last executing test programs: 5.603972171s ago: executing program 0 (id=6226): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x20}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xd7a9652af506456b}, @TCA_TBF_RTAB={0x404, 0x2, [0xd, 0x81, 0x101, 0x6, 0x7, 0x8, 0xa, 0x3, 0x6a4b, 0x101, 0x200, 0x8, 0x3, 0x2, 0xfffffffd, 0x9, 0xe, 0x5, 0x3, 0x2, 0x6, 0x80000000, 0x3e4a, 0x80, 0x100, 0x7, 0x79d, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x10, 0x100, 0x10000, 0x1, 0xa, 0x8, 0xffffffff, 0x8, 0x10, 0x1, 0x4, 0x400, 0x2, 0x4, 0x7ff, 0x5, 0x96, 0x100, 0xe, 0x0, 0x9, 0x5ab0, 0xc, 0x3, 0xffffffff, 0x2, 0xc, 0x2, 0x9, 0x40, 0xc, 0x6, 0xfffffff8, 0x4, 0x1, 0x40, 0x2, 0x4, 0x101, 0x8, 0x6, 0x2, 0x0, 0xc0, 0x2, 0x311, 0x9, 0x9, 0x3, 0xd70, 0x8, 0x3, 0x3ff, 0x2, 0x3, 0xfffffffa, 0x3, 0x7, 0x2, 0x0, 0x2, 0x3, 0x71, 0x6, 0x200, 0x4, 0xc, 0xe0e, 0x0, 0xa, 0x3, 0xacb7, 0xe, 0x3, 0x800, 0x80, 0x6, 0x2, 0x323, 0x8, 0x8, 0xfffffff8, 0x8a52c200, 0x101, 0xc5, 0x1, 0x9, 0x0, 0xd92, 0x0, 0x8, 0x5, 0x200, 0x7, 0x6, 0xae4d, 0x40, 0x9, 0x9b, 0x5, 0xf, 0xcd0, 0x8, 0x1, 0x5, 0x400, 0xb3, 0xfffffffc, 0x2, 0xff, 0x3, 0x4, 0x7, 0x4c63e723, 0x2, 0x80, 0x6, 0xffff8000, 0x0, 0x0, 0x8, 0x6, 0x71fe, 0x4b3f, 0xfffffffc, 0x6, 0x1e, 0x3, 0x9, 0x2, 0x8, 0x8, 0x6, 0x9, 0x80, 0x2, 0x32f9, 0xad8, 0xfffffffe, 0x7ffffff1, 0x10000, 0x69f9, 0xba4594a8, 0x1000, 0x4, 0x2, 0x14a1, 0x7e0, 0x74, 0x2, 0x100, 0x4, 0x5, 0x9237, 0x40, 0x9, 0x4, 0x0, 0x7, 0x0, 0xf93d, 0x80000000, 0x0, 0x10, 0x5, 0x7, 0x6, 0xfffffffb, 0x1, 0x3, 0x2, 0x1, 0x7, 0x88, 0x5, 0x9, 0x7, 0x0, 0x1, 0x2, 0x7fff, 0x7, 0xfffff000, 0x33a, 0x7, 0x9, 0x0, 0x2, 0x7, 0x4, 0x8c3, 0x1, 0xb76, 0x7, 0x6, 0x1, 0x2, 0x8, 0x6, 0x800, 0x49, 0x3, 0x6, 0xe8, 0x8, 0xfffffff9, 0x7993, 0x0, 0x6a, 0x1583, 0x2, 0x1e08fcac, 0xe4, 0x5, 0x6, 0x1, 0x1000, 0x16e, 0x0, 0x6, 0x2, 0x7, 0x8, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6a, 0x2, 0x50, 0x3, 0x3, 0x9}, {0xd4, 0x2, 0x7, 0x9, 0x4, 0x6}, 0x5dce2245, 0x2, 0xcc1}}]}}]}, 0x468}}, 0x40) 5.328619102s ago: executing program 0 (id=6228): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'veth0_to_hsr\x00', 0x2dbd854266873d48}) socket(0x2c, 0x3, 0x8001) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000b632cf821ce7f365bf1f9f36f5f66c73da53a77b0e81ecb8f3a81b9db64bebacf135fa7870913015b2808f3f4f6646bf530f402000000226e7fb1b246285dd0b4e3104b2e322fae16a6f35ecf5e457043053e9b1dbc2009", @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) r6 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket(0x14, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000ab00000095000e0000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 3.674657914s ago: executing program 3 (id=6242): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x86dd, &(0x7f00000001c0)="c1188e99b95d02ff4284860188a8", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.512912732s ago: executing program 0 (id=6244): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) 3.482509629s ago: executing program 3 (id=6245): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x5, 0x13, 0x0, &(0x7f0000000540)="258a53f271a76d2608fff74588039e455e335d", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 15) 3.307125275s ago: executing program 4 (id=6247): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r2, r4, 0x25, 0x0, @val=@netfilter={0x2, 0x0, 0x9, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[], 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0xd, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[], 0x0, 0x46}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r14 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5a}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, @TCA_SKBMOD_DMAC={0xa}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) sendmsg$inet(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r10, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r15, &(0x7f0000000380)="0099d885", &(0x7f0000000480)=@tcp6=r0, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 3.262093335s ago: executing program 0 (id=6248): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x4e8, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4d4, 0x3, 0x0, 0x1, [{0x4d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4cc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c8, 0x1, "7b90c155a85520ed195949a062ad254b84a63d87101a8a4558143cbe9b57a0802c99cfb21f9885d07fa19146301869917aaec51e261dce49b4055eca08b36b977f9ce23c84579276b01e9268c1bf9b59a6b775ea68c672b691a33f2719d8e6294b13b28c53336f182bffc85002de6df44acc0ca124c75586ff20fc8c3fe7438a79e88baf24d6a2f210587e01925ddf0c02df2a07e775b751182ac66ac6506880585b629ead1a788e5052ba17ddf498967cb17ca3d7b653cb423cb3fe3963c11fab563594dce6225ca941a44fbca93f4ab13def5f892a263e6a761eb3175e4567fc32592cdd7f780c421efd34890643baf3a5aa4d00ed3e801983cffaf9436d52343dbcaf9def2d32eab4b37f14d316ac5d83787355d930369a9c0ef05e20a81d1fa18b3bdc0c3dc9a03b65ba4b8f2cf731f82f0c456e1592f338b46ddbceb53b7bba97c8d397878da7edd3e72c7ed0813608698ade4d3172f5d38ed0eee134ecb8c99c586ed6bdb0cfe3a5d08f153add4a895930a1267eb2bbdc70e78339f228ee98cb7322f1412c3d327f9f200574297a4796b7bb6c8da9380c098b3ea51a0a539f3e5099bcc9386ab60f5448c5397480913a7d838dfdfee4a5d696a067cd8d0f2c19e30594277c6dc433876401f90b681c8c7a003f62613e1435d85566a44f25f3551cccecbb7b4512709b2867fc81e350a8848511c4d7e4db74ac6f2dc0621c4bc5f3de95484469c1b75b6e4fbb5c92967c5e6eeb9e8bf12371192ee0a85e69231f4ddf294ca6e7790e89cfbf5862d66b2eb237ff01cd105e22621db79069f3ce6f1c66fae7f2478aa5ee13ab82664e84c715e8f54f15cad6a552e568be4c12f85d11e0ff3a4bcc3e73f17d142cb993f650ad73f91c15c50ca240282f9667761a3c78c926f7fd544c23a000ecca6dd7b4b7f190f13bf6319bfd87538b9df3c55d841a0f4de23dc8cb75cb4bd9ffc1c1c98aa7170c735adcaadd292c2fee8488321d8db1f2a528feacf5d8740d5b185a1ccd3dab5a1b279d6a51726ea88c72f3f4ccb151a33172babc16c8353473a72e4ffa3d91833dd3a60b7c36eb90e855dd46ef569ffda0152a9ef351a108c33d1498ee9da932618a801dc0f0bf2f6e66b2c72b5945914747cd95722dc26d2b599c5882a8780667b61d062c25e81427549430980c31b00c44eb0e93ac686172840f9d1b700aa47b017616849e3281feb7a30b34640515283aca7d55b925fb151bd08a6cb2ea1036d5e8da2ed11226314c5a1e322db9b0c2bc512ac6edcf5527c75fa62681e7deb8ea3608b9fe6eb52846276f7d8a88177fe2e305822906240dd3fb2fe7636841c0d811569b64ac7fc6b88a5e22f87dd4bd433e817a6c3e660c390ee163bfb42fa561046e93781166364ab02590f02fed87585a1c097178e3d106ba8aab871ede4c6a7fc448546e503fc7466ca094fa5bbca88ab55fc5fc240568e617c372e49cfc84ba003493b96e95d3692e7cf331d1afce4fb4a425f2b83bd6833f422b98a8f2855c036ec89467bc504df2754f943381acc88da1548de5960ba53db41d1ef687f1205fbb02d928c48fcfd491f90652e9e5c32d72f2ededdd904d1f6aa350a3a1195e3b97839ace5a7e3fefd84bdc37b71e4ef664fd906a8908b789d1692dbb7ed31b748ce4a560be1b95cfc38d7bcfd1ff74dcf7ccaaf11b77cbef856580d82d49b988576892c5711fcc5940c8"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x524}, 0x1, 0x0, 0x0, 0x804}, 0x20000010) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r0) (fail_nth: 3) 3.155864703s ago: executing program 3 (id=6250): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc7, &(0x7f0000000080)=""/199, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x400, 0xa, [0x1ff, 0x9, 0x9, 0x6, 0xffff, 0x400, 0x0, 0x9, 0x8627, 0x33]}, &(0x7f00000001c0)=0x1c) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r4, 0x8}, &(0x7f0000000240)=0x8) 3.007851598s ago: executing program 2 (id=6251): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) shutdown(r1, 0x1) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140), 0x0, 0x24040000, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001580)=@generic={&(0x7f0000001540)='./file0\x00', 0x0, 0x18}, 0x18) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000001740)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001600)={0xe8, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_ID={0x8}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}]}, @CTA_STATUS={0x8}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x404c040}, 0xc004010) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310328bd7000fbdbdf250200"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 2.98992079s ago: executing program 0 (id=6252): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000180)=0x9c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000400000014000500fc0000000000000000000000000000010800020005000000070006"], 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x6c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_bridge\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x7b1}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 2.787780556s ago: executing program 3 (id=6253): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'veth0_to_hsr\x00', 0x2dbd854266873d48}) socket(0x2c, 0x3, 0x8001) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000b632cf821ce7f365bf1f9f36f5f66c73da53a77b0e81ecb8f3a81b9db64bebacf135fa7870913015b2808f3f4f6646bf530f402000000226e7fb1b246285dd0b4e3104b2e322fae16a6f35ecf5e457043053e9b1dbc2009", @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) r6 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket(0x14, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000ab00000095000e0000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 2.697653897s ago: executing program 0 (id=6254): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r1, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "3dab2026179e3f9e94f795c462aef6c3ea5725a79a084ad573851312355a1302", 0x200000ff, 0x3, 0x6, 0x2}, 0x3c) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000000)={@loopback, @multicast2}) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x82, &(0x7f0000000200)={0x2, 0x1e3, 0x1e0, 0x8001}, 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000240)=0x8) unshare(0x62000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x31) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0xfffffffffffff800, 0x2}) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) connect$x25(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r3, @in={{0x2, 0x4e23, @remote}}, 0x5000, 0x0, 0x1, 0xd081, 0x2, 0x8001}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="ca"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3103"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 1.965385507s ago: executing program 2 (id=6256): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@ax25={{0x3, @null, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @null]}, 0x80, 0x0}, 0x20000001) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002e40)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYBLOB="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", @ANYBLOB="4800000000000000240012800b0001006272696467650000140002800800"], 0x44}}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x400, 0x368, 0x0, 0x148, 0x1b0, 0x148, 0x368, 0x240, 0x240, 0x368, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1b0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@ecn={{0x28}, {0x0, 0x1, 0x7, 0x3}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x90, 0x0, 0xa, 0x100, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x64, 0x6, "9cba3a4b09b6b3ed736346a997e6bcd1750f2d1e97f4fc7409197ae1d1bec353bb47233d7385363d265c142c580af60a41da13cc2285c772da7da22bcebe2a0f66fbe8606d2a76892a422dadca866c2a2300a117460885fa85d6d758da02c400"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x120}, {&(0x7f0000000040)="985e44efeabe001cabcf3d86", 0xc}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}, {&(0x7f00000002c0)="b1155498aa147d5345bf7f28767cb0160e43a397bd7570c1d12d3e06a6334296c872c191e6e2b68a08bd78c4988dcf59614cafcfa96f99140ac9f7193e8998f0993fb76c6481e13e3b648c286c934fe1c0fe868869f393b0f0373e25b390c5127c8952ea553daf116c8957ae988f8e6fa82216fa8f80a88894860903df4f387720a7d6657034ec7e335badeb31c379c1ebdd173d1971bdd9b1bfd1cad28c11471545a1e6d377a747038116bc137153515fd9a91ad0042640dd2334974286a10fa85c32176ab08782fd35", 0xca}, {&(0x7f0000000700)="b87d1ee3911b6d31600f5ca74def39749241b1a26e48c06e46bd44ff0e61f27afa45fcc9ed77b63084d41e0c803a2a3f22095694fb59dcc3c932706cb6798b13cb2b5fe99b47a13ac6da6111250bbcb3503fc8754e04e0e2d75a17a3ecdfb1d60c8890d216a36db2f94a2767d8c9df18da16f532787d54dbc3854f6a6a0bfd278919755fb544b11bb8b2bfa79add2ad70cb11dcac552dbec5c9cb589cb065b9fda40ea5ccb984f62385cf1dec62f7166a0cb9a0c73f7306e5c54", 0xba}], 0x3}}], 0x3, 0x2090) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r5) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f00000001c0), 0x4) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.874909423s ago: executing program 1 (id=6257): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000014}, 0x40) 1.706468037s ago: executing program 1 (id=6258): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000440)={0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000000)=0x800) 1.657646894s ago: executing program 4 (id=6259): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_ttl={{0x14, 0x110}}], 0x18}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x8800) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000e", 0x36}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000000340)={0x789, 0x1d}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xd8, r8, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x6c}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}], @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4048081}, 0x4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r6, @ANYRESOCT=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.547400249s ago: executing program 1 (id=6260): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@newtaction={0x210, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x104, 0x1, [@m_bpf={0x100, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0xd7, 0x6, "5ebee8cb5ec798bed9e14471cd7fc80ada4a347f0a471b97541b3746862f593b574dd0b277a884f0ec7a65593a424488dee51eac7e3301dcd335734b379d1f821b27f9ace9c0ec57aa91fb75ea79531b85b941055b331912532963810dd2e455d7e1fce8f33fb311b8891e5737cded0da82817fe816da70d22041d13980367da8408d539eb10ae552c36da2b8b9009d7ed24f9b33dfeb7989b0b6ed0ae05501c8dc34fe8cdc9a8548fc7817ea4cff9b3cb91dda4997f81359e6416f04c5946e362598f5bda8f8ae95082ec1a2b33d804feaef2"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0xf8, 0x1, [@m_nat={0x2c, 0x1d, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0xc8, 0xd, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x20000000, 0xcf4e, 0x2e4f7af}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x15c3, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0x6, 0x6, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1273, 0x20000000}}]}, {0x54, 0x6, "617dc28fa2ed0241508ba26b8c5b0fbdfa102f69c78096632450383bed1a60e1515a6148f68e297675df9df4d1b8c68f20ad7781bc617f906211e1f65bbef481750eb655916d4b3ac52507cd65090217"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x1, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x1, 0x5, 0x0) r4 = socket$kcm(0x10, 0x4, 0x10) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r5], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=@newqdisc={0x30, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@TCA_STAB={0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x48c5}, 0x24008004) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000340)={0x1, 'lo\x00', 0x2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 1.531850564s ago: executing program 2 (id=6261): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x38, r3, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}]}, 0x38}}, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000400000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x7, 0x8}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x20, &(0x7f0000000880)={&(0x7f0000000780)=""/43, 0x2b, 0x0, &(0x7f00000007c0)=""/177, 0xb1}}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000ac0)={r1, &(0x7f0000000900)='}(\x00', 0x420000, &(0x7f0000000940)={@align=0x4, {0x7, 0x5, 0x3, 0x6}}, 0x59c, &(0x7f0000000a40), &(0x7f0000000a80)=0x8}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1a, 0x33, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x99000000, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0xa}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_fd={0x18, 0x4, 0x1, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x915}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x7, r7, 0x8, &(0x7f0000000740)={0x2, 0x4}, 0x8, 0x10, 0xfffffffffffffffd, 0x0, r8, 0xffffffffffffffff, 0x1, &(0x7f0000000bc0)=[r9, r10], &(0x7f0000000c00)=[{0x0, 0x3, 0x10, 0x2}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0xc, "e8"}, {0x18, 0x110, 0x1, '\x00'}, {0x10, 0x116, 0x1}], 0x40}, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r12, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r13 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r13, 0x400442c8, &(0x7f0000000040)=ANY=[@ANYRES32=r12, @ANYBLOB="01c963"]) 1.284178811s ago: executing program 1 (id=6262): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb172f216f71fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75", 0xc8}], 0x1}}], 0x1, 0x200088c4) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) accept4(r0, &(0x7f0000000000)=@ax25={{0x3, @netrom}, [@null, @default, @netrom, @default, @remote, @bcast, @rose, @netrom]}, &(0x7f0000000080)=0x80, 0x80000) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001000000"], 0x110) 1.283636302s ago: executing program 4 (id=6263): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f00000002c0)={0x0, 0x7, 0xefff, 0xfa64}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) unshare(0x400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) unshare(0x4000000) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x800) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffff7, 0x0, 0x8, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4e1, 0x81, 0x8e00000000000000, 0x0, 0x7ffffffe}, 0x0, 0x0) 1.24085822s ago: executing program 2 (id=6264): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000007001c0000006efc66f16b"], 0x30}, 0x1, 0x0, 0x0, 0x40000b0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, r1, 0x0, 0x70bd28, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) 1.142993828s ago: executing program 1 (id=6265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) accept$netrom(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r2, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) close(0x3) recvmmsg(r2, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x10000, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000000000002900000037000000000000000000180000000000000029000000040000008700000000000000"], 0x30}, 0x40440c0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.142194056s ago: executing program 4 (id=6266): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d1501000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) shutdown(r1, 0x1) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140), 0x0, 0x24040000, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001580)=@generic={&(0x7f0000001540)='./file0\x00', 0x0, 0x18}, 0x18) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000001740)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001600)={0xd8, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_ID={0x8}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}]}, @CTA_STATUS={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}]}, 0xd8}, 0x1, 0x0, 0x0, 0x404c040}, 0xc004010) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310328bd7000fbdbdf250200"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 836.184369ms ago: executing program 2 (id=6267): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf000000) (fail_nth: 4) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x10, 0x5, 0x2102a}, 0x2c) 721.723854ms ago: executing program 2 (id=6268): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f00000016c0)=ANY=[@ANYBLOB="18000000000000000000000000000002850000006300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x9}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) sendto$inet6(r2, &(0x7f0000000000)="f4", 0x1, 0x14, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @private0, 0x10000}, 0x1c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7", 0xe4}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad", 0x31}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5d", 0xaf}, {&(0x7f00000002c0)="b1155498aa147d5345bf7f28767cb0160e43a397bd7570c1d12d3e06a6334296c872c191e6e2b68a08bd78c4988dcf59614cafcfa96f99140ac9f7193e8998f0993fb76c6481e13e3b648c286c934fe1c0fe868869f393b0f0373e25b390c5127c8952ea553daf116c8957ae988f8e6fa82216fa8f80a88894860903df4f387720a7d6657034ec7e335badeb31c379c1ebdd173d1971bdd9b1bfd1cad28c11471545a1e6d377a747038116bc137153515fd9a91ad0042640dd2334974286a10fa85c32176ab08782fd", 0xc9}, {&(0x7f0000000700)="b87d1ee3911b6d31600f5ca74def39749241b1a26e48c06e46bd44ff0e61f27afa45fcc9ed77b63084d41e0c803a2a3f22095694fb59dcc3c932706cb6798b13cb2b5fe99b47a13ac6da6111250bbcb3503fc8754e04e0e2d75a17a3ecdfb1d60c8890d216a36db2f94a2767d8c9df18da16f532787d54dbc3854f6a6a0bfd278919755fb544b11bb8b2bfa79add2ad70cb11dcac552dbec5c9cb589cb065b9fda40ea5ccb984f62385cf1de", 0xac}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd70000000000004000000080008000aac0f0004001e00"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRESDEC=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042dbd7000f7db9f256900000000000300860e58cd1af4f25619e0f5adb1a52a621323cda022f018d0174ea9830a61e167ab379c0ad6e1b6ded91d0761eacae896effe0d8b01d020817a47517740e606019e35bb8cebff3bb3103227c064554dcb94bdc37b65492d9901e37982281ca4c4e55ac961c7c2800c41ef366d3fc8ce5b4852f8ca7f8ca768e6e78eee1fa3b1e7ef5988e07731fa7ea062057c4efafeb039c36e264317500f012acaefa0eca35dbc3ec5388b000000000000000091b325b09fc4bc32854911088d83b565ddd50d2c81784f92f78d8e96f73c329966a2b3ca0d3ac38e", @ANYRES32=r9, @ANYBLOB="00000600ffffffffffff00008efed300030000000000d4007d0a0000000006000802110000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x2004c000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYRES16=r9, @ANYRES16=r1, @ANYBLOB="00000000e3ff00001c0012800b00010067656e65766500000c00028005000d000100000008000a00", @ANYRES16=r5, @ANYBLOB="4591459e8c50b096f06e7391694f565d209ef4e604cf69a5824c32ebdec21b91cd785b4a9da6bf9ad768b37ee9ac0f073b0f20b0d999589bc6c38b859c77ea244869b07c065f9e1b085a3626"], 0x44}, 0x1, 0x0, 0x0, 0x48880}, 0x48d6) 431.871464ms ago: executing program 4 (id=6269): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x1e4c}}], 0x18, 0x4008000}, 0x28008841) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb6fb585}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$alg(r0, &(0x7f00000002c0)=""/143, 0x8f) 337.615916ms ago: executing program 3 (id=6270): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000440)={0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, 0x0, 0x0) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000000)=0x800) 147.684127ms ago: executing program 4 (id=6271): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@ax25={{0x3, @null, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @null]}, 0x80, 0x0}, 0x20000001) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002e40)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYBLOB="56c9b7834693e5e45e961fe5dd786dc44b8580cdc53d14b7f024902dfc23b0ec832cf737d5acc9233864f2f52d8cab469d8304f44931a102c3e9592aaca5a9510936c92bd59e1430e41de3eb3e46adeaca75fb4edade870ee67ed922959c56a7a259e36a98c8dbfe2a1b96f58db02d417cd76e48f6a7e2b7e1c64c457152da42da1e691dcc4e4a6233590384dddfefcdaf8de7a739c7b100b03388301cbaca85eb46715a8ddaa4f4115771eb4d511c5f1ae3c718a57cca2401d9a4fefdfbc1604c87dc478bff9c0fe5fee0e5b27ae1c4f5b888c48310dbc098a63c4bcbd31ac4b4e368cf93159d195cd82e53f47540d3e34a7619d2bd48aa0ac0fb2ed2f666f048f5a8f3582add38780268286219159465cb3f97c51b13ffd24e48e35398f3fcb956c7bd98a61ee4940c18dafbb32f6214a0b9a3cb5c53e3e773bfc772d86f7ca8221a1c3eea169040742e43498c1e3b233ef673590f0f05054c5b6f72e9d24cad1c6714593571ed52ff910bdfdb61154dd0e97f2dde29577db1398fec26b6c8975d1c2dcd3e82fd352ffe23bb0be835109bed6adc69609439a9349d354ea361b6b8e90bddb00028ee2dba4f82600a601fec2643bc5196afbc0db2bfba501681ea508c1dd73784fb33caf01d4dcc88c72f78d9830b38ee55bb88b27b4f212969b038be9e914ac488999aea422501518794513ab627a128b1565364cd1f33c5df52f056793ac0373075f99b9d1257f4639124b562b7c1cec40c48717060c2e24f945e13b88ed3c898015f88069039f6f90962a025a1c3b10836329b0c12a026ba5ebf7515f89c3698c306620a4a2957f3d83a806cd3b26b917bfc17c7c3b8887404dbc13c063ef46e9b243138e7dfad1ed12eea2d526eec6111e32d8d2e8fc7e5424507bf2bf60261bb70a7661c986d544b9c51655f6f4046e68f59abc9645cf26cd9c6c308f19945b21c9573e4e2396ed7b106c3e965bee6a7c8504fecd907acb90357bf0c984fc1ca53033f70e8929259599983c5b9ef65c27f10616f270e63e59895a5d2559b21aebf0c905b3eefd8f698dff766424b74bc21cb07fcf0873cce05acc890cb953a09c83fb21f3b92dfc21a09fbf505e5380919f79999d3b741eb6d6b406254d1b3c3ec2d24ea4187d7081d2397c86a93613f3eab53d9aafeaadd7232343a3edd0ee06486908252740a04d5d947d240474059be353401b1199fe8812ed997b1ebe393e3247ae0d84dee40447287581a3ec6bce40885d0dbdc667599eb82d37052816e2abe29415ef2dc86fbe8d31b7fdaead57a38193f8c14167765b8905075ff80ba14d3a337e7a08030634d1fd317f69f910d8c075cb72ee78b3fc65ff95b5311e639d3302a4dee557da283849e36efcd7203e3ef6627b029f0758767c148b72494c1a3cb6d575d1efed302710f33e9d4cbe35c41deffa0a690e0a3bda8666b39a276714d670650a629f5486919277a5247bb87fa0235bd7d304f38e0337a001803fa374565219ae7b9c5f1767950a98c3b75687c4513aa3810c6bbb4e18cf32cfb2980d0552a3292fc172959d662f033624532a5c34831c7fa5b4e13080a70bc3af55b478bf614abc49ee3e59a6575f72b0454853dc328e24d54fc015a20b3402645eb98bec7d4e6c916be8c46847989b30a37d0c96818519bfb11e17052189df037858243967fed51f7d28b42bb067a7cd2dc965cc05ca55bf29f545ec78592c3c34674e709d5ff15766c19cde5bd65f513c602bff233319b8562af7aa197aa3d1969ff88d37cfbc542dae6d6028e9db4ee6c6c30c949caf8c4970b63a8789cf160564024186e785896a48d23674d1302f2c65d266fb309aa80b4550169e945a54afaf8e295c816d6cad2fd9a22e0c297135ba66d7385807f4e6bc4cb1472574c4805c3bb35eca1d0efbe22f72c01af4ec6307cc0dc670097a8dfba256c9df9fba1f751e15627f4e104574419ed437ad6328ef51a4337ff192fde463a6c1938e459283ec6c49a30ff70ebc46cee82f27ed199c443bd71b158fb4af8cb239359ee3a9ab9223e721d267443e421b792715b266b86335d36686e7fd0693c2e9f9a5ea14cbd6ea9af9de9ce79f86e9c8d4277cc481750c3704b9800f8408a20672b8fb33c0861b2cfb92d84597e2e558b6d257533a98c9deaf3607ed22a5cd58249b28791a454d149792d45e36a225a470aa97d68b3f852fff9b71ef59de87679344cd522f1aa15c530ac2d04538bf0375b48883a601f93bfb88b5d319346514774843bdfc8fecb92835482c07af8b5e93d3aa88ae4c35cdb7c8174ad67886366a326bf149882108290f5e011f9e29fbee5b5839cfa869ed3584319e48bbe190546740d77f417b52af0c40ba65896e3f955ae4cd66e5271fcaaf7bb25cd515f1b7d1bfea2eeef75506dc98255205bbb56f59f20df5e0154056d7975884cee9274cd67b76df77c4808fa0652656bcfb226cb9fb2268980968cfcf1e5d0d31922dcb487626507de24aa3961568d3ec403a91a36c68306707a036bb53e65c9d046f37ca4aaf8763f0b8a3beb320a15e66350ff1b8e1dee65b076a56ccd994231a8ed0bcef0f14fbdce52146f2338c383a5db6e4812d7e2e4de4760b60edc7ff4239a7575b288c2349b8e84fb65440795d4eefb63f0a70f9247958b47eb8d23237052da9e91e9aefc31d433122601d0cfd6766896ed1c3a07351a2d10aa361263cbe56330b07b7e8f4fb4aa2315177ead9edc9d5ad0b4e5689c36aa3f2fd0716d083a459eb41091a43e13cd9ab5dd1dfa520f69444c7b62ca5675e716a93d7b8df8b552979672c0b42948e772d1b9a139310c4afff5ac883bb3482229e5989fd7e8eb0a24c8f1ed4e1bc78b6dddaa3cc19b145b852026a8c550d60235ab4f5861585d9755d080a644e3972ae0f922878063b84ea210312cd37574f8babc9c474485fdaea1684b8c98144e5f73e5c508debfea64d8170741132d19ea156863c2e3ead16b21851b3894b39874e40f8d0ad48090c0eba85b145f1e8fef03ce90a0dd181da183f594fce1dcc1c3d02b55b07d6a7bfb580645e100fc2b8b5208c3e947480bc23db9dec750cc66c75a15fdc1029a272dec6b109b124e083f0854a95ed0f51360d83a99b2b0fa1f8a2dffaac827564675ee2898d3ee7fbb9541481d668060f6362958e4fd734de66bc827a31f1b4bde6ad63390f95e87828c01565c78bb3f78815877e9c33e65a40c2dcf3d2f82d03e9957fa37435f4bc6be4693abfb9cdc19305a270f161d15bda0858bccaa13b84dfcb7342e82fa4a51119f68451119f4301f061007ad74dc707b4b20276bfa6a509c61c8f2cc232410404443b9df2abb7372c63d1ee666bd677a41a2a728c58c050731a48b8cb2981e4eb349d85d51c8fc346be31e9b20ea5a7a210de376032e18392fa1e3f9ad57812e906a6d87596a7649ec4a5602b052119baf8acc468e22b653d5159cc3a6972c1cd63794f1e49d0f9ce0742e4537a0d303a54c5c3f32bff17751804a2bfa46856776ba22cd397931e406d8d79505c2b2cebb4319ec3cf6c98d234593eb338e7af715fe3a07eb00af0e1a51b220481332a5a218d5091797dcd3510c5c525f7410e33cfe41aa38bd16dc4e688cdb827218607324b0a54eab465d7cd58ad96c93fdd34ac20659a3c80be4932af5e3ab4331c3e2590a7f43263f3014b2984261bcfe9a60e4bfff54e575756452b540e7eaaf7e1eee807b7a3e17f993ede6e4363dc09c2690fa098022235ad8b14ad0704ac2fe48d5d159c009179f459c0ff21194e31537be5527fc00ddb9a17b2e7c0efbb6f51356724c4643ce4e60f38c6a30c93d2603124caf31608dd8d8f04e31763e0c112b63416971745efa453c898e64c68fd6d135ec3a575060746de57c2b07bc095693cc6ba038b47589eb4bbad891304d05d77e2c603447b80647020de3b89a55d50c12c03ca1122e9b7a2bedc46e50523afa4b76a5ff2af8b50deabf0d4d7fff3de3e6c669017e330405e63c7b5a3d075aa9908a300545e16fb561d3fd2753fec5fbeee221a58133e1172323546b2ecf321a3ed2c5bebba898a7fe76d6a806c92c6a9e1342d0937fcc709b95148bada8f611c9ea1c58936e7120a20303f9f4de4627f33b0ec1ce1fdb8f0733451bc15b62678ee7ea4df1281daf4c4984ce81102e355e294f924c9d3e81934751a01f3bfb39cd359c07bab6958c7fd9f32797437fc9aa3b113c3667bf7d647d00c9958cbf5b04c093316ea9c9de64d7a978be41b1e4b5acef6870898f1650df2a8289ea99c00053c40baefd62d3414e6a2ba3cbfc8fa3c5bb83eb9b8d1ce3c5b37be5b62b0ca104a5dab1ae0e10a87124644253f786568ba964f0a249365716ba53d3e676f706b4ffe332633adcdc7c413d0d0bc39dc27dc726cfd204b5484d068ca14a14c435f5cd2154904e32c9446b679dd3714bef48e95d9b8ff9a50451d54bb8ea062aac484b00e66fcd35fc771887a40d1c1ac16e38c79ef1eb46ab7c7097f6c828092d4cded7ccb2b20684eadf884c853ebc720d2a118d213dd0478fab40cc1b7012f55e7e3407c1029037d42e3b509d59e9b948b0db1eb3498272631030e8346a10c3b3bc3460903f71c835ed4b8c94d5952c5d819c480dee65ee56e93e5bd478703adda8f046292b0b44cdee25387efef0334d9a08dafd5d565fab7e3368c9cf0fdb52f61b11c4747e6a143cf187f6e28f4e0a751a38acf44b9936d5ebf419252d7291e2fac5650f2fb3821d765c297a4263a6ecb359bb4e8596b40e728b13e242ca22b20edfd51906c22b05a1e1765726857296df4ff00a791f8db3bcb9d8cdbdc295471455519de464129e554af5cdedf0154aca33eb75b47177d2558fffb7", @ANYBLOB="4800000000000000240012800b0001006272696467650000140002800800"], 0x44}}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x400, 0x368, 0x0, 0x148, 0x1b0, 0x148, 0x368, 0x240, 0x240, 0x368, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1b0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@ecn={{0x28}, {0x0, 0x1, 0x7, 0x3}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x90, 0x0, 0xa, 0x100, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x64, 0x6, "9cba3a4b09b6b3ed736346a997e6bcd1750f2d1e97f4fc7409197ae1d1bec353bb47233d7385363d265c142c580af60a41da13cc2285c772da7da22bcebe2a0f66fbe8606d2a76892a422dadca866c2a2300a117460885fa85d6d758da02c400"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd3384870", 0x120}, {&(0x7f0000000040)="985e44efeabe001cabcf3d86", 0xc}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}, {&(0x7f00000002c0)="b1155498aa147d5345bf7f28767cb0160e43a397bd7570c1d12d3e06a6334296c872c191e6e2b68a08bd78c4988dcf59614cafcfa96f99140ac9f7193e8998f0993fb76c6481e13e3b648c286c934fe1c0fe868869f393b0f0373e25b390c5127c8952ea553daf116c8957ae988f8e6fa82216fa8f80a88894860903df4f387720a7d6657034ec7e335badeb31c379c1ebdd173d1971bdd9b1bfd1cad28c11471545a1e6d377a747038116bc137153515fd9a91ad0042640dd2334974286a10fa85c32176ab08782fd35", 0xca}, {&(0x7f0000000700)="b87d1ee3911b6d31600f5ca74def39749241b1a26e48c06e46bd44ff0e61f27afa45fcc9ed77b63084d41e0c803a2a3f22095694fb59dcc3c932706cb6798b13cb2b5fe99b47a13ac6da6111250bbcb3503fc8754e04e0e2d75a17a3ecdfb1d60c8890d216a36db2f94a2767d8c9df18da16f532787d54dbc3854f6a6a0bfd278919755fb544b11bb8b2bfa79add2ad70cb11dcac552dbec5c9cb589cb065b9fda40ea5ccb984f62385cf1dec62f7166a0cb9a0c73f7306e5c54", 0xba}], 0x3}}], 0x3, 0x2090) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r5) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f00000001c0), 0x4) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 138.568343ms ago: executing program 3 (id=6272): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x9, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x82e, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000100)={r1, &(0x7f0000000000)='$/\x00', 0x0, &(0x7f0000000040)={@_ha_fsid={[0x3, 0x3]}, {0x5, 0x7ff, 0x0, 0x5d9}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x5}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'bridge_slave_0\x00', 0x1000}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x40005, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) 0s ago: executing program 1 (id=6273): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): _read+0x150/0x270 [ 676.580160][T24442] ? __pfx_ksys_read+0x10/0x10 [ 676.580197][T24442] do_syscall_64+0x14d/0xf80 [ 676.580226][T24442] ? trace_irq_disable+0x3b/0x150 [ 676.580244][T24442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.580267][T24442] ? clear_bhb_loop+0x40/0x90 [ 676.580293][T24442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.580314][T24442] RIP: 0033:0x7effbf95d04e [ 676.580336][T24442] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 676.580354][T24442] RSP: 002b:00007effc0794fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 676.580378][T24442] RAX: ffffffffffffffda RBX: 00007effc07956c0 RCX: 00007effbf95d04e [ 676.580394][T24442] RDX: 000000000000000f RSI: 00007effc07950a0 RDI: 0000000000000005 [ 676.580416][T24442] RBP: 00007effc0795090 R08: 0000000000000000 R09: 0000000000000000 [ 676.580429][T24442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.580443][T24442] R13: 00007effbfc16038 R14: 00007effbfc15fa0 R15: 00007ffeb2018c88 [ 676.580478][T24442] [ 676.923336][T24450] FAULT_INJECTION: forcing a failure. [ 676.923336][T24450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.942819][T24445] tipc: Enabling of bearer rejected, already enabled [ 676.982160][T24450] CPU: 0 UID: 0 PID: 24450 Comm: syz.2.5663 Not tainted syzkaller #0 PREEMPT(full) [ 676.982193][T24450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 676.982206][T24450] Call Trace: [ 676.982215][T24450] [ 676.982225][T24450] dump_stack_lvl+0xe8/0x150 [ 676.982261][T24450] should_fail_ex+0x412/0x560 [ 676.982298][T24450] _copy_from_user+0x2d/0xb0 [ 676.982324][T24450] kstrtouint_from_user+0xd6/0x180 [ 676.982358][T24450] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 676.982406][T24450] proc_fail_nth_write+0x8e/0x210 [ 676.982438][T24450] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 676.982475][T24450] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 676.982507][T24450] vfs_write+0x29a/0xb90 [ 676.982542][T24450] ? __pfx_vfs_write+0x10/0x10 [ 676.982567][T24450] ? __fget_files+0x2a/0x420 [ 676.982603][T24450] ? __fget_files+0x3a0/0x420 [ 676.982632][T24450] ? __fget_files+0x2a/0x420 [ 676.982671][T24450] ksys_write+0x150/0x270 [ 676.982699][T24450] ? __pfx_ksys_write+0x10/0x10 [ 676.982736][T24450] do_syscall_64+0x14d/0xf80 [ 676.982764][T24450] ? trace_irq_disable+0x3b/0x150 [ 676.982783][T24450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.982804][T24450] ? clear_bhb_loop+0x40/0x90 [ 676.982830][T24450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.982851][T24450] RIP: 0033:0x7f804835d04e [ 676.982872][T24450] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 676.982890][T24450] RSP: 002b:00007f80492dcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 676.982913][T24450] RAX: ffffffffffffffda RBX: 00007f80492dd6c0 RCX: 00007f804835d04e [ 676.982929][T24450] RDX: 0000000000000001 RSI: 00007f80492dd0a0 RDI: 0000000000000004 [ 676.982943][T24450] RBP: 00007f80492dd090 R08: 0000000000000000 R09: 0000000000000000 [ 676.982956][T24450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.982969][T24450] R13: 00007f8048616038 R14: 00007f8048615fa0 R15: 00007ffcffd5f998 [ 676.983006][T24450] [ 677.500220][T24468] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 677.555633][T24472] lo speed is unknown, defaulting to 1000 [ 677.563785][T24472] lo speed is unknown, defaulting to 1000 [ 677.570684][T24472] lo speed is unknown, defaulting to 1000 [ 677.687085][T24481] FAULT_INJECTION: forcing a failure. [ 677.687085][T24481] name failslab, interval 1, probability 0, space 0, times 0 [ 677.700672][T24481] CPU: 0 UID: 0 PID: 24481 Comm: syz.1.5674 Not tainted syzkaller #0 PREEMPT(full) [ 677.700702][T24481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 677.700716][T24481] Call Trace: [ 677.700725][T24481] [ 677.700734][T24481] dump_stack_lvl+0xe8/0x150 [ 677.700772][T24481] should_fail_ex+0x412/0x560 [ 677.700807][T24481] should_failslab+0xa8/0x100 [ 677.700834][T24481] ? dst_alloc+0x105/0x170 [ 677.700862][T24481] kmem_cache_alloc_noprof+0x87/0x650 [ 677.700895][T24481] dst_alloc+0x105/0x170 [ 677.700921][T24481] ? ip_check_mc_rcu+0x4c7/0x680 [ 677.700945][T24481] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 677.700982][T24481] ? ip_route_output_key_hash+0xd8/0x2a0 [ 677.701010][T24481] ip_route_output_key_hash+0x18d/0x2a0 [ 677.701039][T24481] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 677.701084][T24481] ip_route_output_flow+0x2a/0x150 [ 677.701105][T24481] ? security_sk_classify_flow+0x6d/0x150 [ 677.701134][T24481] udp_sendmsg+0x141a/0x21a0 [ 677.701162][T24481] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 677.701210][T24481] ? __pfx_udp_sendmsg+0x10/0x10 [ 677.701260][T24481] ? aa_sk_perm+0x6d5/0x900 [ 677.701298][T24481] ? __pfx_aa_sk_perm+0x10/0x10 [ 677.701324][T24481] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 677.701361][T24481] ? sock_rps_record_flow+0x19/0x350 [ 677.701401][T24481] ? inet_sendmsg+0x29c/0x370 [ 677.701425][T24481] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 677.701453][T24481] ____sys_sendmsg+0x80a/0x9f0 [ 677.701477][T24481] ? irqentry_exit+0x59e/0x620 [ 677.701506][T24481] ? trace_irq_disable+0x3b/0x150 [ 677.701534][T24481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 677.701572][T24481] ? import_iovec+0x73/0xa0 [ 677.701601][T24481] ___sys_sendmsg+0x2a5/0x360 [ 677.701634][T24481] ? __pfx____sys_sendmsg+0x10/0x10 [ 677.701668][T24481] ? kstrtouint+0x6e/0xe0 [ 677.701727][T24481] ? __fget_files+0x2a/0x420 [ 677.701757][T24481] ? __fget_files+0x3a0/0x420 [ 677.701799][T24481] __sys_sendmmsg+0x27c/0x4e0 [ 677.701833][T24481] ? __pfx___sys_sendmmsg+0x10/0x10 [ 677.701862][T24481] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 677.701919][T24481] ? ksys_write+0x242/0x270 [ 677.701944][T24481] ? __pfx_ksys_write+0x10/0x10 [ 677.701975][T24481] __x64_sys_sendmmsg+0xa0/0xc0 [ 677.702002][T24481] do_syscall_64+0x14d/0xf80 [ 677.702027][T24481] ? trace_irq_disable+0x3b/0x150 [ 677.702044][T24481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.702064][T24481] ? clear_bhb_loop+0x40/0x90 [ 677.702088][T24481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.702106][T24481] RIP: 0033:0x7f617ad9c819 [ 677.702127][T24481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.702145][T24481] RSP: 002b:00007f617bca5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 677.702167][T24481] RAX: ffffffffffffffda RBX: 00007f617b015fa0 RCX: 00007f617ad9c819 [ 677.702181][T24481] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 677.702194][T24481] RBP: 00007f617bca5090 R08: 0000000000000000 R09: 0000000000000000 [ 677.702206][T24481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.702219][T24481] R13: 00007f617b016038 R14: 00007f617b015fa0 R15: 00007ffc9dae8e28 [ 677.702251][T24481] [ 678.219290][T24472] infiniband syz0: set active [ 678.224236][ T5827] lo speed is unknown, defaulting to 1000 [ 678.230548][T24472] infiniband syz0: added lo [ 678.287293][T24472] RDS/IB: syz0: added [ 678.295636][T24472] smc: adding ib device syz0 with port count 1 [ 678.309829][T24472] smc: ib device syz0 port 1 has no pnetid [ 678.333936][ T5918] lo speed is unknown, defaulting to 1000 [ 678.340095][T24472] lo speed is unknown, defaulting to 1000 [ 678.727587][T24472] lo speed is unknown, defaulting to 1000 [ 678.829892][T24517] FAULT_INJECTION: forcing a failure. [ 678.829892][T24517] name failslab, interval 1, probability 0, space 0, times 0 [ 678.878237][T24517] CPU: 0 UID: 0 PID: 24517 Comm: syz.4.5681 Not tainted syzkaller #0 PREEMPT(full) [ 678.878269][T24517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 678.878281][T24517] Call Trace: [ 678.878290][T24517] [ 678.878300][T24517] dump_stack_lvl+0xe8/0x150 [ 678.878336][T24517] should_fail_ex+0x412/0x560 [ 678.878373][T24517] should_failslab+0xa8/0x100 [ 678.878402][T24517] __kmalloc_cache_noprof+0x88/0x660 [ 678.878427][T24517] ? resv_map_alloc+0x88/0x2c0 [ 678.878448][T24517] ? __kmalloc_cache_noprof+0x15b/0x660 [ 678.878476][T24517] resv_map_alloc+0x88/0x2c0 [ 678.878502][T24517] hugetlbfs_get_inode+0x68/0x690 [ 678.878527][T24517] ? fput+0xa0/0xd0 [ 678.878561][T24517] hugetlb_file_setup+0x21d/0x630 [ 678.878591][T24517] ksys_mmap_pgoff+0x22e/0x760 [ 678.878630][T24517] do_syscall_64+0x14d/0xf80 [ 678.878660][T24517] ? trace_irq_disable+0x3b/0x150 [ 678.878679][T24517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.878700][T24517] ? clear_bhb_loop+0x40/0x90 [ 678.878726][T24517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.878747][T24517] RIP: 0033:0x7f82d379c819 [ 678.878768][T24517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.878787][T24517] RSP: 002b:00007f82d46d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 678.878811][T24517] RAX: ffffffffffffffda RBX: 00007f82d3a16090 RCX: 00007f82d379c819 [ 678.878826][T24517] RDX: 000000000000000b RSI: 0000000000800000 RDI: 0000200000000000 [ 678.878839][T24517] RBP: 00007f82d46d2090 R08: ffffffffffffffff R09: 0000000000000000 [ 678.878853][T24517] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 678.878867][T24517] R13: 00007f82d3a16128 R14: 00007f82d3a16090 R15: 00007ffdc06665d8 [ 678.878900][T24517] [ 679.300667][T24527] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 679.526588][T24472] lo speed is unknown, defaulting to 1000 [ 679.534522][T24540] __nla_validate_parse: 4 callbacks suppressed [ 679.534541][T24540] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5693'. [ 679.604416][T24540] team0: Device vlan4 is already an upper device of the team interface [ 679.868184][T24545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5695'. [ 680.085891][T24472] lo speed is unknown, defaulting to 1000 [ 680.218662][T24553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5698'. [ 680.239845][T24553] openvswitch: netlink: Invalid VLAN frame [ 680.582833][T24564] IPv6: Can't replace route, no match found [ 680.619505][T24564] IPv6: Can't replace route, no match found [ 680.660143][T24472] lo speed is unknown, defaulting to 1000 [ 680.815296][T24570] FAULT_INJECTION: forcing a failure. [ 680.815296][T24570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.842910][T24570] CPU: 0 UID: 0 PID: 24570 Comm: syz.1.5706 Not tainted syzkaller #0 PREEMPT(full) [ 680.842942][T24570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 680.842955][T24570] Call Trace: [ 680.842965][T24570] [ 680.842973][T24570] dump_stack_lvl+0xe8/0x150 [ 680.843010][T24570] should_fail_ex+0x412/0x560 [ 680.843045][T24570] _copy_from_user+0x2d/0xb0 [ 680.843070][T24570] __sys_bpf+0x229/0x950 [ 680.843093][T24570] ? __pfx___sys_bpf+0x10/0x10 [ 680.843131][T24570] ? ksys_write+0x242/0x270 [ 680.843158][T24570] ? __pfx_ksys_write+0x10/0x10 [ 680.843189][T24570] __x64_sys_bpf+0x7c/0x90 [ 680.843219][T24570] do_syscall_64+0x14d/0xf80 [ 680.843248][T24570] ? trace_irq_disable+0x3b/0x150 [ 680.843275][T24570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.843297][T24570] ? clear_bhb_loop+0x40/0x90 [ 680.843323][T24570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.843344][T24570] RIP: 0033:0x7f617ad9c819 [ 680.843369][T24570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.843387][T24570] RSP: 002b:00007f617bca5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 680.843410][T24570] RAX: ffffffffffffffda RBX: 00007f617b015fa0 RCX: 00007f617ad9c819 [ 680.843425][T24570] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 680.843440][T24570] RBP: 00007f617bca5090 R08: 0000000000000000 R09: 0000000000000000 [ 680.843453][T24570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.843466][T24570] R13: 00007f617b016038 R14: 00007f617b015fa0 R15: 00007ffc9dae8e28 [ 680.843500][T24570] [ 681.239736][T24472] lo speed is unknown, defaulting to 1000 [ 681.326822][T24586] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5710'. [ 681.360468][T24587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5711'. [ 681.460860][T24591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5713'. [ 681.723088][T24606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5715'. [ 683.819995][T24595] veth7: entered promiscuous mode [ 683.895438][T24615] FAULT_INJECTION: forcing a failure. [ 683.895438][T24615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.921505][T24615] CPU: 0 UID: 0 PID: 24615 Comm: syz.0.5717 Not tainted syzkaller #0 PREEMPT(full) [ 683.921536][T24615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 683.921549][T24615] Call Trace: [ 683.921557][T24615] [ 683.921565][T24615] dump_stack_lvl+0xe8/0x150 [ 683.921599][T24615] should_fail_ex+0x412/0x560 [ 683.921634][T24615] _copy_from_user+0x2d/0xb0 [ 683.921657][T24615] bpf_test_init+0xd8/0x150 [ 683.921684][T24615] bpf_prog_test_run_xdp+0x529/0x1160 [ 683.921724][T24615] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 683.921753][T24615] ? __fget_files+0x2a/0x420 [ 683.921790][T24615] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 683.921813][T24615] bpf_prog_test_run+0x2c7/0x340 [ 683.921845][T24615] __sys_bpf+0x643/0x950 [ 683.921866][T24615] ? __pfx___sys_bpf+0x10/0x10 [ 683.921901][T24615] ? ksys_write+0x242/0x270 [ 683.921926][T24615] ? __pfx_ksys_write+0x10/0x10 [ 683.921957][T24615] __x64_sys_bpf+0x7c/0x90 [ 683.921987][T24615] do_syscall_64+0x14d/0xf80 [ 683.922015][T24615] ? trace_irq_disable+0x3b/0x150 [ 683.922034][T24615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.922056][T24615] ? clear_bhb_loop+0x40/0x90 [ 683.922081][T24615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.922111][T24615] RIP: 0033:0x7effbf99c819 [ 683.922132][T24615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.922149][T24615] RSP: 002b:00007effc0795028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 683.922172][T24615] RAX: ffffffffffffffda RBX: 00007effbfc15fa0 RCX: 00007effbf99c819 [ 683.922187][T24615] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 683.922201][T24615] RBP: 00007effc0795090 R08: 0000000000000000 R09: 0000000000000000 [ 683.922213][T24615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.922225][T24615] R13: 00007effbfc16038 R14: 00007effbfc15fa0 R15: 00007ffeb2018c88 [ 683.922258][T24615] [ 684.304907][T24626] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 684.313162][T24627] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 685.304323][T24628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 685.347197][T24628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 685.713840][ T5918] lo speed is unknown, defaulting to 1000 [ 685.722084][ T5918] syz0: Port: 1 Link DOWN [ 685.753506][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.766650][ T5918] lo speed is unknown, defaulting to 1000 [ 685.782390][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.804065][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.852443][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.889050][T24686] FAULT_INJECTION: forcing a failure. [ 685.889050][T24686] name failslab, interval 1, probability 0, space 0, times 0 [ 685.911994][T24686] CPU: 1 UID: 0 PID: 24686 Comm: syz.4.5732 Not tainted syzkaller #0 PREEMPT(full) [ 685.912025][T24686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 685.912038][T24686] Call Trace: [ 685.912046][T24686] [ 685.912055][T24686] dump_stack_lvl+0xe8/0x150 [ 685.912090][T24686] should_fail_ex+0x412/0x560 [ 685.912125][T24686] should_failslab+0xa8/0x100 [ 685.912150][T24686] ? ep_insert+0x283/0x1a40 [ 685.912170][T24686] kmem_cache_alloc_noprof+0x87/0x650 [ 685.912193][T24686] ? percpu_counter_add_batch+0xea/0x1d0 [ 685.912235][T24686] ep_insert+0x283/0x1a40 [ 685.912256][T24686] ? __lock_acquire+0x6b5/0x2cf0 [ 685.912292][T24686] ? do_epoll_ctl+0x3c9/0xe80 [ 685.912324][T24686] ? __pfx_ep_insert+0x10/0x10 [ 685.912345][T24686] ? __pfx___mutex_lock+0x10/0x10 [ 685.912376][T24686] ? __fget_files+0x2a/0x420 [ 685.912410][T24686] ? __fget_files+0x2a/0x420 [ 685.912438][T24686] ? __fget_files+0x3a0/0x420 [ 685.912466][T24686] ? __fget_files+0x2a/0x420 [ 685.912506][T24686] do_epoll_ctl+0x7f4/0xe80 [ 685.912547][T24686] __x64_sys_epoll_ctl+0x165/0x1b0 [ 685.912571][T24686] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 685.912606][T24686] do_syscall_64+0x14d/0xf80 [ 685.912635][T24686] ? trace_irq_disable+0x3b/0x150 [ 685.912652][T24686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.912672][T24686] ? clear_bhb_loop+0x40/0x90 [ 685.912698][T24686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.912719][T24686] RIP: 0033:0x7f82d379c819 [ 685.912739][T24686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.912756][T24686] RSP: 002b:00007f82d46f3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 685.912779][T24686] RAX: ffffffffffffffda RBX: 00007f82d3a15fa0 RCX: 00007f82d379c819 [ 685.912795][T24686] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 685.912808][T24686] RBP: 00007f82d46f3090 R08: 0000000000000000 R09: 0000000000000000 [ 685.912821][T24686] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 685.912834][T24686] R13: 00007f82d3a16038 R14: 00007f82d3a15fa0 R15: 00007ffdc06665d8 [ 685.912869][T24686] [ 686.145978][T24688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5731'. [ 686.240502][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.257109][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 686.428308][T24703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5737'. [ 686.535561][T24710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5739'. [ 686.544987][T24710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5739'. [ 686.554248][T24710] netlink: 'syz.1.5739': attribute type 11 has an invalid length. [ 686.563713][T24710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5739'. [ 686.573213][T24710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5739'. [ 686.583822][T24710] netlink: 'syz.1.5739': attribute type 11 has an invalid length. [ 686.629442][T24714] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5740'. [ 686.995465][T24723] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5741'. [ 687.350023][T24737] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5747'. [ 687.399186][T24734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5746'. [ 687.415889][T24734] : entered promiscuous mode [ 687.799993][T24754] FAULT_INJECTION: forcing a failure. [ 687.799993][T24754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.842237][T24754] CPU: 0 UID: 0 PID: 24754 Comm: syz.0.5752 Not tainted syzkaller #0 PREEMPT(full) [ 687.842267][T24754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 687.842280][T24754] Call Trace: [ 687.842289][T24754] [ 687.842298][T24754] dump_stack_lvl+0xe8/0x150 [ 687.842334][T24754] should_fail_ex+0x412/0x560 [ 687.842368][T24754] _copy_from_user+0x2d/0xb0 [ 687.842394][T24754] __sys_sendto+0x2b0/0x710 [ 687.842422][T24754] ? __pfx___sys_sendto+0x10/0x10 [ 687.842444][T24754] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 687.842489][T24754] ? __fget_files+0x3a0/0x420 [ 687.842532][T24754] ? ksys_write+0x242/0x270 [ 687.842558][T24754] ? __pfx_ksys_write+0x10/0x10 [ 687.842588][T24754] __x64_sys_sendto+0xde/0x100 [ 687.842616][T24754] do_syscall_64+0x14d/0xf80 [ 687.842644][T24754] ? trace_irq_disable+0x3b/0x150 [ 687.842662][T24754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.842684][T24754] ? clear_bhb_loop+0x40/0x90 [ 687.842710][T24754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.842731][T24754] RIP: 0033:0x7effbf95d04e [ 687.842752][T24754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 687.842770][T24754] RSP: 002b:00007effc0793e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 687.842794][T24754] RAX: ffffffffffffffda RBX: 00007effc07956c0 RCX: 00007effbf95d04e [ 687.842809][T24754] RDX: 0000000000000020 RSI: 00007effc0794000 RDI: 0000000000000003 [ 687.842823][T24754] RBP: 0000000000000000 R08: 00007effc0793f04 R09: 000000000000000c [ 687.842836][T24754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 687.842849][T24754] R13: 00007effc0793f58 R14: 00007effc0794000 R15: 0000000000000000 [ 687.842882][T24754] [ 688.243495][T24762] ipvlan2: entered promiscuous mode [ 688.261517][T24762] ipvlan2: entered allmulticast mode [ 688.283502][T24762] gretap0: entered allmulticast mode [ 688.299568][T24762] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 688.477483][T24764] lo speed is unknown, defaulting to 1000 [ 688.486962][T24764] lo speed is unknown, defaulting to 1000 [ 688.528421][T24773] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 688.615231][T24778] netlink: 'syz.2.5759': attribute type 4 has an invalid length. [ 688.798546][T24778] netlink: 'syz.2.5759': attribute type 4 has an invalid length. [ 688.943653][T24782] netlink: 'syz.3.5761': attribute type 1 has an invalid length. [ 688.951459][T24782] netlink: 'syz.3.5761': attribute type 2 has an invalid length. [ 689.218835][T24791] pimreg9: entered allmulticast mode [ 689.672830][T24811] sch_tbf: burst 0 is lower than device tunl0 mtu (68) ! [ 690.424278][T24835] syzkaller0: entered promiscuous mode [ 690.860705][T24863] netlink: 'syz.0.5790': attribute type 1 has an invalid length. [ 691.271991][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 691.280134][ C0] lec:lec_tx_timeout: lec0 [ 691.330004][T24886] "syz.0.5796" (24886) uses obsolete ecb(arc4) skcipher [ 691.598353][ T6133] bond1 (unregistering): (slave geneve2): Releasing active interface [ 691.757429][ T6665] lec:lec_start_xmit: lec0:No lecd attached [ 691.830518][ T6133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.842640][ T6133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.857465][ T6133] bond0 (unregistering): Released all slaves [ 691.888971][ T6133] bond1 (unregistering): Released all slaves [ 691.911552][ T6133] bond2 (unregistering): Released all slaves [ 691.933631][ T6133] bond3 (unregistering): Released all slaves [ 692.085827][ T6133] : left promiscuous mode [ 692.210444][T24904] __nla_validate_parse: 7 callbacks suppressed [ 692.210465][T24904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5801'. [ 692.319361][ T6133] tipc: Left network mode [ 692.326385][T24899] lo speed is unknown, defaulting to 1000 [ 692.336216][T24899] lo speed is unknown, defaulting to 1000 [ 692.704421][T24921] netlink: 'syz.4.5807': attribute type 3 has an invalid length. [ 692.743284][T24921] netlink: 'syz.4.5807': attribute type 3 has an invalid length. [ 692.803133][T24921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5807'. [ 693.271199][T24945] FAULT_INJECTION: forcing a failure. [ 693.271199][T24945] name failslab, interval 1, probability 0, space 0, times 0 [ 693.296565][T24945] CPU: 0 UID: 0 PID: 24945 Comm: syz.4.5815 Not tainted syzkaller #0 PREEMPT(full) [ 693.296596][T24945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 693.296609][T24945] Call Trace: [ 693.296618][T24945] [ 693.296627][T24945] dump_stack_lvl+0xe8/0x150 [ 693.296664][T24945] should_fail_ex+0x412/0x560 [ 693.296699][T24945] should_failslab+0xa8/0x100 [ 693.296728][T24945] __kmalloc_noprof+0xe8/0x760 [ 693.296753][T24945] ? tomoyo_encode+0x28b/0x550 [ 693.296779][T24945] tomoyo_encode+0x28b/0x550 [ 693.296805][T24945] tomoyo_realpath_from_path+0x58d/0x5d0 [ 693.296837][T24945] ? tomoyo_path_number_perm+0x219/0x630 [ 693.296865][T24945] tomoyo_path_number_perm+0x246/0x630 [ 693.296895][T24945] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 693.296927][T24945] ? sb_end_write+0xe9/0x1c0 [ 693.296968][T24945] ? vfs_write+0x9bc/0xb90 [ 693.297027][T24945] ? ksys_write+0x1fc/0x270 [ 693.297059][T24945] security_file_ioctl+0xc3/0x2a0 [ 693.297088][T24945] __se_sys_ioctl+0x47/0x170 [ 693.297116][T24945] do_syscall_64+0x14d/0xf80 [ 693.297145][T24945] ? trace_irq_disable+0x3b/0x150 [ 693.297164][T24945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.297185][T24945] ? clear_bhb_loop+0x40/0x90 [ 693.297209][T24945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.297230][T24945] RIP: 0033:0x7f82d379c819 [ 693.297250][T24945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.297269][T24945] RSP: 002b:00007f82d46f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 693.297292][T24945] RAX: ffffffffffffffda RBX: 00007f82d3a15fa0 RCX: 00007f82d379c819 [ 693.297307][T24945] RDX: 0000000000000000 RSI: 00000000c008744c RDI: 0000000000000003 [ 693.297320][T24945] RBP: 00007f82d46f3090 R08: 0000000000000000 R09: 0000000000000000 [ 693.297333][T24945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.297345][T24945] R13: 00007f82d3a16038 R14: 00007f82d3a15fa0 R15: 00007ffdc06665d8 [ 693.297380][T24945] [ 693.297402][T24945] ERROR: Out of memory at tomoyo_realpath_from_path. [ 693.833855][T24972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5823'. [ 693.976689][T24979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5826'. [ 694.169755][T24988] FAULT_INJECTION: forcing a failure. [ 694.169755][T24988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.184835][T24988] CPU: 0 UID: 0 PID: 24988 Comm: syz.0.5829 Not tainted syzkaller #0 PREEMPT(full) [ 694.184867][T24988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 694.184880][T24988] Call Trace: [ 694.184890][T24988] [ 694.184899][T24988] dump_stack_lvl+0xe8/0x150 [ 694.184936][T24988] should_fail_ex+0x412/0x560 [ 694.184972][T24988] _copy_from_iter+0x1d3/0x1670 [ 694.185004][T24988] ? rcu_is_watching+0x15/0xb0 [ 694.185033][T24988] ? trace_kmem_cache_alloc+0x29/0xf0 [ 694.185055][T24988] ? __build_skb+0x62/0x440 [ 694.185081][T24988] ? __build_skb+0x62/0x440 [ 694.185105][T24988] ? __pfx__copy_from_iter+0x10/0x10 [ 694.185149][T24988] ? __build_skb+0x2a2/0x440 [ 694.185171][T24988] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 694.185197][T24988] ? netlink_sendmsg+0x650/0xb40 [ 694.185220][T24988] ? skb_put+0x11b/0x210 [ 694.185248][T24988] netlink_sendmsg+0x6c0/0xb40 [ 694.185281][T24988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.185306][T24988] ? aa_sock_msg_perm+0xf1/0x1b0 [ 694.185339][T24988] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 694.185367][T24988] ____sys_sendmsg+0x972/0x9f0 [ 694.185405][T24988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 694.185442][T24988] ? import_iovec+0x73/0xa0 [ 694.185468][T24988] ___sys_sendmsg+0x2a5/0x360 [ 694.185500][T24988] ? __pfx____sys_sendmsg+0x10/0x10 [ 694.185561][T24988] ? __fget_files+0x2a/0x420 [ 694.185589][T24988] ? __fget_files+0x3a0/0x420 [ 694.185628][T24988] __x64_sys_sendmsg+0x1bd/0x2a0 [ 694.185656][T24988] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 694.185691][T24988] ? __pfx_ksys_write+0x10/0x10 [ 694.185725][T24988] do_syscall_64+0x14d/0xf80 [ 694.185754][T24988] ? trace_irq_disable+0x3b/0x150 [ 694.185773][T24988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.185801][T24988] ? clear_bhb_loop+0x40/0x90 [ 694.185828][T24988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.185850][T24988] RIP: 0033:0x7effbf99c819 [ 694.185870][T24988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.185888][T24988] RSP: 002b:00007effc0795028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.185912][T24988] RAX: ffffffffffffffda RBX: 00007effbfc15fa0 RCX: 00007effbf99c819 [ 694.185928][T24988] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 694.185943][T24988] RBP: 00007effc0795090 R08: 0000000000000000 R09: 0000000000000000 [ 694.185957][T24988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.185970][T24988] R13: 00007effbfc16038 R14: 00007effbfc15fa0 R15: 00007ffeb2018c88 [ 694.186004][T24988] [ 695.015801][T25013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5836'. [ 695.121260][T25018] FAULT_INJECTION: forcing a failure. [ 695.121260][T25018] name failslab, interval 1, probability 0, space 0, times 0 [ 695.144620][T25018] CPU: 1 UID: 0 PID: 25018 Comm: syz.1.5839 Not tainted syzkaller #0 PREEMPT(full) [ 695.144650][T25018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 695.144663][T25018] Call Trace: [ 695.144672][T25018] [ 695.144681][T25018] dump_stack_lvl+0xe8/0x150 [ 695.144717][T25018] should_fail_ex+0x412/0x560 [ 695.144754][T25018] should_failslab+0xa8/0x100 [ 695.144783][T25018] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 695.144814][T25018] ? __alloc_skb+0x186/0x7d0 [ 695.144837][T25018] ? __alloc_skb+0x1d0/0x7d0 [ 695.144858][T25018] ? __local_bh_enable_ip+0xd0/0x130 [ 695.144890][T25018] __alloc_skb+0x1d0/0x7d0 [ 695.144918][T25018] netlink_sendmsg+0x5d4/0xb40 [ 695.144952][T25018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.144980][T25018] ? aa_sock_msg_perm+0xf1/0x1b0 [ 695.145012][T25018] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 695.145040][T25018] ____sys_sendmsg+0x972/0x9f0 [ 695.145077][T25018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 695.145114][T25018] ? import_iovec+0x73/0xa0 [ 695.145151][T25018] ___sys_sendmsg+0x2a5/0x360 [ 695.145183][T25018] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.145247][T25018] ? __fget_files+0x2a/0x420 [ 695.145276][T25018] ? __fget_files+0x3a0/0x420 [ 695.145317][T25018] __x64_sys_sendmsg+0x1bd/0x2a0 [ 695.145346][T25018] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 695.145381][T25018] ? __pfx_ksys_write+0x10/0x10 [ 695.145418][T25018] do_syscall_64+0x14d/0xf80 [ 695.145446][T25018] ? trace_irq_disable+0x3b/0x150 [ 695.145464][T25018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.145484][T25018] ? clear_bhb_loop+0x40/0x90 [ 695.145510][T25018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.145530][T25018] RIP: 0033:0x7f617ad9c819 [ 695.145550][T25018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.145570][T25018] RSP: 002b:00007f617bca5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.145593][T25018] RAX: ffffffffffffffda RBX: 00007f617b015fa0 RCX: 00007f617ad9c819 [ 695.145610][T25018] RDX: 0000000000004000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 695.145624][T25018] RBP: 00007f617bca5090 R08: 0000000000000000 R09: 0000000000000000 [ 695.145638][T25018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.145651][T25018] R13: 00007f617b016038 R14: 00007f617b015fa0 R15: 00007ffc9dae8e28 [ 695.145685][T25018] [ 695.145959][T25017] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5838'. [ 695.387453][T25025] netlink: 'syz.1.5841': attribute type 1 has an invalid length. [ 695.406393][T25025] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5841'. [ 695.676607][T25025] IPVS: Scheduler module ip_vs_sip not found [ 696.128396][T25041] lo speed is unknown, defaulting to 1000 [ 696.152876][T25041] lo speed is unknown, defaulting to 1000 [ 696.435478][ T6133] hsr_slave_0: left promiscuous mode [ 696.446634][ T6133] hsr_slave_1: left promiscuous mode [ 696.925452][T25072] netlink: 'syz.3.5853': attribute type 21 has an invalid length. [ 696.936434][T25072] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5853'. [ 696.981398][T25072] netlink: 'syz.3.5853': attribute type 4 has an invalid length. [ 696.995571][T25068] netlink: 'syz.4.5854': attribute type 4 has an invalid length. [ 697.008597][T25072] netlink: 'syz.3.5853': attribute type 5 has an invalid length. [ 697.032501][T25072] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5853'. [ 697.085360][T25071] netlink: 'syz.4.5854': attribute type 4 has an invalid length. [ 697.231877][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5470 ms [ 697.239945][ C0] lec:lec_tx_timeout: lec0 [ 697.335685][T25087] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.5859'. [ 697.392559][T25088] netlink: 'syz.2.5857': attribute type 2 has an invalid length. [ 697.401516][ T6133] IPVS: stop unused estimator thread 0... [ 697.439592][T25088] úÁàél24): entered promiscuous mode [ 697.484759][T25090] FAULT_INJECTION: forcing a failure. [ 697.484759][T25090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.514794][T25090] CPU: 0 UID: 0 PID: 25090 Comm: syz.4.5860 Not tainted syzkaller #0 PREEMPT(full) [ 697.514824][T25090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 697.514837][T25090] Call Trace: [ 697.514846][T25090] [ 697.514855][T25090] dump_stack_lvl+0xe8/0x150 [ 697.514901][T25090] should_fail_ex+0x412/0x560 [ 697.514937][T25090] _copy_from_user+0x2d/0xb0 [ 697.514962][T25090] ___sys_sendmsg+0x1c6/0x360 [ 697.514996][T25090] ? __pfx____sys_sendmsg+0x10/0x10 [ 697.515061][T25090] ? __fget_files+0x2a/0x420 [ 697.515091][T25090] ? __fget_files+0x3a0/0x420 [ 697.515131][T25090] __x64_sys_sendmsg+0x1bd/0x2a0 [ 697.515161][T25090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 697.515198][T25090] ? __pfx_ksys_write+0x10/0x10 [ 697.515233][T25090] do_syscall_64+0x14d/0xf80 [ 697.515263][T25090] ? trace_irq_disable+0x3b/0x150 [ 697.515282][T25090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.515303][T25090] ? clear_bhb_loop+0x40/0x90 [ 697.515329][T25090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.515349][T25090] RIP: 0033:0x7f82d379c819 [ 697.515369][T25090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.515387][T25090] RSP: 002b:00007f82d46f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.515411][T25090] RAX: ffffffffffffffda RBX: 00007f82d3a15fa0 RCX: 00007f82d379c819 [ 697.515427][T25090] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 697.515441][T25090] RBP: 00007f82d46f3090 R08: 0000000000000000 R09: 0000000000000000 [ 697.515454][T25090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.515466][T25090] R13: 00007f82d3a16038 R14: 00007f82d3a15fa0 R15: 00007ffdc06665d8 [ 697.515499][T25090] [ 698.343729][T25112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5870'. [ 698.624979][T25127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.653961][T25118] lo speed is unknown, defaulting to 1000 [ 698.704948][T25118] lo speed is unknown, defaulting to 1000 [ 698.780658][T25130] FAULT_INJECTION: forcing a failure. [ 698.780658][T25130] name failslab, interval 1, probability 0, space 0, times 0 [ 698.836104][T25130] CPU: 1 UID: 0 PID: 25130 Comm: syz.2.5877 Not tainted syzkaller #0 PREEMPT(full) [ 698.836136][T25130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 698.836149][T25130] Call Trace: [ 698.836158][T25130] [ 698.836168][T25130] dump_stack_lvl+0xe8/0x150 [ 698.836204][T25130] should_fail_ex+0x412/0x560 [ 698.836239][T25130] should_failslab+0xa8/0x100 [ 698.836268][T25130] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 698.836292][T25130] ? __alloc_skb+0x186/0x7d0 [ 698.836315][T25130] ? __alloc_skb+0x1d0/0x7d0 [ 698.836336][T25130] ? __local_bh_enable_ip+0xd0/0x130 [ 698.836369][T25130] __alloc_skb+0x1d0/0x7d0 [ 698.836398][T25130] netlink_sendmsg+0x5d4/0xb40 [ 698.836433][T25130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.836461][T25130] ? aa_sock_msg_perm+0xf1/0x1b0 [ 698.836493][T25130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 698.836521][T25130] ____sys_sendmsg+0x972/0x9f0 [ 698.836559][T25130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 698.836596][T25130] ? import_iovec+0x73/0xa0 [ 698.836624][T25130] ___sys_sendmsg+0x2a5/0x360 [ 698.836657][T25130] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.836722][T25130] ? __fget_files+0x2a/0x420 [ 698.836752][T25130] ? __fget_files+0x3a0/0x420 [ 698.836793][T25130] __x64_sys_sendmsg+0x1bd/0x2a0 [ 698.836823][T25130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 698.836859][T25130] ? __pfx_ksys_write+0x10/0x10 [ 698.836895][T25130] do_syscall_64+0x14d/0xf80 [ 698.836924][T25130] ? trace_irq_disable+0x3b/0x150 [ 698.836942][T25130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.836969][T25130] ? clear_bhb_loop+0x40/0x90 [ 698.836995][T25130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.837017][T25130] RIP: 0033:0x7f804839c819 [ 698.837036][T25130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.837055][T25130] RSP: 002b:00007f80492dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.837080][T25130] RAX: ffffffffffffffda RBX: 00007f8048615fa0 RCX: 00007f804839c819 [ 698.837104][T25130] RDX: 0000000004000080 RSI: 0000200000000180 RDI: 0000000000000003 [ 698.837119][T25130] RBP: 00007f80492dd090 R08: 0000000000000000 R09: 0000000000000000 [ 698.837133][T25130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.837146][T25130] R13: 00007f8048616038 R14: 00007f8048615fa0 R15: 00007ffcffd5f998 [ 698.837181][T25130] [ 699.330353][T25138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 699.361527][T25138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 699.373273][T25138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 699.385462][T25138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 699.409118][T25138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 699.425658][T25141] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5881'. [ 699.452831][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 699.460366][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 699.469378][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 699.472070][T25141] openvswitch: netlink: Flow key attr not present in new flow. [ 699.500910][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 699.518816][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 699.609181][T25148] netlink: 277 bytes leftover after parsing attributes in process `syz.4.5884'. [ 699.658731][T25137] lo speed is unknown, defaulting to 1000 [ 699.710896][ T6133] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 699.742715][T25152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5885'. [ 699.751646][T25152] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5885'. [ 699.789407][T25152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5885'. [ 699.812069][T25152] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5885'. [ 699.822697][T25152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5885'. [ 699.865987][T25137] lo speed is unknown, defaulting to 1000 [ 700.132668][T25160] pim6reg1: entered promiscuous mode [ 700.138081][T25160] pim6reg1: entered allmulticast mode [ 700.236544][T25163] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5888'. [ 700.482266][ T6133] bridge_slave_1: left allmulticast mode [ 700.488084][ T6133] bridge_slave_1: left promiscuous mode [ 700.502714][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.521406][ T6133] bridge_slave_0: left allmulticast mode [ 700.541470][ T6133] bridge_slave_0: left promiscuous mode [ 700.554059][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.573676][ T6133] veth0_to_bond: left allmulticast mode [ 700.579414][ T6133] veth0_to_bond: left promiscuous mode [ 700.585460][ T6133] bridge3: port 3(veth0_to_bond) entered disabled state [ 700.598634][ T6133] veth7: left allmulticast mode [ 700.604414][ T6133] veth7: left promiscuous mode [ 700.609644][ T6133] bridge3: port 2(veth7) entered disabled state [ 700.619963][ T6133] veth5: left allmulticast mode [ 700.624978][ T6133] veth5: left promiscuous mode [ 700.630372][ T6133] bridge3: port 1(veth5) entered disabled state [ 700.640256][ T6133] pimreg9: left allmulticast mode [ 701.005528][ T6133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.015672][ T6133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.026428][ T6133] bond0 (unregistering): Released all slaves [ 701.039987][ T6133] bond1 (unregistering): Released all slaves [ 701.057735][ T6133] bond2 (unregistering): (slave veth3): Releasing active interface [ 701.066775][ T6133] bond2 (unregistering): Released all slaves [ 701.081271][ T6133] bond3 (unregistering): (slave dummy0): Releasing active interface [ 701.090721][ T6133] bond3 (unregistering): Released all slaves [ 701.106961][ T6133] bond4 (unregistering): Released all slaves [ 701.137609][T25171] tipc: Resetting bearer [ 701.201339][T25170] tipc: Resetting bearer [ 701.266244][ T6133] tipc: Left network mode [ 701.552571][T25182] openvswitch: netlink: IP tunnel TTL not specified. [ 701.582648][ T36] tipc: Resetting bearer [ 701.599593][T25137] chnl_net:caif_netlink_parms(): no params data found [ 701.637889][T25189] netlink: 'syz.0.5896': attribute type 1 has an invalid length. [ 701.648376][T25138] Bluetooth: hci4: command tx timeout [ 702.640928][T25225] __nla_validate_parse: 2 callbacks suppressed [ 702.640954][T25225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5902'. [ 702.719729][T25225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5902'. [ 702.734223][T25137] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.753389][T25137] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.760915][T25137] bridge_slave_0: entered allmulticast mode [ 702.779917][T25137] bridge_slave_0: entered promiscuous mode [ 702.868451][T25137] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.889403][T25137] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.904991][T25137] bridge_slave_1: entered allmulticast mode [ 702.920541][T25137] bridge_slave_1: entered promiscuous mode [ 703.125455][T25250] netlink: 'syz.1.5906': attribute type 4 has an invalid length. [ 703.189118][T25242] netlink: 'syz.1.5906': attribute type 4 has an invalid length. [ 703.220511][T25252] netlink: 'syz.0.5909': attribute type 4 has an invalid length. [ 703.259711][T25137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.275456][T25137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.371491][T25258] FAULT_INJECTION: forcing a failure. [ 703.371491][T25258] name failslab, interval 1, probability 0, space 0, times 0 [ 703.385017][T25258] CPU: 1 UID: 0 PID: 25258 Comm: syz.0.5911 Not tainted syzkaller #0 PREEMPT(full) [ 703.385045][T25258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 703.385058][T25258] Call Trace: [ 703.385067][T25258] [ 703.385076][T25258] dump_stack_lvl+0xe8/0x150 [ 703.385112][T25258] should_fail_ex+0x412/0x560 [ 703.385147][T25258] should_failslab+0xa8/0x100 [ 703.385176][T25258] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 703.385200][T25258] ? __alloc_skb+0x186/0x7d0 [ 703.385224][T25258] ? __alloc_skb+0x1d0/0x7d0 [ 703.385244][T25258] ? __local_bh_enable_ip+0xd0/0x130 [ 703.385277][T25258] __alloc_skb+0x1d0/0x7d0 [ 703.385307][T25258] netlink_sendmsg+0x5d4/0xb40 [ 703.385341][T25258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 703.385368][T25258] ? aa_sock_msg_perm+0xf1/0x1b0 [ 703.385400][T25258] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 703.385429][T25258] ____sys_sendmsg+0x972/0x9f0 [ 703.385466][T25258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 703.385502][T25258] ? import_iovec+0x73/0xa0 [ 703.385530][T25258] ___sys_sendmsg+0x2a5/0x360 [ 703.385562][T25258] ? __pfx____sys_sendmsg+0x10/0x10 [ 703.385626][T25258] ? __fget_files+0x2a/0x420 [ 703.385662][T25258] ? __fget_files+0x3a0/0x420 [ 703.385702][T25258] __x64_sys_sendmsg+0x1bd/0x2a0 [ 703.385733][T25258] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 703.385770][T25258] ? __pfx_ksys_write+0x10/0x10 [ 703.385805][T25258] do_syscall_64+0x14d/0xf80 [ 703.385834][T25258] ? trace_irq_disable+0x3b/0x150 [ 703.385853][T25258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.385882][T25258] ? clear_bhb_loop+0x40/0x90 [ 703.385908][T25258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.385929][T25258] RIP: 0033:0x7effbf99c819 [ 703.385950][T25258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.385968][T25258] RSP: 002b:00007effc0795028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 703.385992][T25258] RAX: ffffffffffffffda RBX: 00007effbfc15fa0 RCX: 00007effbf99c819 [ 703.386007][T25258] RDX: 0000000000000080 RSI: 0000200000001580 RDI: 0000000000000003 [ 703.386021][T25258] RBP: 00007effc0795090 R08: 0000000000000000 R09: 0000000000000000 [ 703.386034][T25258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.386047][T25258] R13: 00007effbfc16038 R14: 00007effbfc15fa0 R15: 00007ffeb2018c88 [ 703.386081][T25258] [ 703.411175][T25137] team0: Port device team_slave_0 added [ 703.722914][T25138] Bluetooth: hci4: command tx timeout [ 703.794361][T25261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5912'. [ 703.841390][T25261] macvtap3: entered promiscuous mode [ 703.872346][T25261] macvtap3: entered allmulticast mode [ 703.886115][T25137] team0: Port device team_slave_1 added [ 704.000095][ T6133] hsr_slave_0: left promiscuous mode [ 704.013537][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.043134][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.450408][ T6133] team0 (unregistering): Port device team_slave_1 removed [ 704.497946][ T6133] team0 (unregistering): Port device team_slave_0 removed [ 704.697440][ T36] smc: removing ib device syz0 [ 704.708164][T25266] tipc: Enabling of bearer rejected, failed to enable media [ 704.786146][T25294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5917'. [ 705.012549][T25137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.019648][T25137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.084676][T25298] delete_channel: no stack [ 705.089481][ T30] audit: type=1800 audit(1775102526.227:4): pid=25301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5919" name="memory.events" dev="tmpfs" ino=2881 res=0 errno=0 [ 705.101091][T25304] FAULT_INJECTION: forcing a failure. [ 705.101091][T25304] name failslab, interval 1, probability 0, space 0, times 0 [ 705.121793][T25137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.139028][T25137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.151219][T25137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.187992][T25137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.201796][T25304] CPU: 0 UID: 0 PID: 25304 Comm: syz.4.5920 Not tainted syzkaller #0 PREEMPT(full) [ 705.201827][T25304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 705.201845][T25304] Call Trace: [ 705.201854][T25304] [ 705.201863][T25304] dump_stack_lvl+0xe8/0x150 [ 705.201898][T25304] should_fail_ex+0x412/0x560 [ 705.201933][T25304] should_failslab+0xa8/0x100 [ 705.201961][T25304] __kmalloc_cache_noprof+0x88/0x660 [ 705.201987][T25304] ? rtnl_newlink+0x136/0x1be0 [ 705.202016][T25304] rtnl_newlink+0x136/0x1be0 [ 705.202040][T25304] ? unwind_next_frame+0xa5/0x23c0 [ 705.202090][T25304] ? __pfx_rtnl_newlink+0x10/0x10 [ 705.202123][T25304] ? __lock_acquire+0x6b5/0x2cf0 [ 705.202156][T25304] ? __lock_acquire+0x6b5/0x2cf0 [ 705.202185][T25304] ? __lock_acquire+0x6b5/0x2cf0 [ 705.202223][T25304] ? unwind_next_frame+0xa5/0x23c0 [ 705.202276][T25304] ? __lock_acquire+0x6b5/0x2cf0 [ 705.202304][T25304] ? is_bpf_text_address+0x26/0x2b0 [ 705.202331][T25304] ? kernel_text_address+0xa5/0xe0 [ 705.202383][T25304] ? __pfx_rtnl_newlink+0x10/0x10 [ 705.202405][T25304] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 705.202431][T25304] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 705.202451][T25304] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 705.202476][T25304] ? __lock_acquire+0x6b5/0x2cf0 [ 705.202511][T25304] netlink_rcv_skb+0x232/0x4b0 [ 705.202536][T25304] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 705.202560][T25304] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 705.202593][T25304] ? netlink_deliver_tap+0x2e/0x1b0 [ 705.202622][T25304] netlink_unicast+0x80f/0x9b0 [ 705.202663][T25304] ? __pfx_netlink_unicast+0x10/0x10 [ 705.202696][T25304] ? netlink_sendmsg+0x650/0xb40 [ 705.202717][T25304] ? skb_put+0x11b/0x210 [ 705.202747][T25304] netlink_sendmsg+0x813/0xb40 [ 705.202780][T25304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 705.202807][T25304] ? aa_sock_msg_perm+0xf1/0x1b0 [ 705.202839][T25304] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 705.202867][T25304] ____sys_sendmsg+0x972/0x9f0 [ 705.202904][T25304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 705.202939][T25304] ? import_iovec+0x73/0xa0 [ 705.202966][T25304] ___sys_sendmsg+0x2a5/0x360 [ 705.202998][T25304] ? __pfx____sys_sendmsg+0x10/0x10 [ 705.203061][T25304] ? __fget_files+0x2a/0x420 [ 705.203101][T25304] ? __fget_files+0x3a0/0x420 [ 705.203142][T25304] __x64_sys_sendmsg+0x1bd/0x2a0 [ 705.203172][T25304] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 705.203210][T25304] ? __pfx_ksys_write+0x10/0x10 [ 705.203247][T25304] do_syscall_64+0x14d/0xf80 [ 705.203275][T25304] ? trace_irq_disable+0x3b/0x150 [ 705.203293][T25304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.203314][T25304] ? clear_bhb_loop+0x40/0x90 [ 705.203339][T25304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.203375][T25304] RIP: 0033:0x7f82d379c819 [ 705.203397][T25304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.203415][T25304] RSP: 002b:00007f82d46f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 705.203438][T25304] RAX: ffffffffffffffda RBX: 00007f82d3a15fa0 RCX: 00007f82d379c819 [ 705.203453][T25304] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000006 [ 705.203468][T25304] RBP: 00007f82d46f3090 R08: 0000000000000000 R09: 0000000000000000 [ 705.203481][T25304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.203494][T25304] R13: 00007f82d3a16038 R14: 00007f82d3a15fa0 R15: 00007ffdc06665d8 [ 705.203527][T25304] [ 705.796488][T25138] Bluetooth: hci4: command tx timeout [ 705.810992][T25313] FAULT_INJECTION: forcing a failure. [ 705.810992][T25313] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 705.852102][T25313] CPU: 0 UID: 0 PID: 25313 Comm: syz.4.5922 Not tainted syzkaller #0 PREEMPT(full) [ 705.852132][T25313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 705.852145][T25313] Call Trace: [ 705.852154][T25313] [ 705.852162][T25313] dump_stack_lvl+0xe8/0x150 [ 705.852198][T25313] should_fail_ex+0x412/0x560 [ 705.852234][T25313] prepare_alloc_pages+0x22a/0x650 [ 705.852271][T25313] __alloc_frozen_pages_noprof+0x12f/0x380 [ 705.852302][T25313] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 705.852334][T25313] ? __pfx_policy_nodemask+0x10/0x10 [ 705.852366][T25313] ? __lock_acquire+0x6b5/0x2cf0 [ 705.852398][T25313] alloc_pages_mpol+0x232/0x4a0 [ 705.852431][T25313] vma_alloc_folio_noprof+0xea/0x210 [ 705.852463][T25313] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 705.852503][T25313] do_pte_missing+0x1656/0x3490 [ 705.852548][T25313] handle_mm_fault+0x1bec/0x3310 [ 705.852595][T25313] ? handle_mm_fault+0xee/0x3310 [ 705.852635][T25313] ? __pfx_handle_mm_fault+0x10/0x10 [ 705.852667][T25313] ? follow_page_pte+0x841/0x1450 [ 705.852697][T25313] ? __pfx_follow_page_pte+0x10/0x10 [ 705.852730][T25313] __get_user_pages+0x165b/0x29d0 [ 705.852795][T25313] __gup_longterm_locked+0xdcf/0x1630 [ 705.852840][T25313] ? sanity_check_pinned_pages+0x1212/0x12d0 [ 705.852888][T25313] gup_fast_fallback+0x1d82/0x22e0 [ 705.852954][T25313] ? __pfx_gup_fast_fallback+0x10/0x10 [ 705.852988][T25313] ? is_valid_gup_args+0x11f/0x200 [ 705.853020][T25313] ? pin_user_pages_fast+0x4d/0xb0 [ 705.853053][T25313] rds_info_getsockopt+0x20e/0x4a0 [ 705.853090][T25313] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 705.853119][T25313] ? __might_fault+0xaf/0x130 [ 705.853143][T25313] ? rds_getsockopt+0x2b4/0x500 [ 705.853164][T25313] ? __pfx_rds_getsockopt+0x10/0x10 [ 705.853189][T25313] do_sock_getsockopt+0x2d3/0x3f0 [ 705.853219][T25313] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 705.853247][T25313] ? __fget_files+0x3a0/0x420 [ 705.853277][T25313] ? __fget_files+0x2a/0x420 [ 705.853315][T25313] __x64_sys_getsockopt+0x1a4/0x240 [ 705.853352][T25313] do_syscall_64+0x14d/0xf80 [ 705.853380][T25313] ? trace_irq_disable+0x3b/0x150 [ 705.853398][T25313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.853419][T25313] ? clear_bhb_loop+0x40/0x90 [ 705.853445][T25313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.853466][T25313] RIP: 0033:0x7f82d379c819 [ 705.853488][T25313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.853507][T25313] RSP: 002b:00007f82d46f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 705.853532][T25313] RAX: ffffffffffffffda RBX: 00007f82d3a15fa0 RCX: 00007f82d379c819 [ 705.853548][T25313] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000003 [ 705.853562][T25313] RBP: 00007f82d46f3090 R08: 0000200000000000 R09: 0000000000000000 [ 705.853576][T25313] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 705.853589][T25313] R13: 00007f82d3a16038 R14: 00007f82d3a15fa0 R15: 00007ffdc06665d8 [ 705.853625][T25313] [ 706.624148][T25137] hsr_slave_0: entered promiscuous mode [ 706.631799][T25325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5925'. [ 706.676205][T25137] hsr_slave_1: entered promiscuous mode [ 706.922784][T25322] bond6: option packets_per_slave: invalid value (1048582) [ 706.945259][T25322] bond6: option packets_per_slave: allowed values 0 - 65535 [ 706.981306][T25322] bond6 (unregistering): Released all slaves [ 707.066326][T25340] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5930'. [ 707.260411][ T6133] IPVS: stop unused estimator thread 0... [ 707.448478][T25358] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5932'. [ 707.476543][T25358] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5932'. [ 707.859072][T25387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5942'. [ 707.882107][T25138] Bluetooth: hci4: command tx timeout [ 707.890930][T25389] netlink: 'syz.4.5941': attribute type 9 has an invalid length. [ 707.971091][T25388] FAULT_INJECTION: forcing a failure. [ 707.971091][T25388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.032121][T25388] CPU: 1 UID: 0 PID: 25388 Comm: syz.1.5940 Not tainted syzkaller #0 PREEMPT(full) [ 708.032155][T25388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 708.032167][T25388] Call Trace: [ 708.032176][T25388] [ 708.032185][T25388] dump_stack_lvl+0xe8/0x150 [ 708.032222][T25388] should_fail_ex+0x412/0x560 [ 708.032258][T25388] _copy_from_iter+0x1d3/0x1670 [ 708.032295][T25388] ? rcu_is_watching+0x15/0xb0 [ 708.032331][T25388] ? __pfx__copy_from_iter+0x10/0x10 [ 708.032371][T25388] ? netlink_sendmsg+0x650/0xb40 [ 708.032394][T25388] ? skb_put+0x11b/0x210 [ 708.032422][T25388] netlink_sendmsg+0x6c0/0xb40 [ 708.032454][T25388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.032481][T25388] ? aa_sock_msg_perm+0xf1/0x1b0 [ 708.032512][T25388] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 708.032540][T25388] ____sys_sendmsg+0x972/0x9f0 [ 708.032566][T25388] ? __lock_acquire+0x6b5/0x2cf0 [ 708.032601][T25388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 708.032638][T25388] ? import_iovec+0x73/0xa0 [ 708.032664][T25388] ___sys_sendmsg+0x2a5/0x360 [ 708.032695][T25388] ? __pfx____sys_sendmsg+0x10/0x10 [ 708.032774][T25388] __sys_sendmmsg+0x27c/0x4e0 [ 708.032815][T25388] ? __pfx___sys_sendmmsg+0x10/0x10 [ 708.032840][T25388] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 708.032896][T25388] ? ksys_write+0x242/0x270 [ 708.032921][T25388] ? __pfx_ksys_write+0x10/0x10 [ 708.032950][T25388] __x64_sys_sendmmsg+0xa0/0xc0 [ 708.032978][T25388] do_syscall_64+0x14d/0xf80 [ 708.033005][T25388] ? trace_irq_disable+0x3b/0x150 [ 708.033023][T25388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.033045][T25388] ? clear_bhb_loop+0x40/0x90 [ 708.033069][T25388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.033096][T25388] RIP: 0033:0x7f617ad9c819 [ 708.033115][T25388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.033134][T25388] RSP: 002b:00007f617bc84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 708.033155][T25388] RAX: ffffffffffffffda RBX: 00007f617b016090 RCX: 00007f617ad9c819 [ 708.033171][T25388] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 708.033186][T25388] RBP: 00007f617bc84090 R08: 0000000000000000 R09: 0000000000000000 [ 708.033200][T25388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 708.033212][T25388] R13: 00007f617b016128 R14: 00007f617b016090 R15: 00007ffc9dae8e28 [ 708.033246][T25388] [ 708.052800][T25389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5941'. [ 708.851147][T25423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5952'. [ 709.126636][T25137] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 709.162050][T25137] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 709.291752][T25442] netlink: 'syz.4.5957': attribute type 9 has an invalid length. [ 709.439804][T25137] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 709.479374][T25137] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 709.618896][T25454] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5960'. [ 709.847221][T25471] tipc: Enabling of bearer rejected, already enabled [ 710.005183][T25475] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5965'. [ 710.086024][T25137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.142470][T25137] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.171400][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.178658][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.265451][T25487] FAULT_INJECTION: forcing a failure. [ 710.265451][T25487] name failslab, interval 1, probability 0, space 0, times 0 [ 710.291038][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.298282][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.310896][T25487] CPU: 0 UID: 0 PID: 25487 Comm: syz.0.5969 Not tainted syzkaller #0 PREEMPT(full) [ 710.310917][T25487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 710.310925][T25487] Call Trace: [ 710.310930][T25487] [ 710.310936][T25487] dump_stack_lvl+0xe8/0x150 [ 710.310960][T25487] should_fail_ex+0x412/0x560 [ 710.310982][T25487] should_failslab+0xa8/0x100 [ 710.311000][T25487] __kmalloc_cache_noprof+0x88/0x660 [ 710.311016][T25487] ? sctp_add_bind_addr+0x8c/0x370 [ 710.311037][T25487] sctp_add_bind_addr+0x8c/0x370 [ 710.311065][T25487] sctp_copy_local_addr_list+0x314/0x4f0 [ 710.311086][T25487] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 710.311103][T25487] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 710.311122][T25487] ? sctp_v6_is_any+0x64/0x80 [ 710.311140][T25487] ? sctp_copy_one_addr+0x93/0x360 [ 710.311160][T25487] sctp_bind_addr_copy+0xb3/0x3c0 [ 710.311177][T25487] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 710.311195][T25487] sctp_connect_new_asoc+0x2ff/0x6b0 [ 710.311211][T25487] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 710.311229][T25487] ? __local_bh_enable_ip+0xd0/0x130 [ 710.311244][T25487] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 710.311260][T25487] ? security_sctp_bind_connect+0x7e/0x2c0 [ 710.311277][T25487] sctp_sendmsg+0x1528/0x2c10 [ 710.311299][T25487] ? __pfx_sctp_sendmsg+0x10/0x10 [ 710.311314][T25487] ? aa_sk_perm+0x6d5/0x900 [ 710.311336][T25487] ? __pfx_aa_sk_perm+0x10/0x10 [ 710.311355][T25487] ? sock_rps_record_flow+0x19/0x350 [ 710.311371][T25487] ? __pfx_inet_sendmsg+0x10/0x10 [ 710.311386][T25487] ? inet_sendmsg+0x2f4/0x370 [ 710.311401][T25487] ? __pfx_inet_sendmsg+0x10/0x10 [ 710.311417][T25487] __sys_sendto+0x5de/0x710 [ 710.311434][T25487] ? __pfx___sys_sendto+0x10/0x10 [ 710.311446][T25487] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 710.311473][T25487] ? __fget_files+0x3a0/0x420 [ 710.311498][T25487] ? ksys_write+0x242/0x270 [ 710.311514][T25487] ? __pfx_ksys_write+0x10/0x10 [ 710.311531][T25487] __x64_sys_sendto+0xde/0x100 [ 710.311548][T25487] do_syscall_64+0x14d/0xf80 [ 710.311565][T25487] ? trace_irq_disable+0x3b/0x150 [ 710.311576][T25487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.311589][T25487] ? clear_bhb_loop+0x40/0x90 [ 710.311604][T25487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.311617][T25487] RIP: 0033:0x7effbf99c819 [ 710.311630][T25487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.311642][T25487] RSP: 002b:00007effc0795028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 710.311656][T25487] RAX: ffffffffffffffda RBX: 00007effbfc15fa0 RCX: 00007effbf99c819 [ 710.311666][T25487] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 710.311674][T25487] RBP: 00007effc0795090 R08: 0000200000000000 R09: 000000000000001c [ 710.311682][T25487] R10: 0000000000065055 R11: 0000000000000246 R12: 0000000000000001 [ 710.311689][T25487] R13: 00007effbfc16038 R14: 00007effbfc15fa0 R15: 00007ffeb2018c88 [ 710.311709][T25487] [ 710.698225][T25493] netlink: 'syz.1.5971': attribute type 9 has an invalid length. [ 710.783265][T25137] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 710.793889][T25137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 710.891348][T25504] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5974'. [ 710.926306][T25504] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5974'. [ 711.264239][T25526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 711.271511][T25526] IPv6: NLM_F_CREATE should be set when creating new route [ 711.278848][T25526] IPv6: NLM_F_CREATE should be set when creating new route [ 711.281519][T25137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.465715][T25531] syzkaller0: entered promiscuous mode [ 711.483453][T25531] syzkaller0: entered allmulticast mode [ 711.514344][T25137] veth0_vlan: entered promiscuous mode [ 711.565756][T25137] veth1_vlan: entered promiscuous mode [ 711.860608][T25137] veth0_macvtap: entered promiscuous mode [ 711.887324][T25137] veth1_macvtap: entered promiscuous mode [ 711.947067][T25137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.990338][T25137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.027287][ T3472] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.059269][T25556] netlink: 'syz.0.5985': attribute type 9 has an invalid length. [ 712.084222][ T3472] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.104064][ T3472] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.136302][ T3472] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.306497][T25566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5987'. [ 712.408194][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.410471][T25570] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5990'. [ 712.443838][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.521460][T25576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5991'. [ 712.531744][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.545109][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.717040][T25586] xt_hashlimit: size too large, truncated to 1048576 [ 712.789380][T25577] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 713.095161][T25597] lo speed is unknown, defaulting to 1000 [ 713.330725][T25602] FAULT_INJECTION: forcing a failure. [ 713.330725][T25602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.376003][T25602] CPU: 1 UID: 0 PID: 25602 Comm: syz.4.5995 Not tainted syzkaller #0 PREEMPT(full) [ 713.376033][T25602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 713.376046][T25602] Call Trace: [ 713.376055][T25602] [ 713.376063][T25602] dump_stack_lvl+0xe8/0x150 [ 713.376097][T25602] should_fail_ex+0x412/0x560 [ 713.376129][T25602] _copy_from_iter+0x1d3/0x1670 [ 713.376171][T25602] ? __pfx__copy_from_iter+0x10/0x10 [ 713.376197][T25602] ? sock_alloc_send_pskb+0x896/0x990 [ 713.376230][T25602] ? __pfx__copy_from_iter+0x10/0x10 [ 713.376261][T25602] ? page_copy_sane+0x16a/0x270 [ 713.376282][T25602] copy_page_from_iter+0xdd/0x170 [ 713.376305][T25602] skb_copy_datagram_from_iter+0x306/0x710 [ 713.376345][T25602] tun_get_user+0xc38/0x3dd0 [ 713.376380][T25602] ? aa_file_perm+0x192/0x15e0 [ 713.376404][T25602] ? aa_file_perm+0x50e/0x15e0 [ 713.376421][T25602] ? __pfx_tun_get_user+0x10/0x10 [ 713.376440][T25602] ? aa_file_perm+0x192/0x15e0 [ 713.376463][T25602] ? __lock_acquire+0x6b5/0x2cf0 [ 713.376500][T25602] ? ref_tracker_alloc+0x35c/0x4c0 [ 713.376530][T25602] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 713.376564][T25602] ? tun_get+0x1c/0x2f0 [ 713.376590][T25602] ? tun_get+0x1c/0x2f0 [ 713.376610][T25602] ? tun_get+0x1c/0x2f0 [ 713.376636][T25602] tun_chr_write_iter+0x113/0x200 [ 713.376659][T25602] vfs_write+0x61d/0xb90 [ 713.376701][T25602] ? __pfx_vfs_write+0x10/0x10 [ 713.376733][T25602] ? __fget_files+0x2a/0x420 [ 713.376771][T25602] ksys_write+0x150/0x270 [ 713.376795][T25602] ? __pfx_ksys_write+0x10/0x10 [ 713.376828][T25602] do_syscall_64+0x14d/0xf80 [ 713.376856][T25602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.376874][T25602] ? clear_bhb_loop+0x40/0x90 [ 713.376898][T25602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.376916][T25602] RIP: 0033:0x7f82d375d04e [ 713.376935][T25602] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 713.376953][T25602] RSP: 002b:00007f82d46f2fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 713.376975][T25602] RAX: ffffffffffffffda RBX: 00007f82d46f36c0 RCX: 00007f82d375d04e [ 713.376990][T25602] RDX: 0000000000011dc0 RSI: 00002000000009c0 RDI: 00000000000000c8 [ 713.377002][T25602] RBP: 00007f82d46f3090 R08: 0000000000000000 R09: 0000000000000000 [ 713.377015][T25602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.377032][T25602] R13: 00007f82d3a16038 R14: 00007f82d3a15fa0 R15: 00007ffdc06665d8 [ 713.377064][T25602] [ 713.759313][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 713.776830][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 713.787864][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 713.798699][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 713.807687][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 714.021414][T25605] lo speed is unknown, defaulting to 1000 [ 714.425110][T25626] netlink: 'syz.0.5998': attribute type 9 has an invalid length. [ 715.091706][T25605] chnl_net:caif_netlink_parms(): no params data found [ 715.148783][ T1099] bridge_slave_1: left promiscuous mode [ 715.170270][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.443503][ T1099] bond2 (unregistering): (slave gretap1): Releasing active interface [ 715.598523][T25666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6005'. [ 715.700059][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.712488][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.724283][ T1099] bond0 (unregistering): Released all slaves [ 715.740933][ T1099] bond1 (unregistering): Released all slaves [ 715.764942][ T1099] bond2 (unregistering): Released all slaves [ 715.790009][ T1099] bond3 (unregistering): Released all slaves [ 715.860593][T25668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 715.872431][ T5846] Bluetooth: hci5: command tx timeout [ 716.068647][ T1099] úÁàél24): left promiscuous mode [ 716.161190][T25676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6012'. [ 716.191418][T25676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6012'. [ 716.213834][ T1099] tipc: Disabling bearer [ 716.225604][ T1099] tipc: Left network mode [ 716.585310][T25680] lo speed is unknown, defaulting to 1000 [ 716.588859][T25605] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.621802][T25605] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.629239][T25605] bridge_slave_0: entered allmulticast mode [ 716.643333][T25605] bridge_slave_0: entered promiscuous mode [ 716.662227][T25605] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.670159][T25605] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.678113][T25605] bridge_slave_1: entered allmulticast mode [ 716.686340][T25605] bridge_slave_1: entered promiscuous mode [ 717.001248][T25605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.105556][T25605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.224131][ T1099] hsr_slave_0: left promiscuous mode [ 717.241416][ T1099] hsr_slave_1: left promiscuous mode [ 717.617612][T25605] team0: Port device team_slave_0 added [ 717.627442][T25605] team0: Port device team_slave_1 added [ 717.757114][T25605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.788169][T25605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.816538][T25605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.858676][T25605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.901949][T25605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.947583][T25605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.958075][ T5846] Bluetooth: hci5: command tx timeout [ 718.131816][T25736] netlink: 'syz.0.6025': attribute type 1 has an invalid length. [ 718.180174][T25605] hsr_slave_0: entered promiscuous mode [ 718.197399][T25742] FAULT_INJECTION: forcing a failure. [ 718.197399][T25742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.223881][T25605] hsr_slave_1: entered promiscuous mode [ 718.230439][T25605] debugfs: 'hsr0' already exists in 'hsr' [ 718.240669][T25742] CPU: 0 UID: 0 PID: 25742 Comm: syz.3.6026 Not tainted syzkaller #0 PREEMPT(full) [ 718.240699][T25742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 718.240712][T25742] Call Trace: [ 718.240720][T25742] [ 718.240729][T25742] dump_stack_lvl+0xe8/0x150 [ 718.240776][T25742] should_fail_ex+0x412/0x560 [ 718.240810][T25742] _copy_from_user+0x2d/0xb0 [ 718.240834][T25742] bpf_test_init+0xd8/0x150 [ 718.240858][T25742] bpf_prog_test_run_xdp+0x529/0x1160 [ 718.240896][T25742] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 718.240925][T25742] ? __fget_files+0x2a/0x420 [ 718.240962][T25742] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 718.240985][T25742] bpf_prog_test_run+0x2c7/0x340 [ 718.241011][T25742] __sys_bpf+0x643/0x950 [ 718.241033][T25742] ? __pfx___sys_bpf+0x10/0x10 [ 718.241067][T25742] ? ksys_write+0x242/0x270 [ 718.241091][T25742] ? __pfx_ksys_write+0x10/0x10 [ 718.241123][T25742] __x64_sys_bpf+0x7c/0x90 [ 718.241153][T25742] do_syscall_64+0x14d/0xf80 [ 718.241181][T25742] ? trace_irq_disable+0x3b/0x150 [ 718.241198][T25742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.241219][T25742] ? clear_bhb_loop+0x40/0x90 [ 718.241245][T25742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.241265][T25742] RIP: 0033:0x7fa57759c819 [ 718.241287][T25742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.241305][T25742] RSP: 002b:00007fa5783e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 718.241328][T25742] RAX: ffffffffffffffda RBX: 00007fa577815fa0 RCX: 00007fa57759c819 [ 718.241342][T25742] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 718.241355][T25742] RBP: 00007fa5783e5090 R08: 0000000000000000 R09: 0000000000000000 [ 718.241368][T25742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.241380][T25742] R13: 00007fa577816038 R14: 00007fa577815fa0 R15: 00007ffd765ee278 [ 718.241412][T25742] [ 718.440847][T25605] Cannot create hsr debugfs directory [ 718.533935][ T1099] IPVS: stop unused estimator thread 0... [ 718.816786][T25756] tunl0: entered allmulticast mode [ 718.835074][T25756] gre0: entered allmulticast mode [ 718.851702][T25756] gretap0: entered allmulticast mode [ 718.862000][T25756] erspan0: entered allmulticast mode [ 718.878584][T25756] ip_vti0: entered allmulticast mode [ 718.892876][T25756] ip6_vti0: entered allmulticast mode [ 718.906852][T25756] sit0: entered allmulticast mode [ 718.917428][T25756] ip6tnl0: entered allmulticast mode [ 718.924187][T25756] ip6gre0: entered allmulticast mode [ 718.929837][T25756] syz_tun: entered allmulticast mode [ 718.937323][T25756] ip6gretap0: entered allmulticast mode [ 718.943797][T25756] bridge0: entered allmulticast mode [ 718.949397][T25756] bond0: entered allmulticast mode [ 718.967080][T25756] bond_slave_0: entered allmulticast mode [ 718.974457][T25756] bond_slave_1: entered allmulticast mode [ 718.980675][T25756] team0: entered allmulticast mode [ 718.986809][T25756] team_slave_1: entered allmulticast mode [ 718.995427][T25756] dummy0: entered allmulticast mode [ 719.000992][T25756] nlmon0: entered allmulticast mode [ 719.010378][T25756] caif0: entered allmulticast mode [ 719.015981][T25756] batadv0: entered allmulticast mode [ 719.021624][T25756] vxcan0: entered allmulticast mode [ 719.030616][T25756] vxcan1: entered allmulticast mode [ 719.039171][T25756] veth0: entered allmulticast mode [ 719.046174][T25756] veth1: left promiscuous mode [ 719.051350][T25756] wg0: entered allmulticast mode [ 719.056684][T25756] wg1: entered allmulticast mode [ 719.062652][T25756] wg2: entered allmulticast mode [ 719.067881][T25756] veth0_to_bridge: entered allmulticast mode [ 719.075214][T25756] veth1_to_bridge: entered allmulticast mode [ 719.081796][T25756] veth0_to_bond: entered allmulticast mode [ 719.089810][T25756] veth1_to_bond: entered allmulticast mode [ 719.116786][T25756] veth1_to_team: entered allmulticast mode [ 719.123773][T25756] veth0_to_batadv: entered allmulticast mode [ 719.138648][T25756] batadv_slave_0: entered allmulticast mode [ 719.162186][T25756] veth1_to_batadv: entered allmulticast mode [ 719.168714][T25756] batadv_slave_1: entered allmulticast mode [ 719.196645][T25756] xfrm0: entered allmulticast mode [ 719.212694][T25756] veth0_to_hsr: entered allmulticast mode [ 719.218686][T25756] hsr_slave_0: entered allmulticast mode [ 719.241545][T25756] veth1_to_hsr: entered allmulticast mode [ 719.264207][T25756] hsr_slave_1: entered allmulticast mode [ 719.270109][T25756] hsr0: entered allmulticast mode [ 719.288175][T25756] veth1_virt_wifi: entered allmulticast mode [ 719.316212][T25756] veth0_virt_wifi: entered allmulticast mode [ 719.323484][T25756] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 719.338326][T25756] veth1_macvtap: entered allmulticast mode [ 719.344966][T25756] veth0_macvtap: entered allmulticast mode [ 719.351110][T25756] macvtap0: entered allmulticast mode [ 719.357329][T25756] macsec0: entered allmulticast mode [ 719.363934][T25756] geneve0: entered allmulticast mode [ 719.369498][T25756] geneve1: entered allmulticast mode [ 719.375606][T25756] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 719.383636][T25756] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 719.391393][T25756] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 719.401597][T25756] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 719.409477][T25756] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode [ 719.417143][T25756] gretap1: left promiscuous mode [ 719.423008][T25756] gretap1: entered allmulticast mode [ 719.428939][T25756] bond1: entered allmulticast mode [ 719.435499][T25756] macsec1: entered allmulticast mode [ 719.441130][T25756] syztnl0: entered allmulticast mode [ 719.447168][T25756] veth2: entered allmulticast mode [ 719.453308][T25756] veth3: entered allmulticast mode [ 719.458835][T25756] veth4: entered allmulticast mode [ 719.464327][T25756] veth5: entered allmulticast mode [ 719.469728][T25756] vlan0: entered allmulticast mode [ 719.475511][T25756] ip6gre1: entered allmulticast mode [ 719.481399][T25756] mac80211_hwsim hwsim51 wlan2: entered allmulticast mode [ 719.489437][T25756] bond2: entered allmulticast mode [ 719.494998][T25756] sit1: entered allmulticast mode [ 719.500617][T25756] bond3: entered allmulticast mode [ 719.506753][T25756] bridge1: entered allmulticast mode [ 719.513487][T25756] bridge2: entered allmulticast mode [ 719.520776][T25756] ip6tnl1: entered allmulticast mode [ 719.527389][T25756] gtp0: entered allmulticast mode [ 719.535966][T25756] bond4: entered allmulticast mode [ 719.541454][T25756] veth6: entered allmulticast mode [ 719.547617][T25756] veth7: entered allmulticast mode [ 719.554507][T25756] veth8: entered allmulticast mode [ 719.560126][T25756] veth9: entered allmulticast mode [ 719.569177][T25756] macsec2: entered allmulticast mode [ 719.577498][T25756] bond5: entered allmulticast mode [ 719.584112][T25756] gretap2: entered allmulticast mode [ 719.591535][T25756] syzkaller0: left promiscuous mode [ 719.597108][T25756] syzkaller0: entered allmulticast mode [ 719.604560][T25756] syzkaller0.1: entered allmulticast mode [ 719.610461][T25756] mac80211_hwsim hwsim59 wlan3: entered allmulticast mode [ 719.618463][T25756] mac80211_hwsim hwsim64 wlan4: entered allmulticast mode [ 719.749316][T25762] tipc: Started in network mode [ 719.754468][T25762] tipc: Node identity 9a1e94a68804, cluster identity 4711 [ 719.761899][T25762] tipc: Enabled bearer , priority 0 [ 719.773363][T25767] syzkaller0: entered promiscuous mode [ 719.778878][T25767] syzkaller0: entered allmulticast mode [ 720.032356][ T5846] Bluetooth: hci5: command tx timeout [ 720.165975][T25776] tipc: Resetting bearer [ 720.230853][T25776] tipc: Disabling bearer [ 720.432103][T25794] IPVS: set_ctl: invalid protocol: 3 0.0.0.0:1280 [ 720.496168][T25801] netlink: 'syz.4.6036': attribute type 8 has an invalid length. [ 720.526422][T25801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6036'. [ 720.552292][T25804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6035'. [ 720.670853][T25809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6038'. [ 720.720876][T25605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 720.752979][T25809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6038'. [ 720.774255][T25605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 720.798016][T25809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6038'. [ 720.798540][T25605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 720.811927][T25809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6038'. [ 720.857133][T25809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6038'. [ 720.888835][T25605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 720.907050][T25809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6038'. [ 720.943160][T25809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6038'. [ 720.953475][T25809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6038'. [ 720.998820][T25809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6038'. [ 721.011486][T25809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6038'. [ 721.067698][T25828] macvlan0: entered allmulticast mode [ 721.076655][T25828] bridge0: port 3(macvlan0) entered blocking state [ 721.086631][T25828] bridge0: port 3(macvlan0) entered disabled state [ 721.358738][T25842] netlink: 'syz.4.6043': attribute type 1 has an invalid length. [ 721.437344][T25842] bond6: entered promiscuous mode [ 721.475035][T25842] bond6: entered allmulticast mode [ 721.514369][T25842] 8021q: adding VLAN 0 to HW filter on device bond6 [ 721.588544][T25845] erspan1: entered allmulticast mode [ 721.617355][T25845] bond6: (slave erspan1): making interface the new active one [ 721.651774][T25845] erspan1: entered promiscuous mode [ 721.675107][T25845] bond6: (slave erspan1): Enslaving as an active interface with an up link [ 721.708054][T25852] bond0: Unable to set down delay as MII monitoring is disabled [ 721.775031][T25605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.839211][T25605] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.907000][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.914267][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.925953][T25863] delete_channel: no stack [ 721.950811][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.958177][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.114339][ T5846] Bluetooth: hci5: command tx timeout [ 722.725476][T25605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.964965][T25605] veth0_vlan: entered promiscuous mode [ 722.991490][T25605] veth1_vlan: entered promiscuous mode [ 723.061557][T25605] veth0_macvtap: entered promiscuous mode [ 723.094255][T25605] veth1_macvtap: entered promiscuous mode [ 723.105459][T25912] delete_channel: no stack [ 723.167092][T25605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.207971][T25605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.336558][ T1099] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.362079][ T1099] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.371027][ T1099] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.446268][T25925] bridge_slave_0 (unregistering): left promiscuous mode [ 723.467168][T25925] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.491749][ T1099] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.628977][T25925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.647842][T25925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.745784][ T6133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.797846][ T6133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.838899][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.852503][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.000529][T25938] netlink: 'syz.4.6067': attribute type 22 has an invalid length. [ 724.062693][T25938] netlink: 'syz.4.6067': attribute type 1 has an invalid length. [ 724.382863][T25138] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 724.396043][T25138] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 724.404829][T25138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 724.426862][T25138] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 724.438781][T25138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 724.477669][T25953] delete_channel: no stack [ 724.643524][T25950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.666459][T25950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.768225][T25950] erspan0: left allmulticast mode [ 724.809852][T25955] geneve0: entered promiscuous mode [ 724.833576][T25955] geneve0: entered allmulticast mode [ 724.857311][ T6133] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.867189][ T6133] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.920141][ T6133] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.932115][ T6133] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.179071][T25977] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 725.318856][T25954] lo speed is unknown, defaulting to 1000 [ 725.400112][T25981] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 725.421753][T25981] bond2 (unregistering): Released all slaves [ 725.564235][T25981] xt_TCPMSS: Only works on TCP SYN packets [ 725.675715][T25994] __nla_validate_parse: 126 callbacks suppressed [ 725.675737][T25994] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6081'. [ 725.725547][T25996] delete_channel: no stack [ 725.887703][T26008] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6084'. [ 725.926668][T26008] netlink: 'syz.0.6084': attribute type 11 has an invalid length. [ 725.997525][T26011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6086'. [ 726.007132][T26011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6086'. [ 726.185535][T25954] chnl_net:caif_netlink_parms(): no params data found [ 726.185789][T26017] FAULT_INJECTION: forcing a failure. [ 726.185789][T26017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.214688][T26017] CPU: 0 UID: 0 PID: 26017 Comm: syz.1.6089 Not tainted syzkaller #0 PREEMPT(full) [ 726.214717][T26017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 726.214730][T26017] Call Trace: [ 726.214738][T26017] [ 726.214747][T26017] dump_stack_lvl+0xe8/0x150 [ 726.214780][T26017] should_fail_ex+0x412/0x560 [ 726.214814][T26017] _copy_from_iter+0x1d3/0x1670 [ 726.214850][T26017] ? rcu_is_watching+0x15/0xb0 [ 726.214885][T26017] ? __pfx__copy_from_iter+0x10/0x10 [ 726.214925][T26017] ? netlink_sendmsg+0x650/0xb40 [ 726.214947][T26017] ? skb_put+0x11b/0x210 [ 726.214975][T26017] netlink_sendmsg+0x6c0/0xb40 [ 726.215006][T26017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.215033][T26017] ? aa_sock_msg_perm+0xf1/0x1b0 [ 726.215065][T26017] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 726.215092][T26017] ____sys_sendmsg+0x972/0x9f0 [ 726.215129][T26017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 726.215165][T26017] ? import_iovec+0x73/0xa0 [ 726.215192][T26017] ___sys_sendmsg+0x2a5/0x360 [ 726.215224][T26017] ? __pfx____sys_sendmsg+0x10/0x10 [ 726.215282][T26017] ? __fget_files+0x2a/0x420 [ 726.215312][T26017] ? __fget_files+0x3a0/0x420 [ 726.215352][T26017] __x64_sys_sendmsg+0x1bd/0x2a0 [ 726.215380][T26017] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 726.215416][T26017] ? __pfx_ksys_write+0x10/0x10 [ 726.215451][T26017] do_syscall_64+0x14d/0xf80 [ 726.215479][T26017] ? trace_irq_disable+0x3b/0x150 [ 726.215499][T26017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.215520][T26017] ? clear_bhb_loop+0x40/0x90 [ 726.215544][T26017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.215562][T26017] RIP: 0033:0x7f617ad9c819 [ 726.215582][T26017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.215599][T26017] RSP: 002b:00007f617bca5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.215623][T26017] RAX: ffffffffffffffda RBX: 00007f617b015fa0 RCX: 00007f617ad9c819 [ 726.215649][T26017] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000004 [ 726.215662][T26017] RBP: 00007f617bca5090 R08: 0000000000000000 R09: 0000000000000000 [ 726.215675][T26017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.215687][T26017] R13: 00007f617b016038 R14: 00007f617b015fa0 R15: 00007ffc9dae8e28 [ 726.215719][T26017] [ 726.221385][ T1099] bridge_slave_1: left promiscuous mode [ 726.355819][T26023] FAULT_INJECTION: forcing a failure. [ 726.355819][T26023] name failslab, interval 1, probability 0, space 0, times 0 [ 726.357154][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.361350][T26023] CPU: 1 UID: 0 PID: 26023 Comm: syz.1.6091 Not tainted syzkaller #0 PREEMPT(full) [ 726.361374][T26023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 726.361386][T26023] Call Trace: [ 726.361394][T26023] [ 726.361403][T26023] dump_stack_lvl+0xe8/0x150 [ 726.361435][T26023] should_fail_ex+0x412/0x560 [ 726.361468][T26023] should_failslab+0xa8/0x100 [ 726.361492][T26023] ? security_inode_alloc+0x39/0x310 [ 726.361512][T26023] kmem_cache_alloc_noprof+0x87/0x650 [ 726.361541][T26023] security_inode_alloc+0x39/0x310 [ 726.361562][T26023] inode_init_always_gfp+0x9ed/0xdc0 [ 726.361594][T26023] ? __pfx_sock_alloc_inode+0x10/0x10 [ 726.361612][T26023] alloc_inode+0x82/0x1b0 [ 726.361638][T26023] __sock_create+0x12d/0x9d0 [ 726.361657][T26023] ? __lock_acquire+0x6b5/0x2cf0 [ 726.361690][T26023] mptcp_subflow_create_socket+0xfb/0x800 [ 726.361717][T26023] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 726.361736][T26023] ? lruvec_stat_mod_folio+0x70/0x4b0 [ 726.361766][T26023] ? do_raw_spin_lock+0x12b/0x2f0 [ 726.361789][T26023] __mptcp_nmpc_sk+0x155/0x790 [ 726.361812][T26023] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 726.361835][T26023] ? mptcp_getsockopt+0x1030/0x1ed0 [ 726.361859][T26023] ? __local_bh_enable_ip+0xd0/0x130 [ 726.361889][T26023] mptcp_getsockopt+0x106e/0x1ed0 [ 726.361908][T26023] ? xas_find+0x842/0x990 [ 726.361942][T26023] ? 0xffffffff81000000 [ 726.361966][T26023] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 726.361987][T26023] ? filemap_map_pages+0x185/0x2050 [ 726.362015][T26023] ? filemap_map_pages+0x1bbe/0x2050 [ 726.362042][T26023] ? __lock_acquire+0x6b5/0x2cf0 [ 726.362072][T26023] ? __lock_acquire+0x6b5/0x2cf0 [ 726.362100][T26023] ? __lock_acquire+0x6b5/0x2cf0 [ 726.362126][T26023] ? __pfx_filemap_map_pages+0x10/0x10 [ 726.362147][T26023] ? css_rstat_updated+0x23a/0x530 [ 726.362170][T26023] ? __pfx_css_rstat_updated+0x10/0x10 [ 726.362194][T26023] ? do_pte_missing+0x130a/0x3490 [ 726.362220][T26023] ? count_memcg_event_mm+0x21/0x260 [ 726.362254][T26023] ? count_memcg_event_mm+0x21/0x260 [ 726.362280][T26023] ? count_memcg_event_mm+0x21/0x260 [ 726.362311][T26023] ? handle_mm_fault+0x2d13/0x3310 [ 726.362352][T26023] ? handle_mm_fault+0xee/0x3310 [ 726.362387][T26023] ? __pfx_handle_mm_fault+0x10/0x10 [ 726.362419][T26023] ? __up_read+0x291/0x6b0 [ 726.362443][T26023] ? __pfx___up_read+0x10/0x10 [ 726.362464][T26023] ? do_user_addr_fault+0xbad/0x1340 [ 726.362494][T26023] ? do_user_addr_fault+0xc6f/0x1340 [ 726.362523][T26023] ? irqentry_exit+0x59e/0x620 [ 726.362549][T26023] ? lockdep_hardirqs_on+0x7a/0x110 [ 726.362574][T26023] ? irqentry_exit+0x59e/0x620 [ 726.362598][T26023] ? trace_irq_disable+0x3b/0x150 [ 726.362634][T26023] ? rep_movs_alternative+0xf/0x90 [ 726.362653][T26023] ? sock_common_getsockopt+0x2d/0xb0 [ 726.362672][T26023] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 726.362693][T26023] do_sock_getsockopt+0x2d3/0x3f0 [ 726.362717][T26023] ? 0xffffffff81000000 [ 726.362733][T26023] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 726.362758][T26023] ? __fget_files+0x3a0/0x420 [ 726.362784][T26023] ? __fget_files+0x2a/0x420 [ 726.362817][T26023] __x64_sys_getsockopt+0x1a4/0x240 [ 726.362842][T26023] ? 0xffffffff81000000 [ 726.362864][T26023] do_syscall_64+0x14d/0xf80 [ 726.362889][T26023] ? trace_irq_disable+0x3b/0x150 [ 726.362904][T26023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.362931][T26023] ? clear_bhb_loop+0x40/0x90 [ 726.362954][T26023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.362973][T26023] RIP: 0033:0x7f617ad9c819 [ 726.362990][T26023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.363007][T26023] RSP: 002b:00007f617bca5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 726.363028][T26023] RAX: ffffffffffffffda RBX: 00007f617b015fa0 RCX: 00007f617ad9c819 [ 726.363042][T26023] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000004 [ 726.363053][T26023] RBP: 00007f617bca5090 R08: 0000200000000000 R09: 0000000000000000 [ 726.363066][T26023] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.363078][T26023] R13: 00007f617b016038 R14: 00007f617b015fa0 R15: 00007ffc9dae8e28 [ 726.363096][T26023] ? 0xffffffff81000000 [ 726.363123][T26023] [ 726.371782][T26023] socket: no more sockets [ 726.562958][ T5846] Bluetooth: hci1: command tx timeout [ 726.998671][T26030] delete_channel: no stack [ 727.202967][ T1099] bond6 (unregistering): (slave erspan1): Releasing active interface [ 727.203450][T26037] netlink: 'syz.3.6095': attribute type 30 has an invalid length. [ 727.211290][ T1099] erspan1 (unregistering): left promiscuous mode [ 727.532152][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.543858][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.555540][ T1099] bond0 (unregistering): Released all slaves [ 727.566849][ T1099] bond1 (unregistering): Released all slaves [ 727.580585][ T1099] bond2 (unregistering): Released all slaves [ 727.594636][ T1099] bond3 (unregistering): Released all slaves [ 727.610154][ T1099] bond4 (unregistering): (slave veth7): Releasing active interface [ 727.619768][ T1099] bond4 (unregistering): (slave veth9): Releasing active interface [ 727.633184][ T1099] bond4 (unregistering): Released all slaves [ 727.649279][ T1099] bond5 (unregistering): Released all slaves [ 727.663820][ T1099] bond6 (unregistering): Released all slaves [ 727.881553][ T1099] tipc: Disabling bearer [ 727.908212][ T1099] tipc: Left network mode [ 728.455066][T25954] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.462759][T25954] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.470107][T25954] bridge_slave_0: entered allmulticast mode [ 728.479336][T25954] bridge_slave_0: entered promiscuous mode [ 728.488669][T25954] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.509455][T25954] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.531459][T25954] bridge_slave_1: entered allmulticast mode [ 728.549233][T25954] bridge_slave_1: entered promiscuous mode [ 728.765429][T25954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.772049][T26079] delete_channel: no stack [ 728.848843][T25954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.005984][ T5846] Bluetooth: hci1: command tx timeout [ 729.084043][T25954] team0: Port device team_slave_0 added [ 729.132795][T25954] team0: Port device team_slave_1 added [ 729.168546][T26090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6107'. [ 729.264270][T25954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.286608][T25954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.315722][T25954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.328529][T25954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.338148][T25954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.368334][T25954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.488620][ T1099] hsr_slave_0: left promiscuous mode [ 729.499210][ T1099] hsr_slave_1: left promiscuous mode [ 729.524291][T26106] FAULT_INJECTION: forcing a failure. [ 729.524291][T26106] name failslab, interval 1, probability 0, space 0, times 0 [ 729.538271][T26106] CPU: 0 UID: 0 PID: 26106 Comm: syz.2.6113 Not tainted syzkaller #0 PREEMPT(full) [ 729.538303][T26106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 729.538321][T26106] Call Trace: [ 729.538331][T26106] [ 729.538340][T26106] dump_stack_lvl+0xe8/0x150 [ 729.538373][T26106] should_fail_ex+0x412/0x560 [ 729.538408][T26106] should_failslab+0xa8/0x100 [ 729.538437][T26106] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 729.538460][T26106] ? __alloc_skb+0x186/0x7d0 [ 729.538482][T26106] ? __alloc_skb+0x1d0/0x7d0 [ 729.538502][T26106] ? __local_bh_enable_ip+0xd0/0x130 [ 729.538544][T26106] __alloc_skb+0x1d0/0x7d0 [ 729.538573][T26106] netlink_sendmsg+0x5d4/0xb40 [ 729.538607][T26106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 729.538633][T26106] ? aa_sock_msg_perm+0xf1/0x1b0 [ 729.538665][T26106] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 729.538694][T26106] ____sys_sendmsg+0x972/0x9f0 [ 729.538731][T26106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 729.538767][T26106] ? import_iovec+0x73/0xa0 [ 729.538794][T26106] ___sys_sendmsg+0x2a5/0x360 [ 729.538826][T26106] ? __pfx____sys_sendmsg+0x10/0x10 [ 729.538888][T26106] ? __fget_files+0x2a/0x420 [ 729.538917][T26106] ? __fget_files+0x3a0/0x420 [ 729.538957][T26106] __x64_sys_sendmsg+0x1bd/0x2a0 [ 729.538987][T26106] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 729.539023][T26106] ? __pfx_ksys_write+0x10/0x10 [ 729.539060][T26106] do_syscall_64+0x14d/0xf80 [ 729.539089][T26106] ? trace_irq_disable+0x3b/0x150 [ 729.539107][T26106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.539128][T26106] ? clear_bhb_loop+0x40/0x90 [ 729.539154][T26106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.539174][T26106] RIP: 0033:0x7f32c859c819 [ 729.539195][T26106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.539213][T26106] RSP: 002b:00007f32c948a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.539238][T26106] RAX: ffffffffffffffda RBX: 00007f32c8815fa0 RCX: 00007f32c859c819 [ 729.539253][T26106] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000007 [ 729.539267][T26106] RBP: 00007f32c948a090 R08: 0000000000000000 R09: 0000000000000000 [ 729.539281][T26106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.539294][T26106] R13: 00007f32c8816038 R14: 00007f32c8815fa0 R15: 00007ffe8ba7f3c8 [ 729.539326][T26106] [ 730.015511][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 730.207840][T25954] hsr_slave_0: entered promiscuous mode [ 730.215623][T25954] hsr_slave_1: entered promiscuous mode [ 730.226125][T25954] debugfs: 'hsr0' already exists in 'hsr' [ 730.232319][T25954] Cannot create hsr debugfs directory [ 730.241256][T26103] lo speed is unknown, defaulting to 1000 [ 730.431068][T26120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6117'. [ 730.604261][T26117] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.612158][T26117] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.828236][T26117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.847277][T26117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.082711][ T5846] Bluetooth: hci1: command tx timeout [ 731.120056][T26127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6118'. [ 731.130055][T26127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6118'. [ 731.149077][T26130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6118'. [ 731.158888][T26130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6118'. [ 731.169319][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.188590][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.250209][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.263156][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.373511][ T1099] IPVS: stop unused estimator thread 0... [ 731.756302][T26155] FAULT_INJECTION: forcing a failure. [ 731.756302][T26155] name failslab, interval 1, probability 0, space 0, times 0 [ 731.778467][T26155] CPU: 1 UID: 0 PID: 26155 Comm: syz.0.6121 Not tainted syzkaller #0 PREEMPT(full) [ 731.778498][T26155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 731.778511][T26155] Call Trace: [ 731.778520][T26155] [ 731.778529][T26155] dump_stack_lvl+0xe8/0x150 [ 731.778566][T26155] should_fail_ex+0x412/0x560 [ 731.778601][T26155] should_failslab+0xa8/0x100 [ 731.778642][T26155] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 731.778666][T26155] ? __alloc_skb+0x186/0x7d0 [ 731.778690][T26155] ? __alloc_skb+0x1d0/0x7d0 [ 731.778711][T26155] ? __local_bh_enable_ip+0xd0/0x130 [ 731.778743][T26155] __alloc_skb+0x1d0/0x7d0 [ 731.778772][T26155] netlink_sendmsg+0x5d4/0xb40 [ 731.778806][T26155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.778831][T26155] ? aa_sock_msg_perm+0xf1/0x1b0 [ 731.778862][T26155] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 731.778888][T26155] ____sys_sendmsg+0x972/0x9f0 [ 731.778923][T26155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 731.778959][T26155] ? import_iovec+0x73/0xa0 [ 731.778985][T26155] ___sys_sendmsg+0x2a5/0x360 [ 731.779017][T26155] ? __pfx____sys_sendmsg+0x10/0x10 [ 731.779078][T26155] ? __fget_files+0x2a/0x420 [ 731.779107][T26155] ? __fget_files+0x3a0/0x420 [ 731.779147][T26155] __x64_sys_sendmsg+0x1bd/0x2a0 [ 731.779176][T26155] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 731.779212][T26155] ? __pfx_ksys_write+0x10/0x10 [ 731.779246][T26155] do_syscall_64+0x14d/0xf80 [ 731.779275][T26155] ? trace_irq_disable+0x3b/0x150 [ 731.779294][T26155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.779315][T26155] ? clear_bhb_loop+0x40/0x90 [ 731.779340][T26155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.779360][T26155] RIP: 0033:0x7effbf99c819 [ 731.779380][T26155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.779399][T26155] RSP: 002b:00007effc0795028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.779422][T26155] RAX: ffffffffffffffda RBX: 00007effbfc15fa0 RCX: 00007effbf99c819 [ 731.779437][T26155] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 731.779450][T26155] RBP: 00007effc0795090 R08: 0000000000000000 R09: 0000000000000000 [ 731.779464][T26155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.779477][T26155] R13: 00007effbfc16038 R14: 00007effbfc15fa0 R15: 00007ffeb2018c88 [ 731.779516][T26155] [ 732.473953][T25954] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 732.521494][T26178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6128'. [ 732.528855][T25954] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 732.557848][T25954] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 732.603177][T25954] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 732.734706][T26193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6129'. [ 732.969989][T25954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.018291][T26203] team0: Device vlan2 is already an upper device of the team interface [ 733.047078][T26204] netlink: 'syz.1.6133': attribute type 10 has an invalid length. [ 733.069681][T26204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.105693][T26204] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 733.153400][ T5846] Bluetooth: hci1: command tx timeout [ 733.155467][T25954] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.233605][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.240854][ T6133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.307878][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.315135][ T6133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.999750][T25954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.594027][T26263] team0: Device vlan2 is already an upper device of the team interface [ 734.640167][T25954] veth0_vlan: entered promiscuous mode [ 734.685783][T25954] veth1_vlan: entered promiscuous mode [ 734.764235][T25954] veth0_macvtap: entered promiscuous mode [ 734.781378][T25954] veth1_macvtap: entered promiscuous mode [ 734.844994][T25954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.900916][T25954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.954704][ T6133] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.977347][ T6133] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.002949][ T6133] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.062945][ T6133] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.290641][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.317519][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.426190][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.446956][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.547685][T26298] ip6gre2: entered promiscuous mode [ 735.944564][T26313] FAULT_INJECTION: forcing a failure. [ 735.944564][T26313] name failslab, interval 1, probability 0, space 0, times 0 [ 735.982086][T26313] CPU: 1 UID: 0 PID: 26313 Comm: syz.4.6156 Not tainted syzkaller #0 PREEMPT(full) [ 735.982116][T26313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 735.982129][T26313] Call Trace: [ 735.982138][T26313] [ 735.982147][T26313] dump_stack_lvl+0xe8/0x150 [ 735.982194][T26313] should_fail_ex+0x412/0x560 [ 735.982227][T26313] should_failslab+0xa8/0x100 [ 735.982253][T26313] ? skb_clone+0x212/0x3a0 [ 735.982280][T26313] kmem_cache_alloc_noprof+0x87/0x650 [ 735.982300][T26313] ? __netlink_lookup+0xc6/0x8b0 [ 735.982328][T26313] skb_clone+0x212/0x3a0 [ 735.982358][T26313] __netlink_deliver_tap+0x404/0x850 [ 735.982394][T26313] ? netlink_deliver_tap+0x2e/0x1b0 [ 735.982418][T26313] netlink_deliver_tap+0x19c/0x1b0 [ 735.982442][T26313] netlink_unicast+0x7e3/0x9b0 [ 735.982483][T26313] ? __pfx_netlink_unicast+0x10/0x10 [ 735.982517][T26313] ? netlink_sendmsg+0x650/0xb40 [ 735.982538][T26313] ? skb_put+0x11b/0x210 [ 735.982564][T26313] netlink_sendmsg+0x813/0xb40 [ 735.982598][T26313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.982625][T26313] ? aa_sock_msg_perm+0xf1/0x1b0 [ 735.982658][T26313] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 735.982686][T26313] ____sys_sendmsg+0x972/0x9f0 [ 735.982724][T26313] ? __pfx_____sys_sendmsg+0x10/0x10 [ 735.982761][T26313] ? import_iovec+0x73/0xa0 [ 735.982789][T26313] ___sys_sendmsg+0x2a5/0x360 [ 735.982832][T26313] ? __pfx____sys_sendmsg+0x10/0x10 [ 735.982894][T26313] ? __fget_files+0x2a/0x420 [ 735.982925][T26313] ? __fget_files+0x3a0/0x420 [ 735.982966][T26313] __x64_sys_sendmsg+0x1bd/0x2a0 [ 735.982997][T26313] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 735.983035][T26313] ? __pfx_ksys_write+0x10/0x10 [ 735.983077][T26313] do_syscall_64+0x14d/0xf80 [ 735.983106][T26313] ? trace_irq_disable+0x3b/0x150 [ 735.983124][T26313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.983146][T26313] ? clear_bhb_loop+0x40/0x90 [ 735.983172][T26313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.983193][T26313] RIP: 0033:0x7fda2ed9c819 [ 735.983221][T26313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.983240][T26313] RSP: 002b:00007fda2fbfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.983263][T26313] RAX: ffffffffffffffda RBX: 00007fda2f015fa0 RCX: 00007fda2ed9c819 [ 735.983279][T26313] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000006 [ 735.983293][T26313] RBP: 00007fda2fbfc090 R08: 0000000000000000 R09: 0000000000000000 [ 735.983307][T26313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.983319][T26313] R13: 00007fda2f016038 R14: 00007fda2f015fa0 R15: 00007ffeaf2b07e8 [ 735.983354][T26313] [ 735.983744][T26313] xfrm0: entered promiscuous mode [ 736.253662][T25138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 736.278671][T25138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 736.288639][T25138] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 736.304066][T25138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 736.312957][T25138] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 736.330242][T26313] xfrm0: entered allmulticast mode [ 736.516253][T26319] lo speed is unknown, defaulting to 1000 [ 737.047237][T26346] syzkaller1: entered promiscuous mode [ 737.067621][T26349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6166'. [ 737.109335][T26346] syzkaller1: entered allmulticast mode [ 737.212866][T26358] netlink: 320 bytes leftover after parsing attributes in process `syz.3.6167'. [ 737.267817][ T1099] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.398997][T26362] xt_CONNSECMARK: invalid mode: 3 [ 737.514666][ T1099] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.663417][ T1099] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.786338][T26383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.836439][ T1099] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.982609][T26319] chnl_net:caif_netlink_parms(): no params data found [ 738.159260][T26400] IPVS: Unknown mcast interface: vcan0 [ 738.179640][T26400] netlink: 'syz.0.6178': attribute type 30 has an invalid length. [ 738.298251][T26408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6179'. [ 738.352530][ T5846] Bluetooth: hci2: command tx timeout [ 738.389897][T26408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6179'. [ 738.444402][T26408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6179'. [ 738.662606][T26415] tipc: Enabling of bearer rejected, failed to enable media [ 738.733212][T26319] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.760868][T26319] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.768804][T26319] bridge_slave_0: entered allmulticast mode [ 738.789407][T26319] bridge_slave_0: entered promiscuous mode [ 738.819613][T26319] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.845015][T26319] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.860234][T26319] bridge_slave_1: entered allmulticast mode [ 738.891161][T26319] bridge_slave_1: entered promiscuous mode [ 739.051706][T26319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.092503][ T1099] bridge_slave_1: left allmulticast mode [ 739.121061][ T1099] bridge_slave_1: left promiscuous mode [ 739.149607][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.193273][ T1099] bridge_slave_0: left allmulticast mode [ 739.200012][ T1099] bridge_slave_0: left promiscuous mode [ 739.234235][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.576357][T26460] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6191'. [ 740.289002][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.299263][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.309599][ T1099] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 740.321300][ T1099] bond0 (unregistering): Released all slaves [ 740.336670][T26319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.365542][T26440] syz_tun: entered promiscuous mode [ 740.370964][T26440] syz_tun: entered allmulticast mode [ 740.432388][ T5846] Bluetooth: hci2: command tx timeout [ 740.469836][ T1099] tipc: Left network mode [ 740.500730][T26319] team0: Port device team_slave_0 added [ 740.539230][T26319] team0: Port device team_slave_1 added [ 740.665397][T26319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.702749][T26319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.762216][T26319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.867853][T26319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.875036][T26319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.965750][T26319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.065484][T26495] syzkaller0: entered promiscuous mode [ 741.081565][T26495] syzkaller0: entered allmulticast mode [ 741.146292][T26499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6201'. [ 741.171603][T26499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6201'. [ 741.199093][T26504] xt_bpf: check failed: parse error [ 741.397616][T26514] netlink: 5264 bytes leftover after parsing attributes in process `syz.4.6204'. [ 741.456645][T26319] hsr_slave_0: entered promiscuous mode [ 741.476534][T26319] hsr_slave_1: entered promiscuous mode [ 741.506055][T26517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6206'. [ 741.516318][T26319] debugfs: 'hsr0' already exists in 'hsr' [ 741.527557][T26319] Cannot create hsr debugfs directory [ 741.821716][ T1099] hsr_slave_0: left promiscuous mode [ 741.837837][ T1099] hsr_slave_1: left promiscuous mode [ 741.851491][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.883085][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.018395][ T1099] pim6reg (unregistering): left allmulticast mode [ 742.346406][ T1099] team_slave_1 (unregistering): left promiscuous mode [ 742.356264][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 742.512347][ T5846] Bluetooth: hci2: command tx timeout [ 743.028684][T26568] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3162 [ 743.066831][T26576] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6218'. [ 743.226602][T26575] tun0: tun_chr_ioctl cmd 1074812118 [ 743.356793][T26578] tun0: tun_chr_ioctl cmd 1074033169 [ 743.466984][ T1099] IPVS: stop unused estimator thread 0... [ 743.770341][T26601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6225'. [ 743.787502][T26605] pim6reg1: entered promiscuous mode [ 743.798320][T26605] pim6reg1: entered allmulticast mode [ 743.834729][T26606] netlink: 'syz.0.6226': attribute type 4 has an invalid length. [ 743.844437][T26606] netlink: 'syz.0.6226': attribute type 2 has an invalid length. [ 744.035395][T26610] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6229'. [ 744.131241][T26615] netlink: 'syz.3.6230': attribute type 83 has an invalid length. [ 744.142687][T26615] xt_hashlimit: size too large, truncated to 1048576 [ 744.178460][T26319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 744.208193][T26319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 744.261507][T26319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 744.297107][T26624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6231'. [ 744.301312][T26319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 744.600583][ T5846] Bluetooth: hci2: command tx timeout [ 744.716882][T26319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.803595][T26319] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.865298][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.872559][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.927730][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.935187][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.197933][T26658] vxlan0: entered promiscuous mode [ 745.232283][T26658] vxlan0: entered allmulticast mode [ 745.251140][ T6145] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.270226][ T6145] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.331158][ T6145] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.364323][ T6145] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.738804][T26319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.751080][T26680] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6243'. [ 745.894056][T26319] veth0_vlan: entered promiscuous mode [ 745.938853][T26319] veth1_vlan: entered promiscuous mode [ 746.018611][T26319] veth0_macvtap: entered promiscuous mode [ 746.038761][T26319] veth1_macvtap: entered promiscuous mode [ 746.104667][T26319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.152823][T26695] netlink: 'syz.2.6249': attribute type 3 has an invalid length. [ 746.167403][T26319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.230740][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.269328][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.313460][T26700] block nbd0: server does not support multiple connections per device. [ 746.338758][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.349007][T26700] block nbd0: shutting down sockets [ 746.387717][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.567196][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.599876][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.678155][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.691227][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.848283][T26726] FAULT_INJECTION: forcing a failure. [ 746.848283][T26726] name failslab, interval 1, probability 0, space 0, times 0 [ 746.895107][T26726] CPU: 1 UID: 0 PID: 26726 Comm: syz.1.6157 Not tainted syzkaller #0 PREEMPT(full) [ 746.895139][T26726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 746.895152][T26726] Call Trace: [ 746.895161][T26726] [ 746.895170][T26726] dump_stack_lvl+0xe8/0x150 [ 746.895203][T26726] should_fail_ex+0x412/0x560 [ 746.895238][T26726] should_failslab+0xa8/0x100 [ 746.895265][T26726] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 746.895289][T26726] ? trace_kmalloc+0x2a/0x110 [ 746.895309][T26726] ? page_pool_create_percpu+0x76/0xb80 [ 746.895342][T26726] page_pool_create_percpu+0x76/0xb80 [ 746.895370][T26726] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 746.895410][T26726] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 746.895434][T26726] ? arch_stack_walk+0xfb/0x150 [ 746.895478][T26726] ? __pfx_stack_trace_save+0x10/0x10 [ 746.895502][T26726] ? stack_depot_save_flags+0x33/0x810 [ 746.895539][T26726] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 746.895559][T26726] ? bpf_test_init+0x9f/0x150 [ 746.895577][T26726] ? bpf_prog_test_run_xdp+0x529/0x1160 [ 746.895597][T26726] ? bpf_prog_test_run+0x2c7/0x340 [ 746.895617][T26726] ? __sys_bpf+0x643/0x950 [ 746.895633][T26726] ? __x64_sys_bpf+0x7c/0x90 [ 746.895710][T26726] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 746.895745][T26726] ? _copy_from_user+0x94/0xb0 [ 746.895767][T26726] ? bpf_test_init+0x113/0x150 [ 746.895786][T26726] ? xdp_convert_md_to_buff+0x5b/0x330 [ 746.895811][T26726] bpf_prog_test_run_xdp+0x81c/0x1160 [ 746.895852][T26726] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 746.895880][T26726] ? __fget_files+0x2a/0x420 [ 746.895917][T26726] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 746.895942][T26726] bpf_prog_test_run+0x2c7/0x340 [ 746.895968][T26726] __sys_bpf+0x643/0x950 [ 746.895990][T26726] ? __pfx___sys_bpf+0x10/0x10 [ 746.896028][T26726] ? ksys_write+0x242/0x270 [ 746.896055][T26726] ? __pfx_ksys_write+0x10/0x10 [ 746.896086][T26726] __x64_sys_bpf+0x7c/0x90 [ 746.896116][T26726] do_syscall_64+0x14d/0xf80 [ 746.896145][T26726] ? trace_irq_disable+0x3b/0x150 [ 746.896162][T26726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.896184][T26726] ? clear_bhb_loop+0x40/0x90 [ 746.896210][T26726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.896231][T26726] RIP: 0033:0x7f8b5ff9c819 [ 746.896252][T26726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.896271][T26726] RSP: 002b:00007f8b60e97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 746.896294][T26726] RAX: ffffffffffffffda RBX: 00007f8b60215fa0 RCX: 00007f8b5ff9c819 [ 746.896310][T26726] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 746.896324][T26726] RBP: 00007f8b60e97090 R08: 0000000000000000 R09: 0000000000000000 [ 746.896337][T26726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.896349][T26726] R13: 00007f8b60216038 R14: 00007f8b60215fa0 R15: 00007fffbfad4118 [ 746.896392][T26726] [ 747.450922][T26722] lo speed is unknown, defaulting to 1000 [ 747.504358][T26739] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6256'. [ 747.564683][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.574397][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 747.782570][T26751] netlink: 'syz.4.6259': attribute type 11 has an invalid length. [ 748.494682][T24647] IPVS: starting estimator thread 0... [ 748.583964][T26784] IPVS: using max 25 ests per chain, 60000 per kthread [ 748.979058][T26796] netlink: 'syz.2.6268': attribute type 8 has an invalid length. [ 749.011794][T26796] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.6268'. [ 749.036893][T26796] netlink: 'syz.2.6268': attribute type 1 has an invalid length. [ 749.136827][T26796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 749.282123][T26806] [ 749.284639][T26806] ====================================================== [ 749.291790][T26806] WARNING: possible circular locking dependency detected [ 749.299024][T26806] syzkaller #0 Not tainted [ 749.303560][T26806] ------------------------------------------------------ [ 749.310645][T26806] syz.3.6272/26806 is trying to acquire lock: [ 749.316714][T26806] ffffffff8fd45298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 749.326230][T26806] [ 749.326230][T26806] but task is already holding lock: [ 749.333600][T26806] ffff888040cd7870 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 749.343007][T26806] [ 749.343007][T26806] which lock already depends on the new lock. [ 749.343007][T26806] [ 749.353409][T26806] [ 749.353409][T26806] the existing dependency chain (in reverse order) is: [ 749.362520][T26806] [ 749.362520][T26806] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 749.370611][T26806] _raw_spin_lock_bh+0x36/0x50 [ 749.375908][T26806] nr_rt_device_down+0x153/0x860 [ 749.381502][T26806] nr_device_event+0x137/0x150 [ 749.387064][T26806] notifier_call_chain+0x1be/0x400 [ 749.392812][T26806] __dev_notify_flags+0x16d/0x310 [ 749.398458][T26806] netif_change_flags+0xe8/0x1a0 [ 749.404016][T26806] dev_change_flags+0x130/0x260 [ 749.409469][T26806] dev_ioctl+0x7b4/0x1150 [ 749.414345][T26806] sock_do_ioctl+0x23e/0x320 [ 749.419482][T26806] sock_ioctl+0x5c6/0x7f0 [ 749.424426][T26806] __se_sys_ioctl+0xfc/0x170 [ 749.429545][T26806] do_syscall_64+0x14d/0xf80 [ 749.434667][T26806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.441086][T26806] [ 749.441086][T26806] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 749.448914][T26806] _raw_spin_lock_bh+0x36/0x50 [ 749.454209][T26806] nr_rt_device_down+0xbe/0x860 [ 749.459600][T26806] nr_device_event+0x137/0x150 [ 749.464894][T26806] notifier_call_chain+0x1be/0x400 [ 749.470541][T26806] __dev_notify_flags+0x16d/0x310 [ 749.476276][T26806] netif_change_flags+0xe8/0x1a0 [ 749.481756][T26806] dev_change_flags+0x130/0x260 [ 749.487224][T26806] dev_ioctl+0x7b4/0x1150 [ 749.492260][T26806] sock_do_ioctl+0x23e/0x320 [ 749.497472][T26806] sock_ioctl+0x5c6/0x7f0 [ 749.502345][T26806] __se_sys_ioctl+0xfc/0x170 [ 749.507466][T26806] do_syscall_64+0x14d/0xf80 [ 749.512594][T26806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.519884][T26806] [ 749.519884][T26806] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 749.527809][T26806] __lock_acquire+0x15a5/0x2cf0 [ 749.533196][T26806] lock_acquire+0xf0/0x2e0 [ 749.538175][T26806] _raw_spin_lock_bh+0x36/0x50 [ 749.543561][T26806] nr_remove_neigh+0x25/0xe0 [ 749.548697][T26806] nr_add_node+0x1e41/0x2630 [ 749.553900][T26806] nr_rt_ioctl+0xe59/0xf90 [ 749.558843][T26806] sock_do_ioctl+0x101/0x320 [ 749.563968][T26806] sock_ioctl+0x5c6/0x7f0 [ 749.568830][T26806] __se_sys_ioctl+0xfc/0x170 [ 749.573945][T26806] do_syscall_64+0x14d/0xf80 [ 749.579066][T26806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.585500][T26806] [ 749.585500][T26806] other info that might help us debug this: [ 749.585500][T26806] [ 749.595731][T26806] Chain exists of: [ 749.595731][T26806] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 749.595731][T26806] [ 749.609818][T26806] Possible unsafe locking scenario: [ 749.609818][T26806] [ 749.617283][T26806] CPU0 CPU1 [ 749.623116][T26806] ---- ---- [ 749.628496][T26806] lock(&nr_node->node_lock); [ 749.633266][T26806] lock(nr_node_list_lock); [ 749.640401][T26806] lock(&nr_node->node_lock); [ 749.647706][T26806] lock(nr_neigh_list_lock); [ 749.652490][T26806] [ 749.652490][T26806] *** DEADLOCK *** [ 749.652490][T26806] [ 749.660719][T26806] 1 lock held by syz.3.6272/26806: [ 749.665847][T26806] #0: ffff888040cd7870 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 749.675782][T26806] [ 749.675782][T26806] stack backtrace: [ 749.681677][T26806] CPU: 1 UID: 0 PID: 26806 Comm: syz.3.6272 Not tainted syzkaller #0 PREEMPT(full) [ 749.681697][T26806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 749.681708][T26806] Call Trace: [ 749.681716][T26806] [ 749.681724][T26806] dump_stack_lvl+0xe8/0x150 [ 749.681749][T26806] print_circular_bug+0x2e1/0x300 [ 749.681777][T26806] check_noncircular+0x12e/0x150 [ 749.681803][T26806] __lock_acquire+0x15a5/0x2cf0 [ 749.681835][T26806] lock_acquire+0xf0/0x2e0 [ 749.681857][T26806] ? nr_remove_neigh+0x25/0xe0 [ 749.681877][T26806] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 749.681894][T26806] ? nr_remove_neigh+0x25/0xe0 [ 749.681911][T26806] _raw_spin_lock_bh+0x36/0x50 [ 749.681931][T26806] ? nr_remove_neigh+0x25/0xe0 [ 749.681949][T26806] nr_remove_neigh+0x25/0xe0 [ 749.681967][T26806] nr_add_node+0x1e41/0x2630 [ 749.681987][T26806] ? dev_get_by_name+0x21/0x200 [ 749.682008][T26806] ? dev_get_by_name+0x21/0x200 [ 749.682029][T26806] ? nr_call_to_digi+0x136/0x1b0 [ 749.682046][T26806] nr_rt_ioctl+0xe59/0xf90 [ 749.682066][T26806] ? kasan_quarantine_put+0xbb/0x1f0 [ 749.682083][T26806] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 749.682104][T26806] ? apparmor_capable+0x126/0x170 [ 749.682124][T26806] ? capable+0x88/0xe0 [ 749.682145][T26806] ? nr_ioctl+0x1b1/0x3b0 [ 749.682160][T26806] sock_do_ioctl+0x101/0x320 [ 749.682184][T26806] ? __pfx_sock_do_ioctl+0x10/0x10 [ 749.682207][T26806] ? do_futex+0x333/0x420 [ 749.682232][T26806] sock_ioctl+0x5c6/0x7f0 [ 749.682255][T26806] ? __pfx_sock_ioctl+0x10/0x10 [ 749.682278][T26806] ? __fget_files+0x2a/0x420 [ 749.682300][T26806] ? __fget_files+0x3a0/0x420 [ 749.682322][T26806] ? __fget_files+0x2a/0x420 [ 749.682346][T26806] ? bpf_lsm_file_ioctl+0x9/0x20 [ 749.682366][T26806] ? __pfx_sock_ioctl+0x10/0x10 [ 749.682388][T26806] __se_sys_ioctl+0xfc/0x170 [ 749.682407][T26806] do_syscall_64+0x14d/0xf80 [ 749.682429][T26806] ? trace_irq_disable+0x3b/0x150 [ 749.682442][T26806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.682458][T26806] ? clear_bhb_loop+0x40/0x90 [ 749.682475][T26806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.682491][T26806] RIP: 0033:0x7fa57759c819 [ 749.682506][T26806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.682520][T26806] RSP: 002b:00007fa5783e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 749.682538][T26806] RAX: ffffffffffffffda RBX: 00007fa577815fa0 RCX: 00007fa57759c819 [ 749.682550][T26806] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000004 [ 749.682561][T26806] RBP: 00007fa577632c91 R08: 0000000000000000 R09: 0000000000000000 [ 749.682572][T26806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.682589][T26806] R13: 00007fa577816038 R14: 00007fa577815fa0 R15: 00007ffd765ee278 [ 749.682607][T26806] [ 750.032054][T26807] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6271'. [ 753.231879][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 753.239941][ C0] lec:lec_tx_timeout: lec0 [ 756.344471][ T6665] lec:lec_start_xmit: lec0:No lecd attached