last executing test programs: 5.234795054s ago: executing program 1 (id=2901): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x4040004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'syzkaller1\x00', 0xc201}) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$unix(0x1, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000840)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000a40)={'syzkaller1\x00', 0x1}) write$tun(r2, &(0x7f0000000a80)=ANY=[@ANYBLOB="080008000f0000000000160000006f0024"], 0x32) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80000) ioctl$int_in(r8, 0x5452, &(0x7f0000000180)=0xd) (async, rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r8) (rerun: 64) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000200)=0x800001, 0x4) bind$inet6(r9, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 32) listen(r9, 0x0) (async, rerun: 32) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000280)=0x800001, 0x4) bind$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r10, 0x0) (async) shutdown(r9, 0x0) (async) recvfrom$packet(r8, 0x0, 0x0, 0x10043, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x67}, 0x94) 3.815795822s ago: executing program 1 (id=2908): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000004080101001600000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x1, 0x7, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}}, 0x4001010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000016000000001e00007f"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f00000000c0), 0x0}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="540100001000010000000000000000007f0000010000000000000000000000007f0000010048ff00000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/268], 0x154}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000ac0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000b00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) unshare(0x6a040000) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r10, 0x8982, &(0x7f0000000540)={0x8, 'veth0_to_bridge\x00', {'veth0_vlan\x00'}, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8800010}, 0xc, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r6, @ANYBLOB="000827bd7000fddbdf25150000005000018008000300010000001400020070696d72656730000000000000000000140002006d616376746170300000000000000000140002007866726d30000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="7000018008000100", @ANYRES32=r3, @ANYBLOB="0800030003000000140002006970766c616e3100000000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000300020000001400020070696d3672656731000000000000000008000100", @ANYRES32, @ANYBLOB="140002006272696467655f736c6176655f3100004000018008000100", @ANYRES32=r3, @ANYBLOB="080003000600000008000100", @ANYRES32=r3, @ANYBLOB="0800030002000000140002000000000000000000000000000000000008000300020000003800018008000300010000001400020070696d7265670000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="080003000000000008000100", @ANYRES32=r3, @ANYBLOB="3c787f9114967498f837da8d2191f379fec0d341594499608855dfad40210f1846decce7719747dd2d59003538691f81745e50b504453bd60ef04b4c7e6501eb716c81704ded1f3d5d8a8499f666603ebc877a05b75ebccf2a5d7ad955cd1c9837798368dbdf60eb9a0961199beb22c36bd0b6800b618e6fe5714c00a7f86fed6ed7991bd35ecb8ed0360d7f183f0a84338a2a99910e0c4eb1d4178d738c72aba296eb2d125c618ac4793acd5f93b480f06ba4180a7295e371f08ba63f14084c"], 0x14c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000002c0)=0x8, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000300)=0x800001, 0x4) 3.196009868s ago: executing program 0 (id=2911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x2, 0x4) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r0, 0x80000003) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000300)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x8, 0x42, 0x40, 0xa0, 0x1}, 0x50) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000140)=0x204, 0x4) sendmmsg$inet(r3, &(0x7f0000000180)=[{{0x0, 0x22, &(0x7f0000000200)=[{&(0x7f0000000240)="08000000e6356632", 0x8}], 0x1}}], 0x1, 0x50c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x101b, &(0x7f0000001640)=""/4123}, 0x94) 3.044282983s ago: executing program 0 (id=2913): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6, 0x578d2b3c232dfacf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000", @ANYRES16=r9, @ANYBLOB="ad4300000000000000000f"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={0x18, r9, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4100}, 0x48800) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000500)=0x7ff, &(0x7f0000000540)=0x2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x400000, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2.860622454s ago: executing program 4 (id=2914): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x7, 0x2, 0x4}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x7, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001300)=ANY=[@ANYBLOB="7c010000130001010000000000000020fe880000000000000000000000000101640101020000000000000000000000004e20000d840000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000000000000000000000000000000000000000000000000000600000000000000030000000000000004000000000000000800000000000000000000000000000001000000000000000000000000000000000100000000000008000000000000000000000000000000c400050020010000000000000000000000000002000004d22b0000000a000000ffffffff0000000000000000000000000000000000010100050000000200000009000080ff010000000000000000000000000001000004d5320000000a000000ffffffff0000000000000000000000000000000003024800040000000080000005000000ac141418000000000000000000000000000004d42b"], 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001300)=ANY=[@ANYBLOB="7c010000130001010000000000000020fe880000000000000000000000000101640101020000000000000000000000004e20000d840000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000000000000000000000000000000000000000000000000000600000000000000030000000000000004000000000000000800000000000000000000000000000001000000000000000000000000000000000100000000000008000000000000000000000000000000c400050020010000000000000000000000000002000004d22b0000000a000000ffffffff0000000000000000000000000000000000010100050000000200000009000080ff010000000000000000000000000001000004d5320000000a000000ffffffff0000000000000000000000000000000003024800040000000080000005000000ac141418000000000000000000000000000004d42b"], 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0xc201}) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x6) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000540)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.809346039s ago: executing program 3 (id=2915): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0xf689c000) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x15015000) mmap(&(0x7f0000611000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2.673116633s ago: executing program 3 (id=2916): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000800)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x28, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8010) unshare(0x400) pselect6(0x40, &(0x7f0000000900)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000940)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x220, 0x6a9, 0xfffffffffffffffc}, &(0x7f0000000980)={0x0, 0x3938700}, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000000)=0x7f, 0x4) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x7, &(0x7f0000000700)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @ldst={0x1, 0x0, 0x3, 0x1}, @exit], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$inet6(0xa, 0x3, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fedbdf250b0000000c000580070001"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) (async) sendmmsg(r4, &(0x7f00000000c0)=[{{&(0x7f0000000140)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r4], 0x108}}], 0x2, 0xc040) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@local, 0xee200000, 0x0, 0xff, 0x1, 0xa, 0xffff}, 0x20) (async) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private=0xa010102, @in6=@private1, 0x4e21, 0x2, 0x4e22, 0xfffe, 0x2, 0x20, 0x40, 0x8}, {0xffffffff, 0x8, 0x8, 0x2, 0x0, 0x0, 0x8, 0x7fffffffffffffff}, {0x4, 0x9, 0x3, 0x8}, 0xafb, 0x0, 0x0, 0xc238b7f6ae497b0c, 0x2, 0x1}, {{@in=@private=0xa010100, 0x4d2, 0x2b}, 0x2, @in6=@loopback, 0x3502, 0x2, 0x2, 0x4, 0x38, 0x2, 0x9}}, 0xe8) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) 2.367575436s ago: executing program 0 (id=2917): socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000001000000040000000800000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001000), 0x0, 0x10, &(0x7f0000001040), 0xffa3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000300)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000001280)="97452a300c000000110000000000000000", 0x11}, {&(0x7f00000012c0)="9e762d2f24d02a99cb0aa5", 0xb}], 0x2, &(0x7f0000001300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102}}}], 0x20}, 0x2400c804) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000001340)={0x0, 0x4, 0x10, 0x7, 0x5622}, &(0x7f0000001380)=0x18) setsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f00000013c0)={r3, 0x5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xc, 0xf, &(0x7f0000001140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000001200), 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYRES8=r4], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc1e9ac537d7529db, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0xe, 0x0, &(0x7f0000000480)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.36275201s ago: executing program 3 (id=2918): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000940)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000150001030000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000040000000000000001cbf910000000000950000f700000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000300000004000000010000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/23], 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10, 0x61}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x3f, 0x1, 0xe, 0x7d, 0x376d, 0x8}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x11, &(0x7f0000000700)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r1], 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) unshare(0x26020480) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280000001c00010428bd700000dcdf2507000000", @ANYRES32=r8, @ANYBLOB="400000090a76c3f79c729f6d87bb0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x7, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r9, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000e00)={'syztnl0\x00', &(0x7f0000000e40)={'syztnl0\x00', r10, 0x2f, 0x2, 0x9f, 0x0, 0x12, @remote, @loopback, 0x1, 0x8000, 0x0, 0x2}}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ec0), r12) sendmsg$NLBL_MGMT_C_LISTALL(r12, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000980)=ANY=[@ANYBLOB="1440000079bdee84b384a259a991f6e8e40767cfe3ba7b2724785c4bc2652dcf06a43921a00effaeaca0160561c82de4eb25ea4584d5d25078af00e523b60bdb61c0223816517858285fac7eddb51eb6c20478dd0e65ccd26383c2dfe95c028a296f4387a0da9e6a41ada4efb924dcf3f157050d868632958e858166bd40224700000000", @ANYRES16=r13, @ANYBLOB="819b44000000fedbdf2503000000"], 0x14}, 0x1, 0xffa6, 0x0, 0x8000}, 0x8c4) r14 = socket$inet(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r3, 0x40809440, &(0x7f0000000fc0)={&(0x7f0000001040)=[{&(0x7f00000010c0)="0448beca115e376fc9de8022d47e6bdf33f5319c1acd86074d9a1b329abee8e17889d6ca8a94e419a15fde390003f3ee02f39eccd76ca563c27114992f1fb37a9cd922a70a053517db6be7beeef03266c6ef8e38b15b2779622fdc3ceb4eb1a9347660ba447fa8e5580fa3385cef61aa3a09309fd94a8a1307972527b1e2c589671d46b01dfc7ce0be473092b54a90aacbdc5a75d288e6190eaebe1902210df36c00dedb2f992dfd1ca9e40049b6df3591b5381e87cb0fc81e54335f8f02ef7157397f7691e60149f09a735a2537f4d42f014cd8fbe495f18c3e171435edc528078d9cf0632af8bdf68e0fd93b99e074746a9279ce397151", 0xf8}, {&(0x7f00000011c0)="2e34c94c33c1be9f4035a853feb18ea160be77136fbab93cd05975c47066f12f06f80770ca1ebf7b5c9c9cdf57e39f5718db46c78b6f404af74bf2eb1a07a7d96065999b41805b761f0679a8053a91249eecd1d0c8fc7ce5df974f3d262dc2878c95f0ec50d48ac5baff5654824a6a3baf1807158cf3a2189abecbaa1db4752ccc72bd52431e80dd236674a99c9ae333da209a5bdd3a12d0cfb97150deec55c2", 0xa0}, {&(0x7f0000001280)="7e26819237909764e204022ede5634767084942ab826da6bc14b56ddbbdddf5d9141cf1f1b85e540ed5c63b342615ff3dc4d80b457ca60fa32c15bf589fbe6614958961b73895db01c74ceba1bb5ec0297d6bcd2976cd46b1bedc4efd65515424f087d76a4bc47454f9251be517cbb784348b187bc02ffdc6cbbb7d1e064545960b11326557637a068fda31e3e180c3261045b4b4638f008fb84bc5a346cf0bd4abbe4a9a0ee910d3af09c", 0xab}, {&(0x7f0000001340)="9c0ba0a9edbd09a7ba70b5c48f304c768a40cad410ba", 0x16}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="85985e685a20f509f3feac52c36732275b036d01cb4bc16f26a10bf89e5a4213c7b508ac9a87137640a2e3e627e04c76a7b0749f3efada1133e9c109136177ebd0520277bb932b327a2d3a757c01f18e035fa143b0f6cda2ebc0bfacd7b22663c0f2", 0x62}, {&(0x7f0000002400)="50699db71b7040e65d57a547802d220852bd7dc136cef6facbbf39ee8df02f926a1ec1d199010307823d5942876ceb92b7849e1d2d11663a4c2b2d38de32b2762034dd6b23dd56ae3b143ae5f2177a02", 0x50}, {&(0x7f0000002480)="f90875799b5dcd6d116b763e2cfb8dda45dc3f1c56ce8d2010870fdac37d616f331117008d14625980fd02b2da75cd2ccca660c1723a249f0b243c74334ccb4c4de59258b4017bde56d78c04ae56ad47a1457ddfc7e4072058c26270223c6b280f6e06484dd60aab8420bc1d4a8cc2d6d4b183350916f114229b94d1de88c561d66ae8b84d278fb3c01d7d5e225baa3f5a13283b4b5869f92b88670b5acc37dfaa793f4ab27890ea0eb22934078256f64da02df9873b5de3762de74353aa2869676163bb833cde508c7f5c88eb4cd8f917429faf3decd13345406c188772bfba46c0337030e676d71df608cc1abb8c0c7b8d4d692c4dc060e27ba14ce2e6169f7dd45d6b19a26d0547fcd9b05264123c721f815360e09c0195dd2ed2e6cd130b0d5c79320ceeb3fcdc09e33ed9318f887512944c38ddb607450b5f0e6b4e9bb9b414a2c4f55e0a84338c79038c6e0e01cb01b34b7085dc87998c055b147c8ac438e119f946c90eafb5fdf76c38f56dedc2c57ed097f2acbc70a54ff67e0719d566aa18fd677a52fe21c143321d0adcf9883bf91cc7ba16e047d4693480c138fce242248b077dbaee918af1c22c50d52add57cb03b2e59fecee7cb4f47fc9f17d975998cb53c94e24987fda82cb6620690b4a478b9cd0b28601011f9b83c55d0ce3d94cb311b5d8a28647b827acb3a43ae88035af7122757a36be39b9c2e75d77cd3a39251c53b18053751df19d4c84cebaee1443c97047b585741ee2020fe1d37241157b1e201a8a8f860dc03d058ee4a40f5f80b54948f68348f476f55dcfacb68679cf99640beee577bdd62f9f2b06dd916a51000a99ef764a067bd364a7070a417a4ea83df2eef20fcb3256a256d0a177fe70c8d4e91f36c4d8bbea9965a1ffdac50be4f94c2cb97358296b4b34e67bc76b8a388b195e225e36777fe8572adf1a94ae1d42996cb8d3d8188b2d08d9415f21ec700f9e12b1f4fa14fe9778e599e39f18d9bc91240caa99fe80429fc62e1b8ea2e245de70c02c50b90a90c8f6d3f40395b32b8372a47e5f41f62e04b81f0b15970b7aae032bed5313f3e3924fb327cbe828020c842c60f3413b19deab17fa34c060793628ae3bb9719bc6b5eb301eaa9880a8c0d334e2fd092edb09f91512f15368f05360cbfb9e9532fcc0d4a4d87f90672c2165ec8c140f32816a4b3904f0a61d59c5ee6a87c3a0bc463fa9da3afd84f36d10e0ec50fa59dfe5a01a268b94db2f453f88cb21e2b2ff69ae642d1aaa0a5e7cd0c6281903b2ec7922dbb39426fee99b0191371981c4770705e8fa1e8c61e942104dea9c61c3e68dea222b93660433f9ca32f9bd2fed9516f241ba5b5968b57ebe5310a86033096c853aaa17b4360b867901c95ba01806991806704619f61c3443ff32045f6ec4e78a5032cd10cb4fc90cca470eb3e0022f2ae7fa44961c15c669408d1cb07f63c90e70a67e2b7dcdc7eefa00e054730a2d967504afc6878aae9ecfa789bd84d8bc2fc03577aa4668322ec2d4537d80cf8be7ecd262c502094093d9a883224a48d736a855da88f1b2dda658242546d7f690f9388572290cf9ceda1863887861ec4015f998ef7dc6f43a2295540a32fd69c1b8135b3c07b3fb4acfce0ed8e11fb78e4e53748c9b5f53a672540f1d90f80fbc26d8612d63bf62f48ae608f5efb163a30de27a656f8c6c82328697f11735278e95f463a6e10f4226e7bd42c5ef8590ece794b9b8cb213c9f9ef418e9634bcd6f0d85147023983057b2327422850c643a8093cddcd051823592665d687bdf561b116a6bc77b2d0ee836c49e1f273e0d0b086c471b30072cb3d91a358830ae17dcaea854469605395eecfba59adfd5b5a9f4c4919352a8cd681f5efcf742c814a0b302b4390c5d72eba5d240349574aed44407f7e8f9d17db844bfc7fb97152edb26ead021c2b0f3be61d3b8176782f0d53b1032ba3389862ff689531cf91427a22b45184287fe6eb50e5778521461d872bace264d906fa34eaa9bc9ad6d141c7863f22bf31d038b750b5ee1242dc27a7a075fdd51d3811927e2f46dcc96abf7a34de81d77e963f97c621ed6924bf71bc8a8bc80f882105482afb3de2577efef3e5014af63c2299d0d65c70e1b9b50c4ef4ac11a3b6e0c3331e8ea4cf6e6fd1369227ab2593eb99392837d02bf2c616d413d3dfdd2ccaf27d81b3082cd0dbc55004cc2c8a083e686ea07e9c396bb3a1b9c1659c0087da18bb260b65745b2e56fcdb0650aaa896edd116852625b6506af9ff1e6d0c5045c277eb5ece1f41497a3d9bc3e4c8e040e97e7f8d1dc777bfadf3d4bcd68fb9e9078e2b962b30c8a71b0874b40c0f942be3824ff9d1211a1d2d0566261bdc288f0319d77e3aaf6d3e4edc05e8d30ec5099af3728531fecf8b6eb5320b9cdb3e4cfe132cd2f8427fb245274b38dd2075ecd4ff340467de62d83ec0c9de5d79b3dde9d1c12b7290990b4b9d4dc04f887ab7d5b2451be8bc0442f7d3d91c5a14ac316d00f6174e49e14ab0deac8acee7efbd100be18f1e03ba74aa1204c9ce021e5aa3cc6191b6e19f554f00236a1e4dfe10fd60f955ef571539da83c94057b93c2c08524df1fd326e189aa28222bcae3a0adf93ee5d5d8dc51171fef617d41dbfb0ca47077c6bbdd3bbc21c1095dad4cf212455d42540c083322a3ac4603597d9531c270012e5a0d2692d68ee6a013ff00d8ef64dd5efd93e2401ba44bdcd312a10f265882fb9555dab5738359179aca1ffadbd66fb8173f6a81b831c856752abdcd51f3f7f04fb6022791123df0da9064d88e43058547ebaaecf98d84e6470691e4fd457d936376fa55251752b5275f99ac93ac738a0a3e6b682773a2025289f64fcc06bf1a6cf9d461a7e130bcb8be4e4f8cdb6e439812608f26144aa6fdc1ff14f8e3b286bd77e79fedee096914ca84df269fe4efadb911101c98beb69966ef359186c274836c6142dbf95043693ebd60ceeaebed3b6f77a678f5e93c6638efd4dee12931cbbfda6580426a14d67f958f9e27ed7985e73fa8fe5ffe07307afb1aea618ec42119c48822ef6f0ea4dd631b1bc95ac5c41648412fede7a6a890a18b8b4f1b35a4af79510ecb0a56865d817f218faae456fb5b895564692add9f26477891c351ac2bd70e5b746f14e47a3855b44ac5d367cbb1e164dde0a5eb7920dcba48a5b992d15c5a7344cd45df89c4c908fce290a50448cbab88790f77b04fca490b8f1d80dd2259298601d3eea223a686f459de0764afc0b4c79afd709c8e2f81590bf26b9336b303d9a21cad5c8e4e08382a2f6cebfad3ac8ad3e10452a922fb38570ef93d6dcae4f89db73e44e34a59e2444e34c89bde806cbef28e2d558d6f305fd08c501a849041a1d7ba6109f092f6d2096d73097b86cddf4a35bc2ad155b7425b937a3b30aa3400e2e61189d22980bf833675b66dc4b7f5eaa2679ee840fbe92eeba69ff26a5219b18a493d9ac97024f312f6c6984070484b31826925ef985566c292b77c4a5fc21776d0b16ca4bbe5d059df4e7abaa178c9917aabfac6b67920e18e5e886f4b7df4a4eb510f4198a6a24c741177ffbe20a1588099eb228bf778e57fbabb4e05a014d997aa2ba0b9c4a65deb5fda8af1dc77fdac6f759a7ee4a994098b41d3f1b7758dd4751c7286df52dd157f2f4188bfea233e408b9385cc8da667401febfe3ffb409dfe3dce6ec3614c65a6953e87fbef413493af5119fdb047082943c0b02876b0dd7ce168de73f7e2eddf4099dae79f99b97602d4457c90805413f6698f36f315ba9b50703aa7f014a58b58c869eb9949d6471b58ebf443f097b7916615fb5f295fc76cd32be9259d624c18e7548e80ea7a1e1c7bf2a2f0b2ec5b47dbaa841fcbc612084cdc12da4d023ab6dc4966f29172ea9ccd338007e91d68706a29af1da7f596c7c4217b3e3629d08d7657f125844577dc5e5ccd4a52c6c620430914a7fed900bb7acd6f4e7340090f20b82f7db300de23bc640a70d235faba4ffa06c1f1360124bf5f514c7446ebf01eb396a3eeaeb02f6518407223396ff2730fce9e74e707498876157291ef32eca8640db7ab906748485d8c433e6ebed01b405ae99164da1aa4aaf70515f7c9de0a5aad98133e0dfd3b74d0de8b18a0e31a3bf794fb28087e3bfe75e97b7b28bf813d703b45bedd9789c748a12e82707051662129de2c21a1fe9d39280c8b7637fe24078a8c7eec379c32fc7575b8e6dd59892b48e2f46bb1134efc1063bc68e114baf5badcf59868c08f38a5558932e5ebdc2c4d041b44131d8cb6b77da08a2c286014518445ded6c3ad4f67e4d61c3adf8f097c6fc2e0414d8350e041195e06908b55462968ffef53cf3332e02bbd546ee3d0a54d656c83dfa234635020afb45cc7c4983c9d30c8da398032dbd2ce5b3b9ba83b8f3fbdf2c80bba8de735b16fb193b0261f0ed32ad47feffbf14bab81f24879e74f55bb08010c04ea2f9d4949c1f8b7589501d9759989538c0ea0389ccfc2cf3b6d885b7f841ac6adf30b47e26cd9261bd23cb49b04078c1c50bc9b13bec038b1d844fcac064c299507d518aef74c56625e72dc72bafb4d813135cf36e8269bb867085f55150f2ade6354f880b84028c50258f63ff78fde7d6477b2d1714bad0b74784609a368804c4be1e1fb4ed77675234b369dff11d0a64f3432f14223bf3db14bb1b202acd2edca31ee048e6e0ff4f68edf5c34ef7302cc9c6139b114ab210c3c704ccc66aa81341ae1999dd5d66118380239b660aa1e81b8911ade0be46b8dd265f5e95677b65cab5f44b32dc12c81061c1c4e96560d53ad55f478c53aaf001fc94ef744cd623bfb5bcc3a21c62de72e79786d0b7dd71f29589844c8baa88e972599d5ead6c8d2fa9157506665bee91db8c098c58deae763fdbaf13a789b03da853c121a791e0c83a84378cc78e341408c440a92906703c5a534ef5235e7c6398d801db2006279fa14da9196bfaff774069ac9e5eeb5f7043813bbafd424ed0ad7323e6d795af88c36340fe286f3c9520fd0d1eb09aecfbb5132616f0054a144ec343a393adc32c56c30164aae4bbc9e824ee4ff2247a5b10e478dbab7f1e8613ff2aa30ffd7bf347e75f4a6ce8816a5a530db040c000a67ffcd76ca22db7c5c4c1fc66d1727be0ce5b97af25d68b06ca928a239bd5b8c78e63fd3bca931ef614769a09e769726b2b4e580ce0c6417ff0f1d1e2b76ad8df94fcab00ac7149254b2591ba26fcef7cfdeb4600860f646bf5fffd2551db19aa155cdf2f8a2f4fda70f80cc5352742099d2af4ea26198a9d60459bb01156b6ab7049a8cf1b3c739fd498d510e7dbf054d0e662ca6aacbe9a0ae260a713e0f03b297e39c61d12c3853f48bb59092e1c03fe6a4ede2cba760a2a6dc39ca89c91793a0f5f447935f37c5fe151cfa811083e769487eb8d25fc67eb7a63087bb6b1201fc5557b10215541cf3975d0ede859c9e31c687b680b94adfa1368289ae644e7206efc1a1b143005daf48985b5157e1eb624ea4ec3f4626b2f94b309613665cf1fd28dd39300fb4621eabd47526878d7a7c75ade3b1a0bfcfbd7c5913a1433487ec65f92cef19a1874bdb83c8acabc86f93eda0866bdf4d948e68b9c6c0f18789e9bcc04473eec8abb44956490b795cfae509fbb42523fb1ac35e162360a522758e4b75895161b77324fc9d88645167c5833fbc531e9bf5b376b699cfe69de95de6532fe74f39630e398310e039110a9509e74a021fba4af0138d50427a7a45bef9d7de657dce", 0x1000}], 0x8, 0x9, 0x0, 0x80000000, 0x100000000, 0xffff, 0x4, 0x1}) ioctl$sock_ifreq(r14, 0x89a2, &(0x7f0000003480)={'bridge0\x00', @ifru_ivalue=0xb}) 2.201235349s ago: executing program 4 (id=2920): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x18) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000100)=0x1, 0x23) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@local, 0x8000, 0x0, 0x0, 0x1, 0x0, 0x3}, &(0x7f0000000200)=0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.052008686s ago: executing program 0 (id=2921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a48000000060a01040000000000000000020000000900010073797a30008a495debf1ae3af6970000000900020073797a30000000001c000480180001800e000100627974656f726465720000000400028014102a001100010000000000000000000200000a"], 0x70}}, 0x0) 1.957231957s ago: executing program 4 (id=2922): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d80)=@filter={'filter\x00', 0xe, 0x4, 0x488, 0xffffffff, 0x2c0, 0x0, 0x148, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, &(0x7f0000000280), {[{{@uncond, 0x0, 0x108, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x15, 0x1}}, @common=@unspec=@time={{0x38}, {0x2, 0x0, 0xead, 0x13a47, 0x7, 0x6, 0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x632, 0x1, 0x8, 0xfffffffe, 0x401, 0xfffffff7, 0x8, 0x35e]}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @local, [0xffffffff, 0xff000000, 0x7fffff80, 0xff000000], [0x0, 0xffffff00, 0xffffffff, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x89, 0x8f, 0x1, 0x29}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x32, 0x6, 0xff, 0x7, 0x1, @mcast1, @local, @private2, [0x0, 0xffffffff, 0xffffff00, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0xff, 0xff000000], 0x82, 0x850}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7, 0x6, 0x0, 0xf, 0x4, 0xfffffff8, 0x4, 0x7]}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"c5e5", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000160000000c00018008000100", @ANYRES32=r5, @ANYRESDEC=r3], 0x28}}, 0x80) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000c40)=""/277, 0x115}, {&(0x7f0000004a00)=""/4099, 0x1003}, {&(0x7f00000002c0)=""/190, 0xbe}, {&(0x7f0000001d80)=""/189, 0xbd}, {&(0x7f0000001e80)=""/147, 0x93}], 0x5}, 0xf7d}], 0x1, 0x0, 0x0) 1.701365348s ago: executing program 0 (id=2923): socket$inet6(0xa, 0x80001, 0x0) socketpair(0x27, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x1ff) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r2, 0x5a84, 0x2, 0x3}, &(0x7f0000000240)=0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@fwd={0x1}, @union={0x2, 0x1, 0x0, 0x5, 0x0, 0x0, [{0xa, 0x1}]}]}, {0x0, [0x5f, 0x2e, 0x61, 0x30, 0x5f, 0x0, 0x30, 0x0, 0x0, 0x61]}}, &(0x7f00000000c0)=""/74, 0x48, 0x4a, 0x1}, 0x28) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x48, r4, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}}, 0x400400c) 1.632776541s ago: executing program 4 (id=2924): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES16=r0, @ANYBLOB="c30c424700000001000012800a00010076786c616e00000018f00180140012b7f0a479ac9fb292e19eec1ab974a73080b572a7ca783fcbc261603064d286fffa594427c06d403605b405ae85992bb98dffb7547cf26e7f"], 0x48}}, 0x400400c0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.615024951s ago: executing program 2 (id=2925): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r1, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x10}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "226df69afb298dfc462e7b149914b933"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44) (async) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'ip6_vti0\x00', 0x2000}) (async, rerun: 64) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6c5, 0x5a}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xf0a}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xdcf}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c004}, 0x0) (rerun: 64) connect(r0, &(0x7f00000003c0)=@rc={0x1f, @none, 0x8}, 0x80) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x1ac, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x2e, 0xa9, @random="5e883f3e6bbbeb7bb9892e3d2500bc97a9c3e3c8e7e36d878d5913cfb4840f4ea4d613a20011ee33f420"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xd8, 0xa9, @random="0c5a38de208b47515cbbc23b31e877bf973ac4dc243a664267736d4abac852eabbf930e6d95194ddbc49a4037bb30834422d8e78e6468b9d754fecd706613c189e55b23217d2a96eea3d68dea227128d18e91f815b7c01d0fb3268c9cf34aaf4b412983bd9c39184ae23f7f7c4215ff5320565239b3451ffd7bcbb910ad300804138fbe00cd85301a1d0e37a38803d7f04b4e9d07fbf937a33ba53717de5480ca9f5711e75b17cd91b65490de5aea1f36443697432635698c61a906e51eac595b404fb7e8b3e5116411d01e118b329d89912f917"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x85}, 0x4008015) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = accept4(r5, &(0x7f0000000740)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000007c0)=0x80, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x6c, 0x0, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x459}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async, rerun: 64) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x19}}}}, [@NL80211_ATTR_TESTDATA={0x22, 0x45, "9385e749e636e64fee4808f099ffcc2adf300f6266017e16ceb900e17578"}]}, 0x44}}, 0x4000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a80)={'pim6reg0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r0) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000b00)=0xf, 0x4) (async) r7 = accept(r5, &(0x7f0000000b40)=@ethernet, &(0x7f0000000bc0)=0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'macvtap0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'syztnl1\x00', r8, 0x2, 0x2, 0xf7, 0x6, 0x40, @private2, @loopback, 0x80, 0x8000, 0x200, 0x6}}) (async) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000d00)=0x1, 0x4) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80), r7) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000e80)={&(0x7f0000000d40), 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x6c, r9, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004010}, 0xc8dc) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044010}, 0x1) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x44, r1, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x44}}, 0x810) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000001440)={&(0x7f0000001140), 0xc, &(0x7f0000001400)={&(0x7f0000001180)={0x244, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x230, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x18, 0x5, "6eca3e30042fb9ef8c31e546956c5886d3065f93"}, @ETHTOOL_A_BITSET_VALUE={0xd6, 0x4, "e74cebc5c56e117a306f2ac114f6545e8246594f1c10fdce4dcd52345272ec245cdce4f571c453d3fe1f37470cbb653af076493ab0ff014fc446ea9c9044bcfa2302ee66b7cd7c987f07b8b996ca0fb06204e0fa7b7adcafab98142dd6775c5efdb6f2149373079d661688a384f7f18c7cf94bf11b07f01ce233bdd295c9f2b7dd889a49c29912b12f6d1c4d30fc24fbdeb09ac2f23845f9407db3f1a008175be50aee40f1896048dd66203cbe16ae15df771052b239a1e62925406ee7a30c8e3542c7bf440928f7399b4daeee2606be02c1"}, @ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',,\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'firstname\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'secondname\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3c0b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '@@%^\xc5.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x8001}, 0x20048041) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000014c0), r6) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x30, r11, 0x408, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x0, 0x101, 0x10, 0x8}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4004804) 1.531495493s ago: executing program 3 (id=2926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) (async) sendmmsg(r1, &(0x7f00000000c0), 0x400000000000159, 0x40840) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfffff000, 0x26, 0x0, &(0x7f0000000300)="56df7100c80400d5721ff59fe864249df5a410f0bb7d20ff693303fd95cd144547472d2a2734", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000002300), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000002340)={'syzkaller1\x00', 0xc201}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002380)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000023c0)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x3, 0x2b, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2ac, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e23, 0x4e20, 0x298, 0x0, @wg=@data={0x4, 0x9, 0x5, "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"}}}}, 0x2ba) 1.448151432s ago: executing program 1 (id=2927): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@generic={&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) (async) bind$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) (async) listen(r5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002740)={@map, 0xffffffffffffffff, 0x7}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002740)={@map, 0xffffffffffffffff, 0x7}, 0x20) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000b00)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r5, 0x80809440, &(0x7f00000026c0)={&(0x7f0000002640)=[{&(0x7f0000002240)="2efbb6a097c2c55a7ff53ba3c2f300a25b218854467e289d081b040b4e3692c950a0fd11f2c512f7ff6fe558acac8a66b2f3f8a9074018cf52084d59a66c68ea7c898bb3d2e51d2f6bb5f8eac2fcca194b46c54320b59eef6197f6e3c1d16c61338b0d7c9dccd09a840108a83156cebe79ad3016636588f2cebf9a076e764a19d3ede147f83c3e92a1190c0ce578184ac8c341c2b457efea85db0e3d29017cf1384595cf6acaff3dfd80ce89082baafe278e2555d125e6244f703d9faa534019f34d202947a107882596b9", 0xcb}, {&(0x7f0000002340)="ef66ea7f859cdf93c9f70087f4d17463b8d9373b1122e1b8ef7d32f8fe262a8d32aea2df6d0cdc62ffc034a02aae789214e86ad1616884db29aea942b4473eb52783c03a46eee892cc98f7fbb1012c0a539f794d39c835609279d6ccf5e3089c1b6e1468b523f1e229aa968ac3724b8a6b203361fc469d3cd59725cb8a0227d94d00e19d82064533e72dbb1274367a70439bdb3dc3c70ba82970c041a16ba0a061f71e878d35cc902e98ef6917c57c87033730a0fdac7698d3ef2c4f19120e66e76089e3925fccf1a88e9d96fc58080b194e6a427596", 0xd6}, {&(0x7f0000002440)="25d6038b5683d5ad30e2fb9c14043c57c236192420fbb7bbc95a05c203db2a874dc1b928ca330168d59ef5c77efc4f25af701674bc741089f361947257513a509d07e7fd491123955c21517e3247982ab707a522f2f90437eef228972da5fd8218787edd7a4dc488b2494edc8cc8c728cf56eacdc14884e505abee448aed561beca4eff5bf55fe72f826c38a4491647d9182eaa76b7bcd4b712229aa2f3df963e9ec79167e0158d205556a914153e8c2e765dbe666e1d0a57bfc973d1ac80b8e6622f7b6372a7b139ebd649109463445328cc44defa23369b2971b9880fbde882d08d5c1c47207eeb52b294905ed8f6725f87aa9c07e7650", 0xf8}, {&(0x7f0000002540)="976445ea2013449680be54d32565953085954bd7", 0x14}, {&(0x7f0000002580)="cde74d27ef37e0bcf07739e1d5d7dcc43ec25677c97634778a1b2568641d550d5bc096417e1b3cc37f3cc0bb3be1c7c87d2359358d5b52b7a25726ae4125d5791625264a8e15cea1b621e8fc47d52838d52e2b1ea3035e7c187d69538b22d289b51d88ce8edd7bff6a78242ecf4f4e660f8d7e9837eacf84308b231db64e1b7498c169220ed8aa3337e66bfc80e1af898010d1f8ad7bee50903686913dba988a16288e1116403dd6b6d2151d7d976c2a1a22251b085466b5438626ac94", 0xbd}], 0x5, 0x1bcd, 0x0, 0xff, 0x4, 0x11ac, 0x2, 0x1}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000002780)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) (async) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000002780)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x3, 0xc, &(0x7f0000001f00)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000001f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001fc0)={r9, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000002040)="b9fe0307681f4c8c989a14f088a8650186dda8c6e96fd9d5a77080d1016acfeb01579fc3d25490140ff4891f3b3ba0ca878c8b76755e", 0x0, 0xa1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto(r7, &(0x7f0000000c80)="4df434947f557982b4cd33e098f620f97a9161010f8ca6be3d90ae46d1c1f17c01c88874f2f0de020975bdde908abc54070000000000000016bdd455ac697126507c60356d6739815a770ff870155e10a47e84f86b4f0bf4e24bfc26a036207ab15476e4a036eb7daf4845abacb3f1c2577f34d28dc3f81ca35172ae8f1f5bdd33dd86596266000000", 0x89, 0x0, 0x0, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb01001821000050185f934645847a0c00000004412755fb0d53d268b786493c0afcfffffffffe"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r10, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r10, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d40)={r2, 0x58, &(0x7f0000000d80)}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002080)=@bpf_lsm={0x6, 0x11, &(0x7f0000002140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb91f, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x6, 0x5, 0x9, 0xfff7, 0xfffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002080)=@bpf_lsm={0x6, 0x11, &(0x7f0000002140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb91f, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x6, 0x5, 0x9, 0xfff7, 0xfffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0xc}, 0x94) recvfrom(r6, &(0x7f0000000b80)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x6e0, 0x450, 0x450, 0x450, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@loopback, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x0, 0x40}, 0x0, 0x188, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2c, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x0, 0x0, 0xffffffff]}}, @common=@inet=@multiport={{0x50}, {0x1, 0x0, [0x4e26, 0x80]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010102, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @empty, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x2, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0xff000000, 0x80], 0x804, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x4}, 0xff7ffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0xa5a914aef0237fb, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0xa5a914aef0237fb, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r11}, 0xc) 1.389025087s ago: executing program 4 (id=2928): r0 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@broadcast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1010001, 0x100}}}}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001340)=""/4096, 0x7ffff000}, {&(0x7f0000002340)=""/4073, 0xfe9}], 0x2}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000980)="1b0000001a007f029e", 0x9}, {&(0x7f00000009c0)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40209c0}}, {{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x2, 0x20000000) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060022"], 0x4c}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e8a9b", 0xd8}], 0x1}, 0x0) 1.333721465s ago: executing program 0 (id=2929): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140b, 0x200, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x24020000}, 0x4005) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x2000481c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000180)=0xba9, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) poll(0x0, 0x0, 0x101) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], &(0x7f0000002b40)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002b80)={r4, 0x18000000000002a0, 0x36, 0x6000002c, &(0x7f0000002c00)="b9ff03316844268cb89e14f0080048e0050000000000002f77fbac141516e0000001440c0510b18000890304000084500806325f003901050b038da1002125181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0x400fe, 0x60000000, 0x0, 0xfffffffe, &(0x7f0000002d00), &(0x7f0000002d40)}, 0x2c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000002d80), 0x4) r5 = accept4(r2, &(0x7f00000004c0)=@generic, &(0x7f0000000540)=0x80, 0x80000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r6, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x18}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x4, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2000000}}}, &(0x7f00000003c0)='GPL\x00', 0x7, 0x1001, &(0x7f0000000ec0)=""/4097, 0x41100, 0xc, '\x00', 0x0, 0x0, r0}, 0x94) 1.267829002s ago: executing program 1 (id=2930): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000600)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e5b, 0x80000003, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40009}, 0x1c) 1.266334382s ago: executing program 2 (id=2931): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x19, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xa, 0xa, 0x0, 0x4}, @jmp={0x5, 0x0, 0xb, 0x0, 0x0, 0x2, 0x2000000}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80005}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}, {0x95, 0x0, 0x0, 0x2011}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x1001, &(0x7f0000001000)=""/4097, 0x41100, 0x2f}, 0x94) 1.214014341s ago: executing program 1 (id=2932): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd0}]}, 0x3c}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="07000000000000000400050000001c0003800800040000eb00000800020020000000080005007180bbda180001801400020073797a5f74756e000000000000000000080005"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20080000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x3c}}, 0x10) 902.965882ms ago: executing program 2 (id=2933): r0 = socket(0x8, 0x80000, 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000300), 0x56) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa5, &(0x7f00000001c0)=[{&(0x7f0000000380)="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", 0x148}, {&(0x7f0000000600)="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", 0x10e}, {&(0x7f0000000100)="c460247d9c25c3e03aecbacfe60e86a3722b94e9bee5f2fbb0914333456521f7df6f4d018939abffa201db6d229ba1b94d997fe7578fe98c4399a8dca48991a4a107a41a487196ec737fbdf53a66a07a3d17edaace72d7edf3dd1be06e5a342fd4f74375edc40264efbee3b5d653d702466afaad2689c202a921f85255d92e", 0x7f}], 0x3}, 0x80480c0) (async) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000500)=@caif=@rfm={0x25, 0x7, "916d3c4a32274dfd4ea2881dd4adf2c4"}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)="27030200590214000600002fb96dbcf706e10500000086ddffff114400002fb85605f4c9d955", 0x26}], 0x1}, 0x0) 720.661016ms ago: executing program 1 (id=2934): openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40241, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0142, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000640)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000680)="448b7c0acf8bc0cefe9360fcbe079c", 0xf}], 0x2) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f00000007c0)=[{{&(0x7f0000000800)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_tos_int={{0x14, 0x0, 0x34, 0x6}}], 0x18}}], 0x1, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x215eb000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000400)=ANY=[@ANYRES8=r9, @ANYRES32=r8, @ANYBLOB="fde2f4aed8b22086831130a304eb9523bf0252032b15f2478b1c465cddc738e313b1dd561695325942bc8b57c753b4df881ca0fbece609cf52038dd69a9d43ade7d122c09c17604b5a32f3d5c84054408dc0a66848b1d565f327ebc6358fc66d1c09e38fe181def44f4e7915391a997d3ae4d441cb6afeb2e9bc057b3c89793f8ddf0bdee941b8bfbfbe80ab646634f9b8e4a12da73d1df75247f7615e1f5688b1b03faa"], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x1002, 0x2, 0x11fe726f7e78fcf0}, 0x28) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x84, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000000)="b422f0791443673f96d0315b3815fdb2dddd46e5ead9", 0x16, 0x8000000, &(0x7f0000000780)={0x11, 0xfc, r7, 0x1, 0xf7, 0x6, @local}, 0x14) 715.380426ms ago: executing program 4 (id=2935): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000600)=0x4011, 0x4) (async) connect$can_bcm(r2, &(0x7f0000000640), 0x10) (async) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/177, 0x1f}, {0x0}], 0x2}, 0x6}], 0x1, 0x10002, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x54, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000200)=0x10) (async) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000500)='espintcp', 0x8) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000540)=0x80000001, 0x4) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000580)={{0x3a, @rand_addr=0x64010100, 0x4e23, 0x2, 'dh\x00', 0x10, 0x3c, 0x80}, {@broadcast, 0x4e20, 0x2, 0x5, 0x5}}, 0x44) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000240)={r3, @in={{0x2, 0x0, @empty}}}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x10, 0x4}, 0x94) 704.067354ms ago: executing program 2 (id=2936): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000000}, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073119c00000000008510000002000000850000000200000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 572.771961ms ago: executing program 3 (id=2937): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000080), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0000000030101020000000000000000010000001400198008000200000800000800010000000000880002800c00028005000100060000002c000180140003000000150000000000000000000000000014000400ff02000000000000000000000000000106001340000100000600020000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x8004) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000540)=@ethtool_rxfh_indir={0x0, 0x0, [0x1, 0x6, 0x4]}}) 454.48197ms ago: executing program 2 (id=2938): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="d1", 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0)={0x5}, 0x4) sendto$inet6(r1, &(0x7f0000000180)="b8", 0x1, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @loopback, 0xffffffff}, 0x1c) 131.738179ms ago: executing program 3 (id=2939): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000002c0)=0x33, 0x8) listen(r2, 0x8) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000600)={0xfffe, 0x8, "1000", 0x8}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0x2710}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x40800) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f00000003c0), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f0000000400)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000480)={'syzkaller1\x00', @broadcast}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x8c884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x6140, 0x0) write$tun(r7, &(0x7f0000000640)=ANY=[@ANYRESHEX=r5], 0xfdef) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000100)={'wlan1\x00', @random="0100008d8dff"}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='freezer.state\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r8, 0x8b14, &(0x7f0000000200)={'wlan1\x00', @random="0100"}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a3100000000050001"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0xc8850) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef80"], 0xfe33) 0s ago: executing program 2 (id=2940): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff0000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e24, 0x7f, @empty, 0x6}}, 0x0, 0x83}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040cc0300380012800b00010067656e657665000028000280140007000000000000000000000000000000000105000c00ffffffff050009000100000008000a00", @ANYRES32=r4], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000004c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x36, r4}) (async) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000004c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x36, r4}) kernel console output (not intermixed with test programs): k [ 442.351680][T14353] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 442.400669][T11230] lo speed is unknown, defaulting to 1000 [ 442.415366][T14356] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 442.419827][T14355] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 442.469317][T14351] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2035'. [ 442.469346][T14351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2035'. [ 442.469361][T14351] netlink: 'syz.3.2035': attribute type 1 has an invalid length. [ 442.471525][T14360] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2036'. [ 442.534161][ T5757] lo speed is unknown, defaulting to 1000 [ 442.534211][ T5756] lo speed is unknown, defaulting to 1000 [ 442.534231][ T5756] !!0: Port: 1 Link DOWN [ 442.715217][T14367] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 442.790874][T14367] syzkaller0: entered promiscuous mode [ 442.790901][T14367] syzkaller0: entered allmulticast mode [ 442.969473][T14386] FAULT_INJECTION: forcing a failure. [ 442.969473][T14386] name failslab, interval 1, probability 0, space 0, times 0 [ 442.969506][T14386] CPU: 0 UID: 0 PID: 14386 Comm: syz.4.2043 Not tainted syzkaller #0 PREEMPT(full) [ 442.969536][T14386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 442.969550][T14386] Call Trace: [ 442.969558][T14386] [ 442.969568][T14386] dump_stack_lvl+0xe8/0x150 [ 442.969610][T14386] should_fail_ex+0x3eb/0x540 [ 442.969644][T14386] should_failslab+0xa8/0x100 [ 442.969679][T14386] __kvmalloc_node_noprof+0x171/0x820 [ 442.969713][T14386] ? bpf_compute_idoms+0xcc/0x1940 [ 442.969736][T14386] ? bpf_compute_idoms+0xcc/0x1940 [ 442.969767][T14386] bpf_compute_idoms+0xcc/0x1940 [ 442.969800][T14386] ? __pfx_bpf_compute_subprog_ret_regs+0x10/0x10 [ 442.969828][T14386] ? prepare_subprog_args+0x40f/0x450 [ 442.969863][T14386] bpf_check+0x2cc3/0x34e0 [ 442.969900][T14386] ? ktime_get_with_offset+0x93/0x2d0 [ 442.969930][T14386] ? ktime_get_with_offset+0x93/0x2d0 [ 442.969962][T14386] ? __pfx_bpf_check+0x10/0x10 [ 442.969989][T14386] ? bpf_obj_name_cpy+0x194/0x1e0 [ 442.970022][T14386] bpf_prog_load+0x14da/0x1c60 [ 442.970067][T14386] ? __pfx_bpf_prog_load+0x10/0x10 [ 442.970107][T14386] ? __might_fault+0xaf/0x130 [ 442.970139][T14386] __sys_bpf+0xd86/0xe00 [ 442.970170][T14386] ? __pfx___sys_bpf+0x10/0x10 [ 442.970205][T14386] ? __fget_files+0x2a/0x420 [ 442.970252][T14386] ? ksys_write+0x242/0x270 [ 442.970285][T14386] ? __pfx_ksys_write+0x10/0x10 [ 442.970320][T14386] __x64_sys_bpf+0xba/0xd0 [ 442.970355][T14386] do_syscall_64+0x166/0x520 [ 442.970381][T14386] ? trace_irq_disable+0x3b/0x140 [ 442.970412][T14386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.970435][T14386] ? clear_bhb_loop+0x70/0xc0 [ 442.970463][T14386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.970486][T14386] RIP: 0033:0x7f8f0c19fb19 [ 442.970507][T14386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.970526][T14386] RSP: 002b:00007f8f0cffd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 442.970550][T14386] RAX: ffffffffffffffda RBX: 00007f8f0c425fa0 RCX: 00007f8f0c19fb19 [ 442.970567][T14386] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 442.970581][T14386] RBP: 00007f8f0cffd090 R08: 0000000000000000 R09: 0000000000000000 [ 442.970595][T14386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.970609][T14386] R13: 00007f8f0c426038 R14: 00007f8f0c425fa0 R15: 00007fff232caf78 [ 442.970646][T14386] [ 443.466570][T14384] netlink: 'syz.1.2042': attribute type 16 has an invalid length. [ 443.466595][T14384] netlink: 'syz.1.2042': attribute type 17 has an invalid length. [ 443.472455][T14397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2046'. [ 443.509813][T14384] tipc: Resetting bearer [ 443.540478][T14401] netlink: 'syz.0.2047': attribute type 15 has an invalid length. [ 443.639643][T14384] xfrm0: left allmulticast mode [ 443.830915][T14384] veth2: left allmulticast mode [ 443.857627][T14384] bond1: left allmulticast mode [ 443.859423][T14384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.878588][T14384] bridge1: left promiscuous mode [ 443.878620][T14384] bridge1: left allmulticast mode [ 443.903818][T14384] bond2: left promiscuous mode [ 443.903844][T14384] bridge3: left promiscuous mode [ 443.928921][T14384] vlan2: left allmulticast mode [ 443.929499][T14384] dummy0: left allmulticast mode [ 443.970174][T14384] 8021q: adding VLAN 0 to HW filter on device bond6 [ 443.986237][T14384] bond7: left promiscuous mode [ 443.988222][T14384] bond8: left promiscuous mode [ 443.988246][T14384] bond8: left allmulticast mode [ 443.988629][T14384] 8021q: adding VLAN 0 to HW filter on device bond8 [ 444.019824][T14384] 8021q: adding VLAN 0 to HW filter on device bond9 [ 444.037375][T14384] 8021q: adding VLAN 0 to HW filter on device bond10 [ 444.066516][T14384] 8021q: adding VLAN 0 to HW filter on device bond11 [ 444.192836][ T6535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 444.302312][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 444.323295][ T6535] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 444.343513][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 444.363939][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 444.383131][ T6535] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 444.404640][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 444.424216][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 444.486986][T14428] bond12: entered allmulticast mode [ 444.557415][T14445] FAULT_INJECTION: forcing a failure. [ 444.557415][T14445] name failslab, interval 1, probability 0, space 0, times 0 [ 444.557446][T14445] CPU: 0 UID: 0 PID: 14445 Comm: syz.2.2055 Not tainted syzkaller #0 PREEMPT(full) [ 444.557471][T14445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 444.557484][T14445] Call Trace: [ 444.557493][T14445] [ 444.557502][T14445] dump_stack_lvl+0xe8/0x150 [ 444.557544][T14445] should_fail_ex+0x3eb/0x540 [ 444.557576][T14445] should_failslab+0xa8/0x100 [ 444.557614][T14445] __kvmalloc_node_noprof+0x171/0x820 [ 444.557646][T14445] ? __kvmalloc_node_noprof+0x340/0x820 [ 444.557676][T14445] ? bpf_compute_scc+0x106/0xdb0 [ 444.557705][T14445] ? bpf_compute_scc+0x106/0xdb0 [ 444.557743][T14445] bpf_compute_scc+0x106/0xdb0 [ 444.557775][T14445] ? sort_subprogs_topo+0xe5f/0x1130 [ 444.557824][T14445] bpf_check+0x2c70/0x34e0 [ 444.557861][T14445] ? ktime_get_with_offset+0x93/0x2d0 [ 444.557893][T14445] ? ktime_get_with_offset+0x93/0x2d0 [ 444.557925][T14445] ? __pfx_bpf_check+0x10/0x10 [ 444.557952][T14445] ? bpf_obj_name_cpy+0x194/0x1e0 [ 444.557986][T14445] bpf_prog_load+0x14da/0x1c60 [ 444.558024][T14445] ? __pfx_bpf_prog_load+0x10/0x10 [ 444.558066][T14445] ? __might_fault+0xaf/0x130 [ 444.558106][T14445] __sys_bpf+0xd86/0xe00 [ 444.558138][T14445] ? __pfx___sys_bpf+0x10/0x10 [ 444.558173][T14445] ? __fget_files+0x2a/0x420 [ 444.558222][T14445] ? ksys_write+0x242/0x270 [ 444.558254][T14445] ? __pfx_ksys_write+0x10/0x10 [ 444.558290][T14445] __x64_sys_bpf+0xba/0xd0 [ 444.558330][T14445] do_syscall_64+0x166/0x520 [ 444.558356][T14445] ? trace_irq_disable+0x3b/0x140 [ 444.558387][T14445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.558410][T14445] ? clear_bhb_loop+0x70/0xc0 [ 444.558439][T14445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.558461][T14445] RIP: 0033:0x7f399cf9fb19 [ 444.558483][T14445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.558503][T14445] RSP: 002b:00007f399dd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 444.558527][T14445] RAX: ffffffffffffffda RBX: 00007f399d225fa0 RCX: 00007f399cf9fb19 [ 444.558544][T14445] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 444.558559][T14445] RBP: 00007f399dd97090 R08: 0000000000000000 R09: 0000000000000000 [ 444.558573][T14445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 444.558585][T14445] R13: 00007f399d226038 R14: 00007f399d225fa0 R15: 00007ffc861cf938 [ 444.558623][T14445] [ 444.828255][T14429] 8021q: adding VLAN 0 to HW filter on device bond13 [ 444.829654][T14429] bond13: entered allmulticast mode [ 444.830079][T14429] bond12: (slave bond13): Enslaving as an active interface with an up link [ 444.911967][ T5929] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 444.911991][ T5929] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 444.915334][ T5929] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 444.942911][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 444.961878][T14452] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 445.046994][T14455] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 445.075086][T14457] FAULT_INJECTION: forcing a failure. [ 445.075086][T14457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.075118][T14457] CPU: 0 UID: 0 PID: 14457 Comm: syz.4.2058 Not tainted syzkaller #0 PREEMPT(full) [ 445.075143][T14457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 445.075157][T14457] Call Trace: [ 445.075166][T14457] [ 445.075176][T14457] dump_stack_lvl+0xe8/0x150 [ 445.075217][T14457] should_fail_ex+0x3eb/0x540 [ 445.075251][T14457] _copy_to_user+0x31/0xb0 [ 445.075283][T14457] bpf_verifier_vlog+0x496/0x900 [ 445.075321][T14457] bpf_verifier_log_write+0x11d/0x1a0 [ 445.075355][T14457] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 445.075387][T14457] ? arg_track_eq+0x503/0x7a0 [ 445.075423][T14457] analyze_subprog+0x3153/0xac60 [ 445.075514][T14457] ? __pfx_analyze_subprog+0x10/0x10 [ 445.075543][T14457] ? kasan_save_track+0x4f/0x80 [ 445.075571][T14457] ? kasan_save_track+0x3e/0x80 [ 445.075598][T14457] ? __kasan_kmalloc+0x93/0xb0 [ 445.075626][T14457] ? __kvmalloc_node_noprof+0x50a/0x820 [ 445.075654][T14457] ? call_instance+0x263/0x560 [ 445.075680][T14457] ? bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 445.075708][T14457] ? bpf_compute_live_registers+0x10b0/0x1df0 [ 445.075737][T14457] ? bpf_check+0x2d0b/0x34e0 [ 445.075758][T14457] ? bpf_prog_load+0x14da/0x1c60 [ 445.075779][T14457] ? __sys_bpf+0xd86/0xe00 [ 445.075797][T14457] ? __x64_sys_bpf+0xba/0xd0 [ 445.075826][T14457] ? do_syscall_64+0x166/0x520 [ 445.075851][T14457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.075919][T14457] ? call_instance+0x263/0x560 [ 445.075953][T14457] ? rcu_is_watching+0x16/0xb0 [ 445.075986][T14457] ? call_instance+0x263/0x560 [ 445.076013][T14457] ? trace_kmalloc+0x2a/0xf0 [ 445.076040][T14457] ? call_instance+0x263/0x560 [ 445.076068][T14457] ? __kvmalloc_node_noprof+0x52a/0x820 [ 445.076099][T14457] ? __kvmalloc_node_noprof+0x340/0x820 [ 445.076128][T14457] ? call_instance+0x263/0x560 [ 445.076153][T14457] ? call_instance+0x263/0x560 [ 445.076200][T14457] bpf_compute_subprog_arg_access+0x2f1/0x15c0 [ 445.076258][T14457] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 445.076298][T14457] ? __kvmalloc_node_noprof+0x340/0x820 [ 445.076333][T14457] ? bpf_compute_live_registers+0x142/0x1df0 [ 445.076361][T14457] ? bpf_compute_live_registers+0x142/0x1df0 [ 445.076398][T14457] bpf_compute_live_registers+0x10b0/0x1df0 [ 445.076455][T14457] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 445.076499][T14457] bpf_check+0x2d0b/0x34e0 [ 445.076536][T14457] ? ktime_get_with_offset+0x93/0x2d0 [ 445.076567][T14457] ? ktime_get_with_offset+0x93/0x2d0 [ 445.076599][T14457] ? __pfx_bpf_check+0x10/0x10 [ 445.076626][T14457] ? bpf_obj_name_cpy+0x194/0x1e0 [ 445.076659][T14457] bpf_prog_load+0x14da/0x1c60 [ 445.076702][T14457] ? __pfx_bpf_prog_load+0x10/0x10 [ 445.076742][T14457] ? __might_fault+0xaf/0x130 [ 445.076773][T14457] __sys_bpf+0xd86/0xe00 [ 445.076805][T14457] ? __pfx___sys_bpf+0x10/0x10 [ 445.076840][T14457] ? __fget_files+0x2a/0x420 [ 445.076888][T14457] ? ksys_write+0x242/0x270 [ 445.076920][T14457] ? __pfx_ksys_write+0x10/0x10 [ 445.076962][T14457] __x64_sys_bpf+0xba/0xd0 [ 445.076998][T14457] do_syscall_64+0x166/0x520 [ 445.077024][T14457] ? trace_irq_disable+0x3b/0x140 [ 445.077054][T14457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.077077][T14457] ? clear_bhb_loop+0x70/0xc0 [ 445.077106][T14457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.077129][T14457] RIP: 0033:0x7f8f0c19fb19 [ 445.077150][T14457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.077175][T14457] RSP: 002b:00007f8f0cffd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 445.077199][T14457] RAX: ffffffffffffffda RBX: 00007f8f0c425fa0 RCX: 00007f8f0c19fb19 [ 445.077216][T14457] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 445.077230][T14457] RBP: 00007f8f0cffd090 R08: 0000000000000000 R09: 0000000000000000 [ 445.077244][T14457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 445.077258][T14457] R13: 00007f8f0c426038 R14: 00007f8f0c425fa0 R15: 00007fff232caf78 [ 445.077295][T14457] [ 445.424470][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 445.555235][T14455] bond14: entered promiscuous mode [ 445.555687][T14455] 8021q: adding VLAN 0 to HW filter on device bond14 [ 445.605746][T14462] macvtap0: entered allmulticast mode [ 445.621048][T14465] macvtap1: entered allmulticast mode [ 445.663056][T14464] syzkaller0: entered promiscuous mode [ 445.663082][T14464] syzkaller0: entered allmulticast mode [ 445.726794][T14471] __nla_validate_parse: 8 callbacks suppressed [ 445.726823][T14471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2061'. [ 445.850304][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 446.145230][T14496] FAULT_INJECTION: forcing a failure. [ 446.145230][T14496] name failslab, interval 1, probability 0, space 0, times 0 [ 446.145264][T14496] CPU: 0 UID: 0 PID: 14496 Comm: syz.0.2066 Not tainted syzkaller #0 PREEMPT(full) [ 446.145289][T14496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 446.145304][T14496] Call Trace: [ 446.145312][T14496] [ 446.145322][T14496] dump_stack_lvl+0xe8/0x150 [ 446.145366][T14496] should_fail_ex+0x3eb/0x540 [ 446.145400][T14496] should_failslab+0xa8/0x100 [ 446.145437][T14496] __kvmalloc_node_noprof+0x171/0x820 [ 446.145471][T14496] ? bpf_compute_scc+0xcbe/0xdb0 [ 446.145501][T14496] ? bpf_compute_scc+0xcbe/0xdb0 [ 446.145539][T14496] bpf_compute_scc+0xcbe/0xdb0 [ 446.145597][T14496] bpf_check+0x2c70/0x34e0 [ 446.145635][T14496] ? ktime_get_with_offset+0x93/0x2d0 [ 446.145666][T14496] ? ktime_get_with_offset+0x93/0x2d0 [ 446.145696][T14496] ? __pfx_bpf_check+0x10/0x10 [ 446.145722][T14496] ? bpf_obj_name_cpy+0x194/0x1e0 [ 446.145753][T14496] bpf_prog_load+0x14da/0x1c60 [ 446.145788][T14496] ? __pfx_bpf_prog_load+0x10/0x10 [ 446.145827][T14496] ? __might_fault+0xaf/0x130 [ 446.145855][T14496] __sys_bpf+0xd86/0xe00 [ 446.145884][T14496] ? __pfx___sys_bpf+0x10/0x10 [ 446.145918][T14496] ? __fget_files+0x2a/0x420 [ 446.145976][T14496] ? ksys_write+0x242/0x270 [ 446.146008][T14496] ? __pfx_ksys_write+0x10/0x10 [ 446.146044][T14496] __x64_sys_bpf+0xba/0xd0 [ 446.146080][T14496] do_syscall_64+0x166/0x520 [ 446.146105][T14496] ? trace_irq_disable+0x3b/0x140 [ 446.146134][T14496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.146156][T14496] ? clear_bhb_loop+0x70/0xc0 [ 446.146184][T14496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.146207][T14496] RIP: 0033:0x7f540ef9fb19 [ 446.146227][T14496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.146245][T14496] RSP: 002b:00007f540fe6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 446.146267][T14496] RAX: ffffffffffffffda RBX: 00007f540f225fa0 RCX: 00007f540ef9fb19 [ 446.146283][T14496] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 446.146298][T14496] RBP: 00007f540fe6f090 R08: 0000000000000000 R09: 0000000000000000 [ 446.146311][T14496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 446.146324][T14496] R13: 00007f540f226038 R14: 00007f540f225fa0 R15: 00007fff369cdf08 [ 446.146360][T14496] [ 447.192484][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'. [ 447.202424][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 447.202716][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 447.212713][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'. [ 447.220590][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'. [ 447.238711][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'. [ 447.252864][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'. [ 447.263443][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'. [ 447.284010][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'. [ 447.284227][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'. [ 447.330699][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'. [ 447.352297][ T13] net_ratelimit: 85 callbacks suppressed [ 447.352321][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.382374][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.382407][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 447.493503][ T261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.493538][ T261] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 447.604831][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.623757][ T261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.643601][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.673805][ T261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.696575][ T261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.778217][T14547] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 447.973057][T14553] FAULT_INJECTION: forcing a failure. [ 447.973057][T14553] name failslab, interval 1, probability 0, space 0, times 0 [ 447.973089][T14553] CPU: 0 UID: 0 PID: 14553 Comm: syz.3.2077 Not tainted syzkaller #0 PREEMPT(full) [ 447.973115][T14553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 447.973128][T14553] Call Trace: [ 447.973137][T14553] [ 447.973146][T14553] dump_stack_lvl+0xe8/0x150 [ 447.973188][T14553] should_fail_ex+0x3eb/0x540 [ 447.973221][T14553] should_failslab+0xa8/0x100 [ 447.973257][T14553] __kvmalloc_node_noprof+0x171/0x820 [ 447.973292][T14553] ? bpf_compute_scc+0xcbe/0xdb0 [ 447.973321][T14553] ? bpf_compute_scc+0xcbe/0xdb0 [ 447.973360][T14553] bpf_compute_scc+0xcbe/0xdb0 [ 447.973418][T14553] bpf_check+0x2c70/0x34e0 [ 447.973456][T14553] ? ktime_get_with_offset+0x93/0x2d0 [ 447.973487][T14553] ? ktime_get_with_offset+0x93/0x2d0 [ 447.973519][T14553] ? __pfx_bpf_check+0x10/0x10 [ 447.973547][T14553] ? bpf_obj_name_cpy+0x194/0x1e0 [ 447.973581][T14553] bpf_prog_load+0x14da/0x1c60 [ 447.973618][T14553] ? __pfx_bpf_prog_load+0x10/0x10 [ 447.973659][T14553] ? __might_fault+0xaf/0x130 [ 447.973700][T14553] __sys_bpf+0xd86/0xe00 [ 447.973734][T14553] ? __pfx___sys_bpf+0x10/0x10 [ 447.973769][T14553] ? __fget_files+0x2a/0x420 [ 447.973817][T14553] ? ksys_write+0x242/0x270 [ 447.973849][T14553] ? __pfx_ksys_write+0x10/0x10 [ 447.973885][T14553] __x64_sys_bpf+0xba/0xd0 [ 447.973921][T14553] do_syscall_64+0x166/0x520 [ 447.973947][T14553] ? trace_irq_disable+0x3b/0x140 [ 447.973977][T14553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.974000][T14553] ? clear_bhb_loop+0x70/0xc0 [ 447.974028][T14553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.974051][T14553] RIP: 0033:0x7f286ab9fb19 [ 447.974073][T14553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.974092][T14553] RSP: 002b:00007f286ba0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 447.974116][T14553] RAX: ffffffffffffffda RBX: 00007f286ae25fa0 RCX: 00007f286ab9fb19 [ 447.974133][T14553] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 447.974148][T14553] RBP: 00007f286ba0a090 R08: 0000000000000000 R09: 0000000000000000 [ 447.974162][T14553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 447.974175][T14553] R13: 00007f286ae26038 R14: 00007f286ae25fa0 R15: 00007ffdd4e36288 [ 447.974212][T14553] [ 448.802698][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 448.920523][T14580] geneve4: entered promiscuous mode [ 448.934337][T14580] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20003 [ 448.953087][T14588] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20003 [ 449.899875][T14628] netlink: 'syz.3.2097': attribute type 10 has an invalid length. [ 449.899919][T14628] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 449.910213][T14628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.925628][T14628] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 449.939060][T14628] team0: Port device netdevsim1 added [ 450.128018][T14637] netlink: 'syz.3.2097': attribute type 10 has an invalid length. [ 450.130850][T14637] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 450.161503][T14637] team0: Port device netdevsim1 removed [ 451.061076][T14677] netlink: 'syz.2.2107': attribute type 4 has an invalid length. [ 451.061100][T14677] __nla_validate_parse: 61 callbacks suppressed [ 451.061113][T14677] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2107'. [ 451.370851][T14694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2109'. [ 451.611193][T14705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2112'. [ 451.881954][T14714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2114'. [ 451.881992][T14714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2114'. [ 452.170801][T14729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2116'. [ 452.393008][ T1013] net_ratelimit: 94 callbacks suppressed [ 452.393032][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.414102][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.435197][ T5929] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.452355][ T5929] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.473111][ T261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.492419][ T6535] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.514284][ T261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.533895][ T261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.557113][ T261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.557147][ T261] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 452.611684][T14750] IPv6: NLM_F_CREATE should be specified when creating new route [ 452.672615][T14752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2121'. [ 452.800305][T14757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2126'. [ 452.820139][T14757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2126'. [ 452.860968][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2125'. [ 452.905879][T14758] tipc: Resetting bearer [ 452.906053][T14758] tipc: Resetting bearer [ 452.928069][T14758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 452.929439][T14758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 452.931160][T14758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 452.955598][T14758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 452.960296][T14758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.103967][ T6535] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.105729][ T261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.105859][ T261] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.105966][ T261] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.154583][T14775] netlink: 'syz.3.2128': attribute type 4 has an invalid length. [ 453.376354][T14782] syzkaller0: left promiscuous mode [ 453.376379][T14782] syzkaller0: left allmulticast mode [ 453.620619][T14792] vxcan1: tx address claim with dlc 0 [ 454.185937][T14811] bond19: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 454.212041][T14811] bond19 (unregistering): Released all slaves [ 454.243929][T14825] netlink: 'syz.1.2135': attribute type 63 has an invalid length. [ 454.491607][T14799] netlink: 'syz.0.2131': attribute type 21 has an invalid length. [ 454.865982][T14838] batman_adv: batadv0: Interface activated: syz_tun [ 454.871103][T14838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.871912][T14838] dummy0: left promiscuous mode [ 454.901451][T14838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.972779][T14838] veth1_macvtap: left promiscuous mode [ 454.974514][T14838] veth0_macvtap: entered promiscuous mode [ 454.977461][T14838] veth1_macvtap: entered promiscuous mode [ 455.053012][ T261] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.053787][ T261] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.112471][ T261] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.113757][ T5929] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.301304][T14856] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 455.301348][T14856] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 455.398266][T14863] IPv6: NLM_F_CREATE should be specified when creating new route [ 455.534496][T14865] x_tables: duplicate underflow at hook 1 [ 455.719851][T14873] batman_adv: batadv0: Adding interface: veth0 [ 455.719870][T14873] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.719902][T14873] batman_adv: batadv0: Interface activated: veth0 [ 455.987143][T14886] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 455.987170][T14886] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 456.069755][T14887] syzkaller0: entered promiscuous mode [ 456.069774][T14887] syzkaller0: entered allmulticast mode [ 456.803502][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 457.040625][T14817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 457.052887][T14826] netlink: 'syz.3.2136': attribute type 1 has an invalid length. [ 457.052912][T14826] __nla_validate_parse: 41 callbacks suppressed [ 457.052925][T14826] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2136'. [ 457.396559][T14913] netlink: 'syz.2.2153': attribute type 33 has an invalid length. [ 457.403817][ T8890] net_ratelimit: 124 callbacks suppressed [ 457.403842][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 457.403867][ T8890] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 457.514053][ T5929] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 457.514089][ T5929] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 457.622715][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 457.622750][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 457.669199][T14925] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 457.732360][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 457.752353][ T5929] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 457.773680][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 457.773715][ T8890] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 457.890212][T14943] netlink: 768 bytes leftover after parsing attributes in process `syz.1.2159'. [ 458.819479][T14982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2168'. [ 458.900188][T14951] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 458.918572][T14951] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 459.006956][T14951] Dev vda: unable to read RDB block 8 [ 459.007345][T14951] vda: unable to read partition table [ 459.043674][T14988] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20004 [ 459.175867][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2172'. [ 459.730311][T15022] syzkaller0: entered promiscuous mode [ 459.730337][T15022] syzkaller0: entered allmulticast mode [ 460.616376][T15060] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 460.635952][T15064] netlink: 'syz.2.2184': attribute type 1 has an invalid length. [ 460.712284][T15064] bond19: entered promiscuous mode [ 460.713302][T15064] 8021q: adding VLAN 0 to HW filter on device bond19 [ 461.049456][T15083] netlink: 'syz.4.2188': attribute type 28 has an invalid length. [ 461.049481][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2188'. [ 461.587797][T15092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2191'. [ 461.603535][T15092] Bluetooth: hci0: unsupported parameter 5135 [ 461.603558][T15092] Bluetooth: hci0: unsupported parameter 8192 [ 461.603573][T15092] Bluetooth: hci0: unsupported parameter 5135 [ 461.603585][T15092] Bluetooth: hci0: unsupported parameter 8192 [ 461.773696][T15102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2196'. [ 461.868112][T15113] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2199'. [ 461.891367][T15119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2198'. [ 462.220302][T15135] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2200'. [ 462.233200][T15137] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2200'. [ 462.373620][T15145] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2202'. [ 462.423001][ T5929] net_ratelimit: 101 callbacks suppressed [ 462.423026][ T5929] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.423051][ T5929] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 462.533242][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.552530][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.584325][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.602388][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.622422][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.644251][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.644284][ T1013] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 462.752533][ T5929] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.790439][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2207'. [ 462.910764][T15163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2209'. [ 463.028825][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2209'. [ 463.028912][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2209'. [ 463.373082][T15188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2212'. [ 463.815744][T15204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2219'. [ 463.815849][T15204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2219'. [ 464.103813][T15224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.418607][T15234] sctp: [Deprecated]: syz.3.2224 (pid 15234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.418607][T15234] Use struct sctp_sack_info instead [ 464.482587][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 464.634908][T15246] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20000 [ 464.997369][T15261] xt_TCPMSS: Only works on TCP SYN packets [ 465.123259][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 465.825589][T15303] syzkaller0: left promiscuous mode [ 465.825613][T15303] syzkaller0: left allmulticast mode [ 466.069777][T15301] rxe_eth0 speed is unknown, defaulting to 1000 [ 466.752997][T15337] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 466.852899][T15301] lo speed is unknown, defaulting to 1000 [ 467.482942][ T13] net_ratelimit: 109 callbacks suppressed [ 467.482969][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 467.482994][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 467.594004][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 467.594038][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 467.702345][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 467.702380][ T8890] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 467.812437][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 467.812471][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 467.819004][T15376] __nla_validate_parse: 5 callbacks suppressed [ 467.819024][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2254'. [ 467.819047][T15376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2254'. [ 467.923214][ T261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 467.945541][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.115748][T15379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2257'. [ 468.120257][T15391] netlink: 'syz.1.2259': attribute type 7 has an invalid length. [ 468.120281][T15391] netlink: 'syz.1.2259': attribute type 5 has an invalid length. [ 468.120297][T15391] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2259'. [ 468.261839][T15392] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2260'. [ 468.349092][T15399] ipvlan1: entered promiscuous mode [ 468.364020][T15399] bridge0: port 1(ipvlan1) entered blocking state [ 468.364152][T15399] bridge0: port 1(ipvlan1) entered disabled state [ 468.364328][T15399] ipvlan1: entered allmulticast mode [ 468.364345][T15399] bridge0: entered allmulticast mode [ 468.398547][T15399] ipvlan1: left allmulticast mode [ 468.398573][T15399] bridge0: left allmulticast mode [ 468.959397][T15424] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2267'. [ 468.959429][T15424] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2267'. [ 468.991082][T15424] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2267'. [ 469.020237][T15424] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2267'. [ 469.225670][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2269'. [ 469.238615][T15391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.303078][T15436] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 469.303109][T15436] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 470.697048][T15503] vlan0: entered allmulticast mode [ 470.975867][T15517] netlink: 'syz.2.2289': attribute type 32 has an invalid length. [ 471.530617][T15548] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 471.530676][T15548] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 471.789379][T15558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.789410][T15558] IPv6: NLM_F_CREATE should be set when creating new route [ 471.789458][T15558] IPv6: NLM_F_CREATE should be set when creating new route [ 472.162849][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 472.483651][T15583] dummy0: entered allmulticast mode [ 472.542722][ T8890] net_ratelimit: 97 callbacks suppressed [ 472.542746][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.542991][ T8890] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 472.653539][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.653573][ T1013] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 472.762524][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.762557][ T1013] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 472.874266][ T261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.874299][ T261] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 472.907899][T15594] __nla_validate_parse: 74 callbacks suppressed [ 472.907923][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2308'. [ 472.982356][ T6528] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.982398][ T6528] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 473.112987][T15603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2308'. [ 473.121301][T15606] sctp: [Deprecated]: syz.3.2304 (pid 15606) Use of int in max_burst socket option. [ 473.121301][T15606] Use struct sctp_assoc_value instead [ 473.849054][T15639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2315'. [ 473.933403][T15643] netlink: 'syz.3.2317': attribute type 2 has an invalid length. [ 473.933431][T15643] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2317'. [ 474.019937][T15643] netlink: 'syz.3.2317': attribute type 10 has an invalid length. [ 474.020172][T15643] dummy0: left promiscuous mode [ 474.071831][T15643] dummy0: entered promiscuous mode [ 474.106008][T15643] team0: Port device dummy0 added [ 474.359979][T15658] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 475.109230][T15684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2325'. [ 475.110173][T15688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2325'. [ 475.328959][T15697] netlink: 'syz.4.2328': attribute type 16 has an invalid length. [ 475.328983][T15697] netlink: 'syz.4.2328': attribute type 17 has an invalid length. [ 475.353684][T15696] netlink: 'syz.3.2326': attribute type 1 has an invalid length. [ 475.420979][T15699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2326'. [ 475.439174][T15694] tipc: Resetting bearer [ 475.440297][T15694] tipc: Resetting bearer [ 475.679250][T15711] FAULT_INJECTION: forcing a failure. [ 475.679250][T15711] name failslab, interval 1, probability 0, space 0, times 0 [ 475.679285][T15711] CPU: 1 UID: 0 PID: 15711 Comm: syz.2.2331 Not tainted syzkaller #0 PREEMPT(full) [ 475.679328][T15711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 475.679347][T15711] Call Trace: [ 475.679356][T15711] [ 475.679366][T15711] dump_stack_lvl+0xe8/0x150 [ 475.679409][T15711] should_fail_ex+0x3eb/0x540 [ 475.679443][T15711] should_failslab+0xa8/0x100 [ 475.679479][T15711] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 475.679510][T15711] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 475.679540][T15711] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 475.679574][T15711] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 475.679606][T15711] krealloc_node_align_noprof+0x19a/0x390 [ 475.679635][T15711] ? rcu_is_watching+0x16/0xb0 [ 475.679686][T15711] kvrealloc_node_align_noprof+0x7b/0xf0 [ 475.679721][T15711] add_expr+0x2fd/0x6e0 [ 475.679746][T15711] ? __kvmalloc_node_noprof+0x340/0x820 [ 475.679776][T15711] ? bpf_init_scev+0x167/0x460 [ 475.679808][T15711] bpf_init_scev+0x1a2/0x460 [ 475.679836][T15711] bpf_check+0x2fd8/0x34e0 [ 475.679873][T15711] ? ktime_get_with_offset+0x93/0x2d0 [ 475.679903][T15711] ? ktime_get_with_offset+0x93/0x2d0 [ 475.679935][T15711] ? __pfx_bpf_check+0x10/0x10 [ 475.679962][T15711] ? bpf_obj_name_cpy+0x194/0x1e0 [ 475.679995][T15711] bpf_prog_load+0x14da/0x1c60 [ 475.680033][T15711] ? __pfx_bpf_prog_load+0x10/0x10 [ 475.680074][T15711] ? __might_fault+0xaf/0x130 [ 475.680106][T15711] __sys_bpf+0xd86/0xe00 [ 475.680137][T15711] ? __pfx___sys_bpf+0x10/0x10 [ 475.680173][T15711] ? __fget_files+0x2a/0x420 [ 475.680221][T15711] ? ksys_write+0x242/0x270 [ 475.680253][T15711] ? __pfx_ksys_write+0x10/0x10 [ 475.680309][T15711] __x64_sys_bpf+0xba/0xd0 [ 475.680346][T15711] do_syscall_64+0x166/0x520 [ 475.680373][T15711] ? trace_irq_disable+0x3b/0x140 [ 475.680404][T15711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.680426][T15711] ? clear_bhb_loop+0x70/0xc0 [ 475.680452][T15711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.680475][T15711] RIP: 0033:0x7f399cf9fb19 [ 475.680496][T15711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.680516][T15711] RSP: 002b:00007f399dd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 475.680541][T15711] RAX: ffffffffffffffda RBX: 00007f399d225fa0 RCX: 00007f399cf9fb19 [ 475.680557][T15711] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 475.680570][T15711] RBP: 00007f399dd97090 R08: 0000000000000000 R09: 0000000000000000 [ 475.680585][T15711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 475.680598][T15711] R13: 00007f399d226038 R14: 00007f399d225fa0 R15: 00007ffc861cf938 [ 475.680633][T15711] [ 475.684235][T15697] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 476.014039][T15697] ipvlan2: left promiscuous mode [ 476.022040][T15696] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 476.028321][ T29] ip6_tunnel:  xmit: Local address not yet configured! [ 476.051427][ T29] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 476.064120][ T5757] ip6_tunnel:  xmit: Local address not yet configured! [ 476.139786][T15683] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.268649][T15683] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.427002][T15683] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.493611][ T29] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 476.721003][T15741] xt_hashlimit: size too large, truncated to 1048576 [ 476.725448][T15683] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.874684][T15745] veth7: entered allmulticast mode [ 477.043081][ T5929] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.152634][ T5929] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.152731][ T5929] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.152796][ T5929] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.330156][T15761] netlink: 'syz.4.2341': attribute type 1 has an invalid length. [ 477.330183][T15761] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2341'. [ 477.613847][ T5929] net_ratelimit: 136 callbacks suppressed [ 477.613872][ T5929] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 477.613896][ T5929] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 477.722336][ T5929] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 477.722370][ T5929] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 477.760247][T15781] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2346'. [ 477.832944][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 477.832978][ T1013] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 477.908544][T15794] netlink: 'syz.4.2348': attribute type 1 has an invalid length. [ 477.930747][T15787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2348'. [ 477.930826][T15787] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2348'. [ 477.953525][ T5929] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 477.953560][ T5929] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 478.064179][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.082784][ T5929] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.228093][T15801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2350'. [ 478.247298][T15799] batman_adv: batadv0: Interface deactivated: syz_tun [ 478.502005][T15799] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.613927][T15799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.672067][T15799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.941973][T15799] veth1_vlan: left allmulticast mode [ 479.283202][ T8890] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.283305][ T8890] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.283361][ T8890] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.283401][ T8890] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.576631][T15887] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2358'. [ 479.664921][T15892] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2358'. [ 479.689298][T15896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2359'. [ 479.756439][T15883] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2357'. [ 479.756467][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2357'. [ 479.857319][T15890] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2359'. [ 479.857358][T15890] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2359'. [ 480.359974][T15921] batman_adv: batadv0: Adding interface: syzkaller0 [ 480.359993][T15921] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.360025][T15921] batman_adv: batadv0: Interface activated: syzkaller0 [ 481.086473][T15940] rxe_eth0 speed is unknown, defaulting to 1000 [ 481.334934][T15965] netlink: 'syz.3.2370': attribute type 3 has an invalid length. [ 481.974193][T15931] IPVS: Scheduler module ip_vs_mh not found [ 482.368826][T15940] lo speed is unknown, defaulting to 1000 [ 482.632885][ T8890] net_ratelimit: 135 callbacks suppressed [ 482.632908][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.632933][ T8890] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 482.743349][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.774402][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.793015][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.813023][ T6535] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.832393][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.863213][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.885511][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.902908][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.930824][T16002] pim6reg: entered allmulticast mode [ 483.804623][T16041] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 483.804676][T16041] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 483.804706][T16041] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 483.804734][T16041] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 483.804763][T16041] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 483.804792][T16041] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 483.804821][T16041] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 483.804849][T16041] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 483.804878][T16041] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 483.804907][T16041] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 484.187265][T16044] siw: device registration error -23 [ 484.848362][T16083] batman_adv: batadv0: Interface deactivated: syz_tun [ 484.848405][T16083] batman_adv: batadv0: Removing interface: syz_tun [ 484.856482][T16083] batman_adv: batadv0: Interface deactivated: veth0 [ 484.856534][T16083] batman_adv: batadv0: Removing interface: veth0 [ 484.891592][T16083] bond4: (slave bridge2): Releasing backup interface [ 484.891622][T16083] bridge2: left promiscuous mode [ 484.891805][T16083] bridge2: left allmulticast mode [ 484.925086][T16083] bond5: (slave ip6gre1): Releasing backup interface [ 484.925116][T16083] ip6gre1: left promiscuous mode [ 484.932063][T16083] bond16: (slave ip6gretap1): Releasing active interface [ 484.958522][T16083] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 484.958547][T16083] batman_adv: batadv0: Removing interface: syzkaller0 [ 485.044880][T16091] vlan0: entered promiscuous mode [ 485.044907][T16091] gretap0: entered promiscuous mode [ 485.535121][T16100] __nla_validate_parse: 40 callbacks suppressed [ 485.535147][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2396'. [ 485.535195][T16100] nbd: must specify an index to disconnect [ 485.631616][T16107] block nbd3: shutting down sockets [ 485.740469][T16109] netlink: 'syz.4.2397': attribute type 2 has an invalid length. [ 485.962692][T16125] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2399'. [ 486.081475][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2399'. [ 486.237216][T16131] syzkaller1: entered promiscuous mode [ 486.237242][T16131] syzkaller1: entered allmulticast mode [ 486.371548][ T4952] block nbd3: Receive control failed (result -32) [ 486.480320][T16131] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 486.506150][T16127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.783523][T16158] netlink: 'syz.0.2405': attribute type 13 has an invalid length. [ 486.934540][T16164] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2407'. [ 486.934570][T16164] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2407'. [ 486.934588][T16164] netlink: 'syz.2.2407': attribute type 5 has an invalid length. [ 486.934618][T16164] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2407'. [ 487.037288][T16172] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2408'. [ 487.336661][T16187] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2411'. [ 487.626309][T16200] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 487.652753][ T8890] net_ratelimit: 93 callbacks suppressed [ 487.652798][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.652823][ T8890] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 487.770948][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.770984][ T1013] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 487.830885][T16204] netlink: 'syz.2.2416': attribute type 1 has an invalid length. [ 487.872662][ T5929] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.895018][ T5929] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.913198][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.932731][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.953561][ T5929] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.973650][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.989486][T16204] 8021q: adding VLAN 0 to HW filter on device bond20 [ 487.990323][T16208] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 488.104515][T16208] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2417'. [ 488.150328][T16210] bond20: (slave geneve2): making interface the new active one [ 488.167227][T16210] bond20: (slave geneve2): Enslaving as an active interface with an up link [ 488.319875][T16225] netlink: 'syz.2.2420': attribute type 4 has an invalid length. [ 488.355914][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2420'. [ 488.588241][T16235] bridge0: entered promiscuous mode [ 488.588284][T16235] bridge0: entered allmulticast mode [ 488.670475][T16238] netlink: 'syz.4.2423': attribute type 4 has an invalid length. [ 488.838392][T16242] netlink: 'syz.4.2423': attribute type 4 has an invalid length. [ 489.151321][T16247] NFSD: Failed to start, no listeners configured. [ 489.688023][T16303] IPv6: NLM_F_CREATE should be specified when creating new route [ 492.130661][T16265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 492.393589][T16333] __nla_validate_parse: 8 callbacks suppressed [ 492.393612][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2442'. [ 492.423114][T16333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2442'. [ 492.441329][T16330] cfg80211: Invalid regulatory domain detected: BB [ 492.737543][ T6528] net_ratelimit: 92 callbacks suppressed [ 492.737569][ T6528] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.737593][ T6528] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 492.842990][ T6528] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.862987][ T6528] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.882429][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.903671][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.923862][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.942878][ T6528] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.942912][ T6528] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 493.052868][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 493.264499][T16372] geneve3: entered promiscuous mode [ 493.293563][ T8890] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.293602][ T8890] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.445087][T16384] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 493.529995][T16388] nbd: socks must be embedded in a SOCK_ITEM attr [ 493.552432][ T5772] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 493.577525][T16384] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2455'. [ 493.634623][T16388] block nbd4: shutting down sockets [ 494.045592][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2459'. [ 494.289613][T16426] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2464'. [ 494.289814][T16426] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2464'. [ 494.563902][T15866] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 494.803876][T16444] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2468'. [ 494.909733][T16439] syzkaller0: entered promiscuous mode [ 494.909788][T16439] syzkaller0: entered allmulticast mode [ 494.959172][T16459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2469'. [ 494.978139][T16460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2469'. [ 495.202350][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 497.746065][ T8890] net_ratelimit: 183 callbacks suppressed [ 497.746092][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.763798][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.791324][ T261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.803372][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.828861][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.844588][ T261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.866839][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.894071][ T1013] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.913036][ T261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.932487][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 498.200369][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2472'. [ 498.200410][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2472'. [ 498.246900][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2472'. [ 498.246938][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2472'. [ 498.458477][T16499] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2475'. [ 498.523419][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2472'. [ 498.523459][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2472'. [ 498.615414][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2472'. [ 498.615455][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2472'. [ 498.738506][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2472'. [ 499.043229][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 499.356967][T16546] netlink: 'syz.3.2482': attribute type 4 has an invalid length. [ 499.423700][T16554] netlink: 'syz.3.2482': attribute type 4 has an invalid length. [ 499.861608][T16580] netlink: 'syz.4.2489': attribute type 1 has an invalid length. [ 499.964843][T16581] tipc: Resetting bearer [ 500.011707][T15866] lo speed is unknown, defaulting to 1000 [ 500.011797][T15866] !!0: Port: 1 Link ACTIVE [ 500.027184][T15866] ip6_tunnel:  xmit: Local address not yet configured! [ 500.041705][T15866] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 500.113165][T15866] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 500.230408][T16587] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 500.352081][T16590] syzkaller0: entered promiscuous mode [ 500.352100][T16590] syzkaller0: entered allmulticast mode [ 500.573093][T15866] ip6_tunnel:  xmit: Local address not yet configured! [ 501.605650][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.242883][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 502.243253][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 502.387506][T16548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.804278][ T8890] net_ratelimit: 116 callbacks suppressed [ 502.804303][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.832429][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.864278][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.883207][ T6528] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.903055][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.922337][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.952448][ T6528] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.973704][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 503.003147][ T6528] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 503.025488][ T8890] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 503.057329][T16602] tipc: Resetting bearer [ 503.387020][T16602] tipc: Resetting bearer [ 503.584809][T16611] ip6gre1: entered allmulticast mode [ 503.597651][T15814] syz1: Port: 1 Link DOWN [ 503.606049][ T5929] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.637099][ T5929] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 503.637135][ T5929] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.637183][ T5929] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.637211][ T5929] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 503.637239][ T5929] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.637276][ T5929] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.637305][ T5929] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 503.637333][ T5929] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.637372][ T5929] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.637400][ T5929] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 503.637428][ T5929] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.851392][T16622] Cannot find add_set index 0 as target [ 503.851566][T16622] Cannot find add_set index 0 as target [ 503.851705][T16622] Cannot find add_set index 0 as target [ 503.851860][T16622] Cannot find add_set index 0 as target [ 503.852008][T16622] Cannot find add_set index 0 as target [ 503.880792][T16622] Cannot find add_set index 0 as target [ 503.880973][T16622] Cannot find add_set index 0 as target [ 503.881118][T16622] Cannot find add_set index 0 as target [ 503.881265][T16622] Cannot find add_set index 0 as target [ 503.881406][T16622] Cannot find add_set index 0 as target [ 504.001111][T16630] netlink: 'syz.4.2506': attribute type 2 has an invalid length. [ 504.001137][T16630] __nla_validate_parse: 8 callbacks suppressed [ 504.001151][T16630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2506'. [ 504.371985][T16655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2510'. [ 504.530564][T16666] netlink: 'syz.4.2511': attribute type 1 has an invalid length. [ 504.530592][T16666] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2511'. [ 504.532025][T16666] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2511'. [ 506.869589][T16633] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 507.234517][T16683] syzkaller0: entered promiscuous mode [ 507.234544][T16683] syzkaller0: entered allmulticast mode [ 507.656999][ T6528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.657025][ T6528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.716060][T16723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2521'. [ 507.774724][T16715] pimreg9: entered allmulticast mode [ 508.084794][T16747] syzkaller0: left promiscuous mode [ 508.084819][T16747] syzkaller0: left allmulticast mode [ 508.164524][T16740] netlink: 'syz.3.2523': attribute type 10 has an invalid length. [ 508.179114][T16755] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2526'. [ 508.220366][T16759] nbd: must specify at least one socket [ 508.233404][T16755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2526'. [ 508.364277][T16766] net_ratelimit: 16 callbacks suppressed [ 508.364302][T16766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.401365][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2526'. [ 508.401389][T16755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2526'. [ 508.468733][T16757] bond21: entered promiscuous mode [ 508.468758][T16757] bond21: entered allmulticast mode [ 508.750794][T16779] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2529'. [ 509.651036][T16804] netlink: 'syz.3.2534': attribute type 1 has an invalid length. [ 509.700827][T16804] 8021q: adding VLAN 0 to HW filter on device bond19 [ 509.839139][T16804] bond19: (slave veth0_to_bond): making interface the new active one [ 509.859624][T16804] bond19: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 510.223801][T16832] nbd: couldn't find a device at index 0 [ 510.251707][T16832] netlink: 'syz.2.2541': attribute type 1 has an invalid length. [ 510.268232][T16831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2540'. [ 510.410150][T16832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2541'. [ 510.410464][T16834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2541'. [ 510.770805][T16844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2543'. [ 510.853434][T16840] netlink: 'syz.0.2542': attribute type 1 has an invalid length. [ 510.927774][T16844] tipc: Disabling bearer [ 511.066518][T16845] rxe_eth0 speed is unknown, defaulting to 1000 [ 511.100389][T16823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.431519][T16867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2547'. [ 511.546264][T16869] syzkaller1: entered promiscuous mode [ 511.546290][T16869] syzkaller1: entered allmulticast mode [ 511.717539][T16845] lo speed is unknown, defaulting to 1000 [ 512.005861][T16893] netlink: 'syz.2.2553': attribute type 3 has an invalid length. [ 512.347738][ T30] audit: type=1804 audit(1793876217.323:10): pid=16903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2557" name="/newroot/539/cgroup.controllers" dev="tmpfs" ino=2782 res=1 errno=0 [ 512.347799][ T30] audit: type=1800 audit(1793876217.323:11): pid=16903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2557" name="cgroup.controllers" dev="tmpfs" ino=2782 res=0 errno=-22 [ 512.353759][T16905] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2556'. [ 512.354053][T16905] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2556'. [ 512.900145][T16926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2562'. [ 513.066436][T16931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2563'. [ 513.122479][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 513.160758][T16931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2563'. [ 513.379279][T16952] FAULT_INJECTION: forcing a failure. [ 513.379279][T16952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.379314][T16952] CPU: 1 UID: 0 PID: 16952 Comm: syz.4.2567 Not tainted syzkaller #0 PREEMPT(full) [ 513.379338][T16952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 513.379351][T16952] Call Trace: [ 513.379359][T16952] [ 513.379368][T16952] dump_stack_lvl+0xe8/0x150 [ 513.379409][T16952] should_fail_ex+0x3eb/0x540 [ 513.379442][T16952] _copy_to_user+0x31/0xb0 [ 513.379474][T16952] bpf_verifier_vlog+0x496/0x900 [ 513.379513][T16952] bpf_verifier_log_write+0x11d/0x1a0 [ 513.379544][T16952] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 513.379574][T16952] ? arg_track_eq+0xd9/0x7a0 [ 513.379609][T16952] analyze_subprog+0x3172/0xac60 [ 513.379694][T16952] ? __pfx_analyze_subprog+0x10/0x10 [ 513.379722][T16952] ? kasan_save_track+0x4f/0x80 [ 513.379749][T16952] ? kasan_save_track+0x3e/0x80 [ 513.379780][T16952] ? __kasan_kmalloc+0x93/0xb0 [ 513.379807][T16952] ? __kvmalloc_node_noprof+0x50a/0x820 [ 513.379835][T16952] ? call_instance+0x263/0x560 [ 513.379859][T16952] ? bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 513.379886][T16952] ? bpf_compute_live_registers+0x10b0/0x1df0 [ 513.379914][T16952] ? bpf_check+0x2d0b/0x34e0 [ 513.379933][T16952] ? bpf_prog_load+0x14da/0x1c60 [ 513.379953][T16952] ? __sys_bpf+0xd86/0xe00 [ 513.379970][T16952] ? __x64_sys_bpf+0xba/0xd0 [ 513.379998][T16952] ? do_syscall_64+0x166/0x520 [ 513.380023][T16952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.380096][T16952] ? call_instance+0x263/0x560 [ 513.380124][T16952] ? rcu_is_watching+0x16/0xb0 [ 513.380156][T16952] ? call_instance+0x263/0x560 [ 513.380194][T16952] ? trace_kmalloc+0x2a/0xf0 [ 513.380222][T16952] ? call_instance+0x263/0x560 [ 513.380256][T16952] ? __kvmalloc_node_noprof+0x52a/0x820 [ 513.380288][T16952] ? __kvmalloc_node_noprof+0x340/0x820 [ 513.380317][T16952] ? call_instance+0x263/0x560 [ 513.380343][T16952] ? call_instance+0x263/0x560 [ 513.380391][T16952] bpf_compute_subprog_arg_access+0x2f1/0x15c0 [ 513.380463][T16952] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 513.380507][T16952] ? __kvmalloc_node_noprof+0x340/0x820 [ 513.380536][T16952] ? bpf_compute_live_registers+0x142/0x1df0 [ 513.380571][T16952] ? bpf_compute_live_registers+0x142/0x1df0 [ 513.380610][T16952] bpf_compute_live_registers+0x10b0/0x1df0 [ 513.380667][T16952] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 513.380711][T16952] bpf_check+0x2d0b/0x34e0 [ 513.380748][T16952] ? ktime_get_with_offset+0x93/0x2d0 [ 513.380780][T16952] ? ktime_get_with_offset+0x93/0x2d0 [ 513.380811][T16952] ? __pfx_bpf_check+0x10/0x10 [ 513.380837][T16952] ? bpf_obj_name_cpy+0x194/0x1e0 [ 513.380869][T16952] bpf_prog_load+0x14da/0x1c60 [ 513.380903][T16952] ? __pfx_bpf_prog_load+0x10/0x10 [ 513.380944][T16952] ? __might_fault+0xaf/0x130 [ 513.380976][T16952] __sys_bpf+0xd86/0xe00 [ 513.381009][T16952] ? __pfx___sys_bpf+0x10/0x10 [ 513.381044][T16952] ? __fget_files+0x2a/0x420 [ 513.381092][T16952] ? ksys_write+0x242/0x270 [ 513.381125][T16952] ? __pfx_ksys_write+0x10/0x10 [ 513.381160][T16952] __x64_sys_bpf+0xba/0xd0 [ 513.381196][T16952] do_syscall_64+0x166/0x520 [ 513.381221][T16952] ? trace_irq_disable+0x3b/0x140 [ 513.381260][T16952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.381284][T16952] ? clear_bhb_loop+0x70/0xc0 [ 513.381311][T16952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.381334][T16952] RIP: 0033:0x7f8f0c19fb19 [ 513.381356][T16952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.381375][T16952] RSP: 002b:00007f8f0cffd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 513.381400][T16952] RAX: ffffffffffffffda RBX: 00007f8f0c425fa0 RCX: 00007f8f0c19fb19 [ 513.381417][T16952] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 513.381432][T16952] RBP: 00007f8f0cffd090 R08: 0000000000000000 R09: 0000000000000000 [ 513.381446][T16952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 513.381459][T16952] R13: 00007f8f0c426038 R14: 00007f8f0c425fa0 R15: 00007fff232caf78 [ 513.381497][T16952] [ 513.851911][T16963] netlink: 'syz.2.2572': attribute type 1 has an invalid length. [ 514.397152][T16992] netlink: 'syz.3.2579': attribute type 1 has an invalid length. [ 515.083905][T17011] ip6gre2: entered promiscuous mode [ 515.083930][T17011] ip6gre2: entered allmulticast mode [ 515.111386][T17014] FAULT_INJECTION: forcing a failure. [ 515.111386][T17014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.111418][T17014] CPU: 1 UID: 0 PID: 17014 Comm: syz.2.2583 Not tainted syzkaller #0 PREEMPT(full) [ 515.111444][T17014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 515.111458][T17014] Call Trace: [ 515.111467][T17014] [ 515.111477][T17014] dump_stack_lvl+0xe8/0x150 [ 515.111530][T17014] should_fail_ex+0x3eb/0x540 [ 515.111564][T17014] _copy_to_user+0x31/0xb0 [ 515.111605][T17014] bpf_verifier_vlog+0x496/0x900 [ 515.111645][T17014] bpf_verifier_log_write+0x11d/0x1a0 [ 515.111678][T17014] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 515.111709][T17014] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 515.111741][T17014] verbose_arg_track+0x161/0x610 [ 515.111776][T17014] analyze_subprog+0x317d/0xac60 [ 515.111868][T17014] ? __pfx_analyze_subprog+0x10/0x10 [ 515.111895][T17014] ? kasan_save_track+0x4f/0x80 [ 515.111922][T17014] ? kasan_save_track+0x3e/0x80 [ 515.111948][T17014] ? __kasan_kmalloc+0x93/0xb0 [ 515.111976][T17014] ? __kvmalloc_node_noprof+0x50a/0x820 [ 515.112002][T17014] ? call_instance+0x263/0x560 [ 515.112027][T17014] ? bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 515.112057][T17014] ? bpf_compute_live_registers+0x10b0/0x1df0 [ 515.112084][T17014] ? bpf_check+0x2d0b/0x34e0 [ 515.112104][T17014] ? bpf_prog_load+0x14da/0x1c60 [ 515.112122][T17014] ? __sys_bpf+0xd86/0xe00 [ 515.112139][T17014] ? __x64_sys_bpf+0xba/0xd0 [ 515.112168][T17014] ? do_syscall_64+0x166/0x520 [ 515.112192][T17014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.112261][T17014] ? call_instance+0x263/0x560 [ 515.112288][T17014] ? rcu_is_watching+0x16/0xb0 [ 515.112322][T17014] ? call_instance+0x263/0x560 [ 515.112348][T17014] ? trace_kmalloc+0x2a/0xf0 [ 515.112376][T17014] ? call_instance+0x263/0x560 [ 515.112403][T17014] ? __kvmalloc_node_noprof+0x52a/0x820 [ 515.112440][T17014] ? __kvmalloc_node_noprof+0x340/0x820 [ 515.112469][T17014] ? call_instance+0x263/0x560 [ 515.112495][T17014] ? call_instance+0x263/0x560 [ 515.112543][T17014] bpf_compute_subprog_arg_access+0x2f1/0x15c0 [ 515.112607][T17014] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 515.112649][T17014] ? __kvmalloc_node_noprof+0x340/0x820 [ 515.112678][T17014] ? bpf_compute_live_registers+0x142/0x1df0 [ 515.112707][T17014] ? bpf_compute_live_registers+0x142/0x1df0 [ 515.112745][T17014] bpf_compute_live_registers+0x10b0/0x1df0 [ 515.112802][T17014] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 515.112846][T17014] bpf_check+0x2d0b/0x34e0 [ 515.112884][T17014] ? ktime_get_with_offset+0x93/0x2d0 [ 515.112915][T17014] ? ktime_get_with_offset+0x93/0x2d0 [ 515.112947][T17014] ? __pfx_bpf_check+0x10/0x10 [ 515.112974][T17014] ? bpf_obj_name_cpy+0x194/0x1e0 [ 515.113007][T17014] bpf_prog_load+0x14da/0x1c60 [ 515.113044][T17014] ? __pfx_bpf_prog_load+0x10/0x10 [ 515.113085][T17014] ? __might_fault+0xaf/0x130 [ 515.113117][T17014] __sys_bpf+0xd86/0xe00 [ 515.113148][T17014] ? __pfx___sys_bpf+0x10/0x10 [ 515.113183][T17014] ? __fget_files+0x2a/0x420 [ 515.113232][T17014] ? ksys_write+0x242/0x270 [ 515.113264][T17014] ? __pfx_ksys_write+0x10/0x10 [ 515.113300][T17014] __x64_sys_bpf+0xba/0xd0 [ 515.113336][T17014] do_syscall_64+0x166/0x520 [ 515.113361][T17014] ? trace_irq_disable+0x3b/0x140 [ 515.113392][T17014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.113415][T17014] ? clear_bhb_loop+0x70/0xc0 [ 515.113448][T17014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.113471][T17014] RIP: 0033:0x7f399cf9fb19 [ 515.113493][T17014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.113512][T17014] RSP: 002b:00007f399dd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 515.113537][T17014] RAX: ffffffffffffffda RBX: 00007f399d225fa0 RCX: 00007f399cf9fb19 [ 515.113554][T17014] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 515.113574][T17014] RBP: 00007f399dd97090 R08: 0000000000000000 R09: 0000000000000000 [ 515.113594][T17014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 515.113607][T17014] R13: 00007f399d226038 R14: 00007f399d225fa0 R15: 00007ffc861cf938 [ 515.113643][T17014] [ 515.660419][T16979] syzkaller1: entered promiscuous mode [ 515.660446][T16979] syzkaller1: entered allmulticast mode [ 516.062718][T17028] __nla_validate_parse: 4 callbacks suppressed [ 516.062743][T17028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2587'. [ 516.155233][T17030] ip_tables: iptables: counters copy to user failed while replacing table [ 516.208438][T17028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2587'. [ 516.288172][T17041] xt_cgroup: no path or classid specified [ 516.573817][T17048] ip_tables: iptables: counters copy to user failed while replacing table [ 516.765509][T17067] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 516.768437][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2594'. [ 516.804703][T17068] ip6tnl6: entered allmulticast mode [ 516.807841][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2594'. [ 516.849588][T17067] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2591'. [ 516.890852][T17074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2595'. [ 517.113579][T17083] netlink: 'syz.4.2596': attribute type 12 has an invalid length. [ 517.134348][T17083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2596'. [ 517.734886][T17109] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2601'. [ 517.875893][T17123] batman_adv: batadv0: Removing interface: syz_tun [ 517.906773][T17123] bridge_slave_0: left allmulticast mode [ 517.906802][T17123] bridge_slave_0: left promiscuous mode [ 517.907104][T17123] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.945278][T17123] bridge_slave_1: left allmulticast mode [ 517.945306][T17123] bridge_slave_1: left promiscuous mode [ 517.945715][T17123] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.955059][T17123] bond3: (slave veth0_to_bond): Releasing backup interface [ 517.995373][T17123] veth0_to_bond: left promiscuous mode [ 517.995581][T17123] veth0_to_bond: left allmulticast mode [ 518.021010][T17123] bond0: (slave bond_slave_0): Releasing backup interface [ 518.056518][T17123] bond0: (slave bond_slave_1): Releasing backup interface [ 518.061923][T17123] team0: Port device team_slave_0 removed [ 518.080222][T17123] team0: Port device team_slave_1 removed [ 518.080629][T17123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.088168][T17123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.106073][T17123] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 518.120149][T17121] team0: Port device xfrm0 added [ 518.308395][T17132] bridge13: entered promiscuous mode [ 518.308421][T17132] bridge13: entered allmulticast mode [ 518.343411][T17132] team0: Port device bridge13 added [ 518.454890][T17108] netlink: 'syz.3.2603': attribute type 29 has an invalid length. [ 518.779627][T17158] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2610'. [ 518.779659][T17158] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2610'. [ 519.424997][T17180] bridge0: entered promiscuous mode [ 519.436628][T17180] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.436932][T17180] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.441800][T17180] bridge_slave_0: entered allmulticast mode [ 519.461378][T17180] bridge_slave_0: entered promiscuous mode [ 519.468230][T17180] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.468393][T17180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.529693][T17180] bridge_slave_0: left allmulticast mode [ 519.529725][T17180] bridge_slave_0: left promiscuous mode [ 519.531151][T17180] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.954879][T17199] ip_tables: iptables: counters copy to user failed while replacing table [ 520.011941][T17199] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 520.287684][T17208] 0: reclassify loop, rule prio 0, protocol 03 [ 520.525895][T17218] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 521.091488][T17248] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 521.545516][T17276] __nla_validate_parse: 2 callbacks suppressed [ 521.545539][T17276] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2633'. [ 521.881961][T17257] bond10: entered allmulticast mode [ 521.888067][T17257] 8021q: adding VLAN 0 to HW filter on device bond10 [ 522.053366][T17291] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2635'. [ 522.098262][T17289] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2635'. [ 522.225312][T17295] tipc: Enabled bearer , priority 0 [ 522.236323][T17299] netlink: 'syz.1.2638': attribute type 16 has an invalid length. [ 522.236348][T17299] netlink: 'syz.1.2638': attribute type 17 has an invalid length. [ 522.292396][T17295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2637'. [ 522.299793][T17300] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 522.418239][T17302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2642'. [ 522.472917][T17310] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2639'. [ 522.594053][T17316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.676864][T17322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2645'. [ 522.826009][T17328] No such timeout policy "syz0" [ 522.870416][T17333] FAULT_INJECTION: forcing a failure. [ 522.870416][T17333] name failslab, interval 1, probability 0, space 0, times 0 [ 522.870450][T17333] CPU: 0 UID: 0 PID: 17333 Comm: syz.4.2647 Not tainted syzkaller #0 PREEMPT(full) [ 522.870475][T17333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 522.870500][T17333] Call Trace: [ 522.870509][T17333] [ 522.870519][T17333] dump_stack_lvl+0xe8/0x150 [ 522.870561][T17333] should_fail_ex+0x3eb/0x540 [ 522.870594][T17333] should_failslab+0xa8/0x100 [ 522.870634][T17333] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 522.870666][T17333] ? copy_array+0x63/0xf0 [ 522.870694][T17333] ? copy_array+0x63/0xf0 [ 522.870727][T17333] ? copy_array+0x63/0xf0 [ 522.870758][T17333] krealloc_node_align_noprof+0x19a/0x390 [ 522.870790][T17333] ? rcu_is_watching+0x16/0xb0 [ 522.870827][T17333] copy_array+0x63/0xf0 [ 522.870858][T17333] bpf_copy_verifier_state+0xad/0x1300 [ 522.870890][T17333] ? bpf_split_cur_state+0xa8/0x1680 [ 522.870932][T17333] bpf_split_cur_state+0xadd/0x1680 [ 522.870976][T17333] do_check_common+0x4070/0x7590 [ 522.871065][T17333] ? __pfx_do_check_common+0x10/0x10 [ 522.871093][T17333] ? __pfx_verbose+0x10/0x10 [ 522.871122][T17333] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 522.871167][T17333] ? mark_fastcall_patterns+0x10e1/0x1140 [ 522.871216][T17333] do_check_main+0x95/0x1f0 [ 522.871245][T17333] bpf_check+0x302b/0x34e0 [ 522.871281][T17333] ? ktime_get_with_offset+0x93/0x2d0 [ 522.871313][T17333] ? ktime_get_with_offset+0x93/0x2d0 [ 522.871344][T17333] ? __pfx_bpf_check+0x10/0x10 [ 522.871371][T17333] ? bpf_obj_name_cpy+0x194/0x1e0 [ 522.871405][T17333] bpf_prog_load+0x14da/0x1c60 [ 522.871442][T17333] ? __pfx_bpf_prog_load+0x10/0x10 [ 522.871492][T17333] ? __might_fault+0xaf/0x130 [ 522.871524][T17333] __sys_bpf+0xd86/0xe00 [ 522.871557][T17333] ? __pfx___sys_bpf+0x10/0x10 [ 522.871594][T17333] ? __fget_files+0x2a/0x420 [ 522.871643][T17333] ? ksys_write+0x242/0x270 [ 522.871675][T17333] ? __pfx_ksys_write+0x10/0x10 [ 522.871712][T17333] __x64_sys_bpf+0xba/0xd0 [ 522.871749][T17333] do_syscall_64+0x166/0x520 [ 522.871775][T17333] ? trace_irq_disable+0x3b/0x140 [ 522.871806][T17333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.871830][T17333] ? clear_bhb_loop+0x70/0xc0 [ 522.871859][T17333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.871882][T17333] RIP: 0033:0x7f8f0c19fb19 [ 522.871903][T17333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.871922][T17333] RSP: 002b:00007f8f0cffd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 522.871947][T17333] RAX: ffffffffffffffda RBX: 00007f8f0c425fa0 RCX: 00007f8f0c19fb19 [ 522.871964][T17333] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 522.871978][T17333] RBP: 00007f8f0cffd090 R08: 0000000000000000 R09: 0000000000000000 [ 522.871999][T17333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 522.872012][T17333] R13: 00007f8f0c426038 R14: 00007f8f0c425fa0 R15: 00007fff232caf78 [ 522.872051][T17333] [ 522.916282][T17332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2648'. [ 523.443993][T17352] ip_tables: iptables: counters copy to user failed while replacing table [ 523.513813][T17354] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2651'. [ 523.565879][T17346] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2651'. [ 523.711019][T17346] bridge0: left promiscuous mode [ 523.711056][T17346] bridge0: left allmulticast mode [ 524.144227][T17358] syzkaller1: entered promiscuous mode [ 524.144251][T17358] syzkaller1: entered allmulticast mode [ 524.317936][T17385] FAULT_INJECTION: forcing a failure. [ 524.317936][T17385] name failslab, interval 1, probability 0, space 0, times 0 [ 524.317971][T17385] CPU: 0 UID: 0 PID: 17385 Comm: syz.2.2660 Not tainted syzkaller #0 PREEMPT(full) [ 524.317996][T17385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 524.318010][T17385] Call Trace: [ 524.318019][T17385] [ 524.318029][T17385] dump_stack_lvl+0xe8/0x150 [ 524.318070][T17385] should_fail_ex+0x3eb/0x540 [ 524.318102][T17385] should_failslab+0xa8/0x100 [ 524.318138][T17385] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 524.318168][T17385] ? lockdep_hardirqs_on+0x7b/0x110 [ 524.318193][T17385] ? bpf_push_jmp_history+0x32b/0xb00 [ 524.318224][T17385] ? bpf_push_jmp_history+0x32b/0xb00 [ 524.318260][T17385] ? bpf_push_jmp_history+0x32b/0xb00 [ 524.318295][T17385] krealloc_node_align_noprof+0x19a/0x390 [ 524.318332][T17385] bpf_push_jmp_history+0x32b/0xb00 [ 524.318377][T17385] do_check_common+0x4285/0x7590 [ 524.318471][T17385] ? __pfx_do_check_common+0x10/0x10 [ 524.318498][T17385] ? __pfx_verbose+0x10/0x10 [ 524.318527][T17385] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 524.318572][T17385] ? mark_fastcall_patterns+0x10e1/0x1140 [ 524.318619][T17385] do_check_main+0x95/0x1f0 [ 524.318646][T17385] bpf_check+0x302b/0x34e0 [ 524.318682][T17385] ? ktime_get_with_offset+0x93/0x2d0 [ 524.318712][T17385] ? ktime_get_with_offset+0x93/0x2d0 [ 524.318746][T17385] ? __pfx_bpf_check+0x10/0x10 [ 524.318774][T17385] ? bpf_obj_name_cpy+0x194/0x1e0 [ 524.318806][T17385] bpf_prog_load+0x14da/0x1c60 [ 524.318844][T17385] ? __pfx_bpf_prog_load+0x10/0x10 [ 524.318885][T17385] ? __might_fault+0xaf/0x130 [ 524.318915][T17385] __sys_bpf+0xd86/0xe00 [ 524.318947][T17385] ? __pfx___sys_bpf+0x10/0x10 [ 524.318982][T17385] ? __fget_files+0x2a/0x420 [ 524.319032][T17385] ? ksys_write+0x242/0x270 [ 524.319065][T17385] ? __pfx_ksys_write+0x10/0x10 [ 524.319101][T17385] __x64_sys_bpf+0xba/0xd0 [ 524.319137][T17385] do_syscall_64+0x166/0x520 [ 524.319162][T17385] ? trace_irq_disable+0x3b/0x140 [ 524.319193][T17385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.319216][T17385] ? clear_bhb_loop+0x70/0xc0 [ 524.319245][T17385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.319268][T17385] RIP: 0033:0x7f399cf9fb19 [ 524.319289][T17385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.319309][T17385] RSP: 002b:00007f399dd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 524.319334][T17385] RAX: ffffffffffffffda RBX: 00007f399d225fa0 RCX: 00007f399cf9fb19 [ 524.319351][T17385] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 524.319366][T17385] RBP: 00007f399dd97090 R08: 0000000000000000 R09: 0000000000000000 [ 524.319380][T17385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 524.319393][T17385] R13: 00007f399d226038 R14: 00007f399d225fa0 R15: 00007ffc861cf938 [ 524.319437][T17385] [ 525.160966][T17415] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 526.170819][T17457] netlink: 'syz.1.2677': attribute type 30 has an invalid length. [ 526.207143][T17457] vxlan0: entered promiscuous mode [ 526.207168][T17457] vxlan0: entered allmulticast mode [ 526.231664][T17457] netlink: 'syz.1.2677': attribute type 30 has an invalid length. [ 526.235595][T17457] netlink: 'syz.1.2677': attribute type 30 has an invalid length. [ 526.251837][T17457] netlink: 'syz.1.2677': attribute type 30 has an invalid length. [ 526.255083][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.255413][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.255519][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.255647][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.320654][T17457] netlink: 'syz.1.2677': attribute type 30 has an invalid length. [ 526.331119][T17457] netlink: 'syz.1.2677': attribute type 30 has an invalid length. [ 526.340312][T17457] netlink: 'syz.1.2677': attribute type 30 has an invalid length. [ 526.340988][T17457] netlink: 'syz.1.2677': attribute type 30 has an invalid length. [ 526.358594][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b6a0000: rx timeout, send abort [ 526.367277][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b6a0000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 526.816424][T17474] tun0: tun_chr_ioctl cmd 1074025677 [ 526.816547][T17474] tun0: linktype set to 778 [ 526.881567][T17474] tun0: tun_chr_ioctl cmd 1074025676 [ 526.881593][T17474] tun0: owner set to 60929 [ 526.971426][T17478] veth8: entered allmulticast mode [ 527.597276][T17506] __nla_validate_parse: 16 callbacks suppressed [ 527.597298][T17506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2686'. [ 528.541827][T17496] ip6erspan0: entered allmulticast mode [ 528.671502][T17523] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 528.720518][T17525] dvmrp8: entered allmulticast mode [ 529.051530][T17538] validate_nla: 1 callbacks suppressed [ 529.051551][T17538] netlink: 'syz.1.2693': attribute type 1 has an invalid length. [ 529.118515][T17548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2695'. [ 529.157984][ T4952] block nbd6: Receive control failed (result -107) [ 529.228835][T17538] 8021q: adding VLAN 0 to HW filter on device bond16 [ 529.575841][T17575] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2699'. [ 529.894604][T17586] nbd: must specify a size in bytes for the device [ 529.984211][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 529.984315][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 529.984450][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 529.984544][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 529.984641][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 529.984733][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 529.984828][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 529.984921][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 529.985016][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 529.985164][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 529.985255][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 529.985346][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 529.985442][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 529.985533][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 529.987247][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 529.987382][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 529.987488][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 529.987588][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 529.987689][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 529.987790][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 529.987893][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 529.987994][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 529.988100][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 529.988227][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 529.988329][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 529.988429][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 529.988530][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 529.988630][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 529.995582][T17593] tun0: tun_chr_ioctl cmd 1074025673 [ 530.027090][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 530.027370][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 530.027594][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 530.027921][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 530.028158][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 530.028383][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 530.029780][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 530.030150][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 530.030428][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 530.030692][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 530.030945][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 530.031266][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 530.031419][T17592] tun0: tun_chr_ioctl cmd 2147767517 [ 530.045020][T17593] tun0: tun_chr_ioctl cmd 1074025673 [ 530.080600][T17591] tun0: tun_chr_ioctl cmd 1074025673 [ 530.085642][T17593] tun0: tun_chr_ioctl cmd 1074025673 [ 530.413254][T17607] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2704'. [ 530.420883][T17606] netlink: 'syz.4.2704': attribute type 1 has an invalid length. [ 530.421128][T17606] netlink: 'syz.4.2704': attribute type 1 has an invalid length. [ 530.421362][T17606] netlink: 'syz.4.2704': attribute type 1 has an invalid length. [ 530.421591][T17606] netlink: 'syz.4.2704': attribute type 1 has an invalid length. [ 530.421816][T17606] netlink: 'syz.4.2704': attribute type 1 has an invalid length. [ 530.422050][T17606] netlink: 'syz.4.2704': attribute type 1 has an invalid length. [ 530.485720][T17606] netlink: 'syz.4.2704': attribute type 1 has an invalid length. [ 530.528058][T17614] netlink: 'syz.1.2705': attribute type 1 has an invalid length. [ 530.528083][T17614] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2705'. [ 531.168886][T17606] netlink: 'syz.4.2704': attribute type 1 has an invalid length. [ 531.175887][T17642] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 531.409642][T17643] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2710'. [ 531.654759][T17655] ip_tables: iptables: counters copy to user failed while replacing table [ 531.657070][T17655] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2713'. [ 531.657095][T17655] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2713'. [ 531.803216][T17660] C: renamed from lo (while UP) [ 531.832983][T17660] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 532.035117][T17671] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2716'. [ 532.118509][T17682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2717'. [ 532.151488][T17671] Bluetooth: ISO socket layer initialized [ 532.297669][T17682] 8021q: adding VLAN 0 to HW filter on device bond23 [ 532.443028][T17682] bond23 (unregistering): Released all slaves [ 532.586974][T17697] bridge10: entered allmulticast mode [ 532.717705][T17687] rxe_eth0 speed is unknown, defaulting to 1000 [ 532.823056][T17713] __nla_validate_parse: 3 callbacks suppressed [ 532.823081][T17713] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2722'. [ 532.954480][T17713] dummy0: entered promiscuous mode [ 532.955632][T17713] team0: Port device dummy0 added [ 532.982714][T17713] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 533.370696][T17687] C speed is unknown, defaulting to 1000 [ 533.408472][T17738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2728'. [ 533.455913][T17740] sch_tbf: burst 4398 is lower than device lo mtu (32783) ! [ 533.534647][T17740] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2727'. [ 533.561164][T17738] syzkaller0: entered promiscuous mode [ 533.561192][T17738] syzkaller0: entered allmulticast mode [ 533.573019][ T6535] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.573356][ T6535] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.573461][ T6535] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.573550][ T6535] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.890983][T17753] ip6tnl3: entered promiscuous mode [ 533.951836][T17755] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 533.996871][T17755] bond0 (unregistering): Released all slaves [ 534.220141][T17758] syzkaller1: entered promiscuous mode [ 534.220168][T17758] syzkaller1: entered allmulticast mode [ 534.235098][T17758] 0: reclassify loop, rule prio 0, protocol 03 [ 534.853929][T17807] tipc: Can't bind to reserved service type 0 [ 535.028503][T17810] FAULT_INJECTION: forcing a failure. [ 535.028503][T17810] name failslab, interval 1, probability 0, space 0, times 0 [ 535.028546][T17810] CPU: 1 UID: 0 PID: 17810 Comm: syz.2.2744 Not tainted syzkaller #0 PREEMPT(full) [ 535.028572][T17810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 535.028586][T17810] Call Trace: [ 535.028594][T17810] [ 535.028604][T17810] dump_stack_lvl+0xe8/0x150 [ 535.028646][T17810] should_fail_ex+0x3eb/0x540 [ 535.028679][T17810] should_failslab+0xa8/0x100 [ 535.028715][T17810] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 535.028747][T17810] ? lockdep_hardirqs_on+0x7b/0x110 [ 535.028775][T17810] ? bpf_push_jmp_history+0x32b/0xb00 [ 535.028807][T17810] ? bpf_push_jmp_history+0x32b/0xb00 [ 535.028844][T17810] ? bpf_push_jmp_history+0x32b/0xb00 [ 535.028879][T17810] krealloc_node_align_noprof+0x19a/0x390 [ 535.028916][T17810] bpf_push_jmp_history+0x32b/0xb00 [ 535.028961][T17810] do_check_common+0x4285/0x7590 [ 535.029046][T17810] ? __pfx_do_check_common+0x10/0x10 [ 535.029075][T17810] ? __pfx_verbose+0x10/0x10 [ 535.029104][T17810] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 535.029147][T17810] ? mark_fastcall_patterns+0x10e1/0x1140 [ 535.029194][T17810] do_check_main+0x95/0x1f0 [ 535.029223][T17810] bpf_check+0x302b/0x34e0 [ 535.029260][T17810] ? ktime_get_with_offset+0x93/0x2d0 [ 535.029291][T17810] ? ktime_get_with_offset+0x93/0x2d0 [ 535.029323][T17810] ? __pfx_bpf_check+0x10/0x10 [ 535.029350][T17810] ? bpf_obj_name_cpy+0x194/0x1e0 [ 535.029383][T17810] bpf_prog_load+0x14da/0x1c60 [ 535.029420][T17810] ? __pfx_bpf_prog_load+0x10/0x10 [ 535.029459][T17810] ? __might_fault+0xaf/0x130 [ 535.029490][T17810] __sys_bpf+0xd86/0xe00 [ 535.029528][T17810] ? __pfx___sys_bpf+0x10/0x10 [ 535.029564][T17810] ? __fget_files+0x2a/0x420 [ 535.029605][T17810] ? ksys_write+0x242/0x270 [ 535.029636][T17810] ? __pfx_ksys_write+0x10/0x10 [ 535.029670][T17810] __x64_sys_bpf+0xba/0xd0 [ 535.029703][T17810] do_syscall_64+0x166/0x520 [ 535.029726][T17810] ? trace_irq_disable+0x3b/0x140 [ 535.029756][T17810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.029780][T17810] ? clear_bhb_loop+0x70/0xc0 [ 535.029806][T17810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.029829][T17810] RIP: 0033:0x7f399cf9fb19 [ 535.029850][T17810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.029869][T17810] RSP: 002b:00007f399dd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 535.029893][T17810] RAX: ffffffffffffffda RBX: 00007f399d225fa0 RCX: 00007f399cf9fb19 [ 535.029909][T17810] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 535.029922][T17810] RBP: 00007f399dd97090 R08: 0000000000000000 R09: 0000000000000000 [ 535.029935][T17810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 535.029947][T17810] R13: 00007f399d226038 R14: 00007f399d225fa0 R15: 00007ffc861cf938 [ 535.029982][T17810] [ 535.166833][T17816] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2746'. [ 535.191069][T17817] ipt_rpfilter: unknown options [ 535.207845][T17818] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2746'. [ 535.435960][T17816] bond10 (unregistering): Released all slaves [ 535.502595][T17825] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 535.623895][T17826] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2747'. [ 535.891209][T17842] syzkaller0: left promiscuous mode [ 535.891231][T17842] syzkaller0: left allmulticast mode [ 535.949116][T17842] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2751'. [ 536.008097][T17851] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.009390][T17851] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.009573][T17851] bridge_slave_0: entered allmulticast mode [ 536.036856][T17851] bridge_slave_0: entered promiscuous mode [ 536.039313][T17851] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.039435][T17851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.276205][T17857] bridge_slave_0: left allmulticast mode [ 536.276243][T17857] bridge_slave_0: left promiscuous mode [ 536.276526][T17857] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.434993][T17864] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2754'. [ 536.436569][T17867] validate_nla: 14 callbacks suppressed [ 536.436603][T17867] netlink: 'syz.0.2755': attribute type 1 has an invalid length. [ 536.536371][T17867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2755'. [ 536.560673][T17867] TC_ACT_REPEAT abuse ? [ 536.567969][T17867] syzkaller1: entered promiscuous mode [ 536.567992][T17867] syzkaller1: entered allmulticast mode [ 536.651437][T17880] FAULT_INJECTION: forcing a failure. [ 536.651437][T17880] name failslab, interval 1, probability 0, space 0, times 0 [ 536.651483][T17880] CPU: 0 UID: 0 PID: 17880 Comm: syz.2.2757 Not tainted syzkaller #0 PREEMPT(full) [ 536.651508][T17880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 536.651522][T17880] Call Trace: [ 536.651531][T17880] [ 536.651541][T17880] dump_stack_lvl+0xe8/0x150 [ 536.651583][T17880] should_fail_ex+0x3eb/0x540 [ 536.651630][T17880] should_failslab+0xa8/0x100 [ 536.651666][T17880] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 536.651698][T17880] ? copy_array+0x63/0xf0 [ 536.651727][T17880] ? copy_array+0x63/0xf0 [ 536.651763][T17880] ? copy_array+0x63/0xf0 [ 536.651793][T17880] krealloc_node_align_noprof+0x19a/0x390 [ 536.651823][T17880] ? rcu_is_watching+0x16/0xb0 [ 536.651860][T17880] copy_array+0x63/0xf0 [ 536.651892][T17880] bpf_copy_verifier_state+0xad/0x1300 [ 536.651925][T17880] ? bpf_split_cur_state+0xa8/0x1680 [ 536.651965][T17880] bpf_split_cur_state+0xadd/0x1680 [ 536.652009][T17880] do_check_common+0x4070/0x7590 [ 536.652095][T17880] ? __pfx_do_check_common+0x10/0x10 [ 536.652122][T17880] ? __pfx_verbose+0x10/0x10 [ 536.652150][T17880] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 536.652194][T17880] ? mark_fastcall_patterns+0x10e1/0x1140 [ 536.652243][T17880] do_check_main+0x95/0x1f0 [ 536.652273][T17880] bpf_check+0x302b/0x34e0 [ 536.652310][T17880] ? ktime_get_with_offset+0x93/0x2d0 [ 536.652342][T17880] ? ktime_get_with_offset+0x93/0x2d0 [ 536.652374][T17880] ? __pfx_bpf_check+0x10/0x10 [ 536.652401][T17880] ? bpf_obj_name_cpy+0x194/0x1e0 [ 536.652435][T17880] bpf_prog_load+0x14da/0x1c60 [ 536.652480][T17880] ? __pfx_bpf_prog_load+0x10/0x10 [ 536.652522][T17880] ? __might_fault+0xaf/0x130 [ 536.652553][T17880] __sys_bpf+0xd86/0xe00 [ 536.652586][T17880] ? __pfx___sys_bpf+0x10/0x10 [ 536.652621][T17880] ? __fget_files+0x2a/0x420 [ 536.652669][T17880] ? ksys_write+0x242/0x270 [ 536.652702][T17880] ? __pfx_ksys_write+0x10/0x10 [ 536.652739][T17880] __x64_sys_bpf+0xba/0xd0 [ 536.652774][T17880] do_syscall_64+0x166/0x520 [ 536.652800][T17880] ? trace_irq_disable+0x3b/0x140 [ 536.652830][T17880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.652855][T17880] ? clear_bhb_loop+0x70/0xc0 [ 536.652883][T17880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.652906][T17880] RIP: 0033:0x7f399cf9fb19 [ 536.652928][T17880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.652948][T17880] RSP: 002b:00007f399dd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 536.652972][T17880] RAX: ffffffffffffffda RBX: 00007f399d225fa0 RCX: 00007f399cf9fb19 [ 536.652990][T17880] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 536.653004][T17880] RBP: 00007f399dd97090 R08: 0000000000000000 R09: 0000000000000000 [ 536.653019][T17880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 536.653032][T17880] R13: 00007f399d226038 R14: 00007f399d225fa0 R15: 00007ffc861cf938 [ 536.653070][T17880] [ 537.297092][T17892] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2763'. [ 537.428262][T17913] ip_tables: iptables: counters copy to user failed while replacing table [ 537.428743][T17914] ip_tables: iptables: counters copy to user failed while replacing table [ 537.624226][T17920] tipc: Failed to remove unknown binding: 66,0,0/9480874:614357784/614357785 [ 537.766393][T17925] vlan3: entered promiscuous mode [ 537.766417][T17925] bridge0: entered promiscuous mode [ 537.852336][T17930] syzkaller0: entered promiscuous mode [ 537.852363][T17930] syzkaller0: entered allmulticast mode [ 538.089149][T17944] __nla_validate_parse: 36 callbacks suppressed [ 538.089171][T17944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2770'. [ 538.664119][T17969] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 538.986697][T17982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2778'. [ 539.195605][T17987] ip6tnl4: entered promiscuous mode [ 539.195629][T17987] ip6tnl4: entered allmulticast mode [ 539.627841][T18003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2785'. [ 539.697350][T18018] netlink: 'syz.0.2788': attribute type 1 has an invalid length. [ 539.727375][T18014] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2784'. [ 539.991411][T18031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2791'. [ 540.136724][T18027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2790'. [ 540.576095][T18064] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2798'. [ 540.789714][T18075] FAULT_INJECTION: forcing a failure. [ 540.789714][T18075] name failslab, interval 1, probability 0, space 0, times 0 [ 540.789746][T18075] CPU: 0 UID: 0 PID: 18075 Comm: syz.3.2800 Not tainted syzkaller #0 PREEMPT(full) [ 540.789770][T18075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 540.789785][T18075] Call Trace: [ 540.789793][T18075] [ 540.789803][T18075] dump_stack_lvl+0xe8/0x150 [ 540.789854][T18075] should_fail_ex+0x3eb/0x540 [ 540.789887][T18075] should_failslab+0xa8/0x100 [ 540.789920][T18075] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 540.789947][T18075] ? kasan_save_track+0x3e/0x80 [ 540.789972][T18075] ? bpf_push_jmp_history+0x32b/0xb00 [ 540.790002][T18075] ? bpf_push_jmp_history+0x32b/0xb00 [ 540.790037][T18075] ? bpf_push_jmp_history+0x32b/0xb00 [ 540.790070][T18075] krealloc_node_align_noprof+0x19a/0x390 [ 540.790106][T18075] bpf_push_jmp_history+0x32b/0xb00 [ 540.790150][T18075] bpf_is_state_visited+0x36b7/0x3bd0 [ 540.790201][T18075] ? bpf_diag_record_branch+0x58/0x90 [ 540.790253][T18075] do_check_common+0x4070/0x7590 [ 540.790339][T18075] ? __pfx_do_check_common+0x10/0x10 [ 540.790367][T18075] ? __pfx_verbose+0x10/0x10 [ 540.790395][T18075] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 540.790440][T18075] ? mark_fastcall_patterns+0x10e1/0x1140 [ 540.790491][T18075] do_check_main+0x95/0x1f0 [ 540.790520][T18075] bpf_check+0x302b/0x34e0 [ 540.790563][T18075] ? ktime_get_with_offset+0x93/0x2d0 [ 540.790594][T18075] ? ktime_get_with_offset+0x93/0x2d0 [ 540.790626][T18075] ? __pfx_bpf_check+0x10/0x10 [ 540.790653][T18075] ? bpf_obj_name_cpy+0x194/0x1e0 [ 540.790685][T18075] bpf_prog_load+0x14da/0x1c60 [ 540.790723][T18075] ? __pfx_bpf_prog_load+0x10/0x10 [ 540.790764][T18075] ? __might_fault+0xaf/0x130 [ 540.790795][T18075] __sys_bpf+0xd86/0xe00 [ 540.790833][T18075] ? __pfx___sys_bpf+0x10/0x10 [ 540.790868][T18075] ? __fget_files+0x2a/0x420 [ 540.790917][T18075] ? ksys_write+0x242/0x270 [ 540.790949][T18075] ? __pfx_ksys_write+0x10/0x10 [ 540.790984][T18075] __x64_sys_bpf+0xba/0xd0 [ 540.791020][T18075] do_syscall_64+0x166/0x520 [ 540.791046][T18075] ? trace_irq_disable+0x3b/0x140 [ 540.791076][T18075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.791099][T18075] ? clear_bhb_loop+0x70/0xc0 [ 540.791127][T18075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.791150][T18075] RIP: 0033:0x7f286ab9fb19 [ 540.791171][T18075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.791191][T18075] RSP: 002b:00007f286ba0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 540.791215][T18075] RAX: ffffffffffffffda RBX: 00007f286ae25fa0 RCX: 00007f286ab9fb19 [ 540.791232][T18075] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 540.791246][T18075] RBP: 00007f286ba0a090 R08: 0000000000000000 R09: 0000000000000000 [ 540.791260][T18075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 540.791273][T18075] R13: 00007f286ae26038 R14: 00007f286ae25fa0 R15: 00007ffdd4e36288 [ 540.791310][T18075] [ 540.853620][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2803'. [ 541.170191][T18080] ip_tables: iptables: counters copy to user failed while replacing table [ 541.309070][T18087] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2804'. [ 541.647544][T18109] xt_TCPMSS: Only works on TCP SYN packets [ 542.006420][T18124] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 542.074893][T18123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2811'. [ 542.334006][T18139] netlink: 'syz.4.2814': attribute type 2 has an invalid length. [ 542.371481][T18140] FAULT_INJECTION: forcing a failure. [ 542.371481][T18140] name failslab, interval 1, probability 0, space 0, times 0 [ 542.371515][T18140] CPU: 1 UID: 0 PID: 18140 Comm: syz.3.2815 Not tainted syzkaller #0 PREEMPT(full) [ 542.371540][T18140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 542.371554][T18140] Call Trace: [ 542.371563][T18140] [ 542.371572][T18140] dump_stack_lvl+0xe8/0x150 [ 542.371614][T18140] should_fail_ex+0x3eb/0x540 [ 542.371656][T18140] should_failslab+0xa8/0x100 [ 542.371691][T18140] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 542.371722][T18140] ? lockdep_hardirqs_on+0x7b/0x110 [ 542.371747][T18140] ? bpf_push_jmp_history+0x32b/0xb00 [ 542.371779][T18140] ? bpf_push_jmp_history+0x32b/0xb00 [ 542.371815][T18140] ? bpf_push_jmp_history+0x32b/0xb00 [ 542.371855][T18140] krealloc_node_align_noprof+0x19a/0x390 [ 542.371891][T18140] bpf_push_jmp_history+0x32b/0xb00 [ 542.371935][T18140] do_check_common+0x4285/0x7590 [ 542.372021][T18140] ? __pfx_do_check_common+0x10/0x10 [ 542.372049][T18140] ? __pfx_verbose+0x10/0x10 [ 542.372078][T18140] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 542.372110][T18140] ? irqentry_exit+0x2a0/0x9b0 [ 542.372142][T18140] ? mark_fastcall_patterns+0x10e1/0x1140 [ 542.372188][T18140] do_check_main+0x95/0x1f0 [ 542.372217][T18140] bpf_check+0x302b/0x34e0 [ 542.372254][T18140] ? ktime_get_with_offset+0x93/0x2d0 [ 542.372286][T18140] ? ktime_get_with_offset+0x93/0x2d0 [ 542.372318][T18140] ? __pfx_bpf_check+0x10/0x10 [ 542.372345][T18140] ? bpf_obj_name_cpy+0x194/0x1e0 [ 542.372378][T18140] bpf_prog_load+0x14da/0x1c60 [ 542.372415][T18140] ? __pfx_bpf_prog_load+0x10/0x10 [ 542.372455][T18140] ? __might_fault+0xaf/0x130 [ 542.372486][T18140] __sys_bpf+0xd86/0xe00 [ 542.372517][T18140] ? __pfx___sys_bpf+0x10/0x10 [ 542.372552][T18140] ? __fget_files+0x2a/0x420 [ 542.372599][T18140] ? ksys_write+0x242/0x270 [ 542.372639][T18140] ? __pfx_ksys_write+0x10/0x10 [ 542.372675][T18140] __x64_sys_bpf+0xba/0xd0 [ 542.372711][T18140] do_syscall_64+0x166/0x520 [ 542.372736][T18140] ? trace_irq_disable+0x3b/0x140 [ 542.372767][T18140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.372790][T18140] ? clear_bhb_loop+0x70/0xc0 [ 542.372818][T18140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.372842][T18140] RIP: 0033:0x7f286ab9fb19 [ 542.372863][T18140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.372883][T18140] RSP: 002b:00007f286ba0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 542.372908][T18140] RAX: ffffffffffffffda RBX: 00007f286ae25fa0 RCX: 00007f286ab9fb19 [ 542.372925][T18140] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 542.372939][T18140] RBP: 00007f286ba0a090 R08: 0000000000000000 R09: 0000000000000000 [ 542.372954][T18140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 542.372967][T18140] R13: 00007f286ae26038 R14: 00007f286ae25fa0 R15: 00007ffdd4e36288 [ 542.373004][T18140] [ 542.948780][T18153] netlink: 'syz.3.2818': attribute type 1 has an invalid length. [ 544.438872][T18199] __nla_validate_parse: 5 callbacks suppressed [ 544.438896][T18199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2828'. [ 544.438918][T18199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2828'. [ 544.576687][T18208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2829'. [ 544.676397][T18211] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2830'. [ 544.676424][T18211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2830'. [ 544.676439][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2830'. [ 545.665039][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 545.669794][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 545.670628][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 545.686474][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 545.688807][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 546.004855][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2841'. [ 546.044411][T18256] 8021q: adding VLAN 0 to HW filter on device bond12 [ 546.049587][T18256] bridge0: port 1(bond12) entered blocking state [ 546.051342][T18256] bridge0: port 1(bond12) entered disabled state [ 546.051524][T18256] bond12: entered allmulticast mode [ 546.080964][T18256] bond12: entered promiscuous mode [ 546.081818][T18256] bridge0: port 1(bond12) entered blocking state [ 546.081970][T18256] bridge0: port 1(bond12) entered forwarding state [ 546.479671][ T6535] bridge0: port 1(bond12) entered disabled state [ 546.591384][T18286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2844'. [ 546.670885][T18289] netlink: 'syz.4.2845': attribute type 10 has an invalid length. [ 546.670910][T18289] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2845'. [ 546.682064][T18289] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 546.718144][T18286] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 546.799319][T18289] netlink: 'syz.4.2845': attribute type 1 has an invalid length. [ 546.799345][T18289] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2845'. [ 547.090860][T18307] ip_tables: iptables: counters copy to user failed while replacing table [ 547.333110][T18246] rxe_eth0 speed is unknown, defaulting to 1000 [ 547.520592][T18322] netlink: 'syz.4.2851': attribute type 61 has an invalid length. [ 547.762486][ T5635] Bluetooth: hci5: command tx timeout [ 547.937896][T18333] ip6tnl3: entered allmulticast mode [ 547.978866][T18318] rxe_eth0 speed is unknown, defaulting to 1000 [ 547.979322][T18246] C speed is unknown, defaulting to 1000 [ 548.724307][T18318] C speed is unknown, defaulting to 1000 [ 548.981994][T18246] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.990952][T18246] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.991160][T18246] bridge_slave_0: entered allmulticast mode [ 549.011047][T18246] bridge_slave_0: entered promiscuous mode [ 549.096015][T18378] pimreg0: tun_chr_ioctl cmd 1074025677 [ 549.096129][T18378] pimreg0: linktype set to 774 [ 549.096518][T18246] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.097026][T18246] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.097188][T18246] bridge_slave_1: entered allmulticast mode [ 549.099100][T18246] bridge_slave_1: entered promiscuous mode [ 549.117620][T18384] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 549.236794][T18246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.257746][T18246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.470838][T18392] __nla_validate_parse: 2 callbacks suppressed [ 549.470861][T18392] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2864'. [ 549.498140][T18246] team0: Port device team_slave_0 added [ 549.535501][T18246] team0: Port device team_slave_1 added [ 549.714610][T18246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.714629][T18246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.714678][T18246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.720739][T18246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.720759][T18246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.720788][T18246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.842333][ T5635] Bluetooth: hci5: command tx timeout [ 549.913681][T18246] hsr_slave_0: entered promiscuous mode [ 549.914808][T18246] hsr_slave_1: entered promiscuous mode [ 550.189824][T18418] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2865'. [ 550.242383][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 550.580492][T18422] NFSD: Failed to start, no listeners configured. [ 550.615370][T18246] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.192700][T18246] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.353210][T18453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.922809][ T5635] Bluetooth: hci5: command tx timeout [ 554.002893][ T5635] Bluetooth: hci5: command tx timeout [ 554.140253][T18246] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.323245][T18246] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.461221][T18466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2879'. [ 554.785345][T18473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.844391][T18246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 554.862963][T18246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 554.865462][T18246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 554.899142][T18246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 554.909349][T18246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 554.940357][T18246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 554.951670][T18246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 555.000565][T18246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 555.303664][T18246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.383941][T18246] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.428145][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.428265][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.470184][T18504] rxe_eth0 speed is unknown, defaulting to 1000 [ 555.500242][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.500358][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.150987][T18536] netlink: 'syz.1.2895': attribute type 1 has an invalid length. [ 556.269081][T18504] C speed is unknown, defaulting to 1000 [ 557.338290][T18246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.460106][T18246] veth0_vlan: entered promiscuous mode [ 557.483096][T18246] veth1_vlan: entered promiscuous mode [ 557.540280][T18246] veth0_macvtap: entered promiscuous mode [ 557.568488][T18246] veth1_macvtap: entered promiscuous mode [ 557.606966][T18246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.673970][T18246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.773299][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.773667][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.773910][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.773951][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.830687][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2905'. [ 558.083499][ T5635] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 558.266781][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.266805][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.340319][T18618] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2907'. [ 558.375689][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.375712][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.556475][T18624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2907'. [ 558.556503][T18624] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2907'. [ 558.689706][T18614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2907'. [ 558.724034][T18628] rxe_eth0 speed is unknown, defaulting to 1000 [ 558.789110][T18631] netlink: 'syz.1.2908': attribute type 1 has an invalid length. [ 559.246919][T18628] C speed is unknown, defaulting to 1000 [ 560.149096][T18691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2918'. [ 560.287872][T18700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2921'. [ 560.400985][T18705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2922'. [ 560.511996][T18696] bridge0: port 1(syz_tun) entered blocking state [ 560.514458][T18696] bridge0: port 1(syz_tun) entered disabled state [ 560.553214][T18696] syz_tun: entered allmulticast mode [ 560.588265][T18696] syz_tun: left allmulticast mode [ 560.766100][T18713] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2924'. [ 560.973505][T18725] ip_tables: iptables: counters copy to user failed while replacing table [ 561.130544][T18732] netlink: 'syz.4.2928': attribute type 34 has an invalid length. [ 561.130568][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2928'. [ 561.196624][T18732] bond11: option lacp_strict: invalid value (255) [ 561.212985][T18732] bond11 (unregistering): Released all slaves [ 561.384241][T18744] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 561.387127][T18741] nbd7: detected capacity change from 0 to 63 [ 561.466297][ T5635] block nbd7: Receive control failed (result -104) [ 561.724536][T18754] tipc: Enabled bearer , priority 0 [ 561.978947][T18754] syzkaller0: entered promiscuous mode [ 561.978974][T18754] syzkaller0: entered allmulticast mode [ 561.979518][T18754] tipc: Resetting bearer [ 562.284385][T18783] [ 562.286790][T18783] ====================================================== [ 562.293842][T18783] WARNING: possible circular locking dependency detected [ 562.300914][T18783] syzkaller #0 Not tainted [ 562.305363][T18783] ------------------------------------------------------ [ 562.312419][T18783] syz.3.2939/18783 is trying to acquire lock: [ 562.318536][T18783] ffffffff90094cc0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x5f0 [ 562.327788][T18783] [ 562.327788][T18783] but task is already holding lock: [ 562.335194][T18783] ffff8880504a7180 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 562.344748][T18783] [ 562.344748][T18783] which lock already depends on the new lock. [ 562.344748][T18783] [ 562.355196][T18783] [ 562.355196][T18783] the existing dependency chain (in reverse order) is: [ 562.364248][T18783] [ 562.364248][T18783] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 562.371861][T18783] __might_fault+0xcb/0x130 [ 562.377022][T18783] _copy_from_user+0x28/0xb0 [ 562.382202][T18783] csum_and_copy_from_iter_full+0x210/0x2000 [ 562.388746][T18783] ip_generic_getfrag+0x149/0x2d0 [ 562.394342][T18783] __ip6_append_data+0x3b26/0x40c0 [ 562.400036][T18783] ip6_append_data+0x108/0x270 [ 562.405383][T18783] rawv6_sendmsg+0x1298/0x18c0 [ 562.410736][T18783] sock_sendmsg_nosec+0x10f/0x190 [ 562.416347][T18783] ____sys_sendmsg+0x54e/0x850 [ 562.418161][T18788] netlink: 'syz.2.2940': attribute type 1 has an invalid length. [ 562.429432][T18783] ___sys_sendmsg+0x2a5/0x360 [ 562.434681][T18783] __x64_sys_sendmsg+0x1b1/0x290 [ 562.440191][T18783] do_syscall_64+0x166/0x520 [ 562.445358][T18783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.451816][T18783] [ 562.451816][T18783] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 562.459597][T18783] lock_sock_nested+0x41/0x100 [ 562.464931][T18783] inet_shutdown+0x6a/0x390 [ 562.470029][T18783] nbd_mark_nsock_dead+0x2cb/0x550 [ 562.475702][T18783] sock_shutdown+0x15e/0x260 [ 562.480855][T18783] nbd_clear_sock+0x24/0x170 [ 562.486010][T18783] nbd_config_put+0x477/0x7e0 [ 562.491250][T18783] nbd_genl_connect+0x19b8/0x1cd0 [ 562.496850][T18783] genl_family_rcv_msg_doit+0x233/0x340 [ 562.503120][T18783] genl_rcv_msg+0x614/0x7a0 [ 562.508186][T18783] netlink_rcv_skb+0x226/0x4a0 [ 562.513532][T18783] genl_rcv+0x28/0x40 [ 562.518074][T18783] netlink_unicast+0x8ef/0xa80 [ 562.523396][T18783] netlink_sendmsg+0x7f0/0xb20 [ 562.528721][T18783] sock_sendmsg_nosec+0x14e/0x190 [ 562.534305][T18783] ____sys_sendmsg+0x54e/0x850 [ 562.539638][T18783] ___sys_sendmsg+0x2a5/0x360 [ 562.544877][T18783] __x64_sys_sendmsg+0x1b1/0x290 [ 562.550386][T18783] do_syscall_64+0x166/0x520 [ 562.555535][T18783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.561995][T18783] [ 562.561995][T18783] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 562.569683][T18783] __mutex_lock+0x197/0x15a0 [ 562.574840][T18783] nbd_queue_rq+0x373/0xff0 [ 562.579907][T18783] blk_mq_dispatch_rq_list+0x499/0x1990 [ 562.586067][T18783] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 562.592967][T18783] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 562.599539][T18783] blk_mq_run_work_fn+0x167/0x2f0 [ 562.605303][T18783] process_scheduled_works+0xc3d/0x1630 [ 562.611433][T18783] worker_thread+0xa47/0xfb0 [ 562.616691][T18783] kthread+0x38b/0x480 [ 562.621323][T18783] ret_from_fork+0x514/0xb70 [ 562.626479][T18783] ret_from_fork_asm+0x1a/0x30 [ 562.631893][T18783] [ 562.631893][T18783] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 562.639171][T18783] __mutex_lock+0x197/0x15a0 [ 562.644444][T18783] nbd_queue_rq+0xc1/0xff0 [ 562.649427][T18783] blk_mq_dispatch_rq_list+0x499/0x1990 [ 562.655553][T18783] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 562.662448][T18783] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 562.668989][T18783] blk_mq_run_work_fn+0x167/0x2f0 [ 562.674586][T18783] process_scheduled_works+0xc3d/0x1630 [ 562.680699][T18783] worker_thread+0xa47/0xfb0 [ 562.685866][T18783] kthread+0x38b/0x480 [ 562.690514][T18783] ret_from_fork+0x514/0xb70 [ 562.695672][T18783] ret_from_fork_asm+0x1a/0x30 [ 562.701001][T18783] [ 562.701001][T18783] -> #3 (set->srcu){.+.+}-{0:0}: [ 562.708177][T18783] __synchronize_srcu+0xca/0x2f0 [ 562.713705][T18783] elevator_switch+0x1e8/0x7b0 [ 562.719055][T18783] elevator_change+0x2fa/0x480 [ 562.724408][T18783] elevator_set_default+0x375/0x440 [ 562.730266][T18783] blk_register_queue+0x404/0x4f0 [ 562.735863][T18783] __add_disk+0x6b8/0xdb0 [ 562.740755][T18783] add_disk_fwnode+0x100/0x3a0 [ 562.746090][T18783] nbd_dev_add+0x733/0xb60 [ 562.751065][T18783] nbd_init+0x168/0x1f0 [ 562.755786][T18783] do_one_initcall+0x250/0x870 [ 562.761123][T18783] do_initcall_level+0x10a/0x1a0 [ 562.766663][T18783] do_initcalls+0x59/0xa0 [ 562.771572][T18783] kernel_init_freeable+0x29d/0x3e0 [ 562.777428][T18783] kernel_init+0x22/0x1d0 [ 562.782340][T18783] ret_from_fork+0x514/0xb70 [ 562.787491][T18783] ret_from_fork_asm+0x1a/0x30 [ 562.792816][T18783] [ 562.792816][T18783] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 562.800671][T18783] __mutex_lock+0x197/0x15a0 [ 562.805838][T18783] elevator_change+0x1af/0x480 [ 562.811183][T18783] elevator_set_none+0xb5/0x140 [ 562.816970][T18783] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 562.823349][T18783] nbd_start_device+0x189/0xb30 [ 562.828770][T18783] nbd_genl_connect+0x167d/0x1cd0 [ 562.834403][T18783] genl_family_rcv_msg_doit+0x233/0x340 [ 562.840521][T18783] genl_rcv_msg+0x614/0x7a0 [ 562.845581][T18783] netlink_rcv_skb+0x226/0x4a0 [ 562.850927][T18783] genl_rcv+0x28/0x40 [ 562.855469][T18783] netlink_unicast+0x8ef/0xa80 [ 562.860801][T18783] netlink_sendmsg+0x7f0/0xb20 [ 562.866126][T18783] sock_sendmsg_nosec+0x14e/0x190 [ 562.871744][T18783] ____sys_sendmsg+0x54e/0x850 [ 562.877063][T18783] ___sys_sendmsg+0x2a5/0x360 [ 562.882303][T18783] __x64_sys_sendmsg+0x1b1/0x290 [ 562.887808][T18783] do_syscall_64+0x166/0x520 [ 562.892971][T18783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.899429][T18783] [ 562.899429][T18783] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 562.908093][T18783] blk_alloc_queue+0x544/0x690 [ 562.913443][T18783] __blk_mq_alloc_disk+0x194/0x390 [ 562.919130][T18783] nbd_dev_add+0x494/0xb60 [ 562.924146][T18783] nbd_init+0x168/0x1f0 [ 562.928875][T18783] do_one_initcall+0x250/0x870 [ 562.934219][T18783] do_initcall_level+0x10a/0x1a0 [ 562.939724][T18783] do_initcalls+0x59/0xa0 [ 562.944626][T18783] kernel_init_freeable+0x29d/0x3e0 [ 562.950397][T18783] kernel_init+0x22/0x1d0 [ 562.955312][T18783] ret_from_fork+0x514/0xb70 [ 562.960496][T18783] ret_from_fork_asm+0x1a/0x30 [ 562.965841][T18783] [ 562.965841][T18783] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 562.973109][T18783] __lock_acquire+0x164c/0x2de0 [ 562.978538][T18783] lock_acquire+0x115/0x350 [ 562.983626][T18783] fs_reclaim_acquire+0x71/0x100 [ 562.989135][T18783] prepare_alloc_pages+0x149/0x5f0 [ 562.994815][T18783] __alloc_frozen_pages_noprof+0x17c/0x410 [ 563.001199][T18783] alloc_pages_mpol+0x21e/0x390 [ 563.006630][T18783] folio_alloc_mpol_noprof+0x39/0x160 [ 563.012585][T18783] vma_alloc_folio_noprof+0xe1/0x1e0 [ 563.018462][T18783] do_pte_missing+0x16d4/0x3570 [ 563.023890][T18783] handle_mm_fault+0x1a53/0x3750 [ 563.029415][T18783] do_user_addr_fault+0x7f6/0x1480 [ 563.035099][T18783] exc_page_fault+0x6a/0xc0 [ 563.040180][T18783] asm_exc_page_fault+0x26/0x30 [ 563.045592][T18783] rep_movs_alternative+0x33/0xa0 [ 563.051195][T18783] _copy_to_iter+0x255/0x17e0 [ 563.056442][T18783] __skb_datagram_iter+0xf8/0x980 [ 563.062038][T18783] skb_copy_datagram_iter+0xb5/0x240 [ 563.067896][T18783] virtio_transport_stream_dequeue+0x3bb/0xb00 [ 563.074634][T18783] __vsock_connectible_recvmsg+0xc50/0x1160 [ 563.081102][T18783] sock_recvmsg+0x196/0x1e0 [ 563.086217][T18783] __sys_recvfrom+0x231/0x3a0 [ 563.091484][T18783] __x64_sys_recvfrom+0xde/0x100 [ 563.097087][T18783] do_syscall_64+0x166/0x520 [ 563.102435][T18783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.108903][T18783] [ 563.108903][T18783] other info that might help us debug this: [ 563.108903][T18783] [ 563.119177][T18783] Chain exists of: [ 563.119177][T18783] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 563.119177][T18783] [ 563.131838][T18783] Possible unsafe locking scenario: [ 563.131838][T18783] [ 563.139335][T18783] CPU0 CPU1 [ 563.144924][T18783] ---- ---- [ 563.150322][T18783] rlock(&mm->mmap_lock); [ 563.154785][T18783] lock(sk_lock-AF_INET6); [ 563.161856][T18783] lock(&mm->mmap_lock); [ 563.168762][T18783] lock(fs_reclaim); [ 563.172780][T18783] [ 563.172780][T18783] *** DEADLOCK *** [ 563.172780][T18783] [ 563.180954][T18783] locks held by syz.3.2939/18783: 2, last CPU#1: [ 563.187335][T18783] #0: ffff888034c31ca0 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connectible_wait_data+0x2c2/0x560 [ 563.198191][T18783] #1: ffff8880504a7180 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 563.208208][T18783] [ 563.208208][T18783] stack backtrace: [ 563.214165][T18783] CPU: 1 UID: 0 PID: 18783 Comm: syz.3.2939 Not tainted syzkaller #0 PREEMPT(full) [ 563.223573][T18783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 563.233675][T18783] Call Trace: [ 563.236993][T18783] [ 563.239957][T18783] dump_stack_lvl+0xe8/0x150 [ 563.244595][T18783] print_circular_bug+0x2e2/0x300 [ 563.249683][T18783] check_noncircular+0x12f/0x150 [ 563.254714][T18783] __lock_acquire+0x164c/0x2de0 [ 563.259625][T18783] ? __lock_acquire+0x747/0x2de0 [ 563.264609][T18783] lock_acquire+0x115/0x350 [ 563.269162][T18783] ? prepare_alloc_pages+0x149/0x5f0 [ 563.274509][T18783] fs_reclaim_acquire+0x71/0x100 [ 563.279488][T18783] ? prepare_alloc_pages+0x149/0x5f0 [ 563.284823][T18783] prepare_alloc_pages+0x149/0x5f0 [ 563.290002][T18783] __alloc_frozen_pages_noprof+0x17c/0x410 [ 563.295870][T18783] ? lock_acquire+0x115/0x350 [ 563.300611][T18783] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 563.307032][T18783] ? policy_nodemask+0x31b/0x980 [ 563.312059][T18783] ? __lock_acquire+0x747/0x2de0 [ 563.317044][T18783] alloc_pages_mpol+0x21e/0x390 [ 563.321944][T18783] folio_alloc_mpol_noprof+0x39/0x160 [ 563.327377][T18783] vma_alloc_folio_noprof+0xe1/0x1e0 [ 563.332724][T18783] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 563.338668][T18783] ? vma_has_anon_rmap+0x95/0x270 [ 563.343761][T18783] do_pte_missing+0x16d4/0x3570 [ 563.348680][T18783] handle_mm_fault+0x1a53/0x3750 [ 563.353661][T18783] ? handle_mm_fault+0xf1/0x3750 [ 563.358638][T18783] ? __pfx_handle_mm_fault+0x10/0x10 [ 563.363960][T18783] ? __lock_acquire+0x747/0x2de0 [ 563.369012][T18783] ? lock_mm_and_find_vma+0xa7/0x340 [ 563.374351][T18783] do_user_addr_fault+0x7f6/0x1480 [ 563.379524][T18783] exc_page_fault+0x6a/0xc0 [ 563.384175][T18783] asm_exc_page_fault+0x26/0x30 [ 563.389076][T18783] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 563.394919][T18783] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 80 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 563.414559][T18783] RSP: 0018:ffffc900061af6b8 EFLAGS: 00050202 [ 563.420666][T18783] RAX: 0000000000000000 RBX: ffff888032b5436c RCX: 000000000000002b [ 563.428667][T18783] RDX: 0000000000000000 RSI: ffff888032b54374 RDI: 0000200000000ffc [ 563.436690][T18783] RBP: ffffc900061af830 R08: ffff888032b5439e R09: 1ffff1100656a873 [ 563.444688][T18783] R10: dffffc0000000000 R11: ffffed100656a874 R12: 1ffff92000c35fbb [ 563.452683][T18783] R13: 0000200000000ff4 R14: ffffc900061afde8 R15: 0000000000000033 [ 563.460684][T18783] _copy_to_iter+0x255/0x17e0 [ 563.465416][T18783] ? __pfx__copy_to_iter+0x10/0x10 [ 563.470553][T18783] ? __lock_acquire+0x747/0x2de0 [ 563.475521][T18783] __skb_datagram_iter+0xf8/0x980 [ 563.480573][T18783] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 563.486231][T18783] ? virtio_transport_stream_dequeue+0x397/0xb00 [ 563.492601][T18783] skb_copy_datagram_iter+0xb5/0x240 [ 563.497916][T18783] virtio_transport_stream_dequeue+0x3bb/0xb00 [ 563.504103][T18783] ? __pfx_virtio_transport_stream_dequeue+0x10/0x10 [ 563.510811][T18783] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 563.516643][T18783] ? vsock_connectible_wait_data+0x526/0x560 [ 563.522673][T18783] __vsock_connectible_recvmsg+0xc50/0x1160 [ 563.528609][T18783] ? __pfx___vsock_connectible_recvmsg+0x10/0x10 [ 563.534967][T18783] ? aa_sk_perm+0x6ff/0x8f0 [ 563.539509][T18783] ? lock_acquire+0x115/0x350 [ 563.544212][T18783] ? __pfx_aa_sk_perm+0x10/0x10 [ 563.549184][T18783] ? __pfx_autoremove_wake_function+0x10/0x10 [ 563.555285][T18783] ? vsock_connectible_recvmsg+0xb7/0xe0 [ 563.560950][T18783] ? __pfx_vsock_connectible_recvmsg+0x10/0x10 [ 563.567141][T18783] sock_recvmsg+0x196/0x1e0 [ 563.571700][T18783] __sys_recvfrom+0x231/0x3a0 [ 563.576424][T18783] ? __pfx___sys_recvfrom+0x10/0x10 [ 563.581668][T18783] ? __pfx_kcov_ioctl+0x10/0x10 [ 563.586573][T18783] __x64_sys_recvfrom+0xde/0x100 [ 563.591550][T18783] do_syscall_64+0x166/0x520 [ 563.596169][T18783] ? trace_irq_disable+0x3b/0x140 [ 563.601222][T18783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.607307][T18783] ? clear_bhb_loop+0x70/0xc0 [ 563.612014][T18783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.617928][T18783] RIP: 0033:0x7f286ab9fb19 [ 563.622370][T18783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.642001][T18783] RSP: 002b:00007f286b9e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 563.650468][T18783] RAX: ffffffffffffffda RBX: 00007f286ae26090 RCX: 00007f286ab9fb19 [ 563.658570][T18783] RDX: 000000000000feb5 RSI: 0000200000000400 RDI: 0000000000000007 [ 563.666573][T18783] RBP: 00007f286ac37b70 R08: 0000000000000000 R09: 0000000000000000 [ 563.674574][T18783] R10: 0000000000010120 R11: 0000000000000246 R12: 0000000000000000 [ 563.682574][T18783] R13: 00007f286ae26128 R14: 00007f286ae26090 R15: 00007ffdd4e36288 [ 563.690574][T18783] [ 563.709246][ T31] tipc: Resetting bearer [ 563.793096][T18794] syzkaller1: entered promiscuous mode [ 563.793121][T18794] syzkaller1: entered allmulticast mode [ 563.985983][T18798] netlink: 'syz.3.2939': attribute type 2 has an invalid length. [ 563.986043][T18798] netlink: 'syz.3.2939': attribute type 1 has an invalid length. [ 564.263157][T18753] tipc: Resetting bearer [ 564.334391][T18753] tipc: Disabling bearer [ 568.163729][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!