last executing test programs: 38.771232797s ago: executing program 0 (id=6682): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0x2) connect$inet6(r2, &(0x7f0000000500)={0xa, 0x4e24, 0x9, @mcast1, 0x55}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7100fcdbdf25020000000b0001005c5b3a57"], 0x20}}, 0x4c880) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000680), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r8}, 0xc) socket$nl_route(0x10, 0x3, 0x0) 38.398744943s ago: executing program 0 (id=6685): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000340), 0x2, 0x0) preadv(r4, &(0x7f0000000380), 0x0, 0xfffbfffb, 0xa) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'vlan0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x4b}}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000005c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) socketpair(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='\r\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002bbd700000100000010000000c00020009000000000000001c0007800c00018008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r9, @ANYBLOB="0c0005002201000000000000"], 0x48}}, 0x400400c) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="100028bd7000fddbdf2501000000040007800c00020076b79f6c4edff7205361b8b0f7be0706c2ba5cd1c0879ea072da8371634c23203b3a3639df8f2c40ab93c3f62146e5"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r15, 0x0, 0x4, &(0x7f00000009c0)="441f0803000000e8c94ef56491ee54be0e1c7491b1c7289f0e78686c84", 0x1d) sendto$inet(r15, 0x0, 0x0, 0x20008000, &(0x7f0000000a00)={0x2, 0x4e24, @local}, 0x10) r16 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r14) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="01002dbd7000fbdbdf250700000014000200ff01000000000000000000000000000108000400ac1e000114000300fc000000000000000000000000000000c5c1b7d37f37f53322ad256aa6b4ed3bb2eb326c67802b8c5ff9b6dd900518e6b1ea9a9892f950df43a661876edd088fff8e7b0791e4a236258ff6a2554e9d9aa39596de695ac931cab2177aae853bbeea2e19c7b2a61ef96b9f0868e2c99ab39d144751c730082a25052c0bdda1eae3"], 0x44}, 0x1, 0x0, 0x0, 0x3}, 0x10) epoll_create1(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r12}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) 36.17344742s ago: executing program 1 (id=6694): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf25090000000800010001000000050008001a006000050007"], 0x2c}, 0x1, 0x0, 0x0, 0x8044010}, 0x6014) (fail_nth: 1) 35.14174183s ago: executing program 1 (id=6696): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x1, 0xffffffffffffffad, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000019e00)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000180)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) bpf$PROG_LOAD(0x5, &(0x7f0000019e80)={0x3, 0xc, &(0x7f0000019f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000019fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34.842492582s ago: executing program 3 (id=6699): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000240)={0xffffff}, 0x10) write(r1, &(0x7f0000000280)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)=0x28) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000e80)=ANY=[@ANYBLOB="240000005e00250e00200000000000050000008010003e800c003280050002"], 0x24}], 0x1}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00d320", @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf25070000000800090004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x44) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x9, 0xae46, {{0x6, 0x4, 0x1, 0x9, 0x18, 0x66, 0x0, 0x94, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@local, 0x49, r3}) 34.610167671s ago: executing program 2 (id=6701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001a00010002000080fbdbdf250a808000fd0000000000f0ff07001f"], 0x2c}}, 0x20000050) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000400)={'bridge_slave_1\x00', &(0x7f0000000440)=@ethtool_eee={0x4b, 0x3, 0x4, 0x2, 0x0, 0x6, 0x5, 0x3, [0x8, 0xfffffff8]}}) sendto$l2tp(r3, &(0x7f0000000480)="355b3cf28ad6f9f64815c64bf25ae69675655d953c420d75598f25f258f703297400413cbc6e588dc11d92dc4a042b24cef94b822808b1cd1e53a9d3111375b4ff2427549e64c4b88408a76f76de1ba26f45eed995aea272f721c658330d5fd4718448c70dfbce32676a87aa80246584dd3cb3cf0312297ea42eec6330d1784bb909164a7538190409805a46b68a530034f910f85264531891831d0a0fb0768727e33ac05ca68adce4178a602b85b02e7706e8f6f8c1d6e31e4405328bf06d3033ca138856c8f594fc0ae29ff2", 0xcd, 0x8092, &(0x7f0000000580)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000280)={0x6, 'pimreg1\x00', {0x2}, 0x4007}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000002c0)={0x0, 'veth0_vlan\x00', {0x1}, 0x2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="740000000206050000000000000000030000fffd0e0003006269746d61703a697000000005000400000000000900020073797a31000000002c00078008000840000000cb1800018014000240200100000000000000000000000000010800060000006d2305000500020000000500010006"], 0x74}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000000300)=0xaad7, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_USERDATA={0x8, 0x6, 0x1, 0x0, "bb157c2a"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x4000840) 34.603816384s ago: executing program 3 (id=6702): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000001100)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)=""/138, 0x8a}, {&(0x7f0000002ac0)=""/4094, 0xffe}], 0x2}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x3}, {{0x0, 0x0, 0x0}, 0x90000}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) 34.380109996s ago: executing program 1 (id=6703): bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x7, 0x6, &(0x7f0000000f00)=ANY=[@ANYBLOB="b601000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab6bef11ae3d300"], &(0x7f0000001a80)='GPL\x00', 0x9, 0x29e, &(0x7f0000001ac0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (fail_nth: 90) 34.331167054s ago: executing program 0 (id=6704): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x25dfdbff, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x6e6bc0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c0015005b073500", @ANYRES64=r1], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 33.820786687s ago: executing program 1 (id=6705): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}, 0x10, 0x0, 0xffffffffffffffaa}, 0x4000001) r1 = socket(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x1f, 0x14, &(0x7f00000024c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000002580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000025c0)={r5}, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="dbdf2510200000f0ef37916862f86143f405fae8afeeff8c6d80b7f160550d1ff48870794da40060503ca6a9287bcca03c94a107907602aa9742dd4e7a45b7b56df27dfbeb7c4c1b8873db967da11d3aedc414691bd97df5851cb194ed2810a5bf2f74204c962ff6abc8eca951e8084d38a068c336e189099ddb0daa7746f8de865dbed556f175d905185f02b068062f85b5e99ae0cbcdcb84ea7bb45acace53815c43bbe887435be1f07b69906f478f6a0209b0e092f528560a41c0c0c6c947594cac5a4f1a103b9bc0f43bd37de7431be8046bd02d191bf9fbcad234f0f92acb8a7999be4f511219f47571290ab8aa3a89cd"], 0x14}}, 0x24044001) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) getsockopt(r1, 0x200000000114, 0x4, &(0x7f0000000180)=""/1, &(0x7f00000001c0)=0x1) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x20, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001f80)={r6, 0x20, &(0x7f0000001f40)={&(0x7f0000000e40)=""/4096, 0x1000, 0x0, &(0x7f0000001e40)=""/229, 0xe5}}, 0x10) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001fc0)={@map=r8, 0x35, 0x0, 0x1, &(0x7f0000002000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000002040)=[0x0, 0x0], &(0x7f0000002080)=[0x0], &(0x7f00000020c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002100)={0x7, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002140)={@cgroup=r8, 0xffffffffffffffff, 0x34, 0x2029, r8, @void, @void, @value=r10, @void, r9}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002180)={r7, 0x0, 0x2d, 0x0, @void}, 0x10) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000d00)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r12, 0x0) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="84000000120035062dbd7000fedbdf25090504494e204e2004000000ab0d0000060000000e0000005f000000070000000100000010000000", @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000380001000030"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000c80)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002200)=@newsa={0x158, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in=@loopback, 0x12345678, 0x32}, @in=@loopback, {}, {0x0, 0x8000000000000000}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x68, 0x2, {{'cipher_null\x00'}, 0x100, "69d1fd0802d702b81d41f034d6a6c2f801351b260010b14484e400acf7620356"}}]}, 0x158}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000740)={0x0, 0x1}, 0x1}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="850000002e000000870a00000000000025000000000000009500000d0000000036e0fe9d628154331435e9e6ce79c9df0dafb05b570f3a5e216269570953ed4e8ef92cbd5659aa3327828105ea37cf394d0e22a71a3e05b26e86c93f9733f22bf8c4189a9b2b1351c0a4ea63d3371870918db0dad0aa5c36c1173f"], &(0x7f0000000a40)='syzkaller\x00', 0x4, 0x1a, &(0x7f0000000a80)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd01, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x23) 33.808418309s ago: executing program 0 (id=6706): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="0c0400001000010400000000007ffffffe480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680e00301800c0007"], 0x40c}}, 0x0) 33.722393735s ago: executing program 4 (id=6707): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x1d, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ldst={0x2, 0x0, 0x1, 0x8, 0x0, 0x50, 0x1}, @map_idx={0x18, 0xd, 0x5, 0x0, 0xb}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xf112}, @ldst={0x1, 0x3, 0x6, 0x7, 0x6, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @generic={0xb4, 0x2, 0x3, 0x6, 0xfaf0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x4, 0xc3, &(0x7f0000000c00)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x200}, 0x8, 0x10, &(0x7f0000000480), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x24) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000880}, 0x8084) r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000300)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001000)={0x0, &(0x7f0000000fc0)}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000d80)=0x14) sendmsg$nl_route(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=0x0, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'dummy0\x00', &(0x7f00000005c0)=@ethtool_rxnfc={0x29, 0x0, 0x6, {0xb, @usr_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x2, 0x9, 0x40}, {0x0, @multicast, 0x7, 0x6, [0x9, 0xf2d6]}, @udp_ip4_spec={@broadcast, @multicast1, 0x4e23, 0x4e24, 0x7a}, {0x0, @broadcast, 0x3, 0x7, [0x5, 0x5]}, 0x5, 0xfffffff9}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45844}, 0x26000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="033f000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x10, 0x4, &(0x7f0000000f40)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x1d}]}, &(0x7f0000000f80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x40, r4, 0x1, 0x1070bd28, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10000}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 33.704448775s ago: executing program 3 (id=6708): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r0, 0x18000000000002a0, 0xff7b, 0x0, &(0x7f0000001640)="b9ff0b078059268cb89e14f088a82de0ffff2086dd000011000aac14140ce000116a49e832f0", 0x0, 0x2000028e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 33.634073252s ago: executing program 2 (id=6709): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x110, 0x0, 0x148, 0x110, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0xff, 0x0, 'ip6erspan0\x00', 'lo\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x110, 0x10010000, {}, [@common=@unspec=@helper={{0x48}, {0x1, 'amanda\x00'}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfffffffb}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x1, {0xd}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x2, 0x7}, {0x2, 0x3}, {0x4, 0x4, 0x1}, 0xfffffffe, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 33.450347837s ago: executing program 0 (id=6710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x8004) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000740)={'syzkaller0\x00', @random="2b0100004ec6"}) (fail_nth: 3) socket$nl_generic(0x10, 0x3, 0x10) 33.374188113s ago: executing program 2 (id=6711): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000006}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x8008) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x7c, 0x0, 0x1, 0xf04, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x356a}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff5e49}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000020}, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="1c0001000700aaaaaaaaaa1180", 0xd) 33.307288896s ago: executing program 1 (id=6712): syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x24020400) socket$packet(0x11, 0x2, 0x300) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8050) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000200)=[{0x2d, 0x0, 0x1, 0xfffff038}, {0x28, 0x0, 0xfd, 0x1}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket(0x2b, 0x80801, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) setsockopt$inet6_tcp_int(r5, 0x11e, 0x1, &(0x7f0000000440)=0x400, 0x4) recvmsg$can_j1939(r5, &(0x7f0000000480)={&(0x7f00000004c0)=@l2, 0x80, &(0x7f0000000540)=[{&(0x7f0000000580)=""/188, 0xbc}, {&(0x7f0000000640)=""/1, 0x1}, {&(0x7f0000000680)=""/168, 0xa8}], 0x3, &(0x7f0000000740)=""/9, 0x9}, 0x0) ioctl(r4, 0x8914, &(0x7f0000000780)="64756d6d7930000000000000000000000100"/40) ioctl(r4, 0x8914, &(0x7f00000007c0)='lapb0\x00'/40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x13, &(0x7f0000000900)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000001000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f00000009c0)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000a00)=""/222, 0x0, 0x8}, 0x78) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=r8, @ANYBLOB="060015000800000020"], 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 33.033041335s ago: executing program 2 (id=6713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x60}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 32.938502874s ago: executing program 4 (id=6714): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair(0x1e, 0xb9a470617ff58354, 0x1, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002640)={&(0x7f00000024c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x3, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x2, 0x6}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x10, 0x2}, {0x6, 0x3}, {0x4}, {0xf, 0x3}, {0x1, 0x2}]}]}, {0x0, [0x30]}}, &(0x7f0000002540)=""/216, 0x5f, 0xd8, 0x0, 0xfffffff9, 0x10000, @value=r1}, 0x28) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000003c80)={{r1, &(0x7f00000002c0)='$\x8a\x00', 0x0, &(0x7f00000003c0)={@_ha_fsid={[0x0, 0x2]}, {0x401, 0x7, 0x8, 0x8001}}, 0x80000000, &(0x7f0000001480), &(0x7f0000002680)=0x9}, 0x6, &(0x7f0000003bc0)=[{0x2, 0x8, &(0x7f00000026c0)='vlan0\x00', &(0x7f0000002700)="2703e64422a8c2e0605aee9436cc946f13a5cf8fbc192c8062578534725016c36422568ae3af048b4ddd300e8a9dc9dd08028e11c863689bdbfdb1acc055fc9541d96cc51adb177244cf1e5278d7802a5e05b5847810bf4f3b30dafd8fe35d61", 0x60, 0x28}, {0x2, 0x400, &(0x7f0000002780)='\x00', &(0x7f00000027c0)="0446a8c78a160a1fe23f517a9cc2ac594649d7e26b699601df1ad8169999a65f1d2e280d98e6e0ec73995f62788610560611d6e0889af729d31794fbfe5bf7139065a8499a8c9beee18f9dcb7b01ef35c9699f58a4cc4290097120350f3e661525343c6e2eea91ce1b01cd12093a6a53b8abe2f29dad8468c68d50b632dbb0a1019007f25349721b5cc9735a946043df674aecf374baf99fc39fb9d3651cbe2a417cea0bd4728c53a698b1b29a9cdc2b6ad5a8cbed7114da7f0514f27d34f07b4532db77", 0xc4, 0x2}, {0x2, 0x0, &(0x7f00000028c0), &(0x7f0000002900)="88f40ac9a97860f645984e3c48a200b0360b51116b306adfe8edb504d59682f6fa03c6f1cb344b75f2b4230651d454d9ee8fa597cad2379da04829fa0b177a59ec603dc25846d12791c02661b52cb8097a80f8610aebcb883abfd87bb371494f0bf67a8f2cebc86793e70020f1b0486cecfae88b47409e72c7671e1943a0f87e53b58edbf17a003a1ed3575e951d48261a6ef2b6b6acfc", 0x97, 0x20}, {0x2, 0x2, &(0x7f0000002a00)='{:@/\x00', &(0x7f0000002a40)="f13709fef159f9b87314cc3dc9ce6c5761179004d4fcbf6479672f12d7f86354fa91e9e41b42daf28bdb4feb513b40569f86e27214376fc3dbdae0ce845deb413f73ea7625ac455a1d5a51d57b38d7c2d0e43190ef9e", 0x56, 0x18}, {0x8ab84714539ac7bc, 0x9e1, &(0x7f0000002ac0)='\x00', &(0x7f0000002b00)="da8cace36780367cd91aab1ac36b9ad50b96cfaaadfda061860878c5f98a13db5f3bafc830e9ac2e23548f63760d10e5a45aab186093060977b4265a8167ab3acaffb34a053447094f4f535b3eb8081fa06504cb7f90a28dcdf5ea7c353c8567073c199a5058dee7603774799d591e8e01ec2c4bfa0f08095a", 0x79, 0x10}, {0x2, 0x5, &(0x7f0000002b80)='\'^.}-$\'{:/}o},:,,}\x00', &(0x7f0000002bc0)="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", 0xfff, 0x22}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003d00)={0xd, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r4, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000d00), &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5d, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10) sendmsg$inet(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000f80)="e74ab1d59d53e412c2603f3f6f1b6805ba9e98f8e59d7f6501971440d968d50511c940a9df855b4d89f803e2b1150d8b961af3cfbadcd92e3ee4eff0bafc5d97bf6db7e675309f3f4aa7a353f398a577688267de2b3e59bcbbaed4278d289c7a6edaca9326931f2f764a842ceeca298c09c89118b2079711de7e999e1d5f45d5486e205bbb5ad73224278dfa965b370e90d27661de4b9ea0b4edee796d41a286a53796c3bb55cae810a5", 0xaa}, {&(0x7f0000001040)="c8b1004c0339429063a4f5904c975edc2a6841a137bdebdd0dfb0ded046d7f0a471a6ce1412a60611a6002681f95a489132f2ce6b5537164387b209c0d67782e1551c9709000f9f437e1c42bbf04ae35a358d5d970002701221f50df5e6021ae4e26012bd61ca48fba2f42027de5fa9a1d2ad8545dd2b9c69ba0c2c761c2e569288890d309039d1c8db055d65a393a7e4bb7199bc244cfe1b75b679a22e8b2e6b8a86ff23c7ec42bd355d1d6e189bdab70e36d55157d5825d91d7eebced4dac4b45c5fac06067f9d5a0f18b4a284", 0xce}, {&(0x7f0000001140)="1baf1f1872b1d2dc53e1d4a8b3c247289a53c9f78d5ae8af5f112d705c7599da4727f5745cc9fcc4f58ed9f317415b9c454debb182a1588dff5ed6c0de3aae077a55c4e6e881222be966e36e7ad23348bb6d8892ee10744d6a96a5116517df92af0794f06ad5fbff21257a4f62ed48fc2ee026ada19acb969ceed020c00dc10b6624d724c1a9cada78bdc7b5cf20b5d2093592939945162cd051bd7ffacf6fc9080e47228b369a389d5d495db7c08bd0a36b5aca3ffd5076", 0xb8}, {&(0x7f0000001200)="a72fcdd5872174c4b36bfef68b618cadb724b449093364bb55fb5304fede046a437039db9c2755a35580edbb16146c65b38553f0e09d1a6e94e1baf98fff827f0b25253f389e26f6", 0x48}, {0x0}], 0x5, &(0x7f0000001380)=ANY=[@ANYBLOB="1400000000000000000000000700000000000000000000001100000000000000000000000100000004000000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="640101010a01010100000000140000000000000000000000020000000000000000001000140000000000000000000000010000000800000000000000"], 0x80}, 0x4004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001440)={r4, r0}, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="4a00020011003ee0b4fdddd685986a49e00588f1ba6f"], 0x17) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x360, 0x0, 0x11, 0x148, 0x0, 0x0, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x3}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x2e, 0x2, 0x2}, 0x0, 0xc0, 0x1e8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2000, 0x2}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x4, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008"], &(0x7f0000000100)='GPL\x00', 0x8, 0xff7, &(0x7f00000014c0)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 32.194352363s ago: executing program 3 (id=6715): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x7, &(0x7f0000000a00)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffb, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000006c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x10000000, 0xe, 0x0, &(0x7f0000000780)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 32.192432332s ago: executing program 4 (id=6716): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x25dfdbff, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x6e6bc0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c0015005b073500", @ANYRES64=r1], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 31.970326222s ago: executing program 2 (id=6717): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r7}, &(0x7f00000009c0)=0x20000, &(0x7f0000000a00)=r6}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0xced, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r8}, &(0x7f0000000a80)=0x2000000, &(0x7f0000000ac0)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000b00)={r7, &(0x7f0000000b40)}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x20, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0xfb, &(0x7f0000003b00)=""/251, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r15 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r15, 0x0, 0x482, &(0x7f0000000b40)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r15, 0x0, 0x483, &(0x7f0000000b80)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x2400c000}, 0x1) 31.791962334s ago: executing program 0 (id=6718): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r6, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fbdbdf2503000000080003000600000008000300080000000800020008000000080004000900000086f2ace4c9bccd5ac8236f6a480b01460c426f6c67297b35a5edf4901339df2a60dd882eb3db0b33cb530d3e3007a5d838fe1cda4886b06c6b653208febcad61c950c23fd9f20c30ba5eb3137942023ba6e9fdda3acadae9d90a07febeb837ac1f8d9c4856b36dd08b6cab0cf2f081709d63ca338fecc6"], 0x34}, 0x1, 0x0, 0x0, 0x4000c040}, 0x480c0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f00000003c0)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000400)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r8, &(0x7f00000005c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) recvfrom$inet6(r7, &(0x7f0000000d00)=""/264, 0x108, 0x40010042, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e40)=ANY=[@ANYBLOB="70020000", @ANYRES16=0x0, @ANYBLOB="000627bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="6c0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e000028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100010038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000d00000034000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000004000400"], 0x270}, 0x1, 0x0, 0x0, 0x1b6f41bc0259370}, 0x8000) recvfrom(r7, 0x0, 0x0, 0x3, 0x0, 0x0) 31.772693745s ago: executing program 4 (id=6719): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000440)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000000000000a00000000a40000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x190) 31.35052638s ago: executing program 3 (id=6720): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x8408, &(0x7f0000000140)=[{&(0x7f0000000340)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00", @ANYRES8=r1], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 31.280641859s ago: executing program 4 (id=6721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x1, 0xffe2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x10001, 0xd, 0x2, 0x6, 0x7, 0x3f5, 0x200, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0) close(r8) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8905, &(0x7f0000000740)={'syzkaller0\x00', @random="2b0100004ec6"}) 31.082525979s ago: executing program 1 (id=6722): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @loopback, 0x4e22, 0x3, 'lc\x00', 0x34, 0x80001, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e61, 0x3, 'lc\x00', 0x8, 0x20000, 0x77}, {@remote, 0x4e20, 0xac91d2bf000ec5eb, 0xcd}}, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7}, 0x50) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f0000000a00)={0x8, 0x9, 0x6, 0x1000, 0xa, 0x7e, 0x72, 0x7f1c}, 0x0, 0x0, &(0x7f0000000ac0), 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r8}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="58000000100003052abd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="000000000638210e300012800b000100697036677265000020000280080005008c00000014000600fc01000000000000000000000000000008000a00", @ANYRES32=r8, @ANYBLOB], 0x58}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000cbb60000000000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100b00000009500000000000000b7020000000080007b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004604f0ff7600000018010000696c6c2500000000002020207b1af8b000000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000bf9800000000000056080000000000408500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r10, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000001080)=0x4) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="00f9c22ea7", 0x5}], 0x1}, 0x49cf75490397e68f) ioctl$SIOCSIFHWADDR(r3, 0x8905, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000002280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r12, 0x0, 0x1000800800f3d, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002380)={0x6, 0x25, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9f8, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xb8}, @exit, @call={0x85, 0x0, 0x0, 0x62}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x6b1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d40)='syzkaller\x00', 0xd2, 0xec, &(0x7f0000000d80)=""/236, 0x40f00, 0x40, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000f00)={0x1, 0x7, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000022c0)=[0xffffffffffffffff, 0xffffffffffffffff, r12, r3, r5, r5, r9], &(0x7f0000002300)=[{0x0, 0x2, 0x8, 0x9}, {0x5, 0x3, 0xd, 0x6}, {0x0, 0x2, 0x1, 0x2}, {0x0, 0x4, 0x1, 0x5}, {0x1, 0x3, 0xb, 0xc}], 0x10, 0xad81}, 0x94) 30.815224977s ago: executing program 2 (id=6723): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0xfff, 0x5}, 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff5e, &(0x7f00000004c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) getsockname$packet(r4, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0x14) sendmsg$nl_route(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14) sendmsg$nl_route(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="580000001000030427bd7c5c025d7d29fa9fb6d9", @ANYRES32=0x0, @ANYBLOB="46040900000000003000128009000100766c616e000000002000028004000380060005008300000006000100010000000600050088a8000008000500", @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e0002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000060850000002e00000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000280)=r8, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3a}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x1, 0x3a0, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, &(0x7f0000000400), &(0x7f0000000440), 0x1800, r9}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000480)={r9, &(0x7f00000004c0), &(0x7f0000000500)=""/240}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000cc0)={0x2, 0xffeb, 0x30}, 0xc) sendto$inet6(r0, &(0x7f00000002c0)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) 30.592015113s ago: executing program 3 (id=6724): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x1d, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ldst={0x2, 0x0, 0x1, 0x8, 0x0, 0x50, 0x1}, @map_idx={0x18, 0xd, 0x5, 0x0, 0xb}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xf112}, @ldst={0x1, 0x3, 0x6, 0x7, 0x6, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @generic={0xb4, 0x2, 0x3, 0x6, 0xfaf0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x4, 0xc3, &(0x7f0000000c00)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x200}, 0x8, 0x10, &(0x7f0000000480), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x24) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000880}, 0x8084) r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000300)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001000)={0x0, &(0x7f0000000fc0)}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000d80)=0x14) sendmsg$nl_route(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=0x0, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'dummy0\x00', &(0x7f00000005c0)=@ethtool_rxnfc={0x29, 0x0, 0x6, {0xb, @usr_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x2, 0x9, 0x40}, {0x0, @multicast, 0x7, 0x6, [0x9, 0xf2d6]}, @udp_ip4_spec={@broadcast, @multicast1, 0x4e23, 0x4e24, 0x7a}, {0x0, @broadcast, 0x3, 0x7, [0x5, 0x5]}, 0x5, 0xfffffff9}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45844}, 0x26000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="033f000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x10, 0x4, &(0x7f0000000f40)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x1d}]}, &(0x7f0000000f80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x40, r4, 0x1, 0x1070bd28, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10000}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 8.988817176s ago: executing program 4 (id=6725): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$kcm(0x11, 0x3, 0x0) (async) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000500000001000000000000000900001d0000000007000000000000000800000000000000000000000000000000000000000000000000000000000000030000000400000005000000000000000400000000000000db00000000000000eac600000000000000000000004000"/256]) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x54, 0x24, 0x8, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x6, 0xb}, {0x2, 0xb}, {0x6, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xa}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfff, 0x9}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r6, &(0x7f0000000080)={0x1, @accept_conn_req={{0x409, 0x7}, {@any, 0x7f}}}, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'bond0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) 0s ago: executing program 32 (id=6718): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r6, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002bbd7000fbdbdf2503000000080003000600000008000300080000000800020008000000080004000900000086f2ace4c9bccd5ac8236f6a480b01460c426f6c67297b35a5edf4901339df2a60dd882eb3db0b33cb530d3e3007a5d838fe1cda4886b06c6b653208febcad61c950c23fd9f20c30ba5eb3137942023ba6e9fdda3acadae9d90a07febeb837ac1f8d9c4856b36dd08b6cab0cf2f081709d63ca338fecc6"], 0x34}, 0x1, 0x0, 0x0, 0x4000c040}, 0x480c0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f00000003c0)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000400)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r8, &(0x7f00000005c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) recvfrom$inet6(r7, &(0x7f0000000d00)=""/264, 0x108, 0x40010042, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e40)=ANY=[@ANYBLOB="70020000", @ANYRES16=0x0, @ANYBLOB="000627bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="6c0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e000028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100010038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000d00000034000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000004000400"], 0x270}, 0x1, 0x0, 0x0, 0x1b6f41bc0259370}, 0x8000) recvfrom(r7, 0x0, 0x0, 0x3, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 900.752437][T26730] CPU: 1 UID: 0 PID: 26730 Comm: syz.1.6305 Not tainted syzkaller #0 PREEMPT(full) [ 900.752462][T26730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 900.752476][T26730] Call Trace: [ 900.752485][T26730] [ 900.752496][T26730] dump_stack_lvl+0xe8/0x150 [ 900.752533][T26730] should_fail_ex+0x410/0x560 [ 900.752569][T26730] should_failslab+0xa8/0x100 [ 900.752602][T26730] __kmalloc_node_noprof+0x100/0x720 [ 900.752627][T26730] ? __get_vm_area_node+0x200/0x2f0 [ 900.752673][T26730] ? __get_vm_area_node+0x283/0x2f0 [ 900.752707][T26730] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 900.752730][T26730] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 900.752760][T26730] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 900.752815][T26730] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 900.752851][T26730] ? do_replace+0x297/0x470 [ 900.752876][T26730] __vmalloc_noprof+0xd2/0x120 [ 900.752898][T26730] ? do_replace+0x297/0x470 [ 900.752926][T26730] do_replace+0x297/0x470 [ 900.752954][T26730] ? __pfx_do_replace+0x10/0x10 [ 900.752991][T26730] ? bpf_lsm_capable+0x9/0x20 [ 900.753014][T26730] ? security_capable+0x7e/0x2c0 [ 900.753055][T26730] do_ebt_set_ctl+0x2fb/0x1020 [ 900.753083][T26730] ? __lock_acquire+0x747/0x2de0 [ 900.753108][T26730] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 900.753138][T26730] ? __lock_acquire+0x747/0x2de0 [ 900.753180][T26730] ? __mutex_trylock_common+0x15f/0x270 [ 900.753212][T26730] ? __pfx___mutex_trylock_common+0x10/0x10 [ 900.753246][T26730] ? rcu_is_watching+0x16/0xb0 [ 900.753275][T26730] ? trace_contention_end+0x3d/0x140 [ 900.753314][T26730] ? nf_setsockopt+0x221/0x290 [ 900.753345][T26730] ? __mutex_unlock_slowpath+0x731/0x900 [ 900.753384][T26730] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 900.753416][T26730] ? __pfx___mutex_lock+0x10/0x10 [ 900.753457][T26730] nf_setsockopt+0x26f/0x290 [ 900.753484][T26730] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 900.753519][T26730] smc_setsockopt+0x232/0xb40 [ 900.753636][T26730] ? __pfx_smc_setsockopt+0x10/0x10 [ 900.753675][T26730] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 900.753706][T26730] ? __pfx_smc_setsockopt+0x10/0x10 [ 900.753735][T26730] do_sock_setsockopt+0x17c/0x1b0 [ 900.753763][T26730] __x64_sys_setsockopt+0x13d/0x1b0 [ 900.753791][T26730] do_syscall_64+0x166/0x520 [ 900.753819][T26730] ? trace_irq_disable+0x3b/0x140 [ 900.753843][T26730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.753867][T26730] ? clear_bhb_loop+0x70/0xc0 [ 900.753895][T26730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.753916][T26730] RIP: 0033:0x7f924f99e559 [ 900.753937][T26730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.753957][T26730] RSP: 002b:00007f92507aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 900.753982][T26730] RAX: ffffffffffffffda RBX: 00007f924fc25fa0 RCX: 00007f924f99e559 [ 900.753999][T26730] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000005 [ 900.754013][T26730] RBP: 00007f92507aa090 R08: 0000000000000108 R09: 0000000000000000 [ 900.754028][T26730] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 900.754043][T26730] R13: 00007f924fc26038 R14: 00007f924fc25fa0 R15: 00007ffeaa22b2a8 [ 900.754079][T26730] [ 900.754117][T26730] syz.1.6305: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 900.754206][T26730] CPU: 1 UID: 0 PID: 26730 Comm: syz.1.6305 Not tainted syzkaller #0 PREEMPT(full) [ 900.754230][T26730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 900.754242][T26730] Call Trace: [ 900.754251][T26730] [ 900.754261][T26730] dump_stack_lvl+0xe8/0x150 [ 900.754294][T26730] warn_alloc+0x24d/0x270 [ 900.754325][T26730] ? __pfx_warn_alloc+0x10/0x10 [ 900.754356][T26730] ? __kmalloc_node_noprof+0x4d7/0x720 [ 900.754380][T26730] ? __get_vm_area_node+0x200/0x2f0 [ 900.754414][T26730] ? __get_vm_area_node+0x283/0x2f0 [ 900.754445][T26730] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 900.754467][T26730] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 900.754498][T26730] __vmalloc_node_range_noprof+0x969/0x1540 [ 900.754552][T26730] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 900.754590][T26730] ? do_replace+0x297/0x470 [ 900.754612][T26730] __vmalloc_noprof+0xd2/0x120 [ 900.754634][T26730] ? do_replace+0x297/0x470 [ 900.754669][T26730] do_replace+0x297/0x470 [ 900.754697][T26730] ? __pfx_do_replace+0x10/0x10 [ 900.754735][T26730] ? bpf_lsm_capable+0x9/0x20 [ 900.754757][T26730] ? security_capable+0x7e/0x2c0 [ 900.754796][T26730] do_ebt_set_ctl+0x2fb/0x1020 [ 900.754824][T26730] ? __lock_acquire+0x747/0x2de0 [ 900.754849][T26730] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 900.754879][T26730] ? __lock_acquire+0x747/0x2de0 [ 900.754921][T26730] ? __mutex_trylock_common+0x15f/0x270 [ 900.754953][T26730] ? __pfx___mutex_trylock_common+0x10/0x10 [ 900.754987][T26730] ? rcu_is_watching+0x16/0xb0 [ 900.755015][T26730] ? trace_contention_end+0x3d/0x140 [ 900.755057][T26730] ? nf_setsockopt+0x221/0x290 [ 900.755085][T26730] ? __mutex_unlock_slowpath+0x731/0x900 [ 900.755122][T26730] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 900.755154][T26730] ? __pfx___mutex_lock+0x10/0x10 [ 900.755196][T26730] nf_setsockopt+0x26f/0x290 [ 900.755223][T26730] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 900.755255][T26730] smc_setsockopt+0x232/0xb40 [ 900.755287][T26730] ? __pfx_smc_setsockopt+0x10/0x10 [ 900.755318][T26730] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 900.755348][T26730] ? __pfx_smc_setsockopt+0x10/0x10 [ 900.755377][T26730] do_sock_setsockopt+0x17c/0x1b0 [ 900.755408][T26730] __x64_sys_setsockopt+0x13d/0x1b0 [ 900.755436][T26730] do_syscall_64+0x166/0x520 [ 900.755465][T26730] ? trace_irq_disable+0x3b/0x140 [ 900.755488][T26730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.755512][T26730] ? clear_bhb_loop+0x70/0xc0 [ 900.755540][T26730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.755562][T26730] RIP: 0033:0x7f924f99e559 [ 900.755582][T26730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.755602][T26730] RSP: 002b:00007f92507aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 900.755624][T26730] RAX: ffffffffffffffda RBX: 00007f924fc25fa0 RCX: 00007f924f99e559 [ 900.755641][T26730] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000005 [ 900.755661][T26730] RBP: 00007f92507aa090 R08: 0000000000000108 R09: 0000000000000000 [ 900.755677][T26730] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 900.755691][T26730] R13: 00007f924fc26038 R14: 00007f924fc25fa0 R15: 00007ffeaa22b2a8 [ 900.755728][T26730] [ 900.755864][T26730] Mem-Info: [ 900.755876][T26730] active_anon:10220 inactive_anon:0 isolated_anon:0 [ 900.755876][T26730] active_file:480 inactive_file:43782 isolated_file:0 [ 900.755876][T26730] unevictable:0 dirty:278 writeback:0 [ 900.755876][T26730] slab_reclaimable:12425 slab_unreclaimable:118261 [ 900.755876][T26730] mapped:33882 shmem:4257 pagetables:1266 [ 900.755876][T26730] sec_pagetables:0 bounce:0 [ 900.755876][T26730] kernel_misc_reclaimable:0 [ 900.755876][T26730] free:1296141 free_pcp:6734 free_cma:0 [ 900.755931][T26730] Node 0 active_anon:40880kB inactive_anon:0kB active_file:1920kB inactive_file:174928kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135528kB dirty:1112kB writeback:0kB shmem:17028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14788kB pagetables:4904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 900.755991][T26730] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 900.756044][T26730] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 900.756105][T26730] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 900.756147][T26730] Node 0 DMA32 free:1236988kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:40880kB inactive_anon:0kB active_file:1920kB inactive_file:174928kB unevictable:0kB writepending:1112kB zspages:0kB present:3129332kB managed:2527704kB mlocked:0kB bounce:0kB free_pcp:26936kB local_pcp:10676kB free_cma:0kB [ 900.756210][T26730] lowmem_reserve[]: 0 0 0 0 0 [ 900.756249][T26730] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 900.756363][T26730] lowmem_reserve[]: 0 0 0 0 0 [ 900.756406][T26730] Node 1 Normal free:3932216kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 900.756469][T26730] lowmem_reserve[]: 0 0 0 0 0 [ 900.756509][T26730] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 900.756643][T26730] Node 0 DMA32: 2*4kB (ME) 10*8kB (E) 178*16kB (UM) 132*32kB (UME) 35*64kB (UME) 108*128kB (UME) 121*256kB (UM) 62*512kB (UM) 38*1024kB (UME) 25*2048kB (UM) 259*4096kB (UM) = 1236920kB [ 900.756835][T26730] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 900.756951][T26730] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 8*16kB (UM) 7*32kB (UM) 3*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 958*4096kB (UM) = 3932216kB [ 900.757130][T26730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 900.757150][T26730] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 900.757170][T26730] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 900.757189][T26730] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 900.757208][T26730] 48515 total pagecache pages [ 900.757233][T26730] 0 pages in swap cache [ 900.757242][T26730] Free swap = 124996kB [ 900.757251][T26730] Total swap = 124996kB [ 900.757262][T26730] 2097051 pages RAM [ 900.757271][T26730] 0 pages HighMem/MovableOnly [ 900.757280][T26730] 433509 pages reserved [ 900.757289][T26730] 0 pages cma reserved [ 900.973957][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 901.084944][T26738] FAULT_INJECTION: forcing a failure. [ 901.084944][T26738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 901.085954][T26738] CPU: 0 UID: 0 PID: 26738 Comm: syz.4.6307 Not tainted syzkaller #0 PREEMPT(full) [ 901.086017][T26738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 901.086058][T26738] Call Trace: [ 901.086080][T26738] [ 901.086119][T26738] dump_stack_lvl+0xe8/0x150 [ 901.086224][T26738] should_fail_ex+0x410/0x560 [ 901.086319][T26738] _copy_to_user+0x31/0xb0 [ 901.086412][T26738] simple_read_from_buffer+0xe1/0x170 [ 901.086516][T26738] proc_fail_nth_read+0x1bb/0x230 [ 901.086580][T26738] ? common_file_perm+0x20e/0x2b0 [ 901.086674][T26738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 901.086764][T26738] ? rw_verify_area+0x24a/0x4c0 [ 901.086828][T26738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 901.086896][T26738] vfs_read+0x213/0xa80 [ 901.086969][T26738] ? __pfx___mutex_lock+0x10/0x10 [ 901.087051][T26738] ? __pfx_vfs_read+0x10/0x10 [ 901.087115][T26738] ? __fget_files+0x2a/0x420 [ 901.087198][T26738] ? __fget_files+0x3a2/0x420 [ 901.087290][T26738] ? __fget_files+0x2a/0x420 [ 901.087398][T26738] ksys_read+0x150/0x270 [ 901.087464][T26738] ? __pfx_ksys_read+0x10/0x10 [ 901.087558][T26738] do_syscall_64+0x166/0x520 [ 901.087625][T26738] ? trace_irq_disable+0x3b/0x140 [ 901.087688][T26738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.087750][T26738] ? clear_bhb_loop+0x70/0xc0 [ 901.087821][T26738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.087874][T26738] RIP: 0033:0x7fb1ba75ed8e [ 901.087927][T26738] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 901.087986][T26738] RSP: 002b:00007fb1bb6f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 901.088065][T26738] RAX: ffffffffffffffda RBX: 00007fb1bb6f76c0 RCX: 00007fb1ba75ed8e [ 901.088115][T26738] RDX: 000000000000000f RSI: 00007fb1bb6f70a0 RDI: 0000000000000005 [ 901.088150][T26738] RBP: 00007fb1bb6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 901.088190][T26738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.088230][T26738] R13: 00007fb1baa26038 R14: 00007fb1baa25fa0 R15: 00007ffeb584e578 [ 901.088317][T26738] [ 901.210177][ T5637] Bluetooth: hci1: command tx timeout [ 902.643883][T26761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6311'. [ 902.851490][T26770] xt_LOG: level 115 >= 8 [ 903.036995][T26778] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 903.070771][T26777] xt_l2tp: invalid flags combination: 0 [ 903.148502][T26780] bridge0: port 1(vlan2) entered blocking state [ 903.148621][T26780] bridge0: port 1(vlan2) entered disabled state [ 903.148783][T26780] vlan2: entered allmulticast mode [ 903.148801][T26780] geneve0: entered allmulticast mode [ 903.174613][T26780] vlan2: entered promiscuous mode [ 903.174636][T26780] geneve0: entered promiscuous mode [ 903.277766][T26783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6316'. [ 903.290254][ T5637] Bluetooth: hci1: command tx timeout [ 903.389953][T25001] IPVS: starting estimator thread 0... [ 903.479936][T26792] IPVS: using max 29 ests per chain, 69600 per kthread [ 903.536982][ T12] team0 (unregistering): Port device vlan0 removed [ 903.828096][T26563] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.828228][T26563] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.828350][T26563] bridge_slave_0: entered allmulticast mode [ 903.851020][T26563] bridge_slave_0: entered promiscuous mode [ 903.858792][T26783] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6316'. [ 903.858851][T26783] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6316'. [ 903.858872][T26783] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6316'. [ 903.858893][T26783] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6316'. [ 903.858913][T26783] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6316'. [ 903.858932][T26783] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6316'. [ 903.858959][T26783] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6316'. [ 903.858978][T26783] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6316'. [ 903.943282][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 904.020826][T26805] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.021547][T26805] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.123090][T26805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 904.127763][T26805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 904.164000][T26811] netlink: zone id is out of range [ 904.164050][T26811] netlink: zone id is out of range [ 904.164184][T26811] netlink: zone id is out of range [ 904.164228][T26811] netlink: zone id is out of range [ 904.164238][T26811] netlink: zone id is out of range [ 904.164247][T26811] netlink: zone id is out of range [ 904.164257][T26811] netlink: zone id is out of range [ 904.164271][T26811] netlink: zone id is out of range [ 904.164281][T26811] netlink: zone id is out of range [ 904.406151][T26563] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.406229][T26563] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.406327][T26563] bridge_slave_1: entered allmulticast mode [ 904.408912][T26563] bridge_slave_1: entered promiscuous mode [ 904.582795][T26563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.608377][T26563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.710225][ T61] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.834113][ T50] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.834172][ T50] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.834214][ T50] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.834254][ T50] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.834296][ T50] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.834337][ T50] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.834377][ T50] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.839699][T26563] team0: Port device team_slave_0 added [ 904.879641][T26563] team0: Port device team_slave_1 added [ 905.092625][T26563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.092646][T26563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.092678][T26563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.111303][T26563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.113778][T26563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.113865][T26563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.445554][T26563] hsr_slave_0: entered promiscuous mode [ 905.452843][T26563] hsr_slave_1: entered promiscuous mode [ 905.453625][T26563] debugfs: 'hsr0' already exists in 'hsr' [ 905.453647][T26563] Cannot create hsr debugfs directory [ 905.480998][T26843] syzkaller1: entered promiscuous mode [ 905.481019][T26843] syzkaller1: entered allmulticast mode [ 905.655095][ T12] IPVS: stop unused estimator thread 0... [ 907.305345][T26918] sctp: [Deprecated]: syz.0.6345 (pid 26918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 907.305345][T26918] Use struct sctp_sack_info instead [ 907.448269][T26915] syzkaller1: entered promiscuous mode [ 907.448295][T26915] syzkaller1: entered allmulticast mode [ 907.455866][ T5637] Bluetooth: hci2: command tx timeout [ 907.609322][T26563] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 907.630501][T26563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 907.631385][T26563] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 907.648222][T26563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 907.685228][T26563] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 907.700199][T26563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 907.701201][T26563] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 907.729708][T26563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 908.075805][T26953] syzkaller0: entered promiscuous mode [ 908.075832][T26953] syzkaller0: entered allmulticast mode [ 908.252918][T26563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.300728][T26563] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.326046][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.326177][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.377494][T17060] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.377613][T17060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.760941][T26979] netlink: 'syz.3.6355': attribute type 1 has an invalid length. [ 908.787403][T26979] __nla_validate_parse: 94 callbacks suppressed [ 908.787445][T26979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6355'. [ 908.847567][T26979] bridge1: entered promiscuous mode [ 909.015852][T26994] net_ratelimit: 122 callbacks suppressed [ 909.015875][T26994] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 909.863403][T27038] netlink: 'syz.4.6367': attribute type 4 has an invalid length. [ 909.974650][T26563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.074897][T26563] veth0_vlan: entered promiscuous mode [ 910.087842][T26563] veth1_vlan: entered promiscuous mode [ 910.151144][T27045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6368'. [ 910.171357][T27045] ip6gre1: entered promiscuous mode [ 910.171382][T27045] ip6gre1: entered allmulticast mode [ 910.200735][T27049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6368'. [ 910.267907][T26563] veth0_macvtap: entered promiscuous mode [ 910.290463][T26563] veth1_macvtap: entered promiscuous mode [ 910.293249][T27052] SET target dimension over the limit! [ 910.369273][T26563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 910.408176][T26563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.434647][T27057] SET target dimension over the limit! [ 910.460147][T25001] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.460214][T25001] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.460252][T25001] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.461139][T25001] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.607194][T27065] xt_l2tp: invalid flags combination: 0 [ 910.685574][ T61] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 910.690970][ T61] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 910.710225][T19724] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 910.986020][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.986045][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.033524][T27076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6374'. [ 911.163779][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.163803][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.200341][T19724] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 911.208573][T27092] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6379'. [ 911.611323][T25971] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 911.694626][T27115] xt_l2tp: invalid flags combination: 0 [ 911.757008][T27121] FAULT_INJECTION: forcing a failure. [ 911.757008][T27121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 911.757047][T27121] CPU: 0 UID: 0 PID: 27121 Comm: syz.2.6384 Not tainted syzkaller #0 PREEMPT(full) [ 911.757073][T27121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 911.757088][T27121] Call Trace: [ 911.757097][T27121] [ 911.757108][T27121] dump_stack_lvl+0xe8/0x150 [ 911.757146][T27121] should_fail_ex+0x410/0x560 [ 911.757184][T27121] _copy_to_user+0x31/0xb0 [ 911.757221][T27121] simple_read_from_buffer+0xe1/0x170 [ 911.757264][T27121] proc_fail_nth_read+0x1bb/0x230 [ 911.757288][T27121] ? common_file_perm+0x20e/0x2b0 [ 911.757328][T27121] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 911.757358][T27121] ? rw_verify_area+0x24a/0x4c0 [ 911.757383][T27121] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 911.757408][T27121] vfs_read+0x213/0xa80 [ 911.757437][T27121] ? __pfx___mutex_lock+0x10/0x10 [ 911.757471][T27121] ? __pfx_vfs_read+0x10/0x10 [ 911.757495][T27121] ? __fget_files+0x2a/0x420 [ 911.757535][T27121] ? __fget_files+0x3a2/0x420 [ 911.757567][T27121] ? __fget_files+0x2a/0x420 [ 911.757611][T27121] ksys_read+0x150/0x270 [ 911.757636][T27121] ? __pfx_ksys_read+0x10/0x10 [ 911.757671][T27121] do_syscall_64+0x166/0x520 [ 911.757702][T27121] ? trace_irq_disable+0x3b/0x140 [ 911.757727][T27121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.757751][T27121] ? clear_bhb_loop+0x70/0xc0 [ 911.757779][T27121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.757802][T27121] RIP: 0033:0x7ff32675ed8e [ 911.757823][T27121] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 911.757843][T27121] RSP: 002b:00007ff3276e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 911.757868][T27121] RAX: ffffffffffffffda RBX: 00007ff3276e66c0 RCX: 00007ff32675ed8e [ 911.757886][T27121] RDX: 000000000000000f RSI: 00007ff3276e60a0 RDI: 0000000000000004 [ 911.757907][T27121] RBP: 00007ff3276e6090 R08: 0000000000000000 R09: 0000000000000000 [ 911.757922][T27121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.757936][T27121] R13: 00007ff326a26038 R14: 00007ff326a25fa0 R15: 00007fff268e9608 [ 911.757971][T27121] [ 912.606447][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 912.608070][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 912.619466][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 912.639152][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 912.656712][T27122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 912.659011][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 912.668305][T27124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 912.876623][T27165] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6390'. [ 913.365979][T27174] syzkaller1: entered promiscuous mode [ 913.366006][T27174] syzkaller1: entered allmulticast mode [ 913.583503][T27178] x_tables: duplicate underflow at hook 2 [ 913.664841][T27198] FAULT_INJECTION: forcing a failure. [ 913.664841][T27198] name failslab, interval 1, probability 0, space 0, times 0 [ 913.664879][T27198] CPU: 0 UID: 0 PID: 27198 Comm: syz.0.6394 Not tainted syzkaller #0 PREEMPT(full) [ 913.664905][T27198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 913.664919][T27198] Call Trace: [ 913.664929][T27198] [ 913.664940][T27198] dump_stack_lvl+0xe8/0x150 [ 913.664978][T27198] should_fail_ex+0x410/0x560 [ 913.665015][T27198] should_failslab+0xa8/0x100 [ 913.665049][T27198] __kvmalloc_node_noprof+0x176/0x820 [ 913.665081][T27198] ? __kvmalloc_node_noprof+0x345/0x820 [ 913.665109][T27198] ? bpf_compute_scc+0x106/0xb10 [ 913.665133][T27198] ? bpf_compute_scc+0x106/0xb10 [ 913.665164][T27198] bpf_compute_scc+0x106/0xb10 [ 913.665209][T27198] bpf_check+0x271e/0x2ef0 [ 913.665255][T27198] ? __pfx_bpf_check+0x10/0x10 [ 913.665290][T27198] ? bpf_obj_name_cpy+0x194/0x1e0 [ 913.665336][T27198] bpf_prog_load+0x14d6/0x1c20 [ 913.665377][T27198] ? __pfx_bpf_prog_load+0x10/0x10 [ 913.665429][T27198] __sys_bpf+0xd0d/0xd90 [ 913.665465][T27198] ? __pfx___sys_bpf+0x10/0x10 [ 913.665503][T27198] ? __fget_files+0x2a/0x420 [ 913.665557][T27198] ? ksys_write+0x242/0x270 [ 913.665581][T27198] ? __pfx_ksys_write+0x10/0x10 [ 913.665611][T27198] __x64_sys_bpf+0xba/0xd0 [ 913.665640][T27198] do_syscall_64+0x166/0x520 [ 913.665670][T27198] ? trace_irq_disable+0x3b/0x140 [ 913.665692][T27198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.665715][T27198] ? clear_bhb_loop+0x70/0xc0 [ 913.665743][T27198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.665765][T27198] RIP: 0033:0x7f4f69d9e559 [ 913.665792][T27198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.665812][T27198] RSP: 002b:00007f4f6ac22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 913.665837][T27198] RAX: ffffffffffffffda RBX: 00007f4f6a025fa0 RCX: 00007f4f69d9e559 [ 913.665855][T27198] RDX: 0000000000000078 RSI: 00002000000001c0 RDI: 0000000000000005 [ 913.665870][T27198] RBP: 00007f4f6ac22090 R08: 0000000000000000 R09: 0000000000000000 [ 913.665884][T27198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 913.665897][T27198] R13: 00007f4f6a026038 R14: 00007f4f6a025fa0 R15: 00007ffda67248f8 [ 913.665933][T27198] [ 914.134014][T27209] xt_l2tp: invalid flags combination: 0 [ 914.215864][T27200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6393'. [ 914.237561][T27212] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 914.263421][T27210] syzkaller0: entered promiscuous mode [ 914.263445][T27210] syzkaller0: entered allmulticast mode [ 914.302022][T27210] tipc: Started in network mode [ 914.302058][T27210] tipc: Node identity 0ae98133d064, cluster identity 4711 [ 914.302319][T27210] tipc: Enabled bearer , priority 0 [ 914.337840][T27216] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 914.338046][T27216] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 914.338186][T27216] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 914.364853][T27216] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 914.365267][T27208] tipc: Resetting bearer [ 914.463559][T27208] tipc: Disabling bearer [ 914.490102][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 914.604353][T27155] rxe_eth0 speed is unknown, defaulting to 1000 [ 914.735440][ T5637] Bluetooth: hci3: command tx timeout [ 914.760224][T27227] €Â0: renamed from batadv_slave_1 [ 915.054369][ T5637] Bluetooth: hci2: command tx timeout [ 915.325363][T27155] lo speed is unknown, defaulting to 1000 [ 915.364861][T27244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6405'. [ 915.484379][T27246] xt_l2tp: invalid flags combination: 0 [ 916.102253][T27277] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6415'. [ 916.155337][T27279] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6415'. [ 916.522091][T27155] wg0 speed is unknown, defaulting to 1000 [ 916.671062][T27284] netlink: 'syz.0.6417': attribute type 1 has an invalid length. [ 916.678758][T27287] FAULT_INJECTION: forcing a failure. [ 916.678758][T27287] name failslab, interval 1, probability 0, space 0, times 0 [ 916.678792][T27287] CPU: 0 UID: 0 PID: 27287 Comm: syz.3.6418 Not tainted syzkaller #0 PREEMPT(full) [ 916.678817][T27287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 916.678832][T27287] Call Trace: [ 916.678841][T27287] [ 916.678851][T27287] dump_stack_lvl+0xe8/0x150 [ 916.678890][T27287] should_fail_ex+0x410/0x560 [ 916.678925][T27287] should_failslab+0xa8/0x100 [ 916.678958][T27287] __kmalloc_cache_noprof+0xa3/0x600 [ 916.678982][T27287] ? copy_array+0xab/0x100 [ 916.679004][T27287] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 916.679024][T27287] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 916.679054][T27287] bpf_copy_verifier_state+0xb1f/0x1170 [ 916.679088][T27287] push_stack+0x1b9/0x380 [ 916.679134][T27287] do_check_insn+0x8194/0x17d00 [ 916.679183][T27287] ? lock_acquire+0x115/0x350 [ 916.679216][T27287] ? __pfx_do_check_insn+0x10/0x10 [ 916.679258][T27287] ? _copy_to_user+0x8a/0xb0 [ 916.679293][T27287] ? bpf_verifier_vlog+0x55a/0x900 [ 916.679319][T27287] ? __pfx_verbose+0x10/0x10 [ 916.679348][T27287] ? verbose+0x11d/0x1a0 [ 916.679375][T27287] ? __pfx_verbose+0x10/0x10 [ 916.679399][T27287] ? bpf_push_jmp_history+0x27d/0x6d0 [ 916.679436][T27287] do_check_common+0x364c/0x5610 [ 916.679523][T27287] ? __pfx_do_check_common+0x10/0x10 [ 916.679556][T27287] ? __pfx_verbose+0x10/0x10 [ 916.679576][T27287] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 916.679614][T27287] do_check_main+0xa2/0x1f0 [ 916.679645][T27287] bpf_check+0x2775/0x2ef0 [ 916.679692][T27287] ? __pfx_bpf_check+0x10/0x10 [ 916.679722][T27287] ? bpf_obj_name_cpy+0x194/0x1e0 [ 916.679758][T27287] bpf_prog_load+0x14d6/0x1c20 [ 916.679799][T27287] ? __pfx_bpf_prog_load+0x10/0x10 [ 916.679853][T27287] __sys_bpf+0xd0d/0xd90 [ 916.679889][T27287] ? __pfx___sys_bpf+0x10/0x10 [ 916.679929][T27287] ? __fget_files+0x2a/0x420 [ 916.679982][T27287] ? ksys_write+0x242/0x270 [ 916.680008][T27287] ? __pfx_ksys_write+0x10/0x10 [ 916.680037][T27287] __x64_sys_bpf+0xba/0xd0 [ 916.680064][T27287] do_syscall_64+0x166/0x520 [ 916.680095][T27287] ? trace_irq_disable+0x3b/0x140 [ 916.680126][T27287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.680151][T27287] ? clear_bhb_loop+0x70/0xc0 [ 916.680179][T27287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.680202][T27287] RIP: 0033:0x7fa7bdf9e559 [ 916.680224][T27287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.680244][T27287] RSP: 002b:00007fa7beedb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 916.680268][T27287] RAX: ffffffffffffffda RBX: 00007fa7be225fa0 RCX: 00007fa7bdf9e559 [ 916.680286][T27287] RDX: 0000000000000070 RSI: 0000200000000e40 RDI: 0000000000000005 [ 916.680301][T27287] RBP: 00007fa7beedb090 R08: 0000000000000000 R09: 0000000000000000 [ 916.680316][T27287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 916.680330][T27287] R13: 00007fa7be226038 R14: 00007fa7be225fa0 R15: 00007ffdcab46028 [ 916.680366][T27287] [ 916.729981][T27289] FAULT_INJECTION: forcing a failure. [ 916.729981][T27289] name failslab, interval 1, probability 0, space 0, times 0 [ 916.730018][T27289] CPU: 0 UID: 0 PID: 27289 Comm: syz.2.6419 Not tainted syzkaller #0 PREEMPT(full) [ 916.730042][T27289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 916.730057][T27289] Call Trace: [ 916.730067][T27289] [ 916.730078][T27289] dump_stack_lvl+0xe8/0x150 [ 916.730126][T27289] should_fail_ex+0x410/0x560 [ 916.730163][T27289] should_failslab+0xa8/0x100 [ 916.730197][T27289] __kvmalloc_node_noprof+0x176/0x820 [ 916.730225][T27289] ? do_ipt_set_ctl+0x962/0xe20 [ 916.730253][T27289] ? do_sock_setsockopt+0x17c/0x1b0 [ 916.730274][T27289] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 916.730295][T27289] ? do_syscall_64+0x166/0x520 [ 916.730325][T27289] ? translate_table+0x193/0x1f80 [ 916.730349][T27289] ? translate_table+0x193/0x1f80 [ 916.730381][T27289] translate_table+0x193/0x1f80 [ 916.730424][T27289] ? __pfx_translate_table+0x10/0x10 [ 916.730450][T27289] ? lock_acquire+0x115/0x350 [ 916.730496][T27289] ? _copy_from_user+0x94/0xb0 [ 916.730535][T27289] do_ipt_set_ctl+0xa53/0xe20 [ 916.730568][T27289] ? rcu_is_watching+0x16/0xb0 [ 916.730598][T27289] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 916.730640][T27289] ? __mutex_unlock_slowpath+0x731/0x900 [ 916.730678][T27289] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 916.730730][T27289] nf_setsockopt+0x26f/0x290 [ 916.730757][T27289] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 916.730792][T27289] do_sock_setsockopt+0x17c/0x1b0 [ 916.730819][T27289] __x64_sys_setsockopt+0x13d/0x1b0 [ 916.730847][T27289] do_syscall_64+0x166/0x520 [ 916.730877][T27289] ? trace_irq_disable+0x3b/0x140 [ 916.730901][T27289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.730924][T27289] ? clear_bhb_loop+0x70/0xc0 [ 916.730952][T27289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.730975][T27289] RIP: 0033:0x7ff32679e559 [ 916.730997][T27289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.731017][T27289] RSP: 002b:00007ff3276e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 916.731042][T27289] RAX: ffffffffffffffda RBX: 00007ff326a25fa0 RCX: 00007ff32679e559 [ 916.731060][T27289] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 916.731074][T27289] RBP: 00007ff3276e6090 R08: 00000000000002e0 R09: 0000000000000000 [ 916.731089][T27289] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 916.731111][T27289] R13: 00007ff326a26038 R14: 00007ff326a25fa0 R15: 00007fff268e9608 [ 916.731146][T27289] [ 916.812130][ T5637] Bluetooth: hci3: command tx timeout [ 917.164228][T27284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 917.508330][T27300] xt_l2tp: invalid flags combination: 0 [ 917.600307][ T13] IPVS: starting estimator thread 0... [ 917.690843][T27310] IPVS: using max 30 ests per chain, 72000 per kthread [ 917.920076][T27155] dummy0 speed is unknown, defaulting to 1000 [ 918.144397][T27317] syzkaller1: entered promiscuous mode [ 918.144421][T27317] syzkaller1: entered allmulticast mode [ 918.145457][T27319] syzkaller0: entered promiscuous mode [ 918.145478][T27319] syzkaller0: entered allmulticast mode [ 918.288311][T27340] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6428'. [ 918.288343][T27340] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6428'. [ 918.288361][T27340] netlink: 31 bytes leftover after parsing attributes in process `syz.2.6428'. [ 918.889971][ T5637] Bluetooth: hci3: command tx timeout [ 918.898703][T27361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6434'. [ 919.033856][T27363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6434'. [ 919.692839][ T5637] Bluetooth: hci2: command tx timeout [ 920.977034][ T5637] Bluetooth: hci3: command tx timeout [ 921.861681][T27375] xt_l2tp: invalid flags combination: 0 [ 922.060964][ T50] bond6 (unregistering): (slave xfrm1): Releasing backup interface [ 922.060992][ T50] xfrm1 (unregistering): left promiscuous mode [ 922.090067][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 922.461471][ T50] bond0 (unregistering): Released all slaves [ 922.477875][ T50] bond1 (unregistering): Released all slaves [ 922.498995][ T50] bond2 (unregistering): Released all slaves [ 922.526833][ T50] bond3 (unregistering): Released all slaves [ 922.546907][ T50] bond4 (unregistering): Released all slaves [ 922.573847][ T50] bond5 (unregistering): Released all slaves [ 922.590786][ T50] bond6 (unregistering): Released all slaves [ 922.624958][T27385] syzkaller1: entered promiscuous mode [ 922.624983][T27385] syzkaller1: entered allmulticast mode [ 922.751541][ T50] tipc: Disabling bearer [ 922.752751][ T50] tipc: Left network mode [ 922.829641][T27399] ebt_among: wrong size: 2184 against expected 2220, rounded to 2224 [ 923.027842][T27405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6444'. [ 923.288184][T27409] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 923.323181][T27409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6446'. [ 923.435669][T27419] xt_l2tp: invalid flags combination: 0 [ 923.545697][T27421] bridge_slave_0: entered promiscuous mode [ 923.557206][T27421] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 923.702396][T27436] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.6452'. [ 923.837714][T27436] 0ªX¹¦Dö»: renamed from gretap0 [ 923.847764][T27436] 0ªX¹¦Dö»: entered allmulticast mode [ 923.866847][T27435] syzkaller1: entered promiscuous mode [ 923.866866][T27435] syzkaller1: entered allmulticast mode [ 924.297210][T27155] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.297394][T27155] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.297582][T27155] bridge_slave_0: entered allmulticast mode [ 924.330890][T27155] bridge_slave_0: entered promiscuous mode [ 924.347698][T27155] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.347893][T27155] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.348047][T27155] bridge_slave_1: entered allmulticast mode [ 924.392325][T27155] bridge_slave_1: entered promiscuous mode [ 924.647102][T27456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6459'. [ 924.658498][T27155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.816416][T27472] xt_l2tp: invalid flags combination: 0 [ 925.025527][ T5637] block nbd3: Receive control failed (result -32) [ 925.434329][T15582] smbdirect: ib_dev[syz2] removed [ 925.495452][T27155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.524118][T27460] syzkaller1: entered promiscuous mode [ 925.524145][T27460] syzkaller1: entered allmulticast mode [ 925.559164][T27484] syzkaller1: entered promiscuous mode [ 925.559189][T27484] syzkaller1: entered allmulticast mode [ 925.615251][T27494] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6467'. [ 925.615280][T27494] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6467'. [ 925.615297][T27494] netlink: 31 bytes leftover after parsing attributes in process `syz.0.6467'. [ 925.725772][T27155] team0: Port device team_slave_0 added [ 925.742086][T27155] team0: Port device team_slave_1 added [ 925.880171][T27500] syzkaller0: entered promiscuous mode [ 925.880196][T27500] syzkaller0: entered allmulticast mode [ 925.886680][T27500] tipc: Enabled bearer , priority 0 [ 925.889685][T27499] tipc: Resetting bearer [ 926.016169][T27499] tipc: Disabling bearer [ 926.029151][T27506] xt_l2tp: invalid flags combination: 0 [ 926.052454][T27155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.052474][T27155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.052501][T27155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.055109][T27155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.055128][T27155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.055157][T27155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.222915][T27511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6474'. [ 926.322378][ T50] IPVS: stop unused estimator thread 0... [ 926.394231][T27155] hsr_slave_0: entered promiscuous mode [ 926.401412][T27155] hsr_slave_1: entered promiscuous mode [ 926.404002][T27155] debugfs: 'hsr0' already exists in 'hsr' [ 926.404026][T27155] Cannot create hsr debugfs directory [ 926.532120][T27521] netlink: 'syz.0.6478': attribute type 1 has an invalid length. [ 926.601860][T27521] bond2: entered promiscuous mode [ 926.602410][T27521] 8021q: adding VLAN 0 to HW filter on device bond2 [ 926.630222][T27532] sctp: [Deprecated]: syz.2.6480 (pid 27532) Use of int in max_burst socket option. [ 926.630222][T27532] Use struct sctp_assoc_value instead [ 926.678699][T27531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 926.679290][T27531] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 926.679312][T27531] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 926.732632][T27531] bond2: (slave gre1): making interface the new active one [ 926.732661][T27531] gre1: entered promiscuous mode [ 926.738196][T27531] bond2: (slave gre1): Enslaving as an active interface with an up link [ 926.777323][T27534] syzkaller1: entered promiscuous mode [ 926.777352][T27534] syzkaller1: entered allmulticast mode [ 926.896704][T27539] FAULT_INJECTION: forcing a failure. [ 926.896704][T27539] name failslab, interval 1, probability 0, space 0, times 0 [ 926.896739][T27539] CPU: 1 UID: 0 PID: 27539 Comm: syz.0.6483 Not tainted syzkaller #0 PREEMPT(full) [ 926.896763][T27539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 926.896777][T27539] Call Trace: [ 926.896786][T27539] [ 926.896795][T27539] dump_stack_lvl+0xe8/0x150 [ 926.896831][T27539] should_fail_ex+0x410/0x560 [ 926.896866][T27539] should_failslab+0xa8/0x100 [ 926.896902][T27539] __kvmalloc_node_noprof+0x176/0x820 [ 926.896933][T27539] ? bpf_compute_postorder+0x83/0x970 [ 926.896966][T27539] ? bpf_compute_postorder+0x83/0x970 [ 926.896997][T27539] bpf_compute_postorder+0x83/0x970 [ 926.897022][T27539] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 926.897053][T27539] ? add_kfuncs+0x251/0x2e0 [ 926.897085][T27539] bpf_check+0x261d/0x2ef0 [ 926.897129][T27539] ? __pfx_bpf_check+0x10/0x10 [ 926.897158][T27539] ? bpf_obj_name_cpy+0x194/0x1e0 [ 926.897196][T27539] bpf_prog_load+0x14d6/0x1c20 [ 926.897236][T27539] ? __pfx_bpf_prog_load+0x10/0x10 [ 926.897291][T27539] __sys_bpf+0xd0d/0xd90 [ 926.897326][T27539] ? __pfx___sys_bpf+0x10/0x10 [ 926.897365][T27539] ? __fget_files+0x2a/0x420 [ 926.897416][T27539] ? ksys_write+0x242/0x270 [ 926.897459][T27539] ? __pfx_ksys_write+0x10/0x10 [ 926.897490][T27539] __x64_sys_bpf+0xba/0xd0 [ 926.897517][T27539] do_syscall_64+0x166/0x520 [ 926.897548][T27539] ? trace_irq_disable+0x3b/0x140 [ 926.897572][T27539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.897597][T27539] ? clear_bhb_loop+0x70/0xc0 [ 926.897625][T27539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.897648][T27539] RIP: 0033:0x7f4f69d9e559 [ 926.897670][T27539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.897690][T27539] RSP: 002b:00007f4f6ac22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 926.897715][T27539] RAX: ffffffffffffffda RBX: 00007f4f6a025fa0 RCX: 00007f4f69d9e559 [ 926.897732][T27539] RDX: 0000000000000078 RSI: 00002000000005c0 RDI: 0000000000000005 [ 926.897748][T27539] RBP: 00007f4f6ac22090 R08: 0000000000000000 R09: 0000000000000000 [ 926.897763][T27539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 926.897778][T27539] R13: 00007f4f6a026038 R14: 00007f4f6a025fa0 R15: 00007ffda67248f8 [ 926.897815][T27539] [ 927.101831][T27538] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.6482'. [ 927.129594][T27538] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» [ 927.132881][ T5637] Bluetooth: hci2: command tx timeout [ 927.177062][T27538] 1ªX¹¦Dö»: left promiscuous mode [ 927.220667][T27544] xt_l2tp: invalid flags combination: 0 [ 927.678348][T27562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6488'. [ 927.945773][T27575] netlink: zone id is out of range [ 927.963271][T27569] 8021q: adding VLAN 0 to HW filter on device bond3 [ 927.965253][T27569] bond0: (slave bond3): Enslaving as an active interface with an up link [ 928.205182][T27589] xt_l2tp: invalid flags combination: 0 [ 928.403593][T27594] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 928.559561][T27591] syzkaller1: entered promiscuous mode [ 928.559601][T27591] syzkaller1: entered allmulticast mode [ 928.595676][T27602] FAULT_INJECTION: forcing a failure. [ 928.595676][T27602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.595714][T27602] CPU: 0 UID: 0 PID: 27602 Comm: syz.1.6500 Not tainted syzkaller #0 PREEMPT(full) [ 928.595737][T27602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 928.595750][T27602] Call Trace: [ 928.595759][T27602] [ 928.595769][T27602] dump_stack_lvl+0xe8/0x150 [ 928.595804][T27602] should_fail_ex+0x410/0x560 [ 928.595836][T27602] _copy_to_user+0x31/0xb0 [ 928.595869][T27602] bpf_verifier_vlog+0x3a2/0x900 [ 928.595902][T27602] bpf_verifier_log_write+0x11d/0x1a0 [ 928.595929][T27602] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 928.595957][T27602] ? bpf_verifier_log_write+0x11d/0x1a0 [ 928.596005][T27602] print_verifier_state+0x1e6/0x1a40 [ 928.596028][T27602] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 928.596056][T27602] ? __pfx_print_verifier_state+0x10/0x10 [ 928.596077][T27602] ? bpf_vlog_reset+0x2aa/0x340 [ 928.596100][T27602] ? print_insn_state+0x106/0x170 [ 928.596123][T27602] do_check_insn+0xa2bc/0x17d00 [ 928.596166][T27602] ? lock_acquire+0x115/0x350 [ 928.596197][T27602] ? __pfx_do_check_insn+0x10/0x10 [ 928.596233][T27602] ? _copy_to_user+0x8a/0xb0 [ 928.596271][T27602] ? bpf_verifier_vlog+0x55a/0x900 [ 928.596294][T27602] ? __pfx_verbose+0x10/0x10 [ 928.596320][T27602] ? verbose+0x11d/0x1a0 [ 928.596344][T27602] ? __pfx_verbose+0x10/0x10 [ 928.596365][T27602] ? bpf_push_jmp_history+0x27d/0x6d0 [ 928.596397][T27602] do_check_common+0x364c/0x5610 [ 928.596459][T27602] ? __pfx_do_check_common+0x10/0x10 [ 928.596484][T27602] ? __pfx_verbose+0x10/0x10 [ 928.596501][T27602] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 928.596533][T27602] do_check_main+0xa2/0x1f0 [ 928.596559][T27602] bpf_check+0x2775/0x2ef0 [ 928.596599][T27602] ? __pfx_bpf_check+0x10/0x10 [ 928.596625][T27602] ? bpf_obj_name_cpy+0x194/0x1e0 [ 928.596657][T27602] bpf_prog_load+0x14d6/0x1c20 [ 928.596711][T27602] ? __pfx_bpf_prog_load+0x10/0x10 [ 928.596760][T27602] __sys_bpf+0xd0d/0xd90 [ 928.596793][T27602] ? __pfx___sys_bpf+0x10/0x10 [ 928.596827][T27602] ? __fget_files+0x2a/0x420 [ 928.596874][T27602] ? ksys_write+0x242/0x270 [ 928.596896][T27602] ? __pfx_ksys_write+0x10/0x10 [ 928.596921][T27602] __x64_sys_bpf+0xba/0xd0 [ 928.596945][T27602] do_syscall_64+0x166/0x520 [ 928.596972][T27602] ? trace_irq_disable+0x3b/0x140 [ 928.596992][T27602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.597013][T27602] ? clear_bhb_loop+0x70/0xc0 [ 928.597038][T27602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.597057][T27602] RIP: 0033:0x7f924f99e559 [ 928.597076][T27602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.597094][T27602] RSP: 002b:00007f92507aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 928.597116][T27602] RAX: ffffffffffffffda RBX: 00007f924fc25fa0 RCX: 00007f924f99e559 [ 928.597131][T27602] RDX: 0000000000000070 RSI: 0000200000000e40 RDI: 0000000000000005 [ 928.597144][T27602] RBP: 00007f92507aa090 R08: 0000000000000000 R09: 0000000000000000 [ 928.597156][T27602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 928.597169][T27602] R13: 00007f924fc26038 R14: 00007f924fc25fa0 R15: 00007ffeaa22b2a8 [ 928.597201][T27602] [ 928.685839][T27606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6501'. [ 928.947646][T27610] netlink: 'syz.2.6501': attribute type 10 has an invalid length. [ 928.947672][T27610] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6501'. [ 929.056983][T27606] 8021q: adding VLAN 0 to HW filter on device bond1 [ 929.157226][T27604] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 929.159431][T27610] dummy0: entered promiscuous mode [ 929.225218][T27610] bond1: (slave dummy0): Releasing backup interface [ 929.543707][T27155] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 929.565577][T27155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 929.567606][T27155] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 929.588845][T27155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 929.597928][T27155] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 929.620855][T27155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 929.655862][T27155] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 929.684520][T27155] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 929.715146][T27639] xt_l2tp: invalid flags combination: 0 [ 929.767788][T27638] syzkaller0: entered promiscuous mode [ 929.767815][T27638] syzkaller0: entered allmulticast mode [ 929.820427][T27638] tipc: Started in network mode [ 929.820463][T27638] tipc: Node identity 02320f56de62, cluster identity 4711 [ 929.821061][T27638] tipc: Enabled bearer , priority 0 [ 929.879487][T27638] tipc: Resetting bearer [ 929.903052][T27636] tipc: Resetting bearer [ 929.957720][T27636] tipc: Disabling bearer [ 929.987017][T27654] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 930.205548][T27652] rxe_eth0 speed is unknown, defaulting to 1000 [ 930.261462][T27658] syzkaller0: entered promiscuous mode [ 930.261487][T27658] syzkaller0: entered allmulticast mode [ 930.285432][T27658] tipc: Enabled bearer , priority 0 [ 930.302797][T27155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 930.318562][T27658] FAULT_INJECTION: forcing a failure. [ 930.318562][T27658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.318692][T27658] CPU: 1 UID: 0 PID: 27658 Comm: syz.2.6511 Not tainted syzkaller #0 PREEMPT(full) [ 930.318719][T27658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 930.318734][T27658] Call Trace: [ 930.318744][T27658] [ 930.318754][T27658] dump_stack_lvl+0xe8/0x150 [ 930.318793][T27658] should_fail_ex+0x410/0x560 [ 930.318830][T27658] _copy_from_user+0x2d/0xb0 [ 930.318866][T27658] sock_do_ioctl+0x195/0x320 [ 930.318899][T27658] ? __pfx_sock_do_ioctl+0x10/0x10 [ 930.318926][T27658] ? hook_file_ioctl+0x1f2/0x600 [ 930.318975][T27658] sock_ioctl+0x57a/0x7e0 [ 930.319006][T27658] ? __pfx_sock_ioctl+0x10/0x10 [ 930.319034][T27658] ? __fget_files+0x2a/0x420 [ 930.319067][T27658] ? __fget_files+0x3a2/0x420 [ 930.319101][T27658] ? __fget_files+0x2a/0x420 [ 930.319143][T27658] ? bpf_lsm_file_ioctl+0x9/0x20 [ 930.319179][T27658] ? __pfx_sock_ioctl+0x10/0x10 [ 930.319207][T27658] __se_sys_ioctl+0xfc/0x170 [ 930.319239][T27658] do_syscall_64+0x166/0x520 [ 930.319269][T27658] ? trace_irq_disable+0x3b/0x140 [ 930.319294][T27658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.319319][T27658] ? clear_bhb_loop+0x70/0xc0 [ 930.319348][T27658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.319383][T27658] RIP: 0033:0x7ff32679e559 [ 930.319403][T27658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.319421][T27658] RSP: 002b:00007ff3276e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 930.319445][T27658] RAX: ffffffffffffffda RBX: 00007ff326a25fa0 RCX: 00007ff32679e559 [ 930.319461][T27658] RDX: 0000200000000740 RSI: 0000000000008922 RDI: 0000000000000007 [ 930.319477][T27658] RBP: 00007ff3276e6090 R08: 0000000000000000 R09: 0000000000000000 [ 930.319491][T27658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.319506][T27658] R13: 00007ff326a26038 R14: 00007ff326a25fa0 R15: 00007fff268e9608 [ 930.319542][T27658] [ 930.406063][T27657] tipc: Resetting bearer [ 930.567074][T27657] tipc: Disabling bearer [ 930.764437][T27663] netlink: 'syz.2.6513': attribute type 2 has an invalid length. [ 930.764465][T27663] nbd: illegal input index -2130444284 [ 930.787704][T27155] 8021q: adding VLAN 0 to HW filter on device team0 [ 930.802798][T27661] syzkaller1: entered promiscuous mode [ 930.802826][T27661] syzkaller1: entered allmulticast mode [ 930.822993][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.823129][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 930.856191][T27652] lo speed is unknown, defaulting to 1000 [ 930.895720][T15582] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.895855][T15582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.392436][T27652] wg0 speed is unknown, defaulting to 1000 [ 931.407947][T27675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6516'. [ 931.489222][T27678] FAULT_INJECTION: forcing a failure. [ 931.489222][T27678] name failslab, interval 1, probability 0, space 0, times 0 [ 931.489261][T27678] CPU: 1 UID: 0 PID: 27678 Comm: syz.0.6517 Not tainted syzkaller #0 PREEMPT(full) [ 931.489287][T27678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 931.489302][T27678] Call Trace: [ 931.489312][T27678] [ 931.489323][T27678] dump_stack_lvl+0xe8/0x150 [ 931.489363][T27678] should_fail_ex+0x410/0x560 [ 931.489402][T27678] should_failslab+0xa8/0x100 [ 931.489437][T27678] __kmalloc_cache_noprof+0xa3/0x600 [ 931.489466][T27678] ? nf_tables_newchain+0xf9c/0x28b0 [ 931.489493][T27678] ? nf_tables_newchain+0xf9c/0x28b0 [ 931.489538][T27678] nf_tables_newchain+0xf9c/0x28b0 [ 931.489584][T27678] ? __pfx_nf_tables_newchain+0x10/0x10 [ 931.489646][T27678] ? lock_acquire+0x115/0x350 [ 931.489671][T27678] ? nfnl_pernet+0x23/0x240 [ 931.489709][T27678] ? __nla_parse+0x40/0x60 [ 931.489752][T27678] nfnetlink_rcv+0x1288/0x28c0 [ 931.489814][T27678] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 931.489892][T27678] ? lock_acquire+0x115/0x350 [ 931.489928][T27678] ? netlink_deliver_tap+0x2e/0x1b0 [ 931.489959][T27678] ? netlink_deliver_tap+0x2e/0x1b0 [ 931.489996][T27678] netlink_unicast+0x7bd/0x940 [ 931.490040][T27678] netlink_sendmsg+0x813/0xb40 [ 931.490082][T27678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 931.490122][T27678] ? apparmor_socket_sendmsg+0x98/0x360 [ 931.490155][T27678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 931.490184][T27678] sock_sendmsg_nosec+0x14e/0x190 [ 931.490225][T27678] ____sys_sendmsg+0x54e/0x850 [ 931.490261][T27678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 931.490297][T27678] ? import_iovec+0x73/0xa0 [ 931.490340][T27678] ___sys_sendmsg+0x2a5/0x360 [ 931.490369][T27678] ? __lock_acquire+0x747/0x2de0 [ 931.490397][T27678] ? __pfx____sys_sendmsg+0x10/0x10 [ 931.490459][T27678] ? __fget_files+0x2a/0x420 [ 931.490494][T27678] ? __fget_files+0x3a2/0x420 [ 931.490549][T27678] __x64_sys_sendmsg+0x1b1/0x290 [ 931.490578][T27678] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 931.490626][T27678] do_syscall_64+0x166/0x520 [ 931.490657][T27678] ? trace_irq_disable+0x3b/0x140 [ 931.490682][T27678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.490706][T27678] ? clear_bhb_loop+0x70/0xc0 [ 931.490735][T27678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.490758][T27678] RIP: 0033:0x7f4f69d9e559 [ 931.490780][T27678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.490800][T27678] RSP: 002b:00007f4f6ac22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 931.490825][T27678] RAX: ffffffffffffffda RBX: 00007f4f6a025fa0 RCX: 00007f4f69d9e559 [ 931.490844][T27678] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 931.490859][T27678] RBP: 00007f4f6ac22090 R08: 0000000000000000 R09: 0000000000000000 [ 931.490873][T27678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 931.490888][T27678] R13: 00007f4f6a026038 R14: 00007f4f6a025fa0 R15: 00007ffda67248f8 [ 931.490925][T27678] [ 931.694297][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.854880][T27680] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6518'. [ 932.007534][T27686] netlink: 'syz.2.6520': attribute type 1 has an invalid length. [ 932.009472][T27684] xt_l2tp: invalid flags combination: 0 [ 932.113004][T27686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 932.196352][T27685] bond2: (slave veth3): Enslaving as an active interface with a down link [ 932.643641][T27155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.725671][T27704] syzkaller1: entered promiscuous mode [ 932.725695][T27704] syzkaller1: entered allmulticast mode [ 933.102586][T27733] FAULT_INJECTION: forcing a failure. [ 933.102586][T27733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.102625][T27733] CPU: 0 UID: 0 PID: 27733 Comm: syz.0.6528 Not tainted syzkaller #0 PREEMPT(full) [ 933.102651][T27733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 933.102667][T27733] Call Trace: [ 933.102677][T27733] [ 933.102688][T27733] dump_stack_lvl+0xe8/0x150 [ 933.102727][T27733] should_fail_ex+0x410/0x560 [ 933.102764][T27733] _copy_from_user+0x2d/0xb0 [ 933.102801][T27733] generic_map_update_batch+0x662/0xae0 [ 933.102851][T27733] ? __pfx_generic_map_update_batch+0x10/0x10 [ 933.102888][T27733] ? __fget_files+0x2a/0x420 [ 933.102930][T27733] ? __pfx_generic_map_update_batch+0x10/0x10 [ 933.102967][T27733] bpf_map_do_batch+0x391/0x630 [ 933.103002][T27733] __sys_bpf+0xbe5/0xd90 [ 933.103036][T27733] ? __pfx___sys_bpf+0x10/0x10 [ 933.103075][T27733] ? __fget_files+0x2a/0x420 [ 933.103127][T27733] ? ksys_write+0x242/0x270 [ 933.103154][T27733] ? __pfx_ksys_write+0x10/0x10 [ 933.103184][T27733] __x64_sys_bpf+0xba/0xd0 [ 933.103212][T27733] do_syscall_64+0x166/0x520 [ 933.103243][T27733] ? trace_irq_disable+0x3b/0x140 [ 933.103267][T27733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.103291][T27733] ? clear_bhb_loop+0x70/0xc0 [ 933.103319][T27733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.103343][T27733] RIP: 0033:0x7f4f69d9e559 [ 933.103364][T27733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.103384][T27733] RSP: 002b:00007f4f6ac22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 933.103409][T27733] RAX: ffffffffffffffda RBX: 00007f4f6a025fa0 RCX: 00007f4f69d9e559 [ 933.103426][T27733] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 000000000000001a [ 933.103441][T27733] RBP: 00007f4f6ac22090 R08: 0000000000000000 R09: 0000000000000000 [ 933.103465][T27733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 933.103479][T27733] R13: 00007f4f6a026038 R14: 00007f4f6a025fa0 R15: 00007ffda67248f8 [ 933.103517][T27733] [ 933.407671][T27739] FAULT_INJECTION: forcing a failure. [ 933.407671][T27739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.407709][T27739] CPU: 1 UID: 0 PID: 27739 Comm: syz.0.6531 Not tainted syzkaller #0 PREEMPT(full) [ 933.407736][T27739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 933.407750][T27739] Call Trace: [ 933.407760][T27739] [ 933.407771][T27739] dump_stack_lvl+0xe8/0x150 [ 933.407809][T27739] should_fail_ex+0x410/0x560 [ 933.407846][T27739] _copy_from_iter+0x1d3/0x1660 [ 933.407877][T27739] ? __alloc_skb+0x27a/0x7a0 [ 933.407912][T27739] ? __alloc_skb+0x27a/0x7a0 [ 933.407957][T27739] ? __alloc_skb+0x27a/0x7a0 [ 933.407991][T27739] ? __pfx__copy_from_iter+0x10/0x10 [ 933.408020][T27739] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 933.408044][T27739] ? __alloc_skb+0x27a/0x7a0 [ 933.408075][T27739] ? __alloc_skb+0x27a/0x7a0 [ 933.408116][T27739] ? netlink_sendmsg+0x650/0xb40 [ 933.408146][T27739] ? skb_put+0x112/0x210 [ 933.408171][T27739] netlink_sendmsg+0x6c0/0xb40 [ 933.408212][T27739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 933.408251][T27739] ? apparmor_socket_sendmsg+0x98/0x360 [ 933.408284][T27739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 933.408313][T27739] sock_sendmsg_nosec+0x14e/0x190 [ 933.408347][T27739] ____sys_sendmsg+0x54e/0x850 [ 933.408377][T27739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 933.408411][T27739] ? import_iovec+0x73/0xa0 [ 933.408449][T27739] ___sys_sendmsg+0x2a5/0x360 [ 933.408472][T27739] ? __lock_acquire+0x747/0x2de0 [ 933.408502][T27739] ? __pfx____sys_sendmsg+0x10/0x10 [ 933.408565][T27739] ? __fget_files+0x2a/0x420 [ 933.408602][T27739] ? __fget_files+0x3a2/0x420 [ 933.408648][T27739] __x64_sys_sendmsg+0x1b1/0x290 [ 933.408676][T27739] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 933.408723][T27739] do_syscall_64+0x166/0x520 [ 933.408754][T27739] ? trace_irq_disable+0x3b/0x140 [ 933.408779][T27739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.408803][T27739] ? clear_bhb_loop+0x70/0xc0 [ 933.408832][T27739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.408855][T27739] RIP: 0033:0x7f4f69d9e559 [ 933.408876][T27739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.408896][T27739] RSP: 002b:00007f4f6ac22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 933.408921][T27739] RAX: ffffffffffffffda RBX: 00007f4f6a025fa0 RCX: 00007f4f69d9e559 [ 933.408946][T27739] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 933.408961][T27739] RBP: 00007f4f6ac22090 R08: 0000000000000000 R09: 0000000000000000 [ 933.408976][T27739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.408990][T27739] R13: 00007f4f6a026038 R14: 00007f4f6a025fa0 R15: 00007ffda67248f8 [ 933.409027][T27739] [ 933.506801][T27740] netlink: 'syz.3.6529': attribute type 10 has an invalid length. [ 933.720184][T27740] team0: Port device dummy0 added [ 934.009554][T27155] veth0_vlan: entered promiscuous mode [ 934.052893][T27155] veth1_vlan: entered promiscuous mode [ 934.113351][ T31] audit: type=1107 audit(1792071928.883:16): pid=27753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 934.218668][T27155] veth0_macvtap: entered promiscuous mode [ 934.318000][T27759] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.6536'. [ 934.350473][T27757] syzkaller0: entered promiscuous mode [ 934.350502][T27757] syzkaller0: entered allmulticast mode [ 934.355882][T27759] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 934.393040][T27759] 0ªX¹¦Dö»: entered allmulticast mode [ 934.393908][T27763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6535'. [ 934.470633][T27757] ip6erspan0: entered allmulticast mode [ 934.471132][T27768] syzkaller1: entered promiscuous mode [ 934.471153][T27768] syzkaller1: entered allmulticast mode [ 934.546773][T27155] veth1_macvtap: entered promiscuous mode [ 934.752412][T27774] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6538'. [ 936.810153][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 937.825534][T27155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.854224][T27155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 937.912517][T25001] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.912571][T25001] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.912612][T25001] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.912652][T25001] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.180261][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.180285][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.259431][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.259455][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.290191][T27799] xt_LOG: level 115 >= 8 [ 938.391749][T27806] lo: entered promiscuous mode [ 938.392049][T27806] tunl0: entered promiscuous mode [ 938.392225][T27806] gre0: entered promiscuous mode [ 938.421722][T27806] 0ªX¹¦Dö»: entered promiscuous mode [ 938.436956][T27806] erspan0: entered promiscuous mode [ 938.437123][T27806] ip_vti0: entered promiscuous mode [ 938.437286][T27806] ip6_vti0: entered promiscuous mode [ 938.448440][T27806] sit0: entered promiscuous mode [ 938.448921][T27806] ip6tnl0: entered promiscuous mode [ 938.464015][T27806] ip6gre0: entered promiscuous mode [ 938.472028][T27806] syz_tun: entered promiscuous mode [ 938.475525][T27806] ip6gretap0: entered promiscuous mode [ 938.480271][T27806] bridge0: entered promiscuous mode [ 938.482334][T27806] vcan0: entered promiscuous mode [ 938.482794][T27806] bond0: entered promiscuous mode [ 938.482846][T27806] bond_slave_0: entered promiscuous mode [ 938.488065][T27806] bond_slave_1: entered promiscuous mode [ 938.488626][T27806] bond3: entered promiscuous mode [ 938.532279][T27806] team0: entered promiscuous mode [ 938.532327][T27806] team_slave_0: entered promiscuous mode [ 938.532492][T27806] team_slave_1: entered promiscuous mode [ 938.532709][T27806] dummy0: entered promiscuous mode [ 938.532815][T27806] nlmon0: entered promiscuous mode [ 938.532918][T27806] batadv0: entered promiscuous mode [ 938.533021][T27806] vxcan0: entered promiscuous mode [ 938.533128][T27806] vxcan1: entered promiscuous mode [ 938.533231][T27806] veth0: entered promiscuous mode [ 938.533366][T27806] veth1: entered promiscuous mode [ 938.541806][T27806] wg0: entered promiscuous mode [ 938.542336][T27806] wg1: entered promiscuous mode [ 938.542843][T27806] wg2: entered promiscuous mode [ 938.552803][T27806] veth0_to_bridge: entered promiscuous mode [ 938.553649][T27806] veth1_to_bridge: entered promiscuous mode [ 938.564196][T27806] veth0_to_bond: entered promiscuous mode [ 938.565259][T27806] veth1_to_bond: entered promiscuous mode [ 938.587816][T27806] veth0_to_team: entered promiscuous mode [ 938.588818][T27806] veth1_to_team: entered promiscuous mode [ 938.611350][T27806] veth0_to_batadv: entered promiscuous mode [ 938.611915][T27806] batadv_slave_0: entered promiscuous mode [ 938.627069][T27806] veth1_to_batadv: entered promiscuous mode [ 938.627624][T27806] €Â0: entered promiscuous mode [ 938.627971][T27806] xfrm0: entered promiscuous mode [ 938.628381][T27806] veth0_to_hsr: entered promiscuous mode [ 938.645969][T27806] veth1_to_hsr: entered promiscuous mode [ 938.663787][T27806] hsr0: entered promiscuous mode [ 938.663954][T27806] veth1_virt_wifi: entered promiscuous mode [ 938.666888][T27806] veth0_virt_wifi: entered promiscuous mode [ 938.686500][T27806] virt_wifi0: entered promiscuous mode [ 938.710054][T27806] vlan0: entered promiscuous mode [ 938.710375][T27806] vlan1: entered promiscuous mode [ 938.710632][T27806] macvlan0: entered promiscuous mode [ 938.710738][T27806] macvlan1: entered promiscuous mode [ 938.710842][T27806] ipvlan0: entered promiscuous mode [ 938.710944][T27806] ipvlan1: entered promiscuous mode [ 938.711325][T27806] macvtap0: entered promiscuous mode [ 938.711459][T27806] macsec0: entered promiscuous mode [ 938.711541][T27806] geneve0: entered promiscuous mode [ 938.725001][T27806] geneve1: entered promiscuous mode [ 938.725388][T27806] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 938.818179][T27806] bond1: entered promiscuous mode [ 938.818848][T27806] ip6gretap1: entered promiscuous mode [ 938.873546][T27806] netdevsim netdevsim0 eth0: entered promiscuous mode [ 938.873719][T27806] netdevsim netdevsim0 eth1: entered promiscuous mode [ 938.873890][T27806] netdevsim netdevsim0 eth2: entered promiscuous mode [ 938.874021][T27806] netdevsim netdevsim0 eth3: entered promiscuous mode [ 938.874159][T27806] ip6erspan0: entered promiscuous mode [ 939.138714][T27815] syzkaller0: entered promiscuous mode [ 939.138741][T27815] syzkaller0: entered allmulticast mode [ 939.909240][T27859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6558'. [ 942.318236][T27823] syzkaller0: entered promiscuous mode [ 942.318255][T27823] syzkaller0: entered allmulticast mode [ 942.319595][T27825] tipc: Enabled bearer , priority 0 [ 942.382023][T27851] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 942.384877][T27822] tipc: Resetting bearer [ 942.433754][T27822] tipc: Disabling bearer [ 942.651100][T27870] 8021q: adding VLAN 0 to HW filter on device bond4 [ 942.671118][T27870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6563'. [ 942.671155][T27870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6563'. [ 942.671190][T27870] bond0: left promiscuous mode [ 942.674748][T27870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.714278][T27870] bond4: (slave bond0): making interface the new active one [ 942.715723][T27870] bond4: (slave bond0): Enslaving as an active interface with an up link [ 942.787229][T27873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6562'. [ 942.833472][T27874] netlink: 'syz.0.6563': attribute type 2 has an invalid length. [ 942.833500][T27874] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6563'. [ 942.968253][T27879] netlink: Conntrack attr has 8 unknown bytes [ 942.968293][T27879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 942.991399][T27879] netlink: 'syz.4.6565': attribute type 361 has an invalid length. [ 943.501547][T27888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6568'. [ 943.634784][T27870] bond4 (unregistering): (slave bond0): Releasing active interface [ 943.667113][T27870] bond4 (unregistering): Released all slaves [ 943.818774][T27874] : entered promiscuous mode [ 944.393413][T27906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6575'. [ 944.780678][T27920] FAULT_INJECTION: forcing a failure. [ 944.780678][T27920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 944.780721][T27920] CPU: 1 UID: 0 PID: 27920 Comm: syz.0.6577 Not tainted syzkaller #0 PREEMPT(full) [ 944.780747][T27920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 944.780762][T27920] Call Trace: [ 944.780772][T27920] [ 944.780782][T27920] dump_stack_lvl+0xe8/0x150 [ 944.780825][T27920] should_fail_ex+0x410/0x560 [ 944.780868][T27920] _copy_from_user+0x2d/0xb0 [ 944.780906][T27920] ___sys_sendmsg+0x1c6/0x360 [ 944.780936][T27920] ? __lock_acquire+0x747/0x2de0 [ 944.780969][T27920] ? __pfx____sys_sendmsg+0x10/0x10 [ 944.781036][T27920] ? __fget_files+0x2a/0x420 [ 944.781073][T27920] ? __fget_files+0x3a2/0x420 [ 944.781121][T27920] __x64_sys_sendmsg+0x1b1/0x290 [ 944.781150][T27920] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 944.781200][T27920] do_syscall_64+0x166/0x520 [ 944.781234][T27920] ? trace_irq_disable+0x3b/0x140 [ 944.781261][T27920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.781286][T27920] ? clear_bhb_loop+0x70/0xc0 [ 944.781315][T27920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.781338][T27920] RIP: 0033:0x7f4f69d9e559 [ 944.781360][T27920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.781381][T27920] RSP: 002b:00007f4f6ac01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 944.781407][T27920] RAX: ffffffffffffffda RBX: 00007f4f6a026090 RCX: 00007f4f69d9e559 [ 944.781425][T27920] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 0000000000000004 [ 944.781440][T27920] RBP: 00007f4f6ac01090 R08: 0000000000000000 R09: 0000000000000000 [ 944.781455][T27920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.781470][T27920] R13: 00007f4f6a026128 R14: 00007f4f6a026090 R15: 00007ffda67248f8 [ 944.781508][T27920] [ 945.143710][T27913] tipc: Started in network mode [ 945.143748][T27913] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 945.283019][T27913] tipc: Enabled bearer , priority 10 [ 945.447268][T27925] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 945.466631][T27925] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6581'. [ 945.651274][T27929] FAULT_INJECTION: forcing a failure. [ 945.651274][T27929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.651314][T27929] CPU: 1 UID: 0 PID: 27929 Comm: syz.4.6582 Not tainted syzkaller #0 PREEMPT(full) [ 945.651340][T27929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 945.651359][T27929] Call Trace: [ 945.651369][T27929] [ 945.651380][T27929] dump_stack_lvl+0xe8/0x150 [ 945.651419][T27929] should_fail_ex+0x410/0x560 [ 945.651456][T27929] _copy_from_user+0x2d/0xb0 [ 945.651492][T27929] generic_map_update_batch+0x6b1/0xae0 [ 945.651543][T27929] ? __pfx_generic_map_update_batch+0x10/0x10 [ 945.651580][T27929] ? __fget_files+0x2a/0x420 [ 945.651621][T27929] ? __pfx_generic_map_update_batch+0x10/0x10 [ 945.651657][T27929] bpf_map_do_batch+0x391/0x630 [ 945.651702][T27929] __sys_bpf+0xbe5/0xd90 [ 945.651738][T27929] ? __pfx___sys_bpf+0x10/0x10 [ 945.651779][T27929] ? __fget_files+0x2a/0x420 [ 945.651833][T27929] ? ksys_write+0x242/0x270 [ 945.651860][T27929] ? __pfx_ksys_write+0x10/0x10 [ 945.651889][T27929] __x64_sys_bpf+0xba/0xd0 [ 945.651918][T27929] do_syscall_64+0x166/0x520 [ 945.651949][T27929] ? trace_irq_disable+0x3b/0x140 [ 945.651974][T27929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.651999][T27929] ? clear_bhb_loop+0x70/0xc0 [ 945.652027][T27929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.652051][T27929] RIP: 0033:0x7fbaa559e559 [ 945.652072][T27929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.652093][T27929] RSP: 002b:00007fbaa64bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 945.652118][T27929] RAX: ffffffffffffffda RBX: 00007fbaa5825fa0 RCX: 00007fbaa559e559 [ 945.652135][T27929] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 000000000000001a [ 945.652151][T27929] RBP: 00007fbaa64bc090 R08: 0000000000000000 R09: 0000000000000000 [ 945.652166][T27929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 945.652180][T27929] R13: 00007fbaa5826038 R14: 00007fbaa5825fa0 R15: 00007ffe9e6a8608 [ 945.652218][T27929] [ 946.242261][T27943] netlink: 'syz.0.6587': attribute type 1 has an invalid length. [ 946.344996][T27943] 8021q: adding VLAN 0 to HW filter on device bond4 [ 946.353135][T19719] tipc: Node number set to 4269801488 [ 946.368066][T27947] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 946.411656][T27943] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6587'. [ 946.666060][T27942] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.743088][T27950] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.6588'. [ 947.553712][T27943] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 947.646368][T27973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6592'. [ 947.672484][T27946] bond4 (unregistering): Released all slaves [ 947.703819][T27950] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 947.761093][T27968] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6591'. [ 947.761125][T27968] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6591'. [ 947.761144][T27968] netlink: 31 bytes leftover after parsing attributes in process `syz.4.6591'. [ 947.833239][T27974] netlink: 'syz.2.6592': attribute type 16 has an invalid length. [ 947.833265][T27974] netlink: 'syz.2.6592': attribute type 17 has an invalid length. [ 948.108918][T27942] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.283021][T27974] dummy0: left promiscuous mode [ 948.736188][T27976] vlan2: entered promiscuous mode [ 948.736215][T27976] bridge0: entered promiscuous mode [ 948.788275][T17060] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 948.826167][T17060] bond2: (slave veth3): making interface the new active one [ 948.851442][T17060] bond2: active interface up! [ 949.466901][T27999] syzkaller1: entered promiscuous mode [ 949.466929][T27999] syzkaller1: entered allmulticast mode [ 949.604984][T27942] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.172463][T28020] openvswitch: netlink: Key 24 has unexpected len 2 expected 4 [ 950.243022][T27942] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.502174][T28023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6602'. [ 950.502206][T28023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6602'. [ 950.502225][T28023] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6602'. [ 950.650092][ T5637] Bluetooth: hci2: command tx timeout [ 950.870168][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.020549][T28038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6605'. [ 951.025159][ T50] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.081775][T28033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6605'. [ 951.283807][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.345497][T28041] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6604'. [ 951.345525][T28041] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6604'. [ 951.345544][T28041] netlink: 31 bytes leftover after parsing attributes in process `syz.4.6604'. [ 951.368927][ T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.983820][T28053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6608'. [ 952.405989][T28066] netlink: 'syz.4.6610': attribute type 2 has an invalid length. [ 953.123388][T28076] syzkaller0: entered promiscuous mode [ 953.123415][T28076] syzkaller0: entered allmulticast mode [ 953.595597][T28077] tipc: Enabled bearer , priority 0 [ 953.596875][T28076] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 953.756889][T28072] tipc: Resetting bearer [ 953.836154][T28086] FAULT_INJECTION: forcing a failure. [ 953.836154][T28086] name failslab, interval 1, probability 0, space 0, times 0 [ 953.836201][T28086] CPU: 1 UID: 0 PID: 28086 Comm: syz.4.6619 Not tainted syzkaller #0 PREEMPT(full) [ 953.836227][T28086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 953.836242][T28086] Call Trace: [ 953.836251][T28086] [ 953.836262][T28086] dump_stack_lvl+0xe8/0x150 [ 953.836302][T28086] should_fail_ex+0x410/0x560 [ 953.836340][T28086] should_failslab+0xa8/0x100 [ 953.836373][T28086] ? skb_clone+0x212/0x3a0 [ 953.836400][T28086] kmem_cache_alloc_noprof+0xa1/0x600 [ 953.836429][T28086] ? skb_clone+0x212/0x3a0 [ 953.836462][T28086] skb_clone+0x212/0x3a0 [ 953.836492][T28086] __netlink_deliver_tap+0x355/0x6e0 [ 953.836536][T28086] ? netlink_deliver_tap+0x2e/0x1b0 [ 953.836569][T28086] netlink_deliver_tap+0x19c/0x1b0 [ 953.836602][T28086] netlink_unicast+0x781/0x940 [ 953.836643][T28086] netlink_sendmsg+0x813/0xb40 [ 953.836685][T28086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 953.836727][T28086] ? apparmor_socket_sendmsg+0x98/0x360 [ 953.836761][T28086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 953.836791][T28086] sock_sendmsg_nosec+0x14e/0x190 [ 953.836824][T28086] ____sys_sendmsg+0x54e/0x850 [ 953.836855][T28086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 953.836891][T28086] ? import_iovec+0x73/0xa0 [ 953.836931][T28086] ___sys_sendmsg+0x2a5/0x360 [ 953.836954][T28086] ? __lock_acquire+0x747/0x2de0 [ 953.836984][T28086] ? __pfx____sys_sendmsg+0x10/0x10 [ 953.837048][T28086] ? __fget_files+0x2a/0x420 [ 953.837083][T28086] ? __fget_files+0x3a2/0x420 [ 953.837134][T28086] __x64_sys_sendmsg+0x1b1/0x290 [ 953.837163][T28086] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 953.837220][T28086] do_syscall_64+0x166/0x520 [ 953.837251][T28086] ? trace_irq_disable+0x3b/0x140 [ 953.837276][T28086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.837300][T28086] ? clear_bhb_loop+0x70/0xc0 [ 953.837329][T28086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.837352][T28086] RIP: 0033:0x7fbaa559e559 [ 953.837374][T28086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.837396][T28086] RSP: 002b:00007fbaa64bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 953.837422][T28086] RAX: ffffffffffffffda RBX: 00007fbaa5825fa0 RCX: 00007fbaa559e559 [ 953.837439][T28086] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 953.837455][T28086] RBP: 00007fbaa64bc090 R08: 0000000000000000 R09: 0000000000000000 [ 953.837470][T28086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.837484][T28086] R13: 00007fbaa5826038 R14: 00007fbaa5825fa0 R15: 00007ffe9e6a8608 [ 953.837527][T28086] [ 954.215673][T28091] FAULT_INJECTION: forcing a failure. [ 954.215673][T28091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.215710][T28091] CPU: 1 UID: 0 PID: 28091 Comm: syz.1.6618 Not tainted syzkaller #0 PREEMPT(full) [ 954.215736][T28091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 954.215751][T28091] Call Trace: [ 954.215760][T28091] [ 954.215772][T28091] dump_stack_lvl+0xe8/0x150 [ 954.215815][T28091] should_fail_ex+0x410/0x560 [ 954.215853][T28091] _copy_to_user+0x31/0xb0 [ 954.215890][T28091] simple_read_from_buffer+0xe1/0x170 [ 954.215933][T28091] proc_fail_nth_read+0x1bb/0x230 [ 954.215959][T28091] ? common_file_perm+0x20e/0x2b0 [ 954.215995][T28091] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 954.216024][T28091] ? rw_verify_area+0x24a/0x4c0 [ 954.216050][T28091] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 954.216074][T28091] vfs_read+0x213/0xa80 [ 954.216104][T28091] ? __pfx___mutex_lock+0x10/0x10 [ 954.216137][T28091] ? __pfx_vfs_read+0x10/0x10 [ 954.216169][T28091] ? __fget_files+0x2a/0x420 [ 954.216209][T28091] ? __fget_files+0x3a2/0x420 [ 954.216254][T28091] ? __fget_files+0x2a/0x420 [ 954.216296][T28091] ksys_read+0x150/0x270 [ 954.216322][T28091] ? __pfx_ksys_read+0x10/0x10 [ 954.216357][T28091] do_syscall_64+0x166/0x520 [ 954.216386][T28091] ? trace_irq_disable+0x3b/0x140 [ 954.216411][T28091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.216434][T28091] ? clear_bhb_loop+0x70/0xc0 [ 954.216462][T28091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.216485][T28091] RIP: 0033:0x7f924f95ed8e [ 954.216506][T28091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 954.216526][T28091] RSP: 002b:00007f9250788fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 954.216551][T28091] RAX: ffffffffffffffda RBX: 00007f92507896c0 RCX: 00007f924f95ed8e [ 954.216568][T28091] RDX: 000000000000000f RSI: 00007f92507890a0 RDI: 0000000000000005 [ 954.216583][T28091] RBP: 00007f9250789090 R08: 0000000000000000 R09: 0000000000000000 [ 954.216597][T28091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.216611][T28091] R13: 00007f924fc26128 R14: 00007f924fc26090 R15: 00007ffeaa22b2a8 [ 954.216647][T28091] [ 954.669667][T28072] tipc: Disabling bearer [ 954.727761][T19714] tipc: Node number set to 3696234326 [ 954.921163][T28104] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6621'. [ 955.046217][T28106] openvswitch: netlink: EtherType 0 is less than min 600 [ 955.608085][T28094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 956.102027][T28130] ip6gre1: entered allmulticast mode [ 956.106853][ T61] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 956.554344][T28138] __nla_validate_parse: 3 callbacks suppressed [ 956.554400][T28138] netlink: 1244 bytes leftover after parsing attributes in process `syz.3.6629'. [ 956.663329][T28138] ip_tables: iptables: counters copy to user failed while replacing table [ 957.056184][T28147] erspan0: entered promiscuous mode [ 957.734029][T28159] syzkaller0: entered promiscuous mode [ 957.734056][T28159] syzkaller0: entered allmulticast mode [ 957.782035][T28159] tipc: Started in network mode [ 957.782070][T28159] tipc: Node identity eac80a59a5bd, cluster identity 4711 [ 957.782225][T28159] tipc: Enabled bearer , priority 0 [ 957.784975][T28159] FAULT_INJECTION: forcing a failure. [ 957.784975][T28159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.785011][T28159] CPU: 1 UID: 0 PID: 28159 Comm: syz.0.6636 Not tainted syzkaller #0 PREEMPT(full) [ 957.785036][T28159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 957.785050][T28159] Call Trace: [ 957.785060][T28159] [ 957.785071][T28159] dump_stack_lvl+0xe8/0x150 [ 957.785110][T28159] should_fail_ex+0x410/0x560 [ 957.785148][T28159] _copy_from_user+0x2d/0xb0 [ 957.785195][T28159] sock_do_ioctl+0x195/0x320 [ 957.785227][T28159] ? __pfx_sock_do_ioctl+0x10/0x10 [ 957.785254][T28159] ? hook_file_ioctl+0x1f2/0x600 [ 957.785301][T28159] sock_ioctl+0x57a/0x7e0 [ 957.785331][T28159] ? __pfx_sock_ioctl+0x10/0x10 [ 957.785358][T28159] ? __fget_files+0x2a/0x420 [ 957.785391][T28159] ? __fget_files+0x3a2/0x420 [ 957.785423][T28159] ? __fget_files+0x2a/0x420 [ 957.785459][T28159] ? bpf_lsm_file_ioctl+0x9/0x20 [ 957.785495][T28159] ? __pfx_sock_ioctl+0x10/0x10 [ 957.785522][T28159] __se_sys_ioctl+0xfc/0x170 [ 957.785554][T28159] do_syscall_64+0x166/0x520 [ 957.785583][T28159] ? trace_irq_disable+0x3b/0x140 [ 957.785607][T28159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.785631][T28159] ? clear_bhb_loop+0x70/0xc0 [ 957.785658][T28159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.785681][T28159] RIP: 0033:0x7f4f69d9e559 [ 957.785702][T28159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.785721][T28159] RSP: 002b:00007f4f6ac22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 957.785746][T28159] RAX: ffffffffffffffda RBX: 00007f4f6a025fa0 RCX: 00007f4f69d9e559 [ 957.785771][T28159] RDX: 0000200000000740 RSI: 0000000000008922 RDI: 0000000000000007 [ 957.785786][T28159] RBP: 00007f4f6ac22090 R08: 0000000000000000 R09: 0000000000000000 [ 957.785801][T28159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.785814][T28159] R13: 00007f4f6a026038 R14: 00007f4f6a025fa0 R15: 00007ffda67248f8 [ 957.785850][T28159] [ 958.137641][T28168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6637'. [ 958.193050][T28170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6637'. [ 958.615986][T28157] tipc: Resetting bearer [ 958.812848][T28157] tipc: Disabling bearer [ 958.988211][T28187] bridge_slave_0: left allmulticast mode [ 958.988245][T28187] bridge_slave_0: left promiscuous mode [ 958.988507][T28187] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.012870][T28190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6643'. [ 959.195829][T28141] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.6628'. [ 959.196159][T28141] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 959.284520][T28195] netlink: NAT attribute has 8 unknown bytes [ 959.284559][T28195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 959.389442][T28141] 0ªX¹¦Dö»: entered allmulticast mode [ 960.170138][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 960.279571][ T5637] Bluetooth: hci3: link tx timeout [ 960.279595][ T5637] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 960.308903][ T5637] Bluetooth: hci3: link tx timeout [ 960.308926][ T5637] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 960.309030][ T5637] Bluetooth: hci3: link tx timeout [ 960.309043][ T5637] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 960.309157][ T5637] Bluetooth: hci3: link tx timeout [ 960.320498][ T5637] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 960.357139][ T5637] Bluetooth: hci3: link tx timeout [ 960.357162][ T5637] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 960.953477][T28225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6652'. [ 960.953527][T28225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6652'. [ 961.438247][T28230] batman_adv: batadv0: Adding interface: syzkaller0 [ 961.438271][T28230] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.438306][T28230] batman_adv: batadv0: Interface activated: syzkaller0 [ 961.725795][T28229] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 961.924638][T28229] batman_adv: batadv0: Removing interface: syzkaller0 [ 962.343516][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 962.455992][T28231] FAULT_INJECTION: forcing a failure. [ 962.455992][T28231] name failslab, interval 1, probability 0, space 0, times 0 [ 962.456041][T28231] CPU: 1 UID: 0 PID: 28231 Comm: syz.2.6654 Not tainted syzkaller #0 PREEMPT(full) [ 962.456084][T28231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 962.456099][T28231] Call Trace: [ 962.456108][T28231] [ 962.456122][T28231] dump_stack_lvl+0xe8/0x150 [ 962.456164][T28231] should_fail_ex+0x410/0x560 [ 962.456201][T28231] should_failslab+0xa8/0x100 [ 962.456236][T28231] __kmalloc_cache_node_noprof+0xaa/0x620 [ 962.456264][T28231] ? __pfx___css_rstat_updated+0x10/0x10 [ 962.456293][T28231] ? __get_vm_area_node+0x155/0x2f0 [ 962.456327][T28231] ? __get_vm_area_node+0x155/0x2f0 [ 962.456370][T28231] __get_vm_area_node+0x155/0x2f0 [ 962.456430][T28231] __vmalloc_node_range_noprof+0x343/0x1540 [ 962.456455][T28231] ? translate_table+0x9a4/0x3520 [ 962.456483][T28231] ? percpu_ref_get_many+0x19/0x140 [ 962.456538][T28231] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 962.456566][T28231] ? __kasan_kmalloc+0x93/0xb0 [ 962.456601][T28231] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 962.456626][T28231] ? do_sock_setsockopt+0x17c/0x1b0 [ 962.456664][T28231] ? translate_table+0x9a4/0x3520 [ 962.456688][T28231] __vmalloc_noprof+0xd2/0x120 [ 962.456713][T28231] ? translate_table+0x9a4/0x3520 [ 962.456743][T28231] translate_table+0x9a4/0x3520 [ 962.456797][T28231] ? __pfx_translate_table+0x10/0x10 [ 962.456836][T28231] ? __lock_acquire+0x747/0x2de0 [ 962.456889][T28231] do_replace_finish+0xa72/0x18c0 [ 962.456950][T28231] do_replace+0x344/0x470 [ 962.456981][T28231] ? __pfx_do_replace+0x10/0x10 [ 962.457029][T28231] ? bpf_lsm_capable+0x9/0x20 [ 962.457054][T28231] ? security_capable+0x7e/0x2c0 [ 962.457097][T28231] do_ebt_set_ctl+0x2fb/0x1020 [ 962.457127][T28231] ? __lock_acquire+0x747/0x2de0 [ 962.457153][T28231] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 962.457183][T28231] ? __lock_acquire+0x747/0x2de0 [ 962.457227][T28231] ? __mutex_trylock_common+0x15f/0x270 [ 962.457262][T28231] ? __pfx___mutex_trylock_common+0x10/0x10 [ 962.457297][T28231] ? rcu_is_watching+0x16/0xb0 [ 962.457327][T28231] ? trace_contention_end+0x3d/0x140 [ 962.457370][T28231] ? nf_setsockopt+0x221/0x290 [ 962.457402][T28231] ? __mutex_unlock_slowpath+0x731/0x900 [ 962.457442][T28231] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 962.457476][T28231] ? __pfx___mutex_lock+0x10/0x10 [ 962.457521][T28231] nf_setsockopt+0x26f/0x290 [ 962.457549][T28231] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 962.457585][T28231] smc_setsockopt+0x232/0xb40 [ 962.457623][T28231] ? __pfx_smc_setsockopt+0x10/0x10 [ 962.457655][T28231] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 962.457686][T28231] ? __pfx_smc_setsockopt+0x10/0x10 [ 962.457717][T28231] do_sock_setsockopt+0x17c/0x1b0 [ 962.457745][T28231] __x64_sys_setsockopt+0x13d/0x1b0 [ 962.457774][T28231] do_syscall_64+0x166/0x520 [ 962.457805][T28231] ? trace_irq_disable+0x3b/0x140 [ 962.457829][T28231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.457854][T28231] ? clear_bhb_loop+0x70/0xc0 [ 962.457883][T28231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.457906][T28231] RIP: 0033:0x7ff32679e559 [ 962.457928][T28231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.457948][T28231] RSP: 002b:00007ff3276e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 962.457973][T28231] RAX: ffffffffffffffda RBX: 00007ff326a25fa0 RCX: 00007ff32679e559 [ 962.457991][T28231] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000005 [ 962.458005][T28231] RBP: 00007ff3276e6090 R08: 0000000000000108 R09: 0000000000000000 [ 962.458029][T28231] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 962.458045][T28231] R13: 00007ff326a26038 R14: 00007ff326a25fa0 R15: 00007fff268e9608 [ 962.458082][T28231] [ 962.930272][T28231] syz.2.6654: vmalloc error: size 16, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 962.930354][T28231] CPU: 1 UID: 0 PID: 28231 Comm: syz.2.6654 Not tainted syzkaller #0 PREEMPT(full) [ 962.930379][T28231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 962.930394][T28231] Call Trace: [ 962.930404][T28231] [ 962.930423][T28231] dump_stack_lvl+0xe8/0x150 [ 962.930464][T28231] warn_alloc+0x24d/0x270 [ 962.930492][T28231] ? __kasan_kmalloc+0x22/0xb0 [ 962.930526][T28231] ? __pfx_warn_alloc+0x10/0x10 [ 962.930550][T28231] ? __get_vm_area_node+0x155/0x2f0 [ 962.930593][T28231] ? __get_vm_area_node+0x2a9/0x2f0 [ 962.930638][T28231] __vmalloc_node_range_noprof+0x36b/0x1540 [ 962.930664][T28231] ? percpu_ref_get_many+0x19/0x140 [ 962.930720][T28231] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 962.930748][T28231] ? __kasan_kmalloc+0x93/0xb0 [ 962.930780][T28231] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 962.930803][T28231] ? do_sock_setsockopt+0x17c/0x1b0 [ 962.930838][T28231] ? translate_table+0x9a4/0x3520 [ 962.930863][T28231] __vmalloc_noprof+0xd2/0x120 [ 962.930886][T28231] ? translate_table+0x9a4/0x3520 [ 962.930914][T28231] translate_table+0x9a4/0x3520 [ 962.930968][T28231] ? __pfx_translate_table+0x10/0x10 [ 962.931005][T28231] ? __lock_acquire+0x747/0x2de0 [ 962.931057][T28231] do_replace_finish+0xa72/0x18c0 [ 962.931117][T28231] do_replace+0x344/0x470 [ 962.931146][T28231] ? __pfx_do_replace+0x10/0x10 [ 962.931184][T28231] ? bpf_lsm_capable+0x9/0x20 [ 962.931208][T28231] ? security_capable+0x7e/0x2c0 [ 962.931250][T28231] do_ebt_set_ctl+0x2fb/0x1020 [ 962.931281][T28231] ? __lock_acquire+0x747/0x2de0 [ 962.931305][T28231] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 962.931336][T28231] ? __lock_acquire+0x747/0x2de0 [ 962.931379][T28231] ? __mutex_trylock_common+0x15f/0x270 [ 962.931420][T28231] ? __pfx___mutex_trylock_common+0x10/0x10 [ 962.931455][T28231] ? rcu_is_watching+0x16/0xb0 [ 962.931485][T28231] ? trace_contention_end+0x3d/0x140 [ 962.931528][T28231] ? nf_setsockopt+0x221/0x290 [ 962.931559][T28231] ? __mutex_unlock_slowpath+0x731/0x900 [ 962.931600][T28231] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 962.931634][T28231] ? __pfx___mutex_lock+0x10/0x10 [ 962.931678][T28231] nf_setsockopt+0x26f/0x290 [ 962.931707][T28231] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 962.931742][T28231] smc_setsockopt+0x232/0xb40 [ 962.931778][T28231] ? __pfx_smc_setsockopt+0x10/0x10 [ 962.931810][T28231] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 962.931846][T28231] ? __pfx_smc_setsockopt+0x10/0x10 [ 962.931875][T28231] do_sock_setsockopt+0x17c/0x1b0 [ 962.931905][T28231] __x64_sys_setsockopt+0x13d/0x1b0 [ 962.931934][T28231] do_syscall_64+0x166/0x520 [ 962.931965][T28231] ? trace_irq_disable+0x3b/0x140 [ 962.931989][T28231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.932014][T28231] ? clear_bhb_loop+0x70/0xc0 [ 962.932042][T28231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.932066][T28231] RIP: 0033:0x7ff32679e559 [ 962.932089][T28231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.932109][T28231] RSP: 002b:00007ff3276e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 962.932134][T28231] RAX: ffffffffffffffda RBX: 00007ff326a25fa0 RCX: 00007ff32679e559 [ 962.932152][T28231] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000005 [ 962.932167][T28231] RBP: 00007ff3276e6090 R08: 0000000000000108 R09: 0000000000000000 [ 962.932182][T28231] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 962.932197][T28231] R13: 00007ff326a26038 R14: 00007ff326a25fa0 R15: 00007fff268e9608 [ 962.932235][T28231] [ 962.937583][T28231] Mem-Info: [ 962.937602][T28231] active_anon:9295 inactive_anon:0 isolated_anon:0 [ 962.937602][T28231] active_file:480 inactive_file:43810 isolated_file:0 [ 962.937602][T28231] unevictable:0 dirty:256 writeback:0 [ 962.937602][T28231] slab_reclaimable:12187 slab_unreclaimable:128228 [ 962.937602][T28231] mapped:34099 shmem:3396 pagetables:1291 [ 962.937602][T28231] sec_pagetables:0 bounce:0 [ 962.937602][T28231] kernel_misc_reclaimable:0 [ 962.937602][T28231] free:1276591 free_pcp:16497 free_cma:0 [ 962.937664][T28231] Node 0 active_anon:37180kB inactive_anon:0kB active_file:1920kB inactive_file:175040kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136396kB dirty:1024kB writeback:0kB shmem:13584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14976kB pagetables:5004kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 962.937725][T28231] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 962.937782][T28231] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 962.937884][T28231] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 962.937927][T28231] Node 0 DMA32 free:1158852kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:37180kB inactive_anon:0kB active_file:1920kB inactive_file:175040kB unevictable:0kB writepending:1024kB zspages:0kB present:3129332kB managed:2527704kB mlocked:0kB bounce:0kB free_pcp:65988kB local_pcp:42092kB free_cma:0kB [ 962.937992][T28231] lowmem_reserve[]: 0 0 0 0 0 [ 962.938033][T28231] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 962.938149][T28231] lowmem_reserve[]: 0 0 0 0 0 [ 962.938190][T28231] Node 1 Normal free:3932152kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 962.938255][T28231] lowmem_reserve[]: 0 0 0 0 0 [ 962.938295][T28231] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 962.938437][T28231] Node 0 DMA32: 841*4kB (UME) 128*8kB (UME) 130*16kB (ME) 41*32kB (ME) 10*64kB (ME) 3*128kB (UE) 0*256kB 6*512kB (UM) 36*1024kB (UE) 24*2048kB (UM) 259*4096kB (UM) = 1158756kB [ 962.938612][T28231] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 962.938725][T28231] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 8*16kB (UM) 5*32kB (UM) 3*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 958*4096kB (UM) = 3932152kB [ 962.938906][T28231] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 962.938925][T28231] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 962.938943][T28231] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 962.938962][T28231] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 962.938981][T28231] 47682 total pagecache pages [ 962.938991][T28231] 0 pages in swap cache [ 962.938999][T28231] Free swap = 124996kB [ 962.939008][T28231] Total swap = 124996kB [ 962.939018][T28231] 2097051 pages RAM [ 962.939027][T28231] 0 pages HighMem/MovableOnly [ 962.939036][T28231] 433509 pages reserved [ 962.939045][T28231] 0 pages cma reserved [ 963.854364][T28261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6659'. [ 964.204641][T28260] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 964.204687][T28260] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 964.204732][T28260] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 964.310436][T17060] tipc: Subscription rejected, illegal request [ 964.690146][T28271] syzkaller0: entered promiscuous mode [ 964.690172][T28271] syzkaller0: entered allmulticast mode [ 964.773106][T28268] xt_CT: You must specify a L4 protocol and not use inversions on it [ 964.874175][T28275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6663'. [ 964.906080][T28275] netlink: 1672 bytes leftover after parsing attributes in process `syz.2.6663'. [ 965.167512][T28282] netlink: 'syz.3.6664': attribute type 1 has an invalid length. [ 965.565661][T19719] s`z1: Port: 1 Link DOWN [ 965.567064][T28289] syzkaller0: entered promiscuous mode [ 965.567091][T28289] syzkaller0: entered allmulticast mode [ 965.608247][T28288] tipc: Enabled bearer , priority 0 [ 965.631313][T28288] tipc: Resetting bearer [ 965.646888][T28287] tipc: Resetting bearer [ 965.766719][T28298] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6669'. [ 965.781296][T28287] tipc: Disabling bearer [ 966.550005][T28315] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.6672'. [ 966.724368][T28315] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» [ 966.759621][T28315] 1ªX¹¦Dö»: left promiscuous mode [ 967.049227][T28342] FAULT_INJECTION: forcing a failure. [ 967.049227][T28342] name failslab, interval 1, probability 0, space 0, times 0 [ 967.049266][T28342] CPU: 1 UID: 0 PID: 28342 Comm: syz.4.6675 Not tainted syzkaller #0 PREEMPT(full) [ 967.049291][T28342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 967.049305][T28342] Call Trace: [ 967.049314][T28342] [ 967.049324][T28342] dump_stack_lvl+0xe8/0x150 [ 967.049363][T28342] should_fail_ex+0x410/0x560 [ 967.049400][T28342] should_failslab+0xa8/0x100 [ 967.049434][T28342] __kvmalloc_node_noprof+0x176/0x820 [ 967.049464][T28342] ? arg_track_join+0xac/0x370 [ 967.049494][T28342] ? record_stack_access+0xc71/0x1110 [ 967.049522][T28342] ? record_stack_access+0xc71/0x1110 [ 967.049559][T28342] record_stack_access+0xc71/0x1110 [ 967.049595][T28342] ? __pfx_arg_track_join+0x10/0x10 [ 967.049628][T28342] ? __pfx_record_stack_access+0x10/0x10 [ 967.049659][T28342] ? analyze_subprog+0x8ac/0x9e00 [ 967.049694][T28342] analyze_subprog+0x4544/0x9e00 [ 967.049727][T28342] ? uprobe_dispatcher+0x19f/0x680 [ 967.049803][T28342] ? __pfx_analyze_subprog+0x10/0x10 [ 967.049830][T28342] ? __x64_sys_bpf+0xba/0xd0 [ 967.049852][T28342] ? do_syscall_64+0x166/0x520 [ 967.049883][T28342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.049948][T28342] ? call_instance+0x263/0x560 [ 967.049975][T28342] ? rcu_is_watching+0x16/0xb0 [ 967.050004][T28342] ? call_instance+0x263/0x560 [ 967.050029][T28342] ? trace_kmalloc+0x2a/0xf0 [ 967.050055][T28342] ? call_instance+0x263/0x560 [ 967.050082][T28342] ? __kvmalloc_node_noprof+0x52f/0x820 [ 967.050111][T28342] ? __kvmalloc_node_noprof+0x345/0x820 [ 967.050139][T28342] ? call_instance+0x263/0x560 [ 967.050171][T28342] ? call_instance+0x263/0x560 [ 967.050218][T28342] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 967.050271][T28342] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 967.050303][T28342] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 967.050331][T28342] ? trace_kmalloc+0x2a/0xf0 [ 967.050354][T28342] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 967.050390][T28342] ? __kvmalloc_node_noprof+0x345/0x820 [ 967.050418][T28342] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 967.050445][T28342] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 967.050483][T28342] bpf_compute_live_registers+0x8d3/0x1ff0 [ 967.050532][T28342] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 967.050573][T28342] bpf_check+0x2744/0x2ef0 [ 967.050619][T28342] ? __pfx_bpf_check+0x10/0x10 [ 967.050649][T28342] ? bpf_obj_name_cpy+0x194/0x1e0 [ 967.050688][T28342] bpf_prog_load+0x14d6/0x1c20 [ 967.050730][T28342] ? __pfx_bpf_prog_load+0x10/0x10 [ 967.050786][T28342] __sys_bpf+0xd0d/0xd90 [ 967.050824][T28342] ? __pfx___sys_bpf+0x10/0x10 [ 967.050863][T28342] ? __fget_files+0x2a/0x420 [ 967.050918][T28342] ? ksys_write+0x242/0x270 [ 967.050944][T28342] ? __pfx_ksys_write+0x10/0x10 [ 967.050974][T28342] __x64_sys_bpf+0xba/0xd0 [ 967.051002][T28342] do_syscall_64+0x166/0x520 [ 967.051031][T28342] ? trace_irq_disable+0x3b/0x140 [ 967.051056][T28342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.051080][T28342] ? clear_bhb_loop+0x70/0xc0 [ 967.051108][T28342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.051132][T28342] RIP: 0033:0x7fbaa559e559 [ 967.051154][T28342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.051181][T28342] RSP: 002b:00007fbaa64bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 967.051206][T28342] RAX: ffffffffffffffda RBX: 00007fbaa5825fa0 RCX: 00007fbaa559e559 [ 967.051224][T28342] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000005 [ 967.051239][T28342] RBP: 00007fbaa64bc090 R08: 0000000000000000 R09: 0000000000000000 [ 967.051254][T28342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 967.051269][T28342] R13: 00007fbaa5826038 R14: 00007fbaa5825fa0 R15: 00007ffe9e6a8608 [ 967.051305][T28342] [ 967.696015][T28345] FAULT_INJECTION: forcing a failure. [ 967.696015][T28345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.696052][T28345] CPU: 1 UID: 0 PID: 28345 Comm: syz.2.6676 Not tainted syzkaller #0 PREEMPT(full) [ 967.696077][T28345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 967.696091][T28345] Call Trace: [ 967.696101][T28345] [ 967.696111][T28345] dump_stack_lvl+0xe8/0x150 [ 967.696162][T28345] should_fail_ex+0x410/0x560 [ 967.696198][T28345] _copy_from_iter+0x1d3/0x1660 [ 967.696229][T28345] ? __alloc_skb+0x27a/0x7a0 [ 967.696265][T28345] ? __alloc_skb+0x27a/0x7a0 [ 967.696300][T28345] ? __alloc_skb+0x27a/0x7a0 [ 967.696333][T28345] ? __pfx__copy_from_iter+0x10/0x10 [ 967.696361][T28345] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 967.696385][T28345] ? __alloc_skb+0x27a/0x7a0 [ 967.696415][T28345] ? __alloc_skb+0x27a/0x7a0 [ 967.696454][T28345] ? netlink_sendmsg+0x650/0xb40 [ 967.696484][T28345] ? skb_put+0x112/0x210 [ 967.696508][T28345] netlink_sendmsg+0x6c0/0xb40 [ 967.696548][T28345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.696588][T28345] ? apparmor_socket_sendmsg+0x98/0x360 [ 967.696619][T28345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.696649][T28345] sock_sendmsg_nosec+0x14e/0x190 [ 967.696681][T28345] ____sys_sendmsg+0x54e/0x850 [ 967.696710][T28345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 967.696743][T28345] ? import_iovec+0x73/0xa0 [ 967.696779][T28345] ___sys_sendmsg+0x2a5/0x360 [ 967.696801][T28345] ? __lock_acquire+0x747/0x2de0 [ 967.696830][T28345] ? __pfx____sys_sendmsg+0x10/0x10 [ 967.696891][T28345] ? __fget_files+0x2a/0x420 [ 967.696925][T28345] ? __fget_files+0x3a2/0x420 [ 967.696969][T28345] __x64_sys_sendmsg+0x1b1/0x290 [ 967.696996][T28345] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 967.697043][T28345] do_syscall_64+0x166/0x520 [ 967.697072][T28345] ? trace_irq_disable+0x3b/0x140 [ 967.697096][T28345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.697126][T28345] ? clear_bhb_loop+0x70/0xc0 [ 967.697154][T28345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.697177][T28345] RIP: 0033:0x7ff32679e559 [ 967.697216][T28345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.697236][T28345] RSP: 002b:00007ff3276e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.697260][T28345] RAX: ffffffffffffffda RBX: 00007ff326a25fa0 RCX: 00007ff32679e559 [ 967.697276][T28345] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 967.697291][T28345] RBP: 00007ff3276e6090 R08: 0000000000000000 R09: 0000000000000000 [ 967.697304][T28345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.697318][T28345] R13: 00007ff326a26038 R14: 00007ff326a25fa0 R15: 00007fff268e9608 [ 967.697359][T28345] [ 968.170037][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 968.313077][T28349] syzkaller1: entered promiscuous mode [ 968.313104][T28349] syzkaller1: entered allmulticast mode [ 968.485178][T28359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6682'. [ 968.485208][T28359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6682'. [ 968.718522][T28365] Cannot find del_set index 2 as target [ 969.207754][T28376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 969.671324][T28389] sctp: [Deprecated]: syz.1.6689 (pid 28389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 969.671324][T28389] Use struct sctp_sack_info instead [ 969.714399][T28389] sctp: [Deprecated]: syz.1.6689 (pid 28389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 969.714399][T28389] Use struct sctp_sack_info instead [ 969.853238][T28389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6689'. [ 970.250053][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 970.545453][T28402] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 970.978324][T28407] FAULT_INJECTION: forcing a failure. [ 970.978324][T28407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.978370][T28407] CPU: 1 UID: 0 PID: 28407 Comm: syz.1.6694 Not tainted syzkaller #0 PREEMPT(full) [ 970.978394][T28407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 970.978409][T28407] Call Trace: [ 970.978419][T28407] [ 970.978429][T28407] dump_stack_lvl+0xe8/0x150 [ 970.978468][T28407] should_fail_ex+0x410/0x560 [ 970.978506][T28407] _copy_from_user+0x2d/0xb0 [ 970.978542][T28407] ___sys_sendmsg+0x1c6/0x360 [ 970.978567][T28407] ? __lock_acquire+0x747/0x2de0 [ 970.978597][T28407] ? __pfx____sys_sendmsg+0x10/0x10 [ 970.978661][T28407] ? __fget_files+0x2a/0x420 [ 970.978696][T28407] ? __fget_files+0x3a2/0x420 [ 970.978741][T28407] __x64_sys_sendmsg+0x1b1/0x290 [ 970.978769][T28407] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 970.978818][T28407] do_syscall_64+0x166/0x520 [ 970.978849][T28407] ? trace_irq_disable+0x3b/0x140 [ 970.978875][T28407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.978899][T28407] ? clear_bhb_loop+0x70/0xc0 [ 970.978927][T28407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.978951][T28407] RIP: 0033:0x7f924f99e559 [ 970.978973][T28407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.978992][T28407] RSP: 002b:00007f9250789028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 970.979017][T28407] RAX: ffffffffffffffda RBX: 00007f924fc26090 RCX: 00007f924f99e559 [ 970.979035][T28407] RDX: 0000000000006014 RSI: 0000200000000200 RDI: 0000000000000004 [ 970.979050][T28407] RBP: 00007f9250789090 R08: 0000000000000000 R09: 0000000000000000 [ 970.979065][T28407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.979080][T28407] R13: 00007f924fc26128 R14: 00007f924fc26090 R15: 00007ffeaa22b2a8 [ 970.979117][T28407] [ 971.289948][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 971.774057][T28367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 972.237293][T28417] veth1_to_bond: entered promiscuous mode [ 972.260674][T28417] veth1_to_bond: entered allmulticast mode [ 972.337681][T28416] veth1_to_bond: left allmulticast mode [ 972.337728][T28416] veth1_to_bond: left promiscuous mode [ 972.370895][T28422] openvswitch: netlink: EtherType 500 is less than min 600 [ 972.657155][T28425] netlink: 'syz.2.6701': attribute type 31 has an invalid length. [ 972.754077][T28428] FAULT_INJECTION: forcing a failure. [ 972.754077][T28428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.754116][T28428] CPU: 1 UID: 0 PID: 28428 Comm: syz.1.6703 Not tainted syzkaller #0 PREEMPT(full) [ 972.754142][T28428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 972.754158][T28428] Call Trace: [ 972.754167][T28428] [ 972.754178][T28428] dump_stack_lvl+0xe8/0x150 [ 972.754219][T28428] should_fail_ex+0x410/0x560 [ 972.754257][T28428] _copy_to_user+0x31/0xb0 [ 972.754295][T28428] bpf_verifier_vlog+0x3a2/0x900 [ 972.754333][T28428] bpf_verifier_log_write+0x11d/0x1a0 [ 972.754359][T28428] ? __pfx_reg_type_str+0x10/0x10 [ 972.754388][T28428] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 972.754427][T28428] print_reg_state+0x147/0x1a30 [ 972.754462][T28428] ? __pfx_print_reg_state+0x10/0x10 [ 972.754485][T28428] ? _copy_to_user+0x8a/0xb0 [ 972.754521][T28428] ? bpf_verifier_vlog+0x55a/0x900 [ 972.754556][T28428] ? bpf_verifier_log_write+0x11d/0x1a0 [ 972.754588][T28428] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 972.754620][T28428] ? bpf_verifier_log_write+0x11d/0x1a0 [ 972.754649][T28428] print_verifier_state+0x205/0x1a40 [ 972.754675][T28428] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 972.754707][T28428] ? __pfx_print_verifier_state+0x10/0x10 [ 972.754740][T28428] ? bpf_vlog_reset+0x2aa/0x340 [ 972.754767][T28428] ? print_insn_state+0x106/0x170 [ 972.754796][T28428] do_check_insn+0xa2bc/0x17d00 [ 972.754847][T28428] ? lock_acquire+0x115/0x350 [ 972.754881][T28428] ? __pfx_do_check_insn+0x10/0x10 [ 972.754924][T28428] ? _copy_to_user+0x8a/0xb0 [ 972.754960][T28428] ? bpf_verifier_vlog+0x55a/0x900 [ 972.754987][T28428] ? __pfx_verbose+0x10/0x10 [ 972.755023][T28428] ? verbose+0x11d/0x1a0 [ 972.755053][T28428] ? __pfx_verbose+0x10/0x10 [ 972.755078][T28428] ? bpf_push_jmp_history+0x27d/0x6d0 [ 972.755119][T28428] do_check_common+0x364c/0x5610 [ 972.755190][T28428] ? __pfx_do_check_common+0x10/0x10 [ 972.755220][T28428] ? __pfx_verbose+0x10/0x10 [ 972.755241][T28428] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 972.755279][T28428] do_check_main+0xa2/0x1f0 [ 972.755310][T28428] bpf_check+0x2775/0x2ef0 [ 972.755356][T28428] ? __pfx_bpf_check+0x10/0x10 [ 972.755386][T28428] ? bpf_obj_name_cpy+0x194/0x1e0 [ 972.755425][T28428] bpf_prog_load+0x14d6/0x1c20 [ 972.755467][T28428] ? __pfx_bpf_prog_load+0x10/0x10 [ 972.755523][T28428] __sys_bpf+0xd0d/0xd90 [ 972.755560][T28428] ? __pfx___sys_bpf+0x10/0x10 [ 972.755600][T28428] ? __fget_files+0x2a/0x420 [ 972.755654][T28428] ? ksys_write+0x242/0x270 [ 972.755681][T28428] ? __pfx_ksys_write+0x10/0x10 [ 972.755711][T28428] __x64_sys_bpf+0xba/0xd0 [ 972.755747][T28428] do_syscall_64+0x166/0x520 [ 972.755778][T28428] ? trace_irq_disable+0x3b/0x140 [ 972.755801][T28428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.755826][T28428] ? clear_bhb_loop+0x70/0xc0 [ 972.755855][T28428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.755878][T28428] RIP: 0033:0x7f924f99e559 [ 972.755900][T28428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.755920][T28428] RSP: 002b:00007f92507aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 972.755945][T28428] RAX: ffffffffffffffda RBX: 00007f924fc25fa0 RCX: 00007f924f99e559 [ 972.755963][T28428] RDX: 0000000000000070 RSI: 0000200000000e40 RDI: 0000000000000005 [ 972.755978][T28428] RBP: 00007f92507aa090 R08: 0000000000000000 R09: 0000000000000000 [ 972.755993][T28428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 972.756007][T28428] R13: 00007f924fc26038 R14: 00007f924fc25fa0 R15: 00007ffeaa22b2a8 [ 972.756044][T28428] [ 973.458180][T28437] ip6_vti0: left promiscuous mode [ 973.458534][T28437] netlink: 976 bytes leftover after parsing attributes in process `syz.0.6706'. [ 973.458559][T28437] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 973.632226][T28441] --map-set only usable from mangle table [ 973.825886][T28446] Bluetooth: MGMT ver 1.23 [ 974.066754][T28451] syzkaller0: entered promiscuous mode [ 974.066780][T28451] syzkaller0: entered allmulticast mode [ 974.087949][T28451] tipc: Enabled bearer , priority 0 [ 974.189444][T28451] FAULT_INJECTION: forcing a failure. [ 974.189444][T28451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 974.189481][T28451] CPU: 0 UID: 0 PID: 28451 Comm: syz.0.6710 Not tainted syzkaller #0 PREEMPT(full) [ 974.189507][T28451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 974.189522][T28451] Call Trace: [ 974.189531][T28451] [ 974.189542][T28451] dump_stack_lvl+0xe8/0x150 [ 974.189581][T28451] should_fail_ex+0x410/0x560 [ 974.189618][T28451] _copy_from_user+0x2d/0xb0 [ 974.189653][T28451] sock_do_ioctl+0x195/0x320 [ 974.189687][T28451] ? __pfx_sock_do_ioctl+0x10/0x10 [ 974.189718][T28451] ? hook_file_ioctl+0x1f2/0x600 [ 974.189766][T28451] sock_ioctl+0x57a/0x7e0 [ 974.189797][T28451] ? __pfx_sock_ioctl+0x10/0x10 [ 974.189825][T28451] ? __fget_files+0x2a/0x420 [ 974.189859][T28451] ? __fget_files+0x3a2/0x420 [ 974.189893][T28451] ? __fget_files+0x2a/0x420 [ 974.189930][T28451] ? bpf_lsm_file_ioctl+0x9/0x20 [ 974.189966][T28451] ? __pfx_sock_ioctl+0x10/0x10 [ 974.189993][T28451] __se_sys_ioctl+0xfc/0x170 [ 974.190023][T28451] do_syscall_64+0x166/0x520 [ 974.190054][T28451] ? trace_irq_disable+0x3b/0x140 [ 974.190078][T28451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.190101][T28451] ? clear_bhb_loop+0x70/0xc0 [ 974.190139][T28451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.190163][T28451] RIP: 0033:0x7f4f69d9e559 [ 974.190185][T28451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.190204][T28451] RSP: 002b:00007f4f6ac22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 974.190230][T28451] RAX: ffffffffffffffda RBX: 00007f4f6a025fa0 RCX: 00007f4f69d9e559 [ 974.190247][T28451] RDX: 0000200000000740 RSI: 0000000000008922 RDI: 0000000000000006 [ 974.190261][T28451] RBP: 00007f4f6ac22090 R08: 0000000000000000 R09: 0000000000000000 [ 974.190274][T28451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.190288][T28451] R13: 00007f4f6a026038 R14: 00007f4f6a025fa0 R15: 00007ffda67248f8 [ 974.190325][T28451] [ 974.651282][T28448] tipc: Resetting bearer [ 974.729069][T28458] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6712'. [ 974.956763][T28448] tipc: Disabling bearer [ 976.119405][T28489] netlink: 'syz.3.6720': attribute type 2 has an invalid length. [ 976.283079][T28489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 976.336515][T28490] syzkaller0: entered promiscuous mode [ 976.336540][T28490] syzkaller0: entered allmulticast mode [ 976.388838][T28490] tipc: Enabled bearer , priority 0 [ 976.438312][T28488] tipc: Resetting bearer [ 976.479960][T28496] netlink: 'syz.1.6722': attribute type 1 has an invalid length. [ 976.589168][T28498] netlink: 'syz.2.6723': attribute type 1 has an invalid length. [ 976.644911][T28488] tipc: Disabling bearer [ 984.816424][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 992.760367][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 993.378458][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.432702][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 1017.453434][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1041.907328][T28512] Bluetooth: hci5: command tx timeout [ 1052.664207][T25387] Bluetooth: hci1: command tx timeout [ 1054.964291][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.815799][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1085.295699][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1098.373448][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 1117.104760][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.398423][ T32] INFO: task syz.1.6722:28499 blocked for more than 147 seconds. [ 1126.398455][ T32] Not tainted syzkaller #0 [ 1126.398469][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1126.398480][ T32] task:syz.1.6722 state:D stack:27896 pid:28499 tgid:28493 ppid:24362 task_flags:0x400140 flags:0x00080002 [ 1126.398555][ T32] Call Trace: [ 1126.398564][ T32] [ 1126.398583][ T32] __schedule+0x17db/0x58f0 [ 1126.398657][ T32] ? __pfx___schedule+0x10/0x10 [ 1126.398699][ T32] ? schedule+0x90/0x2b0 [ 1126.398733][ T32] schedule+0x164/0x2b0 [ 1126.398766][ T32] schedule_preempt_disabled+0x13/0x30 [ 1126.398796][ T32] __mutex_lock+0x7c1/0x1550 [ 1126.398834][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1126.398871][ T32] ? inet_rtm_newaddr+0x470/0x19f0 [ 1126.398910][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1126.398957][ T32] ? __nla_parse+0x40/0x60 [ 1126.399001][ T32] inet_rtm_newaddr+0x470/0x19f0 [ 1126.399036][ T32] ? __kernel_text_address+0xd/0x30 [ 1126.399068][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1126.399105][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1126.399163][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1126.399197][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 1126.399235][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 1126.399272][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1126.399318][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1126.399357][ T32] ? __lock_acquire+0x747/0x2de0 [ 1126.399398][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1126.399431][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1126.399470][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1126.399515][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1126.399546][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1126.399584][ T32] netlink_unicast+0x7bd/0x940 [ 1126.399625][ T32] netlink_sendmsg+0x813/0xb40 [ 1126.413264][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1126.413328][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1126.413365][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1126.413396][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1126.413434][ T32] ____sys_sendmsg+0x54e/0x850 [ 1126.413466][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1126.413501][ T32] ? import_iovec+0x73/0xa0 [ 1126.413541][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1126.413566][ T32] ? __lock_acquire+0x747/0x2de0 [ 1126.413597][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1126.413626][ T32] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1126.413690][ T32] ? __fget_files+0x2a/0x420 [ 1126.413726][ T32] ? __fget_files+0x3a2/0x420 [ 1126.413773][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1126.413802][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1126.413825][ T32] ? kfree+0x4d/0x650 [ 1126.413857][ T32] ? __pfx_kcov_ioctl+0x10/0x10 [ 1126.413894][ T32] do_syscall_64+0x166/0x520 [ 1126.413926][ T32] ? trace_irq_disable+0x3b/0x140 [ 1126.413952][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.413977][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1126.414006][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.414030][ T32] RIP: 0033:0x7f924f99e559 [ 1126.414052][ T32] RSP: 002b:00007f9250789028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1126.414079][ T32] RAX: ffffffffffffffda RBX: 00007f924fc26090 RCX: 00007f924f99e559 [ 1126.414097][ T32] RDX: 00000000040000c0 RSI: 00002000000004c0 RDI: 000000000000000a [ 1126.414113][ T32] RBP: 00007f924fa358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1126.414128][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1126.414155][ T32] R13: 00007f924fc26128 R14: 00007f924fc26090 R15: 00007ffeaa22b2a8 [ 1126.414192][ T32] [ 1126.414204][ T32] INFO: task syz.1.6722:28501 blocked for more than 147 seconds. [ 1126.414222][ T32] Not tainted syzkaller #0 [ 1126.414234][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1126.414244][ T32] task:syz.1.6722 state:D stack:26928 pid:28501 tgid:28493 ppid:24362 task_flags:0x400140 flags:0x00080002 [ 1126.414318][ T32] Call Trace: [ 1126.414326][ T32] [ 1126.414340][ T32] __schedule+0x17db/0x58f0 [ 1126.414400][ T32] ? __pfx___schedule+0x10/0x10 [ 1126.414437][ T32] ? schedule+0x90/0x2b0 [ 1126.414465][ T32] schedule+0x164/0x2b0 [ 1126.414491][ T32] schedule_preempt_disabled+0x13/0x30 [ 1126.414519][ T32] __mutex_lock+0x7c1/0x1550 [ 1126.414555][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1126.414589][ T32] ? rtnl_newlink+0xc1d/0x1c30 [ 1126.414613][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1126.414655][ T32] ? ns_capable+0x89/0xe0 [ 1126.414686][ T32] ? rtnl_nets_add+0x16c/0x300 [ 1126.414708][ T32] ? refcount_inc+0x46/0x70 [ 1126.414743][ T32] rtnl_newlink+0xc1d/0x1c30 [ 1126.414779][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1126.414800][ T32] ? __lock_acquire+0x747/0x2de0 [ 1126.414828][ T32] ? __lock_acquire+0x747/0x2de0 [ 1126.414860][ T32] ? __lock_acquire+0x747/0x2de0 [ 1126.414901][ T32] ? lock_acquire+0x115/0x350 [ 1126.414932][ T32] ? lock_acquire+0x115/0x350 [ 1126.414967][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 1126.415004][ T32] ? __lock_acquire+0x747/0x2de0 [ 1126.415035][ T32] ? __kernel_text_address+0xd/0x30 [ 1126.415060][ T32] ? unwind_get_return_address+0x4d/0x90 [ 1126.415088][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1126.415113][ T32] ? arch_stack_walk+0xfb/0x150 [ 1126.415170][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1126.415191][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 1126.415225][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 1126.415259][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1126.415293][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1126.415338][ T32] ? __lock_acquire+0x747/0x2de0 [ 1126.415376][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1126.415407][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1126.415445][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1126.415489][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1126.415519][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1126.415555][ T32] netlink_unicast+0x7bd/0x940 [ 1126.415594][ T32] netlink_sendmsg+0x813/0xb40 [ 1126.415635][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1126.415675][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1126.415708][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1126.415737][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1126.415770][ T32] ____sys_sendmsg+0x54e/0x850 [ 1126.415801][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1126.415836][ T32] ? import_iovec+0x73/0xa0 [ 1126.415872][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1126.415895][ T32] ? __lock_acquire+0x747/0x2de0 [ 1126.415925][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1126.415953][ T32] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1126.416015][ T32] ? __fget_files+0x2a/0x420 [ 1126.416049][ T32] ? __fget_files+0x3a2/0x420 [ 1126.416094][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1126.416121][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1126.416144][ T32] ? kfree+0x4d/0x650 [ 1126.416173][ T32] ? __pfx_kcov_ioctl+0x10/0x10 [ 1126.416208][ T32] do_syscall_64+0x166/0x520 [ 1126.416238][ T32] ? trace_irq_disable+0x3b/0x140 [ 1126.416261][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.416285][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1126.416320][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.416342][ T32] RIP: 0033:0x7f924f99e559 [ 1126.416361][ T32] RSP: 002b:00007f924dbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1126.416384][ T32] RAX: ffffffffffffffda RBX: 00007f924fc26180 RCX: 00007f924f99e559 [ 1126.416401][ T32] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000b [ 1126.416417][ T32] RBP: 00007f924fa358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1126.416432][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1126.416446][ T32] R13: 00007f924fc26218 R14: 00007f924fc26180 R15: 00007ffeaa22b2a8 [ 1126.416482][ T32] [ 1126.416493][ T32] INFO: task syz.2.6723:28498 blocked for more than 147 seconds. [ 1126.416510][ T32] Not tainted syzkaller #0 [ 1126.416522][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1126.416533][ T32] task:syz.2.6723 state:D stack:26048 pid:28498 tgid:28497 ppid:26563 task_flags:0x400140 flags:0x00080002 [ 1126.416597][ T32] Call Trace: [ 1126.416605][ T32] [ 1126.416618][ T32] __schedule+0x17db/0x58f0 [ 1126.416664][ T32] ? __pfx__printk+0x10/0x10 [ 1126.416738][ T32] ? __pfx___schedule+0x10/0x10 [ 1126.416776][ T32] ? schedule+0x90/0x2b0 [ 1126.416807][ T32] schedule+0x164/0x2b0 [ 1126.416838][ T32] schedule_preempt_disabled+0x13/0x30 [ 1126.416866][ T32] __mutex_lock+0x7c1/0x1550 [ 1126.416902][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1126.416937][ T32] ? rtnl_newlink+0xc1d/0x1c30 [ 1126.416961][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1126.417003][ T32] ? ns_capable+0x89/0xe0 [ 1126.417034][ T32] ? rtnl_nets_add+0x16c/0x300 [ 1126.417056][ T32] ? refcount_inc+0x46/0x70 [ 1126.417090][ T32] rtnl_newlink+0xc1d/0x1c30 [ 1126.417121][ T32] ? kasan_save_free_info+0x40/0x50 [ 1126.417146][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1126.417166][ T32] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 1126.417195][ T32] ? netlink_deliver_tap+0x19c/0x1b0 [ 1126.417222][ T32] ? netlink_unicast+0x781/0x940 [ 1126.417246][ T32] ? netlink_sendmsg+0x813/0xb40 [ 1126.417275][ T32] ? sock_sendmsg_nosec+0x14e/0x190 [ 1126.417328][ T32] ? ____sys_sendmsg+0x54e/0x850 [ 1126.417350][ T32] ? ___sys_sendmsg+0x2a5/0x360 [ 1126.417372][ T32] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1126.417395][ T32] ? do_syscall_64+0x166/0x520 [ 1126.417424][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f