last executing test programs: 1m54.900620826s ago: executing program 0 (id=7551): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x9, &(0x7f0000000a40)=ANY=[@ANYBLOB="f375ea7b86735cee38c40b4394708e2698e9eb4dbb67136727302e", @ANYRES32, @ANYBLOB="0000000000000000b7080000800100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="880000001900010000000000000000001d01000005000d0001000000150003000000000000000000062e346aa0f998570000000015000200000000000002000003ef7506ecbef9700600000015000400000000000000000000000000000000010100000008000900", @ANYRES32=0x0, @ANYBLOB='\f\x00\v\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x88}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r2, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r5], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40001) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="54000146", @ANYRES16=r4, @ANYBLOB="010027bd7000fedbdf250000000008000100", @ANYRES32=r6, @ANYBLOB="0c00030003000000000000000800020000000000060006000000000014000b00ff01000000000000000000000000000108000400ac1414bb"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0, 0xa4}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) 1m49.527300057s ago: executing program 0 (id=7571): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000200), 0xfe41) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x1100}, 0x40002000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r3) r4 = socket(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000100)="100000000000000001", 0x9) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000140)={'syzkaller0\x00', @random="e1221946e5d3"}) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000280)=""/197, 0xc5}], 0x1) r5 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r1, @ANYRES16, @ANYRES16=r4, @ANYRESDEC, @ANYRESHEX], 0x48}, 0x1, 0x0, 0x0, 0x4000045}, 0x60) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xc}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000005bc0)=@newtfilter={0x73c, 0x11, 0xd27, 0x70bd2a, 0x4, {0x0, 0x0, 0x74, r9, {0xeffe068f8514295, 0x6}, {0xafabc05531515610, 0x2}, {0xfff2, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_CLASSID={0x8, 0x3, {0xf, 0x6}}, @TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x6, 0xc}}, @TCA_BPF_FD={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x698, 0x2, [@TCA_ROUTE4_ACT={0x10c, 0x6, [@m_gact={0x108, 0x1, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1015, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x353, 0x5, 0x10000, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x81, 0x4, 0x7, 0x1938, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x1, 0x6, 0x3ff, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x7b9, 0x5}}]}, {0x7c, 0x6, "8b3e1c0709a9c88424a1b73df87ba60cf21a90774b6a1df4185b6d538bc0d2b4b37b92ba85969563db1b103943629671118e284fce05c27bb890f63d9f676cdebc6f2853adf588c4e57995be28906afae497808d6c6f0d882dfadf17716a1ab9967ea0da3d173ea9d1579b58e7b1f4c3c78fee22240a7218"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_POLICE={0x4d8, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x3, 0x81, 0x3, {0x4, 0x2, 0x9, 0x9, 0x1, 0x7d9e6cfa}, {0xe6, 0x1, 0x0, 0x8000, 0xf055, 0xffff}, 0x5, 0x4, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0x4, 0x2, 0x1, 0x2, 0x28, 0x1000, 0xfffffffd, 0x1, 0x9, 0x1, 0x2, 0x3, 0x2, 0xf6, 0xa, 0x400, 0xf41, 0xf3ac, 0x3, 0xffffff6f, 0xffffffa1, 0xb4b, 0x4, 0x7, 0x6, 0x2, 0x4, 0x4, 0x0, 0xdd, 0x7f, 0x40, 0x4, 0x9, 0x4, 0x6c2c, 0x5, 0x6, 0x6, 0x5, 0x2, 0x50, 0x8, 0x1, 0x0, 0x2, 0x5, 0x1, 0x7edf, 0x47, 0xffff0001, 0x0, 0xffff71e9, 0x7, 0x7de5, 0x100, 0x8, 0xac36, 0x8, 0x2, 0x3, 0x7, 0x2, 0x0, 0x1, 0x5, 0x4, 0x3ff, 0x2, 0x8, 0x7, 0x6, 0x81, 0x2, 0xecee, 0x6, 0x317bd6b2, 0x8, 0xffffffc0, 0x5, 0x5, 0x5, 0x100, 0x7, 0x2, 0x9, 0x7cc, 0xfffffffa, 0x401, 0x1996, 0x5, 0x4, 0x10, 0x2, 0xe, 0x8, 0x3, 0x1, 0xf, 0x2, 0xa, 0x1, 0x7, 0x0, 0x5, 0x2, 0x1, 0x3, 0xe, 0x401, 0xf33f, 0x9, 0x0, 0x40000002, 0x1ff, 0x1, 0xfffffffc, 0x2, 0x3, 0x44e8, 0x4, 0x9, 0x1, 0x793, 0x5, 0x2e, 0x81, 0x7fffffff, 0x101, 0x8, 0x3, 0x8, 0x0, 0x2, 0x607, 0x7ff, 0x0, 0x2, 0x8000, 0x10, 0x7, 0x3, 0x2, 0x7, 0xe, 0x2, 0x5, 0xd5, 0x1, 0x17, 0x1, 0x4, 0x3, 0x4, 0xd32, 0xfffffff8, 0x8, 0x5d, 0x0, 0x0, 0xc84, 0x9, 0xa, 0xffff2ba3, 0x2, 0x9, 0x9, 0x1, 0x3, 0xa, 0x3, 0x400, 0x67dc, 0x0, 0x9, 0xcf7, 0x0, 0xecc, 0x5, 0xffffffff, 0x4, 0x0, 0x2ff4b805, 0x7f, 0x4, 0xb, 0x8001, 0x5, 0xb, 0x7, 0x0, 0xa7ff, 0x9, 0x8001, 0x80, 0xfffffff9, 0x1, 0x7, 0x3, 0xb952, 0x2, 0x4, 0xa, 0x2, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x2a, 0x0, 0x5, 0x8, 0x4, 0x10001, 0x5, 0x1dec, 0x1, 0x400, 0x3, 0xd, 0x7, 0x7, 0x40, 0x0, 0x7, 0xfffffc91, 0x4b, 0x6, 0x417, 0xa2f, 0xb, 0x8, 0x5, 0x1000, 0x9, 0x6, 0x3, 0x0, 0x1, 0x5, 0x8, 0x7, 0x0, 0x8, 0x5dfa, 0x0, 0x6, 0x8, 0x6, 0x0, 0x2, 0x2, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0x2, 0x6, 0x9, 0x401, {0xd, 0x2, 0xfff, 0x8, 0x4, 0x5}, {0xe, 0x1, 0x3ff, 0x7f, 0x1, 0x5}, 0x3, 0x7, 0x8001}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x3, 0x5, 0xffff, 0xffff, {0xdf, 0x2, 0x8048, 0x0, 0x5, 0x5}, {0x3e, 0x0, 0x9, 0x8, 0x1911, 0x7}, 0x3, 0x3, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}, @TCA_ROUTE4_POLICE={0xac, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x790, 0x20000000, 0xac2, 0xd, 0x7ff, {0x1, 0x1, 0x7, 0x1306, 0xf65f, 0x6}, {0x3, 0x1, 0x5, 0x8, 0x4, 0xff}, 0xa, 0x1ff, 0x7}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x70, 0x2, 0x2, 0x6, 0x6, {0x0, 0x2, 0x4, 0x80, 0xeee, 0x8}, {0xb4, 0x2, 0x90f, 0x4, 0x7, 0x7}, 0x5, 0x3092, 0xd}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0xa71}]}, 0x73c}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x2400c800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0xc201}) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000740)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x5, 0x2, 0xa}, 0x1c) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0xc201}) clock_gettime(0x0, 0x0) recvmmsg(r6, &(0x7f0000000800)=[{{&(0x7f0000000a00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000b00)=""/144, 0x90}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/105, 0x69}, {&(0x7f0000003c40)=""/80, 0x50}], 0x6, &(0x7f0000003cc0)=""/179, 0xb3}}, {{&(0x7f0000003d80)=@nl=@unspec, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003e80)=""/60, 0x3c}, {&(0x7f0000003ec0)=""/254, 0xfe}, {&(0x7f0000003fc0)=""/51, 0x33}, {&(0x7f0000004000)}, {&(0x7f0000004040)}], 0x5, &(0x7f0000004080)=""/255, 0xff}, 0xf1}, {{&(0x7f0000004180)=@generic, 0x80, &(0x7f0000004200)=[{&(0x7f0000004240)=""/120, 0x78}, {&(0x7f00000042c0)=""/18, 0x12}], 0x2}, 0x80000000}, {{&(0x7f0000004300)=@qipcrtr, 0x80, &(0x7f0000004380)=[{&(0x7f00000043c0)=""/26, 0x1a}, {&(0x7f0000004400)=""/58, 0x3a}, {&(0x7f0000004440)=""/184, 0xb8}, {&(0x7f0000004500)=""/66, 0x42}], 0x4, &(0x7f0000004580)=""/74, 0x4a}, 0x3}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000004680)=""/200, 0xc8}, {0x0}, {&(0x7f0000004780)=""/74, 0x4a}, {&(0x7f0000004800)=""/101, 0x65}, {&(0x7f0000004880)=""/24, 0x18}, {&(0x7f00000048c0)=""/218, 0xda}, {&(0x7f00000049c0)=""/193, 0xc1}], 0x7}, 0x2}, {{0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f0000004b00)=""/188, 0xbc}], 0x1, &(0x7f0000004bc0)=""/21, 0x15}, 0x401}, {{&(0x7f0000004c00)=@nl=@proc, 0x80, &(0x7f0000004c80)=[{&(0x7f0000004cc0)=""/213, 0xd5}, {&(0x7f0000004dc0)=""/249, 0xf9}, {&(0x7f0000004ec0)=""/216, 0xd8}, {&(0x7f0000004fc0)=""/238, 0xee}], 0x4, &(0x7f00000050c0)=""/50, 0x32}}, {{&(0x7f0000005100)=@can, 0x80, &(0x7f0000005180), 0x0, &(0x7f00000051c0)=""/242, 0xf2}, 0x1}], 0x8, 0x120, &(0x7f00000052c0)) socket$kcm(0x2, 0xa, 0x2) write$tun(r11, &(0x7f0000005300)=ANY=[], 0xfdef) 1m48.973464211s ago: executing program 2 (id=7574): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r0, 0x607d8000) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1004400}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x78, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x20) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000002c0)='a', 0xdd02}], 0xc, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 1m48.881705309s ago: executing program 4 (id=7575): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {0x0}], 0x3}}], 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000056c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f0000005700)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000018}, 0x80) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x4040) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1900000004000000040000000200001adcef3da11245ccaa6bfab872c587a961459720c165ac85dd1c6846f8ea2d0ddb7d571c539efcc037a6313b7291abdb6c29853dff35826dd93dd7f64809e53982a20640658cd5ccab28d767d9516df55728a6ef95801de3fb586bdfd09b7305ba4db920c2ca2fb67259010fa1fff6fb88576d9282ebfee48114ead1ce123cf85255c9520449eca625b09b36d364b55b911dec6af35dcb892bce770c356eb5f0795327b4a772914a7e0577af68faf750e3a7eb405127014cc9d01d331ad795a4ae8c99929e31f5d2736686f7dfe4b9ec4ba980df712c63f26fec95b6d7f116", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000901ff80000000fe03000100000000", 0x1c) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYRES64=r3], 0x0, 0x34}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES32=r7], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8}, 0x94) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r11, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000010000001900000019000000010000000000000001"], 0x0, 0x3a, 0x0, 0x1, 0x200006}, 0xffffffb7) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r0) close(r10) r12 = socket$inet6(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r12, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x3, 0x20000001, 0x0, 0x1, 0x900, 0x0, 0xfffffffc}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_int(r13, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r14, r14, 0x0, 0x4) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r9}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r8, 0x0, 0x0}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000002280)={0x0, &(0x7f0000000280)}, 0x10) 1m48.575850795s ago: executing program 2 (id=7577): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf250100000005001100c50000000c0009000200aaaaaaaaaaaa050007000d0000001b00000000"], 0x38}, 0x1, 0x0, 0x0, 0x240148c4}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000d80)=ANY=[@ANYBLOB="300000001300000425bd7000fedbdf2500000000", @ANYRES32=r3, @ANYBLOB="875002004000000001001b00ffff4000f4ff100007000000347a463bd99491108b399ca57ab449cf077af2f6c372d96ae930f92f938269fd31df7b8edfce723b35c341cc352dc03d4d0e2a7a46a495ff289dfd31e2f5dc74d0a1b61127de"], 0x30}, 0x1, 0x0, 0x0, 0x20040080}, 0x60004005) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2026bd7000fedbdf25340000000c009900ef0000007d00917379681bf84c6ad86d0a00060077be05595fd95df2755fa05349000008001f01000400000a00340001010101010100000000000000c1a23ac200"], 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xfff1, 0x1f}, {0xe, 0x7}, {0xffe1, 0xd}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xffffff3b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f0000000780)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000007c0)={0x11, 0x1a, r12, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendto$packet(r13, &(0x7f0000000840)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000880)={0x11, 0x4, r15, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r15, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x3, 0x6, 0x5, 0xa8e, 0x5, 0x407c, 0x80, 0x9, 0x3, 0x8000, 0x8, 0x3, 0x8, 0x5, 0xbc0, 0x7, 0x9c09, 0xffff, 0x3, 0x0, 0xc, 0xcfa, 0x5, 0xa, 0x6408, 0x80, 0x849, 0x8b, 0xffffffff, 0x4, 0x2, 0xa4c, 0x0, 0x9, 0x5, 0x200, 0x1ff, 0x4d76, 0x4, 0xb32, 0x3ff, 0x8, 0x0, 0x71, 0x5, 0x1, 0x8, 0x0, 0x7, 0xeb, 0x6, 0x87, 0x8, 0x0, 0x9, 0x3ff, 0xb, 0xfffffff8, 0xb6d, 0x81, 0x1, 0x8, 0xa, 0x0, 0x9, 0x81, 0x8, 0x26b, 0x8, 0x85b4, 0x9, 0x7, 0xfffffffe, 0x6, 0x8, 0xffffffc0, 0x3, 0x3, 0x4, 0x4, 0x80000001, 0xc8ee, 0xbacb161, 0x3ff, 0xffff12d0, 0x2, 0xffff8000, 0x10, 0x1ff, 0x2, 0x5, 0x2, 0x8, 0x7, 0x4, 0x2, 0x0, 0x1, 0x5, 0xfffffffd, 0x6, 0x0, 0x9, 0x8, 0x5, 0x6, 0xfffffffe, 0x2, 0x834f, 0x809, 0x1ff, 0x2, 0x62cd, 0xf98, 0xd8, 0x6, 0x6, 0x9, 0x3, 0xfffff000, 0x40000000, 0x7, 0x81, 0x0, 0x5, 0x10, 0x100, 0x40, 0xc, 0x400, 0x9151, 0x6, 0x7, 0x2, 0xb, 0x7, 0x4, 0x4, 0x64, 0x9, 0x400, 0x2, 0x6, 0x7, 0x971, 0x0, 0x6, 0x3, 0xa46a, 0x8, 0x23, 0x2, 0x8000, 0x7fff, 0x8, 0x1, 0x557, 0x2, 0x3ff, 0x3ff, 0x2, 0x1, 0x1, 0x5c, 0x6, 0x1ff, 0x9, 0xb, 0x6, 0x0, 0x7ff, 0x868f, 0x9, 0xffffffff, 0x0, 0xfffffffe, 0x100, 0x40, 0x6c8, 0x8, 0x4, 0x4, 0x4, 0x81, 0xdf, 0x8, 0x4, 0x6, 0x4, 0xc59e, 0x9, 0x891a, 0x4, 0x1, 0x67a, 0x5, 0xaa, 0x2, 0x8000, 0x4, 0x5, 0x2, 0x6, 0x9, 0x4533afbb, 0xd, 0x0, 0x593c, 0x1, 0xd99b, 0x55aa77cb, 0x56a, 0x9, 0x8, 0x200, 0x10001, 0x5, 0x6, 0x1000, 0xa, 0x5, 0x6, 0x4, 0x1fe, 0x40, 0x2, 0x5dff, 0xfffffffe, 0x8, 0x1, 0x4, 0x4, 0x1ff, 0x101, 0xffff, 0x12, 0x5, 0xfffffffc, 0x7e94, 0x6, 0xca55, 0x2, 0x5, 0x401, 0x8, 0x4, 0x80000000, 0x3, 0x1, 0x7, 0x4, 0x2, 0x8, 0x16, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 1m48.410599899s ago: executing program 3 (id=7578): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8101, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x400000000000235, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000a00)={r6, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x4, 0x4, 0x7, 0x3, 0x5, 0xffffffff, 0x5, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x9, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @link_local}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x34, 0x0, 0x917, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}]}, 0x34}}, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, 0x0, 0x0) 1m48.249089188s ago: executing program 0 (id=7580): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) (async) r2 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x20000000) (async) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000300)='espintcp', 0x8) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000db980000a1000000b5080000003702008500000007000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) 1m48.103987095s ago: executing program 4 (id=7581): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60, 0x180800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, r3, 0xffffffffffffffff, 0x1, 0x82, 0x8, "423664cf02990bca432b6af994531f7619760866f2fdab472b0cbe45ee2302d881880ad2aa8fba29b6aa7e328aa64536ca0a42203f40583c284259c1da786f", 0x1e}, 0x60) sendmmsg$unix(r1, &(0x7f0000000300), 0x318, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040080000000001300020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c00020000002d"], 0xbc}, 0x1, 0x0, 0x0, 0x44000055}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32], 0x1c}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000003a00010000000000000000000a0008000000010018000000"], 0x1c}}, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000440)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r8, 0x89f8, &(0x7f0000000480)) close(0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000880), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000940)=""/96, 0xffffffffffffffdc}], 0x3}, 0x400002e1) sendmsg$FOU_CMD_ADD(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="ff08", @ANYBLOB="8a317eb14415fab892e03cf9bec0a9cac2d6986e338a3743fcc41fa4276465569c6a3e6d6afe8d372189d8b16bdae704e0cc5bbacd8326f1a4e261e41ee78f1fc7985cb0b363f74faa5c7c36ad1265eabc273856c309e0da228ad7d6ffb6d29c2bd28103b97d133bb13be39f83d991e601e8503b5e650898f29d7205c02a3dba9196da97af040fdbdcadce1c124206c1a59568962dee85f6efb1c6e26cfa1eac6f0ec6757ae78fb9dd1087ca6fd1e97ff7378ba0074effcf727b7b8e02d55c0c", @ANYRES64=r11, @ANYRES32=r13, @ANYRES64=r7], 0x34}, 0x1, 0x0, 0x0, 0x24008085}, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r14, 0x0, 0x8008000000010, &(0x7f0000000640)="00000000020001000003a90830332b35", 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000340)=@abs, 0x6e) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000480)={0x2, @in={{0x2, 0x4e24, @multicast1}}, 0x4e24}, &(0x7f0000000540)=0x90) 1m47.897097815s ago: executing program 0 (id=7583): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x48, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc, 0xe}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x48}}, 0x0) (fail_nth: 3) 1m47.837523223s ago: executing program 2 (id=7584): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x2, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x3, 0x6, @broadcast}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x60, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x0, 0x9, 0xfffc}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x38, 0xffffffffffffffff, &(0x7f0000000d40)=0x60) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6, @multicast}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="00000000004aae2f5c03000000000000850000000d000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000012c0], 0x0, 0x0, 0x0}, 0xc30) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000002e00)=0x1, 0x4) 1m47.632895895s ago: executing program 0 (id=7586): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) r3 = socket(0x23, 0x80805, 0x0) listen(r3, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x8002a000}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000100)={0x6, 'gretap0\x00', {0x3}, 0x8}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1m47.632180895s ago: executing program 3 (id=7587): r0 = socket(0x2d, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f00000001c0)=@generic={0x2d, "000000000000080000001900"}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001900000095000000000000000f70fdf01eb49ed9a0dcbac5099058ed650e74e0f8fabbab7b562d"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xfff1}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c810}, 0x20040084) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000900)=@filter={'filter\x00', 0xe, 0x2, 0x290, [0x0, 0x200000000280, 0x3, 0x2000000004e0, 0x0, 0x3], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r1]}, 0xa0) 1m47.401366034s ago: executing program 4 (id=7589): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x15, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) 1m47.341502673s ago: executing program 2 (id=7590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x5ae, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56e4f, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xff, 0x81}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000640)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000)=0x27ee, 0x4) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r10, 0x0, 0x16, &(0x7f0000000180)="e1", 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r9, &(0x7f0000000080)={&(0x7f00000000c0)={0x1d, r11}, 0x10, &(0x7f0000000100)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "f0b1c20000000004"}, 0x10}, 0x1, 0x0, 0x0, 0x2400c054}, 0x4000811) ioctl$sock_inet_SIOCADDRT(r8, 0x8935, &(0x7f00000015c0)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x63, 0x8000000000000005, 0xb5}) 1m47.212955769s ago: executing program 1 (id=7591): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto(r1, &(0x7f0000000180)="f6", 0xffa6, 0xd63a66976f7dfbe1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x101, 0x8000) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x4, 0x3) syz_emit_ethernet(0xab3, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"], 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5aa, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x9, 0x6, 0x14, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20, 0x20, 0xba, 0x3}}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000480)=0x1, 0x4) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) splice(r10, 0x0, r8, 0x0, 0x40000002008d, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x3, 0x6, 0x4, 0xc082, r5, 0x8, '\x00', r6, r7, 0x5, 0x4, 0x3, 0x4, @value=r8}, 0x50) 1m47.093356854s ago: executing program 3 (id=7592): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) socket$nl_route(0x10, 0x3, 0x0) unshare(0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x8, &(0x7f0000101ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000103000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000103040)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x800000e}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000103080)={0x0, 0x0, &(0x7f00001030c0)={&(0x7f0000103100)=ANY=[@ANYBLOB="1c00000003060102a018645100000000070c000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$TOKEN_CREATE(0x24, &(0x7f0000103140)={0x0, r3}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r4, &(0x7f0000103180)={0x1f, 0x0, @none, 0x7ff, 0x1}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00001031c0)={r4, r4, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000103280)={@any, 0xff, 0x5, 0x3, 0x800, 0x5, "8f1dc444b2a813bcfd8e57d84dc7115eec5fbeda733e52756349fd8d2c4fda878f0e54599180e4543cba2ef65d539ad3cd097ab0f432e66f1466ba52b445f33927335186bbab00507d36e8b17e8b3af68ca2e0d945c90c64f86ad7be6544128410589a95916675cc8006a544210f380098271a4f83f018722836306112e8b25b"}) bpf$PROG_LOAD(0x5, &(0x7f0000103340)={0x4, 0xe, &(0x7f0000103400)=ANY=[@ANYBLOB], &(0x7f0000103440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000103480)={0x0, 0xffffffff, 0x7}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00001034c0)={0x0, 0x0, &(0x7f0000103500)}, 0x811) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f00001035c0), &(0x7f0000103600), 0x2000000}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000103640)='./cgroup/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000103680)={0x0, 0x0, &(0x7f00001036c0)={&(0x7f0000103700)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000103780)={'wpan0\x00'}) 1m46.927784552s ago: executing program 4 (id=7593): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000980)={r0, &(0x7f0000000880)='},+\x00', 0x105100, &(0x7f00000008c0)={@_ha_fsid={[0x1, 0x7]}, {0xe10d, 0xfff8, 0x7a8, 0x7fffffffffffffff}}, 0x3, &(0x7f0000000900), &(0x7f0000000940)=0xe}) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f00000009c0)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r5 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d00030000003800350073797a5f01250001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', r6, r2, 0x0, 0x4}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x0, 0x8, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x14000085}, 0x20040000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000380)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00 ', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0x1, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x9}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x8c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x6, 0x0, 0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x47a}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x80000001}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x18, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0x4, 0xae}]}, 0x18}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) 1m46.740269564s ago: executing program 1 (id=7594): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000002c0)="f5", 0x1) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x200}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r3 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f0000000280)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfe}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWSET={0x15c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x108, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0xfc, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x47001874}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b29}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3849}]}]}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6f}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0xa4, 0x5, 0xa, 0xc00, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x54f}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_DELTABLE={0x68, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x42, 0x2, 0x1, 0x0, 0x6}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3f0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf254f00000008000300", @ANYRES32=r7, @ANYBLOB="afa550177c9d4bd0e7776d0871634c2af1bbfe91537df9766efd6d55ced0e283c913b6a66e80243cf5a5ce4b4cd1e5e22948d2af7fd04e1c11ccb8d9a688e18c2ffd2dbcb0a9c55eda4a66e44f2f3ab2b3636843242b811b94643cd11bc2e685ac42d27f923f44818de6de703e658aa08665a272912aab88"], 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x882) 1m46.088576588s ago: executing program 4 (id=7595): socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x44, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) (fail_nth: 5) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r4}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x8, r4, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000060000fac50000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000680)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f00000006c0)="4c00000011001500001300020000160002000000200000", 0x17) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r10 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmmsg$inet(r10, &(0x7f00000005c0)=[{{&(0x7f0000000640)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x40800) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r11, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r13 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r5, &(0x7f0000000580)={0x90000001}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r8}, &(0x7f0000000480)=0x2, &(0x7f00000004c0)=r5}, 0x20) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe200000000000000000000000000001fe800000000000000000000000000002"], 0x64) 1m45.867122779s ago: executing program 1 (id=7596): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="200000000000000084000000020000000a000400240000000b000002a9891c447f9731850c0e021b7aa3292b392fa15df21d95678716394abc9a519e28cf779b6ee9981f714ff321dfaaef2b55f6bb85d9db76ea", @ANYRES32], 0x20, 0x2400e044}, 0x2000000) 1m45.808704468s ago: executing program 2 (id=7597): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="54000000020601020000000000000000050000000900020073797a32000000000500010007000000050005000a0000000c00078008001240fffffffa05000400000000000d000300686173683a6e6574", @ANYRESHEX=r1, @ANYRES16=r1], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r2, 0x84, 0x74, 0xfffffffffffffffe, &(0x7f0000000140)=0x41) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r3 = epoll_create(0x3) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000580)) read(r4, &(0x7f0000001080)=""/4096, 0x1000) write$cgroup_int(r5, &(0x7f0000002080)=0x4, 0xfffffe7d) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000003c0)=@req={0x5, 0xd, 0x1, 0x74df}, 0x10) sendmmsg(r7, &(0x7f0000000180)=[{{&(0x7f00000001c0)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="ff76a6b09e8d2d1714a15091ed9fc6356722934bbeef1e9afd2bb3905d01c99cb07074a2e42d7198fa15f4e691043c499910412b5021ca16e88becc0eff496ddfeb3745a85d0defabade99019b2e3fc30d0783fc765b01772e0b53ab21e1902c7ad69d4afed5ec1d9844b442def56b0bd968dd45ac8a25de"], 0x10}}], 0x1, 0x14) accept(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000300)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f0000000340)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl(r9, 0x40047438, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz1\x00', 0x200002, 0x0) unshare(0x600) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000005c0)={0x40000000, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000200"], 0x70}}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r9, 0x40047435, 0x0) sendmsg$nl_route(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000400)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) sendmsg$nl_route(r11, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x18800}, 0xc0) 1m45.373947035s ago: executing program 1 (id=7598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0xa, 0x9cff) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000100)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000800800000000000100001c1122334400080000000500050000000500030008"], 0x4a) 1m45.326258863s ago: executing program 3 (id=7599): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c010000100001000000000000000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000002000000010000000000008000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000200020000000000000000001c0017000000000000000000000000000000000000000000040000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001"], 0x15c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000140081044e81f782db46b904021d000025000000040000a118000200ff02000100000e1208000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc000000000000f0660080bb9ad809d5e1cace81b34113b0e3cd4032ecedb12d1d2eb0c0ed0bffa29954e5413f017f", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1m45.076278337s ago: executing program 3 (id=7600): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) close(r0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000780)=""/212, &(0x7f0000000880)=0xd4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000900)={'wlan0\x00', 0x1}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x1c, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0xc00, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r1, 0x0, 0x24000000) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="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", 0x132}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x334}], 0x1) r6 = socket(0x10, 0x803, 0x0) write(r6, &(0x7f0000000140)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c) recvmmsg$unix(r6, &(0x7f0000003500)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000003380)=[{&(0x7f0000000200)=""/66, 0x42}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000000500)=""/206, 0xce}, {&(0x7f0000000600)=""/191, 0xbf}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/173, 0xad}, {&(0x7f0000003180)=""/223, 0xdf}, {&(0x7f0000003280)=""/237, 0xed}], 0xa, &(0x7f0000003440)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x1, 0x10040, &(0x7f0000003540)) 1m45.027859351s ago: executing program 4 (id=7601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000006c000000160a01040000000000000000020000020900020073797a300000000028ff83da45f87a30000000004000038008000140000000002c000380140001007465616d5f736c6176655f300000000014000100766c616e3100000000000000000000000800024000000200140000001100010000000000000000000100000a"], 0xc0}}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000006c0)={0x2, &(0x7f0000000700)=[{0x30, 0x21, 0x40, 0xfffff000}, {0x6, 0x6, 0x7, 0x400000e8}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001c00070c002000ed79069a000000004002000000", @ANYRES32, @ANYBLOB="080010"], 0x3c}}, 0x20024090) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbdf25020000000900010005"], 0x34}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="1808000042000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc09000000000000450901003f2000009500000000000000b7020000feffffff7b9af8ff00000000b6090000000000107baaf0ff00000000bf2700000000000007080000fffdffffbfa40000000000000707000000ffffffc40700000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000020000008500000005000000b70000000000000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x7, 0x0) 1m44.850269826s ago: executing program 1 (id=7602): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0xf00, &(0x7f0000000100)="469dc2d34ae2b700000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m44.70627203s ago: executing program 3 (id=7603): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @initdev}, &(0x7f00000000c0)=0xc) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000140)='ethtool\x00', 0x420001, &(0x7f0000000240)={@align=0x1, {0x504, 0x1, 0x9, 0x5}}, 0x9e9, &(0x7f0000000280), &(0x7f00000002c0)=0x6}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x80000, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000300)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000380), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000480)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom$inet6(r0, &(0x7f00000004c0)=""/222, 0xde, 0x10100, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000005c0)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000600)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001600)=[{&(0x7f0000001680)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000001740)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000001800)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {0x0}, {&(0x7f00000018c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000026c0)=0xffff1884, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000002700), 0xc0802, 0x0) epoll_create(0x8000a67) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x15, &(0x7f0000002780)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000005200bf952cbd7000fbdbdf25f5ff0000"], 0x14}, 0x1, 0x0, 0x0, 0xc8}, 0x0) close(0x3) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0xffffffc3, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @empty, 0x9}, 0x1c) sendmmsg(r2, &(0x7f0000000180)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x4000000) 1m44.570683999s ago: executing program 0 (id=7604): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="850000002e000000870a00000000000025000000000000009500000d0000000036e0fe9d628154331435e9e6ce79c9df0dafb05b570f3a5e216269570953ed4e8ef92cbd5659aa3327828105ea37cf394d0e22a71a3e05b26e86c93f9733f22bf8c4189a9b2b1351c0a4ea63d3371870918db0dad0aa5c36c1173f"], &(0x7f0000000740)='syzkaller\x00', 0x4, 0x1a, &(0x7f0000000780)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd01, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x23) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x6}, 0xb7, 0x6, 0x4, 0x9, 0x9, 'syz1\x00', "79049bc4a0e6bff8a6a34d3dab976c165454e3a3330d5dbf789e52e151b75b9c", "d501ea5f3788129783a1796f25d7e6ceea6d78d366fdfec2c496cf7b25efcfd2", [{0x2, 0x3, {0x3, 0x38}}, {0x2, 0x81, {0x3, 0x3}}, {0x3, 0xfe8f, {0x2, 0xffffcdd7}}, {0xfffe, 0x101, {0x2, 0xa5b}}, {0xa8c3, 0x8, {0x2, 0x4}}, {0x8, 0x0, {0x1, 0x8}}, {0x6, 0x8, {0x1, 0x2}}, {0x6, 0x5, {0x1, 0x1ff}}, {0x9, 0x100, {0x2, 0x4}}, {0xa, 0x401, {0x0, 0x5}}, {0xd, 0x90, {0x2, 0x1b8c}}, {0x1000, 0x4e8, {0x2, 0x8001}}, {0x0, 0x2, {0x3, 0xf804}}, {0x7, 0xffff, {0x1, 0x6}}, {0x7, 0x10, {0x1, 0xa3d6}}, {0x9, 0xb0, {0x3, 0x7fffffff}}, {0xcdb0, 0x5, {0x2, 0xe88}}, {0x2, 0xe8, {0x1, 0x5}}, {0x7, 0x1a77, {0x2, 0xa}}, {0x3, 0xc7f, {0x8030cc2437013a5a, 0x8001}}, {0x5, 0x1, {0x3, 0x3}}, {0x1, 0x2, {0x2, 0x2}}, {0x8, 0x2, {0x1, 0x7fffffff}}, {0x4, 0x100, {0x3}}, {0xf80c, 0x9, {0x1, 0xffffff10}}, {0x5, 0x53, {0x1, 0x5}}, {0x0, 0x6, {0x1, 0x412}}, {0xd, 0x7, {0x3, 0x8}}, {0x9, 0x5, {0x1, 0x6}}, {0x5, 0xf1d6, {0x3, 0x401}}, {0x7, 0x6, {0x2, 0x740}}, {0x4, 0x2, {0x2, 0x4}}, {0x6, 0x4, {0x2, 0xfffffffe}}, {0x2, 0x7f, {0x0, 0x31c29da4}}, {0x5, 0x6, {0x2, 0x8000}}, {0x4, 0x3, {0x0, 0xae91}}, {0x3, 0x0, {0x3, 0xff}}, {0x111, 0xe, {0x3, 0x7ff}}, {0x6, 0x80, {0x0, 0x5}}, {0x0, 0x8, {0x1, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000c0}, 0x24000840) bind$inet6(r3, &(0x7f0000000980)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r3, &(0x7f00000009c0)={0xa, 0x4e22, 0x100, @empty, 0x10001}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000a00)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r5, &(0x7f0000000a40)={0xa, 0x4e22}, 0x1c) listen(r3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000100)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000500)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000840)={0x43, {{0x2, 0x4e20, @remote}}, 0x1, 0x1, [{{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}}]}, 0x110) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000640)={'IDLETIMER\x00'}, &(0x7f0000000680)=0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000440)=0x2, 0x4) pselect6(0x40, &(0x7f00000017c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000001800)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m44.516787993s ago: executing program 1 (id=7605): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000980)={r0, &(0x7f0000000880)='},+\x00', 0x105100, &(0x7f00000008c0)={@_ha_fsid={[0x1, 0x7]}, {0xe10d, 0xfff8, 0x7a8, 0x7fffffffffffffff}}, 0x3, &(0x7f0000000900), &(0x7f0000000940)=0xe}) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f00000009c0)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r5 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d00030000003800350073797a5f01250001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', r6, r2, 0x0, 0x4}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x0, 0x8, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x14000085}, 0x20040000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000380)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00 ', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0x1, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x9}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x8c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x6, 0x0, 0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x47a}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x80000001}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x18, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0x4, 0xae}]}, 0x18}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) 1m44.469400382s ago: executing program 2 (id=7606): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60, 0x180800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, r2, 0xffffffffffffffff, 0x1, 0x82, 0x8, "423664cf02990bca432b6af994531f7619760866f2fdab472b0cbe45ee2302d881880ad2aa8fba29b6aa7e328aa64536ca0a42203f40583c284259c1da786f", 0x1e}, 0x60) sendmmsg$unix(r0, &(0x7f0000000300), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040080000000001300020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c00020000002d"], 0xbc}, 0x1, 0x0, 0x0, 0x44000055}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32], 0x1c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000003a00010000000000000000000a0008000000010018000000"], 0x1c}}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000440)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r7, 0x89f8, &(0x7f0000000480)) close(0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000880), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000940)=""/96, 0xffffffffffffffdc}], 0x3}, 0x400002e1) sendmsg$FOU_CMD_ADD(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="ff08", @ANYBLOB="8a317eb14415fab892e03cf9bec0a9cac2d6986e338a3743fcc41fa4276465569c6a3e6d6afe8d372189d8b16bdae704e0cc5bbacd8326f1a4e261e41ee78f1fc7985cb0b363f74faa5c7c36ad1265eabc273856c309e0da228ad7d6ffb6d29c2bd28103b97d133bb13be39f83d991e601e8503b5e650898f29d7205c02a3dba9196da97af040fdbdcadce1c124206c1a59568962dee85f6efb1c6e26cfa1eac6f0ec6757ae78fb9dd1087ca6fd1e97ff7378ba0074effcf727b7b8e02d55c0c", @ANYRES64=r10, @ANYRES32=r12, @ANYRES64=r6], 0x34}, 0x1, 0x0, 0x0, 0x24008085}, 0x0) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r13, 0x0, 0x8008000000010, &(0x7f0000000640)="00000000020001000003a90830332b35", 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000480)={0x2, @in={{0x2, 0x4e24, @multicast1}}, 0x4e24}, &(0x7f0000000540)=0x90) 1m21.988262499s ago: executing program 32 (id=7604): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="850000002e000000870a00000000000025000000000000009500000d0000000036e0fe9d628154331435e9e6ce79c9df0dafb05b570f3a5e216269570953ed4e8ef92cbd5659aa3327828105ea37cf394d0e22a71a3e05b26e86c93f9733f22bf8c4189a9b2b1351c0a4ea63d3371870918db0dad0aa5c36c1173f"], &(0x7f0000000740)='syzkaller\x00', 0x4, 0x1a, &(0x7f0000000780)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd01, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x23) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x6}, 0xb7, 0x6, 0x4, 0x9, 0x9, 'syz1\x00', "79049bc4a0e6bff8a6a34d3dab976c165454e3a3330d5dbf789e52e151b75b9c", "d501ea5f3788129783a1796f25d7e6ceea6d78d366fdfec2c496cf7b25efcfd2", [{0x2, 0x3, {0x3, 0x38}}, {0x2, 0x81, {0x3, 0x3}}, {0x3, 0xfe8f, {0x2, 0xffffcdd7}}, {0xfffe, 0x101, {0x2, 0xa5b}}, {0xa8c3, 0x8, {0x2, 0x4}}, {0x8, 0x0, {0x1, 0x8}}, {0x6, 0x8, {0x1, 0x2}}, {0x6, 0x5, {0x1, 0x1ff}}, {0x9, 0x100, {0x2, 0x4}}, {0xa, 0x401, {0x0, 0x5}}, {0xd, 0x90, {0x2, 0x1b8c}}, {0x1000, 0x4e8, {0x2, 0x8001}}, {0x0, 0x2, {0x3, 0xf804}}, {0x7, 0xffff, {0x1, 0x6}}, {0x7, 0x10, {0x1, 0xa3d6}}, {0x9, 0xb0, {0x3, 0x7fffffff}}, {0xcdb0, 0x5, {0x2, 0xe88}}, {0x2, 0xe8, {0x1, 0x5}}, {0x7, 0x1a77, {0x2, 0xa}}, {0x3, 0xc7f, {0x8030cc2437013a5a, 0x8001}}, {0x5, 0x1, {0x3, 0x3}}, {0x1, 0x2, {0x2, 0x2}}, {0x8, 0x2, {0x1, 0x7fffffff}}, {0x4, 0x100, {0x3}}, {0xf80c, 0x9, {0x1, 0xffffff10}}, {0x5, 0x53, {0x1, 0x5}}, {0x0, 0x6, {0x1, 0x412}}, {0xd, 0x7, {0x3, 0x8}}, {0x9, 0x5, {0x1, 0x6}}, {0x5, 0xf1d6, {0x3, 0x401}}, {0x7, 0x6, {0x2, 0x740}}, {0x4, 0x2, {0x2, 0x4}}, {0x6, 0x4, {0x2, 0xfffffffe}}, {0x2, 0x7f, {0x0, 0x31c29da4}}, {0x5, 0x6, {0x2, 0x8000}}, {0x4, 0x3, {0x0, 0xae91}}, {0x3, 0x0, {0x3, 0xff}}, {0x111, 0xe, {0x3, 0x7ff}}, {0x6, 0x80, {0x0, 0x5}}, {0x0, 0x8, {0x1, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000c0}, 0x24000840) bind$inet6(r3, &(0x7f0000000980)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r3, &(0x7f00000009c0)={0xa, 0x4e22, 0x100, @empty, 0x10001}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000a00)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r5, &(0x7f0000000a40)={0xa, 0x4e22}, 0x1c) listen(r3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000100)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000500)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000840)={0x43, {{0x2, 0x4e20, @remote}}, 0x1, 0x1, [{{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}}]}, 0x110) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000640)={'IDLETIMER\x00'}, &(0x7f0000000680)=0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000440)=0x2, 0x4) pselect6(0x40, &(0x7f00000017c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000001800)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 33 (id=7605): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000980)={r0, &(0x7f0000000880)='},+\x00', 0x105100, &(0x7f00000008c0)={@_ha_fsid={[0x1, 0x7]}, {0xe10d, 0xfff8, 0x7a8, 0x7fffffffffffffff}}, 0x3, &(0x7f0000000900), &(0x7f0000000940)=0xe}) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f00000009c0)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r5 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d00030000003800350073797a5f01250001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', r6, r2, 0x0, 0x4}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x0, 0x8, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x14000085}, 0x20040000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000380)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00 ', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0x1, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x9}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x8c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x6, 0x0, 0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x47a}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x80000001}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x18, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0x4, 0xae}]}, 0x18}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) kernel console output (not intermixed with test programs): ot active [ 1388.312717][T30820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.312740][T30820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.312773][T30820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.624821][T30820] hsr_slave_0: entered promiscuous mode [ 1388.642695][T30820] hsr_slave_1: entered promiscuous mode [ 1388.658295][T30820] debugfs: 'hsr0' already exists in 'hsr' [ 1388.658323][T30820] Cannot create hsr debugfs directory [ 1388.970817][T30991] netlink: 'syz.2.7201': attribute type 1 has an invalid length. [ 1389.039264][T30993] sctp: [Deprecated]: syz.2.7201 (pid 30993) Use of int in max_burst socket option. [ 1389.039264][T30993] Use struct sctp_assoc_value instead [ 1389.088330][T30993] siw: device registration error -23 [ 1389.586558][T31007] FAULT_INJECTION: forcing a failure. [ 1389.586558][T31007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1389.586589][T31007] CPU: 0 UID: 0 PID: 31007 Comm: syz.1.7205 Not tainted syzkaller #0 PREEMPT(full) [ 1389.586611][T31007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1389.586625][T31007] Call Trace: [ 1389.586633][T31007] [ 1389.586641][T31007] dump_stack_lvl+0xe8/0x150 [ 1389.586677][T31007] should_fail_ex+0x3eb/0x540 [ 1389.586709][T31007] _copy_from_iter+0x1d3/0x1680 [ 1389.586731][T31007] ? __alloc_skb+0x27a/0x7a0 [ 1389.586763][T31007] ? __alloc_skb+0x27a/0x7a0 [ 1389.586795][T31007] ? __alloc_skb+0x27a/0x7a0 [ 1389.586827][T31007] ? __pfx__copy_from_iter+0x10/0x10 [ 1389.586846][T31007] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 1389.586867][T31007] ? __alloc_skb+0x27a/0x7a0 [ 1389.586893][T31007] ? __alloc_skb+0x27a/0x7a0 [ 1389.586928][T31007] ? netlink_sendmsg+0x64f/0xb20 [ 1389.586957][T31007] ? skb_put+0x112/0x210 [ 1389.586978][T31007] netlink_sendmsg+0x6bb/0xb20 [ 1389.587011][T31007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1389.587044][T31007] ? aa_sock_msg_perm+0x144/0x210 [ 1389.587070][T31007] ? apparmor_socket_sendmsg+0x98/0x360 [ 1389.587102][T31007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1389.587131][T31007] sock_sendmsg_nosec+0x14e/0x190 [ 1389.587162][T31007] ____sys_sendmsg+0x54e/0x850 [ 1389.587188][T31007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1389.587218][T31007] ? import_iovec+0x73/0xa0 [ 1389.587248][T31007] ___sys_sendmsg+0x2a5/0x360 [ 1389.587270][T31007] ? __lock_acquire+0x747/0x2de0 [ 1389.587308][T31007] ? __pfx____sys_sendmsg+0x10/0x10 [ 1389.587365][T31007] ? __fget_files+0x3a2/0x420 [ 1389.587389][T31007] ? __fget_files+0x2a/0x420 [ 1389.587419][T31007] __x64_sys_sendmsg+0x1b1/0x290 [ 1389.587445][T31007] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1389.587489][T31007] do_syscall_64+0x166/0x520 [ 1389.587513][T31007] ? trace_irq_disable+0x3b/0x140 [ 1389.587544][T31007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.587565][T31007] ? clear_bhb_loop+0x70/0xc0 [ 1389.587590][T31007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.587611][T31007] RIP: 0033:0x7f9fc239fb19 [ 1389.587632][T31007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1389.587652][T31007] RSP: 002b:00007f9fc32e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1389.587676][T31007] RAX: ffffffffffffffda RBX: 00007f9fc2626090 RCX: 00007f9fc239fb19 [ 1389.587692][T31007] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000004 [ 1389.587706][T31007] RBP: 00007f9fc32e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1389.587720][T31007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1389.587734][T31007] R13: 00007f9fc2626128 R14: 00007f9fc2626090 R15: 00007ffe3b55ea48 [ 1389.587771][T31007] [ 1390.123981][T31013] ip6gre1: entered promiscuous mode [ 1390.124008][T31013] ip6gre1: entered allmulticast mode [ 1390.647295][T31023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7212'. [ 1390.651125][T31020] sock: sock_timestamping_bind_phc: sock not bind to device [ 1390.811304][T31030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7212'. [ 1390.949293][T31034] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7213'. [ 1390.958168][T31034] netlink: 136 bytes leftover after parsing attributes in process `syz.2.7213'. [ 1391.569539][T31039] syzkaller0: entered promiscuous mode [ 1391.569569][T31039] syzkaller0: entered allmulticast mode [ 1392.434906][T30820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1392.459670][T30820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1392.469579][T30820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1392.552955][T30820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1392.568035][T30820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1392.610133][T30820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1392.660763][T30820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1392.742180][T30820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1392.861767][T31082] nbd: socks must be embedded in a SOCK_ITEM attr [ 1392.862739][T31082] block nbd8: shutting down sockets [ 1392.964241][T31080] @ÿ: renamed from veth0_vlan (while UP) [ 1393.356717][T30820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.509581][T30820] 8021q: adding VLAN 0 to HW filter on device team0 [ 1393.547120][T24409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.547240][T24409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.627183][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.627303][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1393.808121][T31099] netlink: 'syz.0.7225': attribute type 1 has an invalid length. [ 1394.453720][T31106] lo: entered promiscuous mode [ 1394.478421][T31106] tunl0: entered promiscuous mode [ 1394.492749][T31106] gre0: entered promiscuous mode [ 1394.529073][T31106] gretap0: entered promiscuous mode [ 1394.685731][T31106] erspan0: entered promiscuous mode [ 1394.801748][T31106] ip_vti0: entered promiscuous mode [ 1394.884145][T31106] ip6_vti0: entered promiscuous mode [ 1394.923672][T31106] sit0: entered promiscuous mode [ 1394.942918][T31106] ip6tnl0: entered promiscuous mode [ 1394.965825][T31106] ip6gre0: entered promiscuous mode [ 1394.985875][T31106] syz_tun: entered promiscuous mode [ 1394.989690][T31106] ip6gretap0: entered promiscuous mode [ 1395.017031][T31106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.017693][T31106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.020554][T31106] bridge0: entered promiscuous mode [ 1395.054445][T31106] vcan0: entered promiscuous mode [ 1395.088433][T31106] bond0: entered promiscuous mode [ 1395.088462][T31106] bond_slave_0: entered promiscuous mode [ 1395.088690][T31106] bond_slave_1: entered promiscuous mode [ 1395.117274][T31106] team0: entered promiscuous mode [ 1395.117302][T31106] team_slave_0: entered promiscuous mode [ 1395.117523][T31106] team_slave_1: entered promiscuous mode [ 1395.146749][T31106] dummy0: entered promiscuous mode [ 1395.163594][T31106] nlmon0: entered promiscuous mode [ 1395.286405][T31106] batadv0: entered promiscuous mode [ 1395.289308][T31106] vxcan0: entered promiscuous mode [ 1395.290399][T31106] vxcan1: entered promiscuous mode [ 1395.308941][T31106] veth0: entered promiscuous mode [ 1395.317540][T31106] veth1: entered promiscuous mode [ 1395.328417][T31106] wg0: entered promiscuous mode [ 1395.342449][T31106] wg1: entered promiscuous mode [ 1395.348739][T31106] wg2: entered promiscuous mode [ 1395.368807][T31106] veth0_to_bridge: entered promiscuous mode [ 1395.386281][T31106] veth1_to_bridge: entered promiscuous mode [ 1395.404035][T31106] veth0_to_bond: entered promiscuous mode [ 1395.407514][T31106] veth1_to_bond: entered promiscuous mode [ 1395.426676][T31106] veth0_to_team: entered promiscuous mode [ 1395.439151][T31106] veth1_to_team: entered promiscuous mode [ 1395.454929][T31106] veth0_to_batadv: entered promiscuous mode [ 1395.459152][T31106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1395.459217][T31106] batadv_slave_0: entered promiscuous mode [ 1395.483203][T31106] veth1_to_batadv: entered promiscuous mode [ 1395.485748][T31106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1395.485805][T31106] batadv_slave_1: entered promiscuous mode [ 1395.488501][T31106] xfrm0: entered promiscuous mode [ 1395.490637][T31106] veth0_to_hsr: entered promiscuous mode [ 1395.529577][T31106] veth1_to_hsr: entered promiscuous mode [ 1395.543950][T31106] hsr0: entered promiscuous mode [ 1395.546341][T31106] veth1_virt_wifi: entered promiscuous mode [ 1395.548621][T31106] veth0_virt_wifi: entered promiscuous mode [ 1395.586731][T31106] virt_wifi0: entered promiscuous mode [ 1395.618582][T31106] vlan0: entered promiscuous mode [ 1395.632748][T31106] vlan1: entered promiscuous mode [ 1395.638615][T31106] macvlan0: entered promiscuous mode [ 1395.672852][T31106] macvlan1: entered promiscuous mode [ 1395.677462][T31106] ipvlan0: entered promiscuous mode [ 1395.695597][T31106] ipvlan1: entered promiscuous mode [ 1395.826735][T31106] macvtap0: entered promiscuous mode [ 1395.831010][T31106] macsec0: entered promiscuous mode [ 1395.851860][T31106] geneve0: entered promiscuous mode [ 1395.858189][T31106] geneve1: entered promiscuous mode [ 1395.895513][T31106] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1395.943707][T31106] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 1395.971200][T31106] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 1395.990740][T31106] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 1396.050515][T31106] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode [ 1396.121233][T31106] mac80211_hwsim hwsim47 wlan1: entered promiscuous mode [ 1396.162363][T31106] bond1: entered promiscuous mode [ 1396.162595][T31106] bridge1: entered promiscuous mode [ 1396.189578][T31106] wireguard0: entered promiscuous mode [ 1396.198380][T31106] syztnl1: entered promiscuous mode [ 1396.208257][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.208746][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.209114][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.221476][ T3350] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.312696][T31100] hsr0 speed is unknown, defaulting to 1000 [ 1396.956579][T31122] xt_hashlimit: size too large, truncated to 1048576 [ 1397.027219][T31120] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7231'. [ 1397.102970][T31120] syzkaller1: entered promiscuous mode [ 1397.103232][T31120] syzkaller1: entered allmulticast mode [ 1397.188220][T31131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7232'. [ 1397.245918][T31131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7232'. [ 1397.537333][T31124] veth3: entered allmulticast mode [ 1398.265770][T31145] block nbd0: reconnected socket [ 1398.267977][T17232] block nbd0: Receive control failed (result -32) [ 1398.369139][T30820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1398.489148][T30820] veth0_vlan: entered promiscuous mode [ 1398.509769][T31151] netlink: 'syz.1.7237': attribute type 1 has an invalid length. [ 1398.527622][T30820] veth1_vlan: entered promiscuous mode [ 1398.629699][T30820] veth0_macvtap: entered promiscuous mode [ 1398.675382][T30820] veth1_macvtap: entered promiscuous mode [ 1398.843383][T30820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1398.883765][T30820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1399.031567][ T141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.031629][ T141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.031669][ T141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.031706][ T141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.344289][T31166] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1399.425071][T24418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.425099][T24418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1399.484146][T31171] tap0: tun_chr_ioctl cmd 2147767506 [ 1399.484723][T31171] tap0: tun_chr_ioctl cmd 21731 [ 1399.878523][ T3350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.878549][ T3350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.323020][T31180] FAULT_INJECTION: forcing a failure. [ 1400.323020][T31180] name failslab, interval 1, probability 0, space 0, times 0 [ 1400.323056][T31180] CPU: 0 UID: 0 PID: 31180 Comm: syz.1.7246 Not tainted syzkaller #0 PREEMPT(full) [ 1400.323082][T31180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1400.323096][T31180] Call Trace: [ 1400.323106][T31180] [ 1400.323115][T31180] dump_stack_lvl+0xe8/0x150 [ 1400.323157][T31180] should_fail_ex+0x3eb/0x540 [ 1400.323192][T31180] should_failslab+0xa8/0x100 [ 1400.323230][T31180] __kmalloc_cache_noprof+0x9e/0x600 [ 1400.323259][T31180] ? __pfx___mutex_lock+0x10/0x10 [ 1400.323288][T31180] ? genl_start+0x1c9/0x6d0 [ 1400.323312][T31180] ? genl_start+0x1c9/0x6d0 [ 1400.323345][T31180] genl_start+0x1c9/0x6d0 [ 1400.323377][T31180] __netlink_dump_start+0x442/0x7b0 [ 1400.323418][T31180] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1400.323448][T31180] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1400.323474][T31180] ? genl_get_cmd+0x82f/0x960 [ 1400.323513][T31180] ? __pfx_genl_start+0x10/0x10 [ 1400.323536][T31180] ? __pfx_genl_dumpit+0x10/0x10 [ 1400.323559][T31180] ? __pfx_genl_done+0x10/0x10 [ 1400.323602][T31180] genl_rcv_msg+0x5e1/0x7a0 [ 1400.323636][T31180] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1400.323662][T31180] ? __pfx_nl80211_dump_scan+0x10/0x10 [ 1400.323713][T31180] netlink_rcv_skb+0x226/0x4a0 [ 1400.323748][T31180] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1400.323777][T31180] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1400.323829][T31180] ? down_read+0x2b9/0x320 [ 1400.323865][T31180] genl_rcv+0x28/0x40 [ 1400.323889][T31180] netlink_unicast+0x8ef/0xa80 [ 1400.323938][T31180] netlink_sendmsg+0x7f0/0xb20 [ 1400.323978][T31180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1400.324015][T31180] ? aa_sock_msg_perm+0x144/0x210 [ 1400.324043][T31180] ? apparmor_socket_sendmsg+0x98/0x360 [ 1400.324079][T31180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1400.324111][T31180] sock_sendmsg_nosec+0x14e/0x190 [ 1400.324146][T31180] ____sys_sendmsg+0x54e/0x850 [ 1400.324179][T31180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1400.324215][T31180] ? import_iovec+0x73/0xa0 [ 1400.324248][T31180] ___sys_sendmsg+0x2a5/0x360 [ 1400.324271][T31180] ? __lock_acquire+0x747/0x2de0 [ 1400.324307][T31180] ? __pfx____sys_sendmsg+0x10/0x10 [ 1400.324374][T31180] ? __fget_files+0x3a2/0x420 [ 1400.324402][T31180] ? __fget_files+0x2a/0x420 [ 1400.324441][T31180] __x64_sys_sendmsg+0x1b1/0x290 [ 1400.324469][T31180] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1400.324526][T31180] do_syscall_64+0x166/0x520 [ 1400.324550][T31180] ? trace_irq_disable+0x3b/0x140 [ 1400.324579][T31180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.324601][T31180] ? clear_bhb_loop+0x70/0xc0 [ 1400.324630][T31180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.324653][T31180] RIP: 0033:0x7f9fc239fb19 [ 1400.324676][T31180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1400.324696][T31180] RSP: 002b:00007f9fc3307028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1400.324722][T31180] RAX: ffffffffffffffda RBX: 00007f9fc2625fa0 RCX: 00007f9fc239fb19 [ 1400.324739][T31180] RDX: 0000000000044000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1400.324755][T31180] RBP: 00007f9fc3307090 R08: 0000000000000000 R09: 0000000000000000 [ 1400.324768][T31180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1400.324782][T31180] R13: 00007f9fc2626038 R14: 00007f9fc2625fa0 R15: 00007ffe3b55ea48 [ 1400.324817][T31180] [ 1400.929937][T31183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7247'. [ 1400.962956][T31183] bridge0: port 3(veth0) entered blocking state [ 1400.963081][T31183] bridge0: port 3(veth0) entered disabled state [ 1400.963292][T31183] veth0: entered allmulticast mode [ 1400.967351][T31183] veth0: entered promiscuous mode [ 1400.968088][T31183] bridge0: port 3(veth0) entered blocking state [ 1400.968210][T31183] bridge0: port 3(veth0) entered forwarding state [ 1401.038358][T31185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7247'. [ 1401.083183][T31188] FAULT_INJECTION: forcing a failure. [ 1401.083183][T31188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1401.083216][T31188] CPU: 0 UID: 0 PID: 31188 Comm: syz.0.7250 Not tainted syzkaller #0 PREEMPT(full) [ 1401.083242][T31188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1401.083256][T31188] Call Trace: [ 1401.083265][T31188] [ 1401.083275][T31188] dump_stack_lvl+0xe8/0x150 [ 1401.083317][T31188] should_fail_ex+0x3eb/0x540 [ 1401.083351][T31188] _copy_from_user+0x2d/0xb0 [ 1401.083383][T31188] do_replace+0x11a/0x470 [ 1401.083425][T31188] ? __pfx_do_replace+0x10/0x10 [ 1401.083468][T31188] ? bpf_lsm_capable+0x9/0x20 [ 1401.083488][T31188] ? security_capable+0x7e/0x2c0 [ 1401.083528][T31188] do_ebt_set_ctl+0x2fb/0x1020 [ 1401.083563][T31188] ? __lock_acquire+0x747/0x2de0 [ 1401.083593][T31188] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 1401.083629][T31188] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 1401.083671][T31188] ? ip4_datagram_release_cb+0x976/0xbe0 [ 1401.083712][T31188] ? __mutex_trylock_common+0x15f/0x270 [ 1401.083750][T31188] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1401.083788][T31188] ? rcu_is_watching+0x16/0xb0 [ 1401.083822][T31188] ? trace_contention_end+0x3d/0x140 [ 1401.083868][T31188] ? nf_setsockopt+0x221/0x290 [ 1401.083901][T31188] ? __mutex_unlock_slowpath+0x731/0x900 [ 1401.083937][T31188] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1401.083981][T31188] nf_setsockopt+0x26f/0x290 [ 1401.084011][T31188] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1401.084047][T31188] do_sock_setsockopt+0x17c/0x1b0 [ 1401.084076][T31188] __x64_sys_setsockopt+0x13d/0x1b0 [ 1401.084105][T31188] do_syscall_64+0x166/0x520 [ 1401.084131][T31188] ? trace_irq_disable+0x3b/0x140 [ 1401.084162][T31188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.084185][T31188] ? clear_bhb_loop+0x70/0xc0 [ 1401.084213][T31188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.084236][T31188] RIP: 0033:0x7f663779fb19 [ 1401.084258][T31188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1401.084278][T31188] RSP: 002b:00007f6638586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1401.084311][T31188] RAX: ffffffffffffffda RBX: 00007f6637a25fa0 RCX: 00007f663779fb19 [ 1401.084329][T31188] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 1401.084343][T31188] RBP: 00007f6638586090 R08: 0000000000000308 R09: 0000000000000000 [ 1401.084357][T31188] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000001 [ 1401.084372][T31188] R13: 00007f6637a26038 R14: 00007f6637a25fa0 R15: 00007ffebbdf0418 [ 1401.084409][T31188] [ 1401.541225][T31191] netlink: 'syz.2.7249': attribute type 1 has an invalid length. [ 1401.793935][T31197] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7251'. [ 1401.838025][T31183] bridge0: port 3(veth0) entered disabled state [ 1401.838243][T31183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.838931][T31183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.082812][T31183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1403.117831][T31183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1403.622190][T24409] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.623866][ T9732] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.623916][ T9732] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.623959][ T9732] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.266143][T31223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7260'. [ 1404.346473][T31228] xt_ipcomp: unknown flags 1D [ 1404.462572][T31233] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7261'. [ 1404.462611][T31233] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1405.065250][T31243] netlink: 'syz.2.7265': attribute type 1 has an invalid length. [ 1405.665311][T31253] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7268'. [ 1405.668495][T31253] syzkaller1: entered promiscuous mode [ 1405.668519][T31253] syzkaller1: entered allmulticast mode [ 1406.152339][T31269] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7273'. [ 1406.377433][T31274] batman_adv: batadv0: Adding interface: syzkaller0 [ 1406.377456][T31274] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1406.377493][T31274] batman_adv: batadv0: Interface activated: syzkaller0 [ 1406.553659][T31257] tipc: Enabling of bearer rejected, media not registered [ 1406.684820][T31277] netlink: 'syz.0.7276': attribute type 1 has an invalid length. [ 1406.696631][T31277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7276'. [ 1406.897625][T31282] netlink: 'syz.0.7278': attribute type 1 has an invalid length. [ 1407.001928][T31282] sctp: [Deprecated]: syz.0.7278 (pid 31282) Use of int in max_burst socket option. [ 1407.001928][T31282] Use struct sctp_assoc_value instead [ 1407.415264][T31287] tipc: Enabling of bearer rejected, failed to enable media [ 1407.608138][T31271] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1407.677177][T31271] batman_adv: batadv0: Removing interface: syzkaller0 [ 1407.704897][T31296] tap0: tun_chr_ioctl cmd 2147767506 [ 1407.705605][T31294] tap0: tun_chr_ioctl cmd 21731 [ 1407.950940][T31307] tap0: tun_chr_ioctl cmd 1074025677 [ 1407.951080][T31307] tap0: linktype set to 805 [ 1408.003894][T31309] FAULT_INJECTION: forcing a failure. [ 1408.003894][T31309] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.003927][T31309] CPU: 1 UID: 0 PID: 31309 Comm: syz.3.7283 Not tainted syzkaller #0 PREEMPT(full) [ 1408.003954][T31309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1408.003968][T31309] Call Trace: [ 1408.003977][T31309] [ 1408.003987][T31309] dump_stack_lvl+0xe8/0x150 [ 1408.004030][T31309] should_fail_ex+0x3eb/0x540 [ 1408.004065][T31309] should_failslab+0xa8/0x100 [ 1408.004102][T31309] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 1408.004132][T31309] ? rcu_is_watching+0x16/0xb0 [ 1408.004165][T31309] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 1408.004195][T31309] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 1408.004229][T31309] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 1408.004263][T31309] krealloc_node_align_noprof+0x19a/0x390 [ 1408.004292][T31309] ? rcu_is_watching+0x16/0xb0 [ 1408.004332][T31309] kvrealloc_node_align_noprof+0x7b/0xf0 [ 1408.004374][T31309] add_expr+0x2fd/0x6e0 [ 1408.004402][T31309] ? bpf_init_scev+0x167/0x460 [ 1408.004435][T31309] bpf_init_scev+0x1c4/0x460 [ 1408.004463][T31309] bpf_check+0x2fd8/0x34e0 [ 1408.004501][T31309] ? ktime_get_with_offset+0x93/0x2d0 [ 1408.004534][T31309] ? ktime_get_with_offset+0x93/0x2d0 [ 1408.004568][T31309] ? __pfx_bpf_check+0x10/0x10 [ 1408.004596][T31309] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1408.004630][T31309] bpf_prog_load+0x14da/0x1c60 [ 1408.004669][T31309] ? __pfx_bpf_prog_load+0x10/0x10 [ 1408.004710][T31309] ? __might_fault+0xaf/0x130 [ 1408.004743][T31309] __sys_bpf+0xd86/0xe00 [ 1408.004775][T31309] ? __pfx___sys_bpf+0x10/0x10 [ 1408.004810][T31309] ? __fget_files+0x2a/0x420 [ 1408.004859][T31309] ? ksys_write+0x242/0x270 [ 1408.004893][T31309] ? __pfx_ksys_write+0x10/0x10 [ 1408.004931][T31309] __x64_sys_bpf+0xba/0xd0 [ 1408.004969][T31309] do_syscall_64+0x166/0x520 [ 1408.004997][T31309] ? trace_irq_disable+0x3b/0x140 [ 1408.005029][T31309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.005054][T31309] ? clear_bhb_loop+0x70/0xc0 [ 1408.005084][T31309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.005108][T31309] RIP: 0033:0x7fac6019fb19 [ 1408.005131][T31309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1408.005153][T31309] RSP: 002b:00007fac60fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1408.005179][T31309] RAX: ffffffffffffffda RBX: 00007fac60425fa0 RCX: 00007fac6019fb19 [ 1408.005196][T31309] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 1408.005212][T31309] RBP: 00007fac60fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1408.005228][T31309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1408.005243][T31309] R13: 00007fac60426038 R14: 00007fac60425fa0 R15: 00007ffdfa1f9898 [ 1408.005282][T31309] [ 1408.609713][T31322] tap0: tun_chr_ioctl cmd 1074025677 [ 1408.609851][T31322] tap0: linktype set to 805 [ 1409.150930][T31343] sctp: [Deprecated]: syz.3.7291 (pid 31343) Use of int in max_burst socket option. [ 1409.150930][T31343] Use struct sctp_assoc_value instead [ 1411.814998][T31339] tipc: Enabling of bearer rejected, failed to enable media [ 1411.836370][T31352] netlink: 'syz.2.7289': attribute type 2 has an invalid length. [ 1412.172972][T31365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7294'. [ 1412.243134][T31368] xt_hashlimit: size too large, truncated to 1048576 [ 1412.313011][T31375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7294'. [ 1412.456516][T31379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7295'. [ 1412.504670][T31379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7295'. [ 1412.505943][T31372] veth3: entered allmulticast mode [ 1412.672741][T31383] tap0: tun_chr_ioctl cmd 2147767506 [ 1412.673267][T31383] tap0: tun_chr_ioctl cmd 21731 [ 1413.227800][T31394] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7301'. [ 1413.242283][T17232] Bluetooth: hci5: connection err: -111 [ 1413.323753][T31403] netlink: 'syz.3.7305': attribute type 1 has an invalid length. [ 1413.347550][T31403] sctp: [Deprecated]: syz.3.7305 (pid 31403) Use of int in max_burst socket option. [ 1413.347550][T31403] Use struct sctp_assoc_value instead [ 1413.416123][T31398] batman_adv: batadv0: Adding interface: syzkaller0 [ 1413.416145][T31398] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1413.416182][T31398] batman_adv: batadv0: Interface activated: syzkaller0 [ 1413.467651][T31397] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1413.709380][T31397] batman_adv: batadv0: Removing interface: syzkaller0 [ 1413.824161][T31417] FAULT_INJECTION: forcing a failure. [ 1413.824161][T31417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1413.824200][T31417] CPU: 1 UID: 0 PID: 31417 Comm: syz.3.7308 Not tainted syzkaller #0 PREEMPT(full) [ 1413.824227][T31417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1413.824243][T31417] Call Trace: [ 1413.824253][T31417] [ 1413.824264][T31417] dump_stack_lvl+0xe8/0x150 [ 1413.824309][T31417] should_fail_ex+0x3eb/0x540 [ 1413.824345][T31417] _copy_from_iter+0x1d3/0x1680 [ 1413.824387][T31417] ? __pfx__copy_from_iter+0x10/0x10 [ 1413.824413][T31417] ? trace_rxrpc_txbuf+0x89/0x230 [ 1413.824449][T31417] ? rxrpc_alloc_data_txbuf+0x3b5/0x5a0 [ 1413.824491][T31417] rxrpc_send_data+0x10cf/0x2b70 [ 1413.824570][T31417] ? __pfx_rxrpc_send_data+0x10/0x10 [ 1413.824597][T31417] ? try_to_wake_up+0x8ce/0x14e0 [ 1413.824638][T31417] ? __pfx_default_wake_function+0x10/0x10 [ 1413.824682][T31417] ? rxrpc_new_client_call+0xf16/0x14f0 [ 1413.824728][T31417] ? trace_rxrpc_peer+0x82/0x200 [ 1413.824756][T31417] rxrpc_do_sendmsg+0x10c9/0x1260 [ 1413.824799][T31417] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 1413.824844][T31417] ? rxrpc_sendmsg+0x4ee/0x6b0 [ 1413.824880][T31417] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 1413.824909][T31417] sock_sendmsg_nosec+0x14e/0x190 [ 1413.824945][T31417] ____sys_sendmsg+0x54e/0x850 [ 1413.824978][T31417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1413.825015][T31417] ? import_iovec+0x73/0xa0 [ 1413.825049][T31417] ___sys_sendmsg+0x2a5/0x360 [ 1413.825077][T31417] ? __lock_acquire+0x747/0x2de0 [ 1413.825114][T31417] ? __pfx____sys_sendmsg+0x10/0x10 [ 1413.825184][T31417] ? __fget_files+0x3a2/0x420 [ 1413.825212][T31417] ? __fget_files+0x2a/0x420 [ 1413.825251][T31417] __x64_sys_sendmsg+0x1b1/0x290 [ 1413.825281][T31417] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1413.825333][T31417] do_syscall_64+0x166/0x520 [ 1413.825360][T31417] ? trace_irq_disable+0x3b/0x140 [ 1413.825393][T31417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.825418][T31417] ? clear_bhb_loop+0x70/0xc0 [ 1413.825448][T31417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.825472][T31417] RIP: 0033:0x7fac6019fb19 [ 1413.825495][T31417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1413.825516][T31417] RSP: 002b:00007fac60fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1413.825542][T31417] RAX: ffffffffffffffda RBX: 00007fac60425fa0 RCX: 00007fac6019fb19 [ 1413.825560][T31417] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1413.825575][T31417] RBP: 00007fac60fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1413.825590][T31417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1413.825605][T31417] R13: 00007fac60426038 R14: 00007fac60425fa0 R15: 00007ffdfa1f9898 [ 1413.825644][T31417] [ 1414.572717][T31428] tap0: tun_chr_ioctl cmd 2147767506 [ 1414.573190][T31428] tap0: tun_chr_ioctl cmd 21731 [ 1415.142246][T31444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1415.466231][T31452] netlink: 'syz.0.7318': attribute type 1 has an invalid length. [ 1415.506181][T31452] sctp: [Deprecated]: syz.0.7318 (pid 31452) Use of int in max_burst socket option. [ 1415.506181][T31452] Use struct sctp_assoc_value instead [ 1415.763595][T31454] netlink: 'syz.3.7319': attribute type 10 has an invalid length. [ 1415.769632][T31454] syz_tun: entered promiscuous mode [ 1415.851167][T31459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7323'. [ 1415.866659][T31454] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1415.882063][ T9732] bond0: (slave bond_slave_0): interface is now down [ 1415.882089][ T9732] bond0: (slave bond_slave_1): interface is now down [ 1415.882105][ T9732] bond0: (slave syz_tun): interface is now down [ 1415.919389][ T9732] bond0: (slave bond_slave_0): interface is now down [ 1415.919419][ T9732] bond0: (slave bond_slave_1): interface is now down [ 1415.919434][ T9732] bond0: (slave syz_tun): interface is now down [ 1415.957336][T31454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7319'. [ 1415.999901][ T9732] bond0: now running without any active interface! [ 1416.069509][T31456] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1416.106291][T31454] syz_tun: left promiscuous mode [ 1416.368485][T31481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7326'. [ 1416.855978][T31478] syzkaller0: entered promiscuous mode [ 1416.856009][T31478] syzkaller0: entered allmulticast mode [ 1416.925172][T31493] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 1416.927912][T31493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7327'. [ 1422.085671][T31505] batman_adv: batadv0: Adding interface: syzkaller0 [ 1422.085693][T31505] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.085730][T31505] batman_adv: batadv0: Interface activated: syzkaller0 [ 1422.219709][T31522] netlink: 'syz.2.7333': attribute type 1 has an invalid length. [ 1422.257729][ T30] audit: type=1800 audit(1793945353.382:33): pid=31520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7332" name="blkio.bfq.time_recursive" dev="tmpfs" ino=103 res=0 errno=-22 [ 1422.348990][T31523] sctp: [Deprecated]: syz.2.7333 (pid 31523) Use of int in max_burst socket option. [ 1422.348990][T31523] Use struct sctp_assoc_value instead [ 1422.450913][T31519] bond1: Removing last ns target with arp_interval on [ 1422.465902][T31504] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1422.716530][T31533] netlink: 'syz.3.7337': attribute type 1 has an invalid length. [ 1422.761167][T31533] sctp: [Deprecated]: syz.3.7337 (pid 31533) Use of int in max_burst socket option. [ 1422.761167][T31533] Use struct sctp_assoc_value instead [ 1422.783939][T31533] siw: device registration error -23 [ 1425.628025][T31504] batman_adv: batadv0: Removing interface: syzkaller0 [ 1425.901978][T31532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7336'. [ 1426.652139][T31558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7344'. [ 1426.652172][T31558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7344'. [ 1426.890591][T31560] netlink: 'syz.0.7346': attribute type 1 has an invalid length. [ 1426.928210][T31560] sctp: [Deprecated]: syz.0.7346 (pid 31560) Use of int in max_burst socket option. [ 1426.928210][T31560] Use struct sctp_assoc_value instead [ 1427.028476][T31566] FAULT_INJECTION: forcing a failure. [ 1427.028476][T31566] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1427.028515][T31566] CPU: 1 UID: 0 PID: 31566 Comm: syz.3.7348 Not tainted syzkaller #0 PREEMPT(full) [ 1427.028543][T31566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1427.028558][T31566] Call Trace: [ 1427.028568][T31566] [ 1427.028579][T31566] dump_stack_lvl+0xe8/0x150 [ 1427.028629][T31566] should_fail_ex+0x3eb/0x540 [ 1427.028664][T31566] prepare_alloc_pages+0x21e/0x5f0 [ 1427.028709][T31566] __alloc_frozen_pages_noprof+0x17c/0x410 [ 1427.028740][T31566] ? __lock_acquire+0x747/0x2de0 [ 1427.028772][T31566] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1427.028809][T31566] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 1427.028839][T31566] ? __get_vm_area_node+0x155/0x2f0 [ 1427.028860][T31566] ? __vmalloc_node_range_noprof+0x36e/0x16f0 [ 1427.028889][T31566] ? policy_nodemask+0x31b/0x980 [ 1427.028921][T31566] ? __sys_bpf+0xd86/0xe00 [ 1427.028945][T31566] ? __x64_sys_bpf+0xba/0xd0 [ 1427.028974][T31566] ? do_syscall_64+0x166/0x520 [ 1427.029001][T31566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.029031][T31566] alloc_pages_mpol+0x21e/0x390 [ 1427.029074][T31566] alloc_pages_noprof+0xb1/0x2b0 [ 1427.029112][T31566] get_free_pages_noprof+0xf/0x80 [ 1427.029143][T31566] __kasan_populate_vmalloc+0x38/0x1c0 [ 1427.029172][T31566] ? do_raw_spin_unlock+0xf5/0x200 [ 1427.029202][T31566] alloc_vmap_area+0xd10/0x1410 [ 1427.029243][T31566] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1427.029265][T31566] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 1427.029296][T31566] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 1427.029324][T31566] ? __get_vm_area_node+0x155/0x2f0 [ 1427.029354][T31566] __get_vm_area_node+0x200/0x2f0 [ 1427.029386][T31566] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 1427.029413][T31566] ? bpf_prog_calc_tag+0x51/0x370 [ 1427.029444][T31566] ? __sys_bpf+0xd81/0xe00 [ 1427.029463][T31566] ? __x64_sys_bpf+0xba/0xd0 [ 1427.029494][T31566] ? do_syscall_64+0x166/0x520 [ 1427.029524][T31566] ? kasan_save_track+0x4f/0x80 [ 1427.029552][T31566] ? kasan_save_track+0x3e/0x80 [ 1427.029581][T31566] ? __kvmalloc_node_noprof+0x50a/0x820 [ 1427.029615][T31566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.029654][T31566] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1427.029699][T31566] ? bpf_prog_calc_tag+0x51/0x370 [ 1427.029721][T31566] __vmalloc_noprof+0xd2/0x120 [ 1427.029746][T31566] ? bpf_prog_calc_tag+0x51/0x370 [ 1427.029773][T31566] bpf_prog_calc_tag+0x51/0x370 [ 1427.029802][T31566] check_and_resolve_insns+0xc0/0x28e0 [ 1427.029830][T31566] ? __asan_memset+0x22/0x50 [ 1427.029857][T31566] ? add_subprog+0x40b/0x550 [ 1427.029885][T31566] ? bpf_check+0x1934/0x34e0 [ 1427.029911][T31566] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1427.029936][T31566] ? check_subprogs+0x413/0x540 [ 1427.029972][T31566] bpf_check+0x1c12/0x34e0 [ 1427.030010][T31566] ? ktime_get_with_offset+0x93/0x2d0 [ 1427.030043][T31566] ? ktime_get_with_offset+0x93/0x2d0 [ 1427.030076][T31566] ? __pfx_bpf_check+0x10/0x10 [ 1427.030105][T31566] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1427.030139][T31566] bpf_prog_load+0x14da/0x1c60 [ 1427.030177][T31566] ? __pfx_bpf_prog_load+0x10/0x10 [ 1427.030219][T31566] ? __might_fault+0xaf/0x130 [ 1427.030260][T31566] __sys_bpf+0xd86/0xe00 [ 1427.030292][T31566] ? __pfx___sys_bpf+0x10/0x10 [ 1427.030329][T31566] ? __fget_files+0x2a/0x420 [ 1427.030377][T31566] ? ksys_write+0x242/0x270 [ 1427.030410][T31566] ? __pfx_ksys_write+0x10/0x10 [ 1427.030447][T31566] __x64_sys_bpf+0xba/0xd0 [ 1427.030484][T31566] do_syscall_64+0x166/0x520 [ 1427.030510][T31566] ? trace_irq_disable+0x3b/0x140 [ 1427.030542][T31566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.030566][T31566] ? clear_bhb_loop+0x70/0xc0 [ 1427.030596][T31566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.030619][T31566] RIP: 0033:0x7fac6019fb19 [ 1427.030642][T31566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1427.030662][T31566] RSP: 002b:00007fac60fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1427.030688][T31566] RAX: ffffffffffffffda RBX: 00007fac60425fa0 RCX: 00007fac6019fb19 [ 1427.030713][T31566] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1427.030729][T31566] RBP: 00007fac60fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.030745][T31566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1427.030759][T31566] R13: 00007fac60426038 R14: 00007fac60425fa0 R15: 00007ffdfa1f9898 [ 1427.030797][T31566] [ 1427.289903][T31566] syz.3.7348: vmalloc error: size 32, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1427.290150][T31566] CPU: 0 UID: 0 PID: 31566 Comm: syz.3.7348 Not tainted syzkaller #0 PREEMPT(full) [ 1427.290223][T31566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1427.290259][T31566] Call Trace: [ 1427.290287][T31566] [ 1427.290311][T31566] dump_stack_lvl+0xe8/0x150 [ 1427.290429][T31566] warn_alloc+0x24d/0x270 [ 1427.290506][T31566] ? lockdep_hardirqs_on+0x7b/0x110 [ 1427.290583][T31566] ? __pfx_warn_alloc+0x10/0x10 [ 1427.290684][T31566] ? kfree+0x1c5/0x650 [ 1427.290770][T31566] ? __get_vm_area_node+0x219/0x2f0 [ 1427.290847][T31566] __vmalloc_node_range_noprof+0x396/0x16f0 [ 1427.290932][T31566] ? __sys_bpf+0xd81/0xe00 [ 1427.290985][T31566] ? __x64_sys_bpf+0xba/0xd0 [ 1427.291071][T31566] ? do_syscall_64+0x166/0x520 [ 1427.291149][T31566] ? kasan_save_track+0x4f/0x80 [ 1427.291230][T31566] ? kasan_save_track+0x3e/0x80 [ 1427.291306][T31566] ? __kvmalloc_node_noprof+0x50a/0x820 [ 1427.291393][T31566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.291491][T31566] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1427.291657][T31566] ? bpf_prog_calc_tag+0x51/0x370 [ 1427.291710][T31566] __vmalloc_noprof+0xd2/0x120 [ 1427.291773][T31566] ? bpf_prog_calc_tag+0x51/0x370 [ 1427.291838][T31566] bpf_prog_calc_tag+0x51/0x370 [ 1427.291909][T31566] check_and_resolve_insns+0xc0/0x28e0 [ 1427.291975][T31566] ? __asan_memset+0x22/0x50 [ 1427.292049][T31566] ? add_subprog+0x40b/0x550 [ 1427.292126][T31566] ? bpf_check+0x1934/0x34e0 [ 1427.292190][T31566] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1427.292248][T31566] ? check_subprogs+0x413/0x540 [ 1427.292366][T31566] bpf_check+0x1c12/0x34e0 [ 1427.292470][T31566] ? ktime_get_with_offset+0x93/0x2d0 [ 1427.292561][T31566] ? ktime_get_with_offset+0x93/0x2d0 [ 1427.292648][T31566] ? __pfx_bpf_check+0x10/0x10 [ 1427.292721][T31566] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1427.292805][T31566] bpf_prog_load+0x14da/0x1c60 [ 1427.292901][T31566] ? __pfx_bpf_prog_load+0x10/0x10 [ 1427.293001][T31566] ? __might_fault+0xaf/0x130 [ 1427.293077][T31566] __sys_bpf+0xd86/0xe00 [ 1427.293143][T31566] ? __pfx___sys_bpf+0x10/0x10 [ 1427.293175][T31566] ? __fget_files+0x2a/0x420 [ 1427.293219][T31566] ? ksys_write+0x242/0x270 [ 1427.293249][T31566] ? __pfx_ksys_write+0x10/0x10 [ 1427.293283][T31566] __x64_sys_bpf+0xba/0xd0 [ 1427.293319][T31566] do_syscall_64+0x166/0x520 [ 1427.293344][T31566] ? trace_irq_disable+0x3b/0x140 [ 1427.293375][T31566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.293399][T31566] ? clear_bhb_loop+0x70/0xc0 [ 1427.293428][T31566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.293451][T31566] RIP: 0033:0x7fac6019fb19 [ 1427.293473][T31566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1427.293494][T31566] RSP: 002b:00007fac60fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1427.293517][T31566] RAX: ffffffffffffffda RBX: 00007fac60425fa0 RCX: 00007fac6019fb19 [ 1427.293534][T31566] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1427.293549][T31566] RBP: 00007fac60fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.293563][T31566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1427.293576][T31566] R13: 00007fac60426038 R14: 00007fac60425fa0 R15: 00007ffdfa1f9898 [ 1427.293619][T31566] [ 1427.752135][T31566] Mem-Info: [ 1427.752201][T31566] active_anon:5869 inactive_anon:0 isolated_anon:0 [ 1427.752201][T31566] active_file:0 inactive_file:44449 isolated_file:0 [ 1427.752201][T31566] unevictable:0 dirty:315 writeback:0 [ 1427.752201][T31566] slab_reclaimable:12748 slab_unreclaimable:135578 [ 1427.752201][T31566] mapped:29979 shmem:580 pagetables:1262 [ 1427.752201][T31566] sec_pagetables:0 bounce:0 [ 1427.752201][T31566] kernel_misc_reclaimable:0 [ 1427.752201][T31566] free:1240665 free_pcp:10734 free_cma:0 [ 1427.752387][T31566] Node 0 active_anon:23476kB inactive_anon:0kB active_file:0kB inactive_file:177588kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119916kB dirty:1256kB writeback:0kB shmem:2320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16236kB pagetables:4952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1427.752541][T31566] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:96kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1427.752677][T31566] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1427.753466][T31566] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 1427.753578][T31566] Node 0 DMA32 free:1005156kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23476kB inactive_anon:0kB active_file:0kB inactive_file:177588kB unevictable:0kB writepending:1256kB zspages:0kB present:3129332kB managed:2523116kB mlocked:0kB bounce:0kB free_pcp:42924kB local_pcp:20832kB free_cma:0kB [ 1427.753738][T31566] lowmem_reserve[]: 0 0 1 1 1 [ 1427.753774][T31566] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1427.753837][T31566] lowmem_reserve[]: 0 0 0 0 0 [ 1427.753873][T31566] Node 1 Normal free:3942132kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1427.753939][T31566] lowmem_reserve[]: 0 0 0 0 0 [ 1427.753976][T31566] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1427.754111][T31566] Node 0 DMA32: 1087*4kB (UME) 1025*8kB (UME) 296*16kB (UME) 531*32kB (UME) 283*64kB (UM) 50*128kB (UME) 17*256kB (UME) 4*512kB (M) 4*1024kB (U) 5*2048kB (M) 226*4096kB (UM) = 1005220kB [ 1427.754292][T31566] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1427.754413][T31566] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 4*16kB (UM) 7*32kB (UM) 5*64kB (UM) 5*128kB (UM) 4*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3942132kB [ 1427.754583][T31566] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1427.754602][T31566] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1427.754619][T31566] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1427.754638][T31566] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1427.754656][T31566] 45027 total pagecache pages [ 1427.754697][T31566] 0 pages in swap cache [ 1427.754722][T31566] Free swap = 124996kB [ 1427.754751][T31566] Total swap = 124996kB [ 1427.754781][T31566] 2097051 pages RAM [ 1427.754796][T31566] 0 pages HighMem/MovableOnly [ 1427.754812][T31566] 434241 pages reserved [ 1427.754842][T31566] 0 pages cma reserved [ 1428.424146][T31552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.424832][T31552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.689232][T31552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1428.713543][T31552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1428.816585][T31578] nbd: socks must be embedded in a SOCK_ITEM attr [ 1429.081536][T31567] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.081619][T31567] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.081657][T31567] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.081694][T31567] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.402662][T31588] FAULT_INJECTION: forcing a failure. [ 1429.402662][T31588] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.407517][T31588] CPU: 1 UID: 0 PID: 31588 Comm: syz.4.7356 Not tainted syzkaller #0 PREEMPT(full) [ 1429.407551][T31588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1429.407566][T31588] Call Trace: [ 1429.407576][T31588] [ 1429.407586][T31588] dump_stack_lvl+0xe8/0x150 [ 1429.407630][T31588] should_fail_ex+0x3eb/0x540 [ 1429.407664][T31588] should_failslab+0xa8/0x100 [ 1429.407701][T31588] __kmalloc_cache_node_noprof+0xa5/0x620 [ 1429.407733][T31588] ? __get_vm_area_node+0x155/0x2f0 [ 1429.407755][T31588] ? __get_vm_area_node+0x155/0x2f0 [ 1429.407787][T31588] __get_vm_area_node+0x155/0x2f0 [ 1429.407817][T31588] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 1429.407842][T31588] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1429.407866][T31588] ? lock_acquire+0x115/0x350 [ 1429.407898][T31588] ? __lock_acquire+0x747/0x2de0 [ 1429.407942][T31588] ? hook_capable+0x1c3/0x5e0 [ 1429.407976][T31588] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1429.408021][T31588] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1429.408041][T31588] __vmalloc_noprof+0xd2/0x120 [ 1429.408067][T31588] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1429.408093][T31588] bpf_prog_alloc_no_stats+0x47/0x550 [ 1429.408114][T31588] ? bpf_prog_alloc+0x2a/0x1a0 [ 1429.408139][T31588] bpf_prog_alloc+0x3c/0x1a0 [ 1429.408164][T31588] bpf_prog_load+0x7f8/0x1c60 [ 1429.408203][T31588] ? __pfx_bpf_prog_load+0x10/0x10 [ 1429.408245][T31588] ? __might_fault+0xaf/0x130 [ 1429.408277][T31588] __sys_bpf+0xd86/0xe00 [ 1429.408310][T31588] ? __pfx___sys_bpf+0x10/0x10 [ 1429.408347][T31588] ? __fget_files+0x2a/0x420 [ 1429.408395][T31588] ? ksys_write+0x242/0x270 [ 1429.408428][T31588] ? __pfx_ksys_write+0x10/0x10 [ 1429.408465][T31588] __x64_sys_bpf+0xba/0xd0 [ 1429.408502][T31588] do_syscall_64+0x166/0x520 [ 1429.408530][T31588] ? trace_irq_disable+0x3b/0x140 [ 1429.408561][T31588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.408585][T31588] ? clear_bhb_loop+0x70/0xc0 [ 1429.408614][T31588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.408638][T31588] RIP: 0033:0x7f358c19fb19 [ 1429.408660][T31588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1429.408681][T31588] RSP: 002b:00007f358d0cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1429.408706][T31588] RAX: ffffffffffffffda RBX: 00007f358c425fa0 RCX: 00007f358c19fb19 [ 1429.408724][T31588] RDX: 0000000000000094 RSI: 0000200000000940 RDI: 0000000000000005 [ 1429.408739][T31588] RBP: 00007f358d0cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1429.408754][T31588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1429.408769][T31588] R13: 00007f358c426038 R14: 00007f358c425fa0 R15: 00007fffdc74dab8 [ 1429.408804][T31588] [ 1430.551106][T31608] FAULT_INJECTION: forcing a failure. [ 1430.551106][T31608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1430.551143][T31608] CPU: 1 UID: 0 PID: 31608 Comm: syz.0.7363 Not tainted syzkaller #0 PREEMPT(full) [ 1430.551170][T31608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1430.551185][T31608] Call Trace: [ 1430.551195][T31608] [ 1430.551206][T31608] dump_stack_lvl+0xe8/0x150 [ 1430.551274][T31608] should_fail_ex+0x3eb/0x540 [ 1430.551310][T31608] _copy_from_iter+0x1d3/0x1680 [ 1430.551341][T31608] ? __alloc_skb+0x27a/0x7a0 [ 1430.551377][T31608] ? __alloc_skb+0x27a/0x7a0 [ 1430.551412][T31608] ? __alloc_skb+0x27a/0x7a0 [ 1430.551447][T31608] ? __pfx__copy_from_iter+0x10/0x10 [ 1430.551471][T31608] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 1430.551498][T31608] ? __alloc_skb+0x27a/0x7a0 [ 1430.551531][T31608] ? __alloc_skb+0x27a/0x7a0 [ 1430.551573][T31608] ? netlink_sendmsg+0x64f/0xb20 [ 1430.551608][T31608] ? skb_put+0x112/0x210 [ 1430.551635][T31608] netlink_sendmsg+0x6bb/0xb20 [ 1430.551676][T31608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1430.551715][T31608] ? aa_sock_msg_perm+0x144/0x210 [ 1430.551745][T31608] ? apparmor_socket_sendmsg+0x98/0x360 [ 1430.551782][T31608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1430.551815][T31608] sock_sendmsg_nosec+0x14e/0x190 [ 1430.551858][T31608] ____sys_sendmsg+0x54e/0x850 [ 1430.551891][T31608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1430.551928][T31608] ? import_iovec+0x73/0xa0 [ 1430.551961][T31608] ___sys_sendmsg+0x2a5/0x360 [ 1430.551985][T31608] ? __lock_acquire+0x747/0x2de0 [ 1430.552021][T31608] ? __pfx____sys_sendmsg+0x10/0x10 [ 1430.552091][T31608] ? __fget_files+0x3a2/0x420 [ 1430.552118][T31608] ? __fget_files+0x2a/0x420 [ 1430.552158][T31608] __x64_sys_sendmsg+0x1b1/0x290 [ 1430.552188][T31608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1430.552241][T31608] do_syscall_64+0x166/0x520 [ 1430.552268][T31608] ? trace_irq_disable+0x3b/0x140 [ 1430.552301][T31608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.552327][T31608] ? clear_bhb_loop+0x70/0xc0 [ 1430.552357][T31608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.552381][T31608] RIP: 0033:0x7f663779fb19 [ 1430.552403][T31608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.552423][T31608] RSP: 002b:00007f6638586028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1430.552449][T31608] RAX: ffffffffffffffda RBX: 00007f6637a25fa0 RCX: 00007f663779fb19 [ 1430.552468][T31608] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1430.552483][T31608] RBP: 00007f6638586090 R08: 0000000000000000 R09: 0000000000000000 [ 1430.552498][T31608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1430.552513][T31608] R13: 00007f6637a26038 R14: 00007f6637a25fa0 R15: 00007ffebbdf0418 [ 1430.552551][T31608] [ 1431.404174][T31621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7368'. [ 1431.429022][T31621] netlink: 'syz.1.7368': attribute type 7 has an invalid length. [ 1431.515178][T31625] ip_tables: iptables: counters copy to user failed while replacing table [ 1431.544377][T31623] ip6gretap0: entered promiscuous mode [ 1431.547371][T31623] vlan2: entered promiscuous mode [ 1431.725845][T31630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7369'. [ 1431.725878][T31630] netlink: 'syz.0.7369': attribute type 3 has an invalid length. [ 1432.624676][T31637] netlink: 1092 bytes leftover after parsing attributes in process `syz.0.7372'. [ 1432.894092][T31640] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7373'. [ 1433.013987][T31645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7375'. [ 1433.111137][T31645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7375'. [ 1434.230579][T31679] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7388'. [ 1434.256764][T31681] FAULT_INJECTION: forcing a failure. [ 1434.256764][T31681] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.256798][T31681] CPU: 0 UID: 0 PID: 31681 Comm: syz.4.7390 Not tainted syzkaller #0 PREEMPT(full) [ 1434.256821][T31681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1434.256836][T31681] Call Trace: [ 1434.256845][T31681] [ 1434.256855][T31681] dump_stack_lvl+0xe8/0x150 [ 1434.256895][T31681] should_fail_ex+0x3eb/0x540 [ 1434.256939][T31681] ? __alloc_skb+0x1db/0x7a0 [ 1434.256972][T31681] should_failslab+0xa8/0x100 [ 1434.257007][T31681] ? __alloc_skb+0x1db/0x7a0 [ 1434.257039][T31681] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1434.257066][T31681] ? __alloc_skb+0x18d/0x7a0 [ 1434.257101][T31681] ? __alloc_skb+0x1db/0x7a0 [ 1434.257141][T31681] __alloc_skb+0x1db/0x7a0 [ 1434.257182][T31681] hci_mgmt_cmd+0x1c1/0xfc0 [ 1434.257208][T31681] ? rpa_expired+0xb4/0x140 [ 1434.257254][T31681] hci_sock_sendmsg+0x6e8/0xfd0 [ 1434.257290][T31681] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1434.257322][T31681] ? apparmor_socket_sendmsg+0x98/0x360 [ 1434.257353][T31681] ? lock_acquire+0x115/0x350 [ 1434.257384][T31681] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1434.257408][T31681] sock_sendmsg_nosec+0x14e/0x190 [ 1434.257443][T31681] sock_write_iter+0x2de/0x3e0 [ 1434.257474][T31681] ? __pfx_sock_write_iter+0x10/0x10 [ 1434.257512][T31681] ? bpf_lsm_file_permission+0x9/0x20 [ 1434.257542][T31681] ? security_file_permission+0x75/0x260 [ 1434.257585][T31681] vfs_write+0x612/0xba0 [ 1434.257627][T31681] ? __pfx_vfs_write+0x10/0x10 [ 1434.257662][T31681] ? __fget_files+0x3a2/0x420 [ 1434.257689][T31681] ? __fget_files+0x2a/0x420 [ 1434.257729][T31681] ? fdget+0x1ac/0x250 [ 1434.257767][T31681] ksys_write+0x150/0x270 [ 1434.257801][T31681] ? __pfx_ksys_write+0x10/0x10 [ 1434.257847][T31681] do_syscall_64+0x166/0x520 [ 1434.257873][T31681] ? trace_irq_disable+0x3b/0x140 [ 1434.257912][T31681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.257937][T31681] ? clear_bhb_loop+0x70/0xc0 [ 1434.257967][T31681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.257991][T31681] RIP: 0033:0x7f358c19fb19 [ 1434.258014][T31681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1434.258035][T31681] RSP: 002b:00007f358d0cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1434.258059][T31681] RAX: ffffffffffffffda RBX: 00007f358c425fa0 RCX: 00007f358c19fb19 [ 1434.258077][T31681] RDX: 000000000000000e RSI: 0000200000001680 RDI: 0000000000000005 [ 1434.258092][T31681] RBP: 00007f358d0cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1434.258106][T31681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1434.258120][T31681] R13: 00007f358c426038 R14: 00007f358c425fa0 R15: 00007fffdc74dab8 [ 1434.258158][T31681] [ 1434.260999][T31681] Bluetooth: MGMT ver 1.23 [ 1436.371514][T27373] Bluetooth: hci4: command 0x0405 tx timeout [ 1437.296650][T31720] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7400'. [ 1437.700494][T31721] can: request_module (can-proto-0) failed. [ 1438.782028][T27373] Bluetooth: hci4: link tx timeout [ 1438.782053][T27373] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1438.810942][T27373] Bluetooth: hci4: link tx timeout [ 1438.810965][T27373] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1438.833936][T27373] Bluetooth: hci4: link tx timeout [ 1438.833958][T27373] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1438.887280][T27373] Bluetooth: hci4: link tx timeout [ 1438.887307][T27373] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1438.925943][T27373] Bluetooth: hci4: link tx timeout [ 1438.925968][T27373] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1438.957369][T27373] Bluetooth: hci4: link tx timeout [ 1438.957393][T27373] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1438.995355][T27373] Bluetooth: hci4: link tx timeout [ 1438.995381][T27373] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1439.034241][T27373] Bluetooth: hci4: link tx timeout [ 1439.034266][T27373] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1439.245965][T31749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7411'. [ 1439.246010][T31749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7411'. [ 1439.288209][T31750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7411'. [ 1439.594055][T31750] bond0: (slave syz_tun): Releasing backup interface [ 1439.773024][T31755] lo: left promiscuous mode [ 1439.773239][T31755] tunl0: left promiscuous mode [ 1439.773413][T31755] gre0: left promiscuous mode [ 1439.773544][T31755] gretap0: left promiscuous mode [ 1439.773714][T31755] erspan0: left promiscuous mode [ 1439.773848][T31755] ip_vti0: left promiscuous mode [ 1439.774079][T31755] ip6_vti0: left promiscuous mode [ 1439.774209][T31755] sit0: left promiscuous mode [ 1439.774344][T31755] ip6tnl0: left promiscuous mode [ 1439.774475][T31755] ip6gre0: left promiscuous mode [ 1439.780318][T31755] ip6gretap0: left promiscuous mode [ 1439.780468][T31755] bridge0: left promiscuous mode [ 1439.780659][T31755] vcan0: left promiscuous mode [ 1439.780821][T31755] bond0: left promiscuous mode [ 1439.781314][T31755] team0: left promiscuous mode [ 1439.879104][T31755] dummy0: left promiscuous mode [ 1439.879284][T31755] nlmon0: left promiscuous mode [ 1439.879446][T31755] batadv0: left promiscuous mode [ 1439.879608][T31755] vxcan0: left promiscuous mode [ 1439.879810][T31755] vxcan1: left promiscuous mode [ 1439.879971][T31755] veth0: left promiscuous mode [ 1439.927888][T31755] veth1: left promiscuous mode [ 1439.928062][T31755] wg0: left promiscuous mode [ 1439.928223][T31755] wg1: left promiscuous mode [ 1439.928385][T31755] wg2: left promiscuous mode [ 1439.928547][T31755] veth0_to_bridge: left promiscuous mode [ 1439.928855][T31755] veth1_to_bridge: left promiscuous mode [ 1439.973243][T31755] bond_slave_0: left promiscuous mode [ 1439.973438][T31755] veth1_to_bond: left promiscuous mode [ 1439.973608][T31755] bond_slave_1: left promiscuous mode [ 1439.973781][T31755] veth0_to_team: left promiscuous mode [ 1439.973942][T31755] team_slave_0: left promiscuous mode [ 1439.978001][T31755] veth1_to_team: left promiscuous mode [ 1439.978192][T31755] team_slave_1: left promiscuous mode [ 1439.993955][T31755] veth0_to_batadv: left promiscuous mode [ 1439.995279][T31755] batadv_slave_0: left promiscuous mode [ 1439.997254][T31755] veth1_to_batadv: left promiscuous mode [ 1440.002538][T31755] batadv_slave_1: left promiscuous mode [ 1440.003854][T31755] xfrm0: left promiscuous mode [ 1440.005065][T31755] veth0_to_hsr: left promiscuous mode [ 1440.011749][T31755] veth1_to_hsr: left promiscuous mode [ 1440.023321][T31755] hsr0: left promiscuous mode [ 1440.048538][T31755] veth1_virt_wifi: left promiscuous mode [ 1440.084466][T31755] veth0_virt_wifi: left promiscuous mode [ 1440.085768][T31755] virt_wifi0: left promiscuous mode [ 1440.111367][T31755] vlan0: left promiscuous mode [ 1440.125975][T31755] vlan1: left promiscuous mode [ 1440.146573][T31755] macvlan0: left promiscuous mode [ 1440.184166][T31755] macvlan1: left promiscuous mode [ 1440.185464][T31755] ipvlan0: left promiscuous mode [ 1440.186744][T31755] ipvlan1: left promiscuous mode [ 1440.190073][T31755] macvtap0: left promiscuous mode [ 1440.191456][T31755] macsec0: left promiscuous mode [ 1440.237115][T31755] geneve0: left promiscuous mode [ 1440.238468][T31755] geneve1: left promiscuous mode [ 1440.239765][T31755] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1440.241057][T31755] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 1440.243050][T31755] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 1440.287698][T31755] netdevsim netdevsim0 netdevsim3: left promiscuous mode [ 1440.289034][T31755] mac80211_hwsim hwsim46 wlan0: left promiscuous mode [ 1440.290329][T31755] mac80211_hwsim hwsim47 wlan1: left promiscuous mode [ 1440.291700][T31755] bond1: left promiscuous mode [ 1440.291721][T31755] veth0_to_bond: left promiscuous mode [ 1440.374335][T31755] bridge1: left promiscuous mode [ 1440.387444][T31755] wireguard0: left promiscuous mode [ 1440.387656][T31755] syztnl1: left promiscuous mode [ 1440.856529][T27373] Bluetooth: hci4: command 0x0405 tx timeout [ 1451.103114][T31765] Bluetooth: hci5: command 0x0406 tx timeout [ 1451.103173][T31765] Bluetooth: hci3: command 0x0c1a tx timeout [ 1474.676721][T31780] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1476.415906][T31832] tap0: tun_chr_ioctl cmd 1074025677 [ 1476.416046][T31832] tap0: linktype set to 805 [ 1476.804551][T31845] tipc: Started in network mode [ 1476.804677][T31845] tipc: Node identity ac1414aa, cluster identity 4711 [ 1476.807016][T31845] tipc: Enabled bearer , priority 10 [ 1476.837901][T31845] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7436'. [ 1476.922092][T31847] syzkaller0: entered promiscuous mode [ 1476.922122][T31847] syzkaller0: entered allmulticast mode [ 1477.463480][T31859] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7441'. [ 1477.469093][T17232] Bluetooth: hci0: connection err: -111 [ 1477.985295][T22949] tipc: Node number set to 2886997162 [ 1478.268313][T31875] tipc: Enabling of bearer rejected, failed to enable media [ 1478.499138][T31875] syzkaller0: entered promiscuous mode [ 1478.499169][T31875] syzkaller0: entered allmulticast mode [ 1478.499513][T31888] netlink: 'syz.1.7449': attribute type 10 has an invalid length. [ 1478.681758][T31892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7449'. [ 1479.266480][T31902] sctp: [Deprecated]: syz.0.7451 (pid 31902) Use of int in maxseg socket option. [ 1479.266480][T31902] Use struct sctp_assoc_value instead [ 1479.965934][T31915] netlink: 'syz.3.7453': attribute type 3 has an invalid length. [ 1484.207949][T31888] syz_tun: entered promiscuous mode [ 1484.230959][T31888] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1484.332422][T31892] gretap0: left promiscuous mode [ 1484.415822][T31892] syz_tun: left promiscuous mode [ 1484.441180][T31567] bond0: (slave bond_slave_0): interface is now down [ 1484.441209][T31567] bond0: (slave bond_slave_1): interface is now down [ 1484.441225][T31567] bond0: (slave syz_tun): interface is now down [ 1484.458848][T31567] bond0: (slave bond_slave_0): interface is now down [ 1484.458919][T31567] bond0: (slave bond_slave_1): interface is now down [ 1484.458955][T31567] bond0: (slave syz_tun): interface is now down [ 1484.473893][T31567] bond0: (slave bond_slave_0): interface is now down [ 1484.473966][T31567] bond0: (slave bond_slave_1): interface is now down [ 1484.474007][T31567] bond0: (slave syz_tun): interface is now down [ 1484.486016][T31892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.495216][T31567] bond0: (slave bond_slave_0): interface is now down [ 1484.495281][T31567] bond0: (slave bond_slave_1): interface is now down [ 1484.495324][T31567] bond0: (slave syz_tun): interface is now down [ 1484.513007][T31567] bond0: (slave bond_slave_0): interface is now down [ 1484.513073][T31567] bond0: (slave bond_slave_1): interface is now down [ 1484.513116][T31567] bond0: (slave syz_tun): interface is now down [ 1484.515685][T31892] 8021q: adding VLAN 0 to HW filter on device team0 [ 1484.536257][T24409] bond0: (slave bond_slave_0): interface is now down [ 1484.536322][T24409] bond0: (slave bond_slave_1): interface is now down [ 1484.536371][T24409] bond0: (slave syz_tun): interface is now down [ 1484.554577][T31567] bond0: (slave bond_slave_0): interface is now down [ 1484.554641][T31567] bond0: (slave bond_slave_1): interface is now down [ 1484.554692][T31567] bond0: (slave syz_tun): interface is now down [ 1484.572565][T31567] bond0: (slave bond_slave_0): interface is now down [ 1484.572633][T31567] bond0: (slave bond_slave_1): interface is now down [ 1484.572683][T31567] bond0: (slave syz_tun): interface is now down [ 1484.592382][T24407] bond0: (slave bond_slave_0): interface is now down [ 1484.592441][T24407] bond0: (slave bond_slave_1): interface is now down [ 1484.592482][T24407] bond0: (slave syz_tun): interface is now down [ 1484.615522][T24407] bond0: (slave bond_slave_0): interface is now down [ 1484.615587][T24407] bond0: (slave bond_slave_1): interface is now down [ 1484.615629][T24407] bond0: (slave syz_tun): interface is now down [ 1484.632266][ T141] bond0: (slave bond_slave_0): interface is now down [ 1484.632331][ T141] bond0: (slave bond_slave_1): interface is now down [ 1484.632372][ T141] bond0: (slave syz_tun): interface is now down [ 1484.652172][ T141] bond0: (slave bond_slave_0): interface is now down [ 1484.652246][ T141] bond0: (slave bond_slave_1): interface is now down [ 1484.652289][ T141] bond0: (slave syz_tun): interface is now down [ 1484.674090][ T141] bond0: (slave bond_slave_0): interface is now down [ 1484.674166][ T141] bond0: (slave bond_slave_1): interface is now down [ 1484.674210][ T141] bond0: (slave syz_tun): interface is now down [ 1484.705318][T24407] bond0: (slave bond_slave_0): interface is now down [ 1484.705392][T24407] bond0: (slave bond_slave_1): interface is now down [ 1484.705435][T24407] bond0: (slave syz_tun): interface is now down [ 1484.706135][T31892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1484.722960][T24407] bond0: (slave bond_slave_0): interface is now down [ 1484.723016][T24407] bond0: (slave bond_slave_1): interface is now down [ 1484.723058][T24407] bond0: (slave syz_tun): interface is now down [ 1484.744592][T31567] bond0: (slave bond_slave_0): interface is now down [ 1484.744687][T31567] bond0: (slave bond_slave_1): interface is now down [ 1484.744723][T31567] bond0: (slave syz_tun): interface is now down [ 1484.767501][T31567] bond0: (slave bond_slave_0): interface is now down [ 1484.767596][T31567] bond0: (slave bond_slave_1): interface is now down [ 1484.767689][T31567] bond0: (slave syz_tun): interface is now down [ 1484.783055][T24407] bond0: (slave bond_slave_0): interface is now down [ 1484.783127][T24407] bond0: (slave bond_slave_1): interface is now down [ 1484.783173][T24407] bond0: (slave syz_tun): interface is now down [ 1484.802477][T31567] bond0: (slave bond_slave_0): interface is now down [ 1484.802554][T31567] bond0: (slave bond_slave_1): interface is now down [ 1484.802591][T31567] bond0: (slave syz_tun): interface is now down [ 1484.825727][T24407] bond0: (slave bond_slave_0): interface is now down [ 1484.825794][T24407] bond0: (slave bond_slave_1): interface is now down [ 1484.825837][T24407] bond0: (slave syz_tun): interface is now down [ 1484.842223][T24407] bond0: (slave bond_slave_0): interface is now down [ 1484.842291][T24407] bond0: (slave bond_slave_1): interface is now down [ 1484.842335][T24407] bond0: (slave syz_tun): interface is now down [ 1484.897879][T24407] bond0: (slave bond_slave_0): interface is now down [ 1484.897907][T24407] bond0: (slave bond_slave_1): interface is now down [ 1484.897924][T24407] bond0: (slave syz_tun): interface is now down [ 1484.918689][ T141] bond0: (slave bond_slave_0): interface is now down [ 1484.918765][ T141] bond0: (slave bond_slave_1): interface is now down [ 1484.918808][ T141] bond0: (slave syz_tun): interface is now down [ 1484.933621][ T141] bond0: (slave bond_slave_0): interface is now down [ 1484.933694][ T141] bond0: (slave bond_slave_1): interface is now down [ 1484.933739][ T141] bond0: (slave syz_tun): interface is now down [ 1484.957370][ T141] bond0: (slave bond_slave_0): interface is now down [ 1484.957477][ T141] bond0: (slave bond_slave_1): interface is now down [ 1484.957494][ T141] bond0: (slave syz_tun): interface is now down [ 1484.974078][ T141] bond0: (slave bond_slave_0): interface is now down [ 1484.974136][ T141] bond0: (slave bond_slave_1): interface is now down [ 1484.974179][ T141] bond0: (slave syz_tun): interface is now down [ 1484.992131][T24407] bond0: (slave bond_slave_0): interface is now down [ 1484.992195][T24407] bond0: (slave bond_slave_1): interface is now down [ 1484.992209][T24407] bond0: (slave syz_tun): interface is now down [ 1485.013811][T24409] bond0: (slave bond_slave_0): interface is now down [ 1485.013894][T24409] bond0: (slave bond_slave_1): interface is now down [ 1485.013937][T24409] bond0: (slave syz_tun): interface is now down [ 1485.032356][ T3350] bond0: (slave bond_slave_0): interface is now down [ 1485.032431][ T3350] bond0: (slave bond_slave_1): interface is now down [ 1485.032581][ T3350] bond0: (slave syz_tun): interface is now down [ 1485.052392][ T3350] bond0: (slave bond_slave_0): interface is now down [ 1485.052467][ T3350] bond0: (slave bond_slave_1): interface is now down [ 1485.052549][ T3350] bond0: (slave syz_tun): interface is now down [ 1485.074962][ T3350] bond0: (slave bond_slave_0): interface is now down [ 1485.075055][ T3350] bond0: (slave bond_slave_1): interface is now down [ 1485.075102][ T3350] bond0: (slave syz_tun): interface is now down [ 1485.100365][T24409] bond0: (slave bond_slave_0): interface is now down [ 1485.100471][T24409] bond0: (slave bond_slave_1): interface is now down [ 1485.100516][T24409] bond0: (slave syz_tun): interface is now down [ 1485.112304][T24407] bond0: (slave bond_slave_0): interface is now down [ 1485.112404][T24407] bond0: (slave bond_slave_1): interface is now down [ 1485.112446][T24407] bond0: (slave syz_tun): interface is now down [ 1485.140597][T24407] bond0: (slave bond_slave_0): interface is now down [ 1485.140673][T24407] bond0: (slave bond_slave_1): interface is now down [ 1485.140717][T24407] bond0: (slave syz_tun): interface is now down [ 1485.154868][T24407] bond0: (slave bond_slave_0): interface is now down [ 1485.154936][T24407] bond0: (slave bond_slave_1): interface is now down [ 1485.154972][T24407] bond0: (slave syz_tun): interface is now down [ 1485.173313][ T141] bond0: (slave bond_slave_0): interface is now down [ 1485.173338][ T141] bond0: (slave bond_slave_1): interface is now down [ 1485.173354][ T141] bond0: (slave syz_tun): interface is now down [ 1485.193486][T24407] bond0: (slave bond_slave_0): interface is now down [ 1485.193512][T24407] bond0: (slave bond_slave_1): interface is now down [ 1485.193528][T24407] bond0: (slave syz_tun): interface is now down [ 1485.211969][T24409] bond0: (slave bond_slave_0): interface is now down [ 1485.212041][T24409] bond0: (slave bond_slave_1): interface is now down [ 1485.212072][T24409] bond0: (slave syz_tun): interface is now down [ 1485.232138][T24407] bond0: (slave bond_slave_0): interface is now down [ 1485.232211][T24407] bond0: (slave bond_slave_1): interface is now down [ 1485.232246][T24407] bond0: (slave syz_tun): interface is now down [ 1485.256380][T24407] bond0: (slave bond_slave_0): interface is now down [ 1485.256455][T24407] bond0: (slave bond_slave_1): interface is now down [ 1485.256498][T24407] bond0: (slave syz_tun): interface is now down [ 1485.274990][T24409] bond0: (slave bond_slave_0): interface is now down [ 1485.275015][T24409] bond0: (slave bond_slave_1): interface is now down [ 1485.275030][T24409] bond0: (slave syz_tun): interface is now down [ 1485.319489][T24407] bond0: (slave bond_slave_0): interface is now down [ 1485.319514][T24407] bond0: (slave bond_slave_1): interface is now down [ 1485.319531][T24407] bond0: (slave syz_tun): interface is now down [ 1485.333605][ T141] bond0: (slave bond_slave_0): interface is now down [ 1485.333631][ T141] bond0: (slave bond_slave_1): interface is now down [ 1485.333646][ T141] bond0: (slave syz_tun): interface is now down [ 1485.374448][T24409] bond0: (slave bond_slave_0): interface is now down [ 1485.374475][T24409] bond0: (slave bond_slave_1): interface is now down [ 1485.374731][T24409] bond0: (slave syz_tun): interface is now down [ 1485.404236][ T3350] bond0: (slave bond_slave_0): interface is now down [ 1485.404265][ T3350] bond0: (slave bond_slave_1): interface is now down [ 1485.404277][ T3350] bond0: (slave syz_tun): interface is now down [ 1485.438089][T24409] bond0: (slave bond_slave_0): interface is now down [ 1485.438116][T24409] bond0: (slave bond_slave_1): interface is now down [ 1485.438137][T24409] bond0: (slave syz_tun): interface is now down [ 1485.463141][ T141] bond0: (slave bond_slave_0): interface is now down [ 1485.463209][ T141] bond0: (slave bond_slave_1): interface is now down [ 1485.463251][ T141] bond0: (slave syz_tun): interface is now down [ 1485.475020][ T141] bond0: (slave bond_slave_0): interface is now down [ 1485.475110][ T141] bond0: (slave bond_slave_1): interface is now down [ 1485.475162][ T141] bond0: (slave syz_tun): interface is now down [ 1485.516414][ T13] bond0: (slave bond_slave_0): interface is now down [ 1485.516440][ T13] bond0: (slave bond_slave_1): interface is now down [ 1485.516456][ T13] bond0: (slave syz_tun): interface is now down [ 1485.536001][ T3350] bond0: (slave bond_slave_0): interface is now down [ 1485.536032][ T3350] bond0: (slave bond_slave_1): interface is now down [ 1485.536047][ T3350] bond0: (slave syz_tun): interface is now down [ 1485.568435][ T3350] bond0: (slave bond_slave_0): interface is now down [ 1485.568461][ T3350] bond0: (slave bond_slave_1): interface is now down [ 1485.568475][ T3350] bond0: (slave syz_tun): interface is now down [ 1485.599114][T24416] bond0: (slave bond_slave_0): interface is now down [ 1485.599142][T24416] bond0: (slave bond_slave_1): interface is now down [ 1485.599157][T24416] bond0: (slave syz_tun): interface is now down [ 1485.622763][ T161] bond0: (slave bond_slave_0): interface is now down [ 1485.622837][ T161] bond0: (slave bond_slave_1): interface is now down [ 1485.622872][ T161] bond0: (slave syz_tun): interface is now down [ 1485.645549][ T3350] bond0: (slave bond_slave_0): interface is now down [ 1485.645581][ T3350] bond0: (slave bond_slave_1): interface is now down [ 1485.645596][ T3350] bond0: (slave syz_tun): interface is now down [ 1485.674697][T24416] bond0: (slave bond_slave_0): interface is now down [ 1485.674724][T24416] bond0: (slave bond_slave_1): interface is now down [ 1485.674740][T24416] bond0: (slave syz_tun): interface is now down [ 1485.704100][ T161] bond0: (slave bond_slave_0): interface is now down [ 1485.704127][ T161] bond0: (slave bond_slave_1): interface is now down [ 1485.704142][ T161] bond0: (slave syz_tun): interface is now down [ 1485.732291][ T50] bond0: (slave bond_slave_0): interface is now down [ 1485.732359][ T50] bond0: (slave bond_slave_1): interface is now down [ 1485.732374][ T50] bond0: (slave syz_tun): interface is now down [ 1485.756228][T24407] bond0: (slave bond_slave_0): interface is now down [ 1485.756254][T24407] bond0: (slave bond_slave_1): interface is now down [ 1485.756270][T24407] bond0: (slave syz_tun): interface is now down [ 1485.788132][ T161] bond0: (slave bond_slave_0): interface is now down [ 1485.788159][ T161] bond0: (slave bond_slave_1): interface is now down [ 1485.788175][ T161] bond0: (slave syz_tun): interface is now down [ 1485.821032][T24409] bond0: (slave bond_slave_0): interface is now down [ 1485.821060][T24409] bond0: (slave bond_slave_1): interface is now down [ 1485.821076][T24409] bond0: (slave syz_tun): interface is now down [ 1485.888547][T24409] bond0: (slave bond_slave_0): interface is now down [ 1485.888575][T24409] bond0: (slave bond_slave_1): interface is now down [ 1485.888590][T24409] bond0: (slave syz_tun): interface is now down [ 1485.914641][T24407] bond0: (slave bond_slave_0): interface is now down [ 1485.914669][T24407] bond0: (slave bond_slave_1): interface is now down [ 1485.914684][T24407] bond0: (slave syz_tun): interface is now down [ 1485.933067][T24409] bond0: (slave bond_slave_0): interface is now down [ 1485.933126][T24409] bond0: (slave bond_slave_1): interface is now down [ 1485.933179][T24409] bond0: (slave syz_tun): interface is now down [ 1485.958389][ T31] bond0: (slave bond_slave_0): interface is now down [ 1485.958467][ T31] bond0: (slave bond_slave_1): interface is now down [ 1485.958511][ T31] bond0: (slave syz_tun): interface is now down [ 1485.976608][T24407] bond0: (slave bond_slave_0): interface is now down [ 1485.976684][T24407] bond0: (slave bond_slave_1): interface is now down [ 1485.976727][T24407] bond0: (slave syz_tun): interface is now down [ 1485.992140][T24407] bond0: (slave bond_slave_0): interface is now down [ 1485.992222][T24407] bond0: (slave bond_slave_1): interface is now down [ 1485.992274][T24407] bond0: (slave syz_tun): interface is now down [ 1486.013849][ T31] bond0: (slave bond_slave_0): interface is now down [ 1486.013913][ T31] bond0: (slave bond_slave_1): interface is now down [ 1486.013961][ T31] bond0: (slave syz_tun): interface is now down [ 1486.033936][T24409] bond0: (slave bond_slave_0): interface is now down [ 1486.034001][T24409] bond0: (slave bond_slave_1): interface is now down [ 1486.034044][T24409] bond0: (slave syz_tun): interface is now down [ 1486.056522][ T13] bond0: (slave bond_slave_0): interface is now down [ 1486.056599][ T13] bond0: (slave bond_slave_1): interface is now down [ 1486.056642][ T13] bond0: (slave syz_tun): interface is now down [ 1486.072762][ T13] bond0: (slave bond_slave_0): interface is now down [ 1486.072837][ T13] bond0: (slave bond_slave_1): interface is now down [ 1486.072881][ T13] bond0: (slave syz_tun): interface is now down [ 1486.095037][ T13] bond0: (slave bond_slave_0): interface is now down [ 1486.095120][ T13] bond0: (slave bond_slave_1): interface is now down [ 1486.095163][ T13] bond0: (slave syz_tun): interface is now down [ 1486.102991][T31892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1486.112263][T24407] bond0: (slave bond_slave_0): interface is now down [ 1486.112341][T24407] bond0: (slave bond_slave_1): interface is now down [ 1486.112379][T24407] bond0: (slave syz_tun): interface is now down [ 1486.135460][T24407] bond0: (slave bond_slave_0): interface is now down [ 1486.135538][T24407] bond0: (slave bond_slave_1): interface is now down [ 1486.135575][T24407] bond0: (slave syz_tun): interface is now down [ 1486.160825][T24407] bond0: (slave bond_slave_0): interface is now down [ 1486.160896][T24407] bond0: (slave bond_slave_1): interface is now down [ 1486.160940][T24407] bond0: (slave syz_tun): interface is now down [ 1486.201822][ T13] bond0: (slave bond_slave_0): interface is now down [ 1486.201898][ T13] bond0: (slave bond_slave_1): interface is now down [ 1486.201935][ T13] bond0: (slave syz_tun): interface is now down [ 1486.225421][T24407] bond0: (slave bond_slave_0): interface is now down [ 1486.225447][T24407] bond0: (slave bond_slave_1): interface is now down [ 1486.225463][T24407] bond0: (slave syz_tun): interface is now down [ 1486.245534][T24409] bond0: (slave bond_slave_0): interface is now down [ 1486.245561][T24409] bond0: (slave bond_slave_1): interface is now down [ 1486.245577][T24409] bond0: (slave syz_tun): interface is now down [ 1486.272102][T24407] bond0: (slave bond_slave_0): interface is now down [ 1486.272177][T24407] bond0: (slave bond_slave_1): interface is now down [ 1486.272218][T24407] bond0: (slave syz_tun): interface is now down [ 1486.296740][ T31] bond0: (slave bond_slave_0): interface is now down [ 1486.296767][ T31] bond0: (slave bond_slave_1): interface is now down [ 1486.296784][ T31] bond0: (slave syz_tun): interface is now down [ 1486.312911][T24407] bond0: (slave bond_slave_0): interface is now down [ 1486.312976][T24407] bond0: (slave bond_slave_1): interface is now down [ 1486.313011][T24407] bond0: (slave syz_tun): interface is now down [ 1486.342463][T24409] bond0: (slave bond_slave_0): interface is now down [ 1486.342489][T24409] bond0: (slave bond_slave_1): interface is now down [ 1486.342505][T24409] bond0: (slave syz_tun): interface is now down [ 1486.346582][T31892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1486.365767][T24409] bond0: (slave bond_slave_0): interface is now down [ 1486.365791][T24409] bond0: (slave bond_slave_1): interface is now down [ 1486.365806][T24409] bond0: (slave syz_tun): interface is now down [ 1486.396456][T24409] bond0: (slave bond_slave_0): interface is now down [ 1486.396512][T24409] bond0: (slave bond_slave_1): interface is now down [ 1486.396554][T24409] bond0: (slave syz_tun): interface is now down [ 1486.442886][ T161] bond0: (slave bond_slave_0): interface is now down [ 1486.442915][ T161] bond0: (slave bond_slave_1): interface is now down [ 1486.442931][ T161] bond0: (slave syz_tun): interface is now down [ 1486.468498][T31567] bond0: (slave bond_slave_0): interface is now down [ 1486.468523][T31567] bond0: (slave bond_slave_1): interface is now down [ 1486.468539][T31567] bond0: (slave syz_tun): interface is now down [ 1486.494733][T24407] bond0: (slave bond_slave_0): interface is now down [ 1486.494761][T24407] bond0: (slave bond_slave_1): interface is now down [ 1486.494778][T24407] bond0: (slave syz_tun): interface is now down [ 1486.557423][ T161] bond0: (slave bond_slave_0): interface is now down [ 1486.557451][ T161] bond0: (slave bond_slave_1): interface is now down [ 1486.557468][ T161] bond0: (slave syz_tun): interface is now down [ 1486.583676][ T141] bond0: (slave bond_slave_0): interface is now down [ 1486.583752][ T141] bond0: (slave bond_slave_1): interface is now down [ 1486.583795][ T141] bond0: (slave syz_tun): interface is now down [ 1486.605152][T31567] bond0: (slave bond_slave_0): interface is now down [ 1486.605177][T31567] bond0: (slave bond_slave_1): interface is now down [ 1486.605192][T31567] bond0: (slave syz_tun): interface is now down [ 1486.667032][T31567] bond0: (slave bond_slave_0): interface is now down [ 1486.667063][T31567] bond0: (slave bond_slave_1): interface is now down [ 1486.667079][T31567] bond0: (slave syz_tun): interface is now down [ 1486.713501][T31567] bond0: (slave bond_slave_0): interface is now down [ 1486.713529][T31567] bond0: (slave bond_slave_1): interface is now down [ 1486.713546][T31567] bond0: (slave syz_tun): interface is now down [ 1486.717697][T31892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1486.717729][T31892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1486.736074][T31567] bond0: (slave bond_slave_0): interface is now down [ 1486.736108][T31567] bond0: (slave bond_slave_1): interface is now down [ 1486.736124][T31567] bond0: (slave syz_tun): interface is now down [ 1486.756169][T31567] bond0: (slave bond_slave_0): interface is now down [ 1486.756196][T31567] bond0: (slave bond_slave_1): interface is now down [ 1486.756213][T31567] bond0: (slave syz_tun): interface is now down [ 1486.776692][T31567] bond0: (slave bond_slave_0): interface is now down [ 1486.776719][T31567] bond0: (slave bond_slave_1): interface is now down [ 1486.776735][T31567] bond0: (slave syz_tun): interface is now down [ 1486.807251][ T31] bond0: (slave bond_slave_0): interface is now down [ 1486.807276][ T31] bond0: (slave bond_slave_1): interface is now down [ 1486.807295][ T31] bond0: (slave syz_tun): interface is now down [ 1486.857148][ T31] bond0: (slave bond_slave_0): interface is now down [ 1486.857223][ T31] bond0: (slave bond_slave_1): interface is now down [ 1486.857260][ T31] bond0: (slave syz_tun): interface is now down [ 1486.881633][ T31] bond0: (slave bond_slave_0): interface is now down [ 1486.881663][ T31] bond0: (slave bond_slave_1): interface is now down [ 1486.881679][ T31] bond0: (slave syz_tun): interface is now down [ 1486.913481][T24407] bond0: (slave bond_slave_0): interface is now down [ 1486.913507][T24407] bond0: (slave bond_slave_1): interface is now down [ 1486.913522][T24407] bond0: (slave syz_tun): interface is now down [ 1486.941964][ T3350] bond0: (slave bond_slave_0): interface is now down [ 1486.942035][ T3350] bond0: (slave bond_slave_1): interface is now down [ 1486.942080][ T3350] bond0: (slave syz_tun): interface is now down [ 1486.969327][ T141] bond0: (slave bond_slave_0): interface is now down [ 1486.969353][ T141] bond0: (slave bond_slave_1): interface is now down [ 1486.969370][ T141] bond0: (slave syz_tun): interface is now down [ 1486.992113][ T141] bond0: (slave bond_slave_0): interface is now down [ 1486.992180][ T141] bond0: (slave bond_slave_1): interface is now down [ 1486.992232][ T141] bond0: (slave syz_tun): interface is now down [ 1487.001826][ T141] bond0: (slave bond_slave_0): interface is now down [ 1487.001898][ T141] bond0: (slave bond_slave_1): interface is now down [ 1487.001934][ T141] bond0: (slave syz_tun): interface is now down [ 1487.038688][T31567] bond0: (slave bond_slave_0): interface is now down [ 1487.038715][T31567] bond0: (slave bond_slave_1): interface is now down [ 1487.038733][T31567] bond0: (slave syz_tun): interface is now down [ 1487.055288][ T141] bond0: (slave bond_slave_0): interface is now down [ 1487.055312][ T141] bond0: (slave bond_slave_1): interface is now down [ 1487.055327][ T141] bond0: (slave syz_tun): interface is now down [ 1487.083073][T31567] bond0: (slave bond_slave_0): interface is now down [ 1487.083099][T31567] bond0: (slave bond_slave_1): interface is now down [ 1487.083114][T31567] bond0: (slave syz_tun): interface is now down [ 1487.113198][T31567] bond0: (slave bond_slave_0): interface is now down [ 1487.113226][T31567] bond0: (slave bond_slave_1): interface is now down [ 1487.113242][T31567] bond0: (slave syz_tun): interface is now down [ 1487.120686][T31892] veth1_macvtap: left promiscuous mode [ 1487.148725][ T161] bond0: (slave bond_slave_0): interface is now down [ 1487.148749][ T161] bond0: (slave bond_slave_1): interface is now down [ 1487.148764][ T161] bond0: (slave syz_tun): interface is now down [ 1487.166998][ T141] bond0: (slave bond_slave_0): interface is now down [ 1487.167022][ T141] bond0: (slave bond_slave_1): interface is now down [ 1487.167045][ T141] bond0: (slave syz_tun): interface is now down [ 1487.191660][ T141] bond0: (slave bond_slave_0): interface is now down [ 1487.191686][ T141] bond0: (slave bond_slave_1): interface is now down [ 1487.191700][ T141] bond0: (slave syz_tun): interface is now down [ 1487.221635][T31567] bond0: (slave bond_slave_0): interface is now down [ 1487.221662][T31567] bond0: (slave bond_slave_1): interface is now down [ 1487.221678][T31567] bond0: (slave syz_tun): interface is now down [ 1487.226339][T31892] veth0_macvtap: left promiscuous mode [ 1487.230297][T31892] veth0_macvtap: entered promiscuous mode [ 1487.251942][ T50] bond0: (slave bond_slave_0): interface is now down [ 1487.252006][ T50] bond0: (slave bond_slave_1): interface is now down [ 1487.252061][ T50] bond0: (slave syz_tun): interface is now down [ 1487.296052][T31567] bond0: (slave bond_slave_0): interface is now down [ 1487.296081][T31567] bond0: (slave bond_slave_1): interface is now down [ 1487.296098][T31567] bond0: (slave syz_tun): interface is now down [ 1487.298952][T31892] veth1_macvtap: entered promiscuous mode [ 1487.334457][ T141] bond0: (slave bond_slave_0): interface is now down [ 1487.334482][ T141] bond0: (slave bond_slave_1): interface is now down [ 1487.334499][ T141] bond0: (slave syz_tun): interface is now down [ 1487.362498][T31567] bond0: (slave bond_slave_0): interface is now down [ 1487.362523][T31567] bond0: (slave bond_slave_1): interface is now down [ 1487.362538][T31567] bond0: (slave syz_tun): interface is now down [ 1487.395463][ T13] bond0: (slave bond_slave_0): interface is now down [ 1487.395489][ T13] bond0: (slave bond_slave_1): interface is now down [ 1487.395504][ T13] bond0: (slave syz_tun): interface is now down [ 1487.417951][ T13] bond0: (slave bond_slave_0): interface is now down [ 1487.417982][ T13] bond0: (slave bond_slave_1): interface is now down [ 1487.417999][ T13] bond0: (slave syz_tun): interface is now down [ 1487.453273][ T13] bond0: (slave bond_slave_0): interface is now down [ 1487.453299][ T13] bond0: (slave bond_slave_1): interface is now down [ 1487.453316][ T13] bond0: (slave syz_tun): interface is now down [ 1487.456993][T31892] ipvlan2: left promiscuous mode [ 1487.475441][ T50] bond0: (slave bond_slave_0): interface is now down [ 1487.475466][ T50] bond0: (slave bond_slave_1): interface is now down [ 1487.475482][ T50] bond0: (slave syz_tun): interface is now down [ 1487.500043][T31940] FAULT_INJECTION: forcing a failure. [ 1487.500043][T31940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1487.500146][T31940] CPU: 0 UID: 0 PID: 31940 Comm: syz.4.7457 Not tainted syzkaller #0 PREEMPT(full) [ 1487.500225][T31940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1487.500258][T31940] Call Trace: [ 1487.500280][T31940] [ 1487.500303][T31940] dump_stack_lvl+0xe8/0x150 [ 1487.500413][T31940] should_fail_ex+0x3eb/0x540 [ 1487.500501][T31940] _copy_from_iter+0x1d3/0x1680 [ 1487.500611][T31940] ? __pfx__copy_from_iter+0x10/0x10 [ 1487.500708][T31940] ? trace_rxrpc_txbuf+0x89/0x230 [ 1487.500794][T31940] ? rxrpc_alloc_data_txbuf+0x3b5/0x5a0 [ 1487.500896][T31940] rxrpc_send_data+0x10cf/0x2b70 [ 1487.501092][T31940] ? __pfx_rxrpc_send_data+0x10/0x10 [ 1487.501157][T31940] ? try_to_wake_up+0x8ce/0x14e0 [ 1487.501244][T31940] ? _raw_spin_unlock_irq+0x23/0x50 [ 1487.501311][T31940] ? __pfx_default_wake_function+0x10/0x10 [ 1487.501406][T31940] ? rxrpc_new_client_call+0xf16/0x14f0 [ 1487.501505][T31940] ? trace_rxrpc_peer+0x82/0x200 [ 1487.501578][T31940] rxrpc_do_sendmsg+0x10c9/0x1260 [ 1487.501690][T31940] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 1487.501799][T31940] ? rxrpc_sendmsg+0x4ee/0x6b0 [ 1487.501893][T31940] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 1487.501959][T31940] sock_sendmsg_nosec+0x14e/0x190 [ 1487.502060][T31940] ____sys_sendmsg+0x54e/0x850 [ 1487.502138][T31940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1487.502227][T31940] ? import_iovec+0x73/0xa0 [ 1487.502311][T31940] ___sys_sendmsg+0x2a5/0x360 [ 1487.502368][T31940] ? __lock_acquire+0x747/0x2de0 [ 1487.502458][T31940] ? __pfx____sys_sendmsg+0x10/0x10 [ 1487.502575][T31940] ? __fget_files+0x3a2/0x420 [ 1487.502602][T31940] ? __fget_files+0x2a/0x420 [ 1487.502639][T31940] __x64_sys_sendmsg+0x1b1/0x290 [ 1487.502668][T31940] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1487.502718][T31940] do_syscall_64+0x166/0x520 [ 1487.502743][T31940] ? trace_irq_disable+0x3b/0x140 [ 1487.502775][T31940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.502803][T31940] ? clear_bhb_loop+0x70/0xc0 [ 1487.502836][T31940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.502864][T31940] RIP: 0033:0x7f358c19fb19 [ 1487.502885][T31940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.502905][T31940] RSP: 002b:00007f358d0cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1487.502929][T31940] RAX: ffffffffffffffda RBX: 00007f358c425fa0 RCX: 00007f358c19fb19 [ 1487.502951][T31940] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1487.502966][T31940] RBP: 00007f358d0cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.502980][T31940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1487.502994][T31940] R13: 00007f358c426038 R14: 00007f358c425fa0 R15: 00007fffdc74dab8 [ 1487.503038][T31940] [ 1487.503522][ T50] bond0: (slave bond_slave_0): interface is now down [ 1487.503542][ T50] bond0: (slave bond_slave_1): interface is now down [ 1487.503558][ T50] bond0: (slave syz_tun): interface is now down [ 1487.535259][T31567] bond0: (slave bond_slave_0): interface is now down [ 1487.535286][T31567] bond0: (slave bond_slave_1): interface is now down [ 1487.535303][T31567] bond0: (slave syz_tun): interface is now down [ 1487.571869][ T161] bond0: (slave bond_slave_0): interface is now down [ 1487.571926][ T161] bond0: (slave bond_slave_1): interface is now down [ 1487.571970][ T161] bond0: (slave syz_tun): interface is now down [ 1487.582994][T31892] gretap0: entered promiscuous mode [ 1487.604610][ T50] bond0: (slave bond_slave_0): interface is now down [ 1487.604677][ T50] bond0: (slave bond_slave_1): interface is now down [ 1487.604713][ T50] bond0: (slave syz_tun): interface is now down [ 1487.628513][T31567] bond0: (slave bond_slave_0): interface is now down [ 1487.628571][T31567] bond0: (slave bond_slave_1): interface is now down [ 1487.628620][T31567] bond0: (slave syz_tun): interface is now down [ 1487.651935][T31567] bond0: (slave bond_slave_0): interface is now down [ 1487.651961][T31567] bond0: (slave bond_slave_1): interface is now down [ 1487.651977][T31567] bond0: (slave syz_tun): interface is now down [ 1487.684590][ T161] bond0: (slave bond_slave_0): interface is now down [ 1487.684652][ T161] bond0: (slave bond_slave_1): interface is now down [ 1487.684695][ T161] bond0: (slave syz_tun): interface is now down [ 1487.713753][T24409] bond0: (slave bond_slave_0): interface is now down [ 1487.713779][T24409] bond0: (slave bond_slave_1): interface is now down [ 1487.713794][T24409] bond0: (slave syz_tun): interface is now down [ 1487.759100][T31567] bond0: (slave bond_slave_0): interface is now down [ 1487.759182][T31567] bond0: (slave bond_slave_1): interface is now down [ 1487.759232][T31567] bond0: (slave syz_tun): interface is now down [ 1487.782951][ T141] bond0: (slave bond_slave_0): interface is now down [ 1487.783017][ T141] bond0: (slave bond_slave_1): interface is now down [ 1487.783053][ T141] bond0: (slave syz_tun): interface is now down [ 1487.810610][ T50] bond0: (slave bond_slave_0): interface is now down [ 1487.810677][ T50] bond0: (slave bond_slave_1): interface is now down [ 1487.810728][ T50] bond0: (slave syz_tun): interface is now down [ 1487.815674][T31892] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1487.837445][ T161] bond0: (slave bond_slave_0): interface is now down [ 1487.837471][ T161] bond0: (slave bond_slave_1): interface is now down [ 1487.837486][ T161] bond0: (slave syz_tun): interface is now down [ 1487.874794][ T141] bond0: (slave bond_slave_0): interface is now down [ 1487.874854][ T141] bond0: (slave bond_slave_1): interface is now down [ 1487.874898][ T141] bond0: (slave syz_tun): interface is now down [ 1487.903485][ T50] bond0: (slave bond_slave_0): interface is now down [ 1487.903561][ T50] bond0: (slave bond_slave_1): interface is now down [ 1487.903597][ T50] bond0: (slave syz_tun): interface is now down [ 1487.923048][T24409] bond0: (slave bond_slave_0): interface is now down [ 1487.923114][T24409] bond0: (slave bond_slave_1): interface is now down [ 1487.923158][T24409] bond0: (slave syz_tun): interface is now down [ 1487.947588][ T3350] bond0: (slave bond_slave_0): interface is now down [ 1487.947614][ T3350] bond0: (slave bond_slave_1): interface is now down [ 1487.947642][ T3350] bond0: (slave syz_tun): interface is now down [ 1487.975236][ T141] bond0: (slave bond_slave_0): interface is now down [ 1487.975264][ T141] bond0: (slave bond_slave_1): interface is now down [ 1487.975280][ T141] bond0: (slave syz_tun): interface is now down [ 1488.002324][ T3350] bond0: (slave bond_slave_0): interface is now down [ 1488.002379][ T3350] bond0: (slave bond_slave_1): interface is now down [ 1488.002425][ T3350] bond0: (slave syz_tun): interface is now down [ 1488.032089][ T13] bond0: (slave bond_slave_0): interface is now down [ 1488.032161][ T13] bond0: (slave bond_slave_1): interface is now down [ 1488.032206][ T13] bond0: (slave syz_tun): interface is now down [ 1488.084264][ T161] bond0: (slave bond_slave_0): interface is now down [ 1488.084342][ T161] bond0: (slave bond_slave_1): interface is now down [ 1488.084384][ T161] bond0: (slave syz_tun): interface is now down [ 1488.104395][T24407] bond0: (slave bond_slave_0): interface is now down [ 1488.104461][T24407] bond0: (slave bond_slave_1): interface is now down [ 1488.104497][T24407] bond0: (slave syz_tun): interface is now down [ 1488.122239][ T31] bond0: (slave bond_slave_0): interface is now down [ 1488.122305][ T31] bond0: (slave bond_slave_1): interface is now down [ 1488.122340][ T31] bond0: (slave syz_tun): interface is now down [ 1488.144450][ T31] bond0: (slave bond_slave_0): interface is now down [ 1488.144528][ T31] bond0: (slave bond_slave_1): interface is now down [ 1488.144564][ T31] bond0: (slave syz_tun): interface is now down [ 1488.165042][T31892] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1488.173119][T24407] bond0: (slave bond_slave_0): interface is now down [ 1488.173177][T24407] bond0: (slave bond_slave_1): interface is now down [ 1488.173227][T24407] bond0: (slave syz_tun): interface is now down [ 1488.192606][T31567] bond0: (slave bond_slave_0): interface is now down [ 1488.192630][T31567] bond0: (slave bond_slave_1): interface is now down [ 1488.192644][T31567] bond0: (slave syz_tun): interface is now down [ 1488.225058][T31567] bond0: (slave bond_slave_0): interface is now down [ 1488.225124][T31567] bond0: (slave bond_slave_1): interface is now down [ 1488.225166][T31567] bond0: (slave syz_tun): interface is now down [ 1488.265914][T24409] bond0: (slave bond_slave_0): interface is now down [ 1488.265980][T24409] bond0: (slave bond_slave_1): interface is now down [ 1488.266023][T24409] bond0: (slave syz_tun): interface is now down [ 1488.292161][T24409] bond0: (slave bond_slave_0): interface is now down [ 1488.292225][T24409] bond0: (slave bond_slave_1): interface is now down [ 1488.292262][T24409] bond0: (slave syz_tun): interface is now down [ 1488.312599][ T141] bond0: (slave bond_slave_0): interface is now down [ 1488.312666][ T141] bond0: (slave bond_slave_1): interface is now down [ 1488.312708][ T141] bond0: (slave syz_tun): interface is now down [ 1488.343842][ T50] bond0: (slave bond_slave_0): interface is now down [ 1488.343915][ T50] bond0: (slave bond_slave_1): interface is now down [ 1488.343950][ T50] bond0: (slave syz_tun): interface is now down [ 1488.362651][T31892] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1488.368875][T31567] bond0: (slave bond_slave_0): interface is now down [ 1488.368947][T31567] bond0: (slave bond_slave_1): interface is now down [ 1488.368990][T31567] bond0: (slave syz_tun): interface is now down [ 1488.424420][ T3350] bond0: (slave bond_slave_0): interface is now down [ 1488.424482][ T3350] bond0: (slave bond_slave_1): interface is now down [ 1488.424525][ T3350] bond0: (slave syz_tun): interface is now down [ 1488.524097][ T141] bond0: (slave bond_slave_0): interface is now down [ 1488.524127][ T141] bond0: (slave bond_slave_1): interface is now down [ 1488.524142][ T141] bond0: (slave syz_tun): interface is now down [ 1488.554818][ T161] bond0: (slave bond_slave_0): interface is now down [ 1488.554845][ T161] bond0: (slave bond_slave_1): interface is now down [ 1488.554862][ T161] bond0: (slave syz_tun): interface is now down [ 1488.584732][T31567] bond0: (slave bond_slave_0): interface is now down [ 1488.584756][T31567] bond0: (slave bond_slave_1): interface is now down [ 1488.584769][T31567] bond0: (slave syz_tun): interface is now down [ 1488.588076][T31892] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1488.612297][T24407] bond0: (slave bond_slave_0): interface is now down [ 1488.612361][T24407] bond0: (slave bond_slave_1): interface is now down [ 1488.612402][T24407] bond0: (slave syz_tun): interface is now down [ 1488.705376][T24407] bond0: (slave bond_slave_0): interface is now down [ 1488.705407][T24407] bond0: (slave bond_slave_1): interface is now down [ 1488.705424][T24407] bond0: (slave syz_tun): interface is now down [ 1488.723636][ T141] bond0: (slave bond_slave_0): interface is now down [ 1488.723664][ T141] bond0: (slave bond_slave_1): interface is now down [ 1488.723681][ T141] bond0: (slave syz_tun): interface is now down [ 1488.745632][T24407] bond0: (slave bond_slave_0): interface is now down [ 1488.745662][T24407] bond0: (slave bond_slave_1): interface is now down [ 1488.745679][T24407] bond0: (slave syz_tun): interface is now down [ 1488.767226][ T141] bond0: (slave bond_slave_0): interface is now down [ 1488.767253][ T141] bond0: (slave bond_slave_1): interface is now down [ 1488.767270][ T141] bond0: (slave syz_tun): interface is now down [ 1488.788492][T24407] bond0: (slave bond_slave_0): interface is now down [ 1488.788516][T24407] bond0: (slave bond_slave_1): interface is now down [ 1488.788532][T24407] bond0: (slave syz_tun): interface is now down [ 1488.805559][T24407] bond0: (slave bond_slave_0): interface is now down [ 1488.805584][T24407] bond0: (slave bond_slave_1): interface is now down [ 1488.805600][T24407] bond0: (slave syz_tun): interface is now down [ 1488.848205][T24407] bond0: (slave bond_slave_0): interface is now down [ 1488.848232][T24407] bond0: (slave bond_slave_1): interface is now down [ 1488.848249][T24407] bond0: (slave syz_tun): interface is now down [ 1488.870345][T24407] bond0: (slave bond_slave_0): interface is now down [ 1488.870373][T24407] bond0: (slave bond_slave_1): interface is now down [ 1488.870392][T24407] bond0: (slave syz_tun): interface is now down [ 1488.892578][T24407] bond0: (slave bond_slave_0): interface is now down [ 1488.892606][T24407] bond0: (slave bond_slave_1): interface is now down [ 1488.892623][T24407] bond0: (slave syz_tun): interface is now down [ 1488.942039][T24409] bond0: (slave bond_slave_0): interface is now down [ 1488.942067][T24409] bond0: (slave bond_slave_1): interface is now down [ 1488.942084][T24409] bond0: (slave syz_tun): interface is now down [ 1489.024481][T31567] bond0: (slave bond_slave_0): interface is now down [ 1489.024508][T31567] bond0: (slave bond_slave_1): interface is now down [ 1489.024523][T31567] bond0: (slave syz_tun): interface is now down [ 1489.046424][T31567] bond0: (slave bond_slave_0): interface is now down [ 1489.046449][T31567] bond0: (slave bond_slave_1): interface is now down [ 1489.046466][T31567] bond0: (slave syz_tun): interface is now down [ 1489.068212][T31567] bond0: (slave bond_slave_0): interface is now down [ 1489.068241][T31567] bond0: (slave bond_slave_1): interface is now down [ 1489.068257][T31567] bond0: (slave syz_tun): interface is now down [ 1489.081997][T31567] bond0: (slave bond_slave_0): interface is now down [ 1489.082021][T31567] bond0: (slave bond_slave_1): interface is now down [ 1489.082038][T31567] bond0: (slave syz_tun): interface is now down [ 1489.104502][T31567] bond0: (slave bond_slave_0): interface is now down [ 1489.104530][T31567] bond0: (slave bond_slave_1): interface is now down [ 1489.104547][T31567] bond0: (slave syz_tun): interface is now down [ 1489.127539][T31567] bond0: (slave bond_slave_0): interface is now down [ 1489.127566][T31567] bond0: (slave bond_slave_1): interface is now down [ 1489.127583][T31567] bond0: (slave syz_tun): interface is now down [ 1489.182700][T24418] bridge0: port 3(veth0) entered blocking state [ 1489.182832][T24418] bridge0: port 3(veth0) entered forwarding state [ 1489.184285][T24418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.184409][T24418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1489.186653][T24418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.186785][T24418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1489.257743][T24409] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.263152][T24408] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.263209][T24408] bond0: (slave bond_slave_0): interface is now down [ 1489.263228][T24408] bond0: (slave bond_slave_1): interface is now down [ 1489.263244][T24408] bond0: (slave syz_tun): interface is now down [ 1489.364039][T31947] FAULT_INJECTION: forcing a failure. [ 1489.364039][T31947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1489.364076][T31947] CPU: 1 UID: 0 PID: 31947 Comm: syz.0.7460 Not tainted syzkaller #0 PREEMPT(full) [ 1489.364103][T31947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1489.364118][T31947] Call Trace: [ 1489.364127][T31947] [ 1489.364137][T31947] dump_stack_lvl+0xe8/0x150 [ 1489.364181][T31947] should_fail_ex+0x3eb/0x540 [ 1489.364216][T31947] _copy_to_user+0x31/0xb0 [ 1489.364250][T31947] simple_read_from_buffer+0xe1/0x170 [ 1489.364286][T31947] proc_fail_nth_read+0x1bb/0x230 [ 1489.364335][T31947] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1489.364377][T31947] ? rw_verify_area+0x24a/0x4c0 [ 1489.364409][T31947] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1489.364446][T31947] vfs_read+0x213/0xa80 [ 1489.364483][T31947] ? __pfx___mutex_lock+0x10/0x10 [ 1489.364513][T31947] ? __pfx_vfs_read+0x10/0x10 [ 1489.364546][T31947] ? __fget_files+0x2a/0x420 [ 1489.364573][T31947] ? __fget_files+0x3a2/0x420 [ 1489.364600][T31947] ? __fget_files+0x2a/0x420 [ 1489.364634][T31947] ? fdget+0x1ac/0x250 [ 1489.364671][T31947] ksys_read+0x150/0x270 [ 1489.364706][T31947] ? __pfx_ksys_read+0x10/0x10 [ 1489.364751][T31947] do_syscall_64+0x166/0x520 [ 1489.364778][T31947] ? trace_irq_disable+0x3b/0x140 [ 1489.364811][T31947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.364836][T31947] ? clear_bhb_loop+0x70/0xc0 [ 1489.364866][T31947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.364889][T31947] RIP: 0033:0x7f663776034e [ 1489.364911][T31947] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1489.364931][T31947] RSP: 002b:00007f6638585fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1489.364957][T31947] RAX: ffffffffffffffda RBX: 00007f66385866c0 RCX: 00007f663776034e [ 1489.364975][T31947] RDX: 000000000000000f RSI: 00007f66385860a0 RDI: 0000000000000004 [ 1489.364990][T31947] RBP: 00007f6638586090 R08: 0000000000000000 R09: 0000000000000000 [ 1489.365005][T31947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1489.365019][T31947] R13: 00007f6637a26038 R14: 00007f6637a25fa0 R15: 00007ffebbdf0418 [ 1489.365058][T31947] [ 1489.699044][T24408] bond0: now running without any active interface! [ 1489.771611][T24409] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.771687][T24409] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.780846][T31930] syzkaller0: entered promiscuous mode [ 1489.780872][T31930] syzkaller0: entered allmulticast mode [ 1489.971565][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1490.350278][T31955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7463'. [ 1491.139664][T31971] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7465'. [ 1491.278085][T31971] netlink: 'syz.4.7465': attribute type 1 has an invalid length. [ 1491.278120][T31971] netlink: 5268 bytes leftover after parsing attributes in process `syz.4.7465'. [ 1491.278140][T31971] netlink: 'syz.4.7465': attribute type 1 has an invalid length. [ 1491.335626][T31966] syzkaller0: entered promiscuous mode [ 1491.335656][T31966] syzkaller0: entered allmulticast mode [ 1495.695661][T31994] tap0: tun_chr_ioctl cmd 1074025677 [ 1495.695800][T31994] tap0: linktype set to 805 [ 1496.215009][T32005] netlink: 'syz.1.7470': attribute type 1 has an invalid length. [ 1496.268744][T32012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7470'. [ 1496.268769][T32012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7470'. [ 1496.269323][T32008] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1496.446457][T32017] netlink: 'syz.2.7472': attribute type 3 has an invalid length. [ 1496.446484][T32017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7472'. [ 1496.446506][T32017] netlink: 'syz.2.7472': attribute type 3 has an invalid length. [ 1496.446523][T32017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7472'. [ 1496.446901][T32017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7472'. [ 1496.520882][T32020] x_tables: unsorted underflow at hook 1 [ 1496.557974][T32005] bond1: entered promiscuous mode [ 1496.558733][T32005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1496.966363][T32013] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7473'. [ 1497.474539][T32042] netlink: 'syz.0.7482': attribute type 11 has an invalid length. [ 1497.474565][T32042] netlink: 'syz.0.7482': attribute type 9 has an invalid length. [ 1497.474582][T32042] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7482'. [ 1497.529337][T32042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7482'. [ 1497.595298][T32038] syzkaller0: entered promiscuous mode [ 1497.595326][T32038] syzkaller0: entered allmulticast mode [ 1497.596401][T32041] syzkaller1: entered promiscuous mode [ 1497.596421][T32041] syzkaller1: entered allmulticast mode [ 1499.159327][T32058] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1499.161250][T32058] netlink: 450 bytes leftover after parsing attributes in process `syz.0.7485'. [ 1503.283012][T32065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7486'. [ 1504.265804][T32091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7493'. [ 1504.472841][T32094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.479397][T32094] 8021q: adding VLAN 0 to HW filter on device team0 [ 1504.504364][T32094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1504.685874][T32094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1504.727004][T32094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1504.771206][T32094] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1504.771236][T32094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1504.918895][T32094] veth1_vlan: left promiscuous mode [ 1504.920221][T32094] @ÿ: left promiscuous mode [ 1504.934767][T32094] @ÿ: entered promiscuous mode [ 1504.937978][T32094] veth1_vlan: entered promiscuous mode [ 1504.956060][T32094] veth1_macvtap: left promiscuous mode [ 1504.957393][T32094] veth0_macvtap: left promiscuous mode [ 1504.958661][T32094] veth0_macvtap: entered promiscuous mode [ 1504.959894][T32094] veth1_macvtap: entered promiscuous mode [ 1504.989352][T32094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1504.990778][T32094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1504.999173][T32094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1505.020534][T32094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1505.036628][T32094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1505.062583][T31567] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.062686][T31567] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.062812][T31567] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.062911][T31567] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.230496][T24409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.230621][T24409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1505.248288][T24409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.248405][T24409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.528281][T32110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7497'. [ 1505.528345][T32110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7497'. [ 1505.570777][T32110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7497'. [ 1505.584228][T32103] syzkaller0: entered promiscuous mode [ 1505.584258][T32103] syzkaller0: entered allmulticast mode [ 1505.681119][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880587c6400: rx timeout, send abort [ 1506.188646][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888066414400: rx timeout, send abort [ 1506.188711][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880587c6400: abort rx timeout. Force session deactivation [ 1506.195120][T17232] Bluetooth: hci0: Opcode 0x202d failed: -110 [ 1506.195146][T17232] Bluetooth: hci0: Unable to enable LL privacy: -110 [ 1506.205351][T27373] Bluetooth: hci0: command 0x0406 tx timeout [ 1506.206479][T17232] Bluetooth: hci0: Opcode 0x200b failed: -110 [ 1506.206502][T17232] Bluetooth: hci0: start background scanning failed: -110 [ 1506.291972][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888066414400: connection exists (fe ff). last cmd: 20 [ 1506.541660][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888044aec400: rx timeout, send abort [ 1507.044246][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888044aec400: abort rx timeout. Force session deactivation [ 1508.214038][T17232] Bluetooth: hci0: command 0x0406 tx timeout [ 1511.440868][T32139] netlink: 'syz.4.7504': attribute type 12 has an invalid length. [ 1511.440894][T32139] netlink: 'syz.4.7504': attribute type 29 has an invalid length. [ 1511.440911][T32139] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7504'. [ 1511.440933][T32139] netlink: 'syz.4.7504': attribute type 1 has an invalid length. [ 1511.440949][T32139] netlink: 'syz.4.7504': attribute type 2 has an invalid length. [ 1511.864916][T32144] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7507'. [ 1511.940963][T32144] syzkaller1: entered promiscuous mode [ 1511.940990][T32144] syzkaller1: entered allmulticast mode [ 1512.456013][T32167] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1512.974861][T32180] ip_tables: iptables: counters copy to user failed while replacing table [ 1513.040969][T32181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7516'. [ 1513.570491][T32194] netlink: 'syz.4.7519': attribute type 4 has an invalid length. [ 1514.518288][T32209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7524'. [ 1514.610851][T32217] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1514.662772][T32216] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7525'. [ 1515.007668][T32222] batman_adv: batadv0: Adding interface: syzkaller0 [ 1515.007693][T32222] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1515.007729][T32222] batman_adv: batadv0: Interface activated: syzkaller0 [ 1515.837194][T32221] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1515.895991][T32221] batman_adv: batadv0: Removing interface: syzkaller0 [ 1516.013868][T32238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7531'. [ 1516.095770][T32240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7530'. [ 1516.285963][T32249] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7531'. [ 1516.440361][T32248] ip6gretap1: entered allmulticast mode [ 1516.489110][T32248] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1516.489134][T32248] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.489172][T32248] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1517.254386][T32265] tipc: Started in network mode [ 1517.254425][T32265] tipc: Node identity 8aee040aa70f, cluster identity 4711 [ 1517.271811][T32265] tipc: Enabled bearer , priority 0 [ 1517.292934][T32261] tipc: Resetting bearer [ 1517.381977][T32275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7535'. [ 1517.452670][T32261] tipc: Disabling bearer [ 1517.988596][T32284] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1518.616422][T32302] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7542'. [ 1519.675382][T32312] bond1: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 1519.715940][T32312] bond1 (unregistering): Released all slaves [ 1520.480407][T32333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7551'. [ 1520.827945][T32341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7554'. [ 1521.835036][T32360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7561'. [ 1521.953652][T32360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7561'. [ 1521.966295][T32361] tipc: Enabled bearer , priority 0 [ 1521.989107][T32354] tipc: Resetting bearer [ 1525.102365][T32354] tipc: Disabling bearer [ 1525.207785][ T24] tipc: Node number set to 2742233983 [ 1525.456869][T32373] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7565'. [ 1525.589379][T32375] ip_tables: iptables: counters copy to user failed while replacing table [ 1525.616099][T32375] batman_adv: batadv0: Adding interface: syzkaller0 [ 1525.616121][T32375] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1525.616157][T32375] batman_adv: batadv0: Interface activated: syzkaller0 [ 1525.677242][T32374] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1525.840280][T32374] batman_adv: batadv0: Removing interface: syzkaller0 [ 1525.850725][T32383] xt_IDLETIMER: label is empty or not nul-terminated [ 1526.112467][T32394] netlink: 1820 bytes leftover after parsing attributes in process `syz.0.7571'. [ 1526.369647][T32397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7573'. [ 1526.387014][ T30] audit: type=1800 audit(1793945457.512:34): pid=32400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7574" name="blkio.bfq.time_recursive" dev="tmpfs" ino=754 res=0 errno=-22 [ 1526.827271][T32407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7577'. [ 1526.923283][T32407] syzkaller0: entered promiscuous mode [ 1526.923310][T32407] syzkaller0: entered allmulticast mode [ 1527.317782][T32424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7581'. [ 1527.404875][T32424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7581'. [ 1528.077816][T32446] tipc: Started in network mode [ 1528.077851][T32446] tipc: Node identity b271d3c36d6c, cluster identity 4711 [ 1528.078182][T32446] tipc: Enabled bearer , priority 0 [ 1528.101169][T32446] syzkaller0: entered promiscuous mode [ 1528.107273][T32446] syzkaller0: entered allmulticast mode [ 1528.258132][T32446] tipc: Resetting bearer [ 1528.451775][T32459] netlink: 'syz.4.7593': attribute type 10 has an invalid length. [ 1528.456301][T32459] syz_tun: entered promiscuous mode [ 1528.503796][T32459] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1528.552555][ T3350] bond0: (slave bond_slave_0): interface is now down [ 1528.552584][ T3350] bond0: (slave bond_slave_1): interface is now down [ 1528.552601][ T3350] bond0: (slave syz_tun): interface is now down [ 1528.585219][ T3350] bond0: (slave bond_slave_0): interface is now down [ 1528.585245][ T3350] bond0: (slave bond_slave_1): interface is now down [ 1528.585262][ T3350] bond0: (slave syz_tun): interface is now down [ 1528.608258][T32437] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1528.608329][T32437] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1528.630071][T32459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7593'. [ 1528.707603][ T3350] bond0: now running without any active interface! [ 1528.782757][T32465] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1528.815254][T32468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7594'. [ 1528.815608][T32459] syz_tun: left promiscuous mode [ 1528.955021][T32459] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1529.034787][T32445] tipc: Resetting bearer [ 1529.118149][T32445] tipc: Disabling bearer [ 1529.197769][T32437] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1529.197801][T32437] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1529.427543][T32437] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1529.427570][T32437] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1529.500748][T32471] FAULT_INJECTION: forcing a failure. [ 1529.500748][T32471] name failslab, interval 1, probability 0, space 0, times 0 [ 1529.500785][T32471] CPU: 1 UID: 0 PID: 32471 Comm: syz.4.7595 Not tainted syzkaller #0 PREEMPT(full) [ 1529.500812][T32471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1529.500826][T32471] Call Trace: [ 1529.500835][T32471] [ 1529.500846][T32471] dump_stack_lvl+0xe8/0x150 [ 1529.500890][T32471] should_fail_ex+0x3eb/0x540 [ 1529.500926][T32471] should_failslab+0xa8/0x100 [ 1529.500962][T32471] ? skb_clone+0x212/0x3a0 [ 1529.500992][T32471] kmem_cache_alloc_noprof+0x9c/0x600 [ 1529.501023][T32471] ? skb_clone+0x212/0x3a0 [ 1529.501059][T32471] skb_clone+0x212/0x3a0 [ 1529.501106][T32471] __netlink_deliver_tap+0x355/0x6e0 [ 1529.501153][T32471] ? netlink_deliver_tap+0x2e/0x1b0 [ 1529.501189][T32471] netlink_deliver_tap+0x19c/0x1b0 [ 1529.501225][T32471] netlink_unicast+0x8c1/0xa80 [ 1529.501275][T32471] netlink_sendmsg+0x7f0/0xb20 [ 1529.501319][T32471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1529.501355][T32471] ? aa_sock_msg_perm+0x144/0x210 [ 1529.501383][T32471] ? apparmor_socket_sendmsg+0x98/0x360 [ 1529.501418][T32471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1529.501449][T32471] sock_sendmsg_nosec+0x14e/0x190 [ 1529.501483][T32471] ____sys_sendmsg+0x54e/0x850 [ 1529.501515][T32471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1529.501549][T32471] ? import_iovec+0x73/0xa0 [ 1529.501584][T32471] ___sys_sendmsg+0x2a5/0x360 [ 1529.501607][T32471] ? __lock_acquire+0x747/0x2de0 [ 1529.501644][T32471] ? __pfx____sys_sendmsg+0x10/0x10 [ 1529.501720][T32471] ? __fget_files+0x3a2/0x420 [ 1529.501749][T32471] ? __fget_files+0x2a/0x420 [ 1529.501788][T32471] __x64_sys_sendmsg+0x1b1/0x290 [ 1529.501819][T32471] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1529.501871][T32471] do_syscall_64+0x166/0x520 [ 1529.501898][T32471] ? trace_irq_disable+0x3b/0x140 [ 1529.501933][T32471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.501957][T32471] ? clear_bhb_loop+0x70/0xc0 [ 1529.501987][T32471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.502012][T32471] RIP: 0033:0x7f358c19fb19 [ 1529.502035][T32471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1529.502056][T32471] RSP: 002b:00007f358d0cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1529.502083][T32471] RAX: ffffffffffffffda RBX: 00007f358c425fa0 RCX: 00007f358c19fb19 [ 1529.502101][T32471] RDX: 0000000000040080 RSI: 0000200000000140 RDI: 0000000000000005 [ 1529.502117][T32471] RBP: 00007f358d0cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1529.502132][T32471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1529.502147][T32471] R13: 00007f358c426038 R14: 00007f358c425fa0 R15: 00007fffdc74dab8 [ 1529.502185][T32471] [ 1529.526095][T32437] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1529.526219][T32437] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1529.842346][T32471] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1529.910183][T32476] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1529.970046][T32482] netlink: 'syz.3.7599': attribute type 2 has an invalid length. [ 1529.970070][T32482] netlink: 'syz.3.7599': attribute type 11 has an invalid length. [ 1529.970086][T32482] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7599'. [ 1530.027659][T32437] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1530.027686][T32437] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1530.173227][T32476] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1530.319191][T32487] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7601'. [ 1530.533675][T32487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7601'. [ 1531.066533][T32497] netlink: 'syz.1.7605': attribute type 10 has an invalid length. [ 1531.504749][T32497] syz_tun: entered promiscuous mode [ 1536.867632][ C1] sched: DL replenish lagged too much [ 1679.422312][ T33] INFO: task syz.4.7601:32486 blocked for more than 143 seconds. [ 1679.422345][ T33] Not tainted syzkaller #0 [ 1679.422358][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1679.422369][ T33] task:syz.4.7601 state:D stack:24392 pid:32486 tgid:32486 ppid:30106 task_flags:0x400040 flags:0x00080002 [ 1679.422439][ T33] Call Trace: [ 1679.422448][ T33] [ 1679.422466][ T33] __schedule+0x17dd/0x5830 [ 1679.422530][ T33] ? __pfx___schedule+0x10/0x10 [ 1679.422566][ T33] ? schedule+0x90/0x2b0 [ 1679.422594][ T33] schedule+0x164/0x2b0 [ 1679.422621][ T33] schedule_preempt_disabled+0x13/0x30 [ 1679.422644][ T33] __mutex_lock+0x7c4/0x15a0 [ 1679.422674][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 1679.422704][ T33] ? tun_chr_close+0x3e/0x1c0 [ 1679.422734][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1679.422784][ T33] ? __pfx_tun_chr_close+0x10/0x10 [ 1679.422811][ T33] tun_chr_close+0x3e/0x1c0 [ 1679.422849][ T33] ? __pfx_tun_chr_close+0x10/0x10 [ 1679.422877][ T33] __fput+0x408/0xa40 [ 1679.422912][ T33] fput_close_sync+0x11f/0x240 [ 1679.422939][ T33] ? __pfx_fput_close_sync+0x10/0x10 [ 1679.422977][ T33] filp_close_sync+0x6e/0xa0 [ 1679.423006][ T33] __se_sys_close_range+0xa77/0xef0 [ 1679.423076][ T33] ? __pfx___se_sys_close_range+0x10/0x10 [ 1679.423120][ T33] do_syscall_64+0x166/0x520 [ 1679.423147][ T33] ? trace_irq_disable+0x3b/0x140 [ 1679.423178][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.423202][ T33] ? clear_bhb_loop+0x70/0xc0 [ 1679.423232][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.423256][ T33] RIP: 0033:0x7f358c19fb19 [ 1679.423279][ T33] RSP: 002b:00007fffdc74dc18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1679.423304][ T33] RAX: ffffffffffffffda RBX: 00007f358c427da0 RCX: 00007f358c19fb19 [ 1679.423322][ T33] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1679.423337][ T33] RBP: 00007f358c427da0 R08: 00007f358c426038 R09: 0000000000000000 [ 1679.423353][ T33] R10: 00000000005dd624 R11: 0000000000000246 R12: 0000000000175cbe [ 1679.423369][ T33] R13: 00007f358c42609c R14: 0000000000175adb R15: 00007f358c426090 [ 1679.423407][ T33] [ 1679.423439][ T33] [ 1679.423439][ T33] Showing all locks held in the system: [ 1679.423452][ T33] locks held by kworker/0:1/10: 2, last CPU#0: [ 1679.423470][ T33] #0: ffff888074bb8148 ((wq_completion)wg-crypt-wg0#15){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1679.423552][ T33] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1679.423640][ T33] locks held by kworker/u8:1/13: 4, last CPU#0: [ 1679.423657][ T33] #0: ffff888055567948 ((wq_completion)wg-kex-wg1#23){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1679.423729][ T33] #1: ffffc90000127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1679.423798][ T33] #2: ffff888023325480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810