last executing test programs: 5.513333415s ago: executing program 3 (id=4050): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x0) (fail_nth: 1) 5.062761867s ago: executing program 3 (id=4053): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x8001, 0x6}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x8031, 0xffffffffffffffff, 0xb9666000) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x4, 0x0, [0x2, 0x1, 0x7, 0x80, 0x100, 0x3], 0x0, 0x0, 0x0}, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_genetlink_get_family_id$nl80211(0x0, r1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r4, 0x0, 0x0, 0x4040840) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) 4.17390649s ago: executing program 2 (id=4062): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x87) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r4, &(0x7f0000000540)="86a364ea89e156da3c7bed8b000ec899790a71635dddd4517d079acbb4d3542657794f46b77c0b166a4e103448708748432cf17e7cfe68b6fb401990e57ae67cb28f119be5c4f90c1698aee09f6d3402e768fccffd4b478586b244116c7e9ff686f6b0b8ac2c559888d602000000000000002713ce828231947beb43f704b4da70ef", 0x82, 0xe004, &(0x7f0000000500)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x1, 0x1234}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x810, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0xe, 0xc208, 0x6, 0x3}, 0x10) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="baa7f26da1d0f2ea7cab8b61", 0xc}], 0x1}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) sendmmsg$inet6(r3, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x3, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026c170000400000006000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2048050}, 0x4880) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x728}, {0x8, 0x7, 0x0, 0x5}, {0x6, 0x21, 0x8, 0x26}, {0x81, 0xa4, 0x5, 0x1ff}]}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d300900"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) socket$alg(0x26, 0x5, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r8, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x1, 0x40080, &(0x7f000005ffe4)={0xa, 0xffff, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x7b) 3.847026398s ago: executing program 1 (id=4064): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="6a12780cf70633cebb374f3087592e7497ce904d7beb10a4fcd194b39523a705558232bb7eb64735f41751602374c887bddf0bd3ace673a5d7b8660ed9581f39cd582b08561d8afd434939413956a078250631968a53d698a043b57f10fd367120a8586d0f4179477c2b307bf773e4a2bc4df9883192db82bb1c94efb5a6cf1e0055d6dfdb1802f9a2b6abb0554eab35218bc318c4d25e92cae29b1ad48aac14e9022ea7734e972f2644c0d7295530f1ff9fda3d73604d06a63f4c5090ba871dcccb1f31c25255ca0c0c696b3cb7a35ee60e55b4ceb1dd6c2d9b79003e0eb842334dfc73fea820a0ba659c558362f167d4251560f2f573", @ANYBLOB="000403e1a7196900290a9969a054ead3f1000000feffffff82931cbe3400028006000b070000000006000e004e06000f0004000000080003000200000006000b0000000000000100000000feffffff004b61aefb12acf63f28a2a17f97f04628ef3ff7008000000000000000e7e51cff933122a59ca00463122e342e0b56049b9c062b094cbe3f50993abff2dd83986a496277d2089dbc65089482151400000000cd263c151a411c907e3bb597178fb8d8126969b32761d4b037d63781b6a9525f1a"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x9000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0xe9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x9, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x3}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x0) connect$bt_rfcomm(r5, &(0x7f00000005c0)={0x1f, @none, 0x11}, 0xa) close(r1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000002c0)) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x9, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r6, 0x2) r8 = socket$inet(0x2, 0x3, 0x2) mmap(&(0x7f0000039000/0x2000)=nil, 0x2000, 0x2000000, 0x2011, r8, 0x2000) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x20, 0x0, 0x0) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = accept(r1, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) 3.461790057s ago: executing program 1 (id=4067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f00000002c0)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2711, @local}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:usr_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.334542459s ago: executing program 1 (id=4068): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8, @ANYRES16=r0, @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x36, 0x0, @val=@tracing={0x0, 0x9}}, 0x20) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendfile(r7, r8, 0x0, 0xffffffff000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r9, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db017c42ac6b892ac1d"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x29, 0x5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) write$cgroup_pressure(r10, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) 3.2432781s ago: executing program 4 (id=4070): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f00000003c0)="89a25031b0f94f0cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9c90c9dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc99b7", 0xfffffffffffffea6}, {&(0x7f0000000480)="b21b824db48cb6a14779dcb79214c546b4f4728c976c59e106ff28ecffa91b2e68bd67bf9882d6939c7c4e4727f8d8979ce9bb883f9213faf51834517bed4d0bfc521236439a9e127fdb471c239215fcfc4dd80b3e53f4cb004d8328aaa6b41d237e66"}, {&(0x7f0000002c40)="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"}], 0x1, 0xa) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb2}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x24}, 0x94) 2.981535784s ago: executing program 4 (id=4071): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r3, 0x1, 0x709d2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x21}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe80, 0xfffffffffffffe84, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x242, 0x0, 0xb1, 0x0, &(0x7f0000000380)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54ee2cbf21a66489121f24fefd198059288c9b735e0298e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0abece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c60000000000000002e8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39767830c6f24cd4189b1f7aac072f363e6f4d9633391bc51086c573f6907058f857d748e2531c04896f0a276b55"}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) (async) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r3, 0x1, 0x709d2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x21}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe80, 0xfffffffffffffe84, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x242, 0x0, 0xb1, 0x0, &(0x7f0000000380)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54ee2cbf21a66489121f24fefd198059288c9b735e0298e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0abece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c60000000000000002e8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39767830c6f24cd4189b1f7aac072f363e6f4d9633391bc51086c573f6907058f857d748e2531c04896f0a276b55"}, 0x23) (async) 2.916198423s ago: executing program 3 (id=4073): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x13}, 0x94) 2.817821155s ago: executing program 2 (id=4074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c00038018000080140001800f0001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c00028006000100"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x46c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r6, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x7ffff7ff}], 0x1, 0x40000100, 0x0) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @multicast2}, 0x200, 0x0, 0x0, 0x0, 0x9763, &(0x7f00000000c0)='ipvlan1\x00', 0xe, 0x0, 0xfc}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34}}]}, 0x82}}, 0x2004c000) 2.72170092s ago: executing program 3 (id=4075): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x8, 0xb}, {0xffee, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xffffffff, 0x20e, 0x86}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004044}, 0xb32019a74e55d2de) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (fail_nth: 15) 2.640074849s ago: executing program 0 (id=4076): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r1], 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) 2.638933081s ago: executing program 4 (id=4077): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="6a12780cf70633cebb374f3087592e7497ce904d7beb10a4fcd194b39523a705558232bb7eb64735f41751602374c887bddf0bd3ace673a5d7b8660ed9581f39cd582b08561d8afd434939413956a078250631968a53d698a043b57f10fd367120a8586d0f4179477c2b307bf773e4a2bc4df9883192db82bb1c94efb5a6cf1e0055d6dfdb1802f9a2b6abb0554eab35218bc318c4d25e92cae29b1ad48aac14e9022ea7734e972f2644c0d7295530f1ff9fda3d73604d06a63f4c5090ba871dcccb1f31c25255ca0c0c696b3cb7a35ee60e55b4ceb1dd6c2d9b79003e0eb842334dfc73fea820a0ba659c558362f167d4251560f2f573", @ANYBLOB="000403e1a7196900290a9969a054ead3f1000000feffffff82931cbe3400028006000b070000000006000e004e06000f0004000000080003000200000006000b0000000000000100000000feffffff004b61aefb12acf63f28a2a17f97f04628ef3ff7008000000000000000e7e51cff933122a59ca00463122e342e0b56049b9c062b094cbe3f50993abff2dd83986a496277d2089dbc65089482151400000000cd263c151a411c907e3bb597178fb8d8126969b32761d4b037d63781b6a9525f1a"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x9000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0xe9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x9, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x3}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x0) connect$bt_rfcomm(r5, &(0x7f00000005c0)={0x1f, @none, 0x11}, 0xa) close(r1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000002c0)) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x9, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r6, 0x2) r8 = socket$inet(0x2, 0x3, 0x2) mmap(&(0x7f0000039000/0x2000)=nil, 0x2000, 0x2000000, 0x2011, r8, 0x2000) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x20, 0x0, 0x0) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = accept(r1, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) 2.150042818s ago: executing program 0 (id=4078): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f00000002c0)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2711, @local}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:usr_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.915924521s ago: executing program 1 (id=4079): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d800000018000100007c00000000b904021d080406037c09e8fe55a10a0015400400142603604ef02f00160006000600a80006f0200002400700027c035c0461c1d67f6f94007134cf6efbbca68000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x48040) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000040)=@sco={0x1f, @none}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)="fa7d83ea91f307af363e9f6fa9fa13fc2bee9d05567aadc8ebd0e0b0e59878b8c93435a0e2105c0c2ece75ac7430a23419d34f859ea372", 0x37}, {&(0x7f00000001c0)="562d5c51896f0564dbea417e55f923977eca752b9d6f6e80f0c466fcaecfb57aa3e721c8b2f23323dd29ef7826948917454dcd68fc311cd29c4468afc7e46d397fa223680425949e2c6fb77d922e685c570d606090edc1405c7f5df7bdb18c8a7404ec2b36937f37afe2ec4f53e0ec9f8b3e33ca4ee70e399ceaa78a3d1e0786ea17ced7dae26c550ef01e5b348d2d21da63107a156c28f3470986b9516e6adcf0b295a671dc69ed0d969be88b3d279de0a047b3c95730a921421c998b9a47b43561", 0xc2}, {&(0x7f0000000400)="da7c02b48e7d88b7dfedda45478ad43692008b31c9b6fc0fc05fefb4f08a1c53a8c7b9df4c4fc672cc84651d0d470931caf8ebf5a9c9b5ca235946c86cf9e1b7c95f83fee6dd30f0bfcce7cdbabe8159422ec34b164d96a862622e01ebdba4757e47c5a253e6b5e2112f0d2bfa206f0b4ab18affb55a5df3946807d6c1e35554f112", 0x82}], 0x3}, 0x24040084) 1.832855278s ago: executing program 3 (id=4080): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f00000008c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0xc884) sendto$inet6(r1, 0x0, 0x11, 0x48815, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000080000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000cb0400000100000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) 1.764324962s ago: executing program 0 (id=4081): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800001000001d0000000000000000009500000000006350"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b912"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xffffffffffffff9a, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffffc, 0x0, 0x0, 0xaf, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x1c, 0x140f, 0x1, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x8) 1.739175525s ago: executing program 2 (id=4082): socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 1.614022866s ago: executing program 4 (id=4083): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000500)=""/192, 0xc0}, {&(0x7f00000005c0)=""/182, 0xb6}, {&(0x7f0000000cc0)=""/100, 0x64}, {&(0x7f00000008c0)=""/90, 0x5a}, {&(0x7f0000000940)=""/115, 0x73}, {&(0x7f00000009c0)=""/159, 0x9f}, {&(0x7f0000000a80)=""/53, 0x35}, {&(0x7f0000000ac0)=""/110, 0x6e}, {&(0x7f0000000b40)=""/47, 0x2f}], 0x10000000000001c9}, 0x6}], 0x2, 0x0, 0x0) poll(&(0x7f0000000200)=[{r0, 0x4}], 0x1, 0x9) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000007cc38af8ffe1000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r6 = socket$inet(0x2, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20082000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x6, 0x2, 0x4246}, @TIPC_NLA_NET_NODEID={0x0, 0x3, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x17c, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x134, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x71c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x801}, 0x40000) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001f40)={0x174, r8, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xed}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x999}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8578}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe65a}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x746}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x14}, 0x400c8) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r9 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@xdp={0x2c, 0x0, 0x0}, 0x0, 0x80c00) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r9, 0x4058587a, &(0x7f0000001ec0)={{0xffffffffffffffff, &(0x7f0000000380)='($,\x00', 0x20800, &(0x7f00000003c0)={@align=0x9, {0x22, 0x200, 0x0, 0x6}}, 0x7, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)}, {[0x1, 0x8, 0x721, 0x5]}, 0x7, 0x1000, &(0x7f0000000ec0)=""/4096}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', r10}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="61003288e100", @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @empty}}}}}, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01df39fd5b2f06f5298b67dbda559944e77dec53c65fe4ad333d997fa8f9a728e0b00461d9f282d2eeb64b181810d1b63ef82bc5a0adfb188613fb3256dd5a043bcc86a968f046d02f68ccada80d192e922bd77deb17f3b1b635d3685521bf7333c4ca0cd643084a852b21ff8bf763a382bdda0560199c2c1ff0f525d18775b9b56ccf03005c40e538fdf7", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.420432055s ago: executing program 2 (id=4084): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000000}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0x8, 0x2}, {0x85, 0x0, 0x0, 0xc9}}]}, &(0x7f00000001c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.187365403s ago: executing program 0 (id=4085): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x600}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7d0f3550}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x2}, {}, {}, {0x7fff, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x83}, {}, {}, {}, {}, {}, {0x5fa6e66}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x40, 0x10000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8eed}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7, 0xbd}, {}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x8}, {}, {0xfffffffd}], [{0x0, 0x1}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x6f80cfe0f674dcf0}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 1.114173248s ago: executing program 2 (id=4086): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000810) socket(0x1f, 0x3, 0x0) listen(0xffffffffffffffff, 0x7) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x400a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b", 0x3a}, {&(0x7f0000000080)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) recvmmsg(r3, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01, 0x600}}, {{0x0, 0x0, &(0x7f0000000380), 0x5}, 0x10}, {{0x0, 0x0, 0x0}, 0x1}], 0x4000000000001b2, 0x48, 0x0) writev(r2, &(0x7f0000000140), 0x100000000000010b) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) socket(0x2, 0x80805, 0x0) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r5, 0x607d8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000800000000000000019000000000000", @ANYRES32=r8, @ANYBLOB="10005a800c000180060001000c0c0000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4, r5}, 0xc) 1.071719422s ago: executing program 4 (id=4087): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2, 0xb}}}, 0x32) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x38, 0x301, 0x70bd27, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x48d3}, 0x0) socket$pppoe(0x18, 0x1, 0x0) 836.036511ms ago: executing program 0 (id=4088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x5b0, 0x0, 0x11, 0x148, 0x308, 0x10, 0x518, 0x2a8, 0x2a8, 0x518, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2c8, 0x308, 0x1c, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x18, "75d07cef3ddc9945030640fecbb103b3b2b5fb80ab318e79a78014111178"}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x0, 'bridge_slave_1\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x68, 0x0, 0x0, 0x3, 0x2, 0x80, 0x0, 0x40}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x610) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 672.179027ms ago: executing program 1 (id=4089): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"}) 542.068896ms ago: executing program 3 (id=4090): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf250200000508000300", @ANYRES32=r3, @ANYBLOB="d8ac2279b4bf8a911a0a1f1dd4dcfec1709ab7db8a130eb195c8ece36438a71e772d2e5436a75f955be5bf5c23119a9988f0a2e000caeb94df458a1891fee23c8a03ae"], 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x408c4) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x12, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffd1de, 0x0, 0x0, 0x0, 0x80000001}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ldst={0x2, 0x0, 0x2, 0xa, 0x7, 0x18, 0x10}]}, &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0x5, 0x3}, 0x10, 0x1c3d1}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="1a0000000800000000000000", @ANYRES32=r5, @ANYBLOB="126683a7e050d70c5bff19d4a760b62b1c3084dea85d09000000000000b2c250e44e9b04fd66d07382646dd67f68", @ANYRES64=0x0], 0x20) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r6, 0x0, 0x2, &(0x7f0000000240)=0x9, 0x4) connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) (async) mmap(&(0x7f0000b45000/0x1000)=nil, 0x1000, 0x3, 0x1010, r0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8], 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x4048044) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) setsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000280)={r3, @multicast1, @empty}, 0xc) (async) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r10, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r10, 0xd1383000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r11, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r11, 0x1000) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x9, 0x12, r7, 0xfffff000) (async) getsockopt$inet_opts(r10, 0x0, 0x9, &(0x7f0000000140)=""/49, &(0x7f0000000180)=0x31) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r9, 0x0) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) 300.00839ms ago: executing program 4 (id=4091): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2c, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r5, &(0x7f0000000100)=""/253, 0xfd, 0x40, 0x0, 0x0) bind$x25(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0x0, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000000000002004e21ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000400000002004e246401010200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e220a01010000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e000000100"/650], 0x290) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32=r4, @ANYBLOB="fffffffffffffff6b702040001"], 0x0, 0x200001, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x26e1, 0x0) close(r7) 132.279211ms ago: executing program 1 (id=4092): syz_init_net_socket$x25(0x9, 0x5, 0x0) close(0xffffffffffffffff) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f0000000000)) r0 = socket(0x1d, 0x2, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000003c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r5, 0xf5f) r6 = accept(r5, 0x0, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0xc010) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8922, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xf18385b089cf4387, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x20000000000001e8, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0xfffffffffffffd32, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r11 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) socket$kcm(0x10, 0x2, 0x0) 116.513369ms ago: executing program 0 (id=4093): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="6a12780cf70633cebb374f3087592e7497ce904d7beb10a4fcd194b39523a705558232bb7eb64735f41751602374c887bddf0bd3ace673a5d7b8660ed9581f39cd582b08561d8afd434939413956a078250631968a53d698a043b57f10fd367120a8586d0f4179477c2b307bf773e4a2bc4df9883192db82bb1c94efb5a6cf1e0055d6dfdb1802f9a2b6abb0554eab35218bc318c4d25e92cae29b1ad48aac14e9022ea7734e972f2644c0d7295530f1ff9fda3d73604d06a63f4c5090ba871dcccb1f31c25255ca0c0c696b3cb7a35ee60e55b4ceb1dd6c2d9b79003e0eb842334dfc73fea820a0ba659c558362f167d4251560f2f573", @ANYBLOB="000403e1a7196900290a9969a054ead3f1000000feffffff82931cbe3400028006000b070000000006000e004e06000f0004000000080003000200000006000b0000000000000100000000feffffff004b61aefb12acf63f28a2a17f97f04628ef3ff7008000000000000000e7e51cff933122a59ca00463122e342e0b56049b9c062b094cbe3f50993abff2dd83986a496277d2089dbc65089482151400000000cd263c151a411c907e3bb597178fb8d8126969b32761d4b037d63781b6a9525f1a"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x9000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0xe9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x9, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x3}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x0) connect$bt_rfcomm(r5, &(0x7f00000005c0)={0x1f, @none, 0x11}, 0xa) close(r1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000002c0)) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x9, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r6, 0x2) r8 = socket$inet(0x2, 0x3, 0x2) mmap(&(0x7f0000039000/0x2000)=nil, 0x2000, 0x2000000, 0x2011, r8, 0x2000) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x20, 0x0, 0x0) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = accept(r1, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) 0s ago: executing program 2 (id=4094): socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) kernel console output (not intermixed with test programs): 487.864217][T18272] Call Trace: [ 487.864224][T18272] [ 487.864233][T18272] dump_stack_lvl+0xe8/0x150 [ 487.864266][T18272] should_fail_ex+0x410/0x560 [ 487.864297][T18272] _copy_from_iter+0x1d3/0x1660 [ 487.864326][T18272] ? __alloc_skb+0x27a/0x7a0 [ 487.864356][T18272] ? __alloc_skb+0x27a/0x7a0 [ 487.864385][T18272] ? __alloc_skb+0x27a/0x7a0 [ 487.864412][T18272] ? __pfx__copy_from_iter+0x10/0x10 [ 487.864435][T18272] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 487.864455][T18272] ? __alloc_skb+0x27a/0x7a0 [ 487.864480][T18272] ? __alloc_skb+0x27a/0x7a0 [ 487.864513][T18272] ? netlink_sendmsg+0x650/0xb40 [ 487.864538][T18272] ? skb_put+0x112/0x210 [ 487.864569][T18272] netlink_sendmsg+0x6c0/0xb40 [ 487.864603][T18272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.864636][T18272] ? apparmor_socket_sendmsg+0x98/0x360 [ 487.864663][T18272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.864687][T18272] sock_sendmsg_nosec+0x14e/0x190 [ 487.864715][T18272] ____sys_sendmsg+0x54e/0x850 [ 487.864751][T18272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.864792][T18272] ? import_iovec+0x73/0xa0 [ 487.864823][T18272] ___sys_sendmsg+0x2a5/0x360 [ 487.864841][T18272] ? __lock_acquire+0x747/0x2de0 [ 487.864867][T18272] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.864928][T18272] ? __fget_files+0x2a/0x420 [ 487.864956][T18272] ? __fget_files+0x3a2/0x420 [ 487.864994][T18272] __x64_sys_sendmsg+0x1b1/0x290 [ 487.865017][T18272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.865058][T18272] do_syscall_64+0x166/0x520 [ 487.865083][T18272] ? trace_irq_disable+0x3b/0x140 [ 487.865104][T18272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.865124][T18272] ? clear_bhb_loop+0x70/0xc0 [ 487.865149][T18272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.865169][T18272] RIP: 0033:0x7f32af39e1d9 [ 487.865187][T18272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.865204][T18272] RSP: 002b:00007f32b022a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.865226][T18272] RAX: ffffffffffffffda RBX: 00007f32af625fa0 RCX: 00007f32af39e1d9 [ 487.865240][T18272] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 487.865252][T18272] RBP: 00007f32b022a090 R08: 0000000000000000 R09: 0000000000000000 [ 487.865265][T18272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.865277][T18272] R13: 00007f32af626038 R14: 00007f32af625fa0 R15: 00007fff59fe4508 [ 487.865310][T18272] [ 488.252997][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3339'. [ 488.253021][T18273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3339'. [ 488.677630][T18280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3341'. [ 489.248018][T18291] GUP no longer grows the stack in syz.0.3344 (18291): 200000003000-20000000a000 (200000001000) [ 489.248051][T18291] CPU: 1 UID: 0 PID: 18291 Comm: syz.0.3344 Not tainted syzkaller #0 PREEMPT(full) [ 489.248073][T18291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 489.248084][T18291] Call Trace: [ 489.248092][T18291] [ 489.248101][T18291] dump_stack_lvl+0xe8/0x150 [ 489.248135][T18291] __get_user_pages+0x23b6/0x2750 [ 489.248169][T18291] ? lock_acquire+0x115/0x350 [ 489.248207][T18291] ? __gup_longterm_locked+0xc3b/0x15c0 [ 489.248252][T18291] __gup_longterm_locked+0xd52/0x15c0 [ 489.248283][T18291] ? lock_acquire+0x115/0x350 [ 489.248322][T18291] gup_fast_fallback+0x1d92/0x20e0 [ 489.248383][T18291] ? __pfx_gup_fast_fallback+0x10/0x10 [ 489.248413][T18291] ? lock_acquire+0x115/0x350 [ 489.248432][T18291] ? is_valid_gup_args+0x11f/0x200 [ 489.248461][T18291] ? get_user_pages_fast+0x4d/0xb0 [ 489.248491][T18291] __iov_iter_get_pages_alloc+0x378/0xa40 [ 489.248525][T18291] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 489.248552][T18291] iov_iter_get_pages2+0x5e/0xa0 [ 489.248584][T18291] __se_sys_vmsplice+0x7b5/0x1660 [ 489.248625][T18291] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 489.248645][T18291] ? __pfx_futex_wait+0x10/0x10 [ 489.248697][T18291] ? vm_mmap_pgoff+0x35a/0x4e0 [ 489.248720][T18291] ? lock_acquire+0x115/0x350 [ 489.248778][T18291] do_syscall_64+0x166/0x520 [ 489.248802][T18291] ? trace_irq_disable+0x3b/0x140 [ 489.248823][T18291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.248843][T18291] ? clear_bhb_loop+0x70/0xc0 [ 489.248868][T18291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.248888][T18291] RIP: 0033:0x7f32af39e1d9 [ 489.248907][T18291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.248925][T18291] RSP: 002b:00007f32b0209028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 489.248946][T18291] RAX: ffffffffffffffda RBX: 00007f32af626090 RCX: 00007f32af39e1d9 [ 489.248960][T18291] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c [ 489.248972][T18291] RBP: 00007f32af435888 R08: 0000000000000000 R09: 0000000000000000 [ 489.248985][T18291] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 489.248998][T18291] R13: 00007f32af626128 R14: 00007f32af626090 R15: 00007fff59fe4508 [ 489.249033][T18291] [ 489.731093][T18305] netlink: 'syz.3.3349': attribute type 1 has an invalid length. [ 489.956614][T18312] netlink: 'syz.2.3347': attribute type 27 has an invalid length. [ 490.334751][T18324] netlink: 'syz.4.3352': attribute type 4 has an invalid length. [ 490.334775][T18324] __nla_validate_parse: 2 callbacks suppressed [ 490.334785][T18324] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3352'. [ 490.401734][T18316] FAULT_INJECTION: forcing a failure. [ 490.401734][T18316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.401767][T18316] CPU: 1 UID: 0 PID: 18316 Comm: syz.3.3351 Not tainted syzkaller #0 PREEMPT(full) [ 490.401792][T18316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 490.401802][T18316] Call Trace: [ 490.401808][T18316] [ 490.401816][T18316] dump_stack_lvl+0xe8/0x150 [ 490.401848][T18316] should_fail_ex+0x410/0x560 [ 490.401877][T18316] _copy_from_user+0x2d/0xb0 [ 490.401904][T18316] kstrtouint_from_user+0xd6/0x180 [ 490.401932][T18316] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 490.401963][T18316] ? lock_acquire+0x115/0x350 [ 490.401990][T18316] proc_fail_nth_write+0x8e/0x210 [ 490.402012][T18316] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 490.402042][T18316] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 490.402063][T18316] vfs_write+0x296/0xba0 [ 490.402092][T18316] ? __pfx_vfs_write+0x10/0x10 [ 490.402113][T18316] ? __fget_files+0x2a/0x420 [ 490.402153][T18316] ? __fget_files+0x3a2/0x420 [ 490.402180][T18316] ? __fget_files+0x2a/0x420 [ 490.402215][T18316] ksys_write+0x150/0x270 [ 490.402236][T18316] ? __pfx_ksys_write+0x10/0x10 [ 490.402268][T18316] do_syscall_64+0x166/0x520 [ 490.402292][T18316] ? trace_irq_disable+0x3b/0x140 [ 490.402312][T18316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.402333][T18316] ? clear_bhb_loop+0x70/0xc0 [ 490.402356][T18316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.402376][T18316] RIP: 0033:0x7fadec75ea0e [ 490.402399][T18316] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 490.402416][T18316] RSP: 002b:00007faded620fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 490.402437][T18316] RAX: ffffffffffffffda RBX: 00007faded6216c0 RCX: 00007fadec75ea0e [ 490.402453][T18316] RDX: 0000000000000001 RSI: 00007faded6210a0 RDI: 0000000000000004 [ 490.402465][T18316] RBP: 00007faded621090 R08: 0000000000000000 R09: 0000000000000000 [ 490.402478][T18316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 490.402490][T18316] R13: 00007fadeca26038 R14: 00007fadeca25fa0 R15: 00007ffc74fb8658 [ 490.402523][T18316] [ 490.686412][T18324] .`: renamed from bond0 (while UP) [ 491.183051][T18351] syzkaller0: entered promiscuous mode [ 491.183233][T18351] syzkaller0: entered allmulticast mode [ 491.769539][T18369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3366'. [ 491.769560][T18369] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3366'. [ 491.769576][T18369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3366'. [ 491.903180][T18378] ip_tables: iptables: counters copy to user failed while replacing table [ 492.348667][T18394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.451020][T18392] team0 (unregistering): Port device team_slave_0 removed [ 492.529192][T18394] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 492.539144][T18392] team0 (unregistering): Port device team_slave_1 removed [ 492.742980][T18404] ip_tables: iptables: counters copy to user failed while replacing table [ 493.207029][T18422] IPVS: set_ctl: invalid protocol: 16 224.0.0.1:20000 [ 493.360984][T18432] FAULT_INJECTION: forcing a failure. [ 493.360984][T18432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.361018][T18432] CPU: 1 UID: 0 PID: 18432 Comm: syz.0.3380 Not tainted syzkaller #0 PREEMPT(full) [ 493.361041][T18432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 493.361053][T18432] Call Trace: [ 493.361061][T18432] [ 493.361070][T18432] dump_stack_lvl+0xe8/0x150 [ 493.361102][T18432] should_fail_ex+0x410/0x560 [ 493.361131][T18432] _copy_from_user+0x2d/0xb0 [ 493.361157][T18432] __sys_bpf+0x2e7/0xd90 [ 493.361185][T18432] ? __pfx___sys_bpf+0x10/0x10 [ 493.361219][T18432] ? __fget_files+0x2a/0x420 [ 493.361266][T18432] ? ksys_write+0x242/0x270 [ 493.361288][T18432] ? __pfx_ksys_write+0x10/0x10 [ 493.361312][T18432] __x64_sys_bpf+0xba/0xd0 [ 493.361336][T18432] do_syscall_64+0x166/0x520 [ 493.361422][T18432] ? trace_irq_disable+0x3b/0x140 [ 493.361451][T18432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.361474][T18432] ? clear_bhb_loop+0x70/0xc0 [ 493.361500][T18432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.361521][T18432] RIP: 0033:0x7f32af39e1d9 [ 493.361540][T18432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.361557][T18432] RSP: 002b:00007f32b022a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 493.361579][T18432] RAX: ffffffffffffffda RBX: 00007f32af625fa0 RCX: 00007f32af39e1d9 [ 493.361594][T18432] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 493.361610][T18432] RBP: 00007f32b022a090 R08: 0000000000000000 R09: 0000000000000000 [ 493.361622][T18432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.361635][T18432] R13: 00007f32af626038 R14: 00007f32af625fa0 R15: 00007fff59fe4508 [ 493.361668][T18432] [ 494.903996][T18477] netlink: 'syz.3.3389': attribute type 8 has an invalid length. [ 494.910217][T18477] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3389'. [ 495.334845][T18487] FAULT_INJECTION: forcing a failure. [ 495.334845][T18487] name failslab, interval 1, probability 0, space 0, times 0 [ 495.334879][T18487] CPU: 1 UID: 0 PID: 18487 Comm: syz.0.3391 Not tainted syzkaller #0 PREEMPT(full) [ 495.334902][T18487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 495.334914][T18487] Call Trace: [ 495.334921][T18487] [ 495.334930][T18487] dump_stack_lvl+0xe8/0x150 [ 495.334964][T18487] should_fail_ex+0x410/0x560 [ 495.334995][T18487] should_failslab+0xa8/0x100 [ 495.335024][T18487] __kmalloc_noprof+0xfe/0x720 [ 495.335048][T18487] ? bpf_test_init+0x9f/0x150 [ 495.335071][T18487] ? bpf_test_init+0x9f/0x150 [ 495.335103][T18487] bpf_test_init+0x9f/0x150 [ 495.335135][T18487] bpf_prog_test_run_skb+0x31e/0x2230 [ 495.335160][T18487] ? lock_acquire+0x115/0x350 [ 495.335198][T18487] ? __fget_files+0x3a2/0x420 [ 495.335225][T18487] ? __fget_files+0x2a/0x420 [ 495.335258][T18487] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 495.335283][T18487] bpf_prog_test_run+0x2c5/0x340 [ 495.335313][T18487] __sys_bpf+0xa22/0xd90 [ 495.335343][T18487] ? __pfx___sys_bpf+0x10/0x10 [ 495.335378][T18487] ? __fget_files+0x2a/0x420 [ 495.335423][T18487] ? ksys_write+0x242/0x270 [ 495.335444][T18487] ? __pfx_ksys_write+0x10/0x10 [ 495.335468][T18487] __x64_sys_bpf+0xba/0xd0 [ 495.335490][T18487] do_syscall_64+0x166/0x520 [ 495.335511][T18487] ? trace_irq_disable+0x3b/0x140 [ 495.335530][T18487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.335548][T18487] ? clear_bhb_loop+0x70/0xc0 [ 495.335572][T18487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.335592][T18487] RIP: 0033:0x7f32af39e1d9 [ 495.335611][T18487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.335629][T18487] RSP: 002b:00007f32b022a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 495.335652][T18487] RAX: ffffffffffffffda RBX: 00007f32af625fa0 RCX: 00007f32af39e1d9 [ 495.335666][T18487] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 495.335680][T18487] RBP: 00007f32b022a090 R08: 0000000000000000 R09: 0000000000000000 [ 495.335693][T18487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.335705][T18487] R13: 00007f32af626038 R14: 00007f32af625fa0 R15: 00007fff59fe4508 [ 495.335737][T18487] [ 496.196197][T18422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 496.273237][ C1] ip6_tunnel: 8 xmit: Local address not yet configured! [ 496.500665][T18521] netlink: 'syz.4.3398': attribute type 3 has an invalid length. [ 496.500687][T18521] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3398'. [ 497.815782][T18571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3412'. [ 497.815929][T18571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3412'. [ 497.980605][T18571] vxcan3: entered promiscuous mode [ 498.051200][T18584] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 498.158163][T18586] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3415'. [ 498.605374][T18600] batadv_slave_0: default FDB implementation only supports local addresses [ 499.186795][T18620] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 499.469824][T18633] netlink: 'syz.3.3424': attribute type 58 has an invalid length. [ 499.469848][T18633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3424'. [ 499.565884][T18643] netlink: 'syz.3.3424': attribute type 58 has an invalid length. [ 499.565905][T18643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3424'. [ 500.202579][T18664] FAULT_INJECTION: forcing a failure. [ 500.202579][T18664] name failslab, interval 1, probability 0, space 0, times 0 [ 500.202612][T18664] CPU: 0 UID: 0 PID: 18664 Comm: syz.3.3433 Not tainted syzkaller #0 PREEMPT(full) [ 500.202634][T18664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 500.202645][T18664] Call Trace: [ 500.202653][T18664] [ 500.202662][T18664] dump_stack_lvl+0xe8/0x150 [ 500.202702][T18664] should_fail_ex+0x410/0x560 [ 500.202733][T18664] should_failslab+0xa8/0x100 [ 500.202760][T18664] __kmalloc_noprof+0xfe/0x720 [ 500.202782][T18664] ? security_sk_alloc+0x52/0x360 [ 500.202800][T18664] ? security_sk_alloc+0x52/0x360 [ 500.202826][T18664] security_sk_alloc+0x52/0x360 [ 500.202849][T18664] sk_prot_alloc+0x101/0x210 [ 500.202876][T18664] ? sk_alloc+0x27/0x390 [ 500.202906][T18664] sk_alloc+0x3a/0x390 [ 500.202938][T18664] bpf_prog_test_run_skb+0x3a6/0x2230 [ 500.202963][T18664] ? lock_acquire+0x115/0x350 [ 500.203000][T18664] ? __fget_files+0x3a2/0x420 [ 500.203025][T18664] ? __fget_files+0x2a/0x420 [ 500.203058][T18664] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 500.203083][T18664] bpf_prog_test_run+0x2c5/0x340 [ 500.203112][T18664] __sys_bpf+0xa22/0xd90 [ 500.203143][T18664] ? __pfx___sys_bpf+0x10/0x10 [ 500.203177][T18664] ? __fget_files+0x2a/0x420 [ 500.203221][T18664] ? ksys_write+0x242/0x270 [ 500.203242][T18664] ? __pfx_ksys_write+0x10/0x10 [ 500.203270][T18664] __x64_sys_bpf+0xba/0xd0 [ 500.203294][T18664] do_syscall_64+0x166/0x520 [ 500.203319][T18664] ? trace_irq_disable+0x3b/0x140 [ 500.203339][T18664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.203359][T18664] ? clear_bhb_loop+0x70/0xc0 [ 500.203383][T18664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.203403][T18664] RIP: 0033:0x7fadec79e1d9 [ 500.203421][T18664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.203439][T18664] RSP: 002b:00007faded621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 500.203460][T18664] RAX: ffffffffffffffda RBX: 00007fadeca25fa0 RCX: 00007fadec79e1d9 [ 500.203475][T18664] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 500.203488][T18664] RBP: 00007faded621090 R08: 0000000000000000 R09: 0000000000000000 [ 500.203500][T18664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.203513][T18664] R13: 00007fadeca26038 R14: 00007fadeca25fa0 R15: 00007ffc74fb8658 [ 500.203545][T18664] [ 500.629732][T18671] xfrm1: entered allmulticast mode [ 500.711697][T18672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3435'. [ 501.095500][T18698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.249720][T18705] netlink: 'syz.1.3440': attribute type 15 has an invalid length. [ 501.641900][T18722] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 501.657958][T18722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3446'. [ 501.657983][T18722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3446'. [ 501.793521][T18692] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 501.793547][T18692] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 502.059414][T18733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3449'. [ 502.456206][T18742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3452'. [ 502.476555][T18743] syzkaller0: entered promiscuous mode [ 502.476577][T18743] syzkaller0: entered allmulticast mode [ 502.481251][T18742] tipc: Started in network mode [ 502.482309][T18742] tipc: Node identity 1e132dd533d7, cluster identity 4711 [ 502.499520][T18742] tipc: Enabled bearer , priority 0 [ 502.499956][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.500351][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.500783][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.501164][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.515059][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.515542][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.515971][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.532670][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.533075][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.537196][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.550595][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.551064][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.554976][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.562213][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.562651][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.563085][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.563499][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.574038][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.574444][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.574853][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.581170][T18742] tipc: Enabling of bearer rejected, already enabled [ 502.663622][T18749] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3453'. [ 502.674374][T18741] tipc: Resetting bearer [ 502.806666][T18741] tipc: Disabling bearer [ 502.835095][T18692] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 502.835120][T18692] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 502.844928][T18751] netlink: 'syz.0.3453': attribute type 2 has an invalid length. [ 502.844951][T18751] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3453'. [ 502.864962][T18750] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3454'. [ 502.865735][T18750] bridge_slave_0: left allmulticast mode [ 502.865758][T18750] bridge_slave_0: left promiscuous mode [ 502.865970][T18750] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.067263][T18692] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 503.067289][T18692] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 503.123789][T18692] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 503.123822][T18692] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 503.181281][T18692] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 503.181307][T18692] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 503.374121][T18764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3456'. [ 503.599021][T18767] netlink: 'syz.1.3458': attribute type 1 has an invalid length. [ 504.259910][T18792] xt_LOG: prefix is not null-terminated [ 504.276914][T18792] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 504.561584][T18798] Cannot find del_set index 2 as target [ 504.591527][T18797] lo: entered promiscuous mode [ 504.909134][T18797] tunl0: entered promiscuous mode [ 504.915096][T18797] gre0: entered promiscuous mode [ 504.941466][T18797] gretap0: entered promiscuous mode [ 504.968085][T18797] erspan0: entered promiscuous mode [ 504.987518][T18797] ip_vti0: entered promiscuous mode [ 504.996336][T18797] ip6_vti0: entered promiscuous mode [ 505.015022][T18797] sit0: entered promiscuous mode [ 505.030039][T18797] ip6tnl0: entered promiscuous mode [ 505.043157][T18797] ip6gre0: entered promiscuous mode [ 505.063084][T18797] syz_tun: entered promiscuous mode [ 505.102823][T18797] ip6gretap0: entered promiscuous mode [ 505.119879][T18797] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.120478][T18797] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.127073][T18797] bridge0: entered promiscuous mode [ 505.143596][T18797] vcan0: entered promiscuous mode [ 505.150407][T18797] dummy0: entered promiscuous mode [ 505.160269][T18797] nlmon0: entered promiscuous mode [ 505.161758][T18797] batadv0: entered promiscuous mode [ 505.180192][T18797] veth0: entered promiscuous mode [ 505.195513][T18797] veth1: entered promiscuous mode [ 505.218708][T18797] wg0: entered promiscuous mode [ 505.248737][T18797] wg1: entered promiscuous mode [ 505.254465][T18813] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3472'. [ 505.269904][T18797] wg2: entered promiscuous mode [ 505.276973][T18797] veth0_to_bridge: entered promiscuous mode [ 505.298724][T18797] veth1_to_bridge: entered promiscuous mode [ 505.359363][T18797] veth0_to_bond: entered promiscuous mode [ 505.372700][T18797] bond_slave_0: entered promiscuous mode [ 505.374154][T18797] veth1_to_bond: entered promiscuous mode [ 505.395084][T18797] bond_slave_1: entered promiscuous mode [ 505.395785][T18797] veth0_to_team: entered promiscuous mode [ 505.414295][T18797] team_slave_0: entered promiscuous mode [ 505.429871][T18797] veth1_to_team: entered promiscuous mode [ 505.446580][T18797] team_slave_1: entered promiscuous mode [ 505.446921][T18797] veth0_to_batadv: entered promiscuous mode [ 505.460772][T18797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.460828][T18797] batadv_slave_0: entered promiscuous mode [ 505.474875][T18797] veth1_to_batadv: entered promiscuous mode [ 505.485061][T18797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.485117][T18797] batadv_slave_1: entered promiscuous mode [ 505.499696][T18797] xfrm0: entered promiscuous mode [ 505.527998][T18797] veth1_to_hsr: entered promiscuous mode [ 505.564525][T18797] hsr0: entered promiscuous mode [ 505.572970][T18797] veth1_virt_wifi: entered promiscuous mode [ 505.584676][T18797] veth0_virt_wifi: entered promiscuous mode [ 505.591533][T18797] virt_wifi0: entered promiscuous mode [ 505.616710][T18797] vlan1: entered promiscuous mode [ 505.642513][T18797] macvlan0: entered promiscuous mode [ 505.653900][T18797] macvlan1: entered promiscuous mode [ 505.659250][T18797] ipvlan0: entered promiscuous mode [ 505.659417][T18797] ipvlan1: entered promiscuous mode [ 505.704818][T18797] macvtap0: entered promiscuous mode [ 505.790141][T18797] macsec0: entered promiscuous mode [ 505.808208][T18797] geneve0: entered promiscuous mode [ 505.818980][T18797] geneve1: entered promiscuous mode [ 505.833254][T18797] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 505.838595][T18797] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 505.841730][T18797] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 505.877591][T18816] netlink: Unknown conntrack attr (type=7174, max=9) [ 505.877626][T18816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.880001][T18797] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 505.909788][T18797] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 505.909967][T18797] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 505.910205][T18797] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 505.956482][T18797] syzkaller0: entered promiscuous mode [ 505.961241][T18797] bond1: entered promiscuous mode [ 505.977089][T18797] vxlan0: entered promiscuous mode [ 505.980775][T18797] ip6tnl1: entered promiscuous mode [ 505.980910][T18797] syzkaller0.0001: entered promiscuous mode [ 506.013147][ T6161] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.013187][ T6161] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.019703][ T9805] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.019738][ T9805] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.019778][ T9805] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.019803][ T9805] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.019839][ T9805] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.019862][ T9805] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.119275][T18805] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 506.439024][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3475'. [ 506.782881][T18833] bond1: option resend_igmp: invalid value (2878) [ 506.782906][T18833] bond1: option resend_igmp: allowed values 0 - 255 [ 506.807346][T18833] bond1 (unregistering): Released all slaves [ 506.995784][T18837] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 506.999348][T18849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3481'. [ 507.067240][T18853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3481'. [ 507.067263][T18853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3481'. [ 507.303921][T18849] ipvlan2: entered promiscuous mode [ 507.318361][T18849] team0: Device ipvlan2 failed to register rx_handler [ 507.657560][T18860] debugfs: 'hsr1' already exists in 'hsr' [ 507.657586][T18860] Cannot create hsr debugfs directory [ 507.657819][T18860] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 507.657838][T18860] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 507.810113][T18870] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3487'. [ 508.266278][T18887] syzkaller0: entered promiscuous mode [ 508.266303][T18887] syzkaller0: entered allmulticast mode [ 508.302971][T18886] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3494'. [ 508.345203][T18886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3494'. [ 508.389599][T18893] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3492'. [ 508.402464][T18894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3494'. [ 508.473964][T18895] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3492'. [ 508.474100][T18895] nbd: must specify at least one socket [ 508.564387][T18895] batman_adv: batadv0: Interface activated: syzkaller0 [ 508.583198][T18884] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 508.583290][T18884] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 509.107109][T18902] netlink: 'syz.0.3497': attribute type 1 has an invalid length. [ 509.232991][T18904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3496'. [ 509.698539][T18920] syzkaller0: entered promiscuous mode [ 509.698563][T18920] syzkaller0: entered allmulticast mode [ 509.760127][T18920] openvswitch: netlink: IPv4 tun info is not correct [ 509.769430][T18920] netlink: 'syz.0.3504': attribute type 3 has an invalid length. [ 509.911196][T18929] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 512.734602][T18929] bond0 (unregistering): Released all slaves [ 512.821661][T18923] tipc: Enabling of bearer rejected, failed to enable media [ 513.152299][T18956] netlink: 'syz.4.3511': attribute type 1 has an invalid length. [ 513.290676][T18956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.479062][T18960] bond0: (slave veth3): Enslaving as an active interface with a down link [ 513.664169][T18965] 8021q: adding VLAN 0 to HW filter on device .` [ 513.804404][T18965] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 513.841219][T18956] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 513.853360][T18956] bond0: (slave batadv1): making interface the new active one [ 513.855151][T18956] batadv1: entered promiscuous mode [ 513.855596][T18956] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 514.337712][T18990] netlink: 'syz.2.3520': attribute type 62 has an invalid length. [ 514.547762][T19004] __nla_validate_parse: 1 callbacks suppressed [ 514.547784][T19004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3524'. [ 514.547800][T19004] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3524'. [ 514.551386][T19007] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3526'. [ 514.551735][T19004] netlink: 'syz.1.3524': attribute type 1 has an invalid length. [ 514.619680][T19014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.825714][T19015] bridge1: entered promiscuous mode [ 514.856812][T19015] bond1: (slave bridge1): making interface the new active one [ 514.857372][T19015] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 515.235935][ T31] audit: type=1800 audit(1791519519.820:13): pid=19040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3535" name="blkio.bfq.time_recursive" dev="tmpfs" ino=324 res=0 errno=0 [ 515.321821][T19037] v: renamed from veth0_vlan [ 515.446707][ T31] audit: type=1800 audit(1791519520.030:14): pid=19053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3535" name="blkio.bfq.time_recursive" dev="tmpfs" ino=324 res=0 errno=0 [ 515.479308][T19057] netlink: 404 bytes leftover after parsing attributes in process `syz.3.3539'. [ 515.624597][T19047] syzkaller0: entered promiscuous mode [ 515.624623][T19047] syzkaller0: entered allmulticast mode [ 515.650673][T19061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3539'. [ 515.718023][T19067] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3541'. [ 515.742716][T19057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.027916][T19099] bridge0: port 3(syz_tun) entered blocking state [ 520.029943][T19099] bridge0: port 3(syz_tun) entered disabled state [ 520.030109][T19099] syz_tun: entered allmulticast mode [ 520.052710][T19099] syz_tun: entered promiscuous mode [ 520.056468][T19099] bridge0: port 3(syz_tun) entered blocking state [ 520.056599][T19099] bridge0: port 3(syz_tun) entered forwarding state [ 520.516446][T19126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3552'. [ 520.516491][T19126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3552'. [ 520.745107][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3555'. [ 521.247452][T19155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3560'. [ 521.767771][T19172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3564'. [ 522.074041][T19175] netlink: 'syz.4.3565': attribute type 1 has an invalid length. [ 522.204435][T19181] netlink: 'syz.0.3567': attribute type 1 has an invalid length. [ 522.224443][T19182] netlink: 'syz.1.3568': attribute type 1 has an invalid length. [ 522.267169][T19181] 8021q: adding VLAN 0 to HW filter on device bond1 [ 522.372533][T19182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 522.380800][T19190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.404527][T19192] FAULT_INJECTION: forcing a failure. [ 522.404527][T19192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.404560][T19192] CPU: 1 UID: 0 PID: 19192 Comm: syz.3.3570 Not tainted syzkaller #0 PREEMPT(full) [ 522.404583][T19192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 522.404595][T19192] Call Trace: [ 522.404602][T19192] [ 522.404616][T19192] dump_stack_lvl+0xe8/0x150 [ 522.404651][T19192] should_fail_ex+0x410/0x560 [ 522.404682][T19192] _copy_from_user+0x2d/0xb0 [ 522.404712][T19192] copy_from_bpfptr+0x5c/0x90 [ 522.404737][T19192] bpf_prog_load+0xcdb/0x1c20 [ 522.404776][T19192] ? __pfx_bpf_prog_load+0x10/0x10 [ 522.404825][T19192] __sys_bpf+0xd0d/0xd90 [ 522.404857][T19192] ? __pfx___sys_bpf+0x10/0x10 [ 522.404891][T19192] ? __fget_files+0x2a/0x420 [ 522.404938][T19192] ? ksys_write+0x242/0x270 [ 522.404959][T19192] ? __pfx_ksys_write+0x10/0x10 [ 522.404983][T19192] __x64_sys_bpf+0xba/0xd0 [ 522.405007][T19192] do_syscall_64+0x166/0x520 [ 522.405031][T19192] ? trace_irq_disable+0x3b/0x140 [ 522.405058][T19192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.405079][T19192] ? clear_bhb_loop+0x70/0xc0 [ 522.405103][T19192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.405123][T19192] RIP: 0033:0x7fadec79e1d9 [ 522.405143][T19192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.405160][T19192] RSP: 002b:00007faded621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 522.405181][T19192] RAX: ffffffffffffffda RBX: 00007fadeca25fa0 RCX: 00007fadec79e1d9 [ 522.405196][T19192] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 522.405209][T19192] RBP: 00007faded621090 R08: 0000000000000000 R09: 0000000000000000 [ 522.405222][T19192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.405234][T19192] R13: 00007fadeca26038 R14: 00007fadeca25fa0 R15: 00007ffc74fb8658 [ 522.405267][T19192] [ 523.001637][T19211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3572'. [ 523.209811][T19214] xt_LOG: prefix is not null-terminated [ 523.237797][T19214] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 523.564543][T19211] hsr_slave_1 (unregistering): left promiscuous mode [ 524.300276][T19238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3578'. [ 524.300312][T19238] netlink: 'syz.3.3578': attribute type 7 has an invalid length. [ 524.300325][T19238] netlink: 'syz.3.3578': attribute type 8 has an invalid length. [ 524.300337][T19238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3578'. [ 524.508243][T19238] team0: entered promiscuous mode [ 524.508269][T19238] team_slave_0: entered promiscuous mode [ 524.527033][T19238] team_slave_1: entered promiscuous mode [ 524.545606][T19238] bond0: entered promiscuous mode [ 524.545632][T19238] bond_slave_0: entered promiscuous mode [ 524.546478][T19238] bond_slave_1: entered promiscuous mode [ 524.558238][T19238] erspan0: entered promiscuous mode [ 524.559893][T19238] debugfs: 'hsr1' already exists in 'hsr' [ 524.559917][T19238] Cannot create hsr debugfs directory [ 524.577968][T19238] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 524.965477][T19253] xt_LOG: prefix is not null-terminated [ 524.967263][T19253] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 524.978532][T19240] : option downdelay: invalid value (18446744073709547007) [ 524.978556][T19240] : option downdelay: allowed values 0 - 2147483647 [ 524.980722][ T31] audit: type=1804 audit(1791519529.560:15): pid=19248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3583" name="/newroot/142/memory.events" dev="tmpfs" ino=741 res=1 errno=0 [ 524.980768][ T31] audit: type=1800 audit(1791519529.560:16): pid=19248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3583" name="memory.events" dev="tmpfs" ino=741 res=0 errno=0 [ 525.054048][T19240]  (unregistering): Released all slaves [ 525.337809][ T1027] batadv1: left promiscuous mode [ 525.428801][T19261] xt_LOG: prefix is not null-terminated [ 525.431551][T19261] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 525.534855][T19263] netlink: 'syz.2.3588': attribute type 27 has an invalid length. [ 525.679323][T19279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 525.787889][T19267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3591'. [ 525.854323][T19267] ip6gre2: entered promiscuous mode [ 525.854385][T19267] ip6gre2: entered allmulticast mode [ 525.857391][T19287] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 525.965304][ T9807] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 525.965544][ T9807] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 525.992554][ T6469] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 526.063321][ T5740] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 526.187083][T19297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3598'. [ 526.187112][T19297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3598'. [ 526.187319][T19297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3598'. [ 526.187335][T19297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3598'. [ 526.187494][T19297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3598'. [ 526.187509][T19297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3598'. [ 526.187674][T19297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3598'. [ 526.187689][T19297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3598'. [ 526.187853][T19297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3598'. [ 526.435142][ T6469] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 526.461681][T19309] netlink: 'syz.1.3601': attribute type 1 has an invalid length. [ 526.618858][T19319] netlink: 'syz.1.3601': attribute type 10 has an invalid length. [ 526.650653][T19316] xt_LOG: prefix is not null-terminated [ 526.660292][T19316] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 526.681088][T19309] bond3: option mode: invalid value (9) [ 526.737637][T19309] bond3 (unregistering): Released all slaves [ 526.957838][T19329] netlink: 'syz.3.3606': attribute type 27 has an invalid length. [ 526.992287][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.073902][T19319] dummy0: entered promiscuous mode [ 527.113126][T19322] netlink: 'syz.4.3603': attribute type 1 has an invalid length. [ 527.488975][T19343] syzkaller0: left promiscuous mode [ 527.488997][T19343] syzkaller0: left allmulticast mode [ 527.767859][T19353] openvswitch: netlink: Missing valid actions attribute. [ 527.767913][T19353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.798491][T19352] netlink: 'syz.1.3613': attribute type 1 has an invalid length. [ 527.819689][T19352] geneve2: entered promiscuous mode [ 528.158156][T19367] xt_LOG: prefix is not null-terminated [ 528.186096][T19367] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 528.709925][T19383] netlink: 'syz.4.3623': attribute type 6 has an invalid length. [ 528.713931][T19384] netlink: 'syz.3.3624': attribute type 1 has an invalid length. [ 529.169577][T19392] veth5: entered allmulticast mode [ 529.206616][T19392] bond1: (slave veth5): Enslaving as an active interface with a down link [ 529.264948][T19394] bond1: (slave veth0_to_bond): making interface the new active one [ 529.270202][T19394] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 529.273701][T19397] netlink: 'syz.2.3626': attribute type 11 has an invalid length. [ 529.400517][T19395] macvlan2: entered promiscuous mode [ 529.400541][T19395] macvlan2: entered allmulticast mode [ 529.401198][T19395] bond1: entered promiscuous mode [ 529.401213][T19395] veth0_to_bond: entered promiscuous mode [ 529.426161][T19395] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 529.478071][T19395] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth5 [ 529.481446][T19395] bond1: left promiscuous mode [ 529.481474][T19395] veth0_to_bond: left promiscuous mode [ 529.654180][T19397] netlink: 'syz.2.3626': attribute type 11 has an invalid length. [ 529.742763][ T6161] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.742918][ T6161] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.742954][ T6161] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.742987][ T6161] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.793158][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 529.882122][T19413] netlink: 'syz.1.3630': attribute type 6 has an invalid length. [ 530.037388][T19421] netlink: 'syz.2.3632': attribute type 2 has an invalid length. [ 530.049693][T19420] xt_LOG: prefix is not null-terminated [ 530.061119][T19421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.066378][T19420] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 530.085541][T19422] netlink: 'syz.0.3633': attribute type 2 has an invalid length. [ 530.085563][T19422] netlink: 'syz.0.3633': attribute type 5 has an invalid length. [ 530.373733][T19424] ip6gretap0: entered promiscuous mode [ 530.373918][T19424] macsec1: entered allmulticast mode [ 530.373934][T19424] ip6gretap0: entered allmulticast mode [ 530.533297][T19442] syzkaller0: entered promiscuous mode [ 530.533466][T19442] syzkaller0: entered allmulticast mode [ 530.554324][T19442] syzkaller0: MTU not usable for tipc bearer [ 530.554365][T19442] tipc: Enabling of bearer rejected, failed to enable media [ 530.781103][T19447] syzkaller0: mtu less than device minimum [ 531.017729][T19453] bridge0: port 4(ip6gretap0) entered blocking state [ 531.018129][T19453] bridge0: port 4(ip6gretap0) entered disabled state [ 531.018427][T19453] ip6gretap0: entered allmulticast mode [ 531.050547][T19453] ip6gretap0: entered promiscuous mode [ 531.064916][T19453] bridge0: port 4(ip6gretap0) entered blocking state [ 531.065016][T19453] bridge0: port 4(ip6gretap0) entered forwarding state [ 531.363211][T19454] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.465831][T19454] tipc: Resetting bearer [ 531.840968][T19454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.859310][T19478] ip_tables: iptables: counters copy to user failed while replacing table [ 531.967457][T19454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.150291][T19484] __nla_validate_parse: 143 callbacks suppressed [ 532.150313][T19484] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3653'. [ 532.182296][T19488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3654'. [ 532.300444][T19491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3653'. [ 532.300555][T19457] syzkaller0: entered promiscuous mode [ 532.300716][T19457] syzkaller0: entered allmulticast mode [ 532.306818][ T9807] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.306865][ T9807] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.306900][ T9807] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.306934][ T9807] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.650858][T19490] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 532.710429][T19492] ip6tnl2: entered allmulticast mode [ 532.874933][T19501] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3658'. [ 532.877065][T19504] syzkaller0: entered promiscuous mode [ 532.877087][T19504] syzkaller0: entered allmulticast mode [ 532.910444][ T6161] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 532.910675][ T6161] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 532.935480][ T5618] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 532.936737][T19504] tipc: Started in network mode [ 532.936765][T19504] tipc: Node identity baec5ba9a3e2, cluster identity 4711 [ 532.937202][T19504] tipc: Enabled bearer , priority 0 [ 533.029281][T19504] tipc: Resetting bearer [ 533.078027][T19500] tipc: Resetting bearer [ 533.117831][T19514] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 533.355933][T19500] tipc: Disabling bearer [ 533.384953][ T6469] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 533.422413][ T5618] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 533.429056][T19514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.429313][T19514] batadv_slave_1: entered promiscuous mode [ 533.466407][T19508] veth1_to_bond: entered allmulticast mode [ 533.466479][T19509] veth1_to_bond: entered promiscuous mode [ 533.686643][T19524] netlink: 'syz.0.3662': attribute type 1 has an invalid length. [ 533.890112][T19524] 8021q: adding VLAN 0 to HW filter on device bond2 [ 533.944201][T19522] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 533.978835][T19530] bond2: entered promiscuous mode [ 533.978858][T19530] bond2: entered allmulticast mode [ 533.980214][T19505] veth1_to_bond: left promiscuous mode [ 533.980422][T19505] veth1_to_bond: left allmulticast mode [ 534.304478][T19531] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3666'. [ 534.565389][T19544] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 534.994509][T19555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3671'. [ 534.996262][T19555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3671'. [ 534.996281][T19555] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 535.170568][T19561] syzkaller0: entered allmulticast mode [ 535.258460][T19564] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3673'. [ 535.341772][T19567] syzkaller1: entered promiscuous mode [ 535.342704][T19567] syzkaller1: entered allmulticast mode [ 535.495083][T19568] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3675'. [ 535.500547][T19568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3675'. [ 535.500584][T19568] netlink: 'syz.2.3675': attribute type 10 has an invalid length. [ 535.780891][T19568] geneve2: entered promiscuous mode [ 535.780916][T19568] geneve2: entered allmulticast mode [ 536.346013][T19582] lo speed is unknown, defaulting to 1000 [ 536.459035][T19594] netlink: 'syz.0.3682': attribute type 11 has an invalid length. [ 536.664480][T19598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.726903][T19582] wg2 speed is unknown, defaulting to 1000 [ 537.152014][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 537.464608][T19622] netlink: 'syz.0.3692': attribute type 1 has an invalid length. [ 537.529269][T19624] __nla_validate_parse: 5 callbacks suppressed [ 537.529289][T19624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3690'. [ 537.693967][T19633] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3691'. [ 537.720376][T19632] netlink: 'syz.1.3690': attribute type 1 has an invalid length. [ 537.720402][T19632] netlink: 'syz.1.3690': attribute type 268 has an invalid length. [ 537.720417][T19632] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3690'. [ 537.850949][T19636] tap0: tun_chr_ioctl cmd 1074025677 [ 537.851068][T19636] tap0: linktype set to 775 [ 537.871998][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 538.445088][T19647] syzkaller0: entered promiscuous mode [ 538.445246][T19647] syzkaller0: entered allmulticast mode [ 539.243802][T19673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3702'. [ 539.279337][T19673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3702'. [ 539.388392][T19683] netlink: 'syz.2.3703': attribute type 1 has an invalid length. [ 539.444048][T19661] syzkaller0: entered promiscuous mode [ 539.444228][T19661] syzkaller0: entered allmulticast mode [ 539.966305][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3707'. [ 539.966330][T19690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3707'. [ 540.046077][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3707'. [ 540.046102][T19690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3707'. [ 540.141616][T19697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3709'. [ 540.406846][T19697] bridge0: port 1(wlan1) entered blocking state [ 540.407009][T19697] bridge0: port 1(wlan1) entered disabled state [ 540.407187][T19697] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 540.453498][T19697] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 540.485894][T19697] mac80211_hwsim hwsim24 wlan1 (unregistering): left allmulticast mode [ 540.485927][T19697] mac80211_hwsim hwsim24 wlan1 (unregistering): left promiscuous mode [ 540.486026][T19697] bridge0: port 1(wlan1) entered disabled state [ 540.569806][T19705] netlink: 'syz.0.3712': attribute type 4 has an invalid length. [ 541.021665][T19715] syzkaller0: entered promiscuous mode [ 541.021689][T19715] syzkaller0: entered allmulticast mode [ 541.289800][T19722] netlink: 'syz.1.3717': attribute type 16 has an invalid length. [ 541.289826][T19722] netlink: 'syz.1.3717': attribute type 17 has an invalid length. [ 541.352642][T19726] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 541.426412][T19722] dummy0: left promiscuous mode [ 541.572003][T19734] netlink: 'syz.2.3720': attribute type 27 has an invalid length. [ 541.649940][T19722] batadv_slave_1: left promiscuous mode [ 541.655482][T19722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.687062][T19722] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 541.937114][T19736] 8021q: adding VLAN 0 to HW filter on device bond2 [ 542.064652][T19740] bond2 (unregistering): Released all slaves [ 542.108490][T19736] netlink: 'syz.3.3721': attribute type 2 has an invalid length. [ 542.256254][T19736] : entered promiscuous mode [ 542.491104][T19750] tipc: Started in network mode [ 542.491135][T19750] tipc: Node identity ac14140f, cluster identity 4711 [ 542.518994][T19750] tipc: Enabled bearer , priority 10 [ 542.546933][T19750] __nla_validate_parse: 6 callbacks suppressed [ 542.546953][T19750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3725'. [ 542.624993][T19750] rdma_rxe: rxe_newlink: failed to add lo [ 542.895304][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3730'. [ 542.938905][T19765] netlink: 'syz.1.3732': attribute type 27 has an invalid length. [ 542.959789][T19764] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3730'. [ 542.986244][T19762] syzkaller0: entered promiscuous mode [ 542.986268][T19762] syzkaller0: entered allmulticast mode [ 543.171261][T19764] x_tables: unsorted entry at hook 2 [ 543.198715][T19771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3723'. [ 543.221739][T19776] FAULT_INJECTION: forcing a failure. [ 543.221739][T19776] name failslab, interval 1, probability 0, space 0, times 0 [ 543.221772][T19776] CPU: 1 UID: 0 PID: 19776 Comm: syz.0.3734 Not tainted syzkaller #0 PREEMPT(full) [ 543.221796][T19776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 543.221807][T19776] Call Trace: [ 543.221814][T19776] [ 543.221822][T19776] dump_stack_lvl+0xe8/0x150 [ 543.221860][T19776] should_fail_ex+0x410/0x560 [ 543.221888][T19776] should_failslab+0xa8/0x100 [ 543.221916][T19776] __kmalloc_cache_node_noprof+0xaa/0x620 [ 543.221939][T19776] ? __get_vm_area_node+0x155/0x2f0 [ 543.221965][T19776] ? __get_vm_area_node+0x155/0x2f0 [ 543.221999][T19776] __get_vm_area_node+0x155/0x2f0 [ 543.222032][T19776] __vmalloc_node_range_noprof+0x343/0x1540 [ 543.222063][T19776] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 543.222087][T19776] ? __lock_acquire+0x747/0x2de0 [ 543.222133][T19776] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 543.222173][T19776] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 543.222195][T19776] __vmalloc_noprof+0xd2/0x120 [ 543.222214][T19776] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 543.222240][T19776] bpf_prog_alloc_no_stats+0x47/0x560 [ 543.222263][T19776] ? bpf_prog_alloc+0x2a/0x1a0 [ 543.222288][T19776] bpf_prog_alloc+0x3c/0x1a0 [ 543.222314][T19776] bpf_prog_load+0x7f8/0x1c20 [ 543.222349][T19776] ? __pfx_bpf_prog_load+0x10/0x10 [ 543.222397][T19776] __sys_bpf+0xd0d/0xd90 [ 543.222428][T19776] ? __pfx___sys_bpf+0x10/0x10 [ 543.222463][T19776] ? __fget_files+0x2a/0x420 [ 543.222508][T19776] ? ksys_write+0x242/0x270 [ 543.222529][T19776] ? __pfx_ksys_write+0x10/0x10 [ 543.222554][T19776] __x64_sys_bpf+0xba/0xd0 [ 543.222576][T19776] do_syscall_64+0x166/0x520 [ 543.222600][T19776] ? trace_irq_disable+0x3b/0x140 [ 543.222620][T19776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.222641][T19776] ? clear_bhb_loop+0x70/0xc0 [ 543.222665][T19776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.222684][T19776] RIP: 0033:0x7f32af39e1d9 [ 543.222703][T19776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.222721][T19776] RSP: 002b:00007f32b022a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 543.222743][T19776] RAX: ffffffffffffffda RBX: 00007f32af625fa0 RCX: 00007f32af39e1d9 [ 543.222757][T19776] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 543.222769][T19776] RBP: 00007f32b022a090 R08: 0000000000000000 R09: 0000000000000000 [ 543.222781][T19776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.222793][T19776] R13: 00007f32af626038 R14: 00007f32af625fa0 R15: 00007fff59fe4508 [ 543.222823][T19776] [ 543.236724][T19776] warn_alloc: 1 callbacks suppressed [ 543.236741][T19776] syz.0.3734: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 543.236802][T19776] CPU: 1 UID: 0 PID: 19776 Comm: syz.0.3734 Not tainted syzkaller #0 PREEMPT(full) [ 543.236823][T19776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 543.236834][T19776] Call Trace: [ 543.236849][T19776] [ 543.236857][T19776] dump_stack_lvl+0xe8/0x150 [ 543.236889][T19776] warn_alloc+0x24d/0x270 [ 543.236909][T19776] ? __kasan_kmalloc+0x22/0xb0 [ 543.236936][T19776] ? __pfx_warn_alloc+0x10/0x10 [ 543.236956][T19776] ? __get_vm_area_node+0x155/0x2f0 [ 543.236990][T19776] ? __get_vm_area_node+0x2a9/0x2f0 [ 543.237025][T19776] __vmalloc_node_range_noprof+0x36b/0x1540 [ 543.237056][T19776] ? __lock_acquire+0x747/0x2de0 [ 543.237101][T19776] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 543.237139][T19776] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 543.237162][T19776] __vmalloc_noprof+0xd2/0x120 [ 543.237181][T19776] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 543.237206][T19776] bpf_prog_alloc_no_stats+0x47/0x560 [ 543.237228][T19776] ? bpf_prog_alloc+0x2a/0x1a0 [ 543.237252][T19776] bpf_prog_alloc+0x3c/0x1a0 [ 543.237278][T19776] bpf_prog_load+0x7f8/0x1c20 [ 543.237313][T19776] ? __pfx_bpf_prog_load+0x10/0x10 [ 543.237359][T19776] __sys_bpf+0xd0d/0xd90 [ 543.237388][T19776] ? __pfx___sys_bpf+0x10/0x10 [ 543.237421][T19776] ? __fget_files+0x2a/0x420 [ 543.237464][T19776] ? ksys_write+0x242/0x270 [ 543.237485][T19776] ? __pfx_ksys_write+0x10/0x10 [ 543.237509][T19776] __x64_sys_bpf+0xba/0xd0 [ 543.237532][T19776] do_syscall_64+0x166/0x520 [ 543.237555][T19776] ? trace_irq_disable+0x3b/0x140 [ 543.237574][T19776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.237594][T19776] ? clear_bhb_loop+0x70/0xc0 [ 543.237617][T19776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.237639][T19776] RIP: 0033:0x7f32af39e1d9 [ 543.237656][T19776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.237672][T19776] RSP: 002b:00007f32b022a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 543.237691][T19776] RAX: ffffffffffffffda RBX: 00007f32af625fa0 RCX: 00007f32af39e1d9 [ 543.237705][T19776] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 543.237718][T19776] RBP: 00007f32b022a090 R08: 0000000000000000 R09: 0000000000000000 [ 543.237730][T19776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.237742][T19776] R13: 00007f32af626038 R14: 00007f32af625fa0 R15: 00007fff59fe4508 [ 543.237772][T19776] [ 543.240377][T19776] Mem-Info: [ 543.240389][T19776] active_anon:9030 inactive_anon:0 isolated_anon:0 [ 543.240389][T19776] active_file:1 inactive_file:43686 isolated_file:0 [ 543.240389][T19776] unevictable:0 dirty:449 writeback:0 [ 543.240389][T19776] slab_reclaimable:12216 slab_unreclaimable:118972 [ 543.240389][T19776] mapped:32640 shmem:3391 pagetables:1332 [ 543.240389][T19776] sec_pagetables:0 bounce:0 [ 543.240389][T19776] kernel_misc_reclaimable:0 [ 543.240389][T19776] free:1295598 free_pcp:9529 free_cma:0 [ 543.240443][T19776] Node 0 active_anon:36120kB inactive_anon:0kB active_file:4kB inactive_file:174544kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130560kB dirty:1796kB writeback:0kB shmem:13564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17984kB pagetables:5188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 543.240497][T19776] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 543.240547][T19776] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 543.240603][T19776] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 543.240658][T19776] Node 0 DMA32 free:1223732kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36120kB inactive_anon:0kB active_file:4kB inactive_file:174544kB unevictable:0kB writepending:1796kB zspages:0kB present:3129332kB managed:2527764kB mlocked:0kB bounce:0kB free_pcp:38116kB local_pcp:18040kB free_cma:0kB [ 543.240716][T19776] lowmem_reserve[]: 0 0 0 0 0 [ 543.240748][T19776] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 543.240802][T19776] lowmem_reserve[]: 0 0 0 0 0 [ 543.240833][T19776] Node 1 Normal free:3943300kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 543.241465][T19776] lowmem_reserve[]: 0 0 0 0 0 [ 543.241508][T19776] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 543.241617][T19776] Node 0 DMA32: 1103*4kB (UME) 115*8kB (U) 268*16kB (UME) 244*32kB (UM) 203*64kB (UM) 300*128kB (UME) 121*256kB (UM) 63*512kB (UM) 38*1024kB (UME) 28*2048kB (UME) 243*4096kB (UM) = 1223636kB [ 543.241774][T19776] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 543.253732][T19776] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 7*16kB (UM) 4*32kB (UM) 10*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943300kB [ 543.257870][T19776] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 543.257887][T19776] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 543.257902][T19776] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 543.257917][T19776] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 543.257932][T19776] 47074 total pagecache pages [ 543.257940][T19776] 0 pages in swap cache [ 543.257946][T19776] Free swap = 124996kB [ 543.257953][T19776] Total swap = 124996kB [ 543.257962][T19776] 2097051 pages RAM [ 543.257969][T19776] 0 pages HighMem/MovableOnly [ 543.257975][T19776] 433494 pages reserved [ 543.257988][T19776] 0 pages cma reserved [ 543.355332][T19777] openvswitch: netlink: Message has 8 unknown bytes. [ 543.612449][ T6469] tipc: Node number set to 2886997007 [ 543.853888][T19790] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3736'. [ 544.285751][T19787] syzkaller1: entered allmulticast mode [ 544.462950][T19797] netlink: 'syz.2.3739': attribute type 1 has an invalid length. [ 544.782413][T19810] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3744'. [ 544.806596][T19814] FAULT_INJECTION: forcing a failure. [ 544.806596][T19814] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 544.806629][T19814] CPU: 1 UID: 0 PID: 19814 Comm: syz.0.3746 Not tainted syzkaller #0 PREEMPT(full) [ 544.806652][T19814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 544.806682][T19814] Call Trace: [ 544.806690][T19814] [ 544.806698][T19814] dump_stack_lvl+0xe8/0x150 [ 544.806733][T19814] should_fail_ex+0x410/0x560 [ 544.806763][T19814] prepare_alloc_pages+0x223/0x600 [ 544.806793][T19814] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 544.806822][T19814] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 544.806849][T19814] ? __pfx_policy_nodemask+0x10/0x10 [ 544.806873][T19814] ? __get_vm_area_node+0x155/0x2f0 [ 544.806900][T19814] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 544.806930][T19814] ? __vmalloc_noprof+0xd2/0x120 [ 544.806947][T19814] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 544.806970][T19814] ? bpf_prog_alloc+0x3c/0x1a0 [ 544.806992][T19814] ? __sys_bpf+0xd0d/0xd90 [ 544.807013][T19814] ? __x64_sys_bpf+0xba/0xd0 [ 544.807030][T19814] ? do_syscall_64+0x166/0x520 [ 544.807054][T19814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.807079][T19814] alloc_pages_mpol+0x21e/0x390 [ 544.807112][T19814] alloc_pages_noprof+0xb1/0x2b0 [ 544.807138][T19814] get_free_pages_noprof+0xf/0x80 [ 544.807161][T19814] __kasan_populate_vmalloc+0x38/0x1c0 [ 544.807185][T19814] ? do_raw_spin_unlock+0xf5/0x200 [ 544.807218][T19814] alloc_vmap_area+0xd1a/0x1420 [ 544.807261][T19814] ? __pfx_alloc_vmap_area+0x10/0x10 [ 544.807287][T19814] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 544.807309][T19814] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 544.807330][T19814] ? __get_vm_area_node+0x155/0x2f0 [ 544.807368][T19814] __get_vm_area_node+0x200/0x2f0 [ 544.807404][T19814] __vmalloc_node_range_noprof+0x343/0x1540 [ 544.807437][T19814] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 544.807461][T19814] ? __lock_acquire+0x747/0x2de0 [ 544.807506][T19814] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 544.807547][T19814] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 544.807570][T19814] __vmalloc_noprof+0xd2/0x120 [ 544.807589][T19814] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 544.807615][T19814] bpf_prog_alloc_no_stats+0x47/0x560 [ 544.807638][T19814] ? bpf_prog_alloc+0x2a/0x1a0 [ 544.807664][T19814] bpf_prog_alloc+0x3c/0x1a0 [ 544.807687][T19814] bpf_prog_load+0x7f8/0x1c20 [ 544.807723][T19814] ? __pfx_bpf_prog_load+0x10/0x10 [ 544.807772][T19814] __sys_bpf+0xd0d/0xd90 [ 544.807804][T19814] ? __pfx___sys_bpf+0x10/0x10 [ 544.807839][T19814] ? __fget_files+0x2a/0x420 [ 544.807883][T19814] ? ksys_write+0x242/0x270 [ 544.807905][T19814] ? __pfx_ksys_write+0x10/0x10 [ 544.807930][T19814] __x64_sys_bpf+0xba/0xd0 [ 544.807954][T19814] do_syscall_64+0x166/0x520 [ 544.807978][T19814] ? trace_irq_disable+0x3b/0x140 [ 544.807998][T19814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.808016][T19814] ? clear_bhb_loop+0x70/0xc0 [ 544.808039][T19814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.808056][T19814] RIP: 0033:0x7f32af39e1d9 [ 544.808074][T19814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.808091][T19814] RSP: 002b:00007f32b022a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 544.808111][T19814] RAX: ffffffffffffffda RBX: 00007f32af625fa0 RCX: 00007f32af39e1d9 [ 544.808125][T19814] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 544.808137][T19814] RBP: 00007f32b022a090 R08: 0000000000000000 R09: 0000000000000000 [ 544.808149][T19814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.808161][T19814] R13: 00007f32af626038 R14: 00007f32af625fa0 R15: 00007fff59fe4508 [ 544.808192][T19814] [ 545.738883][T19830] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 545.738996][T19830] syzkaller0: linktype set to 1 [ 545.864515][T19835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3753'. [ 545.919054][T19836] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20001 [ 545.949768][T19840] ip6tnl2: entered allmulticast mode [ 545.966238][ T101] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 545.968084][ T101] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 546.001442][T11382] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 546.040165][T19844] netlink: 'syz.0.3755': attribute type 2 has an invalid length. [ 546.040187][T19844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3755'. [ 546.079398][T19846] netlink: 'syz.0.3755': attribute type 2 has an invalid length. [ 546.079419][T19846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3755'. [ 546.192349][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 546.359265][T19851] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3756'. [ 546.434142][T11394] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 546.913411][T11396] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 547.586412][T19875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3761'. [ 547.639051][T19879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3763'. [ 547.707515][T19885] syzkaller0: entered promiscuous mode [ 547.707716][T19885] syzkaller0: entered allmulticast mode [ 548.613619][T19915] syzkaller0: port 1(veth0) entered blocking state [ 548.614223][T19915] syzkaller0: port 1(veth0) entered disabled state [ 548.614407][T19915] veth0: entered allmulticast mode [ 548.746355][T19915] netlink: 'syz.2.3771': attribute type 3 has an invalid length. [ 548.794005][T19915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3771'. [ 548.796601][T19915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3771'. [ 549.030611][T19922] syzkaller0: entered promiscuous mode [ 549.030784][T19922] syzkaller0: entered allmulticast mode [ 549.557104][T19936] bond2: Removing last ns target with arp_interval on [ 549.561054][T19940] FAULT_INJECTION: forcing a failure. [ 549.561054][T19940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.561086][T19940] CPU: 1 UID: 0 PID: 19940 Comm: syz.3.3778 Not tainted syzkaller #0 PREEMPT(full) [ 549.561108][T19940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 549.561125][T19940] Call Trace: [ 549.561133][T19940] [ 549.561141][T19940] dump_stack_lvl+0xe8/0x150 [ 549.561173][T19940] should_fail_ex+0x410/0x560 [ 549.561207][T19940] _copy_to_user+0x31/0xb0 [ 549.561241][T19940] simple_read_from_buffer+0xe1/0x170 [ 549.561276][T19940] proc_fail_nth_read+0x1bb/0x230 [ 549.561298][T19940] ? common_file_perm+0x20e/0x2b0 [ 549.561326][T19940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 549.561357][T19940] ? rw_verify_area+0x24a/0x4c0 [ 549.561388][T19940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 549.561408][T19940] vfs_read+0x213/0xa80 [ 549.561446][T19940] ? __pfx_vfs_read+0x10/0x10 [ 549.561475][T19940] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 549.561505][T19940] ? do_sys_openat2+0x14e/0x200 [ 549.561528][T19940] ? kmem_cache_free+0x182/0x650 [ 549.561565][T19940] ksys_read+0x150/0x270 [ 549.561586][T19940] ? __pfx_ksys_read+0x10/0x10 [ 549.561604][T19940] ? __x64_sys_getsockopt+0x1a4/0x240 [ 549.561642][T19940] do_syscall_64+0x166/0x520 [ 549.561666][T19940] ? trace_irq_disable+0x3b/0x140 [ 549.561686][T19940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.561706][T19940] ? clear_bhb_loop+0x70/0xc0 [ 549.561730][T19940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.561749][T19940] RIP: 0033:0x7fadec75ea0e [ 549.561768][T19940] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 549.561784][T19940] RSP: 002b:00007faded620fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 549.561802][T19940] RAX: ffffffffffffffda RBX: 00007faded6216c0 RCX: 00007fadec75ea0e [ 549.561815][T19940] RDX: 000000000000000f RSI: 00007faded6210a0 RDI: 0000000000000004 [ 549.561826][T19940] RBP: 00007faded621090 R08: 0000000000000000 R09: 0000000000000000 [ 549.561837][T19940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.561848][T19940] R13: 00007fadeca26038 R14: 00007fadeca25fa0 R15: 00007ffc74fb8658 [ 549.561876][T19940] [ 549.872266][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 550.143925][T19950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3780'. [ 550.146477][T19956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3781'. [ 550.177332][T19956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3781'. [ 550.197206][T19956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3781'. [ 550.224242][T19956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3781'. [ 550.256002][T19956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3781'. [ 550.329519][T19956] tipc: New replicast peer: 172.20.20.187 [ 550.330028][T19956] tipc: Enabled bearer , priority 10 [ 550.750739][T19977] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 550.840219][T19977] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 551.061442][T19977] bond3: option mode: invalid value (7) [ 551.083053][T19977] bond3 (unregistering): Released all slaves [ 551.325680][T19998] netlink: 'syz.4.3792': attribute type 27 has an invalid length. [ 551.344136][T19998] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.452331][ T6470] tipc: Node number set to 767831509 [ 551.512568][T19998] netlink: 'syz.4.3792': attribute type 27 has an invalid length. [ 551.564082][T19998] netlink: 'syz.4.3792': attribute type 27 has an invalid length. [ 551.610248][T19998] netlink: 'syz.4.3792': attribute type 27 has an invalid length. [ 551.881436][T19998] netlink: 'syz.4.3792': attribute type 27 has an invalid length. [ 552.021487][T19998] netlink: 'syz.4.3792': attribute type 27 has an invalid length. [ 552.809325][T20051] FAULT_INJECTION: forcing a failure. [ 552.809325][T20051] name failslab, interval 1, probability 0, space 0, times 0 [ 552.809358][T20051] CPU: 0 UID: 0 PID: 20051 Comm: syz.0.3804 Not tainted syzkaller #0 PREEMPT(full) [ 552.809379][T20051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 552.809391][T20051] Call Trace: [ 552.809399][T20051] [ 552.809407][T20051] dump_stack_lvl+0xe8/0x150 [ 552.809439][T20051] should_fail_ex+0x410/0x560 [ 552.809470][T20051] should_failslab+0xa8/0x100 [ 552.809497][T20051] __kmalloc_node_noprof+0x100/0x720 [ 552.809518][T20051] ? __get_vm_area_node+0x200/0x2f0 [ 552.809545][T20051] ? __get_vm_area_node+0x283/0x2f0 [ 552.809570][T20051] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 552.809599][T20051] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 552.809636][T20051] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 552.809668][T20051] ? __lock_acquire+0x747/0x2de0 [ 552.809713][T20051] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 552.809754][T20051] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 552.809776][T20051] __vmalloc_noprof+0xd2/0x120 [ 552.809793][T20051] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 552.809819][T20051] bpf_prog_alloc_no_stats+0x47/0x560 [ 552.809841][T20051] ? bpf_prog_alloc+0x2a/0x1a0 [ 552.809865][T20051] bpf_prog_alloc+0x3c/0x1a0 [ 552.809891][T20051] bpf_prog_load+0x7f8/0x1c20 [ 552.809927][T20051] ? __pfx_bpf_prog_load+0x10/0x10 [ 552.809975][T20051] __sys_bpf+0xd0d/0xd90 [ 552.810007][T20051] ? __pfx___sys_bpf+0x10/0x10 [ 552.810040][T20051] ? __fget_files+0x2a/0x420 [ 552.810093][T20051] ? ksys_write+0x242/0x270 [ 552.810114][T20051] ? __pfx_ksys_write+0x10/0x10 [ 552.810139][T20051] __x64_sys_bpf+0xba/0xd0 [ 552.810162][T20051] do_syscall_64+0x166/0x520 [ 552.810186][T20051] ? trace_irq_disable+0x3b/0x140 [ 552.810206][T20051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.810226][T20051] ? clear_bhb_loop+0x70/0xc0 [ 552.810250][T20051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.810270][T20051] RIP: 0033:0x7f32af39e1d9 [ 552.810288][T20051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.810305][T20051] RSP: 002b:00007f32b022a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 552.810327][T20051] RAX: ffffffffffffffda RBX: 00007f32af625fa0 RCX: 00007f32af39e1d9 [ 552.810342][T20051] RDX: 0000000000000094 RSI: 00002000000035c0 RDI: 0000000000000005 [ 552.810356][T20051] RBP: 00007f32b022a090 R08: 0000000000000000 R09: 0000000000000000 [ 552.810368][T20051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.810381][T20051] R13: 00007f32af626038 R14: 00007f32af625fa0 R15: 00007fff59fe4508 [ 552.810413][T20051] [ 553.180912][T20061] netlink: 'syz.3.3807': attribute type 21 has an invalid length. [ 553.201210][T20074] __nla_validate_parse: 6 callbacks suppressed [ 553.201228][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3808'. [ 553.220735][T20075] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3808'. [ 553.221109][T20075] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3808'. [ 553.221415][T20075] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3808'. [ 553.221689][T20075] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3808'. [ 553.261486][T20075] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3808'. [ 553.271166][T20075] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3808'. [ 553.271684][T20075] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3808'. [ 553.313735][T20075] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3808'. [ 553.314323][T20075] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3808'. [ 553.872672][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 554.297008][T20111] netlink: 'syz.2.3817': attribute type 6 has an invalid length. [ 555.064539][T20140] netlink: 'syz.4.3825': attribute type 1 has an invalid length. [ 555.064566][T20140] nbd: illegal input index 393236 [ 555.455834][ T31] audit: type=1800 audit(1791519560.040:17): pid=20155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3827" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1002 res=0 errno=0 [ 555.498917][T20154] lo: entered promiscuous mode [ 555.942372][T20154] tunl0: entered promiscuous mode [ 555.960290][T20154] gre0: entered promiscuous mode [ 556.028983][T20154] gretap0: entered promiscuous mode [ 556.062197][T20154] ip_vti0: entered promiscuous mode [ 556.065624][T20154] ip6_vti0: entered promiscuous mode [ 556.070756][T20154] sit0: entered promiscuous mode [ 556.105377][T20154] ip6tnl0: entered promiscuous mode [ 556.118827][T20154] ip6gre0: entered promiscuous mode [ 556.304215][T20154] syz_tun: entered promiscuous mode [ 556.339720][T20154] ip6gretap0: entered promiscuous mode [ 556.384992][T20154] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.385695][T20154] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.426390][T20154] bridge0: entered promiscuous mode [ 556.578747][T20154] dummy0: entered promiscuous mode [ 556.625814][T20154] nlmon0: entered promiscuous mode [ 556.678234][T20154] batadv0: entered promiscuous mode [ 556.726018][T20154] vxcan0: entered promiscuous mode [ 556.766694][T20154] vxcan1: entered promiscuous mode [ 556.806636][T20154] veth0: entered promiscuous mode [ 556.842473][T20154] veth1: entered promiscuous mode [ 556.867452][T20154] wg0: entered promiscuous mode [ 556.870961][T20154] wg1: entered promiscuous mode [ 556.894661][T20154] wg2: entered promiscuous mode [ 556.899761][T20154] veth0_to_bridge: entered promiscuous mode [ 556.922759][T20154] veth1_to_bridge: entered promiscuous mode [ 556.930131][T20154] veth0_to_bond: entered promiscuous mode [ 556.939024][T20154] veth1_to_bond: entered promiscuous mode [ 556.960209][T20154] veth0_to_team: entered promiscuous mode [ 556.977390][T20154] veth1_to_team: entered promiscuous mode [ 556.995913][T20154] veth0_to_batadv: entered promiscuous mode [ 556.997986][T20154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.002964][T20154] batadv_slave_0: entered promiscuous mode [ 557.061104][T20154] veth1_to_batadv: entered promiscuous mode [ 557.110277][T20154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.110901][T20154] batadv_slave_1: entered promiscuous mode [ 557.152374][T20154] xfrm0: entered promiscuous mode [ 557.180568][T20154] veth0_to_hsr: entered promiscuous mode [ 557.191260][T20154] veth1_to_hsr: entered promiscuous mode [ 557.202686][T20154] hsr0: entered promiscuous mode [ 557.204828][T20154] veth1_virt_wifi: entered promiscuous mode [ 557.206844][T20154] veth0_virt_wifi: entered promiscuous mode [ 557.209048][T20154] virt_wifi0: entered promiscuous mode [ 557.242673][T20154] vlan0: entered promiscuous mode [ 557.242999][T20154] vlan1: entered promiscuous mode [ 557.259045][T20154] macvlan0: entered promiscuous mode [ 557.273289][T20154] veth1_vlan: left allmulticast mode [ 557.275707][T20154] ipvlan0: entered promiscuous mode [ 557.275900][T20154] ipvlan1: entered promiscuous mode [ 557.302749][T20154] macvtap0: entered promiscuous mode [ 557.305150][T20154] macsec0: entered promiscuous mode [ 557.307344][T20154] geneve0: entered promiscuous mode [ 557.309655][T20154] geneve1: entered promiscuous mode [ 557.349171][T20154] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 557.362502][T20154] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 557.433396][T20154] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 557.456683][T20154] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 557.459992][T20154] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 557.460173][T20154] syztnl0: entered promiscuous mode [ 557.485179][T20154] ip6gretap1: entered promiscuous mode [ 557.488763][T20154] vti60: entered promiscuous mode [ 557.488936][T20154] : entered promiscuous mode [ 557.489048][T20154] bridge1: entered promiscuous mode [ 557.489174][T20154] bridge2: entered promiscuous mode [ 557.489393][T20154] veth2: entered promiscuous mode [ 557.489744][T20154] veth3: entered promiscuous mode [ 557.489975][T20154] vxlan0: entered promiscuous mode [ 557.490106][T20154] ip6gre1: entered promiscuous mode [ 557.490888][T20154] bridge3: entered promiscuous mode [ 557.557380][T20154] bridge4: entered promiscuous mode [ 557.559540][T20154] hsr1: entered promiscuous mode [ 557.578352][T20154] bond1: entered promiscuous mode [ 557.578693][T20154] veth4: entered promiscuous mode [ 557.594132][T20154] veth5: entered promiscuous mode [ 557.594926][T20154] vlan1.0: entered promiscuous mode [ 557.595311][T20158] netlink: 'syz.2.3829': attribute type 1 has an invalid length. [ 557.713436][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 557.713652][ T50] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.713691][ T50] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.713723][ T50] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.723816][ T50] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.143441][T20194] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 558.144250][T20194] x_tables: duplicate underflow at hook 1 [ 558.649183][T20210] ip_tables: iptables: counters copy to user failed while replacing table [ 558.691072][T20206] __nla_validate_parse: 16 callbacks suppressed [ 558.691094][T20206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3838'. [ 559.151646][T20214] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3841'. [ 559.271466][T20217] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3841'. [ 559.301289][T20222] vlan0: entered promiscuous mode [ 559.406522][T20222] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.3844'. [ 559.463985][T20222] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 559.489525][T20222] 0ªX¹¦Dö»: entered allmulticast mode [ 559.536257][T20236] syzkaller1: entered promiscuous mode [ 559.536280][T20236] syzkaller1: entered allmulticast mode [ 559.622746][T20236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3843'. [ 559.694348][T20240] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3847'. [ 559.694373][T20240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3847'. [ 559.695817][T20240] netlink: 'syz.3.3847': attribute type 11 has an invalid length. [ 559.775254][T20241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3847'. [ 559.816202][T20236] veth1_to_team: entered promiscuous mode [ 559.820761][T20236] veth1_to_team: left promiscuous mode [ 559.957716][T20252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3849'. [ 560.180398][T20257] FAULT_INJECTION: forcing a failure. [ 560.180398][T20257] name failslab, interval 1, probability 0, space 0, times 0 [ 560.180430][T20257] CPU: 0 UID: 0 PID: 20257 Comm: syz.2.3851 Not tainted syzkaller #0 PREEMPT(full) [ 560.180453][T20257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 560.180464][T20257] Call Trace: [ 560.180472][T20257] [ 560.180480][T20257] dump_stack_lvl+0xe8/0x150 [ 560.180512][T20257] should_fail_ex+0x410/0x560 [ 560.180543][T20257] should_failslab+0xa8/0x100 [ 560.180570][T20257] __kmalloc_cache_node_noprof+0xaa/0x620 [ 560.180594][T20257] ? __css_rstat_updated+0x237/0x540 [ 560.180616][T20257] ? __get_vm_area_node+0x155/0x2f0 [ 560.180643][T20257] ? __get_vm_area_node+0x155/0x2f0 [ 560.180679][T20257] __get_vm_area_node+0x155/0x2f0 [ 560.180714][T20257] __vmalloc_node_range_noprof+0x343/0x1540 [ 560.180745][T20257] ? bpf_check+0x115b/0x2ef0 [ 560.180779][T20257] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 560.180807][T20257] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 560.180846][T20257] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 560.180879][T20257] ? apparmor_capable+0x126/0x170 [ 560.180901][T20257] ? bpf_lsm_capable+0x9/0x20 [ 560.180920][T20257] ? security_capable+0x7e/0x2c0 [ 560.180948][T20257] ? bpf_check+0x115b/0x2ef0 [ 560.180967][T20257] __vmalloc_noprof+0xd2/0x120 [ 560.180986][T20257] ? bpf_check+0x115b/0x2ef0 [ 560.181011][T20257] bpf_check+0x115b/0x2ef0 [ 560.181052][T20257] ? __pfx_bpf_check+0x10/0x10 [ 560.181077][T20257] ? bpf_obj_name_cpy+0x194/0x1e0 [ 560.181110][T20257] bpf_prog_load+0x14d6/0x1c20 [ 560.181146][T20257] ? __pfx_bpf_prog_load+0x10/0x10 [ 560.181196][T20257] __sys_bpf+0xd0d/0xd90 [ 560.181228][T20257] ? __pfx___sys_bpf+0x10/0x10 [ 560.181259][T20257] ? __fget_files+0x2a/0x420 [ 560.181312][T20257] ? ksys_write+0x242/0x270 [ 560.181334][T20257] ? __pfx_ksys_write+0x10/0x10 [ 560.181359][T20257] __x64_sys_bpf+0xba/0xd0 [ 560.181381][T20257] do_syscall_64+0x166/0x520 [ 560.181405][T20257] ? trace_irq_disable+0x3b/0x140 [ 560.181425][T20257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.181444][T20257] ? clear_bhb_loop+0x70/0xc0 [ 560.181469][T20257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.181489][T20257] RIP: 0033:0x7fc40f39e1d9 [ 560.181506][T20257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.181524][T20257] RSP: 002b:00007fc410321028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 560.181545][T20257] RAX: ffffffffffffffda RBX: 00007fc40f625fa0 RCX: 00007fc40f39e1d9 [ 560.181560][T20257] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 560.181573][T20257] RBP: 00007fc410321090 R08: 0000000000000000 R09: 0000000000000000 [ 560.181585][T20257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 560.181597][T20257] R13: 00007fc40f626038 R14: 00007fc40f625fa0 R15: 00007ffc886133f8 [ 560.181629][T20257] [ 560.181637][T20257] warn_alloc: 2 callbacks suppressed [ 560.181647][T20257] syz.2.3851: vmalloc error: size 1088, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 560.181702][T20257] CPU: 0 UID: 0 PID: 20257 Comm: syz.2.3851 Not tainted syzkaller #0 PREEMPT(full) [ 560.181724][T20257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 560.181738][T20257] Call Trace: [ 560.181746][T20257] [ 560.181753][T20257] dump_stack_lvl+0xe8/0x150 [ 560.181781][T20257] warn_alloc+0x24d/0x270 [ 560.181800][T20257] ? __kasan_kmalloc+0x22/0xb0 [ 560.181824][T20257] ? __pfx_warn_alloc+0x10/0x10 [ 560.181841][T20257] ? __css_rstat_updated+0x237/0x540 [ 560.181861][T20257] ? __get_vm_area_node+0x155/0x2f0 [ 560.181893][T20257] ? __get_vm_area_node+0x2a9/0x2f0 [ 560.181928][T20257] __vmalloc_node_range_noprof+0x36b/0x1540 [ 560.181971][T20257] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 560.182000][T20257] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 560.182039][T20257] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 560.182071][T20257] ? apparmor_capable+0x126/0x170 [ 560.182093][T20257] ? bpf_lsm_capable+0x9/0x20 [ 560.182111][T20257] ? security_capable+0x7e/0x2c0 [ 560.182137][T20257] ? bpf_check+0x115b/0x2ef0 [ 560.182157][T20257] __vmalloc_noprof+0xd2/0x120 [ 560.182176][T20257] ? bpf_check+0x115b/0x2ef0 [ 560.182199][T20257] bpf_check+0x115b/0x2ef0 [ 560.182237][T20257] ? __pfx_bpf_check+0x10/0x10 [ 560.182262][T20257] ? bpf_obj_name_cpy+0x194/0x1e0 [ 560.182300][T20257] bpf_prog_load+0x14d6/0x1c20 [ 560.182336][T20257] ? __pfx_bpf_prog_load+0x10/0x10 [ 560.182385][T20257] __sys_bpf+0xd0d/0xd90 [ 560.182416][T20257] ? __pfx___sys_bpf+0x10/0x10 [ 560.182451][T20257] ? __fget_files+0x2a/0x420 [ 560.182500][T20257] ? ksys_write+0x242/0x270 [ 560.182521][T20257] ? __pfx_ksys_write+0x10/0x10 [ 560.182545][T20257] __x64_sys_bpf+0xba/0xd0 [ 560.182569][T20257] do_syscall_64+0x166/0x520 [ 560.182593][T20257] ? trace_irq_disable+0x3b/0x140 [ 560.182612][T20257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.182631][T20257] ? clear_bhb_loop+0x70/0xc0 [ 560.182656][T20257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.182675][T20257] RIP: 0033:0x7fc40f39e1d9 [ 560.182692][T20257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.182709][T20257] RSP: 002b:00007fc410321028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 560.182729][T20257] RAX: ffffffffffffffda RBX: 00007fc40f625fa0 RCX: 00007fc40f39e1d9 [ 560.182743][T20257] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 560.182756][T20257] RBP: 00007fc410321090 R08: 0000000000000000 R09: 0000000000000000 [ 560.182769][T20257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 560.182784][T20257] R13: 00007fc40f626038 R14: 00007fc40f625fa0 R15: 00007ffc886133f8 [ 560.182816][T20257] [ 560.292005][T20257] Mem-Info: [ 560.292024][T20257] active_anon:6034 inactive_anon:0 isolated_anon:0 [ 560.292024][T20257] active_file:1 inactive_file:43692 isolated_file:0 [ 560.292024][T20257] unevictable:0 dirty:194 writeback:0 [ 560.292024][T20257] slab_reclaimable:12052 slab_unreclaimable:118564 [ 560.292024][T20257] mapped:29755 shmem:531 pagetables:1303 [ 560.292024][T20257] sec_pagetables:0 bounce:0 [ 560.292024][T20257] kernel_misc_reclaimable:0 [ 560.292024][T20257] free:1298074 free_pcp:10287 free_cma:0 [ 560.292078][T20257] Node 0 active_anon:24136kB inactive_anon:0kB active_file:4kB inactive_file:174568kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119020kB dirty:772kB writeback:0kB shmem:2124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17776kB pagetables:5072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 560.292188][T20257] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 560.292239][T20257] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 560.292297][T20257] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 560.292332][T20257] Node 0 DMA32 free:1233636kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24136kB inactive_anon:0kB active_file:4kB inactive_file:174568kB unevictable:0kB writepending:772kB zspages:0kB present:3129332kB managed:2527764kB mlocked:0kB bounce:0kB free_pcp:41148kB local_pcp:21144kB free_cma:0kB [ 560.292389][T20257] lowmem_reserve[]: 0 0 0 0 0 [ 560.292422][T20257] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 560.292476][T20257] lowmem_reserve[]: 0 0 0 0 0 [ 560.292507][T20257] Node 1 Normal free:3943300kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 560.292563][T20257] lowmem_reserve[]: 0 0 0 0 0 [ 560.292595][T20257] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 560.292703][T20257] Node 0 DMA32: 1397*4kB (UME) 488*8kB (UME) 397*16kB (UME) 429*32kB (UME) 171*64kB (UME) 300*128kB (UME) 121*256kB (UM) 63*512kB (UM) 38*1024kB (UME) 28*2048kB (UME) 243*4096kB (UM) = 1233732kB [ 560.292861][T20257] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 560.292953][T20257] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 7*16kB (UM) 4*32kB (UM) 10*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943300kB [ 560.293101][T20257] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 560.293117][T20257] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 560.293138][T20257] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 560.293158][T20257] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 560.293173][T20257] 44220 total pagecache pages [ 560.293181][T20257] 0 pages in swap cache [ 560.293187][T20257] Free swap = 124996kB [ 560.293194][T20257] Total swap = 124996kB [ 560.293202][T20257] 2097051 pages RAM [ 560.293209][T20257] 0 pages HighMem/MovableOnly [ 560.293216][T20257] 433494 pages reserved [ 560.293222][T20257] 0 pages cma reserved [ 561.083379][T20261] netlink: 'syz.0.3852': attribute type 4 has an invalid length. [ 561.290355][T20260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3853'. [ 561.922064][T20286] xt_l2tp: unknown flags: e7 [ 562.552695][T20311] netlink: 'syz.2.3868': attribute type 2 has an invalid length. [ 562.552720][T20311] netlink: 'syz.2.3868': attribute type 2 has an invalid length. [ 562.739705][T20322] FAULT_INJECTION: forcing a failure. [ 562.739705][T20322] name failslab, interval 1, probability 0, space 0, times 0 [ 562.739738][T20322] CPU: 0 UID: 0 PID: 20322 Comm: syz.1.3872 Not tainted syzkaller #0 PREEMPT(full) [ 562.739761][T20322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 562.739773][T20322] Call Trace: [ 562.739780][T20322] [ 562.739788][T20322] dump_stack_lvl+0xe8/0x150 [ 562.739821][T20322] should_fail_ex+0x410/0x560 [ 562.739852][T20322] should_failslab+0xa8/0x100 [ 562.739879][T20322] __kmalloc_cache_node_noprof+0xaa/0x620 [ 562.739900][T20322] ? kasan_save_track+0x4f/0x80 [ 562.739919][T20322] ? kasan_save_track+0x3e/0x80 [ 562.739939][T20322] ? __kasan_kmalloc+0x93/0xb0 [ 562.739961][T20322] ? __get_vm_area_node+0x155/0x2f0 [ 562.739997][T20322] ? __get_vm_area_node+0x155/0x2f0 [ 562.740026][T20322] ? __x64_sys_bpf+0xba/0xd0 [ 562.740050][T20322] __get_vm_area_node+0x155/0x2f0 [ 562.740085][T20322] __vmalloc_node_range_noprof+0x343/0x1540 [ 562.740117][T20322] ? bpf_check+0x115b/0x2ef0 [ 562.740166][T20322] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 562.740196][T20322] ? __kasan_kmalloc+0x93/0xb0 [ 562.740221][T20322] ? __kmalloc_cache_noprof+0x321/0x600 [ 562.740242][T20322] ? __kmalloc_cache_noprof+0x14d/0x600 [ 562.740262][T20322] ? bpf_diag_init+0x87/0x140 [ 562.740285][T20322] ? bpf_diag_init+0x87/0x140 [ 562.740311][T20322] ? bpf_check+0x115b/0x2ef0 [ 562.740331][T20322] __vmalloc_noprof+0xd2/0x120 [ 562.740350][T20322] ? bpf_check+0x115b/0x2ef0 [ 562.740373][T20322] bpf_check+0x115b/0x2ef0 [ 562.740413][T20322] ? __pfx_bpf_check+0x10/0x10 [ 562.740439][T20322] ? bpf_obj_name_cpy+0x194/0x1e0 [ 562.740472][T20322] bpf_prog_load+0x14d6/0x1c20 [ 562.740507][T20322] ? __pfx_bpf_prog_load+0x10/0x10 [ 562.740558][T20322] __sys_bpf+0xd0d/0xd90 [ 562.740589][T20322] ? __pfx___sys_bpf+0x10/0x10 [ 562.740624][T20322] ? __fget_files+0x2a/0x420 [ 562.740673][T20322] ? ksys_write+0x242/0x270 [ 562.740698][T20322] ? __pfx_ksys_write+0x10/0x10 [ 562.740723][T20322] __x64_sys_bpf+0xba/0xd0 [ 562.740748][T20322] do_syscall_64+0x166/0x520 [ 562.740772][T20322] ? trace_irq_disable+0x3b/0x140 [ 562.740794][T20322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.740814][T20322] ? clear_bhb_loop+0x70/0xc0 [ 562.740836][T20322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.740854][T20322] RIP: 0033:0x7f9eaaf9e1d9 [ 562.740871][T20322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.740886][T20322] RSP: 002b:00007f9eabe05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 562.740906][T20322] RAX: ffffffffffffffda RBX: 00007f9eab225fa0 RCX: 00007f9eaaf9e1d9 [ 562.740919][T20322] RDX: 0000000000000094 RSI: 00002000000035c0 RDI: 0000000000000005 [ 562.740931][T20322] RBP: 00007f9eabe05090 R08: 0000000000000000 R09: 0000000000000000 [ 562.740943][T20322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 562.740954][T20322] R13: 00007f9eab226038 R14: 00007f9eab225fa0 R15: 00007ffee32c9458 [ 562.740993][T20322] [ 563.475838][T20335] batadv_slave_0: entered promiscuous mode [ 564.112182][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 564.550593][T20362] __nla_validate_parse: 2 callbacks suppressed [ 564.550612][T20362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3883'. [ 564.611012][T20365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3883'. [ 564.767841][T20339] batadv_slave_0: left promiscuous mode [ 564.850328][T20363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3882'. [ 564.850363][T20363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3882'. [ 565.140077][T20374] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 565.152525][T20374] syzkaller1: entered promiscuous mode [ 565.152549][T20374] syzkaller1: entered allmulticast mode [ 565.371818][T20388] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 565.476486][T20392] FAULT_INJECTION: forcing a failure. [ 565.476486][T20392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.476521][T20392] CPU: 1 UID: 0 PID: 20392 Comm: syz.2.3892 Not tainted syzkaller #0 PREEMPT(full) [ 565.476541][T20392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 565.476553][T20392] Call Trace: [ 565.476560][T20392] [ 565.476569][T20392] dump_stack_lvl+0xe8/0x150 [ 565.476603][T20392] should_fail_ex+0x410/0x560 [ 565.476633][T20392] _copy_from_user+0x2d/0xb0 [ 565.476662][T20392] ___sys_sendmsg+0x1c6/0x360 [ 565.476682][T20392] ? __lock_acquire+0x747/0x2de0 [ 565.476708][T20392] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.476763][T20392] ? __fget_files+0x2a/0x420 [ 565.476801][T20392] ? __fget_files+0x3a2/0x420 [ 565.476839][T20392] __x64_sys_sendmsg+0x1b1/0x290 [ 565.476862][T20392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 565.476903][T20392] do_syscall_64+0x166/0x520 [ 565.476927][T20392] ? trace_irq_disable+0x3b/0x140 [ 565.476948][T20392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.476969][T20392] ? clear_bhb_loop+0x70/0xc0 [ 565.476994][T20392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.477013][T20392] RIP: 0033:0x7fc40f39e1d9 [ 565.477032][T20392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.477049][T20392] RSP: 002b:00007fc410321028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.477071][T20392] RAX: ffffffffffffffda RBX: 00007fc40f625fa0 RCX: 00007fc40f39e1d9 [ 565.477086][T20392] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 565.477099][T20392] RBP: 00007fc410321090 R08: 0000000000000000 R09: 0000000000000000 [ 565.477111][T20392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.477124][T20392] R13: 00007fc40f626038 R14: 00007fc40f625fa0 R15: 00007ffc886133f8 [ 565.477155][T20392] [ 565.873151][T20390] lo speed is unknown, defaulting to 1000 [ 566.431396][T20410] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3897'. [ 566.464846][T20411] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3896'. [ 566.649245][T20414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3896'. [ 567.058441][T20390] wg2 speed is unknown, defaulting to 1000 [ 567.817634][T20431] netlink: 'syz.2.3903': attribute type 1 has an invalid length. [ 568.332841][T20450] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3907'. [ 568.989383][T20467] ip6gre1: entered promiscuous mode [ 568.995740][T20473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3920'. [ 569.492165][T20484] FAULT_INJECTION: forcing a failure. [ 569.492165][T20484] name failslab, interval 1, probability 0, space 0, times 0 [ 569.492202][T20484] CPU: 0 UID: 0 PID: 20484 Comm: syz.3.3924 Not tainted syzkaller #0 PREEMPT(full) [ 569.492224][T20484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 569.492236][T20484] Call Trace: [ 569.492244][T20484] [ 569.492252][T20484] dump_stack_lvl+0xe8/0x150 [ 569.492285][T20484] should_fail_ex+0x410/0x560 [ 569.492311][T20484] should_failslab+0xa8/0x100 [ 569.492332][T20484] __kmalloc_cache_noprof+0xa3/0x600 [ 569.492354][T20484] ? __kmalloc_cache_noprof+0x14d/0x600 [ 569.492373][T20484] ? do_check_common+0x348/0x5610 [ 569.492398][T20484] ? do_check_common+0x348/0x5610 [ 569.492430][T20484] do_check_common+0x348/0x5610 [ 569.492470][T20484] ? bpf_compute_live_registers+0x1f40/0x1ff0 [ 569.492493][T20484] ? bpf_insn_def32+0x1ae/0x650 [ 569.492532][T20484] ? mark_fastcall_patterns+0xf32/0xf90 [ 569.492559][T20484] ? __pfx_do_check_common+0x10/0x10 [ 569.492597][T20484] do_check_main+0xa2/0x1f0 [ 569.492623][T20484] bpf_check+0x2775/0x2ef0 [ 569.492663][T20484] ? __pfx_bpf_check+0x10/0x10 [ 569.492688][T20484] ? bpf_obj_name_cpy+0x194/0x1e0 [ 569.492721][T20484] bpf_prog_load+0x14d6/0x1c20 [ 569.492756][T20484] ? __pfx_bpf_prog_load+0x10/0x10 [ 569.492812][T20484] __sys_bpf+0xd0d/0xd90 [ 569.492844][T20484] ? __pfx___sys_bpf+0x10/0x10 [ 569.492879][T20484] ? __fget_files+0x2a/0x420 [ 569.492924][T20484] ? ksys_write+0x242/0x270 [ 569.492946][T20484] ? __pfx_ksys_write+0x10/0x10 [ 569.492970][T20484] __x64_sys_bpf+0xba/0xd0 [ 569.492994][T20484] do_syscall_64+0x166/0x520 [ 569.493018][T20484] ? trace_irq_disable+0x3b/0x140 [ 569.493037][T20484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.493054][T20484] ? clear_bhb_loop+0x70/0xc0 [ 569.493078][T20484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.493098][T20484] RIP: 0033:0x7fadec79e1d9 [ 569.493116][T20484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.493132][T20484] RSP: 002b:00007faded621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 569.493154][T20484] RAX: ffffffffffffffda RBX: 00007fadeca25fa0 RCX: 00007fadec79e1d9 [ 569.493166][T20484] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 569.493176][T20484] RBP: 00007faded621090 R08: 0000000000000000 R09: 0000000000000000 [ 569.493186][T20484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 569.493195][T20484] R13: 00007fadeca26038 R14: 00007fadeca25fa0 R15: 00007ffc74fb8658 [ 569.493220][T20484] [ 569.870897][T20490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3926'. [ 570.132984][T20496] ip_tables: iptables: counters copy to user failed while replacing table [ 570.388186][T20507] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 570.390448][T20507] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 570.398975][T20505] netlink: 'syz.0.3930': attribute type 1 has an invalid length. [ 570.691030][T20515] netlink: 'syz.0.3933': attribute type 1 has an invalid length. [ 570.907652][T20521] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3937'. [ 571.204379][T20530] netlink: Failed to add ¦â—k\ helper -22 [ 571.204434][T20530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.675998][T20546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3944'. [ 571.676029][T20546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3944'. [ 571.793540][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 572.536636][T20553] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 572.724658][ T6160] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.724707][ T6160] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.724742][ T6160] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.724800][ T6160] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.540816][T20557] Cannot find add_set index 2 as target [ 573.845165][T20589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3954'. [ 574.080068][T20600] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 574.080172][T20600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.080660][T20600] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 574.080688][T20600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.081071][T20600] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 574.081097][T20600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.087235][T20600] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 574.087269][T20600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.492126][T20613] netlink: 'syz.3.3961': attribute type 1 has an invalid length. [ 575.025263][T20623] nbd3: detected capacity change from 0 to 63 [ 575.125599][ T5619] block nbd3: Receive control failed (result -104) [ 575.797100][T20649] netlink: 'syz.4.3972': attribute type 2 has an invalid length. [ 575.797124][T20649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3972'. [ 575.819021][T20649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3972'. [ 575.819050][T20649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3972'. [ 575.819117][T20649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3972'. [ 576.152294][T20663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3979'. [ 576.580406][T20687] xt_LOG: prefix is not null-terminated [ 576.594705][T20687] net_ratelimit: 29 callbacks suppressed [ 576.594726][T20687] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 578.270258][T20741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4005'. [ 578.392416][T20749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.396971][T20740] bond3 (unregistering): Released all slaves [ 578.400361][T20751] netlink: zone id is out of range [ 578.400374][T20751] netlink: zone id is out of range [ 578.400383][T20751] netlink: zone id is out of range [ 578.400395][T20751] netlink: zone id is out of range [ 578.400403][T20751] netlink: zone id is out of range [ 578.400414][T20751] netlink: zone id is out of range [ 578.400426][T20751] netlink: zone id is out of range [ 578.400433][T20751] netlink: zone id is out of range [ 578.514516][T20744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4004'. [ 578.516953][T20745] lo: left promiscuous mode [ 578.517103][T20745] tunl0: left promiscuous mode [ 578.517237][T20745] gre0: left promiscuous mode [ 578.517322][T20745] gretap0: left promiscuous mode [ 578.518756][T20745] ip_vti0: left promiscuous mode [ 578.518907][T20745] ip6_vti0: left promiscuous mode [ 578.518993][T20745] sit0: left promiscuous mode [ 578.519082][T20745] ip6tnl0: left promiscuous mode [ 578.519165][T20745] ip6gre0: left promiscuous mode [ 578.519253][T20745] syz_tun: left promiscuous mode [ 578.519367][T20745] ip6gretap0: left promiscuous mode [ 578.519450][T20745] bridge0: left promiscuous mode [ 578.519549][T20745] vcan0: left promiscuous mode [ 578.519563][T20745] vcan0: left allmulticast mode [ 578.528419][T20745] nlmon0: left promiscuous mode [ 578.528532][T20745] batadv0: left promiscuous mode [ 578.528678][T20745] vxcan0: left promiscuous mode [ 578.529998][T20745] vxcan1: left promiscuous mode [ 578.530109][T20745] veth0: left promiscuous mode [ 578.530221][T20745] veth1: left promiscuous mode [ 578.530328][T20745] wg0: left promiscuous mode [ 578.530447][T20745] wg1: left promiscuous mode [ 578.530554][T20745] wg2: left promiscuous mode [ 578.530661][T20745] veth0_to_bridge: left promiscuous mode [ 578.537708][T20745] veth1_to_bridge: left promiscuous mode [ 578.540104][T20745] veth1_to_bond: left promiscuous mode [ 578.541166][T20745] veth0_to_team: left promiscuous mode [ 578.545908][T20745] veth1_to_team: left promiscuous mode [ 578.551357][T20745] veth0_to_batadv: left promiscuous mode [ 578.551528][T20745] batadv_slave_0: left promiscuous mode [ 578.551642][T20745] veth1_to_batadv: left promiscuous mode [ 578.556690][T20745] batadv_slave_1: left promiscuous mode [ 578.556853][T20745] xfrm0: left promiscuous mode [ 578.557907][T20745] veth0_to_hsr: left promiscuous mode [ 578.559356][T20745] veth1_to_hsr: left promiscuous mode [ 578.561087][T20745] hsr0: left promiscuous mode [ 578.561203][T20745] veth1_virt_wifi: left promiscuous mode [ 578.561316][T20745] veth0_virt_wifi: left promiscuous mode [ 578.561537][T20745] virt_wifi0: left promiscuous mode [ 578.566131][T20745] vlan0: left promiscuous mode [ 578.568051][T20745] macvlan0: left promiscuous mode [ 578.568171][T20745] macvlan1: left promiscuous mode [ 578.568185][T20745] macvlan1: left allmulticast mode [ 578.568291][T20745] ipvlan0: left promiscuous mode [ 578.568430][T20745] ipvlan1: left promiscuous mode [ 578.571253][T20745] macvtap0: left promiscuous mode [ 578.571370][T20745] macsec0: left promiscuous mode [ 578.571453][T20745] geneve0: left promiscuous mode [ 578.578023][T20745] geneve1: left promiscuous mode [ 578.578187][T20745] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 578.578284][T20745] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 578.578374][T20745] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 578.578460][T20745] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 578.578545][T20745] mac80211_hwsim hwsim19 wlan0: left promiscuous mode [ 578.578653][T20745] syztnl0: left promiscuous mode [ 578.578735][T20745] ip6gretap1: left promiscuous mode [ 578.578842][T20745] vti60: left promiscuous mode [ 578.578933][T20745] : left promiscuous mode [ 578.579050][T20745] bridge1: left promiscuous mode [ 578.579176][T20745] bridge2: left promiscuous mode [ 578.579290][T20745] veth2: left promiscuous mode [ 578.579303][T20745] veth2: left allmulticast mode [ 578.579438][T20745] veth3: left promiscuous mode [ 578.592499][T20745] vxlan0: left promiscuous mode [ 578.592646][T20745] ip6gre1: left promiscuous mode [ 578.592758][T20745] bridge3: left promiscuous mode [ 578.592918][T20745] bridge4: left promiscuous mode [ 578.593034][T20745] hsr1: left promiscuous mode [ 578.593258][T20745] ip6gre2: left promiscuous mode [ 578.593273][T20745] ip6gre2: left allmulticast mode [ 578.593419][T20745] bond1: left promiscuous mode [ 578.593433][T20745] veth0_to_bond: left promiscuous mode [ 578.593722][T20745] veth4: left promiscuous mode [ 578.593934][T20745] veth5: left promiscuous mode [ 578.593947][T20745] veth5: left allmulticast mode [ 578.616643][T20745] vlan1.0: left promiscuous mode [ 578.616663][T20745] vlan1: left promiscuous mode [ 579.109198][T20763] netlink: 'syz.3.4009': attribute type 34 has an invalid length. [ 579.109223][T20763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4009'. [ 579.572622][T20784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4015'. [ 579.658976][T20789] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4014'. [ 580.328037][T20813] Bluetooth: MGMT ver 1.23 [ 580.936642][T20820] __nla_validate_parse: 4 callbacks suppressed [ 580.936660][T20820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4025'. [ 580.936831][T20820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4025'. [ 580.936971][T20820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4025'. [ 580.937118][T20820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4025'. [ 580.937295][T20820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4025'. [ 580.937469][T20820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4025'. [ 580.937607][T20820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4025'. [ 580.937743][T20820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4025'. [ 580.937892][T20820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4025'. [ 580.938021][T20820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4025'. [ 581.977982][T20860] net_ratelimit: 499 callbacks suppressed [ 581.978003][T20860] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 581.983015][T20860] FAULT_INJECTION: forcing a failure. [ 581.983015][T20860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.983060][T20860] CPU: 1 UID: 0 PID: 20860 Comm: syz.1.4037 Not tainted syzkaller #0 PREEMPT(full) [ 581.983082][T20860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 581.983093][T20860] Call Trace: [ 581.983100][T20860] [ 581.983108][T20860] dump_stack_lvl+0xe8/0x150 [ 581.983141][T20860] should_fail_ex+0x410/0x560 [ 581.983172][T20860] _copy_from_user+0x2d/0xb0 [ 581.983201][T20860] do_ipv6_setsockopt+0x245/0x2960 [ 581.983231][T20860] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 581.983254][T20860] ? kstrtouint+0x6e/0xe0 [ 581.983279][T20860] ? __mutex_trylock_common+0x15f/0x270 [ 581.983311][T20860] ? __pfx___mutex_trylock_common+0x10/0x10 [ 581.983338][T20860] ? rcu_is_watching+0x16/0xb0 [ 581.983362][T20860] ? trace_contention_end+0x3d/0x140 [ 581.983390][T20860] ? __mutex_lock+0x30b/0x1550 [ 581.983416][T20860] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 581.983458][T20860] ? smc_setsockopt+0x174/0xb40 [ 581.983480][T20860] ? __pfx___mutex_lock+0x10/0x10 [ 581.983519][T20860] ipv6_setsockopt+0x59/0x170 [ 581.983541][T20860] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 581.983576][T20860] smc_setsockopt+0x232/0xb40 [ 581.983603][T20860] ? __pfx_smc_setsockopt+0x10/0x10 [ 581.983629][T20860] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 581.983655][T20860] ? __pfx_smc_setsockopt+0x10/0x10 [ 581.983678][T20860] do_sock_setsockopt+0x17c/0x1b0 [ 581.983712][T20860] __x64_sys_setsockopt+0x13d/0x1b0 [ 581.983747][T20860] do_syscall_64+0x166/0x520 [ 581.983770][T20860] ? trace_irq_disable+0x3b/0x140 [ 581.983791][T20860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.983811][T20860] ? clear_bhb_loop+0x70/0xc0 [ 581.983836][T20860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.983855][T20860] RIP: 0033:0x7f9eaaf9e1d9 [ 581.983873][T20860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.983890][T20860] RSP: 002b:00007f9eabe05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 581.983915][T20860] RAX: ffffffffffffffda RBX: 00007f9eab225fa0 RCX: 00007f9eaaf9e1d9 [ 581.983933][T20860] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 581.983946][T20860] RBP: 00007f9eabe05090 R08: 00000000000003d0 R09: 0000000000000000 [ 581.983958][T20860] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 581.983971][T20860] R13: 00007f9eab226038 R14: 00007f9eab225fa0 R15: 00007ffee32c9458 [ 581.984004][T20860] [ 582.551187][T20880] pim6reg: entered allmulticast mode [ 583.185485][T20907] FAULT_INJECTION: forcing a failure. [ 583.185485][T20907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.185520][T20907] CPU: 1 UID: 0 PID: 20907 Comm: syz.3.4050 Not tainted syzkaller #0 PREEMPT(full) [ 583.185544][T20907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 583.185556][T20907] Call Trace: [ 583.185565][T20907] [ 583.185574][T20907] dump_stack_lvl+0xe8/0x150 [ 583.185608][T20907] should_fail_ex+0x410/0x560 [ 583.185641][T20907] _copy_to_user+0x31/0xb0 [ 583.185672][T20907] simple_read_from_buffer+0xe1/0x170 [ 583.185709][T20907] proc_fail_nth_read+0x1bb/0x230 [ 583.185733][T20907] ? common_file_perm+0x20e/0x2b0 [ 583.185763][T20907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 583.185789][T20907] ? rw_verify_area+0x24a/0x4c0 [ 583.185822][T20907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 583.185842][T20907] vfs_read+0x213/0xa80 [ 583.185879][T20907] ? __pfx___mutex_lock+0x10/0x10 [ 583.185913][T20907] ? __pfx_vfs_read+0x10/0x10 [ 583.185945][T20907] ? __fget_files+0x2a/0x420 [ 583.185979][T20907] ? __fget_files+0x3a2/0x420 [ 583.186006][T20907] ? __fget_files+0x2a/0x420 [ 583.186044][T20907] ksys_read+0x150/0x270 [ 583.186067][T20907] ? __pfx_ksys_read+0x10/0x10 [ 583.186098][T20907] do_syscall_64+0x166/0x520 [ 583.186123][T20907] ? trace_irq_disable+0x3b/0x140 [ 583.186144][T20907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.186165][T20907] ? clear_bhb_loop+0x70/0xc0 [ 583.186190][T20907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.186211][T20907] RIP: 0033:0x7fadec75ea0e [ 583.186230][T20907] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 583.186248][T20907] RSP: 002b:00007faded620fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 583.186270][T20907] RAX: ffffffffffffffda RBX: 00007faded6216c0 RCX: 00007fadec75ea0e [ 583.186285][T20907] RDX: 000000000000000f RSI: 00007faded6210a0 RDI: 0000000000000004 [ 583.186298][T20907] RBP: 00007faded621090 R08: 0000000000000000 R09: 0000000000000000 [ 583.186312][T20907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.186324][T20907] R13: 00007fadeca26038 R14: 00007fadeca25fa0 R15: 00007ffc74fb8658 [ 583.186358][T20907] [ 583.336096][T20909] netlink: 'syz.1.4051': attribute type 10 has an invalid length. [ 583.556006][T20912] netlink: 'syz.1.4051': attribute type 10 has an invalid length. [ 583.985638][T20909] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 584.000373][T20909] team0: Port device netdevsim1 added [ 584.143273][T20912] team0: Port device netdevsim1 removed [ 584.148414][T20912] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 584.191077][T20912] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 584.727557][T20950] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 584.807303][T20953] 8021q: adding VLAN 0 to HW filter on device bond3 [ 584.920440][T20943] : renamed from bridge_slave_1 [ 585.958871][T20987] __nla_validate_parse: 61 callbacks suppressed [ 585.958896][T20987] netlink: 388 bytes leftover after parsing attributes in process `syz.2.4074'. [ 586.039982][T20989] syzkaller0: entered promiscuous mode [ 586.040176][T20989] syzkaller0: entered allmulticast mode [ 586.061720][T20989] FAULT_INJECTION: forcing a failure. [ 586.061720][T20989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.061742][T20989] CPU: 0 UID: 0 PID: 20989 Comm: syz.3.4075 Not tainted syzkaller #0 PREEMPT(full) [ 586.061754][T20989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 586.061761][T20989] Call Trace: [ 586.061766][T20989] [ 586.061772][T20989] dump_stack_lvl+0xe8/0x150 [ 586.061804][T20989] should_fail_ex+0x410/0x560 [ 586.061833][T20989] _copy_from_iter+0x1d3/0x1660 [ 586.061862][T20989] ? _copy_from_iter+0x21b/0x1660 [ 586.061885][T20989] ? sock_alloc_send_pskb+0xb87/0xc90 [ 586.061906][T20989] ? __pfx__copy_from_iter+0x10/0x10 [ 586.061936][T20989] ? __pfx__copy_from_iter+0x10/0x10 [ 586.061969][T20989] copy_page_from_iter+0x219/0x2d0 [ 586.061998][T20989] skb_copy_datagram_from_iter+0x2f4/0x720 [ 586.062032][T20989] packet_sendmsg+0x37da/0x5160 [ 586.062061][T20989] ? up_write+0x19d/0x4a0 [ 586.062121][T20989] ? lock_acquire+0x115/0x350 [ 586.062143][T20989] ? __lock_acquire+0x747/0x2de0 [ 586.062172][T20989] ? __pfx_packet_sendmsg+0x10/0x10 [ 586.062198][T20989] ? aa_sk_perm+0x713/0x900 [ 586.062221][T20989] ? __lock_acquire+0x747/0x2de0 [ 586.062247][T20989] ? __pfx_rwsem_set_nonspinnable+0x6/0x10 [ 586.062275][T20989] ? __pfx_aa_sk_perm+0x10/0x10 [ 586.062302][T20989] ? aa_sock_msg_perm+0x144/0x210 [ 586.062331][T20989] ? apparmor_socket_sendmsg+0x98/0x360 [ 586.062355][T20989] ? __pfx_packet_sendmsg+0x10/0x10 [ 586.062382][T20989] sock_sendmsg_nosec+0x14e/0x190 [ 586.062408][T20989] ____sys_sendmsg+0x54e/0x850 [ 586.062442][T20989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 586.062479][T20989] ? import_iovec+0x73/0xa0 [ 586.062508][T20989] ___sys_sendmsg+0x2a5/0x360 [ 586.062525][T20989] ? __lock_acquire+0x747/0x2de0 [ 586.062550][T20989] ? __pfx____sys_sendmsg+0x10/0x10 [ 586.062616][T20989] ? __fget_files+0x2a/0x420 [ 586.062651][T20989] ? __fget_files+0x3a2/0x420 [ 586.062688][T20989] __x64_sys_sendmsg+0x1b1/0x290 [ 586.062709][T20989] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 586.062751][T20989] do_syscall_64+0x166/0x520 [ 586.062772][T20989] ? trace_irq_disable+0x3b/0x140 [ 586.062792][T20989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.062811][T20989] ? clear_bhb_loop+0x70/0xc0 [ 586.062834][T20989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.062853][T20989] RIP: 0033:0x7fadec79e1d9 [ 586.062871][T20989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.062888][T20989] RSP: 002b:00007faded621028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 586.062910][T20989] RAX: ffffffffffffffda RBX: 00007fadeca25fa0 RCX: 00007fadec79e1d9 [ 586.062926][T20989] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 586.062938][T20989] RBP: 00007faded621090 R08: 0000000000000000 R09: 0000000000000000 [ 586.062951][T20989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 586.062963][T20989] R13: 00007fadeca26038 R14: 00007fadeca25fa0 R15: 00007ffc74fb8658 [ 586.062995][T20989] [ 586.938761][T21004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4081'. [ 587.379178][T21012] netlink: 'syz.4.4083': attribute type 2 has an invalid length. [ 587.627972][T21022] netlink: 'syz.1.4079': attribute type 21 has an invalid length. [ 587.627998][T21022] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4079'. [ 587.628069][T21022] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4079'. [ 588.062492][ T31] audit: type=1800 audit(1791519592.650:18): pid=21034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4086" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1210 res=0 errno=0 [ 588.263356][T21036] xt_LOG: prefix is not null-terminated [ 588.308205][T21036] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 588.645114][T21049] [ 588.647486][T21049] ====================================================== [ 588.654516][T21049] WARNING: possible circular locking dependency detected [ 588.661563][T21049] syzkaller #0 Not tainted [ 588.665991][T21049] ------------------------------------------------------ [ 588.673024][T21049] syz.1.4092/21049 is trying to acquire lock: [ 588.679099][T21049] ffff88801d2f7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 588.689664][T21049] [ 588.689664][T21049] but task is already holding lock: [ 588.697154][T21049] ffffffff8fbe9970 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 588.707436][T21049] [ 588.707436][T21049] which lock already depends on the new lock. [ 588.707436][T21049] [ 588.717855][T21049] [ 588.717855][T21049] the existing dependency chain (in reverse order) is: [ 588.726902][T21049] [ 588.726902][T21049] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 588.734658][T21049] cpus_read_lock+0x42/0x160 [ 588.739801][T21049] static_key_slow_inc+0x12/0x30 [ 588.745291][T21049] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 588.751564][T21049] nbd_genl_foreach_sock+0x265/0x450 [ 588.757399][T21049] nbd_genl_reconfigure+0xbbb/0x1040 [ 588.763237][T21049] genl_family_rcv_msg_doit+0x233/0x340 [ 588.769350][T21049] genl_rcv_msg+0x614/0x7a0 [ 588.774426][T21049] netlink_rcv_skb+0x226/0x4a0 [ 588.779815][T21049] genl_rcv+0x28/0x40 [ 588.784410][T21049] netlink_unicast+0x7bd/0x940 [ 588.789733][T21049] netlink_sendmsg+0x813/0xb40 [ 588.795040][T21049] sock_sendmsg_nosec+0x14e/0x190 [ 588.800602][T21049] ____sys_sendmsg+0x54e/0x850 [ 588.805904][T21049] ___sys_sendmsg+0x2a5/0x360 [ 588.811109][T21049] __x64_sys_sendmsg+0x1b1/0x290 [ 588.816581][T21049] do_syscall_64+0x166/0x520 [ 588.821723][T21049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.828159][T21049] [ 588.828159][T21049] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 588.835920][T21049] __mutex_lock+0x19d/0x1550 [ 588.841061][T21049] nbd_queue_rq+0x373/0xff0 [ 588.846099][T21049] blk_mq_dispatch_rq_list+0x499/0x1990 [ 588.852184][T21049] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 588.859142][T21049] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 588.865661][T21049] blk_mq_run_work_fn+0x16c/0x300 [ 588.871221][T21049] process_scheduled_works+0xc3d/0x1630 [ 588.877301][T21049] worker_thread+0xa47/0xfb0 [ 588.882426][T21049] kthread+0x38b/0x480 [ 588.887023][T21049] ret_from_fork+0x514/0xb70 [ 588.892188][T21049] ret_from_fork_asm+0x1a/0x30 [ 588.897497][T21049] [ 588.897497][T21049] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 588.904722][T21049] __mutex_lock+0x19d/0x1550 [ 588.909849][T21049] nbd_queue_rq+0xc1/0xff0 [ 588.914797][T21049] blk_mq_dispatch_rq_list+0x499/0x1990 [ 588.920874][T21049] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 588.927742][T21049] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 588.934345][T21049] blk_mq_run_work_fn+0x16c/0x300 [ 588.939908][T21049] process_scheduled_works+0xc3d/0x1630 [ 588.945993][T21049] worker_thread+0xa47/0xfb0 [ 588.951119][T21049] kthread+0x38b/0x480 [ 588.955713][T21049] ret_from_fork+0x514/0xb70 [ 588.960842][T21049] ret_from_fork_asm+0x1a/0x30 [ 588.966139][T21049] [ 588.966139][T21049] -> #4 (set->srcu){.+.+}-{0:0}: [ 588.973272][T21049] __synchronize_srcu+0xc9/0x2f0 [ 588.978743][T21049] elevator_switch+0x1e8/0x7b0 [ 588.984035][T21049] elevator_change+0x2fa/0x480 [ 588.989328][T21049] elevator_set_default+0x375/0x440 [ 588.995060][T21049] blk_register_queue+0x3f3/0x4e0 [ 589.000617][T21049] __add_disk+0x6b8/0xdb0 [ 589.005479][T21049] add_disk_fwnode+0x100/0x3a0 [ 589.010775][T21049] nbd_dev_add+0x733/0xb60 [ 589.015808][T21049] nbd_init+0x168/0x1f0 [ 589.020500][T21049] do_one_initcall+0x250/0x870 [ 589.025826][T21049] do_initcall_level+0x10a/0x1a0 [ 589.031288][T21049] do_initcalls+0x59/0xa0 [ 589.036144][T21049] kernel_init_freeable+0x29d/0x3e0 [ 589.041870][T21049] kernel_init+0x22/0x1d0 [ 589.047344][T21049] ret_from_fork+0x514/0xb70 [ 589.052907][T21049] ret_from_fork_asm+0x1a/0x30 [ 589.058216][T21049] [ 589.058216][T21049] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 589.066080][T21049] __mutex_lock+0x19d/0x1550 [ 589.071216][T21049] elevator_change+0x1af/0x480 [ 589.076521][T21049] elevator_set_none+0xb5/0x140 [ 589.081940][T21049] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 589.088297][T21049] nbd_start_device+0x189/0xb30 [ 589.093699][T21049] nbd_genl_connect+0x167d/0x1cd0 [ 589.099253][T21049] genl_family_rcv_msg_doit+0x233/0x340 [ 589.105340][T21049] genl_rcv_msg+0x614/0x7a0 [ 589.110393][T21049] netlink_rcv_skb+0x226/0x4a0 [ 589.115685][T21049] genl_rcv+0x28/0x40 [ 589.120204][T21049] netlink_unicast+0x7bd/0x940 [ 589.125492][T21049] netlink_sendmsg+0x813/0xb40 [ 589.130786][T21049] sock_sendmsg_nosec+0x14e/0x190 [ 589.136349][T21049] ____sys_sendmsg+0x54e/0x850 [ 589.141647][T21049] ___sys_sendmsg+0x2a5/0x360 [ 589.146848][T21049] __x64_sys_sendmsg+0x1b1/0x290 [ 589.152349][T21049] do_syscall_64+0x166/0x520 [ 589.157473][T21049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.163889][T21049] [ 589.163889][T21049] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 589.172508][T21049] blk_alloc_queue+0x544/0x690 [ 589.177802][T21049] __blk_mq_alloc_disk+0x194/0x390 [ 589.183447][T21049] nbd_dev_add+0x494/0xb60 [ 589.188403][T21049] nbd_init+0x168/0x1f0 [ 589.193088][T21049] do_one_initcall+0x250/0x870 [ 589.198387][T21049] do_initcall_level+0x10a/0x1a0 [ 589.203851][T21049] do_initcalls+0x59/0xa0 [ 589.208712][T21049] kernel_init_freeable+0x29d/0x3e0 [ 589.214435][T21049] kernel_init+0x22/0x1d0 [ 589.219310][T21049] ret_from_fork+0x514/0xb70 [ 589.224450][T21049] ret_from_fork_asm+0x1a/0x30 [ 589.229757][T21049] [ 589.229757][T21049] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 589.236985][T21049] fs_reclaim_acquire+0x71/0x100 [ 589.242466][T21049] kmem_cache_alloc_noprof+0x5f/0x600 [ 589.248376][T21049] __kernfs_iattrs+0xdd/0x380 [ 589.253582][T21049] kernfs_iop_setattr+0xe6/0x3f0 [ 589.259041][T21049] notify_change+0xbba/0xea0 [ 589.264161][T21049] do_truncate+0x1c2/0x250 [ 589.269099][T21049] path_openat+0x15b5/0x1d60 [ 589.274218][T21049] do_file_open+0x23e/0x4a0 [ 589.279337][T21049] do_sys_openat2+0x115/0x200 [ 589.284543][T21049] __x64_sys_openat+0x138/0x170 [ 589.290010][T21049] do_syscall_64+0x166/0x520 [ 589.295222][T21049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.301638][T21049] [ 589.301638][T21049] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 589.310157][T21049] __lock_acquire+0x164c/0x2de0 [ 589.315536][T21049] lock_acquire+0x115/0x350 [ 589.320564][T21049] down_read+0x4a/0x330 [ 589.325248][T21049] kernfs_iop_permission+0x7f/0x430 [ 589.330974][T21049] inode_permission+0x3de/0x5f0 [ 589.336354][T21049] cgroup_attach_permissions+0x28e/0x9f0 [ 589.342515][T21049] __cgroup_procs_write+0x24b/0x320 [ 589.348236][T21049] cgroup_threads_write+0x24/0x50 [ 589.353779][T21049] cgroup_file_write+0x331/0x8f0 [ 589.359249][T21049] kernfs_fop_write_iter+0x3a4/0x540 [ 589.365059][T21049] vfs_write+0x612/0xba0 [ 589.369820][T21049] ksys_write+0x150/0x270 [ 589.374670][T21049] do_syscall_64+0x166/0x520 [ 589.379797][T21049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.386223][T21049] [ 589.386223][T21049] other info that might help us debug this: [ 589.386223][T21049] [ 589.396541][T21049] Chain exists of: [ 589.396541][T21049] &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock [ 589.396541][T21049] [ 589.410544][T21049] Possible unsafe locking scenario: [ 589.410544][T21049] [ 589.418095][T21049] CPU0 CPU1 [ 589.423467][T21049] ---- ---- [ 589.428825][T21049] rlock(cpu_hotplug_lock); [ 589.433428][T21049] lock(&nsock->tx_lock); [ 589.440384][T21049] lock(cpu_hotplug_lock); [ 589.447434][T21049] rlock(&root->kernfs_iattr_rwsem); [ 589.452821][T21049] [ 589.452821][T21049] *** DEADLOCK *** [ 589.452821][T21049] [ 589.460969][T21049] locks held by syz.1.4092/21049: 5, last CPU#1: [ 589.467312][T21049] #0: ffff888050f39970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 589.476403][T21049] #1: ffff888037714460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 589.485340][T21049] #2: ffff88807f060080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 589.495114][T21049] #3: ffffffff8fd9c7a0 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230 [ 589.504878][T21049] #4: ffffffff8fbe9970 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 589.515430][T21049] [ 589.515430][T21049] stack backtrace: [ 589.521332][T21049] CPU: 1 UID: 0 PID: 21049 Comm: syz.1.4092 Not tainted syzkaller #0 PREEMPT(full) [ 589.530720][T21049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 589.540791][T21049] Call Trace: [ 589.544081][T21049] [ 589.547016][T21049] dump_stack_lvl+0xe8/0x150 [ 589.551624][T21049] print_circular_bug+0x2e2/0x300 [ 589.556660][T21049] check_noncircular+0x12f/0x150 [ 589.561611][T21049] __lock_acquire+0x164c/0x2de0 [ 589.566487][T21049] ? __lock_acquire+0x747/0x2de0 [ 589.571448][T21049] lock_acquire+0x115/0x350 [ 589.575958][T21049] ? kernfs_iop_permission+0x7f/0x430 [ 589.581344][T21049] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 589.587163][T21049] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 589.592984][T21049] down_read+0x4a/0x330 [ 589.597170][T21049] ? kernfs_iop_permission+0x7f/0x430 [ 589.602557][T21049] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 589.608376][T21049] kernfs_iop_permission+0x7f/0x430 [ 589.613581][T21049] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 589.619408][T21049] inode_permission+0x3de/0x5f0 [ 589.624291][T21049] cgroup_attach_permissions+0x28e/0x9f0 [ 589.629958][T21049] __cgroup_procs_write+0x24b/0x320 [ 589.635186][T21049] cgroup_threads_write+0x24/0x50 [ 589.640258][T21049] ? __pfx_cgroup_threads_write+0x10/0x10 [ 589.645990][T21049] cgroup_file_write+0x331/0x8f0 [ 589.650957][T21049] ? __pfx_cgroup_file_write+0x10/0x10 [ 589.656452][T21049] ? __kmalloc_noprof+0x38c/0x720 [ 589.661511][T21049] ? __pfx_cgroup_file_write+0x10/0x10 [ 589.667003][T21049] kernfs_fop_write_iter+0x3a4/0x540 [ 589.672740][T21049] vfs_write+0x612/0xba0 [ 589.677110][T21049] ? __pfx_vfs_write+0x10/0x10 [ 589.681906][T21049] ? __fget_files+0x2a/0x420 [ 589.686529][T21049] ksys_write+0x150/0x270 [ 589.690878][T21049] ? __pfx_ksys_write+0x10/0x10 [ 589.695746][T21049] do_syscall_64+0x166/0x520 [ 589.700435][T21049] ? trace_irq_disable+0x3b/0x140 [ 589.705460][T21049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.711526][T21049] ? clear_bhb_loop+0x70/0xc0 [ 589.716197][T21049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.722093][T21049] RIP: 0033:0x7f9eaaf9e1d9 [ 589.726506][T21049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.746107][T21049] RSP: 002b:00007f9eabe05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 589.754525][T21049] RAX: ffffffffffffffda RBX: 00007f9eab225fa0 RCX: 00007f9eaaf9e1d9 [ 589.762490][T21049] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000006 [ 589.770452][T21049] RBP: 00007f9eab035888 R08: 0000000000000000 R09: 0000000000000000 [ 589.778411][T21049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.786380][T21049] R13: 00007f9eab226038 R14: 00007f9eab225fa0 R15: 00007ffee32c9458 [ 589.794351][T21049]