225] netlink: 'syz.3.7996': attribute type 1 has an invalid length. [ 1384.665743][ T8225] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7996'. [ 1384.941887][ T8232] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7998'. [ 1384.984438][ T8232] syzkaller1: entered promiscuous mode [ 1384.984462][ T8232] syzkaller1: entered allmulticast mode [ 1385.569368][ T8243] netlink: 3136 bytes leftover after parsing attributes in process `syz.1.8001'. [ 1385.971364][T25370] bond0: (slave veth0_to_bond): interface is now down [ 1385.971717][T25370] bond0: now running without any active interface! [ 1385.988233][ T8251] x_tables: duplicate underflow at hook 2 [ 1387.116420][ T8301] bond10: option arp_interval: invalid value (18446744073709551615) [ 1387.116444][ T8301] bond10: option arp_interval: allowed values 0 - 2147483647 [ 1387.119309][ T8301] bond10 (unregistering): Released all slaves [ 1387.219006][ T8311] netlink: 266 bytes leftover after parsing attributes in process `syz.3.8024'. [ 1387.428285][ T8320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8027'. [ 1387.489298][ T8319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8026'. [ 1387.574190][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8026'. [ 1387.657300][ T8329] xt_TCPMSS: Only works on TCP SYN packets [ 1387.670643][ T8329] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8029'. [ 1387.760872][ T8331] ip6gretap1: entered allmulticast mode [ 1388.157816][ T8352] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8034'. [ 1388.210963][ T8360] netlink: 'syz.5.8034': attribute type 1 has an invalid length. [ 1388.873482][ T8352] veth11: entered allmulticast mode [ 1388.895965][ T8352] bond10: (slave veth11): Enslaving as an active interface with a down link [ 1388.917608][ T8356] bond0: (slave veth0_to_bond): Releasing backup interface [ 1388.940029][ T8356] bond10: (slave veth0_to_bond): making interface the new active one [ 1388.949701][ T8356] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1389.049748][ T8377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1389.173681][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8041'. [ 1389.473975][ T8393] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8043'. [ 1389.474003][ T8393] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8043'. [ 1389.678463][ T8400] mac80211_hwsim hwsim76 wlan1: Caught tx_queue_len zero misconfig [ 1390.136846][ T8412] bridge8: entered promiscuous mode [ 1390.136870][ T8412] bridge8: entered allmulticast mode [ 1390.155809][ T8412] team0: Port device bridge8 added [ 1390.178895][ T8412] bridge0: port 1(team0) entered blocking state [ 1390.179101][ T8412] bridge0: port 1(team0) entered disabled state [ 1390.179235][ T8412] team0: entered allmulticast mode [ 1390.210158][ T8412] team0: entered promiscuous mode [ 1390.213490][ T8412] bridge0: port 1(team0) entered blocking state [ 1390.213575][ T8412] bridge0: port 1(team0) entered listening state [ 1390.318850][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8049'. [ 1390.355307][ T8421] vlan2: entered allmulticast mode [ 1390.355330][ T8421] dummy0: entered allmulticast mode [ 1391.048693][ T8453] nbd: socks must be embedded in a SOCK_ITEM attr [ 1391.082661][ T8453] block nbd9: shutting down sockets [ 1391.161635][ T8455] sch_fq: defrate 4 ignored. [ 1391.953617][ T8494] x_tables: duplicate entry at hook 1 [ 1391.953694][ T8494] x_tables: duplicate entry at hook 1 [ 1391.953766][ T8494] x_tables: duplicate entry at hook 1 [ 1391.953829][ T8494] x_tables: duplicate entry at hook 1 [ 1391.953898][ T8494] x_tables: duplicate entry at hook 1 [ 1391.953961][ T8494] x_tables: duplicate entry at hook 1 [ 1391.954024][ T8494] x_tables: duplicate entry at hook 1 [ 1391.954087][ T8494] x_tables: duplicate entry at hook 1 [ 1391.954156][ T8494] x_tables: duplicate entry at hook 1 [ 1391.954219][ T8494] x_tables: duplicate entry at hook 1 [ 1392.143528][ T8494] netlink: 'syz.3.8070': attribute type 1 has an invalid length. [ 1392.424373][ T8520] __nla_validate_parse: 7 callbacks suppressed [ 1392.424392][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8075'. [ 1392.424467][ T8520] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8075'. [ 1392.757018][ T8532] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8081'. [ 1393.075199][ T8550] ip6erspan0: entered allmulticast mode [ 1393.100722][ T8555] Bluetooth: MGMT ver 1.23 [ 1393.299069][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8088'. [ 1393.299154][ T8561] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8088'. [ 1393.587103][ T8575] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1393.921443][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8095'. [ 1394.309884][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8100'. [ 1394.309969][ T8606] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8100'. [ 1394.433940][ T8612] block nbd9: server does not support multiple connections per device. [ 1394.439562][ T8612] block nbd9: shutting down sockets [ 1394.493617][ T8614] netlink: 'syz.5.8103': attribute type 1 has an invalid length. [ 1394.691187][ T8626] netlink: 340 bytes leftover after parsing attributes in process `syz.1.8104'. [ 1394.691306][ T8626] netlink: 'syz.1.8104': attribute type 2 has an invalid length. [ 1394.699264][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8102'. [ 1395.364531][ T8647] netlink: 'syz.5.8111': attribute type 1 has an invalid length. [ 1395.610915][ T8656] tc_dump_action: action bad kind [ 1395.818219][ T8672] tipc: Disabling bearer [ 1395.839950][ T8671] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1396.086467][ T8685] netlink: 'syz.5.8123': attribute type 30 has an invalid length. [ 1396.122013][ T8685] vxlan1: entered promiscuous mode [ 1396.122035][ T8685] vxlan1: entered allmulticast mode [ 1396.145969][ T8690] netlink: 'syz.5.8123': attribute type 30 has an invalid length. [ 1396.186245][ T8690] vxlan1: entered promiscuous mode [ 1396.186267][ T8690] vxlan1: entered allmulticast mode [ 1396.216647][ T8688] xfrm0: entered allmulticast mode [ 1396.226275][ T8688] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1396.278657][ T8693] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 1396.292351][ T8693] 1ªX¹¦Dö»: entered allmulticast mode [ 1396.311827][ T8693] : entered promiscuous mode [ 1396.724889][ T8719] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1396.937031][ T8723] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1397.178937][ T8758] netlink: 'syz.3.8143': attribute type 1 has an invalid length. [ 1397.216491][ T8757] netlink: 'syz.4.8144': attribute type 21 has an invalid length. [ 1397.238136][ T8758] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1397.262779][ T8757] netlink: 'syz.4.8144': attribute type 4 has an invalid length. [ 1397.262801][ T8757] netlink: 'syz.4.8144': attribute type 5 has an invalid length. [ 1397.327127][ T8764] bond8: (slave veth0_to_bond): making interface the new active one [ 1397.338692][ T8764] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1397.370475][ T8758] bond8: entered promiscuous mode [ 1397.370499][ T8758] veth0_to_bond: entered promiscuous mode [ 1397.370716][ T8758] bond8: entered allmulticast mode [ 1397.370730][ T8758] veth0_to_bond: entered allmulticast mode [ 1397.436450][ T8758] macvlan3: entered promiscuous mode [ 1397.436473][ T8758] macvlan3: entered allmulticast mode [ 1397.440033][ T8758] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1397.451881][ T8758] bond8: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 1397.522464][ T8759] __nla_validate_parse: 15 callbacks suppressed [ 1397.522484][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8142'. [ 1397.524407][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8142'. [ 1397.611202][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8142'. [ 1397.616685][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8142'. [ 1397.639370][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8142'. [ 1397.661215][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8142'. [ 1397.689624][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8142'. [ 1397.712873][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8142'. [ 1397.735809][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8142'. [ 1397.762550][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8142'. [ 1397.968986][ T8786] netlink: 'syz.3.8150': attribute type 18 has an invalid length. [ 1398.256167][ T8809] netlink: 'syz.0.8158': attribute type 4 has an invalid length. [ 1398.469877][ T8824] siw: device registration error -23 [ 1400.024435][ T8873] netlink: 'syz.1.8174': attribute type 4 has an invalid length. [ 1400.049607][ T8873] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1400.171018][ T8890] FAULT_INJECTION: forcing a failure. [ 1400.171018][ T8890] name failslab, interval 1, probability 0, space 0, times 0 [ 1400.171047][ T8890] CPU: 0 UID: 0 PID: 8890 Comm: syz.5.8177 Not tainted syzkaller #0 PREEMPT(full) [ 1400.171066][ T8890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1400.171078][ T8890] Call Trace: [ 1400.171085][ T8890] [ 1400.171093][ T8890] dump_stack_lvl+0xe8/0x150 [ 1400.171125][ T8890] should_fail_ex+0x3eb/0x540 [ 1400.171150][ T8890] should_failslab+0xa8/0x100 [ 1400.171169][ T8890] __kvmalloc_node_noprof+0x171/0x820 [ 1400.171196][ T8890] ? bpf_compute_idoms+0xb6a/0x1940 [ 1400.171215][ T8890] ? bpf_compute_idoms+0xb6a/0x1940 [ 1400.171239][ T8890] bpf_compute_idoms+0xb6a/0x1940 [ 1400.171269][ T8890] ? prepare_subprog_args+0x412/0x450 [ 1400.171298][ T8890] bpf_check+0x2cc3/0x34e0 [ 1400.171327][ T8890] ? ktime_get_with_offset+0x93/0x2d0 [ 1400.171349][ T8890] ? ktime_get_with_offset+0x93/0x2d0 [ 1400.171372][ T8890] ? __pfx_bpf_check+0x10/0x10 [ 1400.171390][ T8890] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1400.171412][ T8890] bpf_prog_load+0x14da/0x1c60 [ 1400.171438][ T8890] ? __pfx_bpf_prog_load+0x10/0x10 [ 1400.171471][ T8890] ? __might_fault+0xaf/0x130 [ 1400.171496][ T8890] __sys_bpf+0xd86/0xe00 [ 1400.171523][ T8890] ? __pfx___sys_bpf+0x10/0x10 [ 1400.171550][ T8890] ? __fget_files+0x2a/0x420 [ 1400.171585][ T8890] ? ksys_write+0x242/0x270 [ 1400.171609][ T8890] ? __pfx_ksys_write+0x10/0x10 [ 1400.171638][ T8890] __x64_sys_bpf+0xba/0xd0 [ 1400.171673][ T8890] do_syscall_64+0x166/0x520 [ 1400.171694][ T8890] ? trace_irq_disable+0x3b/0x140 [ 1400.171714][ T8890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.171731][ T8890] ? clear_bhb_loop+0x70/0xc0 [ 1400.171753][ T8890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.171771][ T8890] RIP: 0033:0x7fc50dd9fb19 [ 1400.171788][ T8890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1400.171803][ T8890] RSP: 002b:00007fc50ebf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1400.171823][ T8890] RAX: ffffffffffffffda RBX: 00007fc50e025fa0 RCX: 00007fc50dd9fb19 [ 1400.171836][ T8890] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1400.171847][ T8890] RBP: 00007fc50ebf5090 R08: 0000000000000000 R09: 0000000000000000 [ 1400.171858][ T8890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1400.171869][ T8890] R13: 00007fc50e026038 R14: 00007fc50e025fa0 R15: 00007ffd6d381248 [ 1400.171906][ T8890] [ 1400.616489][ T8898] netlink: 'syz.5.8180': attribute type 1 has an invalid length. [ 1401.019257][ T8940] syzkaller1: entered promiscuous mode [ 1401.019279][ T8940] syzkaller1: entered allmulticast mode [ 1401.081516][ T8935] rxe_eth0 speed is unknown, defaulting to 1000 [ 1401.231698][ T8949] ip6t_ah: unknown flags 4 [ 1401.348303][ T8932] syzkaller0: entered promiscuous mode [ 1401.348325][ T8932] syzkaller0: entered allmulticast mode [ 1401.727408][ T8970] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1401.865723][ T8979] syz_tun: entered promiscuous mode [ 1401.870120][ T8979] macvtap3: entered allmulticast mode [ 1401.870140][ T8979] syz_tun: entered allmulticast mode [ 1401.888476][ T8979] syz_tun: left allmulticast mode [ 1401.888503][ T8979] syz_tun: left promiscuous mode [ 1402.185900][ T8997] syzkaller1: entered promiscuous mode [ 1402.185937][ T8997] syzkaller1: entered allmulticast mode [ 1402.284434][ T8997] xt_check_table_hooks: 23 callbacks suppressed [ 1402.284454][ T8997] x_tables: duplicate entry at hook 3 [ 1402.711822][ T9017] veth1_macvtap: left promiscuous mode [ 1402.975702][ T9032] tipc: Enabling of bearer rejected, failed to enable media [ 1403.083516][ T9038] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1403.563311][ T9056] __nla_validate_parse: 47 callbacks suppressed [ 1403.563342][ T9056] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8212'. [ 1403.784248][ T9068] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8216'. [ 1403.784446][ T9068] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8216'. [ 1403.784618][ T9068] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8216'. [ 1403.784787][ T9068] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8216'. [ 1403.787382][ T9068] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8216'. [ 1403.787556][ T9068] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8216'. [ 1403.787728][ T9068] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8216'. [ 1403.787910][ T9068] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8216'. [ 1403.788076][ T9068] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8216'. [ 1403.853651][ T9074] netlink: 'syz.4.8220': attribute type 11 has an invalid length. [ 1404.102743][T17531] block nbd9: Receive control failed (result -32) [ 1404.104182][ T9086] syzkaller0: entered promiscuous mode [ 1404.104199][ T9086] syzkaller0: entered allmulticast mode [ 1404.658221][ T9123] ip_tables: iptables: counters copy to user failed while replacing table [ 1404.754456][ T9127] RDS: rds_bind could not find a transport for 0:0:5d00::, load rds_tcp or rds_rdma? [ 1405.094201][ T9136] ip6tnl0: Caught tx_queue_len zero misconfig [ 1405.332436][ C1] bridge0: port 1(team0) entered learning state [ 1405.448703][ T9151] syzkaller1: left promiscuous mode [ 1405.448727][ T9151] syzkaller1: left allmulticast mode [ 1405.571410][ T9162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1405.571426][ T9162] IPv6: NLM_F_CREATE should be set when creating new route [ 1405.571454][ T9162] IPv6: NLM_F_CREATE should be set when creating new route [ 1405.572134][ T9162] netlink: 'syz.1.8235': attribute type 9 has an invalid length. [ 1405.765395][ T9134] openvswitch: netlink: IP tunnel dst address not specified [ 1420.691005][ C1] bridge0: port 1(team0) entered forwarding state [ 1420.691030][ C1] bridge0: topology change detected, propagating [ 1448.851016][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1449.197944][ T9225] __nla_validate_parse: 62 callbacks suppressed [ 1449.197964][ T9225] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.8241'. [ 1449.331580][ T9227] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 1449.331599][ T9227] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1449.510098][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8243'. [ 1449.637450][ T9240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1449.697884][ T9240] bridge_slave_0: entered promiscuous mode [ 1449.764574][ T9240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1449.764599][ T9240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1449.767923][ T9240] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1449.895176][ T9251] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8248'. [ 1449.895202][ T9251] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8248'. [ 1450.229612][ T9264] openvswitch: netlink: ct_state flags ffffffff unsupported [ 1450.233031][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8252'. [ 1451.104388][ T9289] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1451.135965][ T9284] macsec1: entered promiscuous mode [ 1451.136000][ T9284] bridge0: entered promiscuous mode [ 1451.136173][ T9284] macsec1: entered allmulticast mode [ 1451.137747][ T9284] bridge0: port 2(macsec1) entered blocking state [ 1451.137931][ T9284] bridge0: port 2(macsec1) entered disabled state [ 1451.197013][ T5738] bridge0: left promiscuous mode [ 1451.518009][ T9305] syzkaller0: entered promiscuous mode [ 1451.518031][ T9305] syzkaller0: entered allmulticast mode [ 1451.658669][T14981] IPVS: starting estimator thread 0... [ 1451.753779][ T9319] IPVS: using max 32 ests per chain, 76800 per kthread [ 1451.968830][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8269'. [ 1451.998503][ T9341] vlan2: entered promiscuous mode [ 1451.998525][ T9341] bridge0: entered promiscuous mode [ 1452.058284][ T9347] netlink: 'syz.4.8270': attribute type 1 has an invalid length. [ 1452.523167][ T9374] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8276'. [ 1452.774384][ T9385] veth0: entered promiscuous mode [ 1452.811669][ T9383] veth0: left promiscuous mode [ 1452.922834][ T9397] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8285'. [ 1452.922862][ T9397] openvswitch: netlink: Flow actions attr not present in new flow. [ 1453.278335][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8287'. [ 1453.279527][ T9402] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8287'. [ 1453.346205][ T9404] ip_tables: iptables: counters copy to user failed while replacing table [ 1453.758024][ T9424] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1453.778245][ T9424] netlink: 'syz.1.8292': attribute type 3 has an invalid length. [ 1453.804014][ T9426] netlink: 'syz.3.8294': attribute type 8 has an invalid length. [ 1453.968391][ T9434] syzkaller0: entered promiscuous mode [ 1453.968414][ T9434] syzkaller0: entered allmulticast mode [ 1454.004600][ T9446] xt_cgroup: invalid path, errno=-2 [ 1454.201848][ T9463] ip_tables: iptables: counters copy to user failed while replacing table [ 1454.303958][ T9466] __nla_validate_parse: 1 callbacks suppressed [ 1454.303977][ T9466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8304'. [ 1454.357202][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8304'. [ 1454.585800][ T9484] netlink: 'syz.4.8309': attribute type 5 has an invalid length. [ 1454.674804][ T9494] sctp: [Deprecated]: syz.3.8312 (pid 9494) Use of int in max_burst socket option deprecated. [ 1454.674804][ T9494] Use struct sctp_assoc_value instead [ 1454.708846][ T9491] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1454.708880][ T9491] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.844971][ T9491] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1454.845004][ T9491] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.968717][ T9491] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1454.968751][ T9491] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.088226][ T9491] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1455.088260][ T9491] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.168902][ T9520] tipc: Enabling of bearer rejected, failed to enable media [ 1455.515204][T14981] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1455.515235][T14981] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.537847][ T9540] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8326'. [ 1455.581069][T14981] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1455.581102][T14981] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.652382][T31928] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1455.652414][T31928] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.653115][T31928] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1455.653153][T31928] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.752310][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8328'. [ 1455.817154][ T9553] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8329'. [ 1456.444591][ T9560] FAULT_INJECTION: forcing a failure. [ 1456.444591][ T9560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1456.444618][ T9560] CPU: 1 UID: 0 PID: 9560 Comm: syz.5.8330 Not tainted syzkaller #0 PREEMPT(full) [ 1456.444640][ T9560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1456.444650][ T9560] Call Trace: [ 1456.444657][ T9560] [ 1456.444665][ T9560] dump_stack_lvl+0xe8/0x150 [ 1456.444699][ T9560] should_fail_ex+0x3eb/0x540 [ 1456.444724][ T9560] _copy_to_user+0x31/0xb0 [ 1456.444749][ T9560] bpf_verifier_vlog+0x3a2/0x900 [ 1456.444780][ T9560] verbose+0x11d/0x1a0 [ 1456.444810][ T9560] ? __pfx_verbose+0x10/0x10 [ 1456.444838][ T9560] ? lock_acquire+0x115/0x350 [ 1456.444868][ T9560] print_bpf_insn+0x197b/0x2a90 [ 1456.444893][ T9560] ? __pfx_verbose+0x10/0x10 [ 1456.444915][ T9560] ? __might_fault+0xaf/0x130 [ 1456.444935][ T9560] ? __pfx_print_bpf_insn+0x10/0x10 [ 1456.444954][ T9560] ? _copy_to_user+0x8a/0xb0 [ 1456.444978][ T9560] ? bpf_verifier_vlog+0x55a/0x900 [ 1456.445010][ T9560] ? bpf_verifier_log_write+0x11d/0x1a0 [ 1456.445034][ T9560] bpf_verbose_insn+0xcb/0x130 [ 1456.445068][ T9560] ? __pfx_bpf_verbose_insn+0x10/0x10 [ 1456.445092][ T9560] ? __pfx_verbose+0x10/0x10 [ 1456.445113][ T9560] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 1456.445138][ T9560] ? record_arg_access+0x14f/0xa80 [ 1456.445172][ T9560] analyze_subprog+0x6cce/0xb150 [ 1456.445251][ T9560] ? __pfx_analyze_subprog+0x10/0x10 [ 1456.445274][ T9560] ? kasan_save_track+0x4f/0x80 [ 1456.445297][ T9560] ? kasan_save_track+0x3e/0x80 [ 1456.445319][ T9560] ? __kasan_kmalloc+0x93/0xb0 [ 1456.445341][ T9560] ? __kvmalloc_node_noprof+0x50a/0x820 [ 1456.445364][ T9560] ? call_instance+0x263/0x560 [ 1456.445385][ T9560] ? bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 1456.445408][ T9560] ? bpf_compute_live_registers+0x10b0/0x1df0 [ 1456.445429][ T9560] ? bpf_check+0x2d0b/0x34e0 [ 1456.445446][ T9560] ? bpf_prog_load+0x14da/0x1c60 [ 1456.445462][ T9560] ? __sys_bpf+0xd86/0xe00 [ 1456.445477][ T9560] ? __x64_sys_bpf+0xba/0xd0 [ 1456.445500][ T9560] ? mas_prev_node+0xb10/0xe80 [ 1456.445518][ T9560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.445576][ T9560] ? call_instance+0x263/0x560 [ 1456.445597][ T9560] ? rcu_is_watching+0x16/0xb0 [ 1456.445623][ T9560] ? call_instance+0x263/0x560 [ 1456.445644][ T9560] ? trace_kmalloc+0x2a/0xf0 [ 1456.445668][ T9560] ? call_instance+0x263/0x560 [ 1456.445689][ T9560] ? __kvmalloc_node_noprof+0x52a/0x820 [ 1456.445715][ T9560] ? __kvmalloc_node_noprof+0x340/0x820 [ 1456.445738][ T9560] ? call_instance+0x263/0x560 [ 1456.445758][ T9560] ? call_instance+0x263/0x560 [ 1456.445799][ T9560] bpf_compute_subprog_arg_access+0x2f1/0x15c0 [ 1456.445846][ T9560] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1456.445876][ T9560] ? __kvmalloc_node_noprof+0x340/0x820 [ 1456.445899][ T9560] ? bpf_compute_live_registers+0x142/0x1df0 [ 1456.445922][ T9560] ? bpf_compute_live_registers+0x142/0x1df0 [ 1456.445953][ T9560] bpf_compute_live_registers+0x10b0/0x1df0 [ 1456.446000][ T9560] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1456.446035][ T9560] bpf_check+0x2d0b/0x34e0 [ 1456.446077][ T9560] ? ktime_get_with_offset+0x93/0x2d0 [ 1456.446101][ T9560] ? ktime_get_with_offset+0x93/0x2d0 [ 1456.446126][ T9560] ? __pfx_bpf_check+0x10/0x10 [ 1456.446149][ T9560] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1456.446176][ T9560] bpf_prog_load+0x14da/0x1c60 [ 1456.446207][ T9560] ? __pfx_bpf_prog_load+0x10/0x10 [ 1456.446242][ T9560] ? __might_fault+0xaf/0x130 [ 1456.446268][ T9560] __sys_bpf+0xd86/0xe00 [ 1456.446296][ T9560] ? __pfx___sys_bpf+0x10/0x10 [ 1456.446325][ T9560] ? __fget_files+0x2a/0x420 [ 1456.446366][ T9560] ? ksys_write+0x242/0x270 [ 1456.446394][ T9560] ? __pfx_ksys_write+0x10/0x10 [ 1456.446423][ T9560] __x64_sys_bpf+0xba/0xd0 [ 1456.446452][ T9560] do_syscall_64+0x166/0x520 [ 1456.446474][ T9560] ? trace_irq_disable+0x3b/0x140 [ 1456.446497][ T9560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.446515][ T9560] ? clear_bhb_loop+0x70/0xc0 [ 1456.446537][ T9560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.446555][ T9560] RIP: 0033:0x7fc50dd9fb19 [ 1456.446572][ T9560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1456.446587][ T9560] RSP: 002b:00007fc50ebf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1456.446607][ T9560] RAX: ffffffffffffffda RBX: 00007fc50e025fa0 RCX: 00007fc50dd9fb19 [ 1456.446620][ T9560] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1456.446632][ T9560] RBP: 00007fc50ebf5090 R08: 0000000000000000 R09: 0000000000000000 [ 1456.446643][ T9560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1456.446654][ T9560] R13: 00007fc50e026038 R14: 00007fc50e025fa0 R15: 00007ffd6d381248 [ 1456.446686][ T9560] [ 1456.510748][ T9562] netlink: 276 bytes leftover after parsing attributes in process `syz.5.8331'. [ 1456.728947][ T9490] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1456.728987][ T9490] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.911915][ T9565] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8332'. [ 1457.068693][ T9571] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8335'. [ 1457.082006][ T9571] Cannot find del_set index 17 as target [ 1458.136696][ T9490] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1458.136729][ T9490] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.141778][ T9580] No such timeout policy "syz0" [ 1458.227302][ T9583] [ 1458.229680][ T9583] ====================================================== [ 1458.236693][ T9583] WARNING: possible circular locking dependency detected [ 1458.243724][ T9583] syzkaller #0 Not tainted [ 1458.248143][ T9583] ------------------------------------------------------ [ 1458.251625][ T9490] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1458.251654][ T9490] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.274528][ T9583] syz.3.8340/9583 is trying to acquire lock: [ 1458.280494][ T9583] ffff88802c916018 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x2f0 [ 1458.289376][ T9583] [ 1458.289376][ T9583] but task is already holding lock: [ 1458.296722][ T9583] ffff888027be2ac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1458.306146][ T9583] [ 1458.306146][ T9583] which lock already depends on the new lock. [ 1458.306146][ T9583] [ 1458.316531][ T9583] [ 1458.316531][ T9583] the existing dependency chain (in reverse order) is: [ 1458.325531][ T9583] [ 1458.325531][ T9583] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 1458.333335][ T9583] __mutex_lock+0x197/0x15a0 [ 1458.338445][ T9583] elevator_change+0x1af/0x480 [ 1458.343720][ T9583] elevator_set_none+0xb5/0x140 [ 1458.349082][ T9583] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 1458.355483][ T9583] nbd_start_device+0x189/0xb30 [ 1458.360897][ T9583] nbd_genl_connect+0x167d/0x1cd0 [ 1458.366426][ T9583] genl_family_rcv_msg_doit+0x233/0x340 [ 1458.372490][ T9583] genl_rcv_msg+0x614/0x7a0 [ 1458.377502][ T9583] netlink_rcv_skb+0x226/0x4a0 [ 1458.382777][ T9583] genl_rcv+0x28/0x40 [ 1458.387267][ T9583] netlink_unicast+0x8ef/0xa80 [ 1458.392538][ T9583] netlink_sendmsg+0x7f0/0xb20 [ 1458.397803][ T9583] sock_sendmsg_nosec+0x14e/0x190 [ 1458.403338][ T9583] ____sys_sendmsg+0x54e/0x850 [ 1458.408608][ T9583] ___sys_sendmsg+0x2a5/0x360 [ 1458.413793][ T9583] __x64_sys_sendmsg+0x1b1/0x290 [ 1458.419236][ T9583] do_syscall_64+0x166/0x520 [ 1458.424334][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.430731][ T9583] [ 1458.430731][ T9583] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1458.439322][ T9583] blk_alloc_queue+0x544/0x690 [ 1458.444677][ T9583] __blk_mq_alloc_disk+0x194/0x390 [ 1458.450299][ T9583] nbd_dev_add+0x494/0xb60 [ 1458.455220][ T9583] nbd_init+0x168/0x1f0 [ 1458.459980][ T9583] do_one_initcall+0x250/0x870 [ 1458.465257][ T9583] do_initcall_level+0x10a/0x1a0 [ 1458.470797][ T9583] do_initcalls+0x59/0xa0 [ 1458.475633][ T9583] kernel_init_freeable+0x29d/0x3e0 [ 1458.481335][ T9583] kernel_init+0x22/0x1d0 [ 1458.486169][ T9583] ret_from_fork+0x514/0xb70 [ 1458.491294][ T9583] ret_from_fork_asm+0x1a/0x30 [ 1458.496564][ T9583] [ 1458.496564][ T9583] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 1458.503756][ T9583] fs_reclaim_acquire+0x71/0x100 [ 1458.509207][ T9583] kmem_cache_alloc_node_noprof+0x5f/0x600 [ 1458.515534][ T9583] __alloc_skb+0x1db/0x7a0 [ 1458.520458][ T9583] __ip6_append_data+0x2eb8/0x4080 [ 1458.526224][ T9583] ip6_append_data+0x108/0x270 [ 1458.531502][ T9583] rawv6_sendmsg+0x1298/0x18c0 [ 1458.536816][ T9583] sock_sendmsg_nosec+0x10f/0x190 [ 1458.542351][ T9583] ____sys_sendmsg+0x54e/0x850 [ 1458.547621][ T9583] ___sys_sendmsg+0x2a5/0x360 [ 1458.552802][ T9583] __x64_sys_sendmsg+0x1b1/0x290 [ 1458.558244][ T9583] do_syscall_64+0x166/0x520 [ 1458.563340][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.569757][ T9583] [ 1458.569757][ T9583] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1458.577471][ T9583] lock_sock_nested+0x41/0x100 [ 1458.582748][ T9583] inet_shutdown+0x6a/0x390 [ 1458.587872][ T9583] nbd_mark_nsock_dead+0x2cb/0x550 [ 1458.593489][ T9583] sock_shutdown+0x15e/0x260 [ 1458.598581][ T9583] nbd_clear_sock+0x24/0x170 [ 1458.603673][ T9583] nbd_config_put+0x477/0x7e0 [ 1458.608853][ T9583] nbd_genl_connect+0x19b8/0x1cd0 [ 1458.614382][ T9583] genl_family_rcv_msg_doit+0x233/0x340 [ 1458.620444][ T9583] genl_rcv_msg+0x614/0x7a0 [ 1458.625454][ T9583] netlink_rcv_skb+0x226/0x4a0 [ 1458.630898][ T9583] genl_rcv+0x28/0x40 [ 1458.635383][ T9583] netlink_unicast+0x8ef/0xa80 [ 1458.640656][ T9583] netlink_sendmsg+0x7f0/0xb20 [ 1458.645925][ T9583] sock_sendmsg_nosec+0x14e/0x190 [ 1458.651461][ T9583] ____sys_sendmsg+0x54e/0x850 [ 1458.656731][ T9583] ___sys_sendmsg+0x2a5/0x360 [ 1458.661914][ T9583] __x64_sys_sendmsg+0x1b1/0x290 [ 1458.667357][ T9583] do_syscall_64+0x166/0x520 [ 1458.672454][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.678852][ T9583] [ 1458.678852][ T9583] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 1458.686479][ T9583] __mutex_lock+0x197/0x15a0 [ 1458.691579][ T9583] nbd_queue_rq+0x373/0xff0 [ 1458.696593][ T9583] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1458.702725][ T9583] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1458.709596][ T9583] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1458.716080][ T9583] blk_mq_run_work_fn+0x167/0x2f0 [ 1458.721610][ T9583] process_scheduled_works+0xc3d/0x1630 [ 1458.727686][ T9583] worker_thread+0xa47/0xfb0 [ 1458.732782][ T9583] kthread+0x38b/0x480 [ 1458.737357][ T9583] ret_from_fork+0x514/0xb70 [ 1458.742449][ T9583] ret_from_fork_asm+0x1a/0x30 [ 1458.747715][ T9583] [ 1458.747715][ T9583] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 1458.754906][ T9583] __mutex_lock+0x197/0x15a0 [ 1458.760006][ T9583] nbd_queue_rq+0xc1/0xff0 [ 1458.764932][ T9583] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1458.771011][ T9583] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1458.777842][ T9583] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1458.784322][ T9583] blk_mq_run_work_fn+0x167/0x2f0 [ 1458.789851][ T9583] process_scheduled_works+0xc3d/0x1630 [ 1458.795906][ T9583] worker_thread+0xa47/0xfb0 [ 1458.801009][ T9583] kthread+0x38b/0x480 [ 1458.805582][ T9583] ret_from_fork+0x514/0xb70 [ 1458.810680][ T9583] ret_from_fork_asm+0x1a/0x30 [ 1458.815948][ T9583] [ 1458.815948][ T9583] -> #0 (set->srcu){.+.+}-{0:0}: [ 1458.823048][ T9583] __lock_acquire+0x164c/0x2de0 [ 1458.828407][ T9583] lock_sync+0xb3/0x130 [ 1458.833066][ T9583] __synchronize_srcu+0xca/0x2f0 [ 1458.838509][ T9583] elevator_switch+0x1e8/0x7b0 [ 1458.843781][ T9583] elevator_change+0x2fa/0x480 [ 1458.849056][ T9583] elevator_set_default+0x375/0x440 [ 1458.854762][ T9583] blk_register_queue+0x404/0x4f0 [ 1458.860292][ T9583] __add_disk+0x6b8/0xdb0 [ 1458.865126][ T9583] add_disk_fwnode+0x100/0x3a0 [ 1458.870390][ T9583] nbd_dev_add+0x733/0xb60 [ 1458.875313][ T9583] nbd_genl_connect+0x96c/0x1cd0 [ 1458.880754][ T9583] genl_family_rcv_msg_doit+0x233/0x340 [ 1458.886805][ T9583] genl_rcv_msg+0x614/0x7a0 [ 1458.891810][ T9583] netlink_rcv_skb+0x226/0x4a0 [ 1458.897085][ T9583] genl_rcv+0x28/0x40 [ 1458.901572][ T9583] netlink_unicast+0x8ef/0xa80 [ 1458.906842][ T9583] netlink_sendmsg+0x7f0/0xb20 [ 1458.912105][ T9583] sock_sendmsg_nosec+0x14e/0x190 [ 1458.917636][ T9583] ____sys_sendmsg+0x54e/0x850 [ 1458.922903][ T9583] ___sys_sendmsg+0x2a5/0x360 [ 1458.928084][ T9583] __x64_sys_sendmsg+0x1b1/0x290 [ 1458.933531][ T9583] do_syscall_64+0x166/0x520 [ 1458.938632][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.945027][ T9583] [ 1458.945027][ T9583] other info that might help us debug this: [ 1458.945027][ T9583] [ 1458.955238][ T9583] Chain exists of: [ 1458.955238][ T9583] set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock [ 1458.955238][ T9583] [ 1458.968868][ T9583] Possible unsafe locking scenario: [ 1458.968868][ T9583] [ 1458.976304][ T9583] CPU0 CPU1 [ 1458.981652][ T9583] ---- ---- [ 1458.986995][ T9583] lock(&q->elevator_lock); [ 1458.991567][ T9583] lock(&q->q_usage_counter(io)#50); [ 1458.999444][ T9583] lock(&q->elevator_lock); [ 1459.006535][ T9583] sync(set->srcu); [ 1459.010415][ T9583] [ 1459.010415][ T9583] *** DEADLOCK *** [ 1459.010415][ T9583] [ 1459.018539][ T9583] locks held by syz.3.8340/9583: 6, last CPU#1: [ 1459.024756][ T9583] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1459.032924][ T9583] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1459.041872][ T9583] #2: ffff88803302f9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 1459.052209][ T9583] #3: ffff888027be2b50 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4f0 [ 1459.062022][ T9583] #4: ffff888027be25d8 (&q->q_usage_counter(queue)#60){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 1459.072921][ T9583] #5: ffff888027be2ac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1459.082768][ T9583] [ 1459.082768][ T9583] stack backtrace: [ 1459.088650][ T9583] CPU: 1 UID: 0 PID: 9583 Comm: syz.3.8340 Not tainted syzkaller #0 PREEMPT(full) [ 1459.097921][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1459.107972][ T9583] Call Trace: [ 1459.111249][ T9583] [ 1459.114168][ T9583] dump_stack_lvl+0xe8/0x150 [ 1459.118754][ T9583] print_circular_bug+0x2e2/0x300 [ 1459.123812][ T9583] check_noncircular+0x12f/0x150 [ 1459.128742][ T9583] __lock_acquire+0x164c/0x2de0 [ 1459.133582][ T9583] ? lockdep_unlock+0x5c/0xd0 [ 1459.138243][ T9583] ? __lock_acquire+0x1511/0x2de0 [ 1459.143257][ T9583] lock_sync+0xb3/0x130 [ 1459.147403][ T9583] ? __synchronize_srcu+0xb6/0x2f0 [ 1459.152499][ T9583] ? __synchronize_srcu+0xb6/0x2f0 [ 1459.157597][ T9583] __synchronize_srcu+0xca/0x2f0 [ 1459.162520][ T9583] ? __pfx___synchronize_srcu+0x10/0x10 [ 1459.168055][ T9583] ? do_raw_spin_lock+0x12b/0x2f0 [ 1459.173069][ T9583] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1459.178945][ T9583] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1459.184477][ T9583] ? synchronize_srcu+0x20c/0x270 [ 1459.189489][ T9583] elevator_switch+0x1e8/0x7b0 [ 1459.194248][ T9583] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1459.199699][ T9583] elevator_change+0x2fa/0x480 [ 1459.204456][ T9583] ? do_raw_spin_unlock+0xf5/0x200 [ 1459.209552][ T9583] elevator_set_default+0x375/0x440 [ 1459.214739][ T9583] ? __pfx_elevator_set_default+0x10/0x10 [ 1459.220453][ T9583] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 1459.227535][ T9583] ? blk_crypto_sysfs_register+0x11c/0x170 [ 1459.233398][ T9583] blk_register_queue+0x404/0x4f0 [ 1459.238411][ T9583] __add_disk+0x6b8/0xdb0 [ 1459.242732][ T9583] add_disk_fwnode+0x100/0x3a0 [ 1459.247486][ T9583] nbd_dev_add+0x733/0xb60 [ 1459.251889][ T9583] ? __pfx_nbd_dev_add+0x10/0x10 [ 1459.256820][ T9583] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 1459.262611][ T9583] ? security_capable+0x7e/0x2c0 [ 1459.267539][ T9583] ? radix_tree_lookup+0x240/0x290 [ 1459.272636][ T9583] nbd_genl_connect+0x96c/0x1cd0 [ 1459.277561][ T9583] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1459.282922][ T9583] ? rcu_is_watching+0x16/0xb0 [ 1459.287675][ T9583] ? trace_kmalloc+0x2a/0xf0 [ 1459.292254][ T9583] ? __kmalloc_noprof+0x387/0x710 [ 1459.297267][ T9583] ? __nla_parse+0x40/0x60 [ 1459.301671][ T9583] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1459.307988][ T9583] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1459.314304][ T9583] genl_family_rcv_msg_doit+0x233/0x340 [ 1459.319842][ T9583] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1459.325897][ T9583] ? __lock_acquire+0x747/0x2de0 [ 1459.330824][ T9583] genl_rcv_msg+0x614/0x7a0 [ 1459.335318][ T9583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1459.340326][ T9583] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1459.345685][ T9583] netlink_rcv_skb+0x226/0x4a0 [ 1459.350436][ T9583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1459.355447][ T9583] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1459.360727][ T9583] ? down_read+0x2b9/0x320 [ 1459.365136][ T9583] genl_rcv+0x28/0x40 [ 1459.369105][ T9583] netlink_unicast+0x8ef/0xa80 [ 1459.373865][ T9583] netlink_sendmsg+0x7f0/0xb20 [ 1459.378615][ T9583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1459.383881][ T9583] ? aa_sock_msg_perm+0x144/0x210 [ 1459.388892][ T9583] ? apparmor_socket_sendmsg+0x98/0x360 [ 1459.394427][ T9583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1459.399694][ T9583] sock_sendmsg_nosec+0x14e/0x190 [ 1459.404711][ T9583] ____sys_sendmsg+0x54e/0x850 [ 1459.409463][ T9583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1459.414735][ T9583] ? import_iovec+0x73/0xa0 [ 1459.419232][ T9583] ___sys_sendmsg+0x2a5/0x360 [ 1459.423895][ T9583] ? __lock_acquire+0x747/0x2de0 [ 1459.428826][ T9583] ? __pfx____sys_sendmsg+0x10/0x10 [ 1459.434012][ T9583] ? futex_wait+0x2a2/0x390 [ 1459.438549][ T9583] ? __fget_files+0x3a2/0x420 [ 1459.443212][ T9583] ? __fget_files+0x2a/0x420 [ 1459.447790][ T9583] __x64_sys_sendmsg+0x1b1/0x290 [ 1459.452715][ T9583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1459.458167][ T9583] do_syscall_64+0x166/0x520 [ 1459.462747][ T9583] ? trace_irq_disable+0x3b/0x140 [ 1459.467766][ T9583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.473821][ T9583] ? clear_bhb_loop+0x70/0xc0 [ 1459.478483][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.484358][ T9583] RIP: 0033:0x7f2d8bf9fb19 [ 1459.488760][ T9583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1459.508350][ T9583] RSP: 002b:00007f2d8ce21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1459.516751][ T9583] RAX: ffffffffffffffda RBX: 00007f2d8c225fa0 RCX: 00007f2d8bf9fb19 [ 1459.524719][ T9583] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000005 [ 1459.532692][ T9583] RBP: 00007f2d8c037b70 R08: 0000000000000000 R09: 0000000000000000 [ 1459.540659][ T9583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1459.548617][ T9583] R13: 00007f2d8c226038 R14: 00007f2d8c225fa0 R15: 00007ffc70d8b898 [ 1459.556584][ T9583] [ 1459.586751][ T9587] FAULT_INJECTION: forcing a failure. [ 1459.586751][ T9587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1459.586778][ T9587] CPU: 0 UID: 0 PID: 9587 Comm: syz.5.8341 Not tainted syzkaller #0 PREEMPT(full) [ 1459.586799][ T9587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1459.586809][ T9587] Call Trace: [ 1459.586816][ T9587] [ 1459.586824][ T9587] dump_stack_lvl+0xe8/0x150 [ 1459.586855][ T9587] should_fail_ex+0x3eb/0x540 [ 1459.586886][ T9587] _copy_to_user+0x31/0xb0 [ 1459.586908][ T9587] bpf_verifier_vlog+0x3a2/0x900 [ 1459.586933][ T9587] bpf_verifier_log_write+0x11d/0x1a0 [ 1459.586955][ T9587] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 1459.586974][ T9587] ? record_arg_access+0x14f/0xa80 [ 1459.587001][ T9587] analyze_subprog+0x6cbe/0xb150 [ 1459.587048][ T9587] ? __pfx_analyze_subprog+0x10/0x10 [ 1459.587068][ T9587] ? kasan_save_track+0x4f/0x80 [ 1459.587090][ T9587] ? kasan_save_track+0x3e/0x80 [ 1459.587110][ T9587] ? __kasan_kmalloc+0x93/0xb0 [ 1459.587132][ T9587] ? __kvmalloc_node_noprof+0x50a/0x820 [ 1459.587153][ T9587] ? call_instance+0x263/0x560 [ 1459.587171][ T9587] ? bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 1459.587190][ T9587] ? bpf_compute_live_registers+0x10b0/0x1df0 [ 1459.587210][ T9587] ? bpf_check+0x2d0b/0x34e0 [ 1459.587226][ T9587] ? bpf_prog_load+0x14da/0x1c60 [ 1459.587242][ T9587] ? __sys_bpf+0xd86/0xe00 [ 1459.587256][ T9587] ? __x64_sys_bpf+0xba/0xd0 [ 1459.587277][ T9587] ? mas_prev_node+0xb10/0xe80 [ 1459.587294][ T9587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.587328][ T9587] ? call_instance+0x263/0x560 [ 1459.587348][ T9587] ? rcu_is_watching+0x16/0xb0 [ 1459.587371][ T9587] ? call_instance+0x263/0x560 [ 1459.587388][ T9587] ? trace_kmalloc+0x2a/0xf0 [ 1459.587409][ T9587] ? call_instance+0x263/0x560 [ 1459.587428][ T9587] ? __kvmalloc_node_noprof+0x52a/0x820 [ 1459.587451][ T9587] ? __kvmalloc_node_noprof+0x340/0x820 [ 1459.587473][ T9587] ? call_instance+0x263/0x560 [ 1459.587492][ T9587] ? call_instance+0x263/0x560 [ 1459.587519][ T9587] bpf_compute_subprog_arg_access+0x2f1/0x15c0 [ 1459.587552][ T9587] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1459.587576][ T9587] ? __kvmalloc_node_noprof+0x340/0x820 [ 1459.587598][ T9587] ? bpf_compute_live_registers+0x142/0x1df0 [ 1459.587619][ T9587] ? bpf_compute_live_registers+0x142/0x1df0 [ 1459.587644][ T9587] bpf_compute_live_registers+0x10b0/0x1df0 [ 1459.587676][ T9587] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1459.587703][ T9587] bpf_check+0x2d0b/0x34e0 [ 1459.587724][ T9587] ? rcu_is_watching+0x16/0xb0 [ 1459.587747][ T9587] ? ktime_get_with_offset+0x93/0x2d0 [ 1459.587771][ T9587] ? __pfx_bpf_check+0x10/0x10 [ 1459.587788][ T9587] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1459.587810][ T9587] bpf_prog_load+0x14da/0x1c60 [ 1459.587832][ T9587] ? __pfx_bpf_prog_load+0x10/0x10 [ 1459.587866][ T9587] __sys_bpf+0xd86/0xe00 [ 1459.587884][ T9587] ? __pfx___sys_bpf+0x10/0x10 [ 1459.587905][ T9587] ? __fget_files+0x2a/0x420 [ 1459.587932][ T9587] ? ksys_write+0x242/0x270 [ 1459.587954][ T9587] ? __pfx_ksys_write+0x10/0x10 [ 1459.587976][ T9587] __x64_sys_bpf+0xba/0xd0 [ 1459.587998][ T9587] do_syscall_64+0x166/0x520 [ 1459.588016][ T9587] ? trace_irq_disable+0x3b/0x140 [ 1459.588037][ T9587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.588053][ T9587] ? clear_bhb_loop+0x70/0xc0 [ 1459.588073][ T9587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.588088][ T9587] RIP: 0033:0x7fc50dd9fb19 [ 1459.588103][ T9587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1459.588116][ T9587] RSP: 002b:00007fc50ebf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1459.588134][ T9587] RAX: ffffffffffffffda RBX: 00007fc50e025fa0 RCX: 00007fc50dd9fb19 [ 1459.588145][ T9587] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1459.588154][ T9587] RBP: 00007fc50ebf5090 R08: 0000000000000000 R09: 0000000000000000 [ 1459.588164][ T9587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1459.588172][ T9587] R13: 00007fc50e026038 R14: 00007fc50e025fa0 R15: 00007ffd6d381248 [ 1459.588190][ T9587] [ 1459.591557][ T9490] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1459.591588][ T9490] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.643178][ T9588] block nbd3: not configured, cannot reconfigure [ 1461.220513][ T4107] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1461.220543][ T4107] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.231865][ T4107] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1461.231895][ T4107] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.231923][ T4107] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1461.231944][ T4107] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.231970][ T4107] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1461.231991][ T4107] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0